The vulnerability of the Windows operating system’s kernel allows a hacker to elevate their privileges and execute arbitrary code in kernel mode.

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode using a specially created application...

PT-2019-3036 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows kernel-mode driver. This can be exploited by an attacker to elevate their privileges and execute arbitrary code i...

PT-2019-3250 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows kernel. This could allow an attacker to elevate their privileges and execute arbitrary code in kernel mode using ...

The vulnerability of the Unistore.dll library in the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the Unistore.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of the daemon/gvfsbackendadmin.c component of the GVFS subsystem in GNOME desktop environments on Linux operating systems allows a attacker to compromise the integrity, confidentiality, and accessibility of the protected information.

The vulnerability of the daemon/gvfsbackendadmin.c component in the GVFS subsystem of GNOME desktop environments on Linux operating systems is related to permission handling errors. Exploiting this vulnerability allows an attacker to compromise the integrity, confidentiality, and accessibility of...

PT-2019-2675

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows GDI component of Windows operating systems. This can allow an attacker to gain unauthorized access to...

PT-2019-2674

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows GDI component of Windows operating systems. This can allow an attacker to gain unauthorized access to...

PT-2019-2673

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows GDI component of Windows operating systems. This can allow an attacker to gain unauthorized access to...

PT-2019-2700

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory in the DirectWrite API of Windows operating systems. This can allow an attacker to execute arbitrary code. Remote attackers may...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page...

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphical device interfaces on Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...

PT-2019-2497

Name of the Vulnerable Software and Affected Versions Internet Explorer versions affected versions not specified Microsoft Windows affected versions not specified Description The issue is related to errors in handling objects in memory, which can be exploited by a remote attacker using a speciall...

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the Open Enclave SDK, a software development tool, is related to an error in object processing in memory, which allows a hacker to disclose sensitive information that is protected by this security measure.

The vulnerability of the Open Enclave SDK software development tools is related to an object handling error in memory. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...

The vulnerability of the Windows GDI interface on Windows operating systems allows attackers to disclose protected information.

The vulnerability of Windows GDI graphics device interfaces on Windows operating systems is related to errors in handling memory contents. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the Terminal Services component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Terminal Services component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Microsoft Office Access Connectivity Engine Input Validation Error Vulnerability (CNVD-2019-27309)

Microsoft Office is a U.S. Microsoft Microsoft company's office software suite of products. Common components of the product include Word, Excel, Access, Powerpoint, FrontPage, etc. Office Access Connectivity Engine is one of the database connection engine. A remote code execution vulnerability...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2019-10043)

Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability stems from a failure of the Win32k component to properly handle objects in memory. An...

PT-2019-1841

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an error in handling objects in memory by the OLE automation component. This can be exploited by a remote attacker to execute arbitrary code. Recommendations At the...