Lucene search
K

241 matches found

BDU FSTEC
BDU FSTEC
added 2020/05/07 12:0 a.m.4 views

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft Office Access Connectivity Engine component of the Microsoft Office software suite is related to object handling errors in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created file...

9.3CVSS7.7AI score0.11548EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/04/23 12:0 a.m.4 views

The vulnerability of Microsoft Graphics Components in the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Graphics Components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.11685EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.3 views

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application or a specially created script...

7.8CVSS7.1AI score0.00901EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.4 views

The vulnerability of the Universal Plug and Play (UPnP) service in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Universal Plug and Play UPnP service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application or a specially created script...

7.8CVSS7.1AI score0.00901EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/25 12:0 a.m.4 views

The vulnerability of the Windows Background Intelligent Transfer Service, a file transfer service between the client and the HTTP server, allows a hacker to escalate their privileges.

The vulnerability of the Windows Background Intelligent Transfer Service, which is responsible for intelligent file transfer between clients and Windows HTTP servers, is related to errors in processing links that point to file and directory paths. Exploiting this vulnerability can allow an attack...

7.8CVSS7.7AI score0.42524EPSS
Exploits7References4
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.4 views

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.6CVSS6.9AI score0.08642EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.3 views

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer allows a hacker to execute arbitrary code.

The vulnerability of the ChakraCore JavaScript script handler in Microsoft Edge and Internet Explorer is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

7.6CVSS7.6AI score0.08524EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.5 views

The vulnerability of Windows operating system’s folder permissions allows attackers to increase their privileges.

The vulnerability of Windows operating system’s folder service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00931EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/12 12:0 a.m.4 views

The vulnerability of the Windows Telephony Service in Windows operating systems stems from errors in memory object handling, which allows an attacker to exploit the system to disclose protected information through a specially created application.

The vulnerability of the Windows Telephony Service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.4AI score0.01454EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.2 views

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.2AI score0.01614EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.3 views

The vulnerability of the Windows GDI component of the Windows operating system, which allows a hacker to compromise sensitive information

The vulnerability of the Windows GDI component of the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted application...

5.5CVSS6AI score0.01855EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.6 views

The vulnerability of the CDPSvc service of the Windows operating system, which allows a hacker to escalate their privileges

The vulnerability of the CDPSvc service for connected user devices in the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00849EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/10 12:0 a.m.3 views

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.2AI score0.01614EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/04 12:0 a.m.3 views

The vulnerability of the SynTP.sys driver for Synaptics Touchpads allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SynTP.sys driver for Synaptics Touchpads is related to errors in handling API requests. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

3.8CVSS5.4AI score0.00696EPSS
Exploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.4 views

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.2AI score0.01614EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.4 views

The vulnerability of the Windows Function Discovery service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Function Discovery service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

7.8CVSS7.2AI score0.00849EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/02/27 12:0 a.m.6 views

The vulnerability of the Windows Function Discovery service in Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Function Discovery service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

7.8CVSS7.2AI score0.00914EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2020/02/24 12:0 a.m.3 views

The vulnerability of the win32k component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.1AI score0.00914EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/02/24 12:0 a.m.6 views

The vulnerability of the Windows Cryptography Next Generation (CNG) service for Windows operating systems, which allows a hacker to compromise and disclose protected information

The vulnerability of the Windows Cryptography Next Generation CNG service on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

5.5CVSS6.2AI score0.01614EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2020/02/11 12:0 a.m.5 views

PT-2020-1632 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: The issue is related to errors in handling objects in memory by the ChakraCore scripting engine. This could allow a remote attacker to execute arbitrary code in the contex...

7.6CVSS7.6AI score0.09882EPSS
Exploits0References10
Rows per page
Query Builder