PT-2020-13618

Name of the Vulnerable Software and Affected Versions Mitel MiVoice 6800 and 6900 series SIP Phones versions prior to 5.1.0.SP5 Description The issue is related to improper memory handling during failed login attempts in the Web UI component, which could allow an unauthenticated attacker to expos...

CVE-2020-13617: Improper Restriction of Excessive Authentication Attempts

The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory handling during failed login attempts...

CVE-2020-1538: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

CVE-2020-1513: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security...

CVE-2020-1542: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The securi...

CVE-2020-1484: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

CVE-2020-1579: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Function Discovery SSDP Provider improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

CVE-2020-1515: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Telephony Server improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

CVE-2020-1489: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security...

CVE-2020-1524: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Speech Shell Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. T...

CVE-2020-1519: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

PT-2020-3832 · Microsoft · Windows Radio Management Api +1

Name of the Vulnerable Software and Affected Versions: Windows Radio Management API affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Radio Management API, which is caused by improper memory handling. This can allow an...

PT-2020-3805 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Backup Engine improperly handles memory. To exploit this, an attacker must first...

PT-2020-3840 · Microsoft · Windows Upnp Device Host +1

Name of the Vulnerable Software and Affected Versions: Windows UPnP Device Host affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows UPnP Device Host service, which is caused by improper memory handling. This can be exploited ...

PT-2020-22875

Уязвимость менеджера окон fly-wm связана с неправильным освобождением памяти после переноса иконки в новое место. Эксплуатация уязвимости может позволить нарушителю получить доступ к конфиденциальным данным...

PT-2020-3096

Name of the Vulnerable Software and Affected Versions Windows Print Workflow Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that occurs when the Windows Print Workflow Service improperly handles objects in memory. This...

PT-2020-3193

Name of the Vulnerable Software and Affected Versions Windows ActiveX Installer Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that exists due to the improper handling of memory by the Windows ActiveX Installer Service. To explo...

PT-2020-3166

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The issue exists due to improper handling of memory objects by the Windows Event Logging Service, allowing an attacker to potentially elevate their privileges using a...

PT-2020-3174

Name of the Vulnerable Software and Affected Versions Windows Cryptography Next Generation CNG Key Isolation service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that exists due to improper memory handling by the Windows Cryptography...

PT-2020-3165

Name of the Vulnerable Software and Affected Versions Windows Picker Platform affected versions not specified Description The issue arises from the Windows Picker Platform's improper handling of memory, leading to an elevation of privilege. To exploit this, an attacker must first gain execution o...