CVE-2020-9767

CVE-2020-9767 affects Zoom for Windows, involving a DLL-loading vulnerability in the Zoom Sharing Service that could allow a locally authenticated attacker with elevated privileges to run arbitrary code via a malicious DLL. Zoom addressed this in Zoom client 5.0.4 (Windows). As per sources, the i...

CVE-2020-9767: Uncontrolled Search Path Element

A vulnerability related to Dynamic-link Library “DLL” loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed...

PT-2020-20744

Name of the Vulnerable Software and Affected Versions Zoom versions prior to 5.0.4 Description A issue related to Dynamic-link Library “DLL” loading in the Zoom Sharing Service allows an attacker with local access and elevated privileges to elevate system privileges using a malicious DLL. This...

Adobe Lightroom Classic Insecure Library Loading Vulnerability

Adobe Lightroom is an image organization and image processing software. An insecure library loading vulnerability exists in Adobe Lightroom Classic 9.2.0.10 and earlier versions, which can be exploited by attackers to achieve elevation of privilege...

PAN-OS Management Server Privilege Escalation

The vulnerability of the PAN-OS operating system management server exists because measures to neutralize special elements used in the operating system command are not taken. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary operating system commands...

Google Chrome Policy Data Compromise

The vulnerability of Google Chrome’s browser loading policy is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a malicious actor to influence data integrity through a specially created HTML page...

Google Chrome Policy Data Compromise

The vulnerability of Google Chrome browsers is related to the lack of a mechanism for standard permissions. Exploiting this vulnerability allows an attacker to affect data integrity through a specially created HTML page...

CVE-2020-15657

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...

CVE-2020-15657

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. Note: This issue only affected Windows operating systems. Other operating systems are unaffected.. This...

Insecure Dependency Loading

Python CPython is vulnerable to insecure dependency loading.It may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected...

Mozilla: Potential leak of redirect targets when loading scripts in a worker

The Mozilla Foundation Security Advisory describes this flaw as: By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script...

Unspecified Vulnerability in WebKit Page Loading Component of Multiple Apple Products

Apple Safari is a web browser that is the default browser that comes with Mac OS X and iOS. apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. webKit Page Loading is one of the page loading components. A security vulnerability exists in the...

Python DLL Loading Local Privilege Escalation

The version of Python installed on the remote Windows host is 3.6.x prior to 3.6.12, 3.7.x prior to 3.7.9, 3.8.x prior to 3.8.4, or 3.9.x prior to 3.9.0b5. It is, therefore, affected by an elevation of privilege vulnerability. A Trojan horse python3.dll might be used in cases where CPython is...

Mozilla: Potential leak of redirect targets when loading scripts in a worker

The Mozilla Foundation Security Advisory describes this flaw as: By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script...

Mozilla Firefox Code Problem Vulnerability (CNVD-2020-46337)

Mozilla Firefox and others are products of the Mozilla Foundation in the U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of e-mail client software separate from the Mozilla Application...

Mozilla: Potential leak of redirect targets when loading scripts in a worker

The Mozilla Foundation Security Advisory describes this flaw as: By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script...

kernel: lockdown: bypass through ACPI write via efivar_ssdt

A flaw was found in how the ACPI table loading through the EFI variable and the related efivarssdt boot option was handled when the Linux kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerabilit...

kernel: lockdown: bypass through ACPI write via acpi_configfs

A flaw was found in how the ACPI table loading through acpiconfigfs was handled when the kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerability is to data confidentiality and integrity as wel...

kernel: lockdown: bypass through ACPI write via efivar_ssdt

A flaw was found in how the ACPI table loading through the EFI variable and the related efivarssdt boot option was handled when the Linux kernel was locked down. This flaw allows a root privileged local user to circumvent the kernel lockdown restrictions. The highest threat from this vulnerabilit...

Different versions of your site can be running at the same time

It's pretty easy for a user to be running an old version of your site. Not only that, but a user could be running many different versions of your site at the same time, in different tabs, and that's kinda terrifying. For instance: 1. A user opens your site. 2. You deploy an update. 3. The user...