Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-08825)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security vulnerability exists in Microsoft Excel's handling of memory objects, which allows remote attackers to exploit the vulnerability by submitting a special file request that can be tricked into...

CVE-2020-16938

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on ...

Remote code execution

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow...

CVE-2020-16968: Improper Input Validation

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Event System Privilege Escalation

The vulnerability of the Windows operating system’s event system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

KernelStream Component Information Disclosure

The vulnerability of the KernelStream component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Microsoft .NET Framework Multiple Vulnerabilities (KB4579979)

This host is missing a critical security update according to Microsoft KB4579979 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

PT-2020-4310 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An elevation of privilege issue exists due to the Windows kernel-mode driver's failure to properly handle objects in memory. This could allow an attacker to run arbitrary code in kernel mod...

PT-2020-4386 · Microsoft · Office Access Connectivity Engine

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access Connectivity Engine affected versions not specified Description: A remote code execution issue exists due to the improper handling of objects in memory by the Microsoft Office Access Connectivity Engine. This could all...

Windows GDI Code Execution

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Excel Memory Object Handling Code Execution

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Memory Object Handling Code Execution

The vulnerability of Microsoft Excel spreadsheet editors, as well as Microsoft Office and Office 365 products, is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Store Runtime Privilege Escalation

The vulnerability of the Microsoft Store Runtime operating system components in Microsoft Windows is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Microsoft Office Memory Object Processing Unauthorized Access

The vulnerabilities of Microsoft Office packages, Microsoft Office Online Server, and Microsoft SharePoint Server are related to errors in memory object handling. Exploiting these vulnerabilities can allow an attacker to gain unauthorized access to protected information...

DirectX Windows Privilege Exploitation

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Microsoft Visual Studio Memory Corruption Exploit

The vulnerability of the Microsoft Visual Studio software development tool is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Online Server Memory Object Handling Code Execution

The vulnerabilities of Microsoft Office Online Server, Microsoft Excel, Microsoft Office, and Microsoft SharePoint Server are related to errors in memory object handling. Exploiting these vulnerabilities can allow a remote attacker to execute arbitrary code...

Microsoft Exchange Server Memory Object Execution Code

The vulnerability of Microsoft Exchange Server is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Camera Codec Pack Windows Code Execution

The vulnerability of the Camera Codec Pack component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...