CVE-2020-1308: Undefined Security Weakness

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

CVE-2020-1245: Undefined Security Weakness

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...

Windows Backup Service Privilege Escalation

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Backup Service Privilege Escalation

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Backup Service Privilege Escalation

The vulnerability of the Windows Backup Service in Microsoft Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Microsoft SharePoint Server 2019 < 16.0.10364.20001 Multiple Vulnerabilities

According to its self-reported version number, the Microsoft SharePoint application running on the remote host is affected by multiple vulnerabilities : - A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected...

Microsoft Office Excel Memory Disclosure

The vulnerabilities of Microsoft Office and Microsoft Excel are related to errors in memory object handling. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that is protected by security measures...

Microsoft Word Memory Disclosure

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose protected information...

Windows LSASS Privilege Escalation

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Windows Speech Shell Privilege Escalation

The vulnerability of the Windows Speech Shell component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows Function Discovery Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

Microsoft Windows Codecs Library Memory Object Handling Code Execution

The vulnerability of the Microsoft Windows Codecs Library, used for processing media content, in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

Winsock Driver Privilege Exploitation

The vulnerability of the Winsock driver in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

Windows Backup Engine Privilege Escalation

The vulnerability of the Windows Backup Engine backup system in operating systems involves errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Edge Memory Object Handling Code Execution

The vulnerability of Microsoft Edge exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Access Database Code Execution

The vulnerability of the relational database management system used by Microsoft Access programs within the Microsoft Office and Office 365 suites exists due to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Win32k Memory Disclosure

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Internet Explorer Script Handler RCE

The vulnerability of the Internet Explorer browser’s script handler exists due to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Jet Database Engine Memory Error Code Execution

The vulnerability of the Jet Database Engine database management system in the Windows operating system is related to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

Microsoft Windows Codecs Library Memory Object Handling Code Execution

The vulnerability of the Microsoft Windows Codecs Library, used for processing media content on Windows operating systems, is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created image file...