Jet Database Engine Memory Error Code Execution

The vulnerability of the Jet Database Engine database management system in the Windows operating system is related to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

Microsoft Office Memory Object Handling Code Execution

The vulnerability of the Microsoft Office package is related to errors in memory object handling. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows Codecs Library Memory Object Handling Code Execution

The vulnerability of the Microsoft Windows Codecs Library, used for processing media content on Windows operating systems, is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created image file...

Microsoft Word Memory Disclosure

The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the software...

Microsoft Graphics Component Code Execution

The vulnerability of the Microsoft Graphics component in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2020-1583

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...

CVE-2020-1581

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the syste...

CVE-2020-1555

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

CVE-2020-1498

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

CVE-2020-1566: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

CVE-2020-1417: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

CVE-2020-1581: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the syste...

State Repository Service RCE

The vulnerability of the State Repository Service component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...

Windows Kernel Privilege Escalation

The vulnerability of the kernel of Microsoft Windows is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

Microsoft Word Remote Code Execution Vulnerability (CNVD-2021-11034)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects, and can be exploited by an attacker with a specially...

PT-2020-3841 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service versions affected versions not specified Description: The issue is related to errors in handling memory objects, which can be exploited by an attacker to elevate their privileges using a specially crafted application. T...

PT-2020-3822 · Microsoft · Connected User Experiences/Telemetry Service +1

Name of the Vulnerable Software and Affected Versions: Connected User Experiences and Telemetry Service affected versions not specified Description: The issue is related to improper handling of file operations by the Connected User Experiences and Telemetry Service, which could allow an attacker ...