Lucene search
K

767 matches found

CNVD
CNVD
added 2020/04/16 12:0 a.m.3 views

Microsoft Excel Remote Code Execution Vulnerability (CNVD-2020-23435)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A remote code execution vulnerability exists in Microsoft Excel Office 365 ProPlus that stems from the program's inability to properly handle objects in memory. An attacker could exploit the vulnerability...

9.3CVSS8.4AI score0.11261EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.3 views

Microsoft Word Remote Code Execution Vulnerability (CNVD-2020-24069)

Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A remote code execution vulnerability exists in Microsoft Word, which arises from the program's failure to properly handle memory objects, and can be exploited by an attacker with the help of...

9.3CVSS7.9AI score0.11548EPSS
Exploits0References1
CNVD
CNVD
added 2020/04/16 12:0 a.m.4 views

Microsoft Windows Jet Database Engine Remote Code Execution Vulnerability (CNVD-2020-30662)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...

9.3CVSS8.4AI score0.11685EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.1 views

CVE-2020-0985

An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0996...

7.8CVSS5.8AI score0.0089EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.1 views

CVE-2020-0995

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

7.8CVSS7.7AI score0.17297EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.4 views

CVE-2020-0999

A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0889, CVE-2020-0953, CVE-2020-0959, CVE-2020-0960, CVE-2020-0988, CVE-2020-099...

7.8CVSS6.4AI score0.11685EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.2 views

CVE-2020-1001

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1006, CVE-2020-1017...

7.8CVSS7.1AI score0.00856EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.2 views

CVE-2020-0982

An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0987, CVE-2020-1005...

5.5CVSS6.4AI score0.01277EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.1 views

CVE-2020-0967

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0966...

8.8CVSS7.9AI score0.11395EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.1 views

CVE-2020-0966

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0967...

8.8CVSS7.9AI score0.11395EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.1 views

CVE-2020-0964

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'...

8.8CVSS7.9AI score0.16701EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.0 views

CVE-2020-0937

An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-0939, CVE-2020-0945, CVE-2020-0946, CVE-2020-0947...

5.5CVSS6.4AI score0.06488EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.1 views

CVE-2020-0917

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0918...

6.8CVSS6.8AI score0.01567EPSS
Exploits0References1
OSV
OSV
added 2020/04/15 3:15 p.m.1 views

CVE-2020-0906

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0979...

8.8CVSS7.9AI score0.11261EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.3 views

The vulnerability of the Windows Error Reporting registration service allows attackers to exploit their privileges.

The vulnerability of the Windows Error Reporting registration service is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00786EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.5 views

The vulnerability of the Windows Network Connections service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Network Connections service in operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS7.2AI score0.00977EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/20 12:0 a.m.7 views

The vulnerability of the DirectX component of the Windows operating system, which allows attackers to exploit their privileges

The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges through a specially created application...

10CVSS7.5AI score0.06803EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.5 views

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS7.2AI score0.00756EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.6 views

The vulnerability of the win32k component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the win32k component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

7CVSS7.2AI score0.02244EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/03/18 12:0 a.m.6 views

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

7.8CVSS6.5AI score0.01013EPSS
Exploits0References3
Rows per page
Query Builder