770 matches found
The vulnerability of Microsoft Word’s text editor lies in memory object processing errors, which allow attackers to execute arbitrary code.
The vulnerability of Microsoft Word relates to errors in memory object handling. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with user privileges using a specially crafted file...
The vulnerability of the DirectX component of the Windows operating system, which allows a hacker to compromise protected information
The vulnerability of the DirectX component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
The vulnerability of the DirectX component in the Windows operating system allows attackers to elevate their privileges and execute arbitrary code in kernel mode.
The vulnerability of the DirectX component in the Windows operating system exists due to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code in kernel mode through a specially created application...
CVE-2018-16851
Samba from version 4.0.0 and before versions 4.7.12, 4.8.7, 4.9.3 is vulnerable to a denial of service. During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this siz...
NULL pointer de-reference in Samba AD DC LDAP server
Description During the processing of an LDAP search before Samba's AD DC returns the LDAP entries to the client, the entries are cached in a single memory object with a maximum size of 256MB. When this size is reached, the Samba process providing the LDAP service will follow the NULL pointer,...
Microsoft Windows DirectX elevation of privilege vulnerability (CNVD-2019-14446)
Microsoft Windows Server is an operating system released by Microsoft Corporation.DirectX Graphics Kernel DXGKRNL is one of the graphics kernel drivers. An elevation of privilege vulnerability exists in the way Microsoft Windows DirectX handles memory objects, which could be exploited by an...
CVE-2018-8577
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...
CVE-2018-8544
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Windows operating system’s kernel arises from errors in the processing of objects in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
The vulnerability of the Windows operating system’s kernel, which allows a hacker to disclose protected information
The vulnerability of the Windows operating system’s kernel arises from errors in the processing of objects in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
The vulnerability of the DirectX Graphics Kernel driver on Windows operating systems allows attackers to execute processes with elevated privileges.
The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to execute processes with elevated privileges...
The vulnerability of the Microsoft Graphics component on Windows operating systems arises from errors in memory object processing, allowing an attacker to disclose protected information.
The vulnerability of the Microsoft Graphics component in Windows operating systems arises due to errors in the processing of objects in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created application...
The vulnerability of Microsoft Excel editors, caused by errors in memory object processing, allows attackers to gain access to protected information.
The vulnerability of Microsoft Excel editors stems from errors in memory object handling. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...
CVE-2018-8497
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...
CVE-2018-8472
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows 7, Windows Server...
CVE-2018-16297
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Reader before 9.3 and PhantomPDF before 9.3, a different vulnerability than CVE-2018-16291, CVE-2018-16292, CVE-2018-16293, CVE-2018-16294, CVE-2018-16295, and CVE-2018-16296. A specially crafted PDF document can...
The vulnerability of the implementation of Intel Active Management Technology for microprogramming software, Intel Converged Security and Manageability Engine, and Intel Management Engine, which allows a perpetrator to trigger a service failure.
The vulnerability of the Intel Active Management Technology AMT implementation of the Intel Converged Security and Manageability Engine CSME and Intel Management Engine ME arises due to errors in processing memory objects. Exploiting this vulnerability can allow a malicious actor to cause service...
Design/Logic Flaw
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the...
CVE-2018-3943
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1.0.5096. A specially crafted PDF document can trigger a previously freed object in memory to be reused, resulting in arbitrary code execution. An attacker needs to trick the user...
The vulnerability of the Windows operating system’s kernel driver, caused by errors in memory object handling, allows a hacker to gain access to system memory contents.
The vulnerability of the kernel driver driver bowser.sys is caused by errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain access to system memory contents...