CVE-2020-9972

CVE-2020-9972 describes a buffer overflow in processing a malicious USD file that affects Apple devices. Root cause: memory handling issue; impact: may terminate the affected app or allow arbitrary code execution. Fix: Apple addressed in iOS 14.0 and iPadOS 14.0. Additional context from connected...

CVE-2020-9972

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution...

CVE-2020-9954

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in watchOS 7.0, tvOS 14.0, macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave, iOS 14.0 and iPadOS 14.0. Playing a malicious audio file may lead to arbitrary code...

PT-2020-5233 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory in the implementation of the Windows SMB network protocol in Windows operating systems. This can allow a remote attacker to obta...

PT-2020-5236 · Microsoft · Windows Error Reporting +1

Name of the Vulnerable Software and Affected Versions: Windows Error Reporting affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Error Reporting service of Windows operating systems. This can allow an attacker to obtain...

PT-2020-5084 · Microsoft · Exchange Server

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange affected versions not specified Description: The issue is related to errors in object handling in memory on the Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code. Recommendations: At the momen...

Microsoft Windows - Win32k Elevation of Privilege Exploit

Exploit Title: Microsoft Windows - Win32k Elevation of Privilege Author: nu11secur1ty Vendor: Microsoft Software Link: https://support.microsoft.com/en-us/help/3095649/win32k-sys-update-in-windows-october-2015 Exploit link:...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the win32k component in the Windows operating system is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Camera Codec Pack software on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Camera Codec Pack software suite on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Text Services Framework software interface in Windows operating systems, which allows a perpetrator to gain unauthorized access to protected information

The vulnerability of the Text Services Framework software interface in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Vulnerability of Microsoft Graphics Components for Windows operating systems, allowing attackers to execute arbitrary code

The vulnerability of Microsoft Graphics Components in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Windows operating system kernels is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

CVE-2020-29374

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/hugememory.c. The getuserpages aka gup implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations and therefore can grant unintended write access, aka...

MGASA-2020-0441 Updated webkit2 packages fix security vulnerabilities

The webkit2 package has been updated to version 2.30.3, fixing several security issues and other bugs. A type confusion issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory handling CVE-2020-9948. An use after free issue may lead to arbitra...

Updated webkit2 packages fix security vulnerabilities

The webkit2 package has been updated to version 2.30.3, fixing several security issues and other bugs. A type confusion issue may lead to arbitrary code execution with a maliciously crafted web content, fixed with improved memory handling CVE-2020-9948. An use after free issue may lead to arbitra...

USN-4382-2 freerdp vulnerabilities

It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code...

CVE-2020-9948

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...

The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

CVE-2020-9948

A type confusion issue was addressed with improved memory handling. This issue is fixed in Safari 14.0. Processing maliciously crafted web content may lead to arbitrary code execution...