.NET Framework Information Disclosure Vulnerability

An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an affected system's memory. To exploit the vulnerability, an authenticated attacker would need to run a...

Microsoft Graphics Components Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafte...

Windows Hyper-V Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow...

PT-2020-4339 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to improper handling of file operations by the Windows Backup Service, which can lead to an elevation of privilege. This occurs due to errors in handling...

PT-2020-4378 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: An information disclosure issue...

PT-2020-4247

Name of the Vulnerable Software and Affected Versions: Windows kernel affected versions not specified Description: The issue is related to how the Windows kernel image handles objects in memory. An attacker could exploit this to execute code with elevated permissions by running a specially crafte...

PT-2020-4311 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Backup Service of Microsoft Windows operating systems. This can allow an attacker to elevate their...

PT-2020-4373 · Microsoft · Windows Jet Database Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Jet Database Engine affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows Jet Database Engine, which can allow an attacker to execute arbitrary code on a victim...

PT-2020-4279 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in memory object handling in the Base3D component of the Windows operating system. Exploitation of this issue could allow an attacker to execute arbitrary cod...

PT-2020-4320 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...

PT-2020-4321 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...

PT-2020-4245 · Microsoft · Windows Event System +1

Name of the Vulnerable Software and Affected Versions: Windows Event System affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows Event System, which can lead to an elevation of privilege. To exploit this, an attacker must...

PT-2020-4391 · Microsoft · 3D Viewer

Name of the Vulnerable Software and Affected Versions: 3D Viewer affected versions not specified Description: A remote code execution issue exists due to improper memory handling by the Base3D rendering engine. An attacker who successfully exploits this issue could gain execution on a victim...

PT-2020-4379 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An information disclosure issue exists due to Microsoft SharePoint Server's improper handling of objects in memory. This could allow an attacker to obtain information th...

Security Updates for Microsoft Office Products (October 2020)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the...

Security Updates for Outlook (October 2020)

The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attack...

PT-2020-4332 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: A remote code execution issue exists in Microsoft Office software due to improper handling of objects in memory. An attacker who successfully exploits this issue could run arbitrar...

PT-2020-4325 · Microsoft · Windows Camera Codec Pack +1

Name of the Vulnerable Software and Affected Versions: Windows Camera Codec Pack affected versions not specified Description: The issue is related to errors in handling objects in memory within the Windows Camera Codec Pack. Exploitation of this issue could allow an attacker to execute arbitrary...

PT-2020-4270 · Microsoft · Windows Graphics Device Interface +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Device Interface GDI affected versions not specified Description: A remote code execution issue exists in the way the Windows Graphics Device Interface GDI handles objects in memory. This could allow an attacker to take contr...

PT-2020-4326 · Microsoft · Graphics Components +1

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Components affected versions not specified Description: A remote code execution issue exists in the way Microsoft Graphics Components handle objects in memory. An attacker who successfully exploits this issue could execute...