CVE-2020-1142 Windows GDI Elevation of Privilege Vulnerability

...

CVE-2020-1140

CVE-2020-1140 (DirectX Elevation of Privilege) is a Windows DirectX vulnerability where memory objects are improperly handled, enabling an attacker with local access to escalate privileges and potentially execute arbitrary code in kernel mode. The root cause, as described in MS and NVD records, i...

CVE-2020-1117 Microsoft Color Management Remote Code Execution Vulnerability

...

CVE-2020-1109 Windows Update Stack Elevation of Privilege Vulnerability

...

CVE-2020-1093 VBScript Remote Code Execution Vulnerability

...

CVE-2020-1076 Windows Denial of Service Vulnerability

...

CVE-2020-1075 Windows Subsystem for Linux Information Disclosure Vulnerability

...

CVE-2020-1067 Windows Remote Code Execution Vulnerability

...

CVE-2020-1061 Microsoft Script Runtime Remote Code Execution Vulnerability

...

CVE-2020-1061

CVE-2020-1061 is a remote code execution vulnerability described as affecting the Microsoft Script Runtime, stemming from how it handles objects in memory. The available connected docs reiterate this in the CVE description and identify the component as the Microsoft Script Runtime, with no explic...

CVE-2020-1060 VBScript Remote Code Execution Vulnerability

...

CVE-2020-1058

CVE-2020-1058 is a VBScript Engine Remote Code Execution vulnerability. Connected CNVD-2021-24007 ties this to Microsoft Internet Explorer, stating that the VBScript engine in IE versions 9 and 11 can be exploited via memory object handling to execute arbitrary code. The CVE entry references IE/V...

CVE-2020-1058 VBScript Remote Code Execution Vulnerability

...

CVE-2020-1054 Win32k Elevation of Privilege Vulnerability

...

CVE-2020-1054 Win32k Elevation of Privilege Vulnerability

...

CVE-2020-13113

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...

USN-4372-1: QEMU vulnerabilities

It was discovered that QEMU incorrectly handled bochs-display devices. A local attacker in a guest could use this to cause a denial of service or possibly execute arbitrary code in the host. This issue only affected Ubuntu 19.10. CVE-2019-15034 It was discovered that QEMU incorrectly handled memo...

USN-4371-1 libvirt vulnerabilities

It was discovered that libvirt incorrectly handled an active pool without a target path. A remote attacker could possibly use this issue to cause libvirt to crash, resulting in a denial of service. CVE-2020-10703 It was discovered that libvirt incorrectly handled memory when retrieving certain...

CVE-2020-13113

The CVE-2020-13113 issue affects libexif up to version 0.6.22. The root cause is use of uninitialized memory in EXIF Makernote handling, which could cause crashes and potential use-after-free conditions. The connected advisories confirm this as a vulnerability in libexif with impacts including cr...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...