PT-2021-4094

Name of the Vulnerable Software and Affected Versions JerryScript version 2.4.0 Description The issue is related to insufficient checking of unusual or exceptional states in the main print unhandled exception function of the main-utils.c file. This can be exploited by a remote attacker to cause a...

Windows Zero-Day Still Circulating After Faulty Fix

A high-severity Windows zero-day that could lead to complete desktop takeover remains dangerous after a “fix” from Microsoft failed to adequately patch it. The local privilege-escalation bug in Windows 8.1 and Windows 10 CVE-2020-0986 exists in the Print Spooler API. It could allow a local attack...

Google Discloses Poorly-Patched, Now Unpatched, Windows 0-Day Bug

Google's Project Zero team has made public details of an improperly patched zero-day security vulnerability in Windows print spooler API that could be leveraged by a bad actor to execute arbitrary code. Details of the unpatched flaw were revealed publicly after Microsoft failed to rectify it with...

Google Discloses Poorly-Patched, Now Unpatched, Windows 0-Day Bug

Google's Project Zero team has made public details of an improperly patched zero-day security vulnerability in Windows print spooler API that could be leveraged by a bad actor to execute arbitrary code. Details of the unpatched flaw were revealed publicly after Microsoft failed to rectify it with...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

CVE-2020-8283

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

CVE-2020-8283

An authorized user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution with SYSTEM privileges. This vulnerability exists in Citrix Virtual Apps and Desktops (CVAD) versions prior to 2009 , 1912 LTSR CU1 (before hotfixes CTX285870 and CTX286120), 7.15 LT...

CVE-2020-8283: Improper Privilege Management

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

Citrix Virtual Apps and Desktops Licensing Issues Vulnerability

Citrix Systems Citrix Virtual Apps and Desktops is a virtualization software from Citrix Systems that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Virtual Apps and Desktops that originates from an authenticated user executi...

HPSBPI03708 rev. 1 - HP Print and Scan Doctor - Local Elevation of Privilege

Potential Security Impact Local Elevation of Privilege VULNERABILITY SUMMARY HP Print and Scan Doctor may potentially be vulnerable to local elevation of privilege. RESOLUTION HP has provided updated software, listed in the table below. To obtain the updated software: 1. Go to HP Print and Scan...

UBUNTU-CVE-2020-29657

In JerryScript 2.3.0, there is an out-of-bounds read in mainprintunhandledexception in the main-utils.c file...

PT-2020-17237

Name of the Vulnerable Software and Affected Versions JerryScript version 2.3.0 Description The issue is related to an out-of-bounds read in the main print unhandled exception function located in the main-utils.c file. Recommendations For JerryScript version 2.3.0, at the moment, there is no...

The vulnerability of the Print Configuration configuration implementation in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Print Configuration configuration on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Client Side Rendering Print Provider component allows attackers to exploit their privileges.

The vulnerability of the Windows Client Side Rendering Print Provider component is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Print Spooler component of the Windows operating system, which allows a hacker to execute arbitrary code

The vulnerability of the Windows Print Spooler component of the Windows operating system is related to improper handling of code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows operating system’s print queue dispatcher service allows a hacker to escalate their privileges.

The vulnerability of the Windows operating system’s print queue dispatcher is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the print queue dispatcher in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the print driver in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

Citrix Virtual Apps and Desktops Security Update

Description of Problem Vulnerabilities havebeen identified in CitrixVirtual Apps and Desktopsthat could, if exploited,result in: An authenticateduserof amulti-sessionWindowsVDA, who has been granted permission to write to c:\ root directory, being able toescalatetheir privilege levelon that...