The vulnerability of the Windows Graphics component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows Graphics component of the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of Microsoft Word text editors, related to authentication deficiencies, allows attackers to disclose protected information.

The vulnerability of Microsoft Word relates to authentication deficiencies. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the client system in the VMware Horizon Client for Windows virtualization solution allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the client system of VMware Horizon Client for Windows in virtualized workstations is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the message authentication subsystem of the RPMB protocol in Intel Trusted Execution Engine (TXE) software allows a perpetrator to enhance their privileges.

The vulnerability of the message authentication subsystem of the RPMB protocol in Intel Trusted Execution Engine TXE microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the `shaderGenerateMain` function in the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the shaderGenerateMain function in the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the `shaderGenerateMain` function in the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the shaderGenerateMain function in the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology and Standard Manageability, allowing a perpetrator to gain unauthorized access to protected information

The vulnerability in the microprogramming system implementation of Intel Active Management Technology and Standard Manageability relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2020-13799

Western Digital has identified a security vulnerability in the Replay Protected Memory Block RPMB protocol as specified in multiple standards for storage device interfaces, including all versions of eMMC, UFS, and NVMe. The RPMB protocol is specified by industry standards bodies and is implemente...

The vulnerability of the Windows MSCTF Server component of the Windows operating system allows attackers to disclose protected information.

The vulnerability of the Windows MSCTF Server component exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Intel Unite conference call software relates to the execution of operations beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of the Intel Unite conference communication software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of Intel SSD microprogramming software, related to insufficient flow management, allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel SSD microprogramming software is related to insufficient control of the flow of data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

PT-2020-13685

Name of the Vulnerable Software and Affected Versions Western Digital iNAND devices through 2020-06-03 Description A security issue has been identified in the Replay Protected Memory Block RPMB protocol, which is used by storage devices to secure trusted firmware. This issue can be exploited in...

The vulnerability of the win32k component of the Windows operating system, which allows a hacker to disclose protected information

The vulnerability of the win32k component in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the WebP image extension lies in the lack of protection for service data, which allows attackers to gain unauthorized access to protected information.

The vulnerability of the WebP image extension relates to the lack of protection for service data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to an incorrect path name limitation for accessing the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Inventory component in the Magento Commerce software platform for developing and managing online stores is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of Eclipse Jetty servlet containers, related to duplicate resource operations, allows attackers to gain unauthorized access to protected information, execute arbitrary code, or cause service failures.

The vulnerability of Eclipse Jetty servlet containers is related to the duplication of resource operations. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or cause service failures...