290 matches found
Privilege escalation
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1001, CVE-2020-1006, CVE-2020-1017...
Privilege escalation
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017...
Information disclosure
An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka 'Windows Push Notification Service Information Disclosure Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1006, CVE-2020-1017...
Privilege escalation
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1006...
CVE-2020-1016
CVE-2020-1016 is described as an information disclosure vulnerability in the Windows Push Notification Service caused by improper handling of objects in memory. The connected sources identify the affected component as Windows Push Notification Service on Windows/Windows Server and frame the issue...
CVE-2020-1017
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1006...
CVE-2020-1017
CVE-2020-1017 concerns an Elevation of Privilege in Windows Push Notification Service. The vulnerability arises from how in-memory objects are handled by the Windows Push Notification Service, enabling a local attacker to escalate privileges. The CVE entry notes this issue is distinct from CVE-20...
CVE-2020-1016
An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka 'Windows Push Notification Service Information Disclosure Vulnerability'...
CVE-2020-1006
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1017...
CVE-2020-1006
CVE-2020-1006 affects the Windows Push Notification Service (WNS) in Windows. The root cause is an elevation of privilege due to how memory objects are handled by WNS, enabling a locally authenticated attacker to escalate privileges. The CVSS data indicates a LOCAL attack vector with LOW required...
CVE-2020-1001
CVE-2020-1001 affects the Windows Push Notification Service on Windows client/server platforms. The vulnerability is described as an Elevation of Privilege due to how objects are handled in memory by WNS, enabling a local attacker to gain higher privileges. CVSSv3.1 base score is 7.8 (High), with...
CVE-2020-1001
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1006, CVE-2020-1017...
CVE-2020-0940
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1001, CVE-2020-1006, CVE-2020-1017...
CVE-2020-0940
CVE-2020-0940 is a Windows Push Notification Service Elevation of Privilege vulnerability. Connected documents (CNVD-2020-25581, CNVD-2020-32584) describe an EoP arising from how memory objects are handled in Windows Push Notification Service, enabling a locally authenticated attacker to elevate ...
Windows Push Notification Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
Windows Push Notification Service Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this...
Windows Push Notification Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
Windows Push Notification Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
Smule: [com.smule.autorap.*] Cloud Messaging/Push Notification service takeover due to clear-text usage of Legacy FCM Server keys in the client app
Potential FCM issues across several apps investigated and remediated. Reference to Research: https://twitter.com/absshax/status/1295383047295008768?s=19...