CVE-2020-23899

WildBit Viewer v6.6 is affected by a buffer-related vulnerability in Editor+0x5f91 that allows a crafted TGA file to cause a denial of service. The issue is documented across multiple sources (CNVD/CNNVD/Red Hat entry) as a buffer overflow/AV leading to DoS. Affected component: Editor+0x5f91 in W...

CVE-2020-23898

CVE-2020-23898 affects WildBit Viewer v6.6, where a vulnerability in the Editor component at offset 0x5ea2 allows a user-mode write access that can cause a denial of service when processing specially crafted TGA files. The CNVD entry also describes a buffer overflow in Editor 0x5ea2, aligning wit...

CVE-2020-23898

A User Mode Write AV in Editor+0x5ea2 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

CVE-2020-23897

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x54dcec of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tga file...

CVE-2020-23896

CVE-2020-23896 affects WildBit Viewer 6.6, where a vulnerability in Editor+0x576b enables a crafted TIFF file to trigger a User-Mode Write AV, resulting in a DoS. The issue is described across multiple sources as a vulnerability in the Editor component leading to denial of service via crafted TIF...

CVE-2020-23895

CVE-2020-23895 affects WildBit Viewer 6.6, with a buffer overflow in Editor+0x76af that can be triggered by a specially crafted TIFF file to cause a denial of service. The vulnerability is documented across multiple feeds (NVD/Red Hat/CNVD/CVE lists, etc.), confirming the same root cause and impa...

CVE-2020-23894

WildBit Viewer v6.6 is affected by CVE-2020-23894 due to a User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268, enabling denial of service via a specially crafted TIFF file. The Red Hat advisory and CNVD/CNNVD entries corroborate the same root cause and impact (DoS). Public details in the pr...

CVE-2020-23894

A User Mode Write AV in ntdll!RtlpCoalesceFreeBlocks+0x268 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23893

A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23893

CVE-2020-23893 affects WildBit Viewer v6.6. A User Mode Write AV in Editor!TMethodImplementationIntercept+0x3c3682 allows a crafted TIFF file to cause a denial of service. The payload is a local impact (due to local access vector) with availability impact reported as High in some references; conc...

CVE-2020-23891

Summary: CVE-2020-23891 affects WildBit Viewer 6.6, with a vulnerability in the Editor+0x5cd7 path that allows a user-mode write condition to trigger a denial of service when handling specially crafted TIFF files. The issue is described in multiple sources (e.g., CNVD, Red Hat, NVD). The exact ro...

CVE-2020-23891

A User Mode Write AV in Editor+0x5cd7 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted tiff file...

CVE-2020-23889

A User Mode Write AV starting at Editor!TMethodImplementationIntercept+0x4189c6 of WildBit Viewer v6.6 allows attackers to cause a denial of service DoS via a crafted ico file...

CVE-2020-23889

WildBit Viewer vulnerability CVE-2020-23889 affects version 6.6. A Type: user-mode write access violation arises from Editor!TMethodImplementationIntercept+0x4189c6 when processing a crafted ICO file, leading to a denial of service. The report(s) in multiple feeds (NVD, Red Hat, CNVD, CNVD-derive...

CVE-2020-23888

WildBit Viewer v6.6 is affected by CVE-2020-23888 due to a User Mode Write AV in Editor!TMethodImplementationIntercept+0x53f6c3, which can be triggered by a specially crafted PSD file to cause a denial of service. Multiple connected sources corroborate the issue and frame it as a buffer-related v...

Microsoft Windows Kernel Information Disclosure Vulnerability

Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process...

Exploit for Use After Free in Microsoft

CallbackHell Exploit for CVE-2021-40449 Win32k - LPE - Ca...

CVE-2021-38154

Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...

PT-2021-21971

Name of the Vulnerable Software and Affected Versions: Canon devices manufactured in 2012 through 2020, such as imageRUNNER ADVANCE iR-ADV C5250 Description: The issue allows remote attackers to modify an e-mail address setting when Catwalk Server is enabled for HTTP access, causing the device to...

ASB-A-183188047

In fastrpcinternalinvoke of drivers/misc/fastrpc.c, there is a possible way for user-mode processes to send fastrpc kernel requests due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...