1740 matches found
CVE-2020-29595
PlugIns\IDEACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDEACDStd!JPEGTransW+0x00000000000031aa...
CVE-2020-29595
PlugIns\IDEACDStd.apl in ACDSee Photo Studio Studio Professional 2021 14.0 Build 1705 has a User Mode Write AV starting at IDEACDStd!JPEGTransW+0x00000000000031aa...
CVE-2020-29595
CVE-2020-29595 affects ACDSee Photo Studio Studio Professional 2021 (v14.0 Build 1705). A vulnerability in the PlugIns\IDE_ACDStd.apl component (JPEGTransW function) allows a User Mode Write AV starting at IDE_ACDStd!JPEGTransW+0x…; CVSS metrics in the initial data indicate high/critical impact (...
Acd Systems Photo Studio Studio Professional Security Vulnerability
Acd Systems Photo Studio Studio Professional is a suite of digital photo management tools from Acd Systems. The software provides the ability to control the color of photos, print, output and save photos, photo rights, optimize photos and more. A security vulnerability exists in ACDSee Photo Stud...
Microsoft Windows/Windows Server Information Disclosure Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. An information disclosure vulnerability exists in the Microsoft...
CVE-2020-9361
CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation...
CVE-2020-9361
CryptoPro CSP through 5.0.0.10004 on 64-bit platforms allows local users with the SeChangeNotifyPrivilege right to cause denial of service because user-mode input is mishandled during process creation...
Design/Logic Flaw
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, which may lead to denial of service or code execution...
CVE-2020-5981
CVE-2020-5981 affects the NVIDIA Windows GPU Display Driver, specifically the DirectX11 user-mode driver component nvwgf2um/x.dll. A specially crafted shader could trigger an out-of-bounds access, potentially causing denial of service or code execution. The issue is addressed by NVIDIA through se...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...
Vulnerability Spotlight: Privilege escalation in Windows 10 CLFS driver
Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered a privilege escalation vulnerability in the Windows 10 Common Log File System. CLFS is a general-purpose logging service that can be used by software clients running in user-mo...
Windows Graphics Component Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...
Microsoft Windows 10 CLFS.sys ValidateRegionBlocks privilege escalation vulnerability
Summary A privilege escalation vulnerability exists in the CLFS.sys ValidateRegionBlocks functionality of Microsoft Windows 10 CLFS.SYS 10.0.19041.264 WinBuild.160101.0800 and Insider Preview CLFS.SYS 10.0.20150.1000 WinBuild.160101.0800. A specially crafted malformed log file can cause a heap...
Sinter - A User-Mode Application Authorization System For MacOS Written In Swift
Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinter...
Microsoft Windows fontdrvhost Font Parsing Use-After-Free Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of T...
Windows GDI Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
CVE-2020-8607
An input validation vulnerability found in multiple Trend Micro products utilizing a particular version of a specific rootkit protection driver could allow an attacker in user-mode with administrator permissions to abuse the driver to modify a kernel address that may cause a system crash or...
CVE-2020-5965
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...
Design/Logic Flaw
NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the DirectX 11 user mode driver nvwgf2um/x.dll, in which a specially crafted shader can cause an out of bounds access, leading to denial of service...