Input validation

Improper permissions in the installer for the IntelR RealSenseTM D400 Series UWP driver for Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8763

CVE-2020-8763 affects the Intel RealSense D400 Series UWP driver for Windows 10. The root cause is improper permissions in the installer, which may allow an authenticated user to escalate privileges via local access. Intel’s advisory lists affected products as Windows 10 UWP driver before version...

Intel® RealSense™ D400 Series UWP Advisory

Summary: A potential security vulnerability in the Intel® RealSense™ D400 Series Universal Windows Platform UWP driver for Windows 10 may allow escalation of privilege. Intel is releasing driver updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8763...

CVE-2020-8337

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...

Design/Logic Flaw

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...

CVE-2020-8337

An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an administrative user to execute arbitrary code...

CVE-2020-8337

CVE-2020-8337 concerns an unquoted search path vulnerability in the Synaptics Smart Audio UWP app (DCHU drivers) on Lenovo platforms, affecting versions prior to 1.0.83.0. The issue is exploitable locally by an administrative user and could allow arbitrary code execution without user interaction....

CVE-2019-3744

Dell/Alienware Digital Delivery (DLL/Alienware Digital Delivery) prior to version 4.0.41 is affected by a local privilege-escalation vulnerability. A non-privileged attacker can exploit a race condition and a path-traversal in the install software package feature of a Universal Windows Platform a...

February 19, 2019—KB4487029 (OS Build 17134.619)

February 19, 2019—KB4487029 OS Build 17134.619 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Enables media content to play e-learning content with plug and play USB adapter cables on...

Microsoft Windows 10 - COM Desktop Broker Privilege Escalation Exploit

Exploit for windows platform in category local exploits Windows: COM Desktop Broker Elevation of Privilege Platform: Windows 10 1809 almost certainly earlier versions as well. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: AppContainer Sandbox Summary: The...

Microsoft Windows 10 - COM Desktop Broker Privilege Escalation

Windows: COM Desktop Broker Elevation of Privilege Platform: Windows 10 1809 almost certainly earlier versions as well. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: AppContainer Sandbox Summary: The COM Desktop Broker doesn’t correctly check permissions...

Microsoft Windows 10 - COM Desktop Broker Privilege Escalation

Microsoft Windows 10 - COM Desktop Broker Privilege Escalation Windows: COM Desktop Broker Elevation of Privilege Platform: Windows 10 1809 almost certainly earlier versions as well. Class: Elevation of Privilege Security Boundary per Windows Security Service Criteria: AppContainer Sandbox Summar...

Windows 10 Bug Let UWP Apps Access All Files Without Users' Consent

Microsoft silently patched a bug in its Windows 10 operating system with the October 2018 update version 1809 that allowed Microsoft Store apps with extensive file system permission to access all files on users' computers without their consent. With Windows 10, Microsoft introduced a common...

November 2, 2017—KB4049370 (OS Build 15063.675)

November 2, 2017—KB4049370 OS Build 15063.675 Improvements and fixes This release is intended for Microsoft Surface Laptop audiences only. This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where...

November 14, 2017—KB4048953 (OS Build 14393.1884)

November 14, 2017—KB4048953 OS Build 14393.1884 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where applications based on the Microsoft JET Database Engine Microsoft Acce...

November 14, 2017—KB4048954 (OS Build 15063.726 and 15063.728)

November 14, 2017—KB4048954 OS Build 15063.726 and 15063.728 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where applications based on the Microsoft JET Database Engine...