CVE-2020-9883

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8, iTunes 12.10.8 for Windows, iCloud for Windows 11.3, iCloud for Windows 7.20. Processing a maliciously crafted image may lead t...

The vulnerability of Windows CDP user components in the Windows operating system, related to errors in memory object handling, allows attackers to exploit their privileges.

The vulnerability of Windows CDP user components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

CVE-2020-1549

An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

PT-2020-3757 · Microsoft · Windows Cdp User Components +1

Name of the Vulnerable Software and Affected Versions: Windows CDP User Components affected versions not specified Description: The issue is related to improper memory handling by the Windows CDP User Components, which can lead to an elevation of privilege. To exploit this, an attacker must first...

April 14, 2020—KB4550917 (Monthly Rollup)

None None...

March 10, 2020—KB4541505 (Security-only update)

None None...

March 10, 2020—KB4540705 (OS Build 15063.2313)

None None...

Task Scheduler S4U Logon Elevation of Privilege

The windows task scheduler allows a split token administrator to register a task which runs as a batch job from a limited privilege context. This doesn’t require a user’s password to accomplish as the task will be run non-interactively and so doesn’t need access to the password in order to access...

February 11, 2020—KB4532691 (OS Build 17763.1039)

None None...

DEBIAN-CVE-2019-8535

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution...

UBUNTU-CVE-2019-8815

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0, iCloud for Windows 7.15. Processing maliciously crafted web content may lead to arbitrary...

September 10, 2019—KB4516033 (Security-only update)

None None...

webkitgtk: Multiple memory corruption issues leading to arbitrary code execution

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution...

September 10, 2019—KB4516026 (Monthly Rollup)

None None...

August 13, 2019—KB4512518 (Monthly Rollup)

None None...

August 13, 2019—KB4512482 (Security-only update)

None None...

June 11, 2019—KB4503292 (Monthly Rollup)

None None...

May 14, 2019—KB4499158 (Security-only update)

None None...

May 14, 2019—KB4499149 (Monthly Rollup)

None None...

May 14, 2019—KB4499180 (Security-only update)

None None...