51 matches found
The vulnerability of the win32k component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the win32k component in the Windows operating system is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
The vulnerability in the implementation of the NetBIOS protocol on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NetBIOS protocol implementation in Windows operating systems is related to errors in object memory handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Avast Antivirus Password Management Vulnerability
Avast Antivirus is a suite of antivirus software from the Czech company Avast. version 20.1.5069.562 of Avast Antivirus contains a password management vulnerability that could be exploited by an attacker to continue storing entered passwords in the Windows main memory...
CVE-2020-15024
An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a logout, and after a Lock Vault operation...
CVE-2020-1430
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique...
The vulnerability of VBScript script handlers in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of VBScript script handlers in Windows operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted web page or document...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially crafted document or web page...
The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges
The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...
PT-2019-15818 · Teamviewer · Teamviewer
Name of the Vulnerable Software and Affected Versions: TeamViewer desktop application version 14.3.4730 Description: An issue in the Chat functionality of the TeamViewer desktop application on Windows allows every communication to be saved within Windows main memory upon login. When a user logs o...
The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information through a specially crafted document or web page...
The vulnerability of the PsmServiceExtHost.dll library in the Windows operating system allows a hacker to elevate their privileges and execute arbitrary code.
The vulnerability of the PsmServiceExtHost.dll library in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code through a specially created application...
CVE-2019-0716
A denial of service vulnerability exists when Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to log on to an affected system and run a...
OPENSUSE-SU-2019:1664-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to 60.7.2 / MFSA 2019-20 boo1138872: CVE-2019-11707: Type confusion in Array.pop CVE-2019-11708: sandbox escape using Prompt:Open Mozilla Thunderbird was updated to 60.7.1 / MFSA 2019-17 boo1137595:...
The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Win32k component of the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
CVE-2019-0685
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-0803, CVE-2019-0859. Recent assessments: Assessed Attacker Value: 0 Assessed...
The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.
The vulnerability of the Windows Jet Database Engine component of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...
The vulnerability of the software interfaces of DirectX applications for the Windows operating system arises from errors in the memory object handling mechanisms. This vulnerability allows attackers to access confidential information.
The vulnerability of the software interfaces of DirectX applications for the Windows operating system is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to access confidential information through a specially crafted application...
The vulnerability of the Windows operating system, related to errors in memory object handling, allows an intruder to disclose protected information.
The vulnerability of the DirectX driver for the Windows operating system is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...
CVE-2018-8136
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows...
CVE-2018-8116
A denial of service vulnerability exists in the way that Windows handles objects in memory, aka "Microsoft Graphics Component Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 201...