CVE-2020-1159 Windows Elevation of Privilege Vulnerability

...

CVE-2020-1152 Windows Win32k Elevation of Privilege Vulnerability

...

The vulnerability of the WalletService service on Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the WalletService service for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2020-54906)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows, which arises from the...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2020-54905)

Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. An elevation of privilege vulnerability exists in Microsoft Windows, which stems from a failure of a Shell infrastructure component to properly handle objects in memory, and can...

Microsoft Windows Elevation of Privilege Vulnerability (CNVD-2020-54907)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows, which arises from the...

CVE-2020-7320

Protection Mechanism Failure vulnerability in McAfee Endpoint Security ENS for Windows prior to 10.7.0 September 2020 Update allows local administrator to temporarily reduce the detection capability allowing otherwise detected malware to run via stopping certain Microsoft services...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a perpetrator to escalate their privileges.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

PT-2020-3895 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An information disclosure issue exists due to improper handling of objects in memory by StartTileData.dll. This could allow an attacker to obtain information that could further compromise t...

PT-2020-3912 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A local elevation of privilege issue exists in how splwow64.exe handles certain calls, allowing an attacker to elevate privileges on an affected system from low-integrity to medium-integrit...

McAfee True Key Memory Sensitive Information Plaintext Storage Vulnerability

McAfee True Key is an authentication application from the American company McAfee. The program supports features such as facial information recognition and fingerprint recognition.Microsoft Windows is a set of operating systems for use on personal devices from Microsoft Corporation, USA. A securi...

PT-2020-4078 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the way fdSSDP.dll handles objects in memory. This could allow an attacker to execute code with elevated permissions by...

PT-2020-3986 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A remote code execution issue exists due to improper handling of objects in memory by Windows. To exploit this, an attacker must convince a user to run a specially crafted application...

PT-2020-4042 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in handling objects in memory by the DirectX component of the Windows operating system. This could allow an attacker to elevate their privileges using a...

Cisco Jabber Bug Could Let Hackers Target Windows Systems Remotely

Networking equipment maker Cisco has released a new version of its Jabber video conferencing and messaging app for Windows that includes patches for multiple vulnerabilities—which, if exploited, could allow an authenticated, remote attacker to execute arbitrary code. The flaws, which were uncover...

The vulnerability of the Winsock driver in the Windows operating system, related to errors in object handling in memory, allows attackers to exploit their privileges.

The vulnerability of the Winsock driver in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

The vulnerability of Windows CDP user components in the Windows operating system allows attackers to escalate their privileges.

The vulnerability of Windows CDP user components in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges by running a specially created application...

The vulnerability of the SSDP protocol implementation in the Windows operating system allows attackers to increase their privileges.

The vulnerability of the SSDP protocol implementation in the Windows operating system exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability of the Microsoft Graphics component in the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Graphics component in the Windows operating system is related to errors in object handling in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...

The vulnerability of the Jet Database Engine database management system in the Windows operating system, related to errors in object processing in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Jet Database Engine database management system in the Windows operating system is related to errors in object processing in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...