1001 matches found
CVE-2020-17087
CVE-2020-17087 is a Windows Kernel Local Privilege Escalation vulnerability tied to a heap-based overflow in cng.sys. Connected exploit sources describe a local-vector attack requiring initial code execution, then abusing an IOCTL to .\\.GLOBALROOT\Device\Cng with a crafted size parameter that ca...
CVE-2020-17049
CVE-2020-17049 is a Kerberos KDC service-ticket delegation bypass in IBM Application Gateway, enabling a compromised service using Kerberos Constrained Delegation to tamper with service tickets and force KDC acceptance. The vulnerability affects IBM Application Gateway versions 19.12–24.06. IBM’s...
CVE-2019-1125
CVE-2019-1125 is a Linux kernel local information-disclosure vulnerability related to SWAPGS speculation (Spectre variant 1). The issue allows a local attacker to read kernel/privileged memory through speculative execution on most x86 processors; mitigation relies on memory barriers to limit spec...
CVE-2019-1181
CVE-2019-1181 is a remote code execution vulnerability in Windows Remote Desktop Services (RDS/Terminal Services). The Huawei advisory confirms the issue as one of four RC vulnerabilities in RDS where an unauthenticated, network-based attacker can exploit by sending specially crafted RDP requests...
CVE-2020-0645
CVE-2020-0645 corresponds to a tampering vulnerability in Microsoft IIS Server due to improper handling of malformed HTTP request headers. Affected component: IIS Server within Microsoft Windows Server/Windows. Impact (as stated in connected sources): an attacker could tamper with responses retur...
CVE-2020-1206
CVE-2020-1206 is an information disclosure vulnerability in SMBv3 (Microsoft Server Message Block 3.1.1) that affects the SMBv3 client/server handling of certain requests. The connected documents describe an information disclosure in SMBv3 and note that attackers can chain SMBleed with SMBGhost t...
CVE-2019-1365
Public documents provided do not include concrete technical details for CVE-2019-1365 (affected product, root cause, impact or fix). Monitor for updates in the connected sources; the current set lacks sufficient information to assess vulnerabilities.
CVE-2020-15707
CVE-2020-15707 is a GRUB2 bootloader vulnerability (initrd size handling) causing a heap-based buffer overflow via integer overflow in initrd processing. The flaw affects GRUB2 2.04 and earlier as deployed in multiple distros (Debian, Red Hat, Ubuntu) and can enable arbitrary code execution durin...
CVE-2020-15706
CVE-2020-15706 affects GRUB2 (2.04 and earlier) and is a race-condition/use-after-free in grub_script_function_create() triggered by redefining a function during execution, leading to arbitrary code execution and Secure Boot restriction bypass. Remediation is to upgrade to patched GRUB2 packages ...
CVE-2020-1269
Technical details for CVE-2020-1269 are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2019-1006
CVE-2019-1006 corresponds to an authentication bypass vulnerability in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF) that allows signing SAML tokens with arbitrary symmetric keys. The connected Nessus entries reiterate this issue as part of Microsoft SharePoint serv...
CVE-2019-1182
CVE-2019-1182 is a remote code execution vulnerability in Microsoft Windows Remote Desktop Services (RDS) caused by a heap overflow in the server’s dynamic channel handling when processing RDP requests. The flaw is pre-authentication and exploitable by an unauthenticated attacker who connects to ...
CVE-2020-0611
CVE-2020-0611 is a remote code execution vulnerability in the Windows Remote Desktop Client. Connected documents confirm the flaw affects the RDP client when a user connects to a malicious server, enabling arbitrary code execution on the client. The Microsoft blogs and advisories describe pre-aut...
CVE-2020-1013
An elevation of privilege vulnerability exists in Microsoft Windows during the processing of group policy updates due to access control deficiencies. An attacker can exploit this by launching a man-in-the-middle (MiTM) attack on traffic between a domain controller and the target machine to create...
CVE-2020-15705
GRUB2 ≤ 2.04 fails to validate kernel signatures when booting directly without shim, allowing Secure Boot bypass if the kernel signing certificate is in the Secure Boot DB. The issue affects GRUB2 2.04 and earlier; upgrades to patched grub2/shim combinations are advised (e.g., 2.06+ and related s...
CVE-2020-1599
CVE-2020-1599 is referenced in connected material (notably Microsoft ZLoader defense-evasion coverage) as a vulnerability used to aid attacker techniques (e.g., signing/validating files to mask malice). The documents do not provide concrete technical details on the root cause, affected products/v...
CVE-2020-1048
CVE-2020-1048 is a Windows Print Spooler elevation of privilege vulnerability. It arises from improper handling that allows arbitrary writing to the file system, enabling local privilege escalation. Public exploits/public PoCs exist (notably PrintDemon) and have been discussed alongside patch cir...
CVE-2020-1337
CVE-2020-1337 is a local privilege-escalation vulnerability in the Windows Print Spooler. It results from a bypass of the CVE-2020-1048 patch via a Junction Directory, allowing an unprivileged user to achieve elevation by abusing how the spooler writes to the file system. The risk is local (no ne...
CVE-2019-1040
CVE-2019-1040 describes a tampering vulnerability in Microsoft Windows NTLM MIC protection where a MITM attacker can alter NTLM flags in the NTLM exchange without invalidating the signature. The root cause is improper validation/tampering of MIC in NTLM AUTHENTICATE messages, enabling an attacker...
CVE-2020-17051
Technical details for CVE-2020-17051 are not provided in the supplied documents. Public details (affected product/version, exploitability, or fixes) are not included here; monitor for updates in the connected sources.
CVE-2019-1226
CVE-2019-1226 is a pre-auth remote code execution vulnerability in Windows Remote Desktop Services (RDP Server). An unauthenticated attacker can send specially crafted RDP requests to a target and execute arbitrary code, potentially installing programs, modifying data, or creating user accounts w...
CVE-2020-1307
Technical details for CVE-2020-1307 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact, and remediation if available.
CVE-2020-0624
CVE-2020-0624 is a Win32k Elevation of Privilege vulnerability in Windows where the Win32k component fails to properly handle objects in memory. The NVD entry notes an affected Windows environment with local attacker access and a high-severity CVSS 3.1 score (7.8) indicating local, low-privilege,...
CVE-2020-1275
Technical details for CVE-2020-1275 are not publicly available in the provided documents. Monitor for updates from official advisories; no confirmed affected products, impact, or remediation are stated here.
CVE-2020-1237
Technical details for CVE-2020-1237 are not publicly available in the provided documents. The connected EUVD entries do not supply product/version/impact specifics. Monitor for updates.
CVE-2020-1274
Technical details for CVE-2020-1274 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories and EUVD entries for any new information.
CVE-2019-1073
Technical details for CVE-2019-1073 are not publicly available in the provided Connected documents. Monitor for updates; no product/vendor/version/impact/fix information is present in these sources.
CVE-2020-1246
Technical details for CVE-2020-1246 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.
CVE-2019-0887
CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...
CVE-2019-1339
Technical details for CVE-2019-1339 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2020-0689
CVE-2020-0689 is a Microsoft Secure Boot security feature bypass vulnerability affecting UEFI modules loaded with Secure Boot. Microsoft advisories relate to an attacker bypassing Secure Boot to load untrusted software, with remediation provided by a Secure Boot DBX update (KB5012170) that adds t...
CVE-2020-1316
CVE-2020-1316 is a Windows kernel elevation of privilege vulnerability where the Windows kernel fails to properly handle objects in memory. This can allow a local attacker with low privileges to achieve high integrity/critical impact (confidentiality, integrity, and availability), as indicated by...
CVE-2020-1264
Technical details for CVE-2020-1264 are not publicly available in the provided documents; no affected products, impact, exploit information, or remediation are specified here. Monitor for updates.
CVE-2020-1301
CVE-2020-1301 is a SMBv1 remote code execution vulnerability that requires authentication on the target network. Publicly available guidance and advisories confirm SMBv1 handling flaws can allow code execution when a specially crafted packet is processed by an SMBv1 server. Connected advisories (...
CVE-2020-16916
CVE-2020-16916 is a Windows elevation-of-privilege flaw in the COM server object creation path. The root cause is Windows handling of COM object creation, allowing an attacker who can log on to run a specially crafted application that exploits the vulnerability to gain elevated code execution. Mi...
CVE-2020-1276
Technical details for CVE-2020-1276 are not publicly available in the provided documents. Monitoring for updates is recommended.
CVE-2019-1222
CVE-2019-1222 is a remote code execution vulnerability in Microsoft Windows Remote Desktop Services (RDS). An unauthenticated attacker can connect via RDP, send specially crafted requests, and execute arbitrary code on the target system. Exploitation is pre-authentication and requires no user int...
CVE-2019-1303
CVE-2019-1303 is a Windows AppX Deployment Server privilege-escalation vulnerability. The issue arises when the server improperly handles junctions, enabling a local attacker to gain elevated privileges after executing on the target system. Connected sources consistently refer to the same root ca...
CVE-2020-1262
Technical details for CVE-2020-1262 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2019-1278
Technical details about CVE-2019-1278 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2019-1342
Technical details for CVE-2019-1342 are not publicly provided in the supplied documents. Please monitor official advisories or CVE feeds for updates on affected products, impact, and remediation.
CVE-2020-1273
Technical details for CVE-2020-1273 are not provided in the connected documents. Monitor official advisories for updates; no validated exploit, affected products, or remediation information are included here.
CVE-2020-1266
CVE-2020-1266 is a Windows kernel elevation-of-privilege vulnerability. The description attributes the issue to improper handling of objects in memory, enabling local privilege escalation with high impact (local access, minimal authentication). The provided metrics show a high base score (CVSS v3...
CVE-2019-1340
Technical details for CVE-2019-1340 are not provided in the connected documents. Public details (affected product/version/impact) are not available here. Monitor for updates from official advisories and CVE records.
CVE-2020-1300
CVE-2020-1300 is a Windows remote code execution vulnerability that arises when Cabinet (.cab) files are not handled securely. The vulnerability can be exploited by convincing a user to open a specially crafted CAB file or by spoofing a network printer and tricking the user into installing a mali...
CVE-2019-1320
Technical details for CVE-2019-1320 are not publicly provided in the connected documents. Monitor for updates.
CVE-2020-0686
The CVE-2020-0686 entry describes an elevation-of-privilege vulnerability in Windows Installer when MSI packages process symbolic links. Affected component: Windows Installer in Windows. Root cause: improper handling of symbolic links during MSI processing leading to privilege escalation. Impact:...
CVE-2020-1299
CVE-2020-1299 is a Windows remote code execution vulnerability that occurs when a malicious or specially crafted .LNK file is processed. The available connected document explicitly states it is an RCE in LNK file processing and that exploitation would grant the attacker the same user rights as th...
CVE-2019-1089
Technical details about CVE-2019-1089 are not publicly provided in the connected documents. The initial entry notes an elevation of privilege in rpcss.dll but no vendor/product/version specifics are given here. Monitor for updates.