CVE-2020-16997 – Remote Desktop Protocol Server Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2020-16997

11 Nov 2020 — Remote Desktop Protocol Server Information Disclosure Vulnerability Vulnerabilidad de Divulgación de Información de Remote Desktop Protocol Server • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16997 •

CVE-2020-17001 – Windows Print Spooler Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-17001

11 Nov 2020 — Windows Print Spooler Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios de Windows Print Spooler Este ID de CVE es diferente de CVE-2020-17014 Microsoft Windows suffers from a local spooler bypass vulnerability. • https://packetstorm.news/files/id/160028 •

CVE-2020-17014 – Windows Print Spooler Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-17014

11 Nov 2020 — Windows Print Spooler Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios de Windows Print Spooler Este ID de CVE es diferente de CVE-2020-17001 This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler service. By creating a di... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17014 •

CVE-2020-17087 – Microsoft Windows Kernel Privilege Escalation Vulnerability

https://notcve.org/view.php?id=CVE-2020-17087

30 Oct 2020 — Windows Kernel Local Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios local del kernel de Windows Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. • https://packetstorm.news/files/id/159777 • CWE-131: Incorrect Calculation of Buffer Size •

CVE-2020-16975 – Windows Backup Service Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-16975

16 Oct 2020 —

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.

To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.

The security update addresses the vulnerability by correcting how the Windows Backup Service handles file operations.

Se presenta una vulnerabilidad de escalada de privilegios cuando el Windows ... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16975 •

CVE-2020-16976 – Windows Backup Service Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-16976

16 Oct 2020 —

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.

To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.

The security update addresses the vulnerability by correcting how the Windows Backup Service handles file operations.

Se presenta una vulnerabilidad de escalada de privilegios cuando el Windows ... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16976 •

CVE-2020-16974 – Windows Backup Service Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-16974

16 Oct 2020 —

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.

To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.

The security update addresses the vulnerability by correcting how the Windows Backup Service handles file operations.

Se presenta una vulnerabilidad de escalada de privilegios cuando el Windows ... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16974 •

CVE-2020-16972 – Windows Backup Service Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-16972

16 Oct 2020 —

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.

To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges.

The security update addresses the vulnerability by correcting how the Windows Backup Service handles file operations.

Se presenta una vulnerabilidad de escalada de privilegios cuando el Windows ... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16972 •

CVE-2020-16949 – Microsoft Outlook Denial of Service Vulnerability

https://notcve.org/view.php?id=CVE-2020-16949

16 Oct 2020 —

A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.

Exploitation of the vulnerability requires that a specially crafted email be sent to a vulnerable Outlook server.

The security update addresses the vulnerability by correcting how Microsoft Outlook handles objects in memory.

Se presenta una vul... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16949 • CWE-401: Missing Release of Memory after Effective Lifetime •

CVE-2020-16939 – Group Policy Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-16939

16 Oct 2020 —

An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially crafted application to take control over the affected system.

The security update addresses the vulnerability by correcting how Group Policy checks access.

Se presenta una vulnerabilidad de... • https://github.com/rogue-kdc/CVE-2020-16939 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •