Page 118 of 3060 results (0.021 seconds)

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1566 •

CVSS: 9.3EPSS: 2%CPEs: 21EXPL: 0

17 Aug 2020 — A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. Se presenta una vulnerabilidad de ejecución de código remota cuan... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1564 •

CVSS: 9.3EPSS: 2%CPEs: 21EXPL: 0

17 Aug 2020 — A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory. Se presenta una vulnerabilidad de ejecución de código remota en la manera en que Micr... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1562 •

CVSS: 9.3EPSS: 3%CPEs: 21EXPL: 0

17 Aug 2020 — A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. Se presenta una vulnerabilidad de ejecución de código remota cuan... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1558 •

CVSS: 9.3EPSS: 3%CPEs: 21EXPL: 0

17 Aug 2020 — A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. Se presenta una vulnerabilidad de ejecución de código remota cuan... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1557 •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows Runtime handles objects in memory. Se presenta una vulnerabilidad de elevación de privilegios cuando Windows Run... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1553 •

CVSS: 7.8EPSS: 1%CPEs: 20EXPL: 0

17 Aug 2020 — A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage. The security update addresses the vulnerability by corre... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1554 • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows Backup Engine handles memory. Se presenta una vulnerabilidad de elevación de privilegios cuando Windows Backup Engine maneja inapropiadamente la me... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1551 •

CVSS: 8.0EPSS: 0%CPEs: 21EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows Work Folder Service handles file operations. Se presenta una vulnerabilidad de elevación de privilegios cua... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1552 •

CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows CDP User Components handle memory. Se presenta una vulnerabilidad de elevación de privilegios cuando el Windows CDP User Components maneja ina... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1550 •