CVSS: 7.8EPSS: 0%CPEs: 19EXPL: 0CVE-2020-1470 – Windows Work Folders Service Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2020-1470
An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows Work Folders Service handles memory. Se presenta una vulnerabilidad de elevación de privilegios cuando el Windows Work Folders Service, maneja inapropiadamente la memoria. Para explotar esta vulnerabilidad, un atacante primero tendría que conseguir una ejecución en el sistema víctima, también se conoce como "Windows Work Folders Service Elevation of Privilege Vulnerability". Este ID de CVE es diferente de CVE-2020-1484, CVE-2020-1516. • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1470 •
CVSS: 10.0EPSS: 0%CPEs: 17EXPL: 0CVE-2020-1467 – Windows Hard Link Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2020-1467
An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The security update addresses the vulnerability by correcting how Windows handles hard links. Se presenta una vulnerabilidad de elevación de privilegios cuando Windows, maneja inapropiadamente unos enlaces físicos, también se conoce como "Windows Hard Link Elevation of Privilege Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1467 •
CVSS: 7.8EPSS: 23%CPEs: 20EXPL: 0CVE-2020-1464 – Microsoft Windows Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2020-1464
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent improperly signed files from being loaded. The update addresses the vulnerability by correcting how Windows validates file signatures. Se presenta una vulnerabilidad de suplantación de identidad cuando Windows, comprueba inapropiadamente las firmas de archivos, también se conoce como "Windows Spoofing Vulnerability". Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files. • https://blog.virustotal.com/2019/01/distribution-of-malicious-jar-appended.html https://krebsonsecurity.com/2020/08/microsoft-put-off-fixing-zero-day-for-2-years https://medium.com/%40TalBeerySec/glueball-the-story-of-cve-2020-1464-50091a1f98bd https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1464 • CWE-347: Improper Verification of Cryptographic Signature •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2020-1417 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2020-1417
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application to take control of an affected system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory. Se presenta una vulnerabilidad de elevación de privilegios cuando el kernel de Windows presenta un fallo al manejar apropiadamente objetos en memoria, también se conoce como "Windows Kernel Elevation of Privilege Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1417 •
CVSS: 5.5EPSS: 0%CPEs: 19EXPL: 0CVE-2020-1383 – Windows RRAS Service Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2020-1383
An information disclosure vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system To exploit this vulnerability, an attacker would need to run a specially crafted application against an RPC server which has Routing and Remote Access enabled. Routing and Remote Access is a non-default configuration; systems without it enabled are not vulnerable. The security update addresses the vulnerability by correcting how the Routing and Remote Access service handles requests. Se presenta una vulnerabilidad de divulgación de información en RPC si el servidor tiene habilitado Routing y Remote Access, también se conoce como "Windows RRAS Service Information Disclosure Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1383 •