Page 40 of 1626 results (0.022 seconds)

CVSS: 9.3EPSS: 2%CPEs: 21EXPL: 0

17 Aug 2020 — A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory. Se presenta una vulnerabilidad de ejecución de código remota en la manera en que Micr... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1562 •

CVSS: 9.3EPSS: 3%CPEs: 21EXPL: 0

17 Aug 2020 — A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. Se presenta una vulnerabilidad de ejecución de código remota cuan... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1558 •

CVSS: 9.3EPSS: 3%CPEs: 21EXPL: 0

17 Aug 2020 — A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory. Se presenta una vulnerabilidad de ejecución de código remota cuan... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1557 •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows Runtime handles objects in memory. Se presenta una vulnerabilidad de elevación de privilegios cuando Windows Run... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1553 •

CVSS: 7.8EPSS: 1%CPEs: 20EXPL: 0

17 Aug 2020 — A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage. The security update addresses the vulnerability by corre... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1554 • CWE-787: Out-of-bounds Write •

CVSS: 8.0EPSS: 0%CPEs: 21EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The update addresses the vulnerability by correcting the way the Windows Work Folder Service handles file operations. Se presenta una vulnerabilidad de elevación de privilegios cua... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1552 •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows CDP User Components handle memory. Se presenta una vulnerabilidad de elevación de privilegios cuando los componentes de usuario de Windows CDP... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1549 •

CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows CDP User Components improperly handle memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows CDP User Components handle memory. Se presenta una vulnerabilidad de elevación de privilegios cuando el Windows CDP User Components maneja ina... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1550 •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0

17 Aug 2020 — An information disclosure vulnerability exists when the Windows WaasMedic Service improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to improperly disclose memory. The security update addresses the vulnerability by correcting how the Windows WaasMedic Service handles memory. Se presenta una vulnerabilidad de divulgación de información cuando el servicio Windows WaasMedic man... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1548 •

CVSS: 7.8EPSS: 0%CPEs: 21EXPL: 0

17 Aug 2020 — An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim system. An attacker could then run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows Remote Access properly handles file operations. Se presenta una vulnerabilidad de ... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1537 •