CVE-2020-17013 – Win32k Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2020-17013

11 Nov 2020 — Win32k Information Disclosure Vulnerability Vulnerabilidad de Divulgación de Información de Win32k • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17013 •

CVE-2020-17011 – Windows Port Class Library Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-17011

11 Nov 2020 — Windows Port Class Library Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios de Windows Port Class Library • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17011 •

CVE-2020-17007 – Windows Error Reporting Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-17007

11 Nov 2020 — Windows Error Reporting Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios de Windows Error Reporting • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17007 •

CVE-2020-17000 – Remote Desktop Protocol Client Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2020-17000

11 Nov 2020 — Remote Desktop Protocol Client Information Disclosure Vulnerability Vulnerabilidad de Divulgación de Información de Remote Desktop Protocol Client • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17000 •

CVE-2020-17004 – Windows Graphics Component Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2020-17004

11 Nov 2020 — Windows Graphics Component Information Disclosure Vulnerability Vulnerabilidad de Divulgación de Información de Windows Graphics Component • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17004 •

CVE-2020-16998 – DirectX Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-16998

11 Nov 2020 — DirectX Elevation of Privilege Vulnerability Vulnerabilidad de Privilegios de DirectX Elevation • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16998 •

CVE-2020-16997 – Remote Desktop Protocol Server Information Disclosure Vulnerability

https://notcve.org/view.php?id=CVE-2020-16997

11 Nov 2020 — Remote Desktop Protocol Server Information Disclosure Vulnerability Vulnerabilidad de Divulgación de Información de Remote Desktop Protocol Server • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16997 •

CVE-2020-17053 – Internet Explorer Memory Corruption Vulnerability

https://notcve.org/view.php?id=CVE-2020-17053

11 Nov 2020 — Internet Explorer Memory Corruption Vulnerability Vulnerabilidad de corrupción de la memoria de Internet Explorer This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of arrays in JavaScript. The issue results from the lack of proper validation of user-supplied... • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17053 • CWE-787: Out-of-bounds Write •

CVE-2020-17001 – Windows Print Spooler Elevation of Privilege Vulnerability

https://notcve.org/view.php?id=CVE-2020-17001

11 Nov 2020 — Windows Print Spooler Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios de Windows Print Spooler Este ID de CVE es diferente de CVE-2020-17014 Microsoft Windows suffers from a local spooler bypass vulnerability. • https://packetstorm.news/files/id/160028 •

CVE-2020-17049 – Kerberos KDC Security Feature Bypass Vulnerability

https://notcve.org/view.php?id=CVE-2020-17049

11 Nov 2020 —

A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD).

To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it.

The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.

Vulnerabilidad d... • http://www.openwall.com/lists/oss-security/2021/11/10/3 • CWE-345: Insufficient Verification of Data Authenticity CWE-863: Incorrect Authorization •