Veille CVE

Mardi 15 mars 2022

15 CVE

  1. CVE-2020-5135 – Non évaluée Exploitée Rançongiciel

    SonicWall SonicOS

    SonicWall SonicOS Buffer Overflow Vulnerability — A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall.

  2. CVE-2019-1405 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when the Windows UPnP service improperly allows COM object creation.

  3. CVE-2019-1322 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  4. CVE-2019-1315 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status.

  5. CVE-2019-1253 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.

  6. CVE-2019-1132 – Non évaluée Exploitée

    Microsoft Win32k

    Microsoft Win32k Privilege Escalation Vulnerability — A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

  7. CVE-2019-1129 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  8. CVE-2019-1069 – Non évaluée Exploitée Rançongiciel

    Microsoft Task Scheduler

    Microsoft Task Scheduler Privilege Escalation Vulnerability — A privilege escalation vulnerability exists in the way the Task Scheduler Service validates certain file operations.

  9. CVE-2019-1064 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  10. CVE-2019-0841 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  11. CVE-2019-0543 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when Windows improperly handles authentication requests. An attacker who successfully exploited this vulnerability could run processes in an elevated context.

  12. CVE-2018-8120 – Non évaluée Exploitée Rançongiciel

    Microsoft Win32k

    Microsoft Win32k Privilege Escalation Vulnerability — A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory.

  13. CVE-2017-0101 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Transaction Manager Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when the Windows Transaction Manager improperly handles objects in memory.

  14. CVE-2016-3309 – Non évaluée Exploitée Rançongiciel

    Microsoft Windows

    Microsoft Windows Kernel Privilege Escalation Vulnerability — A privilege escalation vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode.

  15. CVE-2015-2546 – Non évaluée Exploitée Rançongiciel

    Microsoft Win32k

    Microsoft Win32k Memory Corruption Vulnerability — The kernel-mode driver in Microsoft Windows OS and Server allows local users to gain privileges via a crafted application.