An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links aka 'OneDrive for Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16851 CVE-2020-16852.


An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links aka 'OneDrive for Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16851 CVE-2020-16853.

elevation of privilege
elevated privilege vulnerability


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16913.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16907.


An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points aka 'Windows Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles junction points aka 'Windows - User Profile Service Elevation of Privilege Vulnerability'.


DirectX Elevation of Privilege Vulnerability


An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections aka 'Windows Scheduled Task Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory aka 'Windows Cryptographic Catalog Services Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations aka 'Windows Device Setup Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0635.


An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0868.


An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0668 CVE-2020-0670 CVE-2020-0671 CVE-2020-0672.


An elevation of privilege vulnerability exists when Windows improperly handles hard links aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840 CVE-2020-0841 CVE-2020-0849.


An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0918.


An elevation of privilege vulnerability exists when NTFS improperly checks access aka 'NTFS Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory aka 'Windows Client License Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them aka 'Microsoft (MAU) Office Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666 CVE-2020-0667 CVE-2020-0735.


An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956 CVE-2020-0957.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1000 CVE-2020-1003 CVE-2020-1027.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788 CVE-2020-0887.


An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations aka 'Windows Storage Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1559.


An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory aka 'Windows dnsrslvr.dll Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0915.


An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0996.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way the Provisioning Runtime validates certain file operations aka 'Provisioning Runtime Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0754.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666 CVE-2020-0667 CVE-2020-0752.


An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands aka 'Windows SSH Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788 CVE-2020-0877.


An elevation of privilege vulnerability exists when Windows improperly handles COM object creation aka 'Windows COM Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions aka 'Service Fabric Elevation of Privilege'.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0747.


An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links aka 'Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0659.


An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669 CVE-2020-0670 CVE-2020-0671 CVE-2020-0672.


An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0667 CVE-2020-0735 CVE-2020-0752.


An elevation of privilege vulnerability exists when Windows improperly handles hard links aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840 CVE-2020-0849 CVE-2020-0896.


An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0867.


An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0644.


An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0739.


An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations aka 'Windows Storage Services Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links aka 'OneDrive for Windows Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0956 CVE-2020-0958.


An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links aka 'Windows Kernel Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles hard links aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0840 CVE-2020-0841 CVE-2020-0896.


An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0772.


An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.


An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0917.


An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0985.


An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory aka 'Windows Network List Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642.


An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0683.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0957 CVE-2020-0958.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0624.


An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files aka 'Microsoft Cryptographic Services Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666 CVE-2020-0735 CVE-2020-0752.


An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0916.


An elevation of privilege vulnerability exists when Windows improperly handles hard links aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0841 CVE-2020-0849 CVE-2020-0896.


An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations aka 'Windows Language Pack Installer Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0877 CVE-2020-0887.


An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows IME Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Microsoft Exchange Server aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0753.


An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1556.


An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1392 CVE-2020-1394 CVE-2020-1395.


An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory aka 'Windows Start-Up Application Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings aka 'OpenSSH for Windows Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021 CVE-2020-1088.


An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory aka 'Windows Now Playing Session Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Remote Access improperly handles file operations aka 'Windows Remote Access Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1530.


An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388 CVE-2020-1392 CVE-2020-1395.


An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1411.


An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations aka 'Windows Storage Services Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0886.


An elevation of privilege vulnerability exists when ASP.NET or .NET web applications running on IIS improperly allow access to cached files aka 'ASP.NET and .NET Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344 CVE-2020-1362.


An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles file and folder links aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1362 CVE-2020-1369.


An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller using the Netlogon Remote Protocol (MS-NRPC) aka 'Netlogon Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111 CVE-2020-1121 CVE-2020-1166.


An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system aka 'Windows Print Spooler Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles COM object creation aka 'Windows COM Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory aka 'Connected Devices Platform Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries aka 'Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1159 CVE-2020-1376.


An elevation of privilege vulnerability exists when Group Policy improperly checks access aka 'Group Policy Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory aka 'Windows Network List Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1294.


An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory aka 'Windows Credential Enrollment Manager Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions.A locally authenticated attacker could run arbitrary code with elevated system privileges aka 'Windows Setup Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory aka 'Windows Update Stack Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server aka 'Microsoft SharePoint Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1130.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1417 CVE-2020-1566.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913 CVE-2020-1003 CVE-2020-1027.


An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory aka 'Windows dnsrslvr.dll Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input aka 'Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336.


An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory aka 'Windows Credential Picker Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1114.


An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations aka 'Windows Profile Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation aka 'Microsoft Office Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles hard links aka 'Windows Hard Link Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1052 CVE-2020-1376.


An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points aka 'Group Policy Services Policy Processing Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory aka 'Windows Registry Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1377.


An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory aka 'Windows Sync Host Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1080.


An elevation of privilege vulnerability exists in the way that Microsoft COM for Windows handles objects in memory aka 'Microsoft COM for Windows Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory aka 'Windows SharedStream Library Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1082 CVE-2020-1088.


An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388 CVE-2020-1392 CVE-2020-1394.


An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system aka 'Windows Print Spooler Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the srmsvc.dll handles objects in memory aka 'Windows Server Resource Management Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1486 CVE-2020-1566.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Microsoft Windows CloudExperienceHost fails to check COM objects aka 'Windows CloudExperienceHost Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111 CVE-2020-1121 CVE-2020-1165.


An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations aka 'Windows Storage Services Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that fdSSDP.dll handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1052 CVE-2020-1159.


An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1529.


An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle messages sent from TSF clients aka 'Windows Text Service Framework Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913 CVE-2020-1000 CVE-2020-1003.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1054.


An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1344 CVE-2020-1369.


An elevation of privilege vulnerability exists in Microsoft SharePoint aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1109.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1111 CVE-2020-1165 CVE-2020-1166.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations aka 'Windows System Events Broker Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory aka 'WinINet API Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers aka 'Windows Printer Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1533.


An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations aka 'Windows Storage Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1087.


An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1048.


An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory aka 'Windows Update Stack Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1110.


An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory aka 'Windows GDI Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory aka 'Windows WalletService Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1287.


An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory aka 'Windows Network List Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory aka 'Windows GDI Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1480.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Clipboard Service aka 'Windows Clipboard Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1121 CVE-2020-1165 CVE-2020-1166.


An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory aka 'Windows Network Location Awareness Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location aka 'Windows Lockscreen Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates aka 'Group Policy Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory aka 'Windows Hyper-V Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1047.


An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1417 CVE-2020-1486.


An elevation of privilege vulnerability exists when Windows improperly handles errors tied to Remote Access Common Dialog aka 'Windows Remote Access Common Dialog Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations aka 'Windows Work Folder Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys aka 'Windows Win32k Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs aka 'Component Object Model Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1133.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913 CVE-2020-1000 CVE-2020-1027.


An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070.


An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory aka 'Windows Bluetooth Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations aka 'Windows Modules Installer Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory aka 'Windows Registry Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1378.


An elevation of privilege vulnerability exists when the Windows fails to properly handle objects in memory aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1010 CVE-2020-1068.


An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory aka 'Windows Print Configuration Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1021 CVE-2020-1082.


An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.


An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files.


An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-8482.


An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724.


An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575.


An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756.


An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34386696. References: QC-CR#1024872.


An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252.


An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244.


An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References: QC-CR#897452.


An elevation of privilege vulnerability in the Qualcomm sound codec driver. Product: Android. Versions: Android kernel. Android ID: A-33966912. References: QC-CR#1096799.


An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux aka \Windows Subsystem for Linux Elevation of Privilege Vulnerability.\ This affects Windows 10 Windows 10 Servers.

elevation of privilege
elevated privilege vulnerability
integer overflow


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0732.

elevation of privilege
improper memory object handle
elevated privilege vulnerability


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0745 CVE-2020-0792.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715 CVE-2020-0745.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0781.


An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory aka 'Shell infrastructure component Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0898.


An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory aka 'Windows UPnP Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0783.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715 CVE-2020-0792.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0784.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0888.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0791.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0709.


An elevation of privilege vulnerability exists when Windows Modules Installer improperly handles objects in memory aka 'Windows Modules Installer Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1169.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1303.


An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory aka 'Windows UPnP Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1382.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1308.


An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory aka 'Windows Feedback Hub Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1053.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory aka 'Windows Print Workflow Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1388 CVE-2020-1394 CVE-2020-1395.


An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory aka 'Windows Runtime Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory aka 'Windows State Repository Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Shell infrastructure component improperly handles objects in memory aka 'Windows Shell Infrastructure Component Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1381.


In all android releases(Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel memory allocated is automatically released by the kernel if the 'probe' function fails with an error code.


In FortiClientWindows 5.4.1 and 5.4.2 an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.


In Eigen NLP 3.10.1 a lack of access control on the /auth/v1/user/ user creation endpoint allows a standard user to create a super user account with a defined password. This directly leads to privilege escalation.


NVIDIA JetPack SDK version 4.2 and 4.3 contains a vulnerability in its installation scripts in which permissions are incorrectly set on certain directories which can lead to escalation of privileges.


Adobe Acrobat and Reader versions 2019.010.20069 and earlier 2019.010.20069 and earlier 2017.011.30113 and earlier version and 2015.006.30464 and earlier have a security bypass vulnerability. Successful exploitation could lead to privilege escalation.


Improper buffer restrictions in firmware for Intel(R) NUC(R) may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.


Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.


Improper buffer restrictions in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access.


Improper buffer restrictions in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.2 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.


Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper conditions check in Intel BIOS platform sample code for some Intel(R) Processors before may allow a privileged user to potentially enable escalation of privilege via local access.


Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141 15.45.32.5145 and 15.40.46.5144 may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper conditions check in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.


IBM DB2 for Linux UNIX and Windows (includes DB2 Connect Server) 11.1 and 11.5 is vulnerable to an escalation of privilege when an authenticated local attacker with special permissions executes specially crafted Db2 commands. IBM X-Force ID: 175212.


Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool versions downloaded before 12/31/2020 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the software installer for the Intel(R) VTune(TM) Profiler before version 2021.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the installer for the Intel(R) RealSense(TM) DCM may allow a privileged user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11 may allow an authenticated user to potentially enable escalation of privilege via local access.


Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper directory permissions in Intel Solid State Drive Toolbox before 3.5.7 may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper directory permissions in installer for Intel(R) Media SDK before 2018 R2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper directory permissions in the installer for the Intel Parallel Studio before 2019 Gold may allow authenticated users to potentially enable an escalation of privilege via local access.


Improper directory permissions in the installer for the Intel Media Server Studio may allow unprivileged users to potentially enable an escalation of privilege via local access.


Improper directory permissions in the installer for the Intel(R) SSD Data Center Tool for Windows before v3.0.17 may allow authenticated users to potentially enable an escalation of privilege via local access.


Improper directory permissions in the ZeroConfig service in Intel(R) PROSet/Wireless WiFi Software before version 20.90.0.7 may allow an authorized user to potentially enable escalation of privilege via local access.


In binder_alloc_free_page of binder_alloc.c there is a possible double free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-120025196.


Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalation of privilege via local access.


Transaction Management in SAP Treasury and Risk Management (corrected in S4CORE versions 1.01 1.02 1.03 1.04 and EA-FINSERV versions 6.0 6.03 6.04 6.05 6.06 6.16 6.17 6.18 8.0) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges.


Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206


ABAP

Server

of

SAP

NetWeaver

and

ABAP

Platform

fail

to

perform

necessary

authorization

checks

for

an

authenticated

user

resulting

in

escalation

of

privileges.

This

has

been

corrected

in

the

following

versions:

KERNEL


SAP Disclosure Management version 10.01 does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges.


Order

processing

in

SAP

ERP

Sales

(corrected

in

and

Sales

(corrected

in

does

not

execute

the

required

authorization

checks

for

an

authenticated

user

which

can

result

in

an

escalation

of

privileges.


ABAP BASIS function modules INST_CREATE_R3_RFC_DEST INST_CREATE_TCPIP_RFCDEST and INST_CREATE_TCPIP_RFC_DEST in SAP BASIS (fixed in versions 7.0 to 7.02 7.10 to 7.30 7.31 7.40 7.50 to 7.53) do not perform necessary authorization checks in all circumstances for an authenticated user resulting in escalation of privileges.


When creating a module in SAP BusinessObjects Business Intelligence Platform (BI Workspace) versions 4.1 4.2 4.3 it is possible to store a malicious script which when executed later could potentially allow a user to escalate privileges via session hijacking. The attacker could also access other sensitive information leading to Stored Cross Site Scripting.


Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater supporting SGX may allow a privileged user to potentially enable escalation of privilege via local access.


Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02 from 7.10 to 7.11 7.30 7.31 7.40 from 7.50 to 7.53 from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user resulting in escalation of privileges.


Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.


Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.


An application with overlay permission can display overlays on top of settings UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-119115683.


In create_hdr of dnssd_clientstub.c there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android ID: A-121327565.


In app uninstallation there is a possible set of permissions that may not be removed from a shared app ID. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10 Android ID: A-116608833


In NFA_SendRawFrame of nfa_dm_api.cc there is a possible out-of-bound write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120664978


In getUserCount and getCount of UserSwitcherController.java there is possible new user creation due to a logic error. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140486529


In the default privileges of NFC there is a possible local bypass of user interaction requirements on package installation due to a default permission. This could lead to local escalation of privilege by installing an application with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-123700348


In ChangeDefaultDialerDialog.java there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege granting privileges to a local app without the user's informed consent with no additional privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-132275252.


In the configuration of NFC modules on certain devices there is a possible failure to distinguish individual devices due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-8.1 Android-9. Android ID: A-122034690.


In rw_t2t_handle_tlv_detect_rsp of rw_t2t_ndef.cc there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-121035711


In startActivityMayWait of ActivityStarter.java there is a possible incorrect Activity launch due to an incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-123013720


In updateAssistMenuItems of Editor.java there is a possible escape from the Setup Wizard due to a missing permission check. This could lead to local escalation of privilege and FRP bypass with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0Android ID: A-120866126


In OatFileAssistant::GenerateOatFile of oat_file_assistant.cc there is a possible file corruption issue due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130821293.


In the Android kernel in the kernel MMU code there is a possible execution path leaving some kernel text and rodata pages writable. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


In areNotificationsEnabledForPackage of NotificationManagerService.java there is a possible permissions bypass due to a missing permissions check. This could lead to local escalation of privilege with no additional privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-128599467.


In okToConnect of HidHostService.java there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-79703832


In the seccomp implementation prior to kernel version 4.8 there is a possible seccomp bypass due to seccomp policies that allow the use of ptrace. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-119769499


In tearDownClientInterface of WificondControl.java there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9 Android ID: A-121327323


In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java there was a difference in the handling of the default case between the WindowManager and the Settings. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127605586.


In readNullableNativeHandleNoDup of Parcel.cpp there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-120084106


In checkAccess of SliceManagerService.java in Android 9 there is a possible permissions check bypass due to incorrect order of arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.


In several functions of NotificationManagerService.java and related files there is a possible way to record audio from the background without notification to the user due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-119041698


In onPermissionGrantResult of GrantPermissionsActivity.java there is a possible incorrectly granted permission due to a missing permission check. This could lead to local escalation of privilege on a locked device with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9Android ID: A-68777217


It is possible to overlay the VPN dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-130568701.


In isSeparateProfileChallengeAllowed of DevicePolicyManagerService.java there is a possible permissions bypass due to a missing permission check. This could lead to local escalation of privilege with no additional permissions required. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-128599668.


In SurfaceFlinger::createLayer of SurfaceFlinger.cpp there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9Android ID: A-137284057


When pairing with a Bluetooth device it may be possible to pair a malicious device without any confirmation from the user and that device may be able to interact with the phone. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-110433804


In rw_i93_sm_update_ndef of rw_i93.cc there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-122320256


In binder_transaction of binder.c there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-136210786References: Upstream kernel


In rw_t4t_sm_read_ndef of rw_t4t in Android 7.1.1 7.1.2 8.0 8.1 and 9 there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC service with no additional execution privileges needed. User interaction is not needed for exploitation.


In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-120502559.


In tokenize of sqlite3_android.cpp there is a possible attacker controlled INSERT statement due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-139186193


In rw_t3t_handle_get_sc_poll_rsp of rw_t3t.cc there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-120499324


In createSessionInternal of PackageInstallerService.java there is a possible permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-138650665


In binder_thread_read of binder.c there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-116855682References: Upstream kernel


In execTransact of Binder.java in Android 7.1.1 7.1.2 8.0 8.1 and 9 there is a possible local execution of arbitrary code in a privileged process due to a memory overwrite. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


In updatePermissions of PermissionManagerService.java it may be possible for a malicious app to obtain a custom permission from another app due to a permission bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-67319274


In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-118152591


In SensorManager::assertStateLocked of SensorManager.cpp in Android 7.1.1 7.1.2 8.0 8.1 and 9 there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


In createSessionInternal of PackageInstallerService.java there is a possible improper permission grant due to a missing permission check. This could lead to local escalation of privilege by installing malicious packages with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0 Android-8.1 Android-9 and Android-10 Android ID: A-141169173


In SmsDefaultDialog.onStart of SmsDefaultDialog.java there is a possible escalation of privilege due to an overlay attack. This could lead to local escalation of privilege granting privileges to a local app without the user's informed consent with no additional privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9 Android ID: A-120484087


Privilege Escalation vulnerability in Microsoft Windows client in McAfee Endpoint Security (ENS) 10.6.1 and earlier allows local users to gain elevated privileges via a specific set of circumstances.


The

chkstat

tool

in

the

permissions

package

followed

symlinks

before

commit

(please

also

check

the

additional

hardenings

after

this

fix).

This

allowed

local

attackers

with

control

over

a

path

that

is

traversed

by

chkstat

to

escalate

privileges.


Privilege escalation vulnerability in McAfee Agent (MA) before 5.6.1 HF3 allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory.


Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges.


A Symbolic Link (Symlink) Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE Factory munge versions prior to 0.5.13-6.1.


The pg_ctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories which could result in local privilege escalation.


Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked.


ABBYY network license server in ABBYY FineReader 15 before Release 4 (aka 15.0.112.2130) allows escalation of privileges by local users via manipulations involving files and using symbolic links.


A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 (v160 and 2019 (v15) consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system.


The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5 and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code & escalate their privileges via a DLL hijacking vulnerability.


An issue was discovered in RICOH Streamline NX Client Tool and RICOH Streamline NX PC Client that allows attackers to escalate local privileges.


An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter the target Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.


A

privilege

escalation

vulnerability

in

Wowza

Streaming

Engine

and

earlier

allows

any

unprivileged

Linux

user

to

escalate

privileges

to

root.

The

installer

sets

too

relaxed

permissions

on

/usr/local/WowzaStreamingEngine/bin/*

core

program

files.

By

injecting

a

payload

into

one

of

those

files

it

will

run

with

the

same

privileges

as

the

Wowza

server

root.

For

example

could

be

replaced

with

a

Trojan

horse.

This

issue

was

resolved

in

Wowza

Streaming

Engine


An issue was discovered in AODDriver2.sys in AMD OverDrive. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x81112ee0 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.


An issue was discovered in atillk64.sys in AMD ATI Diagnostics Hardware Abstraction Sys/Overclocking Utility 5.11.9.0. The vulnerable driver exposes a wrmsr instruction and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.


An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.


An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.


An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Specific Register (MSR). Allowing arbitrary MSR writes can lead to Ring-0 code execution and escalation of privileges.


Escalation of privileges in EnergyCAP 7 through 7.5.6 allows an attacker to access data. If an unauthenticated user clicks on a link on the public dashboard the resource opens in EnergyCAP with access rights matching the user who created the dashboard.


Electronic Arts Origin 10.5.55.33574 is vulnerable to local privilege escalation due to arbitrary directory DACL manipulation a different issue than CVE-2019-19247 and CVE-2019-19248. When Origin.exe connects to the named pipe OriginClientService the privileged service verifies the client's executable file instead of its in-memory process (which can be significantly different from the executable file due to for example DLL injection). Data transmitted over the pipe is encrypted using a static key. Instead of hooking the pipe communication directly via WriteFileEx() this can be bypassed by hooking the EVP_EncryptUpdate() function of libeay32.dll. The pipe takes the command CreateDirectory to create a directory and adjust the directory DACL. Calls to this function can be intercepted the directory and the DACL can be replaced and the manipulated DACL is written. Arbitrary DACL write is further achieved by creating a hardlink in a user-controlled directory that points to (for example) a service binary. The DACL is then written to this service binary which results in escalation of privileges.


runc through 1.0.0-rc9 has Incorrect Access Control leading to Escalation of Privileges related to libcontainer/rootfs_linux.go. To exploit this an attacker must be able to spawn two containers with custom volume-mount configurations and be able to run custom images. (This vulnerability does not affect Docker due to an implementation detail that happens to block the attack.)


An escalation of privilege vulnerability in Nahimic APO Software Component Driver 1.4.2 1.5.0 1.5.1 1.6.1 and 1.6.2 allows an attacker to execute code with SYSTEM privileges.


NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack) leading to escalation of privileges through code execution.


An integer wrap in kernel/sys/syscall.c in ToaruOS 1.10.10 allows users to map arbitrary kernel pages into userland process space via TOARU_SYS_FUNC_MMAP leading to escalation of privileges.


Bond JetSelect (all versions) has an issue in the Java class (ENCtool.jar) and corresponding password generation algorithm (used to set initial passwords upon first installation). It XORs the plaintext into the 'encrypted' password that is then stored within the database. These steps are able to be trivially reversed allowing for escalation of privilege within the JetSelect application through obtaining the passwords of JetSelect administrators. JetSelect administrators have the ability to modify and delete all networking configuration across a vessel as well as altering network configuration of all managed network devices (switches routers).


Akeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is: Arbitrary code execution WITH escalation of privilege. The component is: Executable installers portable executables (ALL executables on the web site). The attack vector is: CAPEC-471 CWE-426 CWE-427.


Akeo Consulting Rufus 3.0 and earlier is affected by: Insecure Permissions. The impact is: arbitrary code execution with escalation of privilege. The component is: Executable installer portable executable (ALL executables available). The attack vector is: CWE-29 CWE-377 CWE-379.


Insufficient path checking in the installer for Intel(R) Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access.


Pointer corruption in the Unified Shader Compiler in Intel(R) Graphics Drivers before 10.18.14.5074 (aka 15.36.x.5074) may allow an authenticated user to potentially enable escalation of privilege via local access.


Improper file permission in software installer for Intel(R) Smart Connect Technology for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.


Logic issue in subsystem in Intel(R) AMT before versions 11.8.70 11.11.70 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via network access.


Authentication bypass in the subsystem for Intel(R) CSME before versions 11.8.70 11.11.70 11.22.70 12.0.45 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.


Insufficient access control in hardware abstraction driver for MEInfo software for Intel(R) CSME before versions 11.8.70 11.11.70 11.22.70 12.0.45 13.0.0 14.0.10; TXEInfo software for Intel(R) TXE before versions 3.1.70 and 4.0.20; INTEL-SA-00086 Detection Tool version 1.2.7.0 or before; INTEL-SA-00125 Detection Tool version 1.0.45.0 or before may allow an authenticated user to potentially enable escalation of privilege via local access.


CF UAA versions prior to 74.1.0 allow external input to be directly queried against. A remote malicious user with 'client.write' and 'groups.update' can craft a SCIM query which leaks information that allows an escalation of privileges ultimately allowing the malicious user to gain control of UAA scopes they should not have.


An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcap_sendqueue_queue() or pcap_sendqueue_transmit() results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges.


Improper directory permissions in the installer for Intel(R) Management Engine Consumer Driver for Windows before versions 11.8.70 11.11.70 11.22.70 12.0.45 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.


Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.


The authorization component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically processes OAuth authorization incorrectly leading to potential escalation of privileges for the specific customer endpoint when the implementation uses multiple scopes. This issue affects: TIBCO Software Inc.'s TIBCO API Exchange Gateway version 2.3.1 and prior versions and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric version 2.3.1 and prior versions.


Insufficient session validation in the subsystem for Intel(R) CSME before versions 11.8.70 12.0.45 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege via local access.


An issue was discovered in Rivet Killer Control Center before 2.1.1352. IOCTL 0x120004 in KfeCo10X64.sys fails to validate an offset passed as a parameter during a memory operation leading to an arbitrary write primitive that can lead to code execution or escalation of privileges.


Integer truncation in EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.


AdRem NetCrunch 10.6.0.4587 has an Improper Session Handling vulnerability in the NetCrunch web client which can lead to an authentication bypass or escalation of privileges.


Unquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.


Logic issue in DxeImageVerificationHandler() for EDK II may allow an authenticated user to potentially enable escalation of privilege via local access.


In the Android kernel in unifi and r8180 WiFi drivers there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.


In km_compute_shared_hmac of km4.c there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-130246677


In the Bluetooth stack there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113575306


In set_outbound_iatu of abc-pcie.c there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144168326


In libstagefright there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the media server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-77474014


In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In notification management of the service manager there is a possible permissions bypass. This could lead to local escalation of privilege by preventing user notification with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112434609


In com.android.apps.tag there is a possible bypass of user interaction requirements due to a missing permission check. This could lead to a to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36885811


In libhidcommand_jni there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the USB service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: Android Versions: Android-10 Android ID: A-111363077


In the Android kernel in the touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In NFC server there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the system server with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122361874


In opencv calls that use libpng there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616


In wifilogd there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113655028


In keyguard there is a possible escalation of privilege due to improper permission checks. This could lead to a local bypass of the keyguard under limited circumstances with User execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-119322269


In dma_sblk_start of abc-pcie.c there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android kernel Android ID: A-144167528


In NFC there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117985575


In telephony there is a possible bypass of user interaction requirements due to missing permission checks. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-73136824


In Keymaster there is a possible EoP due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-129562815


In LockPatternUtils there is a possible escalation of privilege due to an improper permissions check. This could lead to local bypass of the Lockguard with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120568007


In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In the NFC stack there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-121267042


In the Android kernel in the vl53L0 driver there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege due to a set_fs() call without restoring the previous limit with System execution privileges needed. User interaction is not needed for exploitation.


In NFC there is a possible out of bounds write due to a missing bounds check. This could lead to a to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-120156401


In the Android kernel in the FingerTipS touchscreen driver there is a possible use-after-free due to improper locking. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In the Android kernel in sdcardfs there is a possible violation of the separation of data between profiles due to shared mapping of obb files. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.


In the Android kernel in the synaptics_dsx_htc touchscreen driver there is a possible out of bounds write due to a use after free. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In the Android kernel in the FingerTipS touchscreen driver there is a possible out of bounds write due to improper input validation. This could lead to a local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.


In Platform there is a possible bypass of user interaction requirements due to background app interception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113584607


In sensorservice there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-119501435


In the Activity Manager service there is a possible permission bypass due to incorrect permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-124539196


In K7 Antivirus Premium 16.0.xxx through 16.0.0120; K7 Total Security 16.0.xxx through 16.0.0120; and K7 Ultimate Security 16.0.xxx through 16.0.0120 the module K7TSHlpr.dll improperly validates the administrative privileges of the user allowing arbitrary registry writes in the K7AVOptn.dll module to facilitate escalation of privileges via inter-process communication with a service process.