Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-0388 State: PUBLISHED Published: 2019-11-13T22:17:37 Last Updated: 2024-08-04T17:51:26.312Z Vendors: SAP SE Products: SAP UI, SAP UI 700 Problem Types: Other Description: SAP UI5 HTTP Handler (corrected in SAP_UI versions 7.5, 7.51, 7.52, 7.53, 7.54 and SAP UI_700 version 2.0) allows an attacker to manipulate content due to insufficient URL validation. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390 - https://launchpad.support.sap.com/#/notes/2843016
CVE ID: CVE-2019-0389 State: PUBLISHED Published: 2019-11-13T21:58:44 Last Updated: 2024-08-04T17:51:26.664Z Vendors: SAP SE Products: SAP NetWeaver Application Server Java (J2EE-Framework) Problem Types: Other Description: An administrator of SAP NetWeaver Application Server Java (J2EE-Framework), (corrected in versions 7.1, 7.2, 7.3, 7.31, 7.4, 7.5), may change privileges for all or some functions in Java Server, and enable users to execute functions, they are not allowed to execute otherwise. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2814357 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390
CVE ID: CVE-2019-0390 State: PUBLISHED Published: 2019-11-13T22:00:25 Last Updated: 2024-08-04T17:51:26.563Z Vendors: SAP SE Products: SAP Data Hub (DH_Foundation) Problem Types: Information Disclosure Description: Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390 - https://launchpad.support.sap.com/#/notes/2842034
CVE ID: CVE-2019-0391 State: PUBLISHED Published: 2019-11-13T22:00:44 Last Updated: 2024-08-04T17:51:26.799Z Vendors: SAP SE Products: SAP NetWeaver AS Java Problem Types: Information Disclosure Description: Under certain conditions SAP NetWeaver AS Java (corrected in 7.10, 7.20, 7.30, 7.31, 7.40, 7.50) allows an attacker to access information which would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390 - https://launchpad.support.sap.com/#/notes/2835226
CVE ID: CVE-2019-0393 State: PUBLISHED Published: 2019-11-13T21:59:55 Last Updated: 2024-08-04T17:51:26.616Z Vendors: SAP SE Products: SAP Quality Management (S4CORE) Problem Types: SQL Injection Description: An SQL Injection vulnerability in SAP Quality Management (corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03) allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390 - https://launchpad.support.sap.com/#/notes/2816035
CVE ID: CVE-2019-0395 State: PUBLISHED Published: 2019-12-11T21:34:56 Last Updated: 2024-08-04T17:51:26.239Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad) Problem Types: Cross-Site Scripting Description: SAP BusinessObjects Business Intelligence Platform (Fiori BI Launchpad), before version 4.2, allows execution of JavaScript in a text module in Fiori BI Launchpad, leading to Stored Cross Site Scripting vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://launchpad.support.sap.com/#/notes/2830578 - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397
CVE ID: CVE-2019-0396 State: PUBLISHED Published: 2019-11-13T22:18:04 Last Updated: 2024-08-04T17:51:26.767Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface) Problem Types: Missing XML Validation Description: SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), corrected in versions 4.1 and 4.2, does not sufficiently validate an XML document accepted from an untrusted source. An attacker can craft a message that contains malicious elements that will not be correctly filtered by Web Intelligence HTML interface in some specific workflows. Additional Analyst Notes: - CVE Program Container: References:
b Intelligence HTML interface in some specific workflows. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=528880390 - https://launchpad.support.sap.com/#/notes/2814007
CVE ID: CVE-2019-0398 State: PUBLISHED Published: 2019-12-11T21:35:01 Last Updated: 2024-08-04T17:51:26.079Z Vendors: SAP SE Products: SAP BusinessObjects Business Intelligence Platform (Monitoring Application) Problem Types: Cross Site Request Forgery Description: Due to insufficient CSRF protection, SAP BusinessObjects Business Intelligence Platform (Monitoring Application), before versions 4.1, 4.2 and 4.3, may lead to an authenticated user to send unintended request to the web server, leading to Cross Site Request Forgery. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 - https://launchpad.support.sap.c
er: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 - https://launchpad.support.sap.com/#/notes/2701027
CVE ID: CVE-2019-0399 State: PUBLISHED Published: 2019-12-11T21:35:06 Last Updated: 2024-08-04T17:51:26.320Z Vendors: SAP SE Products: SAP Portfolio and Project Management (S4CORE), SAP Portfolio and Project Management (EPPM), SAP Portfolio and Project Management (CPRXRPM) Problem Types: Information Disclosure Description: SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500_702, 600_740, 610_740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?p
. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 - https://launchpad.support.sap.com/#/notes/2803554
CVE ID: CVE-2019-0402 State: PUBLISHED Published: 2019-12-11T21:35:21 Last Updated: 2024-08-04T17:51:26.083Z Vendors: SAP SE Products: SAP Adaptive Server Enterprise Problem Types: Information Disclosure Description: SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive information to the admin, leading to Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 - https://launchpad.support.sap.com/#/notes/2845780
CVE ID: CVE-2019-0403 State: PUBLISHED Published: 2019-12-11T21:35:26 Last Updated: 2024-08-04T17:51:26.878Z Vendors: SAP SE Products: SAP Enable Now Problem Types: others Description: SAP Enable Now, before version 1911, allows an attacker to input commands into the CSV files, which will be executed when opened, leading to CSV Command Injection. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 - https://launchpad.support.sap.com/#/notes/2845183
CVE ID: CVE-2019-0404 State: PUBLISHED Published: 2019-12-11T21:35:30 Last Updated: 2024-08-04T17:51:26.910Z Vendors: SAP SE Products: SAP Enable Now Problem Types: Information Disclosure Description: SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 - https://launchpad.support.sap.com/#/notes/2845183
CVE ID: CVE-2019-0405 State: PUBLISHED Published: 2019-12-11T21:35:37 Last Updated: 2024-08-04T17:51:26.482Z Vendors: SAP SE Products: SAP Enable Now Problem Types: Information Disclosure Description: SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of users, leading to a user enumeration vulnerability and Information Disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533660397 - https://launchpad.support.sap.com/#/notes/2845183
CVE ID: CVE-2019-0536 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.433Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1,
7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0549, CVE-2019-0554, CVE-2019-0569. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0536 - http://www.securityfocus.com/bid/106406
CVE ID: CVE-2019-0537 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.628Z Vendors: Microsoft Products: Microsoft Visual Studio Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Visual Studio improperly discloses arbitrary file contents if the victim opens a malicious .vscontent file, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0537 - http://www.securityfocus.com/bid/106390
CVE ID: CVE-2019-0538 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka "Jet Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581,
is unique from CVE-2019-0575, CVE-2019-0576, CVE-2019-0577, CVE-2019-0578, CVE-2019-0579, CVE-2019-0580, CVE-2019-0581, CVE-2019-0582, CVE-2019-0583, CVE-2019-0584. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0538 - http://www.securityfocus.com/bid/106419
CVE ID: CVE-2019-0539 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.182Z Vendors: Microsoft Products: Microsoft Edge, ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46204/ - https://www.exploit-db.com/exploits/46485/ - http://www.securityfocus.com/bid/10
://www.exploit-db.com/exploits/46204/ - https://www.exploit-db.com/exploits/46485/ - http://www.securityfocus.com/bid/106401 - https://www.exploit-db.com/exploits/46203/ - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0539
CVE ID: CVE-2019-0540 State: PUBLISHED Published: 2019-03-06T00:00:00 Last Updated: 2024-08-04T17:51:27.230Z Vendors: Microsoft Products: Microsoft Office, Microsoft Excel Viewer, Office 365 ProPlus, Microsoft PowerPoint Viewer, Microsoft Office Compatibility Pack Problem Types: Security Feature Bypass Description: A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106863 - https://
ty'. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106863 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0540
CVE ID: CVE-2019-0541 State: PUBLISHED Published: 2019-01-08T21:00:00.000Z Last Updated: 2025-10-21T23:45:44.790Z Vendors: Microsoft Products: Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Internet Explorer 9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus. Additional Analyst Notes: - C
9, Internet Explorer 11, Microsoft Excel Viewer, Internet Explorer 10, Office 365 ProPlus. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0541 - https://www.exploit-db.com/exploits/46536/ - http://www.securityfocus.com/bid/106402
CVE ID: CVE-2019-0542 State: PUBLISHED Published: 2019-01-09T15:00:00 Last Updated: 2024-08-04T17:51:26.827Z Vendors: https://xtermjs.org/ Products: xterm.js Problem Types: n/a Description: A remote code execution vulnerability exists in Xterm.js when the component mishandles special characters, aka "Xterm Remote Code Execution Vulnerability." This affects xterm.js. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106434 - https://access.redhat.com/errata/RHBA-2019:0959 - https://access.redhat.com/errata/RHSA-2019:1422 - https://access.redhat.com/errata/RHSA-2019:2552 - https://access.redhat.com/errata/RHSA-2019:2551 - https://github.com/xterm
s://access.redhat.com/errata/RHSA-2019:2552 - https://access.redhat.com/errata/RHSA-2019:2551 - https://github.com/xtermjs/xterm.js/releases
CVE ID: CVE-2019-0543 State: PUBLISHED Published: 2019-01-08T21:00:00.000Z Last Updated: 2025-10-21T23:45:44.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "Microsoft Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106408 - https://port
: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/106408 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0543 - https://www.exploit-db.com/exploits/46156/
CVE ID: CVE-2019-0544 State: REJECTED Published: 2020-01-24T21:14:23 Last Updated: 2020-01-24T21:14:23 Description: No description available.
CVE ID: CVE-2019-0545 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.700Z Vendors: Microsoft Products: .NET Core, Microsoft .NET Framework Problem Types: Information Disclosure Description: An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing (CORS) configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Frame
work 4.5.2, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2, Microsoft .NET Framework 4.7/4.7.1/4.7.2, .NET Core 2.1, Microsoft .NET Framework 4.7.1/4.7.2, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 2.2, Microsoft .NET Framework 4.7.2. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0545 - http://www.securityfocus.com/bid/106405 - https://access.redhat.com/errata/RHSA-2019:0040
CVE ID: CVE-2019-0546 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.821Z Vendors: Microsoft Products: Microsoft Visual Studio Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Visual Studio when the C++ compiler improperly handles specific combinations of C++ constructs, aka "Visual Studio Remote Code Execution Vulnerability." This affects Microsoft Visual Studio. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0546 - http://www.securityfocus.com/bid/106391
CVE ID: CVE-2019-0547 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.839Z Vendors: Microsoft Products: Windows 10, Windows 10 Servers Problem Types: Remote Code Execution Description: A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client, aka "Windows DHCP Client Remote Code Execution Vulnerability." This affects Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0547 - http://www.securityfocus.com/bid/106394
CVE ID: CVE-2019-0548 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:27.229Z Vendors: Microsoft Products: ASP.NET Core Problem Types: Denial of Service Description: A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerability." This affects ASP.NET Core 2.2, ASP.NET Core 2.1. This CVE ID is unique from CVE-2019-0564. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106410 - https://access.redhat.com/errata/RHSA-2019:0040 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0548
CVE ID: CVE-2019-0549 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.732Z Vendors: Microsoft Products: Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1,
7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2019-0536, CVE-2019-0554, CVE-2019-0569. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0549 - http://www.securityfocus.com/bid/106409
CVE ID: CVE-2019-0550 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.868Z Vendors: Microsoft Products: Windows 10 Servers, Windows 10, Windows Server 2019 Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2019-0551. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidanc
dditional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0550 - http://www.securityfocus.com/bid/106385
CVE ID: CVE-2019-0551 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.552Z Vendors: Microsoft Products: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is unique from CVE-2019-0550. Additional Analyst Notes: - CVE Program Container: References: - https://portal
his CVE ID is unique from CVE-2019-0550. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0551 - http://www.securityfocus.com/bid/106386
CVE ID: CVE-2019-0552 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.850Z Vendors: Microsoft Products: Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers Problem Types: Elevation of Privilege Description: An elevation of privilege exists in Windows COM Desktop Broker, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46162/ - http://www.secu
ional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46162/ - http://www.securityfocus.com/bid/106407 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0552
CVE ID: CVE-2019-0553 State: PUBLISHED Published: 2019-01-08T21:00:00 Last Updated: 2024-08-04T17:51:26.933Z Vendors: Microsoft Products: Windows 10 Servers, Windows 10, Windows Server 2019 Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka "Windows Subsystem for Linux Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/106412 - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0553