Количество 25 045
Количество 25 045
CVE-2020-12656
gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug
CVE-2020-12655
An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata aka CID-d0c7feaf8767.
CVE-2020-12654
CVE-2020-12653
CVE-2020-1264
Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-1263
Windows Error Reporting Information Disclosure Vulnerability
CVE-2020-1262
Windows Kernel Elevation of Privilege Vulnerability
CVE-2020-1261
Windows Error Reporting Information Disclosure Vulnerability
CVE-2020-1260
VBScript Remote Code Execution Vulnerability
CVE-2020-1259
Windows Host Guardian Service Security Feature Bypass Vulnerability
CVE-2020-1258
DirectX Elevation of Privilege Vulnerability
CVE-2020-1257
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
CVE-2020-1256
Windows GDI Information Disclosure Vulnerability
CVE-2020-1255
Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability
CVE-2020-1254
Windows Modules Installer Service Elevation of Privilege Vulnerability
CVE-2020-1253
Win32k Elevation of Privilege Vulnerability
CVE-2020-1252
Windows Remote Code Execution Vulnerability
CVE-2020-1251
Win32k Elevation of Privilege Vulnerability
CVE-2020-1250
Win32k Information Disclosure Vulnerability
CVE-2020-1249
Windows Runtime Elevation of Privilege Vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-12656 gss_mech_free in net/sunrpc/auth_gss/gss_mech_switch.c in the rpcsec_gss_krb5 implementation in the Linux kernel through 5.6.10 lacks certain domain_release calls leading to a memory leak. Note: This was disputed with the assertion that the issue does not grant any access not already available. It is a problem that on unloading a specific kernel module some memory is leaked but loading kernel modules is a privileged operation. A user could also write a kernel module to consume any amount of memory they like and load that replicating the effect of this bug | CVSS3: 5.5 | 0% Низкий | почти 6 лет назад |
| CVE-2020-12655 An issue was discovered in xfs_agf_verify in fs/xfs/libxfs/xfs_alloc.c in the Linux kernel through 5.6.10. Attackers may trigger a sync of excessive duration via an XFS v5 image with crafted metadata aka CID-d0c7feaf8767. | CVSS3: 5.5 | 0% Низкий | почти 6 лет назад |
| CVSS3: 7.1 | 1% Низкий | почти 6 лет назад | |
| CVSS3: 7.8 | 0% Низкий | почти 6 лет назад | |
| CVE-2020-1264 Windows Kernel Elevation of Privilege Vulnerability | CVSS3: 7.8 | 1% Низкий | около 6 лет назад |
| CVE-2020-1263 Windows Error Reporting Information Disclosure Vulnerability | CVSS3: 5.5 | 1% Низкий | около 6 лет назад |
| CVE-2020-1262 Windows Kernel Elevation of Privilege Vulnerability | CVSS3: 7.8 | 1% Низкий | около 6 лет назад |
| CVE-2020-1261 Windows Error Reporting Information Disclosure Vulnerability | CVSS3: 5.5 | 1% Низкий | около 6 лет назад |
| CVE-2020-1260 VBScript Remote Code Execution Vulnerability | CVSS3: 6.4 | 7% Низкий | около 6 лет назад |
| CVE-2020-1259 Windows Host Guardian Service Security Feature Bypass Vulnerability | CVSS3: 4.3 | 3% Низкий | около 6 лет назад |
| CVE-2020-1258 DirectX Elevation of Privilege Vulnerability | CVSS3: 6.4 | 1% Низкий | около 6 лет назад |
| CVE-2020-1257 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability | CVSS3: 7.8 | 1% Низкий | около 6 лет назад |
| CVE-2020-1256 Windows GDI Information Disclosure Vulnerability | CVSS3: 5.5 | 5% Низкий | почти 6 лет назад |
| CVE-2020-1255 Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability | CVSS3: 8.5 | 3% Низкий | около 6 лет назад |
| CVE-2020-1254 Windows Modules Installer Service Elevation of Privilege Vulnerability | CVSS3: 7.8 | 1% Низкий | около 6 лет назад |
| CVE-2020-1253 Win32k Elevation of Privilege Vulnerability | CVSS3: 6.4 | 1% Низкий | около 6 лет назад |
| CVE-2020-1252 Windows Remote Code Execution Vulnerability | CVSS3: 7.8 | 4% Низкий | почти 6 лет назад |
| CVE-2020-1251 Win32k Elevation of Privilege Vulnerability | CVSS3: 6.4 | 1% Низкий | около 6 лет назад |
| CVE-2020-1250 Win32k Information Disclosure Vulnerability | CVSS3: 5.5 | 1% Низкий | почти 6 лет назад |
| CVE-2020-1249 Windows Runtime Elevation of Privilege Vulnerability | CVSS3: 7.8 | 1% Низкий | около 6 лет назад |
Уязвимостей на страницу