CVE-2021-0926

In onCreate of NfcImportVCardActivity.java, there is a possible way to add a contact without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0926

CVE-2021-0926 is a vulnerability in the Android NFC path found in onCreate of NfcImportVCardActivity.java, where a missing permission check enables adding a contact without user consent. This constitutes a local elevation of privilege because it does not require additional execution privileges an...

Security Updates for Microsoft SharePoint Server (April 2020)

The Microsoft SharePoint Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who...

Cross site scripting

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0925, CVE-2020-0926...

CVE-2020-0926

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925...

CVE-2020-0926

Technical details for CVE-2020-0926 are not publicly available in the provided documents. Monitor for updates from official sources to confirm affected products, vectors, and mitigations.

CVE-2019-0926

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'...

CVE-2019-0926

This CVE concerns Microsoft Edge Memory Corruption: a remote code execution vulnerability when Edge improperly accesses objects in memory. The vulnerability could allow an attacker to run arbitrary code in the context of the current user, potentially gaining full system control if the user is adm...

Microsoft Edge Memory Corruption (CVE-2019-0926)

A memory corruption vulnerability exists in Microsoft Edge. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

KLA11478 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory...

CVE-2017-0926

GitLab Community Edition 10.3 is affected by an improper authorization in the Oauth sign-in component, enabling unauthorized user login. Root cause: OAuth sign-in bypass allows login without proper authorization. Impact: unauthorized access via OAuth flow with partial/ high impact credentials (pe...

[SECURITY] [DSA 4145-1] gitlab security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4145-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2018 https://www.debian.org/security/faq -...

Information disclosure

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...

Information disclosure

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...

Information disclosure

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...

Information disclosure

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...

CVE-2018-0926

Technical details are not publicly available in the provided connected documents; monitor for updates.

Samba 4.5.2 - Symlink Race Permits Opening Files Outside Share Directory Vulnerability

Exploit for multiple platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1039 The Samba server is supposed to only grant access to configured share directories unless "wide links" are enabled, in which case the server is allowed to follow symlink...

CVE-2016-0926

Cross-site scripting XSS vulnerability in Apps Manager in Pivotal Cloud Foundry PCF Elastic Runtime before 1.6.32 and 1.7.x before 1.7.8 allows remote attackers to inject arbitrary web script or HTML via unspecified input that improperly interacts with the AngularJS framework...

CVE-2016-0926

CVE-2016-0926 is a cross-site scripting (XSS) vulnerability in Pivotal Cloud Foundry (PCF) Elastic Runtime 's Apps Manager . The flaw affects Elastic Runtime versions prior to 1.6.32 and prior to 1.7.8 for the 1.7.x line, where untrusted input that interacts with the AngularJS framework can be re...