CVE-2023-21785

Microsoft 3D Builder is affected by a remote code execution vulnerability. The issue stems from insufficient input validation in the 3D Builder program, which can be exploited by opening a specially crafted malicious file, allowing an attacker to execute arbitrary code. Affected software: 3D Buil...

CVE-2023-21781

CVE-2023-21781 affects the Microsoft 3D Builder application. The connected PT-2023-1052 entry attributes the issue to insufficient input validation in 3D Builder, which can be exploited by opening a specially crafted malicious file to achieve arbitrary code execution. The description explicitly n...

CVE-2023-21788 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-21785 3D Builder Remote Code Execution Vulnerability

...

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

CVE-2023-21791 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-21786: Heap-based Buffer Overflow

3D Builder Remote Code Execution Vulnerability...

CVE-2023-21793

The provided connected docs identify a Microsoft 3D Builder remote code execution vulnerability (CVE-2023-21793). The root cause described in PT-2023-1256 is insufficient input validation in the 3D Builder program, enabling an attacker to execute arbitrary code via a specially crafted file. Impac...

CVE-2023-21782: Heap-based Buffer Overflow

3D Builder Remote Code Execution Vulnerability...

CVE-2023-21785 3D Builder Remote Code Execution Vulnerability

...

CVE-2023-21789 3D Builder Remote Code Execution Vulnerability

...

KLA20156 Multiple vulnerabilities in Microsoft Apps

Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2023-21792 CVE-2023-21785 CVE-2023-21791 CVE-2023-21782 CVE-2023-21786 CVE-2023-21788 CVE-2023-21789 CVE-2023-21790 CVE-2023-217...

Microsoft 3D Builder 安全漏洞

Microsoft 3D Builder, a tool for creating models and 3D printing from Microsoft USA, has a security vulnerability. No details of the vulnerability are currently available...

CVE-2023-21790: Heap-based Buffer Overflow

3D Builder Remote Code Execution Vulnerability...

CVE-2023-21782 3D Builder Remote Code Execution Vulnerability

...

Microsoft 3D Builder app Multiple Remote Code Execution Vulnerabilities (January 2023)

The version of the Microsoft 3D Builder app installed on the remote Windows host is prior or equal to 18.0.1931.0. It is, therefore, affected by multiple unspecified remote code execution vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...

3d-print.com Cross Site Scripting vulnerability OBB-3116397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

3d-cluster.com Cross Site Scripting vulnerability OBB-3116392

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability

Talos Vulnerability Report TALOS-2022-1656 OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability December 22, 2022 CVE Number CVE-2022-43601,CVE-2022-43600,CVE-2022-43599,CVE-2022-43602 SUMMARY Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of...

3D FlipBook < 1.13.3 - Contributor+ Stored XSS

The plugin does not validate or escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks against high privilege users like administrators. 1. As an administrator, creat...