Security feature bypass

A security feature bypass vulnerability exists in Windows Defender Application Control WDAC which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'...

CVE-2019-0733

A security feature bypass vulnerability exists in Windows Defender Application Control WDAC which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'...

CVE-2019-0733

A security feature bypass vulnerability exists in Windows Defender Application Control WDAC which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'...

CVE-2019-0733

Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.

Microsoft Windows Multiple Vulnerabilities (KB4494441)

This host is missing a critical security update according to Microsoft KB4494441. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

Microsoft Windows Multiple Vulnerabilities (KB4499167)

This host is missing a critical security update according to Microsoft KB4499167 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Windows Defender Application Control Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows Defender Application Control WDAC which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent Windows PowerShell Constrained Language Mode on the machine. To exploit...

KLA11485 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, gain privileges, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A deni...

January 15, 2019—KB4480976 (OS Build 17134.556)

January 15, 2019—KB4480976 OS Build 17134.556 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addresses an issue in Microsoft Edge that fails to trigger the focusin event if the focus even...

CVE-2018-20681

The CVE-2018-20681 entry concerns mate-screensaver before 1.20.2 in MATE Desktop Environment. The vulnerability allows physically proximate attackers to view the screen content of a screensaver-locked session and possibly control applications by unplugging/re-plugging or power-cycling external ou...

CVE-2019-0247

SAP Cloud Connector, before version 2.11.3, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behavior of the application...

CVE-2019-0247

SAP Cloud Connector is affected by a code-injection vulnerability in versions prior to 2.11.3. The root cause is an injectable code path that can be executed by an attacker, allowing them to control the application's behavior. Remediation: upgrade to version 2.11.3 or later (vendor SAP guidance)....

Security feature bypass

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-6668

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-6668

CVE-2018-6668 affects McAfee Application Control and Change Control, version 7.0.1 and earlier. A whitelist bypass vulnerability allows execution bypass, e.g., via a simple DLL through interpreters such as PowerShell. The connected sources confirm the issue and its impact is constrained to bypass...

CVE-2018-6668 Bypass Application Control with simple DLL

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

CVE-2018-6668 Bypass Application Control with simple DLL

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...

McAfee Application Control and Change Control Security Restriction Bypass Vulnerability (CNVD-2019-07311)

McAfee Application Control and Change Control are both software from McAfee, Inc. Application Control is a suite of program control software that prevents devices from running unauthorized applications. Change Control is a change control software that blocks unauthorized changes to applications. ...

McAfee Application Control and Change Control Security Restriction Bypass Vulnerability

McAfee Application Control and Change Control are both software from McAfee, Inc. Application Control is a suite of program control software that prevents devices from running unauthorized applications. Change Control is a change control software that blocks unauthorized changes to applications. ...

CVE-2018-6669

McAfee Application Control and Change Control (versions 7.0.1 and earlier) contain a whitelist bypass vulnerability. A remote or local user can execute blacklisted files via an ASP.NET form, bypassing the intended restrictions. The CVE has CVSS v3.0 base score 8.0 (HIGH) with ADJACENT network att...