LockFile Ransomware Bypasses Protection Using Intermittent File Encryption

A new ransomware family that emerged last month comes with its own bag of tricks to bypass ransomware protection by leveraging a novel technique called "intermittent encryption." Called LockFile, the operators of the ransomware have been found exploiting recently disclosed flaws such as ProxyShel...

August 26, 2021—KB5005103 (OS Build 18363.1766) Preview

None None...

August 26, 2021—KB5005102 (OS Build 17763.2145) Preview

None None...

CVE-2021-0576

In flv extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187236084...

Unauthorized Access Vulnerability in Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Ltd.

Siltronic Software Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. An unauthorized access vulnerability exists in the Flash Flood Monitoring and Early Warning Distribution System of Siltronic Software Limited, which can be exploited by...

August 10, 2021—KB5005099 (Monthly Rollup)

None None...

August 10, 2021—KB5005094 (Security-only update)

None None...

August 10, 2021—KB5005033 (OS Builds 19041.1165, 19042.1165, and 19043.1165)

None None...

August 10, 2021—KB5005031 (OS Build 18363.1734)

None None...

August 10, 2021—KB5005030 (OS Build 17763.2114)

None None...

August 10, 2021—KB5005076 (Monthly Rollup)

None None...

August 10, 2021—KB5005043 (OS Build 14393.4583) - EXPIRED

None None...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Distribution Platform of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the flash flood monitoring and early warning distribution platform of Siltronic, which can be exploited by attackers to obtain sensitive information from th...

July 29, 2021—KB5004296 (OS Builds 19041.1151, 19042.1151, and 19043.1151) Preview

None None...

July 29, 2021—KB5004293 (OS Build 18363.1714) Preview

None None...

July 29, 2021—KB5005393 (OS Build 14393.4532) Out-of-band

None None...

July 27, 2021—KB5005394 (OS Build 17763.2091) Out-of-band

None None...

Adobe Flash Player Code Execution

The vulnerability of the Adobe Flash Player is related to a data source validation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Flash Player Memory Use After Free

The vulnerability of the Adobe Flash Player Desktop Runtime, FlashPlayer for Google Chrome, as well as Adobe FlashPlayer for Microsoft Edge and Internet Explorer, is related to the use of memory after it is released. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

CVE-2015-5119

Use-after-free vulnerability in the ByteArray class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of...