4130 matches found
CVE-2020-1229
CVE-2020-1229 is a security feature bypass in Microsoft Outlook/Office where security settings aren’t enforced, allowing an attacker to craft an image that, when opened, could cause the system to load remote images and reveal the target’s IP address. Exploitation requires user interaction (openin...
Microsoft Releases June 2020 Security Patches For 129 Vulnerabilities
Microsoft today released its June 2020 batch of software security updates that patches a total of 129 newly discovered vulnerabilities affecting various versions of Windows operating systems and related products. This is the third Patch Tuesday update since the beginning of the global Covid-19...
Windows Host Guardian Service Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged. An attacker who successfully exploited the vulnerability could tamper with the log file. In an attack scenario, an attacker can change existing event log types to a typ...
Description of the security update for Office 2010: June 9, 2020
Description of the security update for Office 2010: June 9, 2020 Summary This update resolves a security feature bypass vulnerability that exists if Microsoft Outlook or another relevant product does not enforce security settings that are configured on a system. To learn more about the...
End of support for Office 2016 and Office 2019
None None...
End of support for Office 2010
End of support for Office 2010 Support for Office 2010 ended on October 13, 2020 and there will be no extension and no extended security updates.Buy or try Microsoft 365 Tip: Not sure what version of Office you have? See Find details for other versions of Office to help you determine what version...
Windows Kernel Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters. To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system. The update addresses the vulnerability by...
Microsoft Outlook Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system. An attacker who successfully exploited this vulnerability could cause a system to load remote images. These images could disclose the IP address of the target...
Description of the security update for Office 2016: June 9, 2020
None None...
CVE-2020-1241
A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the vulnerability, a locally-authenticated attacker could attempt to run a specially crafted application on a targeted system.The update addresses the vulnerability by...
Security feature bypass
Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox 76...
CVE-2020-1113
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'...
Security feature bypass
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC, aka 'Windows Task Scheduler Security Feature Bypass Vulnerability'...
CVE-2020-1113 Windows Task Scheduler Security Feature Bypass Vulnerability
...
Microsoft Windows Task Scheduler Security Feature Bypass Vulnerability
Compass Security identified a security feature bypass vulnerability in Microsoft Windows. Due to the absence of integrity verification requirements for the RPC protocol and in particular the Task Scheduler, a man-in-the-middle attacker can relay his victim's NTLM authentication to a target of his...
Microsoft Windows Task Scheduler Security Feature Bypass
COMPASS SECURITY ADVISORY https://www.compass-security.com/research/advisories/ Product: Windows Task Scheduler Vendor: Microsoft CSNC ID: CSNC-2010-001 CVE ID: CVE-2020-1113 Subject: Security Feature Bypass Risk: High Effect: Remotely exploitable Authors: Sylvain Heiniger Date: 14.05.2020...
Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)
The version of Adobe Acrobat installed on the remote macOS host is a version prior to 2015.006.30523, 2017.011.30171, or 2020.009.20063. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.301...
Adobe Reader < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 2015.006.30523, 2017.011.30171, or 2020.009.20063. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier, 2017.011.3016...
Adobe Acrobat < 2015.006.30523 / 2017.011.30171 / 2020.009.20063 Multiple Vulnerabilities (APSB20-24)
The version of Adobe Acrobat installed on the remote Windows host is a version prior to 2015.006.30523, 2017.011.30171, or 2020.009.20063. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat and Reader versions 2020.006.20042 and earlier, 2017.011.30166 and earlier,...
KLA11773 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of...