14428 matches found
Node.js: fs.lstat bypasses permission model
A vulnerability has been identified in Node.js affecting users of the experimental permission model. The flaw arises from an inadequate permission model that fails to restrict file stats through the fs.lstat API. As a result, malicious actors could retrieve stats from files they do not have...
CVE-2023-38163
Windows Defender Attack Surface Reduction Security Feature Bypass...
CVE-2023-38163
Windows Defender Attack Surface Reduction Security Feature Bypass...
CVE-2023-36767
Microsoft Office Security Feature Bypass Vulnerability...
CVE-2023-36767
Microsoft Office Security Feature Bypass Vulnerability...
Security feature bypass
Microsoft Office Security Feature Bypass Vulnerability...
Security feature bypass
Windows MSHTML Platform Security Feature Bypass Vulnerability...
CVE-2023-38163 Windows Defender Attack Surface Reduction Security Feature Bypass
...
CVE-2023-36767 Microsoft Office Security Feature Bypass Vulnerability
...
CVE-2023-36767 Microsoft Office Security Feature Bypass Vulnerability
...
CVE-2023-36767
CVE-2023-36767 is a Microsoft Office security feature bypass vulnerability (CVSS v3.1 base 4.3, MEDIUM) affecting Office components across platforms. The available connected docs describe the issue as a security feature bypass with impact of circumvention of security measures (Office Excel noted ...
CVE-2023-36805 Windows MSHTML Platform Security Feature Bypass Vulnerability
...
CVE-2023-36805 Windows MSHTML Platform Security Feature Bypass Vulnerability
...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: September 12, 2023 (KB5002501)
None None...
Description of the security update for SharePoint Enterprise Server 2016: September 12, 2023 (KB5002494)
None None...
Description of the security update for Office 2013: September 12, 2023 (KB5002477)
Description of the security update for Office 2013: September 12, 2023 KB5002477 Summary This security update resolves a Microsoft Office security feature bypass vulnerability and Microsoft Office spoofing vulnerability. To learn more about the vulnerabilities, see the following security...
Windows Defender Attack Surface Reduction Security Feature Bypass
...
Microsoft Office Security Feature Bypass Vulnerability
...
CVE-2023-32558
The use of the deprecated API process.binding can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of...
Path traversal
The use of the deprecated API process.binding can bypass the permission model through path traversal. This vulnerability affects all users using the experimental permission model in Node.js 20.x. Please note that at the time this CVE was issued, the permission model is an experimental feature of...