PT-2018-1502 · Microsoft · Excel Viewer +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft Excel affected versions not specified Microsoft Excel Viewer affected versions not specified Description: The issue is related to incorrect handling of objects in memory, which can...

The vulnerability of the Microsoft Malware Protection Engine, which is used in Microsoft’s built-in security tools, allows a malicious actor to execute arbitrary code with SYSTEM privileges and gain full control over the system.

The vulnerability of the Microsoft Malware Protection Engine, which is used in Microsoft’s built-in security mechanisms, relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with SYSTEM privileges and...

Input validation

A vulnerability in Sierra Wireless AirLink GX400, GX440, ES440, and LS300 routers with firmware before 4.4.5 and GX450, ES450, RV50, RV50X, MP70, and MP70E routers with firmware before 4.9 could allow an authenticated remote attacker to execute arbitrary code and gain full control of an affected...

Default configuration

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...

CVE-2018-7533

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...

CVE-2018-7533: Incorrect Default Permissions

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...

Juniper Networks NorthStar Controller Application Information Disclosure Vulnerability

Juniper Networks NorthStar Controller Application is a traffic planning controller from Juniper Networks, Inc. The controller optimizes service provider transport networks by establishing open industry standard protocols. An information disclosure vulnerability exists in Juniper Networks NorthSta...

Microsoft Edge browser vulnerability, allowing a hacker to execute arbitrary code

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption in such a way that they can execute arbitrary code within the context of the current user. A successful...

Multiple Trend Micro Product DLL Load Local Code Injection Vulnerabilities

Trend Micro Maximum Security and others are antivirus programs from Trend Micro. A local code injection vulnerability exists in multiple Trend Micro products. A local attacker can exploit this vulnerability to execute arbitrary code in the context of a system running in an affected program to gai...

Microsoft Windows Graphics Remote Code Execution Vulnerability

Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability in the Auxiliary Functions Driver AFD allows for an increase in privilege levels. Exploiting this vulnerability enables a malicious individual to execute arbitrary code and gain full control over the system. After that, they can install programs, view, modify, or delete data, as...

The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in the Windows event log system and is related to the processing of specially crafted files. Exploiting this vulnerability enables remote execution of code provided that the user opens a specially crafted event log file. If the user...

The vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability in GDI+, related to the processing of specially crafted images, allows for remote execution of code provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...

The vulnerability in Microsoft.NET Framework software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in the Microsoft .NET Framework. This vulnerability is related to incorrect handling of localized resource identifiers. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then...

Vulnerability of Microsoft Office Web Apps, which allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability of Microsoft Office Web Apps allows for the execution of code remotely. If a user with administrative privileges accesses the system, a malicious individual can gain full control over the system. They can install programs, view, modify, or delete data, as well as create new...

The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...

The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...

Vulnerability of Microsoft Office software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...

The vulnerability in Microsoft Publisher’s software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in Microsoft Publisher. This vulnerability is related to the processing of specially crafted files. Exploiting this vulnerability enables a malicious individual to execute arbitrary code with the privileges of the current user. If a...

Vulnerability of Microsoft Word software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information

A vulnerability that allows for remote execution of code exists in Microsoft Office and is related to the processing of certain properties of Microsoft Word files. If a user with administrative privileges accesses the system, a malicious individual can gain full control over the system. They can...