189 matches found
May 17, 2018—KB4103722 (OS Build 15063.1112)
None None...
May 8, 2018—KB4103716 (OS Build 10240.17861)
None None...
May 8, 2018—KB4103725 (Monthly Rollup)
None None...
Google to Block Third-Party Software from Injecting Code into Chrome Browser
To improve performance and reduce crashes caused by third-party software on Windows, Google Chrome, by mid-2018, will no longer allow outside applications to run code within its web browser. If you are unaware, many third-party applications, like accessibility or antivirus software, inject code...
Fedora 25 : qt5-qtwebengine (2017-580f91f6b0)
An update of QtWebEngine to the security and bugfix release 5.9.2, including : Chromium Snapshot : - Security fixes from Chromium up to version 61.0.3163.79 Including: CVE-2017-5092, CVE-2017-5093, CVE-2017-5095, CVE-2017-5097, CVE-2017-5099, CVE-2017-5102, CVE-2017-5103, CVE-2017-5107,...
Fedora 26 : qt5-qtwebengine (2017-9a7e562fca)
An update of QtWebEngine to the security and bugfix release 5.9.2, including : Chromium Snapshot : - Security fixes from Chromium up to version 61.0.3163.79 Including: CVE-2017-5092, CVE-2017-5093, CVE-2017-5095, CVE-2017-5097, CVE-2017-5099, CVE-2017-5102, CVE-2017-5103, CVE-2017-5107,...
September 12, 2017—KB4038788 (OS Build 15063.608)
None None...
August 28, 2017—KB4039873 (Update for Preview of Monthly Rollup)
None None...
Microsoft Windows Multiple Vulnerabilities (KB4034668)
This host is missing a critical security update according to Microsoft KB4034668 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4034665)
This host is missing a critical security update according to Microsoft KB4034665 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2017-8591
Windows Input Method Editor IME in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka "Windows IME Remote Code Execution...
Remote code execution
Windows Input Method Editor IME in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an remote code execution vulnerability when it fails to properly handle objects in memory, aka "Windows IME Remote Code Execution...
CVE-2017-8591
The connected CNVD entry for CVE-2017-8591 describes a remote code execution flaw in the Windows Input Method Editor (IME) where memory objects are mishandled. Affected products include Windows platforms listed in the CVE entry (IME component on Windows 8.1, various Windows 10/Server SKUs). The r...
August 8, 2017—KB4034672 (Security-only update)
None None...
Windows IME Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Windows Input Method Editor IME when IME improperly handles parameters in a method of a DCOM class. The DCOM server is a Windows component installed regardless of which languages/IMEs are enabled. An attacker can instantiate the DCOM class and explo...
August 8, 2017—KB4034666 (Security-only update)
None None...
KLA11087 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
Baidu IME Untrusted Search Path Vulnerability
Baidu IME is a Japanese input method from the Chinese company Baidu.Install is one of the installation programs. An untrusted search path vulnerability exists in the installer in Baidu IME 3.6.1.6 and earlier versions. A remote attacker can exploit this vulnerability with a malicious DLL to gain...
Design/Logic Flaw
Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...