919 matches found
August 11, 2020—KB4571702 (Security-only update)
None None...
August 11, 2020—KB4571736 (Monthly Rollup)
None None...
Microsoft Addresses RCE and Spoofing Vulnerabilities Under Active Exploitation
Microsoft has released security updates to address two vulnerabilities—CVE-2020-1380 and CVE-2020-1464—that are being actively exploited. CVE-2020-1380 is a remote code execution vulnerability affecting Internet Explorer 11, and CVE-2020-1464 is a spoofing vulnerability that affects multiple...
July 14, 2020—KB4565540 (Security-only update)
None None...
July 14, 2020—KB4565535 (Security-only update)
None None...
Xiaomi: DOM-based XSS in d.miwifi.com on IE 11
There is a DOM based XSS on d.miwifi.com but it only works on IE 11...
May 12, 2020—KB4556840 (Monthly Rollup)
None None...
April 14, 2020—KB4550917 (Monthly Rollup)
None None...
Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014
Windows RT 8.1, Windows 8.1, and Windows Server 2012 R2 update: April 2014 Important When you install this update 2919355 from Windows Update, updates 2932046, 2937592, 2938439, 2934018, and 2959977 are included in the installation. Important This update 2919355 replaces update 2883200. You don't...
Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (ADV200001)
This host is missing a critical security update according to Microsoft advisory ADV200001. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later...
CVE-2019-18652
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
Design/Logic Flaw
A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and...
Mapbox: Stored XSS | api.mapbox.com | IE 11 | Styles name
On December 24, 2019, user @renekroka reported a stored XSS injection vulnerability on api.mapbox.com that affected users in Internet Explorer 11. An attacker could store XSS injections on Mapbox servers, and then exploit them in IE11 due to JSON responses not including the X-Content-Type-Options...
KLA11619 ACE vulnerability in Microsoft Internet Explorer
A remote code execution vulnerability was found in Microsoft Internet Explorer. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1485 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More...
Microsoft Internet Explorer Scripting Engine CVE-2019-1429 Remote Memory Corruption Vulnerability
Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Internet Explorer 9, 10, and 11 are...
Microsoft Edge and Internet Explorer CVE-2019-1357 Spoofing Vulnerability
Description Microsoft Edge and Internet Explorer are prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected...
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522011)
This host is missing a critical security update according to Microsoft KB4522011 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522012)
This host is missing a critical security update according to Microsoft KB4522012 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522014)
This host is missing a critical security update according to Microsoft KB4522014 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Microsoft Windows Scripting Engine Memory Corruption Vulnerability (KB4522016)
This host is missing a critical security update according to Microsoft KB4522016 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...