2378 matches found
Security feature bypass
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard...
CVE-2018-8117
CVE-2018-8117 affects the Microsoft Wireless Keyboard 850, described as a security feature bypass where an attacker could reuse an AES encryption key to read keystrokes or inject keystrokes into other keyboards. The root cause, per Microsoft, is insufficient per-device keying, enabling an attacke...
CVE-2018-8117
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices, aka "Microsoft Wireless Keyboard...
Vulnerability Spotlight: Multiple Simple DirectMedia Layer Vulnerabilities
Discovered by Lilith Wyatt of Cisco Talos Overview Talos is disclosing several vulnerabilities identified in Simple DirectMedia Layer's SDL2Image library that could allow code execution. Simple DirectMedia Layer is a cross-platform development library designed to provide low level access to audio...
Microsoft Fixes 66 Bugs in April Patch Tuesday Release
Microsoft’s April Patch Tuesday release includes fixes for 66 bugs, 24 of which are rated critical. Notable is Microsoft’s disclosure of a publicly known SharePoint elevation of privilege bug CVE-2018-1034, rated important, which has no fix but has not been publicly exploited. Microsoft SharePoin...
Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices. An attacker would first have to...
KLA11895 SB vulnerability in Microsoft Device
A security feature bypass vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2018-8117 Related products Microsoft-Windows CVE list CVE-2018-8117 high KB list Solution Install necessary updates from t...
Microsoft Wireless Keyboard CVE-2018-8117 Local Security Bypass Vulnerability
Description Microsoft Wireless Keyboard is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. Technologies Affected Microsoft Wireless Keyboard 850...
Intel removes remote keyboard app for Android rather than fixing its flaws
By Uzair Amir Critical Flaws in Intel’s Remote Keyboard App for Android Lead This is a post from HackRead.com Read the original post: Intel removes remote keyboard app for Android rather than fixing its flaws...
March 13, 2018—KB4088787 (OS Build 14393.2125 and 14393.2126)
None None...
March 13, 2018—KB4088782 (OS Build 15063.966 and 15063.968)
None None...
Intel Tells Remote Keyboard Users to Delete App After Critical Bug Found
Intel said Tuesday it was putting the kibosh on a popular Android and iOS app called Intel Remote Keyboard after researchers discovered that local attackers can inject keystrokes into a remote keyboard session when in use. The Intel Remote Keyboard product is an Android and iOS app that works in...
CVE-2017-13284
In configsetstring of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...
CVE-2017-13284
In configsetstring of config.cc, it is possible to pair a second BT keyboard without user approval due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...
Intel Remote Keyboard Elevation of Privilege Vulnerability
Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. A local attacker could exploit the vulnerability to inject keystrokes int...
Intel Remote Keyboard elevation of privilege vulnerability (CNVD-2018-08319)
Intel Remote Keyboard is an application that allows you to connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. An attacker can exploit the vulnerability to inject keystrokes as a local...
Intel Remote Keyboard elevation of privilege vulnerability (CNVD-2018-08320)
Intel Remote Keyboard is an application that lets you connect to a supported PC and control keyboard and mouse input from your smartphone screen. An elevation of privilege vulnerability exists in Intel Remote Keyboard. A local attacker could exploit this vulnerability to execute arbitrary code as...
CVE-2018-3645
Escalation of privilege in all versions of the Intel Remote Keyboard allows a local attacker to inject keystrokes into another remote keyboard session...