Lucene search
K

394 matches found

Cvelist
Cvelist
added 2020/07/14 10:54 p.m.16 views

CVE-2020-1465

An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft OneDrive Elevation of Privilege Vulnerability'...

7.8AI score0.00837EPSS
Exploits0References1
ThreatPost
ThreatPost
added 2020/07/14 9:32 p.m.131 views

Microsoft Tackles 123 Fixes for July Patch Tuesday

A critical DNS bug and a publicly known elevation-of-privilege flaw top Microsoft’s July Patch Tuesday list of 123 fixes. The DNS flaw is a remote code-execution bug and is touted as one of the most critical Windows vulnerabilities released this year, earning the highest-severity CVSS score of 10...

10CVSS0.4AI score0.92178EPSS
Exploits21References12
Microsoft KB
Microsoft KB
added 2020/07/14 7:0 a.m.195 views

July 14, 2020—KB4565503 (OS Build 19041.388)

July 14, 2020—KB4565503 OS Build 19041.388 NEW IMPORTANT Starting in July 2020, we will resume non-security releases for Windows 10 and Windows Server, version 1809 and later. There is no change to the cumulative monthly security updates also referred to as the "B" release or Update Tuesday...

9.3CVSS7.4AI score0.75808EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2020/07/14 7:0 a.m.85 views

Microsoft OneDrive Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilit...

7.8CVSS2.9AI score0.00837EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2020/07/14 7:0 a.m.107 views

Description of the security update for SharePoint Enterprise Server 2016: July 14, 2020

Description of the security update for SharePoint Enterprise Server 2016: July 14, 2020 Note: After you install this update, the default setting for a trusted data source and trusted content locations in PerformancePoint Services will change from trust all to trust none. For more information, see...

9.8CVSS7.9AI score0.9603EPSS
Exploits12
Packet Storm
Packet Storm
added 2020/07/10 12:0 a.m.221 views

Microsoft OneDrive 19.232.1124.0010 DLL Hijacking

------------------------------------------------------------------------ Microsoft OneDrive client for Windows Qt QML module hijack ------------------------------------------------------------------------ Yorick Koster, July 2020...

7.4AI score
Exploits0
Veeam
Veeam
added 2020/07/09 12:0 a.m.19 views

Veeam Backup for Microsoft 365 4c cumulative patch KB3222

This patch has been superseded by Veeam Backup for Microsoft 365 4c cumulative patch KB4083. Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 4.0.1.531 prior to installing this cumulative patch KB3222. You can check this under Help About in Veeam Backup for Microso...

6.7AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2020/05/21 12:0 a.m.1 views

The vulnerability of the OneDrive for Windows file sharing service lies in its improper handling of symbolic links, which allows attackers to escalate their privileges.

The vulnerability of the OneDrive for Windows file sharing service is related to the improper handling of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

5.5CVSS7AI score0.00719EPSS
Exploits0References2
Veeam
Veeam
added 2020/05/14 12:0 a.m.18 views

How to configure Veeam Agent with Work or School Account

Article Applicability This article concerns a feature only available in Veeam Agent for Microsoft Windows 5 and older. The option to backup to OneDrive was deprecated in Veeam Agent for Microsoft Windows 6. As an alternative, Veeam Agent for Microsoft Windows 6 has introduced an Object Storage...

6.6AI score
Exploits0Affected Software1
Microsoft KB
Microsoft KB
added 2020/04/21 12:0 a.m.4 views

Description of the Office 2013 update: March 12, 2013

Description of the Office 2013 update: March 12, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains stability and performance improvements. Issu...

6.5AI score
Exploits0
CNVD
CNVD
added 2020/04/16 12:0 a.m.2 views

Microsoft OneDrive for Windows Elevation of Privilege Vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. An elevation of privilege vulnerability exists in Microsoft OneDrive for Windows that stems from the program's inability to properly handle...

5.5CVSS7.1AI score0.00719EPSS
Exploits0References1
NVD
NVD
added 2020/04/15 3:15 p.m.15 views

CVE-2020-0935

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'...

5.5CVSS5.6AI score0.00719EPSS
Exploits0References1
Prion
Prion
added 2020/04/15 3:15 p.m.20 views

Privilege escalation

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'...

2.1CVSS6AI score0.00719EPSS
Exploits0References1
CVE
CVE
added 2020/04/15 3:12 p.m.85 views

CVE-2020-0935

CVE-2020-0935 (OneDrive for Windows Elevation of Privilege) is a local elevation-of-privilege flaw in the OneDrive for Windows Desktop application caused by improper handling of symbolic links. An authenticated, local attacker could run a specially crafted program to overwrite a target file, gain...

5.5CVSS6.9AI score0.00719EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/15 3:12 p.m.21 views

CVE-2020-0935

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'...

6AI score0.00719EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2020/04/14 7:0 a.m.108 views

OneDrive for Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...

5.5CVSS2.4AI score0.00719EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/14 7:0 a.m.292 views

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020 Summary This security update resolves a cross-site-scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request to an affected SharePoint...

8.8CVSS8AI score0.10695EPSS
Exploits0
Microsoft KB
Microsoft KB
added 2020/04/14 7:0 a.m.137 views

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020

Description of the security update for SharePoint Enterprise Server 2016: April 14, 2020 Summary This security update resolves remote code execution vulnerabilities that exists in Microsoft SharePoint if the software does not check the source markup of an application package. This update also...

9.3CVSS8.2AI score0.31213EPSS
Exploits3
Kaspersky
Kaspersky
added 2020/04/14 12:0 a.m.48 views

KLA11745 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft MAU Office can be...

9.3CVSS8.7AI score0.31213EPSS
Exploits3References92
Microsoft KB
Microsoft KB
added 2020/04/13 4:7 a.m.28 views

MS12-051: Vulnerability in Microsoft Office for Mac could allow elevation of privilege: July 10, 2012

Describes the Microsoft Office for Mac 2011 14.2.3 Update that was released on July 10, 2012INTRODUCTIONMicrosoft has released security bulletin MS12-051. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To view the complete...

6.9CVSS6.1AI score0.01645EPSS
Exploits1
Rows per page
Query Builder