Kernel: page cache side channel attacks

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...

Win32k Unauthorized Access

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Win32k Privilege Escalation

The vulnerability of the Win32k component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

Kernel: page cache side channel attacks

A new software page cache side channel attack scenario was discovered in operating systems that implement the very common 'page cache' caching mechanism. A malicious user/process could use 'in memory' page-cache knowledge to infer access timings to shared memory and gain knowledge which can be us...

Citrix Provisioning Service Target Device compatibility with Hyper V Generation 2 Virtual Machines.

The following table shows which 64-bit and 32-bit versions of Windows you can use as a guest operating system for generation 1 and generation 2 virtual machines. 64-bit versions of Windows| Generation 1| Generation 2 ---|---|--- Windows Server 2019| ✔| ✔ Windows Server 2016| ✔| ✔ Windows Server...

FreeBSD -- Machine Check Exception on Page Size Change

Intel discovered a previously published erratum on some Intel platforms can be exploited by malicious software to potentially cause a denial of service by triggering a machine check that will crash or hang the system. Malicious guest operating systems may be able to crash the host...

Persistence – Accessibility Features

The accessibility features provide additional options on screen keyboards, magnifier, screen reading etc. that could assist people with disabilities to use Windows operating systems easier. However, this functionality can be abused to achieve persistence on a host that RDP is enabled and...

Microsoft Guidance for Vulnerability in Trusted Platform Module (TPM)

Executive Summary This advisory addresses CVE-2019-16863. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key confidentiality protection for a specific algorithm ECDSA. It is important to note that this is a TPM firmware vulnerability, an...

WebKit Component Memory Corruption Vulnerability in Multiple Apple Products (CNVD-2019-46969)

Apple iOS is an operating system developed for mobile devices.Apple tvOS is an operating system for smart TVs.Apple iPadOS is an operating system for iPad tablets.WebKit is one of the web browser engine components. A security vulnerability exists in the WebKit component of several Apple products...

Multiple Apple Products File System Events Component Memory Corruption Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. file System Events is a file system event reporting component. File System Events is a file system event reporting component. A security...

Facebook Sues Israeli NSO Spyware Firm For Hacking WhatsApp Users

Finally, for the very first time, an encrypted messaging service provider is taking legal action against a private entity that has carried out malicious attacks against its users. Facebook filed a lawsuit against Israeli mobile surveillance firm NSO Group on Tuesday, alleging that the company was...

Persistence – Port Monitors

The print spooler service is responsible for managing printing jobs in Windows operating systems. Interaction with the service is performed through the Print Spooler API which contains a function AddMonitor that can be used to install local port monitors and connects the configuration, data and...

Windows Memory Object Error System Failure

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Xen Denial of Service Vulnerability (CNVD-2019-34764)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by x86 client OS attackers to cause a denial of service or gain privileges...

Xen Denial of Service Vulnerability (CNVD-2019-34759)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by x86 PV client OS attackers to cause a denial of service...

Xen Denial of Service Vulnerability (CNVD-2019-34767)

Xen is an open source virtual machine monitor product. Xen has a denial of service vulnerability that can be exploited by x86 PV client OS attackers to cause a denial of service...

Cisco IOS SIP DoS

The vulnerability of the SIP protocol implementation in Cisco IOS and Cisco IOS XE operating systems is related to the handling of the zero pointer. Exploiting this vulnerability allows a malicious actor to cause service failures by sending specially crafted SIP packets...

DirectWrite Unprotected Access

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

ADFS XSS

The vulnerability of Active Directory Federation Services ADFS on Windows operating systems is related to the lack of security measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform a cross-site scripting attack by sending a specially crafted request...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...