3674 matches found
Russian APT28 Runs Credential-Stealing Campaign Targeting Energy and Policy Organizations
Russian state-sponsored threat actors have been linked to a fresh set of credential harvesting attacks targeting individuals associated with a Turkish energy and nuclear research agency, as well as staff affiliated with a European think tank and organizations in North Macedonia and Uzbekistan. Th...
CVE-2007-4040
Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command...
CVE-2022-27105
InMailX Outlook Plugin 3.22.0101 is vulnerable to Cross Site Scripting XSS. InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users...
CVE-2019-12914
Redbrick Shift through 3.4.3 allows an attacker to extract authentication tokens of services such as Gmail, Outlook, etc. used in the application...
The State of Cybersecurity in 2025: Key Segments, Insights, and Innovations
Featuring: Cybersecurity is being reshaped by forces that extend beyond individual threats or tools. As organizations operate across cloud infrastructure, distributed endpoints, and complex supply chains, security has shifted from a collection of point solutions to a question of architecture,...
Microsoft Outlook Resource Management Error Vulnerability
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A security vulnerability exists in Microsoft Outlook. An attacker could exploit the vulnerability to remotely execute code...
Security Updates for Outlook (December 2025)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2025-62562
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
Microsoft Patch Tuesday for December 2025 — Snort rules and prominent vulnerabilities
The Patch Tuesday for December of 2025 includes 57 vulnerabilities, including two that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the two "critical" vulnerabilities is "less likely." CVE ‑2025‑62562 i...
Microsoft Patch Tuesday, December 2025 Edition
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already being exploited, as well as two publicly disclosed vulnerabilities. Despite releasing a...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and potentially gain access to sensitive data. Successful exploitation requires the malicious...
CVE-2025-62562
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
CVE-2025-62562
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
CVE-2025-62562 Microsoft Outlook Remote Code Execution Vulnerability
...
CVE-2025-62562 Microsoft Outlook Remote Code Execution Vulnerability
...
EUVD-2025-202244
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
CVE-2025-62562
CVE-2025-62562 is a Microsoft Outlook remote code execution vulnerability identified in Office Outlook. The connected sources describe it as a use-after-free in Outlook, enabling an attacker to execute arbitrary code locally. Affected product: Microsoft Outlook (part of Microsoft Office). Underly...
Description of the security update for SharePoint Server 2019: December 9, 2025 (KB5002816)
None None...