Microsoft Outlook for Mac Spoofing Vulnerability

...

Outlook for Android Elevation of Privilege Vulnerability

...

CVE-2022-24480 Outlook for Android Elevation of Privilege Vulnerability

...

CVE-2022-44713 Microsoft Outlook for Mac Spoofing Vulnerability

...

KLA20121 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Office Graphics can be exploited remotely ...

Vulnerabilities fixed in Microsoft Office

Vulnerabilities have been fixed in Microsoft Office. The vulnerabilities allow a malicious person to impersonate as another user, to execute arbitrary code under the user's privileges or obtain elevated privileges. To exploit the vulnerabilities marked CVE-2022-44690 and CVE-2022-44693 CVSS 8.8,...

KLA20120 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows Terminal can be exploited remotely to execute...

PT-2022-5888 · Microsoft · Outlook For Mac

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook for Mac affected versions not specified Description: The issue is related to errors in the representation of information by the user interface. It may allow a remote attacker to conduct spoofing attacks using a specially...

CVE-2022-44713 Microsoft Outlook for Mac Spoofing Vulnerability

...

CVE-2022-44713

CVE-2022-44713 is a spoofing vulnerability in Microsoft Outlook for Mac. The connected sources confirm an attacker could impersonate another user via spoofed UI behavior in Outlook for Mac, with the NCSC listing CVSS-related impact as “Pretend to be another user.” Microsoft’s Patch Tuesday cycle ...

Microsoft Outlook 安全漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Outlook. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

Microsoft Outlook 安全漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Outlook. The following products and versions are affected:Microsoft Office LTSC for Mac 2021,Microsoft Office 2019 for Mac...

PT-2022-16709 · Microsoft · Outlook For Android

Name of the Vulnerable Software and Affected Versions: Outlook for Android affected versions not specified Description: The issue is related to an Elevation of Privilege Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details...

CVE-2022-24480

CVE-2022-24480 is an Elevation of Privilege vulnerability affecting Microsoft Outlook for Android. The provided documents identify Outlook for Android as the affected product and classify the issue as an Elevation of Privilege, with a CVSS v3.1 base score of 6.3 (Impact: Confidentiality, Integrit...

CVE-2022-24480 Outlook for Android Elevation of Privilege Vulnerability

...

Cisco Secure Email Gateway Malware Detection Evasion

This report is being published within a coordinated disclosure procedure. The researcher has been in contact with the vendor but not received a satisfactory response within a given time frame. As the attack complexity is low and exploits have already been published by a third party there must be ...

StrelaStealer Malware Hijacking Outlook and Thunderbird Accounts

By Deeba Ahmed Dubbed StrelaStealer, the malware is being distributed through malicious email attachments and targets Spanish-speaking people. This is a post from HackRead.com Read the original post: StrelaStealer Malware Hijacking Outlook and Thunderbird Accounts...

The vulnerability of the Microsoft Exchange Server, related to errors in processing input data in the OWA interface, allows a perpetrator to perform an SSRF attack.

The vulnerability of Microsoft Exchange Server is related to errors in processing input data in the OWA interface. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

Shopify: Shop App - Attacker is able to intercept authorization code during authentication (OAuth) and is able to get access to Microsoft Outlook email account

A vulnerability was discovered in the Shop App's Microsoft Outlook OAuth flow, where a malicious app could intercept the authorization code during authentication due to the use of deep links. This could allow an attacker to gain access to the victim's emails. The issue was mitigated by implementi...

Iranian APT’s new data extraction tool Hyperscrape

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Charming Kitten, an Iranian government-backed threat group, has been employing a new data extraction tool, HYPERSCAPE. It has been used to retrieve data from Microsoft Outlook, Yahoo, and Gmail accounts...