3822 matches found
Flaw in Microsoft Outlook Lets Hackers Easily Steal Your Windows Password
A security researcher has disclosed details of an important vulnerability in Microsoft Outlook for which the company released an incomplete patch this month—almost 18 months after receiving the responsible disclosure report. The Microsoft Outlook vulnerability CVE-2018-0950 could allow attackers ...
Microsoft Outlook retrieves remote OLE content without prompting
Overview When a Rich Text RTF email is previewed in Microsoft Outlook, remotely-hosted OLE content is retrieved without requiring any additional user interaction. This can leak private information including the user's password hash, which may be cracked by an attacker. Description Microsoft Outlo...
March 13, 2018—KB4088786 (OS Build 10240.17797)
None None...
MS08-039: Outlook Web Access for Exchange Server Privilege Escalation (Uncredentialed)
The remote host is running a version of Outlook Web Access OWA for Exchange Server that is vulnerable to multiple cross-site scripting issues in the HTML parser and Data validation code. These vulnerabilities may allow an attacker to elevate his privileges by convincing a user to open a malformed...
The vulnerability of the Microsoft Office software package and the Microsoft Outlook email client arises from an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office software and the Microsoft Outlook email client arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Vulnerability of the Microsoft Outlook client, the Microsoft Office suite of programs, and the Microsoft Office Word Viewer, caused by an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client, the Microsoft Office suite of programs, and the Microsoft Office Word Viewer are caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...
The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted email message...
The vulnerability of the Microsoft Outlook email client, related to deficiencies in access control, allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Outlook email client is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...
Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2018-05886)
Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. The vulnerability can be exploited to disclose...
Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2018-05891)
Microsoft Exchange Server 2016 is a set of email service programs from Microsoft USA, which provides email access, storage, forwarding, voice mail, email filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server 2016 Cumulative Update 7 and Update 8. An...
Microsoft Exchange Outlook Web Access Elevation of Privilege Vulnerability
Microsoft Exchange Server 2010 SP3 and so on are all the e-mail service program of the American Microsoft Microsoft company, which provides mail access, storage, forwarding, voice mail, mail filtering and screening, etc. Exchange Outlook Web Access OWA is one of the Web client Exchange Outlook We...
CVE-2018-0940
Microsoft Exchange Outlook Web Access OWA in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2016...
Privilege escalation
Microsoft Exchange Outlook Web Access OWA in Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2016...
Description of the security update for Microsoft Exchange: March 13, 2018
None None...
Microsoft Exchange Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly sanitize links presented to users. An attacker who successfully exploited this vulnerability could override the OWA interface with a fake login page and attempt to trick the user into...
Microsoft Exchange Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that Microsoft Exchange Server handles importing data. If an impacted user is using Microsoft Exchange Outlook Web Access OWA, the vulnerability could allow an attacker to discover sensitive information that should otherwise not be...
Microsoft Exchange Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that Microsoft Exchange Server handles URL redirects. If an impacted user is using Microsoft Exchange Outlook Web Access OWA Light, the vulnerability could allow an attacker to discover sensitive information that should otherwise not be...
KLA11212 Multiple vulnerabilities in Microsoft Exchange Server
Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to obtain sensitive information and gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in way that Microsoft...
Gemalto SafeNet Authentication Service for Outlook Web App Agent Elevation of Privilege Vulnerability
Gemalto SafeNet Authentication Service for Outlook Web App Agent is a SafeNet Authentication Service agent for Outlook applications from Gemalto USA. A security vulnerability exists in Gemalto SafeNet Authentication Service for Outlook Web App Agent, which stems from the program's use of weak...
CVE-2015-7962
SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, which allows local users to gain privileges by modifying an executable module...