3676 matches found
CVE-2024-29210
A local privilege escalation LPE vulnerability has been identified in Phish Alert Button for Outlook PAB, specifically within its configuration management functionalities. This vulnerability allows a regular user to modify the application's configuration file to redirect update checks to an...
CVE-2024-29210
A local privilege escalation LPE vulnerability has been identified in Phish Alert Button for Outlook PAB, specifically within its configuration management functionalities. This vulnerability allows a regular user to modify the application's configuration file to redirect update checks to an...
CVE-2024-29209
A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. The vulnerability arises from the application's failure to securely verify the authenticity and...
PT-2024-22812 · Unknown · Phish Alert Button For Outlook
Name of the Vulnerable Software and Affected Versions: Phish Alert Button for Outlook affected versions not specified Description: A local privilege escalation issue has been identified in the configuration management functionalities of Phish Alert Button for Outlook. Recommendations: At the...
May 7, 2024, update for Outlook 2016 (KB5002593)
None None...
Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities
Czechia and Germany on Friday revealed that they were the target of a long-term cyber espionage campaign conducted by the Russia-linked nation-state actor known as APT28, drawing condemnation from the European Union E.U., the North Atlantic Treaty Organization NATO, the U.K., and the U.S. The Cze...
Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware
The Russia-linked nation-state threat actor tracked as APT28 weaponized a security flaw in the Microsoft Windows Print Spooler component to deliver a previously unknown custom malware called GooseEgg. The post-compromise tool, which is said to have been used since at least June 2020 and possibly ...
The vulnerability of the Microsoft Outlook email client for Windows operating systems, which allows attackers to perform spear-phishing attacks
The vulnerability of the Microsoft Outlook email client for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks by sending specially crafted email messages...
PT-2024-6169 · Microsoft · Outlook
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook version 16.83.3 Description: A library injection vulnerability exists in Microsoft Outlook. A specially crafted library can leverage Outlook's access privileges, leading to a permission bypass. A malicious application could...
Security Updates Outlook for Windows (April 2024)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by a spoofing vulnerability. External attackers could send specially crafted emails that will cause a connection from the victim to an untrusted location of attackers' control...
Microsoft Outlook for Windows Spoofing Vulnerability
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. Microsoft Outlook has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...
April’s Patch Tuesday Brings Record Number of Fixes
If only Patch Tuesdays came around infrequently -- like total solar eclipse rare -- instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to eclipse the number of vulnerabilities fixed in this months patch batch -- a record 147...
CVE-2024-20670
Outlook for Windows Spoofing Vulnerability...
CVE-2024-20670
Outlook for Windows Spoofing Vulnerability...
CVE-2024-20670 Outlook for Windows Spoofing Vulnerability
...
CVE-2024-20670
CVE-2024-20670 affects Outlook for Windows and is described as a spoofing vulnerability in the Outlook client. The vulnerability can be exploited by sending a crafted email that coerces a user to interact, potentially leaking the user’s Net-NTLMv2 credentials and enabling authentication to an att...
CVE-2024-20670 Outlook for Windows Spoofing Vulnerability
...
Outlook for Windows Spoofing Vulnerability
...
KLA65510 Multiple vulnerabilities in Microsoft Outlook
A spoofing vulnerability was found in Microsoft Outlook. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-20670 Related products Microsoft-Outlook Microsoft-Windows CVE list CVE-2024-20670 critical KB list Solution Install necessary updates from...
Microsoft Outlook 安全漏洞
Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. Microsoft Outlook has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...