3781 matches found
CVE-2023-33131
CVE-2023-33131 is a Microsoft Outlook remote code execution vulnerability. Connected sources confirm affected product is Outlook (Office family) and describe exploitation via a malicious Word file delivered to Outlook users, with the exploit code example showing an AutoOpen macro invoking cmd.exe...
Microsoft Outlook Remote Code Execution Vulnerability
...
Description of the security update for Outlook 2016: June 13, 2023 (KB5002387)
None None...
Description of the security update for Outlook 2013: June 13, 2023 (KB5002382)
Description of the security update for Outlook 2013: June 13, 2023 KB5002382 Summary This security update resolves a Microsoft Outlook remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-33131. Note: To apply this...
PT-2023-3524 ¡ Microsoft ¡ Outlook
Name of the Vulnerable Software and Affected Versions: Microsoft Outlook affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. This can enable an attacker to impact the system. Recommendations: At th...
Microsoft Outlook ĺŽĺ ¨ćźć´
Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Office Outlook. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Microsoft Office 2019 for 32-bit...
Security Updates for Outlook (June 2023)
The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for...
KLA50318 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...
Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts
An unknown cybercrime threat actor has been observed targeting Spanish- and Portuguese-speaking victims to compromise online banking accounts in Mexico, Peru, and Portugal. "This threat actor employs tactics such as LOLBaS living-off-the-land binaries and scripts, along with CMD-based scripts to...
New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America
Spanish-speaking users in Latin America have been at the receiving end of a new botnet malware dubbed Horabot since at least November 2020. "Horabot enables the threat actor to control the victim's Outlook mailbox, exfiltrate contacts' email addresses, and send phishing emails with malicious HTML...
New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America
Spanish-speaking users in Latin America have been at the receiving end of a new botnet malware dubbed Horabot since at least November 2020. "Horabot enables the threat actor to control the victim's Outlook mailbox, exfiltrate contacts' email addresses, and send phishing emails with malicious HTML...
CVE-2022-35742
Microsoft Outlook Denial of Service Vulnerability...
CVE-2022-35742
Microsoft Outlook Denial of Service Vulnerability...
CVE-2022-35742
Microsoft Outlook Denial of Service Vulnerability...
Denial of service
Microsoft Outlook Denial of Service Vulnerability...
CVE-2022-35742 Microsoft Outlook Denial of Service Vulnerability
...
CVE-2022-35742
CVE-2022-35742 is a Microsoft Outlook Denial of Service vulnerability. Public sources (CVE entry, MSRC update page, and thirdâparty summaries) describe it as a DoS that can crash the Outlook client when processing a crafted message. The vulnerability is reported to be exploitable via networkâdeli...
CVE-2022-35742 Microsoft Outlook Denial of Service Vulnerability
...
Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft
Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections on targeted machines. The vulnerability, tracked as CVE-2023-29324 CVSS score: 6.5, has been described as a security feature bypass. It w...
Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft
Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections on targeted machines. The vulnerability, tracked as CVE-2023-29324 CVSS score: 6.5, has been described as a security feature bypass. It w...