Lucene search
+L

1039 matches found

Qualys Blog
Qualys Blog
added 2017/12/12 7:27 p.m.68 views

December Patch Tuesday: Quiet End to the Year

This December Patch Tuesday is considerably lighter than last month’s patch releases. While only three of the fixes were for Windows operating systems, the majority of the vulnerabilities to pay attention to are Browser/Scripting Engine-based. Overall, this month's updates address are fixes for 3...

9.3CVSS8.5AI score0.45521EPSS
SaveExploits7
ThreatPost
ThreatPost
added 2017/12/12 5:12 p.m.53 views

Microsoft December Patch Tuesday Update Fixes Six Critical Bugs

Microsoft patched 34 vulnerabilities that are part of its December Patch Tuesday release. A total of 20 vulnerabilities were rated critical and another 12 were rated important. Impacted are Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office, SharePoint and Exchange. Notable...

9.3CVSS8.7AI score0.64733EPSS
SaveExploits5References9
ThreatPost
ThreatPost
added 2017/11/15 1:11 p.m.60 views

Microsoft Patches 17-Year-Old Office Bug

Microsoft on Tuesday patched a 17-year-old remote code execution bug found in an Office executable called Microsoft Equation Editor. The vulnerability CVE-2017-11882 was patched as part of Microsoft’s November Patch Tuesday release of 53 fixes. While Microsoft rates the vulnerability only as...

9.3CVSS9.1AI score0.99945EPSS
SaveExploits33References6
ThreatPost
ThreatPost
added 2017/11/14 5:10 p.m.106 views

Microsoft November Patch Tuesday Fixes 20 Critical Vulnerabilities

Microsoft tackled 53 vulnerabilities with today’s Patch Tuesday bulletin. Remote code execution bugs dominated this month’s patches, representing 25 fixes. In total, 20 of Microsoft’s security fixes were rated critical. Notable are four vulnerabilities with public exploits identified by Microsoft...

9.3CVSS0.5AI score0.99945EPSS
SaveExploits51References22
ThreatPost
ThreatPost
added 2017/11/14 12:14 p.m.34 views

Adobe Patches Flash Player, 56 Bugs in Reader and Acrobat

Adobe kicked off today’s Patch Tuesday barrage with a monster update for Acrobat and Reader patching dozens of remote code execution vulnerabilities, along with the near-customary Flash Player update addressing a handful of critical flaws. None of the vulnerabilities patched today are under activ...

10CVSS0.8AI score0.06518EPSS
SaveExploits0References9
Securelist
Securelist
added 2017/10/26 9:00 a.m.477 views

Analyzing an exploit for СVE-2017-11826

The latest Patch Tuesday 17 October brought patches for 62 vulnerabilities, including one that fixed СVE-2017-11826 – a critical zero-day vulnerability used to launch targeted attacks – in all versions of Microsoft Office. The exploit for this vulnerability is an RTF document containing a DOCX...

9.3CVSS7.7AI score0.81288EPSS
SaveExploits3
myhack58
myhack58
added 2017/10/12 12:00 a.m.139 views

Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net

Microsoft on Tuesday's Patch Tuesday on the breath announced a 62 bug. the bug of the patch, which contains a has been applied to the major Office 0-day exploits flaws in the bug, this is by memory of the destruction occasioned by the long-distance code to perform vulnerability flaws bug(...

7.3AI score0.81288EPSS
SaveExploits15
Qualys Blog
Qualys Blog
added 2017/10/10 6:23 p.m.268 views

October Patch Tuesday: 28 Critical Microsoft Vulnerabilities

Today Microsoft released patches covering 62 vulnerabilities as part of October’s Patch Tuesday update, with 30 of them affecting Windows. Patches covering 28 of these vulnerabilities are labeled as Critical, and 33 can result in Remote Code Execution. According to Microsoft, a vulnerability in...

10CVSS8.5AI score0.81288EPSS
SaveExploits4
Talos Blog
Talos Blog
added 2017/10/10 1:25 p.m.123 views

Microsoft Patch Tuesday - October 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 63 new vulnerabilities with 28 of them rated critical and 35 rated important. These vulnerabilities impact Graphic...

10CVSS1.9AI score0.81288EPSS
SaveExploits47
Qualys Blog
Qualys Blog
added 2017/09/12 6:23 p.m.706 views

September Patch Tuesday: 27 Critical Vulnerabilities from Microsoft, plus Critical Adobe Patches

Today Microsoft released a fairly large batch of patches covering 81 vulnerabilities as part of September’s Patch Tuesday update, with 38 of them impacting Windows. Patches covering 27 of these vulnerabilities are labeled as Critical, and 39 can result in Remote Code Execution RCE. According to...

9.3CVSS2.1AI score0.88698EPSS
SaveExploits16
ThreatPost
ThreatPost
added 2017/09/12 3:59 p.m.123 views

Microsoft Patches .NET Zero Day Vulnerability in September Update

An actively exploited zero-day vulnerability tied to Microsoft’s .NET framework is one of 25 critical and 54 important vulnerabilities fixed by Microsoft in its September Patch Tuesday security bulletin. According to Microsoft, the .NET framework vulnerability CVE-2017-8759 allows attackers to...

9.3CVSS1.6AI score0.88698EPSS
SaveExploits16References8
ThreatPost
ThreatPost
added 2017/08/09 5:01 p.m.14 views

SAP Patch Tuesday Update Resolves 19 Flaws, Three High Severity

SAP released 19 patches on Tuesday, fixing a trio of vulnerabilities marked high severity in its business management software. The most pressing fixes are for a directory traversal vulnerability in the company’s Netweaver AS Java Web Container, a code injection vulnerability in its Visual Compose...

8.3AI score
SaveExploits0References5
Krebs on Security
Krebs on Security
added 2017/08/08 8:35 p.m.17 views

Critical Security Fixes from Adobe, Microsoft

Adobe has released updates to fix dozens of vulnerabilities in its Acrobat, Reader and Flash Player software. Separately, Microsoft today issued patches to plug 48 security holes in Windows and other Microsoft products. If you use Windows or Adobe products, it's time once again to get your patche...

6.8AI score
SaveExploits0
rapid7community
rapid7community
added 2017/08/08 8:03 p.m.201 views

Patch Tuesday - August 2017

It was a busy month this month with a total of 48 security issues fixed. All of these have a severity of Critical or Important with Remote Code Execution vulnerabilities again figuring highly, particularly for Microsoft Edge. There were also a few publicly disclosed vulnerabilities that were fixe...

8.5CVSS7.8AI score0.31893EPSS
SaveExploits5
Qualys Blog
Qualys Blog
added 2017/08/08 6:25 p.m.168 views

August Patch Tuesday: 25 critical Microsoft vulnerabilities, 43 for Adobe

Today Microsoft released patches covering 48 vulnerabilities as part of August’s Patch Tuesday update, with 15 of them affecting Windows. Patches covering 25 of these vulnerabilities are labeled as Critical, and 27 can result in Remote Code Execution. According to Microsoft, none of these...

9.3CVSS8.3AI score0.57328EPSS
SaveExploits0
ThreatPost
ThreatPost
added 2017/08/08 5:21 p.m.82 views

Microsoft Patches Critical Windows Search Vulnerability

Microsoft patched more than two dozen remote code execution vulnerabilities today, many of them rated critical. One was a RCE bug that allowed an attacker to take complete control of a server or workstation via Windows Search. The fixes were part of Microsoft’s August Patch Tuesday update that...

9.3CVSS0.9AI score0.57328EPSS
SaveExploits0References17
Talos Blog
Talos Blog
added 2017/08/08 11:30 a.m.126 views

Microsoft Patch Tuesday - August 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 48 new vulnerabilities with 25 of them rated critical, 21 rated important, and 2 rated moderate. These...

9.3CVSS1.8AI score0.72116EPSS
SaveExploits68
rapid7community
rapid7community
added 2017/07/12 1:39 p.m.283 views

Patch Tuesday - July 2017

Most of the critical vulnerabilities patched this month concern client-side systems, with 14 separate Remote Code Execution RCE issues being addressed for the Microsoft Edge browser and five for Internet Explorer. One of the three Adobe Flash Player vulnerabilities being patched is also a critica...

10CVSS8AI score0.26161EPSS
SaveExploits0
Qualys Blog
Qualys Blog
added 2017/07/11 6:32 p.m.265 views

July Patch Tuesday: 19 Critical Vulnerabilities from Microsoft, plus Critical Adobe Patches

Today Microsoft released patches covering 54 vulnerabilities as part of July’s Patch Tuesday update, with 26 of them affecting Windows. Patches covering 19 of these vulnerabilities are labeled as Critical, all of which can result in Remote Code execution. According to Microsoft, none of these...

10CVSS8.8AI score0.26161EPSS
SaveExploits0
ThreatPost
ThreatPost
added 2017/07/11 4:36 p.m.58 views

Microsoft Patch Tuesday Update Fixes 19 Critical Vulnerabilities

Microsoft today released patches for 19 critical vulnerabilities, one of which was publicly known prior to the update. In all, 54 vulnerabilities were patched in Windows, Edge, Internet Explorer, Office and Exchange as part of Microsoft’s monthly Patch Tuesday release; 32 flaws were rated importa...

10CVSS0.2AI score0.50373EPSS
SaveExploits4References12
Rows per page
Query Builder