Microsoft Office Security Feature Bypass Vulnerability

...

PT-2021-4164 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system kernel, allowing an attacker to bypass security mechanisms. A security-feature bypass vulnerability...

PT-2021-5657 · Microsoft · Office +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to a security feature bypass in Microsoft Office, which can be exploited by a remote attacker...

Microsoft Office 安全特征问题漏洞

Microsoft Office is a suite of office software developed by Microsoft Corporation based on the Windows operating system.Microsoft Office suffers from a security feature bypass vulnerability. An attacker can exploit this vulnerability to perform certain illegal operations...

Security feature bypass

Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/viewsource.php' which "could" lead to RCE vulnerability...

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2021-31962

Kerberos AppContainer Security Feature Bypass Vulnerability...

CVE-2021-26414

Windows DCOM Server Security Feature Bypass...

Security feature bypass

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2021-31971

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2021-31970 Windows TCP/IP Driver Security Feature Bypass Vulnerability

...

CVE-2021-31970 Windows TCP/IP Driver Security Feature Bypass Vulnerability

...

CVE-2021-31962 Kerberos AppContainer Security Feature Bypass Vulnerability

...

EUVD-2021-13220

Windows DCOM Server Security Feature Bypass...

PT-2021-3283 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in resource release in the TCP/IP driver of Windows operating systems. It may allow an attacker to cause a denial of service. A security-feature bypass...

KLA12198 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information. Below is a complete list of...

Security feature bypass

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

CVE-2021-20178

A flaw was found in ansible module where credentials are disclosed in the console log by default and not protected by the security feature when using the bitbucketpipelinevariable module. This flaw allows an attacker to steal bitbucketpipeline credentials. The highest threat from this vulnerabili...

Patch Tuesday - May 2021

Here we are again with another installment of Patch Tuesday. When compared to the past few months this one feels a bit light both in severity and number of vulnerabilities addressed. Microsoft has only released patches for 55 CVEs this month, less than half of the usual volume, with only 4 of the...

Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical

Microsoft Patch Tuesday – May 2021 Microsoft patched 55 CVEs in their May 2021 Patch Tuesday release, of which 4 are rated as critical severity. Three 0-day vulnerability patches were included in the release. As of this publication date, none have been exploited. Qualys released 12 QIDs on the sa...