CVE-2018-8150

A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments, aka "Microsoft Outlook Security Feature Bypass Vulnerability." This affects Microsoft Office...

CVE-2018-8129

Technical details about CVE-2018-8129 are not publicly available in the provided documents; no affected products, impact, or remediation are described beyond the general description. Monitor for updates.

CVE-2018-8150

CVE-2018-8150 affects Microsoft Office/Outlook (notably Outlook in Office 2016 Click-to-Run). Root cause: Outlook attachment block filter mishandles attachments, enabling security feature bypass. In some sources, exploitation could lead to arbitrary command execution; Microsoft released updates t...

CVE-2018-8126

CVE-2018-8126 is a security feature bypass in Internet Explorer 11 where the component fails to validate User Mode Code Integrity (UMCI) policies, enabling a bypass of security controls. The vulnerability’s impact is described as a high-severity security feature bypass with a CVSS v3 base score o...

PT-2018-18459

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A security feature bypass issue exists due to the improper handling of attachments by the Microsoft Outlook attachment block filter. Recommendations At the moment, there is no...

CVE-2018-0958: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-8129,...

CVE-2018-1039: Undefined Security Weakness

A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, aka ".NET Framework Device Guard Security Feature Bypass Vulnerability." This affects Microsoft .NET Framework 4.7.1, Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5,...

CVE-2018-8126: Undefined Security Weakness

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11...

CVE-2018-8129: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958,...

CVE-2018-8150: Undefined Security Weakness

A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments, aka "Microsoft Outlook Security Feature Bypass Vulnerability." This affects Microsoft Office...

Microsoft Windows Security Feature Bypass Vulnerability (CNVD-2018-10984)

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. A security feature bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass the User Mode Code Integrity UMCI policy on...

CVE-2018-8112: Origin Validation Error

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge...

CVE-2018-8132: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958,...

Microsoft .NET Framework Security Feature Bypass And DoS Vulnerabilities (KB4095875)

This host is missing an important security update according to Microsoft KB4095875 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Office 2016 Click-to-Run (C2R) Multiple Vulnerabilities (May 2018)

This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2018-0854: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0958,...

Description of the Security and Quality Rollup for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 SP2 (KB 4096495)

Description of the Security and Quality Rollup for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 SP2 KB 4096495 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components...

Description of the Security Only update for .NET Framework 3.5 SP1 for Windows 8.1 and Server 2012 R2 (KB 4095515)

Description of the Security Only update for .NET Framework 3.5 SP1 for Windows 8.1 and Server 2012 R2 KB 4095515 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components process XML documents...

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB 4095872)

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 KB 4095872 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 for Windows Server 2012 KB 4291495. This update w...

Description of the Security Only update for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 (KB 4095513)

Description of the Security Only update for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 KB 4095513 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components process XML documents...