45 matches found
Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer
A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what's an advanced attack targeting users in Europe, the U.S., and Latin America. "DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF...
Zoom VDI Meeting Client < 5.13.1 Vulnerability (ZSB-23001)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.3., or the version of Zoom VDI isntalled on the remote host is prior to 5.13.1. It is, therefore, affected by a the Information Disclosure vulnerability as referenced in the ZSB-23001 advisory. - Zoom for Window...
Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 - Spoofing Vulnerability
Title: Microsoft-Edge-Chromium-based-Webview2-1.0.1661.34-Spoofing-Vulnerability Author: nu11secur1ty Date: 04.10.2023 Vendor: https://developer.microsoft.com/en-us/ Software: https://developer.microsoft.com/en-us/microsoft-edge/webview2/ Reference:...
Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 - Spoofing
Title: Microsoft-Edge-Chromium-based-Webview2-1.0.1661.34-Spoofing-Vulnerability Author: nu11secur1ty Date: 04.10.2023 Vendor: https://developer.microsoft.com/en-us/ Software: https://developer.microsoft.com/en-us/microsoft-edge/webview2/ Reference:...
One client failed on installing CWA due to it failed detecting the Edge Webview2 installation
One client failed on installing CWA in an intranet environment due to it failed detecting the Edge Webview2 installation.Manually install Webview2 with full-blown installer again still can't fix this issue...
The vulnerability of the Webview2 control in the Microsoft Edge browser allows attackers to perform spoofing attacks.
The vulnerability of the Webview2 control in the Microsoft Edge browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...
CVE-2023-22880
Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitte...
Information disclosure
Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitte...
CVE-2023-22880: Exposure of Sensitive Information to an Unauthorized Actor
Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitte...
CVE-2023-22880
CVE-2023-22880 affects Zoom client on Windows: Zoom for Windows prior to 5.13.3, Zoom Rooms for Windows prior to 5.13.5, and Zoom VDI for Windows prior to 5.13.1. The vulnerability is an information disclosure caused by a Microsoft Edge WebView2 runtime update that sent text to Microsoft's online...
CVE-2023-22880 Information Disclosure in Zoom for Windows Clients
Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitte...
Zoom Client 安全漏洞
Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.13.3, Zoom Rooms for Windows clients versions prior to 5.13.5, and Zoom VDI for Windows clients versions prior to 5.13.1, whic...
CVE-2023-24892
Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...
CVE-2023-24892
Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...
Spoofing
Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...
CVE-2023-24892 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
...
CVE-2023-24892
CVE-2023-24892 affects Microsoft Edge (Chromium-based) using the WebView2 control. The vulnerability is a spoofing issue that can enable spoofed user-interface behavior, as described in multiple sources (Edge/WebView2 spoofing entries and exploitation references). The impact is consistent with a ...
CVE-2023-24892 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
...
