2948 matches found
KB4577586: Update for the removal of Adobe Flash Player: October 27, 2020
None None...
KLA11981 ACE vulnerability in Microsoft Windows
A remote code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17022 Related products Microsoft-Windows Microsoft-Windows-10 CVE list CVE-2020-17022 critical KB list Solution Install...
October 13, 2020—KB4577668 (OS Build 17763.1518) - EXPIRED
None None...
Description of the security update for Office Online Server: October 13, 2020
None None...
October 13, 2020—KB4579311 (OS Build 19041.572)
None None...
October 13, 2020—KB4580387 (Security-only update)
None None...
October 13, 2020—KB4577671 (OS Builds 18362.1139 and 18363.1139) - EXPIRED
None None...
October 13, 2020—KB4580378 (Monthly Rollup)
None None...
October 13, 2020—KB4580385 (Security-only update)
None None...
October 13, 2020—KB4580370 (OS Build 15063.2525)
None None...
Servicing stack update for Windows 10, version 1809: October 13, 2020
None None...
KLA11975 OSI vulnerability in Microsoft Exchange Server
An information disclosure vulnerability was found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2020-16969 Related products Microsoft-Exchange-Server CVE list CVE-2020-16969 high KB list 4581424 Solution Insta...
Servicing stack update for Windows 10, version 1903 and 1909: October 13, 2020
None None...
DST correction in Windows for the Fiji Islands: October 13, 2020
None None...
Servicing stack update for Windows 10, version 1803: October 13, 2020
None None...
KLA11972 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Dynamics 365 Commerce can be exploited remotely via...
webkitgtk: Incorrect state management leading to universal cross-site scripting
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, Safari 13.0.3, iTunes for Windows 12.10.2, iCloud for Windows 11.0. Processing maliciously crafted web content may lead to universal cross site scripting...
webkitgtk: Type confusion leading to arbitrary code execution
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. A remote attacker may be able to cause arbitrary code execution...
Microsoft Windows Update Orchestrator Unchecked ScheduleWork Call
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/exploit/exe' require 'msf/core/post/windows/registry'...
CVE-2019-16000
A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...