Mozilla Arbitrary Code Execution / Privilege Escalation Vulnerability

Hi @ll, back in 2015 and 2016, I disclosed several BLOODY beginner's errors alias epic failures in Mozilla's PERMANENTLY vulnerable executable installers for Windows, built by completely incompetent tinkerers: Defense in depth -- the Mozilla way: return and exit codes are dispensable alias and...

Microsoft Windows Update Assistant 安全漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Update Assistant. The following products and editions are affected:Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004 for ARM64-based...

KLA12103 ACE vulnerabilities in Microsoft Exchange Server

Remote code execution vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-26412 CVE-2021-26855 CVE-2021-27078 CVE-2021-27065 CVE-2021-26854 CVE-2021-26857 CVE-2021-26858 Exploitation This...

KB5001079: Servicing stack update for Windows 10: February 12, 2021

None None...

KB5001078: Servicing stack update for Windows 10, version 1607: February 12, 2021

None None...

Microsoft Issues Patches for In-the-Wild 0-day and 55 Others Windows Bugs

Microsoft on Tuesday issued fixes for 56 flaws, including a critical vulnerability that's known to be actively exploited in the wild. In all, 11 are listed as Critical, 43 are listed as Important, and two are listed as Moderate in severity — six of which are previously disclosed vulnerabilities...

2021-02 Cumulative Update for Windows 10 Version 20H2 for x64-based Systems (KB4601319)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

February 9, 2021-KB4601050 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2

None None...

February 9, 2021-KB4601051 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

September 8, 2020—KB4571756 (OS Build 19041.508)

None None...

September 8, 2020—KB4577049 (OS Build 10240.18696)

None None...

September 8, 2020—KB4577066 (Monthly Rollup)

None None...

February 9, 2021—KB4601354 (OS Build 17134.2026) - EXPIRED

None None...

February 9, 2021—KB4601315 (OS Build 18363.1377) - EXPIRED

None None...

February 9, 2021—KB4601319 (OS Builds 19041.804 and 19042.804)

None None...

February 9, 2021—KB4601345 (OS Build 17763.1757) - EXPIRED

None None...

February 9, 2021 Security Update (KB4601317)

None None...

KB4601393: Servicing stack update for Windows 10, version 1809: February 9, 2021

None None...

February 9, 2021 Servicing Stack Update (KB4601394)

None None...

KLA12068 SUI vulnerabilities in Microsoft Exchange Server

A spoofing vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-24085 CVE-2021-1730 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually su...