CVE-2018-0422

A vulnerability in the folder permissions of Cisco Webex Meetings client for Windows could allow an authenticated, local attacker to modify locally stored files and execute code on a targeted device with the privilege level of the user. The vulnerability is due to folder permissions that grant a...

The vulnerability of the Win32k component in Windows operating systems, which allows a hacker to execute arbitrary code

The vulnerability of the Win32k component in Windows operating systems is related to errors in processing embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...

Tor Browser SMB Deanonymization / Information Disclosure

Advisory ID: SGMA18-002 Title: Tor Browser Deanonymization With SMB Product: Tor Browser 8.0, Firefox 62 / 60.2.0esr Vendor: torproject.org, mozilla.org Type: Information Disclosure Risk level: 4 / 5 Credits: [email protected] CVE: CVE-2017-16639 Vendor notification: 2017-11-02...

Microsoft Windows MS XML Remote Code Execution Vulnerability

Microsoft Windows Server 2016 and so on are a series of operating systems released by Microsoft USA.XML Core Services MSXML parser is one of the XML parsers. A remote code execution vulnerability exists in the Microsoft XML Core Services MSXML parser. A remote attacker can exploit this...

Microsoft Windows Device Guard Security Bypass Vulnerability (CNVD-2018-24938)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote security bypass vulnerability exists in Microsoft Windows. An attacker could use this vulnerability to bypass certain security restrictions and perform unauthorized operations. This could...

VulnCheck KEV: CVE-2018-8440

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC...

Vulnerability of Microsoft COM components in Windows operating systems, allowing attackers to execute arbitrary code

The vulnerability of the Microsoft Component Object Model COM in Windows operating systems is related to the restoration of a dubious data structure in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file or script...

The vulnerability of the SettingContent-MS mechanism in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the SettingContent-MS mechanism in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted configuration file...

This Week in Security News: Air Canada and Cryptojacking

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, Air Canada reported a data breach that exposed passport details for more than 20,000 customers on their mobile app. Also, Trend Micro’s...

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of Diagnostics Hub Standard Collector and Visual Studio Standard Collector on Windows operating systems allows a perpetrator to create files

The vulnerability of the Diagnostics Hub Standard Collector and Visual Studio Standard Collector for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to create files at any desired location on the disk using a specially creat...

CVE-2018-8399

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8404...

CVE-2018-8349

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...

CVE-2018-8345

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed, aka "LNK Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8....

EUVD-2018-20000

A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...

Adobe Creative Cloud Desktop Application DLL Load Local Elevation of Privilege Vulnerability

Adobe Creatie Cloud Desktop is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial photography and desig...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14452)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A post-release reuse vulnerability exists in the handling of Circle annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14563)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A post-release reuse vulnerability exists in the handling of Sound annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit this...

Foxit Reader Remote Code Execution Vulnerability (CNVD-2018-14454)

Foxit Reader old name: Foxit PDF Reader is a set of software used to read PDF format files, by Fujian Foxit Software developed by Foxit Reader is a set of free to use the software, the operating system is mainly based on Microsoft Windows, and as long as there is a Win32 implementation of the...

Foxit Reader Memory Misreference Vulnerability (CNVD-2018-14150)

Foxit Reader for Windows is China's Foxit Foxit Software Corporation, a Windows-based platform for PDF document reader. A memory misreference vulnerability exists in the handling of PolyLine annotations in Foxit Reader 9.1.0.5096 and earlier versions for Windows. A remote attacker can exploit thi...