January 12, 2021—KB4599208 (OS Build 15063.2614)

None None...

A week in security (January 4 – January 10)

Last week on Malwarebytes Labs, we released survey results about VPN usage and found that 36 percent of our respondents use it. We also talked about Adobe Flash Player reaching its end of life—meaning, Adobe wont be supporting the updating and patching of its Flash Player software; covered the...

Adobe Flash Player reaches end-of-life

“What now? My farm is no longer working. Can you have a look, honey?” Like millions of other people my wife likes to play online browser games. You know, the ones that don’t require a fast connection because your virtual life is not in constant danger, and an occasional harvest is enough to make...

Information Disclosure

Adobe Flash Player is vulnerable to information disclosure. An attacker can make use of Same Origin Policy Bypass vulnerability to access critial information...

Adobe Flash Player Reaches End of Life on December 31, 2020

In July 2017, Adobe announced that Adobe Flash Player will reach “End of Life” EOL on Thursday, December 31, 2020. After this date, Adobe Flash Player will no longer be supported or distributed by Adobe. Adobe says that once Flash reaches its EOL date, there will be no further updates or security...

Serious Vulnerabilities in Dualog Connection Suite

TL;DR The flaws found in this maritime comms and connection suite were many, and not insignificant: Directory traversal 2FA challenge/response is performed in a client-side application Default install password SQL injection User data leakage Easily brute forcible password hashes Introduction Duri...

Patch Tuesday, Good Riddance 2020 Edition

Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load. Nine of the 58 security vulnerabilities addressed this month earned Microsofts most-dire "critical" label, meaning they can be abused by malware or miscreants to...

December 8, 2020—KB4592446 (OS Build 17134.1902) - EXPIRED

None None...

December 8, 2020—KB4592438 (OS Builds 19041.685 and 19042.685)

None None...

December 8, 2020—KB4592440 (OS Build 17763.1637) - EXPIRED

None None...

December 8, 2020—KB4592484 (Monthly Rollup)

None None...

December 8, 2020—KB4592468 (Monthly Rollup)

None None...

December 8, 2020—KB4592464 (OS Build 10240.18782) - EXPIRED

None None...

December 8, 2020—KB4592497 (Security-only update)

None None...

December 8, 2020—KB4593226 (OS Build 14393.4104) - EXPIRED

None None...

December 8, 2020—KB4592495 (Security-only update)

None None...

December 8, 2020—KB4592473 (OS Build 15063.2584)

None None...

Adobe Flash Player MediaPlayer Out-Of-Bounds Access Remote Code Execution Exploit

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Microsoft Edge (Chromium) < 87.0.664.41 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 87.0.664.41. It is, therefore, affected by multiple vulnerabilities as referenced in the ADV200002-11-19-2020 advisory. - Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass...

CVE-2019-8075

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user...