Flatpak 路径遍历漏洞

Flatpak is an application virtualization system for Linux desktop application computing environments. flatpak is vulnerable and can be exploited by malicious applications to replace appstream util binaries and potentially perform other malicious operations...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages lies in their authentication mechanisms’ flaws, which allow attackers to bypass security restrictions and gain increased privileges.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deficiencies in authentication mechanisms. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability...

CVE-2022-21867

Windows Push Notifications Apps Elevation of Privilege Vulnerability...

CVE-2022-21867 Windows Push Notifications Apps Elevation of Privilege Vulnerability

...

Description of the security update for Office Web Apps Server 2013: January 11, 2022 (KB5002122)

None None...

Microsoft Office 代码注入漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and version...

KLA20161 ACE vulnerability in Microsoft Apps

Remote code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2023-21780 Related products 3D-Builder CVE list CVE-2023-21780 critical KB list Solution Install necessary updates from the KB section...

PT-2022-1502 · Microsoft · Windows Push Notifications Apps +1

Name of the Vulnerable Software and Affected Versions: Windows Push Notifications Apps affected versions not specified Description: The issue is related to insecure privilege management in the Windows Push Notifications Apps component of the Windows operating system. It allows an attacker to...

Microsoft Excel 缓冲区错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Office Excel. The following products and editions are affected:Microsoft Office 2019 for 32-bit editions,Microsoft Office 2019 for 64-bit...

KLA12414 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft SharePoint Server can be exploited remotely to execute arbitrary...

CVE-2022-22266

Applicable to China models only Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applications to get WiFi information without proper permission...

CVE-2022-22263

Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbitrary activity...

‘Elephant Beetle’ Lurks for Months in Networks

Researchers have identified a threat group that’s been quietly siphoning off millions of dollars from financial- and commerce-sector companies, spending months patiently studying their targets’ financial systems and slipping in fraudulent transactions amongst regular activity. The Sygnia Incident...

The vulnerability of Microsoft Office packages, Microsoft Word, and Microsoft 365 Apps for Enterprise lies in insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft Word, and Microsoft 365 Apps for Enterprise is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2021-37132

PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission...

CVE-2021-37132

PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission...

CVE-2021-37132

PackageManagerService has a Permissions, Privileges, and Access Controls vulnerability .Successful exploitation of this vulnerability may cause that Third-party apps can obtain the complete list of Harmony apps without permission...

CVE-2021-37132

The CVE-2021-37132 issue affects Huawei HarmonyOS: PackageManagerService contains a Permissions, Privileges, and Access Controls vulnerability that allows third‑party apps to obtain the complete list of Harmony apps without permission. This is triggered by improper access controls in the service,...

Android Automotive OS Update Bulletin—January 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-01-05 or later from the January 2023 Android Security Bulletin in addition to all issues in thi...