Remote code execution

Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Excel 2013 SP1, PowerPoint 2013 SP1, Word 2013 SP1, Excel 2013 RT SP1, PowerPoint 2013 RT SP1, Word 2013 RT SP1, Excel 2016, Word 2016, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 S...

CVE-2016-3281

Microsoft Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka...

CVE-2016-3281

CVE-2016-3281 is a Microsoft Office memory corruption vulnerability affecting Office 2010 SP2, Word 2010 SP2, Word 2013 SP1/RT, Word 2016, Word for Mac 2011, Word 2016 for Mac, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2. The root cause is memory corruptio...

CVE-2016-3282

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

Microsoft Office Web Apps Multiple Vulnerabilities (3170008)

This host is missing a critical security update according to Microsoft Bulletin MS16-088. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Android MediaTek driver boost vulnerability (CNVD-2016-04827)

Android on Android One is an open source Linux-based operating system for Android One smartphones developed by Google and the Open Handset Alliance OHA in the U.S. MediaTek drivers are a MediaTek device-specific component of MediaTek. MediaTek drivers is a MediaTek driver component for MediaTek...

MS16-088: Description of the security update for SharePoint Server 2010 Office Web Apps: July 12, 2016

MS16-088: Description of the security update for SharePoint Server 2010 Office Web Apps: July 12, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

MS16-088: Description of the security update for Office Web Apps Server 2013: July 12, 2016

None None...

Microsoft Office CVE-2016-3281 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

Microsoft Office CVE-2016-3282 Memory Corruption Vulnerability

Description Microsoft Office is prone to a remote memory-corruption vulnerability because it fails to properly handle objects in memory. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in deni...

July 12, 2016 — KB3172985 (OS Build 10586.494)

None None...

CVE-2016-3812

The MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28174833 and MediaTek internal bug ALPS02688832...

CVE-2016-3761

NfcService.java in NFC in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive foreground-application information via a crafted background application, aka internal bug 28300969...

Android Qualcomm elevation of privilege vulnerability

Android is an open source operating system based on Linux. A security vulnerability in Qualcomm on Android allows a remote attacker to exploit the vulnerability to build special applications that can be tricked into parsing by the user and can execute arbitrary code in the kernel context...

The vulnerability of the Microsoft Office Web Apps package allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Office Web Apps software package contains a vulnerability related to errors that occur due to improper processing of specially crafted files. Exploiting this vulnerability can allow an unauthorized attacker to execute arbitrary code with the privileges of the current user...

The vulnerability of the Microsoft Office Web Apps package allows a malicious actor to execute arbitrary code with privileges of the current user.

The Microsoft Office Web Apps software package contains a vulnerability related to errors that occur due to improper processing of specially crafted RTF files. Exploiting this vulnerability could allow an unauthorized intruder to execute arbitrary code with privileges of the current user...

Vulnerability of Microsoft Office Web Apps, which allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability of Microsoft Office Web Apps allows for the execution of code remotely. If a user with administrative privileges accesses the system, a malicious individual can gain full control over the system. They can install programs, view, modify, or delete data, as well as create new...

Vulnerability of Microsoft Office Web Apps software, which allows a malicious actor to compromise protected information

There is a vulnerability in Microsoft Office Web Apps that allows for an increase in privileges levels. Exploiting this vulnerability enables a malicious individual to execute cross-site scripts on a vulnerable system and to run scripts within the context of a legitimate user’s security credentia...

Android Security Bulletin—July 2016Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Alongside the bulletin, we have released a security update to Nexus devices through an over-the-air OTA update. The Nexus firmware images have also been released to the Google Developer site...

HummingBad Android Malware Connected to YiSpecter iOS Attacks

The same group of cybercriminals behind a strain of iOS malware uncovered last year have apparently diversified and now dabble in Android malware. The group, dubbed Yingmob, has been running a malware campaign named HummingBad that controls 10 million Android devices globally and rakes in $300,00...