The vulnerability of the Microsoft Office Web Apps package allows a remote attacker to execute arbitrary code within the context of the current user account.

The vulnerability of the Microsoft Office Web Apps package is related to errors that occur when working with the W3WP service. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the context of the W3WP service’s security credentials...

The vulnerability of the Microsoft Office Web Apps package allows a remote attacker to execute arbitrary code with privileges of the current user.

The vulnerability of the Office Web Apps Server package, related to errors in processing specially crafted files, allows a malicious actor to execute arbitrary code with the privileges of the current user...

Chinese Ad Firm Infected 85 Million Android Users to Get More Clicks

An Android-based malware campaign has been found to control as many as 85 million Android devices globally and is making its gang an estimated $300,000 per month in fraudulent ad revenue. A Chinese advertising company called Yingmob is responsible for distributing the malware on a massive scale a...

Vulnerability of the Word Viewer program for reading DOC files; Microsoft SharePoint Server corporate application suite; Microsoft Office Web Apps software suite; Microsoft Office Compatibility Pack compatibility suite; Microsoft Word text editor; Microsoft Office software suite, which allows a perpetrator to obtain confidential information from process memory.

The vulnerability in the Word Viewer, a component of the Microsoft SharePoint Server corporate application suite, as well as the Microsoft Office Web Apps and Microsoft Office Compatibility Pack, affects text editors like Microsoft Word. These vulnerabilities stem from a lack of protection for...

This Android Hacking Group is making $500,000 per day

Own an Android smartphone? Hackers can secretly install malicious apps, games, and pop-up adverts on your smartphone remotely in order to make large sums of money. Security researchers at Cheetah Mobile have uncovered one of the world's largest and most prolific Trojan families, infecting million...

Google finally announces Android N's name and It's not Nutella

No, it's not Nutella. Google has finally announced the official name of the latest version of its Android mobile software, codenamed Android N: "Nougat." Yes, the next version of sugary snack-themed Android and the successor to Android Marshmallow will now be known as Android Nougat, the company...

CVE-2016-4086

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

CVE-2016-4086

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

Code injection

Huawei HiSuite In China before 4.0.4.301 and Out of China before 4.0.4.204ove allows remote attackers to install arbitrary apps on a connected phone via unspecified vectors...

CVE-2016-4086

CVE-2016-4086 affects Huawei HiSuite (China: before 4.0.4.301; outside China: before 4.0.4.204_ove). The vulnerability is described as a permission control flaw in HiSuite that allows an unauthenticated attacker on the local network (LAN) to remotely install arbitrary apps on a connected Huawei p...

China Orders Apple to Monitor App Store Users and Track their Identities

China has long been known for its strict censorship which makes it difficult for foreign technology companies to do business in the world’s most populous country of over 1.35 billion people. Now, the new law issued by the Chinese government will expand its strict Internet monitoring efforts into...

STOP Rule 41 — FBI should not get Legal Power to Hack Computers Worldwide

We have been hearing a lot about Rule 41 after the US Department of Justice has pushed an update to the rule. The change to the Rule 41 of the Federal Rules of Criminal Procedure grants the FBI much greater powers to hack legally into any computer across the country, and perhaps anywhere in the...

Google Simplifies Two-Step Verification

Most major technology companies offer some take on two-factor authentication as an option for users to secure access to accounts and web-based services. Making users drink from that pond, however, has been a different story. Simplifying the process of using the second form of authentication, most...

CVE-2016-3234

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers...

CVE-2016-0025

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

Memory corruption

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

Information disclosure

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers...

CVE-2016-3234

CVE-2016-3234 affects Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint 2010 SP2/2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1. The root cause is an information disclosure flaw that...

CVE-2016-0025

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1,...

CVE-2016-3234

Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers...