Microsoft Windows Kernel 'cng.sys' Security Bypass Vulnerability

Microsoft Windows is a popular operating system. A security bypass vulnerability exists in the Microsoft Windows CNG Kernel Mode Driver cng.sys due to a failure to properly verify and enforce the emulation level, which allows attackers to construct malicious applications that can be tricked into...

Microsoft Windows Font Parsing Denial of Service Vulnerability

Microsoft Windows is a popular operating system. A denial-of-service vulnerability in Microsoft Windows font parsing allows attackers to exploit the vulnerability to build malicious web pages that can be tricked into being parsed by users, which can crash applications...

Microsoft Office Web Apps Remote Code Execution Vulnerability (3032328)

This host is missing an important security update according to Microsoft Bulletin MS15-012. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

February 10, 2015 update for Office Web Apps Server 2013 (KB2956101)

None None...

Libmspack CHM decompression pointer arithmetic denial of service vulnerability (CNVD-2015-00970)

Libmspack is a library of related Microsoft compression formats such as CAB, CHM, HLP, LIT, KWAJ and SZDD. A pointer arithmetic overflow denial of service vulnerability exists in Libmspack's handling of specially crafted CHM files, which can be exploited by remote attackers to crash an applicatio...

OpenJDK: MulticastSocket NULL pointer dereference (Libraries, 8056264)

A NULL pointer dereference flaw was found in the MulticastSocket implementation in the Libraries component of OpenJDK. An untrusted Java application or applet could possibly use this flaw to bypass certain Java sandbox restrictions...

OpenJDK: directory information leak via file chooser (Swing, 8055304)

An information leak flaw was found in the Swing component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions...

Adware Android Apps Found in Google Play With Millions of Downloads

With the rise in mobile market, last year we have seen sharp growth in malicious 'adware' — the most prevalent mobile threat in the world. And now, security researchers have once again found Google Play Store offering malicious apps that are infecting millions of Android users with adware. It’s n...

Apple TV and iOS Font File Handling Buffer Overflow Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. Apple TV and iOS handle a buffer overflow vulnerability in font files,...

Apple MAC OS X Yosemite IOUSB Controller User Client Function Memory Access Vulnerability

Apple MAC OS X Yosemite is the latest operating system developed by Apple. A memory access vulnerability exists in Apple MAC OS X Yosemite's handling of the IOUSB controller user client function, which allows a privileged application to read arbitrary data from kernel memory...

Apple TV and iOS Enterprise Signature App Security Bypass Vulnerability

Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A security vulnerability exists in the Apple TV and iOS Enterprise Signature...

Google Apps Flaw Allowed Hacker to Hijack Account and Disable Two-factor Authentication

A critical cross-site scripting XSS vulnerability in the Google Apps administrator console allowed cyber criminals to force a Google Apps admins to execute just about any request on the domain. The Google Apps admin console allows administrators to manage their organization’s account...

OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)

An improper permission check issue was discovered in the Libraries component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

Unspecified Vulnerability in Oracle Java SE 2D Subpart (CNVD-2015-00576)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE 2D subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworthy Java...

Unspecified Local Vulnerability in Oracle Java SE/Java SE Embedded/JRockit Hotspot Subcomponents (CNVD-2015-00563)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications.Oracle JRockit is a comprehensive portfolio of Java runtime solutions that includes the industry's fastest standard Java solutions. An unspecified security vulnerability in the Oracle...

Unspecified Vulnerability in Oracle Java SE Libraries Subpart (CNVD-2015-00574)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Libraries subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworth...

Unspecified Vulnerability in Oracle Java SE 2D Subpart (CNVD-2015-00577)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE 2D subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworthy Java...

Unspecified Vulnerability in Oracle Java SE Swing Subcomponent (CNVD-2015-00561)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Swing subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworthy Ja...

Unspecified Vulnerability in Oracle Java SE Libraries Subpart (CNVD-2015-00573)

Oracle Java Runtime Environment is a solution that provides a reliable runtime environment for JAVA applications. An unspecified security vulnerability exists in the Oracle Java SE Libraries subcomponent, which allows an attacker to build untrustworthy Java Web Start applications and untrustworth...

ICU: font parsing OOB read (OpenJDK 2D, 8056276)

A boundary check flaw was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could allow an untrusted Java application or applet to disclose portions of the Java Virtual Machine memory...