CVE-2024-45419

CVE-2024-45419 concerns Zoom Apps and involves improper input validation that can allow an unauthenticated user to disclose information over the network. Affected software is Zoom Apps (per the CVE entry and multiple sources), with the vulnerability described as enabling information disclosure vi...

CVE-2024-45419 Zoom Apps - Improper Input Validation

Improper input validation in some Zoom Apps may allow an unauthenticated user to conduct a disclosure of information via network access...

PT-2024-31623 · Zoom · Zoom Apps

Name of the Vulnerable Software and Affected Versions: Zoom Apps versions prior to 6.2.0 Description: The issue allows an authenticated user to conduct a denial of service via network access due to uncontrolled resource consumption in some Zoom Apps. Recommendations: For versions prior to 6.2.0,...

PT-2024-31625 · Zoom · Zoom Apps

Name of the Vulnerable Software and Affected Versions: Zoom Apps versions prior to 6.2.0 Description: The issue involves improper input validation, allowing an unauthenticated user to conduct a denial of service attack via network access. This can be exploited by unauthenticated users to launch...

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages lies in the fact that operations are performed outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Security Update Validation Report November 2024

Microsoft’s November 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Сrimeware and financial cyberthreats in 2025

Kaspersky's Global Research and Analysis Team constantly monitors known and emerging cyberthreats directed at the financial industry, with banks and fintech companies being the most targeted. We also closely follow threats that aim to infiltrate a wider range of industries, namely ransomware...

PT-2024-31621 · Zoom · Zoom Apps

Name of the Vulnerable Software and Affected Versions: Zoom Apps affected versions not specified Description: The issue is related to improper input validation in some Zoom Apps, which may allow an unauthenticated user to disclose information via network access. Recommendations: At the moment,...

Citrix Virtual Apps and Desktops Session Recording Multiple Vulnerabilities (CTX691941)

The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2407 hotfix 24.5.200.8, 1912 LTSR prior to CU9 hotfix 19.12.9100.6, 2203 LTSR prior to CU5 hotfix 22.03.5100.11, or 2402 LTSR prior to CU1 hotfix 24.02.1200.16. It is, therefore, affected by multiple...

CVE-2024-43089

In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration

Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution RCE The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators...

November 12, 2024—KB5046613 (OS Builds 19044.5131 and 19045.5131) - EXPIRED

None None...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...

PT-2024-8155 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to a buffer overfl...

PT-2024-8515

Name of the Vulnerable Software and Affected Versions: Citrix Virtual Apps and Desktops CVAD versions 1912 LTSR, 2203, 2402, and 2407 Description: This issue involves improper privilege management within the Session Recording component of Citrix Virtual Apps and Desktops CVAD. Exploitation allows...

Checking excessively long DSA keys or parameters may be very slow

OpenSSL contains an unbounded computation flaw when performing checks on excessively large DSA keys or parameters, which could lead to a denial-of-service DoS attack. The OpenSSL pkey, pkeyparam command line apps, and FIPS providers are affected...

PT-2024-8550 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified 365 Apps for Enterprise affected versions not specified Description: The issue is related to a memory usage problem after memory has been freed,...

Citrix Systems Virtual Apps and Desktops 安全漏洞

Citrix Systems Virtual Apps and Desktops is virtual software from Citrix Systems, Inc. that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Systems Virtual Apps and Desktops that stems from the ability to access privileges and...

KLA77110 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49051 CVE list CVE-2024-49051 high Solution Install necessary updates from the KB section, that are listed in your Windows Update...

Citrix Systems Virtual Apps and Desktops 安全漏洞

Citrix Systems Virtual Apps and Desktops is a virtualization software from Citrix Systems, Inc. that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Systems Virtual Apps and Desktops that stems from the ability to access...