CVE-2024-39825: Heap-based Buffer Overflow

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access...

PT-2024-29943

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This affects some Zoom Workplace Apps, SDKs...

CVE-2024-39824: Missing Authorization

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

httpd: Security issues via backend applications whose response headers are malicious or exploitable

A flaw was found in httpd. Backend applications whose response headers are malicious or exploitable may allow information disclosure, server-side request forgery SSRF or local script execution...

PT-2024-28684

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This is a sensitive information disclosure...

PT-2024-29944

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description A buffer overflow issue may allow an authenticated user to conduct a denial of service via network access. This issue affects some Zoom...

PT-2024-28683 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: The issue allows an authenticated user to conduct an information disclosure via network access. This is due to sensitive information...

Microsoft Office Visio 安全漏洞

Microsoft Office Visio is the software responsible for drawing flowcharts and schematic diagrams in the Office software family from Microsoft USA. A security vulnerability exists in Microsoft Office Visio. An attacker exploiting this vulnerability could remotely execute code. The following produc...

PT-2024-29945

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description A buffer overflow issue may allow an authenticated user to conduct a denial of service via network access. This issue affects some Zoom...

PT-2024-29946 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: A buffer overflow issue may allow an authenticated user to conduct a denial of service via network access. This issue affects some Zo...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Microsoft 365 Apps for...

PT-2024-28685

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This is related to sensitive information...

PT-2024-6641

Name of the Vulnerable Software and Affected Versions: Zoom versions affected versions not specified Description: The issue is related to insufficient protection of internal data in Zoom software, which may allow a remote attacker to gain unauthorized access to protected information. Sensitive...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Excel. An attacker could exploit the vulnerability to remotely execute code. The following products and versions are affected:Microsoft 365 Apps for...

PT-2024-6677 · Microsoft · Office For Mac +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office for Mac and 365 Apps for Enterprise affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code. This allows an attacker to potentially ru...

KLA71483 SUI vulnerability in Microsoft Apps

A spoofing vulnerability vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-38177 Exploitation CVE list CVE-2024-38177 critical Solution Install necessary updates from the KB section, that are listed in...

Microsoft Office Microsoft 365 Apps for Enterprise Sensitive Data Protection

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to insufficient protection of sensitive data. Exploiting this vulnerability allows a malicious actor to execute a spear-phishing attack, provided that the user is directed to a specific link and opens ...

New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions

An ongoing, widespread malware campaign has been observed installing rogue Google Chrome and Microsoft Edge extensions via a trojan distributed via fake websites masquerading as popular software. "The trojan malware contains different deliverables ranging from simple adware extensions that hijack...

CVE-2024-37403

Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to properly sanitize file names, resulting in a path traversal-affiliated vulnerability. This potentially enables other malicious apps on the device to read sensitive information...

CVE-2024-37403

Ivanti Docs@Work for Android before 2.26.0 is vulnerable to the Dirty Stream path-traversal issue. The app fails to sanitize file names, potentially allowing a malicious local app to read sensitive information stored in the app root. Severity is MEDIUM (CVSS v3.1: AV Local, AC Low, PR None, UI Re...