Description of the security update for Office Web Apps Server 2013: September 14, 2021 (KB5002009)

None None...

September 14, 2021—KB5005575 (OS Build 20348.230)

None None...

PT-2021-6974 · Microsoft · Office Powerpoint +2

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft Office and Microsoft 365 Apps for...

Microsoft Office 缓冲区错误漏洞

Microsoft Office Visio is the software responsible for drawing flowcharts and schematics in the Office software family of Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Office Visio. The following products and editions are affected:Microsoft Office 2019 for 32-bit...

Microsoft Office 代码注入漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code injection vulnerability exists in Microsoft Office. The following products and version...

Microsoft Office 缓冲区错误漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A buffer error vulnerability exists in Microsoft Office. The following products and editions...

Microsoft Office 资源管理错误漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Office Excel. The following products and editions are affected: Microsoft Excel 2016 32-bit edition,Microsoft Excel 2016 64-bit...

Microsoft Office 信息泄露漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. An information disclosure vulnerability exists in Microsoft Office. The following products a...

Designing Contact-Tracing Apps

Susan Landau wrote an essay on the privacy, efficacy, and equity of contract-tracing smartphone apps. Also see her excellent book on the topic...

CVE-2021-25453

Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. A security vulnerability exists in SAMSUNG SMR, which originated prior to the September 2021 release of SMR, in which some improper access controls exist in th...

Power Apps OData Feeds Detected

Microsoft Power Apps is a low-code development platform designed to help users build rich web and mobile applications. Power Apps enables users to publish table data as OData feeds, providing a RESTful web service by default available to any user. The scanner detected the presence of public data ...

Zoho Releases Security Update for ADSelfService Plus

Zoho has released a security update on a vulnerability CVE-2021-40539 affecting ManageEngine ADSelfService Plus builds 6113 and below. CVE-2021-40539 has been detected in exploits in the wild. A remote attacker could exploit this vulnerability to take control of an affected system. ManageEngine...

A week in security (August 30 – September 5)

Last week on Malwarebytes Labs ProxyToken: another nail-biter from Microsoft Exchange Macs turn on apps signed by Symantec, treat them as malware Google Play sign-ins can be abused to track another person’s movements FTC bans SpyFone and its CEO from continuing to sell stalkerware BrakTooth...

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei, China. An input validation error vulnerability exists in the System Applications module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from the program's inability to...

ASB-A-184046948

In openFile of HeapDumpProvider.java, there is a possible way to retrieve generated heap dumps from debuggable apps due to an unprotected provider. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-185398942

In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Power Apps Application Detected

Microsoft Power Apps is a low-code development platform designed to help users build rich web and mobile applications. By leveraging the multiple services, data sources and connectors provided by the Power Apps environment, an user with a Microsoft Office 365 subscription including Power Apps can...

The vulnerability of Microsoft 365 Apps for Enterprise and Office for Mac, related to improper code generation management, allows an attacker to execute arbitrary code.

The vulnerability of Microsoft 365 Apps for Enterprise and Office for Mac is related to improper code generation management. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

38 million records exposed in Microsoft Power apps misconfiguration

By Waqas These records were exposed due to weak default configuration in the ODdata API for MS Power Apps. Here's what data was leaked. This is a post from HackRead.com Read the original post: 38 million records exposed in Microsoft Power apps misconfiguration...