8163 matches found
CVE-2019-0841
CVE-2019-0841 is a Windows privilege-escalation vulnerability in the AppXSVC service caused by improper handling of hard links. The issue enables local elevation of privilege (from a low-privilege context to SYSTEM) and has public exploitation references (Exploits listed on Exploit-DB; CIRCL sigh...
CVE-2019-0841
An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836...
CVE-2019-0841
An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836...
April 2019 Patch Tuesday – 74 Vulns, 16 Critical, 2 Actively Attacked, 1 PoC Exploit, Adobe Vulns
This month's Patch Tuesday addresses 74 vulnerabilities, with 16 labeled as Critical. Eight of the Critical vulns are for scripting engines and browser components, impacting Microsoft browsers and Office, along with another 5 Critical vulns in MSXML. Two Critical remote code execution RCE...
Description of the security update for Office 2010: April 9, 2019
Description of the security update for Office 2010: April 9, 2019 Summary This security update resolves a remote code execution vulnerability that exists when the Microsoft Office Access Connectivity Engine incorrectly handles objects in memory. To learn more about the vulnerability, see the...
Description of the security update for SharePoint Server 2010: April 9, 2019
Description of the security update for SharePoint Server 2010: April 9, 2019 Summary This security update resolves a cross-site–scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request that's made to an affected SharePoint...
Description of the security update for Excel 2016: April 9, 2019
None None...
Description of the security update for SharePoint Enterprise Server 2013: April 9, 2019
None None...
Description of the security update for Excel 2013: April 9, 2019
Description of the security update for Excel 2013: April 9, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Internet Explorer help
None None...
April 9, 2019—KB4493450 (Security-only update)
None None...
Description of the security update for SharePoint Foundation 2010: April 9, 2019
Description of the security update for SharePoint Foundation 2010: April 9, 2019 Summary This security update resolves a cross-site–scripting XSS vulnerability that exists if Microsoft SharePoint Server does not correctly sanitize a specially crafted web request that's made to an affected...
CVE-2019-0766
An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...
Privilege escalation
An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...
CVE-2019-0766
An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...
CVE-2019-0766
An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Microsoft Windows Elevation of Privilege Vulnerability'...
CVE-2019-0766
CVE-2019-0766 involves a local elevation of privilege in the Windows AppX Deployment Server. The connected documents indicate an attacker who can log on to the system can create files in arbitrary locations, indicating a race/permission issue enabling privilege escalation. The description across ...
How to tap the RPC vulnerability, Part 2-the vulnerability warning-the black bar safety net
One, Foreword In a previous article, translation, and FortiGuard Labs to share with you how to use the RPCView to find the RPC server in the logical loopholes, the final we in the Microsoft Universal Telemetry service found a potential problem. As you may remember, in the previous article we...
Microsoft Windows - AppX Deployment Service Privilege Escalation
Microsoft Windows - AppX Deployment Service Privilege Escalation This vulnerability allows low privileged users to hijack file that are owned by NT AUTHORITY\SYSTEM by overwriting permissions on the targeted file. Successful exploitation results in "Full Control" permissions for the low privilege...
XSLeaks attack analysis-HTTP caching and cross-site leakage-vulnerability warning-the black bar safety net
0x1 XSSearch past lives This attack is the earliest can be dated back to 10 years agoi.e. 2009, one named Chris Evans, security personnel describes one of the Yahoo attack: Chris use a malicious web site to search for the site visitor's e-mail Inbox, and he by constructing different keywords mann...