WikiLeaks Promises to Publish Leaks on US Election, Arms Trade and Google

Wikileaks completed its 10 years today, and within this timespan, the whistleblower site has published over 10 million documents, and there’s more to come. In the name of celebration of its 10th Anniversary, Wikileaks promises to leak documents pertaining to Google, United States presidential...

September 29, 2016 — KB3194496 (OS Builds 14393.222)

None None...

Threat Outbreak Alert RuleID25252: Email Messages Distributing Malicious Software on September 27, 2016

Medium Alert ID: 49058 First Published: 2016 September 28 12:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25252 may contain the following files: Name ...

Threat Outbreak Alert RuleID25242: Email Messages Distributing Malicious Software on September 25, 2016

Medium Alert ID: 49036 First Published: 2016 September 26 14:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25242 may contain the following files: Name ...

Vulnerability of Microsoft Word, the corporate application suite Microsoft SharePoint Server, the Microsoft Office applications, and Microsoft Office Web Apps. Applications for reading doc files like Word Viewer, as well as the Office Web Apps Server, allow attackers to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft SharePoint Server corporate application suite, the Microsoft Office application suite, and Microsoft Office Web Apps is due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor t...

Vulnerabilities include Microsoft Excel spreadsheet editor, Microsoft SharePoint Designer HTML editor, the Microsoft Office Compatibility Pack compatibility suite, Microsoft Excel Viewer for spreadsheet viewing, and Office Online Server. These components allow attackers to execute arbitrary code.

The vulnerabilities of Microsoft Excel spreadsheet editors, Microsoft SharePoint Designer HTML editors, the Microsoft Office Compatibility Pack, the Microsoft Excel Viewer, and the Office Online Server are caused by an out-of-buffer operation in memory. Exploitation of these vulnerabilities could...

Threat Outbreak Alert RuleID25150: Email Messages Distributing Malicious Software on September 20, 2016

Medium Alert ID: 48986 First Published: 2016 September 21 14:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25150 may contain the following files: Name ...

Microsoft Office Information Disclosure Vulnerability (CNVD-2016-07925)

Microsoft Office is a suite of office software products developed by Microsoft.Visual Basic macros is one of the programming languages dedicated to performing common automation OLE tasks in desktop applications. An information disclosure vulnerability exists in Visual Basic macros in Microsoft...

CVE-2016-6644

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

Code injection

EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read arbitrary Docbase documents by leveraging knowledge of an robjectid value...

Microsoft Edge TextNode Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw relates to how Edge handles tex...

Microsoft Edge CTreePos Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw relates to how Edge handles tex...

CVE-2016-3363

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability," a different vulnerability than...

CVE-2016-3359

Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."...

CVE-2016-3358

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel 2016 for Mac, Office Compatibility Pack SP3, Excel Viewer, Excel Services on SharePoint Server 2007 SP3, Excel Services on SharePoint Server 2010 SP2, Excel Automation Services on SharePoint Server 2013...

Adobe Digital Editions Remote Code Execution Vulnerability

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

September 13, 2016 — KB3185614 (OS Build 10586.589)

None None...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07530)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07529)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...

Adobe Digital Editions Remote Code Execution Vulnerability (CNVD-2016-07527)

Adobe Digital Editions is an eBook reading management tool developed by Adobe. Adobe Digital Editions has a security vulnerability, carefully constructed PDF files can make Adobe Digital Editions trigger a memory corruption vulnerability, an attacker can take advantage of this vulnerability in th...