Important: thunderbird

Issue Overview: Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2020-6463 By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a...

MSHTML Code Execution

The vulnerability of the MSHTML mechanism in the Internet Explorer browser is related to errors in data processing. Exploiting this vulnerability allows a remote attacker to perform arbitrary actions...

Windows Setup Privilege Exploitation

The vulnerability of the Windows Setup application’s installation service is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows Codecs Library Code Execution

The vulnerability of the Microsoft Windows Codecs Library for processing media content exists due to errors in object handling in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created image file from a remote location...

Microsoft JET Database Engine Code Execution

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems exists due to object handling errors in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Medical Data Leaked on GitHub Due to Developer Errors

Developer error caused the leak of 150,000 to 200,000 patient health records stored in productivity apps from Microsoft and Google that were recently found on GitHub. Dutch researcher Jelle Ursem discovered nine separate files of highly sensitive personal health information PHI from apps such as...

Windows Folder Service Privilege Escalation

The vulnerability of Windows operating system’s folder service is related to errors in file handling operations. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Image Acquisition Unauthorized Access

The vulnerability of the Windows Image Acquisition service in Windows operating systems is related to errors in processing objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows OS File Signature Load Arbitrary Files

The vulnerability of Windows operating systems is related to errors in checking file signatures. Exploiting this vulnerability can allow an attacker to load arbitrary files into the operating system...

Windows GDI Privilege Escalation

The vulnerability of the Windows GDI component in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain increased privileges...

APIs Are the Next Frontier in Cybercrime

Application Programming Interface API usage has exploded, and cybercriminals are increasingly taking advantage of API security flaws to commit fraud and steal data. APIs, which are used to create connections between software programs and perform integrations, make everything a bit easier — from...

SoMove Privilege Escalation

The vulnerability of software for configuring devices and monitoring SoMove metrics is related to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2020-5181

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description The vulnerability in the web interface of Cisco Data Center Network Manager is related to privilege management errors. It may allow a remote attacker to gain access ...

Coturn STUN TURN Buffer Overflow

The vulnerability of the STUN/TURN response buffer in the Coturn web server is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

awl library Session Management Confidential Data Compromise

The vulnerability of the awl library set is related to session management errors. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

PT-2020-3765

Name of the Vulnerable Software and Affected Versions: Microsoft Dynamics 365 for Finance and Operations on-premises version 10.0.11 Description: A remote code execution issue exists, allowing an attacker to gain remote code execution via server-side script execution on the victim server. An...

Apache Struts2 S2-060 Denial of Service Vulnerability

Struts2 is Apache Software Foundation is responsible for maintaining a MVC-based design pattern of the Web application framework for open source projects . Apache Struts2 suffers from an S2-060 denial of service vulnerability. The vulnerability stems from the fact that when uploading a file, an...

Apport error registration service Arbitrary File Read

The vulnerability of the Apport error logging service is related to errors in the code. Exploiting this vulnerability can allow an attacker to read arbitrary files through specially crafted D-Bus calls...

CloudForms Management Engine Auth Bypass

The vulnerability of the CloudForms Management Engine software platform for managing virtual environments is related to authentication errors. Exploiting this vulnerability allows a malicious actor to create existing or new users for access control based on roles and groups...

Apport error registration service Privilege Escalation code execution

The vulnerability of the Apport error logging service exists due to insufficient checks on the status of the shared resource. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...