MS15-044: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: May 12, 2015

MS15-044: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These vulnerabilities could allow remote...

MS15-044: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015

MS15-044: Description of the security update for the .NET Framework 4.5, 4.5.1, and 4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET...

MS15-080: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 3.5.1 on Windows 7 Service Pack 1 and Windows Server 2008 R2 Service Pack 1: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework and...

MS15-097: Description of the security update for the graphics component in Windows Vista and Windows Server 2008: September 8, 2015

MS15-097: Description of the security update for the graphics component in Windows Vista and Windows Server 2008: September 8, 2015 Summary This security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync. The most severe of these vulnerabilities could allow remote...

MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015

MS15-044: Description of the security update for the .NET Framework 4.6 RC on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: May 12, 2015 View products that this article applies to. Introduction This update resolves vulnerabilities in the Microsoft .NET Framework. These...

MS15-080: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework and Microsoft Silverlight. These...

MS15-080: Description of the security update for the .NET Framework 4.5/4.5.1/4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: August 11, 2015

MS15-080: Description of the security update for the .NET Framework 4.5/4.5.1/4.5.2 on Windows Vista Service Pack 2 and Windows Server 2008 Service Pack 2: August 11, 2015 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET...

Memory corruption

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

CVE-2016-7083

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

CVE-2016-7083

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

CVE-2016-7083

VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service host OS memory corruption via TrueType fonts embedd...

CVE-2016-7083

CVE-2016-7083 — VMware Workstation/Player 12.x prior to 12.5.0 (Windows) is vulnerable when Cortado ThinPrint virtual printing is enabled. The flaw stems from handling TrueType fonts embedded in EMFSPOOL, which could let a guest OS user execute arbitrary code on the host or trigger a host memory ...

Microsoft Office Information Disclosure (MS16-148: CVE-2016-7276)

An information disclosure vulnerability exists in Microsoft Office. The vulnerability is due to an improper handling of malformed embedded fonts. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...

fontconfig security and bug fix update

2.10.95-10 - Fix a regression in the previous change. 1355930 2.10.95-9 - CVE-2016-5384: Validate offsets in cache files properly. 1355930 2.10.95-8 - Update 45-latin.conf to add some hints to fall back for Windows fonts 1073460...

Microsoft Windows Open Type Font Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists when the Windows Font Library fails to properly handle specially designed embedded fonts. An attacker who successfully exploited this vulnerability could tak...

Open Type Font Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Adobe Type Manager Font Driver improperly handles specially crafted OpenType fonts. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacke...

MS16-132: Security update for Microsoft graphics component: November 8, 2016

This security update resolves vulnerabilities in Microsoft Windows that could allow a remote code execution when the Windows font library improperly handles specially crafted embedded fonts.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most severe of the...

VulnCheck KEV: CVE-2016-7256

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits this vulnerability could take control of the affected system...

FontParser Information Disclosure Vulnerability in Multiple Apple Products

Apple iOS is an operating system developed for mobile devices, tvOS is a smart TV operating system, and watchOS is a smart watch operating system. fontParser is one of the font parsing components. An information disclosure vulnerability exists in FontParser in several Apple products. The...

Wordpress plugin free-google-fonts has multiple cross-site scripting vulnerabilities

WordPress is a blogging platform developed using the PHP language that allows users to set up their own websites on servers that support PHP and MySQL databases. WordPress can also be used as a content management system CMS. Wordpress plugin free-google-fonts has an xss vulnerability due to...