1605 matches found
PT-2020-12559
Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions APQ8009 through SM8250 Snapdragon Compute versions APQ8009 through SM8250 Snapdragon Consumer Electronics Connectivity versions APQ8009 through SM8250 Snapdragon Consumer IOT versions APQ8009 through SM8250 Snapdragon...
August 11, 2020—KB4571709 (OS Build 17134.1667)
August 11, 2020—KB4571709 OS Build 17134.1667 Applies To Windows 10, version 1803, all editions Windows 10, version 1803 Enterprise, Education, IoT Enterprise Note IMPORTANT Windows 10, version 1803 has reached the end of mainstream support and is now in extended support. Starting in July 2020,...
August 11, 2020—KB4571692 (OS Build 10240.18666)
August 11, 2020—KB4571692 OS Build 10240.18666 Applies To Windows 10 Note For more information about the various types of Windows updates, such as critical, security, driver, service packs, and so on, please see the following article. Note IMPORTANT Starting in July 2020, all Windows Updates will...
PT-2020-21865
Name of the Vulnerable Software and Affected Versions Sass affected versions not specified Description The issue is related to a bad-cast in the Sass parser, specifically when parsing IE keyword arguments. The crash occurs due to an incorrect cast from Sass::Unary Expression to Sass::PreValue. Th...
CVE-2019-14062: Buffer Copy without Checking Size of Input
Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables ...
CVE-2020-1220
A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects, aka 'Microsoft Edge Chromium-based in IE Mode Spoofing Vulnerability'...
Spoofing
A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects, aka 'Microsoft Edge Chromium-based in IE Mode Spoofing Vulnerability'...
CVE-2020-1220
A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects, aka 'Microsoft Edge Chromium-based in IE Mode Spoofing Vulnerability'...
CVE-2020-1220
CVE-2020-1220: Edge (Chromium-based) in IE Mode spoofing vulnerability due to improper handling of specific redirects. Affects Microsoft Edge in IE Mode; vulnerability allows spoofing of the displayed site. Connected CNVD entry reiterates Edge spoofing context; no vendor-provided fix details in t...
Microsoft Releases June 2020 Security Patches For 129 Vulnerabilities
Microsoft today released its June 2020 batch of software security updates that patches a total of 129 newly discovered vulnerabilities affecting various versions of Windows operating systems and related products. This is the third Patch Tuesday update since the beginning of the global Covid-19...
Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability
A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects. An attacker who successfully exploits the IE Mode vulnerability could trick a user into believing that the user was on a legitimate website. The specially crafted website could...
CVE-2020-0986
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka ‘Windows Kernel Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269,...
CVE-2020-1220: URL Redirection to Untrusted Site
A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects, aka 'Microsoft Edge Chromium-based in IE Mode Spoofing Vulnerability'...
PT-2020-2932
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based in IE Mode affected versions not specified Description A spoofing issue exists due to improper handling of specific redirects by Microsoft Edge Chromium-based in IE Mode. This could allow a remote attacker to impa...
Code injection
Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...
CVE-2020-3645
CVE-2020-3645 affects Qualcomm/Qualcomm-based WLAN firmware used across Snapdragon Compute, Connectivity, Consumer Electronics Connectivity, Consumer IoT, Industrial IoT, Mobile, and related SoCs (e.g., IPQ6018, IPQ8074, Kamorta, Nicobar, QCA63xx, QCN7xxx, SC7xxx, SDM8xx, SXR1x0, etc.). The vulne...
PT-2020-17630
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon and related products affected versions not specified Description The issue occurs when the encrypted data length in the FILS IE of a reassoc response exceeds 528 bytes, causing the firmware to hit an assert in WLAN firmware...
Windowsrcer IE/Edge Cross-URL vulnerabilities
Cross-Origin bugs in IE and Edge allow bypassing SOP in both browsers. 0-days released by James Lee @Windowsrcer Recent assessments: busterb at August 21, 2019 4:31pm UTC reported: A SOP bug requires the attacker to inject a resource into one domain, and be listening on another. Such a...
CVE-2020-3645: Reachable Assertion
Firmware will hit assert in WLAN firmware If encrypted data length in FILS IE of reassoc response is more than 528 bytes in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...
ie-expo.cn Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1180507 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...