1473 matches found
SRC-2019-0013 : Windows Jet Database Engine TblPage CreateColumns Out-Of-Bounds Read Remote Code Execution Vulnerability
Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exist...
Microsoft Patches Zero-Day Under Active Attack by APT
Microsoft has issued a patch for a zero-day bug being actively exploited in the wild, as part of its Patch Tuesday security bulletin. The vulnerability is an elevation-of-privilege flaw, rated important, affecting the Windows Win32k component. The zero-day CVE-2018-8453, found by Kaspersky Lab,...
Microsoft JET Database Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the Microsoft JET Database Engine. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user right...
October 9, 2018—KB4462918 (OS Build 16299.726)
None None...
October 9, 2018—KB4462926 (Monthly Rollup)
None None...
October 9, 2018—KB4462915 (Security-only update)
None None...
October 9, 2018—KB4462931 (Security-only update)
None None...
October 9, 2018—KB4462929 (Monthly Rollup)
None None...
October 9, 2018—KB4462923 (Monthly Rollup)
None None...
October 9, 2018—KB4462941 (Security-only update)
None None...
October 9, 2018—KB4463104 (Security-only update)
None None...
October 9, 2018—KB4462919 (OS Build 17134.345)
None None...
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: October 9, 2018
Description of the security update for the remote code execution vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: October 9, 2018 Summary A remote code execution vulnerability exists in the Microsoft JET Database Engine. To learn more about the vulnerability, go...
KLA11333 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerabili...
KLA11889 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation...
The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises due to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created Excel file...
Microsoft Windows JET Database Engine Remote Code Execution Vulnerability (CNVD-2019-14431)
Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. JET Database Engine is an underlying data engine. A remote code execution vulnerability exists in Microsoft Windows JET Database Engine. An attacker can exploit the vulnerability to execute arbitrary...
A week in security (September 17 – 23)
Last week, we took a look at a low level spam campaign on Twitter, explored the signs of falling victim to phishing, and examined a massive WordPress compromise. We also explained some SASL vulnerabilities and covered a breaking Emotet spam campaign. Other cybersecurity news: NewEgg attacked by...
Researcher Discloses New Zero-Day Affecting All Versions of Windows
A security researcher has publicly disclosed an unpatched zero-day vulnerability in all supported versions of Microsoft Windows operating system including server editions after the company failed to patch a responsibly disclosed bug within the 120-days deadline. Discovered byLucas Leong of the...
Researcher Discloses New Zero-Day Affecting All Versions of Windows
A security researcher has publicly disclosed an unpatched zero-day vulnerability in all supported versions of Microsoft Windows operating system including server editions after the company failed to patch a responsibly disclosed bug within the 120-days deadline. Discovered by Lucas Leong of the...