Lucene search
+L

910 matches found

Prion
Prion
added 2016/08/09 9:59 p.m.20 views

Security feature bypass

The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010, Lync 2010 Attendee, and Live Meeting 2007 Console allows remote attackers to execute...

9.3CVSS7.8AI score0.50506EPSS
SaveExploits2References4Affected Software5
Cvelist
Cvelist
added 2016/08/09 9:0 p.m.27 views

CVE-2016-3301

The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync...

7.9AI score0.44492EPSS
SaveExploits1References4
CVE
CVE
added 2016/08/09 9:0 p.m.138 views

CVE-2016-3304

CVE-2016-3304 is the Windows Graphics Component remote code‑execution vulnerability where the Windows font library improperly handles crafted embedded fonts, affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Office 2007 SP3/2010 SP2, Word Viewer, Skype for Business 2016,...

9.3CVSS7.8AI score0.50506EPSS
SaveExploits1References4Affected Software8
ThreatPost
ThreatPost
added 2016/08/09 2:59 p.m.57 views

August 2016 Microsoft Patch Tuesday Security Bulletins

A tricky vulnerability patched today in the Windows PDF Library could have put Microsoft Edge users on Windows 10 systems at risk for remote code execution attacks. Edge automatically renders PDF content when it’s set as a computer’s default browser, unlike most other browsers; the feature means...

9.3CVSS2.9AI score0.99945EPSS
SaveExploits34References9
Microsoft KB
Microsoft KB
added 2016/08/09 7:0 a.m.33 views

Microsoft Teams help & learning

None None...

9.3CVSS7AI score0.50506EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2016/08/09 12:0 a.m.59 views

MS16-097: Security update for Microsoft Graphics Component: August 9, 2016

Resolves vulnerabilities in in Microsoft Windows, Microsoft Office, Skype for Business, and Microsoft Lync. The vulnerabilities could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document.SummaryThis security update resolves...

9.3CVSS8.1AI score0.50506EPSS
SaveExploits3
Symantec
Symantec
added 2016/08/09 12:0 a.m.61 views

Microsoft Windows Graphics Component CVE-2016-3304 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Live Meeting...

9.3CVSS0.4AI score0.50506EPSS
SaveExploits1Affected Software9
Symantec
Symantec
added 2016/08/09 12:0 a.m.37 views

Microsoft Windows Graphics Component CVE-2016-3301 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Live Meeting...

9.3CVSS0.3AI score0.44492EPSS
SaveExploits1Affected Software10
Symantec
Symantec
added 2016/08/09 12:0 a.m.26 views

Microsoft Windows Graphics Component CVE-2016-3303 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Live Meeting...

9.3CVSS0.4AI score0.50506EPSS
SaveExploits1Affected Software9
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.22 views

The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the GDI+ component in Microsoft Lync Attendee User allows for remote execution of code, provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install programs,...

9.3CVSS5.8AI score0.2022EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.23 views

The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the GDI+ component of the Microsoft Lync Attendee User program, related to the processing of specially crafted images, allows for remote execution of code when a user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full...

9.3CVSS5.9AI score0.2022EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.7 views

The vulnerability of Microsoft Lync Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability in Lync Server allows a malicious individual to trigger a system failure...

5CVSS5.5AI score0.18986EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.7 views

The vulnerability of Microsoft Lync Server software allows a malicious attacker to compromise the accessibility of protected information.

The vulnerability in Lync Server allows a malicious individual to trigger a system failure...

5CVSS5.5AI score0.19692EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.7 views

Vulnerability of Microsoft Lync Server software, allowing a remote attacker to compromise protected information

A vulnerability that allows access to confidential information exists in Lync Server. This vulnerability is related to the improper processing e.g., filtering of specially crafted content. If exploited successfully, a malicious individual can execute scripts in the user’s browser and gain access ...

4.3CVSS5.5AI score0.5109EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.11 views

The vulnerability of the Microsoft Lync Attendee User software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...

9.3CVSS5.9AI score0.18875EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.8 views

Vulnerability of Microsoft Lync Server software, allowing a remote attacker to compromise protected information

A cross-site scripting implementation that allows access to confidential information exists in Lync Server. This implementation is related to the improper processing browsing of specially crafted content. If it operates successfully, a malicious individual can execute scripts in the user’s browse...

4.3CVSS5.3AI score0.10916EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/07/06 12:0 a.m.8 views

The vulnerability of Microsoft Lync Server software allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. Exploiting...

9.3CVSS5.9AI score0.18875EPSS
SaveExploits0References3Affected Software1
Microsoft KB
Microsoft KB
added 2016/05/10 7:0 a.m.46 views

MS16-054: Description of the security update for Office 2013: May 10, 2016

MS16-054: Description of the security update for Office 2013: May 10, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

9.3CVSS8.2AI score0.19641EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2016/04/13 12:0 a.m.39 views

Microsoft Lync Remote Code Execution Vulnerability (3148522)

This host is missing a critical security update according to Microsoft Bulletin MS16-039. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS7.8AI score0.43272EPSS
SaveExploits1References4
OpenVAS
OpenVAS
added 2016/04/13 12:0 a.m.64 views

Microsoft Lync Attendee Remote Code Execution Vulnerability (3148522)

This host is missing a critical security update according to Microsoft Bulletin MS16-039. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS7.8AI score0.43272EPSS
SaveExploits1References4
Rows per page
Query Builder