CVE-2019-1205

CVE-2019-1205 is a remote code execution flaw in Microsoft Word caused by improper handling of in‑memory objects. An attacker can deliver a specially crafted Word file via email or a compromised website to run code in the current user’s security context, requiring user interaction to open the fil...

CVE-2019-1186

CVE-2019-1186 affects Windows via wcmsvc.dll, where improper handling of memory objects enables local privilege escalation. A locally authenticated attacker can run a crafted application to execute code with elevated privileges. A security update patches wcmsvc.dll to correctly handle memory obje...

CVE-2019-1179

CVE-2019-1179 describes an elevation-of-privilege flaw in how unistore.dll handles objects in memory. A locally authenticated attacker could execute code with elevated permissions by running a crafted application. The vulnerability is addressed by a security update that ensures unistore.dll prope...

CVE-2019-0716

CVE-2019-0716 is a Windows Denial of Service vulnerability caused by improper handling of memory objects. The public description states that an attacker who logs on to an affected system and runs a specially crafted application could cause the target to stop responding. The issue does not allow c...

UBUNTU-CVE-2019-8696

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

UBUNTU-CVE-2019-8675

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

CVE-2019-8675

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra. An attacker in a privileged network position may be able to execute arbitrary code...

Microsoft Windows Multiple Vulnerabilities (KB4512517)

This host is missing a critical security update according to Microsoft KB4512517 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4511553)

This host is missing a critical security update according to Microsoft KB4511553 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Word Remote Code Execution Vulnerability (KB4475540)

This host is missing an important security update according to Microsoft KB4475540 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Windows Multiple Vulnerabilities (KB4512497)

This host is missing a critical security update according to Microsoft KB4512497 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4512516)

This host is missing a critical security update according to Microsoft KB4512516 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4512506)

This host is missing a critical security update according to Microsoft KB4512506. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

Security Update for Microsoft Office (August 2019) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in Microsoft Word due to improper handling of objects in memory. An unauthenticated,...

Security Updates for Microsoft Office Web Apps (August 2019)

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who...

Microsoft Windows Multiple Vulnerabilities (KB4512508)

This host is missing a critical security update according to Microsoft KB4512508 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4512501)

This host is missing a critical security update according to Microsoft KB4512501 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially craft...

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a...

Microsoft Outlook Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, t...