Trellix Global Defenders: Follina — Microsoft Office Zero-Day (CVE-2022-30190)

Trellix Global Defenders: Follina — Microsoft Office Zero-Day CVE-2022-30190 By Taylor Mullins, Robin Noyce , Benjamin Marandel · June 3, 2022 Trellix is continuing to monitor the threat activity associated with the Microsoft Office Zero-Day vulnerability that has been dubbed “Follina.”...

Microsoft Support Diagnostic Tool Remote Code Execution Vulnerability

Microsoft Support Diagnostic Tool MSDT, Microsoft Support Diagnostic Tool is a utility program used to troubleshoot and collect diagnostic data for professionals to analyze and solve problems.Microsoft Office is a popular office software developed by Microsoft Corporation. Microsoft Support...

The vulnerability of the diagnostic data collection and troubleshooting tool from Microsoft Support Diagnostics Tool for Windows operating systems, related to errors in processing the invoked URL address, allows a perpetrator to execute arbitrary code with privileges of the invoking application.

The vulnerability of the Microsoft Support Diagnostics Tool for collecting diagnostic data and troubleshooting issues on Windows operating systems is related to errors in processing the requested URL. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with privileges...

Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)

Update: Please see our FAQ for the latest guidance and mitigation tips on Follina. On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. The mitigation offered by Microsoft consists of an alternative method to...

.NET 5.0 Update: May 10, 2022 (KB5014329)

None None...

.NET Core 3.1 Update: May 10, 2022 (KB5014326)

None None...

Microsoft SharePoint Enterprise Server 2016 RCE Vulnerability (KB5002006)

This host is missing a critical security update according to Microsoft KB5002006 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

October 12, 2021—KB5006732 (Security-only update)

None None...

How to test Exchange Online service connection performance using Microsoft Support and Recovery Assistant

Purpose This article documents how to perform an Exchange Online connection performance test using Microsoft Support and Recovery Assistant tool. Results of this test may help in troubleshooting performance issues during Exchange services backup or restore in Veeam Backup for Microsoft 365...

April 13, 2021—KB5001332 (Security-only update)

None None...

November 10, 2020—KB4586807 (Monthly Rollup)

None None...

KB2494096 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 1 GDR: June 14, 2011

KB2494096 - MS11-049: Description of the security update for SQL Server 2008 Service Pack 1 GDR: June 14, 2011 INTRODUCTION Microsoft has released security bulletin MS11-049. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...

Microsoft Word 2013 Service Pack 1 Security Feature Bypass Vulnerability (KB4484361)

This host is missing an important security update according to Microsoft KB4484361 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Tech Support Scam Uses Child Porn Warning

A new email scam is making the rounds, warning recipients that someone using their Internet address has been caught viewing child pornography. The message claims to have been sent from Microsoft Support, and says the recipient's Windows license will be suspended unless they call an "MS Support"...

Description of the cumulative update for Office Communications Server 2007 R2, Web Conferencing Server: March, 2011

Discusses the issues that are fixed in the March 2011 cumulative update for Office Communications Server 2007 R2, Web Conferencing Server.SummaryThis article describes the issues that is fixed in the update package for Microsoft Office Communications Server 2007 R2, Web Conferencing Server that i...

Anti-malware platform update for Windows Defender is available in Windows 8

Anti-malware platform update for Windows Defender is available in Windows 8 Introduction This article describes an anti-malware platform update for Windows Defender that is available in Windows 8. This anti-malware platform update for Windows Defender updates Windows Defender services, drivers, a...

The January 2010 stability and reliability update for Windows 7 and Windows Server 2008 R2 is available.

The January 2010 stability and reliability update for Windows 7 and Windows Server 2008 R2 is available. Summary This update improves the stability and the reliability of Windows 7 and of Windows Server 2008 R2. The update was released in January 2010. How to obtain this update This update is...

Veeam Agent backup job fails with "Failed to call RPC function 'TestCompatible': Error code: 0x80070008. Cannot initialize COM runtime" error

Challenge A Veeam Agent backup job managed by the backup server fails with the following error: Processing Error: Failed to call RPC function 'TestCompatible': Error code: 0x80070008. Cannot initialize COM runtime. Cause When a backup job starts, Veeam Backup & Replication connects to the Veeam...

Description of the security update for SharePoint Enterprise Server 2013: November 12, 2019

None None...

Description of the security update for Excel Viewer 2007: January 8, 2019

Description of the security update for Excel Viewer 2007: January 8, 2019 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Comm...