11063 matches found
CVE-2020-1433
An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'...
July 14, 2020—KB4565483 (OS Builds 18362.959 and 18363.959) - EXPIRED
None None...
Microsoft Edge PDF Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...
July 14, 2020—KB4565503 (OS Build 19041.388)
None None...
July 14, 2020—KB4565489 (OS Build 17134.1610)
None None...
July 14, 2020—KB4558998 (OS Build 17763.1339)
None None...
July 14, 2020—KB4565508 (OS Build 16299.1992)
None None...
Skype for Business via Microsoft Edge (EdgeHTML-based) Information Disclosure Vulnerability
An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge EdgeHTML-based. An attacker who exploited the vulnerability could cause the user to place a call without additional consent, leading to information disclosure of the user profile. For the...
CVE-2020-1350 Windows DNS Server Remote Code Execution (SigRed)
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka ‘Windows DNS Server Remote Code Execution Vulnerability’. Recent assessments: gwillcox-r7 at July 14, 2020 6:11pm UTC reported: Important Update: This is now supposed...
KLA11858 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Skype for Business via Microsoft Edge...
TrickBot Sample Accidentally Warns Victims They're Infected
TrickBot, the infamous info-stealing trojan, has been trying out a test module that accidentally pops up fraud alerts to victims. A sandboxed sample of the trojan, obtained by MalwareHunterTeam and analyzed by Advanced Intelligence’s Vitali Kremez, turns out to contain a new module, called “modul...
Microsoft Edge (Chromium) < 81.0.416.58 Sandbox Escape
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.58. It is, therefore, affected by a use-after-free error in the speech recognizer component. An unauthenticated, remote attacker can exploit this, via a crafted HTML page, to potentially perform a...
Microsoft Edge (Chromium) < 81.0.416.53 Multiple Vulnerabilities
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 81.0.416.53. It is, therefore, affected by multiple vulnerabilities: - A use-after-free error exists in the audio component of Microsoft Edge Chromium. An unauthenticated, remote attacker can exploit this, via...
Microsoft Edge (Chromium) < 80.0.361.109 Multiple Vulnerabilities
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.109. It is, therefore, affected by multiple vulnerabilities: - A use-after-free error exists in the WebAudio component of Google Chrome. An unauthenticated, remote attacker can exploit this, via a...
Microsoft Edge (Chromium) < 80.0.361.69 Multiple Vulnerabilities
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.69. It is, therefore, affected by multiple vulnerabilities: - A use-after-free error exists in the WebGL component of Microsoft Edge Chromium. An unauthenticated, remote attacker can exploit this, via...
Microsoft Edge (Chromium) < 80.0.361.66 Insufficient Policy Enforcement
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.66. It is, therefore, affected by an insufficient policy enforcement vulnerability. An unauthenticated, remote attacker can exploit this, via a crafted HTML page, to bypass same-origin policy. Note th...
Microsoft Edge (Chromium) < 80.0.361.62 Multiple Vulnerabilities
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.62. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds memory access error exists in Google Chrome. An unauthenticated, remote attacker can exploit this, via a crafted HTML pag...
Microsoft Edge (Chromium) < 80.0.361.48 Multiple Vulnerabilities
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.48. It is, therefore, affected by multiple vulnerabilities: - An integer overflow condition exists in the JavaScript component of Google Chrome. An unauthenticated, remote attacker can exploit this, v...
Microsoft Edge (Chromium) < 79.0.309.68 Multiple Vulnerabilities
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 79.0.309.68. It is, therefore, affected by multiple vulnerabilities: - A spoofing vulnerability exists in the Windows CryptAPI due to how it validates Elliptic Curve Cryptography ECC certificates. An...
Microsoft Edge (Chromium) < 80.0.361.57 Multiple Vulnerabilities
The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 80.0.361.57. It is, therefore, affected by multiple vulnerabilities: - A use-after-free vulnerability exists in the V8 component of Google Chrome. An unauthenticated, remote attacker can exploit this, via a...