(0Day) Microsoft Windows Error Reporting Service Missing Authorization Arbitrary Process Termination Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

(0Day) Microsoft Windows DirectComposition Null Pointer Dereference Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

(0Day) Microsoft Windows DirectComposition Out-Of-Bounds Read Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

Researchers Uncover Flaws in Windows Smart App Control and SmartScreen

Cybersecurity researchers have uncovered design weaknesses in Microsoft's Windows Smart App Control and SmartScreen that could enable threat actors to gain initial access to target environments without raising any warnings. Smart App Control SAC is a cloud-powered security feature introduced by...

Microsoft Windows Menu DC Color Space Use-After-Free Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

Microsoft Windows NTFS Junction Heap-based Buffer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of NT...

Global IT Outage Causes Travel and Service Chaos: A Comprehensive Overview

A massive IT outage is sending shockwaves across the globe, leading to significant disruptions in travel, banking, and healthcare services. The chaos originated from two distinct issues: a misconfiguration that caused a Microsoft Azure service outage and a defective update in Crowdstrike's Falcon...

Global Microsoft Meltdown Tied to Bad Crowdstrike Update

A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Crowdstrike said a fix has been deployed, but experts say...

PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33507)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33526)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...

PDF-XChange Editor Remote Code Execution Vulnerability (CNVD-2024-33510)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A remote code execution vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33506)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...

PDF-XChange Editor Memory Corruption Vulnerability (CNVD-2024-33580)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory corruption vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33516)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33581)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33503)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...

PDF-XChange Editor Memory Misreference Vulnerability (CNVD-2024-33587)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory misreference vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Heap Buffer Overflow Vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from a heap buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...

PDF-XChange Editor Memory Misreference Vulnerability (CNVD-2024-33525)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. A memory misreference vulnerability exists in PDF-XChange Editor, which can be exploited by attackers to disclose sensitive information...

PDF-XChange Editor Out-of-Bounds Read Vulnerability (CNVD-2024-33505)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...