1054 matches found
Description of the Office 2013 update: February 12, 2013
Description of the Office 2013 update: February 12, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for the 32-bit and 64-bit editions of Office 2013 and Office Home and Student 2013 RT. This is an orthographic update for the...
Description of the Office 2013 update: December 11, 2012
Description of the Office 2013 update: December 11, 2012 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update contains improvements for certain Office images that contain text. Note This update applies to Office 2013 MSI installations only. This update does not app...
EulerOS 2.0 SP3 : qemu-kvm (EulerOS-SA-2020-1430)
According to the versions of the qemu-kvm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libslirp 4.1.0, as used in QEMU 4.2.0, tcpsubr.c misuses snprintf return values, leading to a buffer overflow in later code.CVE-2020-8608 -...
Overlay Malware Exploits Chrome Browser, Targets Banks and Heads to Spain
Researchers are warning of a remote overlay malware attack that leverages a fake Chrome browser plugin to target the accounts of banking customers in Spain. Grandoreiro is a type of remote overlay banking trojan, designed to help attackers overtake devices and display a full-screen overlay image...
February 26, 2018, update for Outlook 2010 (KB4018314)
February 26, 2018, update for Outlook 2010 KB4018314 This article describes update 4018314 for Microsoft Outlook 2010 that was released on February 26, 2018. This update has a prerequisite.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer .msi-based...
February 6, 2018, update for Office 2013 (KB4011700)
February 6, 2018, update for Office 2013 KB4011700 This article describes update 4011700 for Microsoft Office 2013 that was released on February 6, 2018. This update also applies to Office Home and Student 2013 RT. This update has a prerequisite. Be aware that the update in the Microsoft Download...
KLA11801 Security vulnerability in Zoom
Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories Zoom Security CVE-2020-11443 CVE-2020-11443 Related products Zoom-MSI CVE list CVE-2020-11443 critical Solution Update to the latest versi...
KLA11802 Security vulnerability in Zoom
Security vulnerability was found in Zoom. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions. Original advisories CVE-2020-11500 Related products Zoom-MSI CVE list CVE-2020-11500 warning Solution Update to the latest version Download Zoom...
March 17, 2020—KB4541332 (Preview of Monthly Rollup)
None None...
March 10, 2020—KB4541506 (Monthly Rollup)
None None...
Microsoft Windows 10 MSI Privilege Escalation
Exploit Title: MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation Author: nu11secur1ty Date: 2020-02-14 Vendor: Microsoft Link: https://github.com/nu11secur1ty/Windows10Exploits/tree/master/Undefined/CVE-2020-0683/nu11secur1ty CVE: CVE-2020-0683 + Credits: Ventsislav...
MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation Vulnerability
Exploit Title: MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation Author: nu11secur1ty Vendor: Microsoft Link: https://github.com/nu11secur1ty/Windows10Exploits/tree/master/Undefined/CVE-2020-0683/nu11secur1ty CVE: CVE-2020-0683 + Credits: Ventsislav Varbanovski @ nu11secur1...
MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation
MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation Exploit Title: MSI Packages Symbolic Links Processing - Windows 10 Privilege Escalation Author: nu11secur1ty Date: 2020-02-14 Vendor: Microsoft Link:...
Windows Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links. An attacker who successfully exploited this vulnerability could bypass access restrictions to add or remove files. To exploit this vulnerability, an attacker would first have to log o...
Metamorfo Returns with Keylogger Trick to Target Financial Firms
Researchers have discovered a recent spate of phishing emails spreading a new variant of Metamorfo, a financial malware known for targeting Brazilian companies. Now, however, it’s expanding its geographic range and adding a new technique. Metamorfo was first discovered in April 2018, in various...
January 7, 2020, update for Office 2016 (KB4464586)
None None...
CVE-2019-17435
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...
Privilege escalation
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...
CVE-2019-17435
A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installatio...
Local Privilege Escalation in GlobalProtect App for Windows
A Local Privilege Escalation vulnerability exists in the GlobalProtect App for Windows auto-update feature that can allow for modification of a GlobalProtect App MSI installer package on disk before installation. Ref GPC-8977, CVE-2019-17435 Successful exploitation of this issue may allow a...