4758 matches found
CVE-2020-11606
An issue was discovered on Samsung mobile devices with Q10.0 software. Information about application preview in the Secure Folder leaks on a locked device. The Samsung ID is SVE-2019-16463 April 2020...
Citrix Workspace app for macOS and Retina displays
This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. What’s changed? We have optimized Citrix workspace app for macOS and retina displays within virtual...
Microsoft Windows Type 1 Font Parsing Remote Code Execution Vulnerability (ADV200006)
Two remote code execution vulnerabilities exist in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. There are multiple ways an attacker could exploit the vulnerability, such as convincing a use...
Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-30403)
Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to obtain preview data of recently used applications...
CVE-2019-20617
An issue was discovered on Samsung mobile devices with P9.0 software. Secure Folder leaks preview data of recent apps. The Samsung ID is SVE-2018-13764 March 2019...
Wordpress WPForms 1.5.9 Plugin - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Plugin WPForms 1.5.9 - Persistent Cross-Site Scripting Vendor Homepage: https://wpforms.com Vendor Changelog: https://wordpress.org/plugins/wpforms-lite/developers Exploit Author: Jinson Varghese Behanan Author Advisor...
Type 1 Font Parsing Remote Code Execution Vulnerability
Microsoft has become aware of limited targeted Windows 7 based attacks that could leverage un-patched vulnerabilities in the Adobe Type Manager Library, and is providing the following guidance to help reduce customer risk until the security update is released. We appreciate the efforts of our...
March 17, 2020—KB4541334 (Preview of Monthly Rollup)
None None...
End of support for Office 2016 and Office 2019
None None...
Microsoft Word Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...
Microsoft Windows 10 Kernel SetMapMode MM_HIENGLISH information disclosure vulnerability
Summary An exploitable information disclosure vulnerability exists in the kernel of Microsoft Windows 10 Insider Preview Fast and Stable. A specially crafted executable can cause an out-of-bounds read, resulting in information disclosure. To trigger this vulnerability, the attacker needs to execu...
February 25, 2020—KB4537807 (Preview of Monthly Rollup)
None None...
Windows 10 win32kbase HMMarkObjectDestroy Arbitrary Code Execution Vulnerability
Summary A use after free vulnerability exists in Windows 10, Version 10.0.19033.1, when a Win32k component fails to properly handle objects in memory. Successful exploitation of this vulnerability can lead to arbitrary code execution in the kernel context and elevation of privileges. This...
Nextcloud server improper authorization vulnerability
Nextcloud is a client-server software suite for creating network hard disks. An improper authorization vulnerability exists in Nextcloud Server 17.0.0. An attacker can exploit the vulnerability to cause preview and file disclosure when opening a file to place a share link via the Gallery...
WhatsApp Bug Allows Malicious Code-Injection, One-Click RCE
Security researchers have identified a JavaScript vulnerability in the WhatsApp desktop platform that could allow cybercriminals to spread malware, phishing or ransomware campaigns through notification messages that appear completely normal to unsuspecting users. And, further investigation shows...
January 31, 2020—KB4539601 (Preview of Monthly Rollup)
None None...
January 23, 2020—KB4534324 (Preview of Monthly Rollup)
None None...
January 23, 2020—KB4534320 (Preview of Monthly Rollup)
None None...
