KB4592440: Windows 10 Version 1809 and Windows Server 2019 December 2020 Security Update

The remote Windows host is missing security update 4592440. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-16958, CVE-2020-16959, CVE-2020-16960, CVE-2020-16961, CVE-2020-16962,...

KB4593226: Windows 10 Version 1607 and Windows Server 2016 December 2020 Security Update

The remote Windows host is missing security update 4593226. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2020-16958, CVE-2020-16959, CVE-2020-16960, CVE-2020-16961, CVE-2020-16962,...

Security Updates for Microsoft Excel Products (December 2020)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2020-17123, CVE-2020-17125,...

KLA12023 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, obtain sensitive information, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code...

KB4592464: Windows 10 December 2020 Security Update

The remote Windows host is missing security update 4592464. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

Kirby Access Control Error Vulnerability

Kirby is a file-based content management system CMS. A security vulnerability exists in Kirby CMS versions prior to 3.3.6 and Kirby Panel versions prior to 2.5.14, which stems from the fact that the admin panel may be accessible if hosted in a .dev domain. To protect new installations on public...

Linux kernel security feature issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security signature issue vulnerability that stems from allowing rapid scanning of open UDP ports. An attacker could exploit the vulnerability to...

CVE-2020-17090

Microsoft Defender for Endpoint Security Feature Bypass Vulnerability...

CVE-2020-17067

Microsoft Excel Security Feature Bypass Vulnerability...

CVE-2020-17040

Windows Hyper-V Security Feature Bypass Vulnerability...

CVE-2020-17040

Windows Hyper-V Security Feature Bypass Vulnerability...

Security feature bypass

Microsoft Word Security Feature Bypass Vulnerability...

Security feature bypass

Windows Hyper-V Security Feature Bypass Vulnerability...

CVE-2020-17067 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2020-17020 Microsoft Word Security Feature Bypass Vulnerability

...

Microsoft Office Security Feature Bypass Vulnerability (Nov 2020) - Mac OS X

This host is missing a critical security update for Microsoft Office on Mac OS X according to Microsoft security update November 2020. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Microsoft Office 2013 Service Pack 1 Security Feature Bypass And RCE Vulnerabilities (KB4486725)

This host is missing an important security update according to Microsoft KB4486725 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Microsoft Word 2016 Security Feature Bypass Vulnerability (KB4486719)

This host is missing an important security update according to Microsoft KB4486719 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

CVE-2020-17049 Kerberos KDC Security Feature Bypass Vulnerability

...

CVE-2020-17049

A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...