PT-2019-3028 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A security feature bypass exists when Windows incorrectly validates CAB file signatures, allowing an attacker to inject code into a CAB file without invalidating the file's signature. To...

Security feature bypass

cPanel before 71.9980.37 allows e-mail injection during cPAddons moderation SEC-396...

CVE-2019-1126

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...

CVE-2019-1126

Technical details (affected product/version, root cause, exploit info, mitigation) are not provided in the connected documents. The CVE-2019-1126 entry describes an ADFS security feature bypass; monitor official advisories for remediation updates.

Security feature bypass

Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

Security feature bypass

Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ8064, MSM8909W,...

CVE-2019-1167

CVE-2019-1167 describes a WDAC security feature bypass in Windows Defender Application Control. The vulnerability could allow an attacker with local access to bypass WDAC enforcement when PowerShell is running in Constrained Language Mode. Microsoft’s advisory notes affected PowerShell Core versi...

Windows Defender Application Control Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows Defender Application Control WDAC which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could circumvent PowerShell Core Constrained Language Mode on the machine. To exploit the...

KLA11525 SB vulnerability in Microsoft Developer Tools

A security feature bypass vulnerability was found in Windows Defender Application Control Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2019-1167 Related products Windows-Defender CVE list CVE-2019-1167 warning KB list Solution Install...

CVE-2019-1126

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...

CVE-2019-1126

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy.To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...

CVE-2019-0975

A security feature bypass vulnerability exists when Active Directory Federation Services ADFS improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security...

CVE-2019-0975

CVE-2019-0975 describes a security feature bypass in Active Directory Federation Services (ADFS) due to improper updates to the list of banned IP addresses. Exploitation requires a victim ADFS administrator to perform the list-update action, enabling an attacker to bypass security checks. The ass...

Security Update for Microsoft Dynamics 365 (on-premises) (May 2019)

The version of Microsoft Dynamics 365 on-premises installed on the remote Windows host is 7.x 7.0.3.147, 8.x 8.2.6.19, 9.x 9.0.4.5. It is, therefore, affected by a security feature bypass vulnerability. An unauthenticated, remote attacker could exploit this issue, to send attachment types that ar...

ADFS Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Active Directory Federation Services ADFS improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security...

ADFS Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy. To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...

Authorization Bypass

powershell is vulnerable to authorization bypass. An attacker is able to bypass Device Guard due to a flaw in the security feature...

Privilege Escalation

Microsoft Dynamics On-Premise is vulnerable to Security Feature Bypass. An attacker could gain elevated privileges by capturing and editing the POST request to include a special character in the extension which may leads to modification of information...

Security feature bypass

Application protection bypass vulnerability in McAfee Enterprise Security Manager ESM prior to 11.2.0 and prior to 10.4.0 allows unauthenticated user to impersonate system users via specially crafted parameters...

Intel Open Cloud Integrity Technology Security Feature Issue Vulnerability (CNVD-2019-29213)

Intel Open Cloud Integrity Technology CIT is a set of solutions from Intel Corporation USA for establishing a hardware root of trust and building a chain of trust between hardware, operating systems, hypervisors, virtual machines and Docker containers. A security signature issue vulnerability...