Lucene search
+L

1282 matches found

Talos Blog
Talos Blog
added 2017/06/13 1:48 p.m.195 views

Microsoft Patch Tuesday - June 2017

Today, Microsoft has release their monthly set of security updates designed to address vulnerabilities. This month's release addresses 92 vulnerabilities with 17 of them rated critical and 75 rated important. Impacted products include Edge, Internet Explorer, Office, Sharepoint, Skype for Busines...

10CVSS1.9AI score0.90026EPSS
SaveExploits143
Microsoft KB
Microsoft KB
added 2017/06/13 7:00 a.m.130 views

Description of the security update for Skype for Business 2016: June 13, 2017

None None...

9.3CVSS7AI score0.39019EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2017/06/13 7:00 a.m.83 views

Microsoft Teams help & learning

None None...

9.3CVSS7.3AI score0.39019EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
added 2017/06/13 7:00 a.m.41 views

Skype for Business Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync Servers fail to properly sanitize specially crafted content. An authenticated attacker who successfully exploited this vulnerability could execute HTML and JavaScript content in the Skype for Business or Lync...

5.4CVSS1.8AI score0.22433EPSS
SaveExploits4
Symantec
Symantec
added 2017/06/13 12:00 a.m.116 views

Microsoft Windows Uniscribe CVE-2017-0283 Remote Code Execution Vulnerability

Description Microsoft Windows Uniscribe is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Live...

9.3CVSS0.4AI score0.39019EPSS
SaveExploits3Affected Software8
Symantec
Symantec
added 2017/06/13 12:00 a.m.46 views

Microsoft Skype for Business and Lync Server CVE-2017-8550 Remote Code Execution Vulnerability

Description Microsoft Skype for Business and Lync Server are prone to a remote code-execution vulnerability. Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service...

8.5CVSS1.6AI score0.22433EPSS
SaveExploits4References1Affected Software1
Kaspersky
Kaspersky
added 2017/06/13 12:00 a.m.2431 views

KLA11047 Multiple vulnerabilities in Microsoft Development Tools

Multiple serious vulnerabilities have been found in Microsoft Development Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information and execute arbitrary code. Original advisories - Exploitation Public exploits exist for this vulnerability. Malware exists for this...

9.3CVSS9.7AI score0.39019EPSS
SaveExploits3References11
Symantec
Symantec
added 2017/06/13 12:00 a.m.84 views

Microsoft Windows Graphics Component CVE-2017-8527 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user to open a malicious file or webpage. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed explo...

9.3CVSS0.4AI score0.19023EPSS
SaveExploits0Affected Software7
Tenable Nessus
Tenable Nessus
added 2017/06/13 12:00 a.m.235 views

Security Update for Live Meeting 2007 / Lync 2010 and 2013 / Skype for Business 2016 (June 2017)

The Microsoft Live Meeting 2007, Lync 2010, Lync 2013, or Skype 2016 for Business application installed on the remote Windows host is missing a security update. It is, therefore, affected remote code execution vulnerability in Windows Uniscribe software due to improper handling of objects in...

9.3CVSS7.9AI score0.39019EPSS
SaveExploits3References8
BDU FSTEC
BDU FSTEC
added 2017/06/08 12:00 a.m.18 views

The vulnerabilities in Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server allow attackers to execute arbitrary code.

The vulnerabilities of Microsoft Word, Skype for Business, Microsoft Office, Microsoft SharePoint Server, Microsoft SharePoint Foundation, Microsoft Office Web Apps, and Office Online Server are related to improper data processing. Exploiting these vulnerabilities allows a malicious actor to...

9.3CVSS7.7AI score0.15757EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/08 12:00 a.m.12 views

The vulnerabilities in the Skype instant messaging program allow a hacker to execute arbitrary code.

The numerous vulnerabilities in the Skype instant messaging program are related to deficiencies in access control. Exploiting these vulnerabilities allows a malicious actor, operating locally, to execute arbitrary code using Trojan programs and files such as msi.dll, dpapi.dll, or cryptui.dll,...

7.2CVSS7.8AI score0.01875EPSS
SaveExploits0References3
hackapp
hackapp
added 2017/05/22 7:19 p.m.29 views

Skype - free IM & video calls - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Skype - free IM & video calls published at the 'play' market has multiple vulnerabilities...

0.9AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2017/05/12 2:29 p.m.30 views

CVE-2017-0281

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint...

9.3CVSS8AI score0.15757EPSS
SaveExploits1References2
OSV
OSV
added 2017/05/12 2:29 p.m.7 views

CVE-2017-0281

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint...

7.8CVSS6.4AI score0.81005EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2017/05/12 12:00 a.m.56 views

CVE-2017-0281

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1, SharePoint Enterprise Server 2013 SP1, SharePoint Enterprise Server 2016, SharePoint Foundation 2013 SP1, Sharepoint...

9.3CVSS8.2AI score0.81005EPSS
SaveIn wildExploits1References3
rapid7community
rapid7community
added 2017/05/10 1:56 p.m.359 views

Patch Tuesday - May 2017

It's a relatively light month as far as Patch Tuesdays go, with Microsoft issuing fixes for a total of seven vulnerabilities as part of their standard update program. However, an eighth, highly critical vulnerability CVE-2017-0290 that had some of the security community buzzing over the weekend w...

9.3CVSS8.1AI score0.8155EPSS
SaveExploits7
Microsoft Security Update
Microsoft Security Update
added 2017/05/09 5:00 p.m.9 views

Security Update for Skype for Business 2016 (KB3191858) 64-Bit Edition

A security vulnerability exists in Skype for Business 2016 64-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

7.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
added 2017/05/09 5:00 p.m.11 views

Security Update for Skype for Business 2016 (KB3191858) 32-Bit Edition

A security vulnerability exists in Skype for Business 2016 32-Bit Edition that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

7.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2017/05/09 7:00 a.m.81 views

Description of the security update for Skype for Business 2016: May 9, 2017

None None...

9.3CVSS7AI score0.15757EPSS
SaveExploits1
Symantec
Symantec
added 2017/05/09 12:00 a.m.129 views

Microsoft Office CVE-2017-0281 Remote Code Execution Vulnerability

Description Microsoft Office is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsoft...

9.3CVSS0.5AI score0.15757EPSS
SaveExploits1Affected Software9
Rows per page
Query Builder