442 matches found
CVE-2021-42295
Visual Basic for Applications Information Disclosure Vulnerability...
CVE-2021-42295
Visual Basic for Applications Information Disclosure Vulnerability...
Information disclosure
Visual Basic for Applications Information Disclosure Vulnerability...
CVE-2021-42295 Visual Basic for Applications Information Disclosure Vulnerability
...
CVE-2021-42295
CVE-2021-42295 is a Visual Basic for Applications information disclosure vulnerability affecting Microsoft Office components. The NVD/NIST entry describes a confidentiality impact (C:H in CVSS 3.1 terms) with local exploitation requirements and user interaction, and a partial confidentiality impa...
Microsoft Office 2013 Information Disclosure Vulnerability (KB4486726)
This host is missing an important security update according to Microsoft KB4486726 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Office 2016 Information Disclosure Vulnerability (KB4504710)
This host is missing an important security update according to Microsoft KB4504710 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
CVE-2021-42295: Undefined Security Weakness
Visual Basic for Applications Information Disclosure Vulnerability...
Description of the security update for Office 2016: December 14, 2021 (KB4504710)
None None...
KLA12389 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...
PT-2021-6163
Name of the Vulnerable Software and Affected Versions Visual Basic for Applications affected versions not specified Description The issue is related to an information disclosure vulnerability in Visual Basic for Applications, which is part of the Microsoft Office suite. This vulnerability can be...
The importance of identity and Microsoft Azure Active Directory resilience
I love hearing my colleagues explain how they came to the industry because so many of their stories are unusual. I’m surprised how often I hear that people got into computer science by some fortuitous accident. Although he loved computers from the time he was a kid, Oren Melzer never expected to...
The vulnerability of the Visual Basic Runtime environment for Yokogawa software products, related to privilege management errors, allows a perpetrator to execute arbitrary code.
The vulnerability of the Visual Basic Runtime environment for Yokogawa software products is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Experts uncover a new Banking Trojan targeting Latin American users
Researchers on Tuesday revealed details of a new banking trojan targeting corporate users in Brazil at least since 2019 across various sectors such as engineering, healthcare, retail, manufacturing, finance, transportation, and government. Dubbed "Janeleiro" by Slovak cybersecurity firm ESET, the...
Zeppelin Ransomware Returns with New Trojan on Board
The Zeppelin ransomware has sailed back into relevance, after a hiatus of several months. A wave of attacks were spotted in August by Juniper Threatlab researchers, making use of a new trojan downloader. These, like an initial Zeppelin wave observed in late 2019, start with phishing emails with...
Revamped Qbot Trojan Packs New Punch: Hijacks Email Threads
Attacks attributed to the Qbot trojan, known as the “Swiss Army knife” of malware, are on the uptick with a reported 100,000 recent infections, according to researchers. Qbot, an ever-evolving information-stealing trojan that’s been around since 2008, has shifted tactics again and adopted a bevy ...
The vulnerability of the VBScript script handler in Internet Explorer allows a hacker to execute arbitrary code.
The vulnerability of VBScript script handlers in Internet Explorer exists due to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Office8570
This is a Microsoft PowerPoint presentation file .ppt that contains a malicious payload. The file is encoded with a password, and the presentation itself contains a malicious VBA Visual Basic for Applications macro that can be used to deliver a payload. The presentation contains a slide layout th...