1685 matches found
MS16-145: Edge browser the TypedArray. sort UAF vulnerability analysis-vulnerability warning-the black bar safety net
In this article, we will provide the reader detailed analysis of how to use the MS Edge browser in the UAF vulnerability to remote code execution. This article will provide readers in-depth analysis of the impact of MS Edge CVE-2016-7288 UAF vulnerability root causes, and how to reliably trigger...
CVE-2017-0188
A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could...
KB4015380: Security Update for the ATMFD.dll Information Disclosure Vulnerability (April 2017)
The remote Windows host is missing security update KB4015380. It is, therefore, affected by an information disclosure vulnerability in the Adobe Type Manager Font Driver ATMFD.dll due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this, by convincing a...
April 11, 2017—KB4015547 (Security-only update)
None None...
Local Windows Admins Can Hijack Sessions Without Credentials
A researcher has exposed how attackers with local admin privileges could use native command-line Windows tools to hijack other users’ sessions without credentials. Researcher Alexander Korznikov on Friday published a report in which he describes how he could, locally and remotely via Remote Deskt...
MS17-014: Description of the security update for Office 2010: March 14, 2017
MS17-014: Description of the security update for Office 2010: March 14, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...
MS17-008: Security update for Windows Hyper-V: March 14, 2017
Resolves a vulnerability in Windows that could allow remote code execution if an authenticated attacker on a guest operating system runs a specially crafted application that causes the Hyper-V host operating system to execute arbitrary code. SummaryThis security update resolves vulnerabilities in...
CVE-2016-7614
An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors...
CVE-2016-7614
An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors...
Code injection
An issue was discovered in certain Apple products. iCloud before 6.1 is affected. The issue involves the "Windows Security" component. It allows local users to obtain sensitive information from iCloud desktop-client process memory via unspecified vectors...
CVE-2016-7614
CVE-2016-7614 affects Apple iCloud for Windows (6.1) where the Windows Security component may leak sensitive information from the iCloud desktop client process memory due to inadequate memory handling. Local users could access leaked data via unspecified vectors. Apple’s documentation for iCloud ...
shellcode programming: in memory in the parsing API to address-vulnerability warning-the black bar safety net
For Windows all with position-independent code, PIC core feature is based on a real-time analysis the API function address. It is a very important task. Here I introduce two popular methods, the use of the import address table IAT, and export address table to EAT is by far the most stable method...
Firefox nsSMILTimeContainer::NotifyTimeChange() RCE
This module exploits an out-of-bounds indexing/use-after-free condition present in nsSMILTimeContainer::NotifyTimeChange across numerous versions of Mozilla Firefox on Microsoft Windows. This module requires Metasploit: https://metasploit.com/download Current source:...
MS14-036: Description of the security update for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, and Windows Server 2003: June 10, 2014
MS14-036: Description of the security update for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, and Windows Server 2003: June 10, 2014 Introduction This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, and Microsoft Lync that could allow...
MS14-057: Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: October 14, 2014
MS14-057: Description of the security update for the .NET Framework 4.5.1 and the .NET Framework 4.5.2 for Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: October 14, 2014 View products that this article applies to. Introduction The security update resolves the vulnerabilities that could...
MS13-057: Description of the security update for wmv9vcm.dll (codec) on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: July 9, 2013
MS13-057: Description of the security update for wmv9vcm.dll codec on Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008: July 9, 2013 INTRODUCTION Microsoft has released security bulletin MS13-057. To view the complete security bulletin, go to one of the following Microsoft...
MS11-092: Description of the security update for Windows XP, Windows Vista, and Windows 7: December 13, 2011
MS11-092: Description of the security update for Windows XP, Windows Vista, and Windows 7: December 13, 2011 INTRODUCTION Microsoft has released security bulletin MS11-092. To view the complete security bulletin, visit one of the following Microsoft websites: Home users:...
Apple iCloud for Windows Information Disclosure Vulnerability
Apple iCloud for Windows is a Windows-based cloud service from Apple USA that supports storage of music, photos, apps, contacts, etc. Windows Security is one of the security components. An information disclosure vulnerability exists in the Windows Security component of Apple iCloud for Windows...