Navigation section
exploitation
-
MS16-123 - Important: Security Update for Windows Kernel-Mode Drivers (3192892) - Version: 1.0
Severity Rating: Important Revision Note: V1.0 (October 11, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege if an attacker logs on to an affected system and runs a...- News
- Thread
- application attacker bulletin control drivers exploitation important kernel-mode microsoft ms16-123 october 2016 patch privilege revision security system technical update vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS16-107 - Critical: Security Update for Microsoft Office (3185852) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (September 13, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file...- News
- Thread
- arbitrary code computer security critical cybersecurity exploitation malware microsoft office ms16-107 office file patch remote code execution revision note security update september 2016 software security update user account control user rights vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
MS16-102 - Critical: Security Update for Microsoft Windows PDF Library (3182248) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (August 9, 2016): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user views specially crafted PDF content online or opens a specially crafted...- News
- Thread
- administrative rights august 2016 critical cybersecurity data security exploit exploitation microsoft ms16-102 patch pdf library remote code execution security bulletin security update software update technical note user account control user rights vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS16-070 - Critical: Security Update for Microsoft Office (3163610) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (June 14, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file. An attacker who...- News
- Thread
- arbitrary code attackers bulletin critical execution exploitation file june 2016 microsoft ms16-070 office patch remote code revision security software update user rights vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA16-132A: Exploitation of SAP Business Applications
Original release date: May 11, 2016 Systems Affected Outdated or misconfigured SAP systems Overview At least 36 organizations worldwide are affected by an SAP vulnerability Link Removed. Security researchers from Onapsis discovered indicators of exploitation against these organizations’ SAP...- News
- Thread
- business applications cloud security compliance crm erp exploitation governance invoker servlet mitigation onapsis patching plm remote access risk management sap scm security threat intelligence vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS16-058 - Important: Security Update for Windows IIS (3141083) - Version: 1.0
Severity Rating: Important Revision Note: V1.0 (May 10, 2016): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker with access to the local system executes a malicious application. An...- News
- Thread
- admin rights bulletin exploitation iis malicious application may 2016 microsoft ms16-058 patch remote code execution revision note security security bulletin system security update user accounts user rights vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
TA16-105A: Apple Ends Support for QuickTime for Windows; New Vulnerabilities Announced
Original release date: April 14, 2016 Systems Affected Microsoft Windows with Apple QuickTime installed Overview According to Trend Micro, Apple will no longer be providing security updates for QuickTime for Windows, leaving this software vulnerable to exploitation. [1] Description All...- News
- Thread
- advisories apple cybersecurity data loss exploitation integrity privacy quicktime remote access security software support trend micro uninstall vulnerabilities windows zero day initiative
- Replies: 0
- Forum: Security Alerts
-
MS16-001 - Critical: Cumulative Security Update for Internet Explorer (3124903) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (January 12, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The more severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...- News
- Thread
- 2016 administrative rights critical cumulative update data protection exploitation internet explorer malware ms16-001 patch remote code execution revision note security bulletin security update system control technet user account user rights vulnerability webpage security
- Replies: 0
- Forum: Security Alerts
-
MS15-124 - Critical: Cumulative Security Update for Internet Explorer (3116180) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (December 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...- News
- Thread
- administrative rights attackers bulletin critical cumulative december 2015 exploitation internet explorer ms15-124 patch remote code execution security technet update user accounts user rights vulnerabilities webpage
- Replies: 0
- Forum: Security Alerts
-
TA15-314A: Web Shells – Threat Awareness and Guidance
Original release date: November 10, 2015 Systems Affected Web servers that allow web shells Overview This alert describes the frequent use of web shells as an exploitation vector. Web shells can be used to obtain unauthorized access and can lead to wider network compromise. This alert...- News
- Thread
- application security asp command control cyber security data exfiltration detection exploitation incident response malware mitigation network compromise perl php python remote access security practices threat updates vulnerabilities web shells
- Replies: 0
- Forum: Security Alerts
-
MS15-122 - Important: Security Update for Kerberos to Address Security Feature Bypass...
Severity Rating: Important Revision Note: V1.0 (November 10, 2015): Bulletin published. Summary: This security update resolves a security feature bypass in Microsoft Windows. An attacker could bypass Kerberos authentication on a target machine and decrypt drives protected by BitLocker. The...- News
- Thread
- 2015 authentication bitlocker bypass cybersecurity drives exploitation important kerberos ms15-122 patch protection security system update v1.0 vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
3108638 - Update for Windows Hyper-V to Address CPU Weakness - Version: 1.0
Revision Note: V1.0 (November 10, 2015): Advisory published. Summary: Microsoft is announcing the availability of a security update for Windows Hyper-V to protect against a denial of service condition that can be triggered with certain central processing unit (CPU) chipsets. Although the...- News
- Thread
- 2015 advisory chipset cpu denial of service exploitation hyper-v kernel mode microsoft patch security system update technology update version 1.0 virtualization weakness windows
- Replies: 0
- Forum: Security Alerts
-
MS15-099 - Critical: Vulnerabilities in Microsoft Office Could Allow Remote Code Execution...
Severity Rating: Critical Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Office. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file...- News
- Thread
- critical cybersecurity exploitation malware microsoft office patch remote code execution revision note risk security september 2015 update user rights vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
MS15-093 - Critical: Security Update for Internet Explorer (3088903) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (August 18, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Internet Explorer. The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker...- News
- Thread
- 2015 administrative rights browser update critical cybersecurity exploitation internet explorer internet security malware prevention ms15-093 patch protection remote code execution security update system security technet threat update user rights vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS15-082 - Important: Vulnerabilities in RDP Could Allow Remote Code Execution (3080348) -...
Severity Rating: Important Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if an attacker sends a specially crafted sequence of packets to a targeted system...- News
- Thread
- august 2015 bulletin cybersecurity exploitation important ms15-082 networking patch rdp remote access remote code execution security update system risk update vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS15-079 - Critical: Cumulative Security Update for Internet Explorer (3082442) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...- News
- Thread
- 2015 administrative critical cumulative exploitation internet explorer it security microsoft ms15-079 patch remote code execution revision note risk security update software support update user rights vulnerabilities webpage
- Replies: 0
- Forum: Security Alerts
-
MS15-088 - Important: Unsafe Command Line Parameter Passing Could Allow Information...
Severity Rating: Important Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update helps to resolve an information disclosure vulnerability in Microsoft Windows, Internet Explorer, and Microsoft Office. To exploit the vulnerability an attacker would first have to...- News
- Thread
- bug fix command line exploitation information disclosure internet explorer microsoft office ms15-088 notepad office updates patch powerpoint revision note risk mitigation security software security software vulnerability technical bulletin update vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS15-069 - Important: Vulnerabilities in Windows Could Allow Remote Code Execution...
Severity Rating: Important Revision Note: V1.0 (July 14, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow Remote Code Execution if an attacker first places a specially crafted dynamic link library (DLL) file...- News
- Thread
- attacker control cybersecurity dll exploitation malware microsoft ms15-069 patch remote code execution revision note rtf file security system protection update user rights vulnerabilities windows
- Replies: 0
- Forum: Security Alerts
-
MS15-069 - Important: Vulnerabilities in Windows Could Allow Remote Code Execution...
Severity Rating: Important Revision Note: V1.0 (July 14, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow Remote Code Execution if an attacker first places a specially crafted dynamic link library (DLL) file...- News
- Thread
- attack control cybersecurity dll exploitation important malware microsoft ms15-069 patch protection remote code execution revision note rtf security update user rights vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS15-065 - Critical: Security Update for Internet Explorer (3076321) - Version: 1.0
Severity Rating: Critical Revision Note: V1.0 (July 14, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Internet Explorer. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet...- News
- Thread
- administrative browser security bulletin critical exploitation internet explorer it security july 2015 ms15-065 patch remote code execution security bulletin security update software update system security technet update user rights vulnerabilities webpage
- Replies: 0
- Forum: Security Alerts