Navigation section
exploitation
-
MS13-048 - Important : Vulnerability in Windows Kernel Could Allow Information Disclosure (2839229)
Severity Rating: Important Revision Note: V1.0 (June 11, 2013): Bulletin published. Summary: This security update resolves one privately reported vulnerability in Windows Kernel. The vulnerability could allow information disclosure if an attacker logs on to a system and...- News
- Thread
- attack credentials exploitation important information disclosure local user microsoft security update vulnerability windows kernel
- Replies: 0
- Forum: Security Alerts
-
MS13-042 - Important : Vulnerabilities in Microsoft Publisher Could Allow Remote Code Execution (283
Severity Rating: Important Revision Note: V1.0 (May 14, 2013): Bulletin published. Summary: This security update resolves eleven privately reported vulnerabilities in Microsoft Office. The vulnerabilities could allow remote code execution if a user open a specially crafted...- News
- Thread
- attack exploitation microsoft office publisher remote code execution revision note security update user rights vulnerabilities
- Replies: 0
- Forum: Security Alerts
-
MS13-045 - Important : Vulnerability in Windows Essentials Could Allow Information Disclosure (28137
Severity Rating: Important Revision Note: V1.0 (May 14, 2013): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Windows Writer. The vulnerability could allow information disclosure if a user opens Writer using a specially...- News
- Thread
- exploitation information disclosure microsoft patch security update vulnerability web attack windows essentials windows writer
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2847140): Vulnerability in Internet Explorer Could Allow Remote Code Ex
Revision Note: V1.0 (May 3, 2013): Advisory published. Summary: Microsoft is investigating public reports of a vulnerability in Internet Explorer 8. Microsoft is aware of attacks that attempt to exploit this vulnerability. More...- News
- Thread
- advisory cybersecurity exploitation internet explorer malware microsoft remote code security updates vulnerability
- Replies: 0
- Forum: Security Alerts
-
Evolving Response and the March 2013 Bulletin Release
As my career in security response has grown over the years, I am often reminded of the words of Italian author Giuseppe Tomasi Di Lampedusa, who stated, “If we want everything to remain as it is, it will be necessary for everything to change.” There are some things that we wish to...- News
- Thread
- advisory bulletin deployment exploitation guidance internet explorer kernel drivers march 2013 microsoft physical access privacy protection remote code execution security silverlight threats trustworthy computing updates vulnerabilities windows store
- Replies: 0
- Forum: Security Alerts
-
Windows 8 Chrome Vulnerability Exploited: How Hackers Gained Control Over Windows Systems
Chrome was hacked and used to take over windows....here's the whole story. http://news.cnet.com/8301-1009_3-57573064-83/researchers-win-$100000-for-chrome-hack-that-leaves-windows-vulnerable/- Jimbo22
- Thread
- breach chrome cybersecurity exploitation hacked hackers internet malware news protection research risk security software technology threat update vulnerability windows
- Replies: 2
- Forum: Windows Help and Support
-
TA13-064A: Oracle Java Contains Multiple Vulnerabilities
Original release date: March 05, 2013 Systems Affected Any system using Oracle Java 7, 6, 5 (1.7, 1.6, 1.5) including Java Platform Standard Edition 7 (Java SE 7) Java Platform Standard Edition 6 (Java SE 6) Java Platform Standard Edition 6 (Java SE 5) Java SE Development Kit (JDK...- News
- Thread
- applet arbitrary attack browser security code execution drive-by download exploitation java java control panel jdk jre malicious memory oracle plugin security update vulnerabilities web browser
- Replies: 0
- Forum: Security Alerts
-
TA13-010A: Oracle Java 7 Security Manager Bypass Vulnerability
Original release date: January 10, 2013 | Last revised: February 06, 2013 Systems Affected Any system using Oracle Java 7 (1.7, 1.7.0) including Java Platform Standard Edition 7 (Java SE 7) Java SE Development Kit (JDK 7) Java SE Runtime Environment (JRE 7) OpenJDK 7 and 7u IcedTea...- News
- Thread
- applet attack browser cve disable java drive-by download exploitation impact java 7 jdk jre malicious openjdk oracle security security settings solution update vulnerability
- Replies: 0
- Forum: Security Alerts
-
TA13-015A: Microsoft Releases Update for Internet Explorer Vulnerability CVE-2012-4792
Original release date: January 15, 2013 | Last revised: February 06, 2013 Systems Affected Microsoft Internet Explorer 6 Microsoft Internet Explorer 7 Microsoft Internet Explorer 8 Overview Microsoft has released Security Bulletin MS13-008 to address the CButton...- News
- Thread
- bulletin cve-2012-4792 cybersecurity denial of service exploitation internet explorer microsoft patch patch management remote access revision history security software systems affected update us-cert use-after-free vulnerability
- Replies: 0
- Forum: Security Alerts
-
Microsoft Security Advisory (2794220): Vulnerability in Internet Explorer Could Allow Remote Code Ex
Revision Note: V1.1 (December 31, 2012): Added link to Microsoft Fix it solution, "MSHTML Shim Workaround," that prevents exploitation of this issue. Summary: Microsoft is investigating public reports of a vulnerability in Internet Explorer 6, Internet Explorer 7, and Internet Explorer...- News
- Thread
- advisory attack exploitation fix internet explorer microsoft remote code security vulnerability workaround
- Replies: 0
- Forum: Security Alerts
-
MS12-081 - Critical : Vulnerability in Windows File Handling Component Could Allow Remote Code Execu
Severity Rating: Critical Revision Note: V1.0 (December 11, 2012): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user browses to a folder that...- News
- Thread
- critical exploitation microsoft ms12-081 remote code execution security update user rights vulnerability windows
- Replies: 0
- Forum: Security Alerts
-
MS12-065 - Important : Vulnerability in Microsoft Works Could Allow Remote Code Execution (2754670)
Severity Rating: Important Revision Note: V1.0 (October 9, 2012): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Microsoft Works. The vulnerability could allow remote code execution if a user opens a specially crafted...- News
- Thread
- bulletin exploitation important microsoft microsoft works remote code execution security update user rights vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS12-070 - Important : Vulnerability in SQL Server Could Allow Elevation of Privilege (2754849) - Ve
Severity Rating: Important Revision Note: V1.0 (October 9, 2012): Bulletin published. Summary: This security update resolves a privately reported vulnerability in Microsoft SQL Server on systems running SQL Server Reporting Services (SSRS). The vulnerability is a...- News
- Thread
- bulletin exploitation microsoft privileged access security sql server ssrs update vulnerability xss
- Replies: 0
- Forum: Security Alerts
-
Microsoft releases MS12-063 – Cumulative Security Update for Internet Explorer
Today we released Security Update MS12-063 to address limited attacks against a small number of computers through a vulnerability in Internet Explorer versions 9 and earlier. The majority of customers have automatic updates enabled and will not need to take any action because protections will be...- News
- Thread
- advisory automatic computers cumulative exploitation internet explorer manual update microsoft ms12-063 security trustworthy computing update vulnerability webcast
- Replies: 0
- Forum: Security Alerts
-
MS12-052 - Critical : Cumulative Security Update for Internet Explorer (2722913) - Version: 1.1
Severity Rating: Critical Revision Note: V1.1 (August 15, 2012): Removed erroneous FAQ for Windows 8 Release Preview and Windows Server 2012 Release Candidate releases. The Windows 8 Release Preview and Windows Server 2012 Release Candidate releases are not affected by the...- News
- Thread
- attackers august 2012 bulletin critical cumulative exploitation internet explorer ms12-052 privately reported release preview remote execution security system security update user rights vulnerabilities webpage windows 8 windows server
- Replies: 0
- Forum: Security Alerts
-
MS12-051 - Important : Vulnerability in Microsoft Office for Mac Could Allow Elevation of Privilege
Severity Rating: Important Revision Note: V1.0 (July 10, 2012): Bulletin published. Summary: This security update resolves one publicly disclosed vulnerability in Microsoft Office for Mac. The vulnerability could allow elevation of privilege if a malicious executable is...- News
- Thread
- elevation exploitation important mac malicious microsoft office security update vulnerability
- Replies: 0
- Forum: Security Alerts
-
MS12-042 - Important : Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (2711167
Severity Rating: Important Revision Note: V1.0 (June 12, 2012): Bulletin published. Summary: This security update resolves one privately reported vulnerability and one publicly disclosed vulnerability in Microsoft Windows. The vulnerabilities could allow elevation of...- News
- Thread
- anonymous users attack bulletin crafted application elevation exploitation important kernel local logon microsoft ms12-042 privately disclosed privilege remote attack reported security severity update vulnerabilities windows
- Replies: 0
- Forum: Security Alerts
-
MS12-041: Vulnerabilities in Windows Kernel-Mode Drivers could allow elevation of privilege: June 12
Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker logs on to a system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit any of these... More...- News
- Thread
- 2012 application drivers elevation exploitation june kernel-mode logon management microsoft patch privilege security support update vulnerabilities windows
- Replies: 0
- Forum: Knowledge Base (KB)
-
MS12-038 - Critical : Vulnerability in .NET Framework Could Allow Remote Code Execution (2706726) -
Severity Rating: Critical Revision Note: V1.0 (June 12): Bulletin published. Summary: This security update resolves one privately reported vulnerability in the Microsoft .NET Framework. The vulnerability could allow remote code execution on a client system if a user views a...- News
- Thread
- ad content bulletin code access security compromised websites critical email links exploitation instant messenger microsoft net framework privately reported remote code execution security update user rights user-provided content vulnerability web attack web browser xaml
- Replies: 0
- Forum: Security Alerts
-
MS10-070: Description of the security update for the Microsoft .NET Framework 3.5.1 in Windows 7 Ser
Resolves a vulnerability in ASP.NET that could allow information disclosure. An attacker that successfully exploited this vulnerability could read data, such as the view state, which was encrypted by the server. Link Removed- News
- Thread
- asp.net data disclosure encryption exploitation framework information microsoft security update vulnerability windows 7
- Replies: 0
- Forum: Knowledge Base (KB)