Security Bulletin

RISK: Medium Risk

Microsoft WebDAV Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Microsoft Web Distributed Authoring and Versioning (WebDAV) client when WebDAV improperly validates input. An attacker who successfully exploited this vulnerability could execute arbitrary code with elevated permissions.

Last Update Date: 11 Feb 2016 12:24 Release Date: 11 Feb 2016 3132 Views

RISK: High Risk

Microsoft Office Remote Code Execution Vulnerabilities

Multiple Microsoft Office Memory Corruption Vulnerabilities Multiple remote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. If the...

Last Update Date: 11 Feb 2016 12:24 Release Date: 11 Feb 2016 3152 Views

RISK: High Risk

Microsoft Windows Remote Code Execution Vulnerabilities

Windows Elevation of Privilege VulnerabilityAn elevation of privilege vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; ...

Last Update Date: 11 Feb 2016 12:24 Release Date: 11 Feb 2016 3073 Views

RISK: Medium Risk

Microsoft Windows Journal Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows when a specially crafted Journal file is opened in Windows Journal. An attacker who successfully exploited this vulnerability could cause arbitrary code to execute in the context of the current user. If a user is...

Last Update Date: 11 Feb 2016 12:24 Release Date: 11 Feb 2016 3039 Views

RISK: Medium Risk

Microsoft Windows PDF Library Remote Code Execultion Vulnerabilities

Microsoft Windows Reader VulnerabilityA remote code execution vulnerability exists in Microsoft Windows when a specially crafted file is opened in Windows Reader. An attacker who successfully exploited this vulnerability could cause arbitrary code to execute in the context of the current user. If a user is logged on...

Last Update Date: 11 Feb 2016 12:23 Release Date: 11 Feb 2016 3123 Views

RISK: High Risk

Microsoft Edge Cumulative Security Update

Microsoft Browser Spoofing VulnerabilityA spoofing vulnerability exists when a Microsoft browser does not properly parse HTTP responses. An attacker who successfully exploited this vulnerability could trick a user by redirecting them to a specially crafted website. The specially crafted website could spoof content or be used as a...

Last Update Date: 11 Feb 2016 12:23 Release Date: 11 Feb 2016 2990 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

DLL Loading Remote Code Execution VulnerabilityA remote code execution vulnerability exists when Internet Explorer improperly validates input before loading dynamic link library (DLL) files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view...

Last Update Date: 11 Feb 2016 12:23 Release Date: 11 Feb 2016 3189 Views

RISK: Medium Risk

Microsoft ASP.NET Access Control Vulnerability

A vulnerability has been identified in Microsoft ASP.NET. A remote user can conduct cross-site request forgery attacks to remove two-factor authentication. Password authentication is not affected.

Last Update Date: 11 Feb 2016 11:31 Release Date: 11 Feb 2016 3320 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 11 Feb 2016 11:29 Release Date: 11 Feb 2016 3296 Views

RISK: High Risk

Adobe Connect / Experience Manager / Photoshop CC / Bridge CC Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Connect, Experience Manager, Photoshop CC and Bridge CC. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 11 Feb 2016 11:28 Release Date: 11 Feb 2016 3377 Views