Security Bulletin

RISK: High Risk

Microsoft Windows Shell Remote Code Execution Vulnerabilities

Toolbar Use After Free VulnerabilityA remote code execution vulnerability exists when Windows Shell improperly handles objects in memory. An attacker who successfully exploited this vulnerability could cause arbitrary code to execute in the context of the current user. If a user is logged on with administrative user rights...

Last Update Date: 14 Oct 2015 10:21 Release Date: 14 Oct 2015 3225 Views

RISK: Medium Risk

Microsoft JScript and VBScript Multiple Vulnerabilities

Multiple Scripting Engine Memory Corruption VulnerabilitiesRemote code execution vulnerabilities exist in the way that the VBScript and JScript engines, when handling objects in memory in Internet Explorer, render. In a web-based attack scenario, an attacker could host a specially crafted website that is designed...

Last Update Date: 14 Oct 2015 10:21 Release Date: 14 Oct 2015 3230 Views

RISK: High Risk

Microsoft Edge Cumulative Security Update

Microsoft Edge Information Disclosure VulnerabilityAn information disclosure vulnerability exists when Microsoft Edge improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer. Microsoft Edge XSS Filter BypassA cross-site scripting (XSS) filter bypass...

Last Update Date: 14 Oct 2015 10:20 Release Date: 14 Oct 2015 3167 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

Multiple Internet Explorer Memory Corruption VulnerabilitiesRemote code execution vulnerabilities exist when Internet Explorer improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. Multiple Scripting Engine Memory Corruption VulnerabilitiesRemote code...

Last Update Date: 14 Oct 2015 10:20 Release Date: 14 Oct 2015 3206 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome, which can be exploited by remote attacker to execute arbitrary code and disclose sensitive information.

Last Update Date: 14 Oct 2015 09:38 Release Date: 14 Oct 2015 3146 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed, bypass security controls, and obtain potentially sensitive information on the target system.

Last Update Date: 14 Oct 2015 09:38 Release Date: 14 Oct 2015 3189 Views

RISK: High Risk

Adobe Acrobat/Reader Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Acrobat/Reader. A remote user can cause arbitrary code to be executed, bypass security controls, and obtain potentially sensitive information on the target system.

Last Update Date: 14 Oct 2015 09:37 Release Date: 14 Oct 2015 3173 Views

RISK: Medium Risk

PHP Phar Extension Denial of Service Vulnerability

Two vulnerabilities were identified in PHP. A remote user can cause the target service to crash.

Last Update Date: 6 Oct 2015 09:34 Release Date: 6 Oct 2015 3222 Views

RISK: Medium Risk

Cisco Wireless LAN Controller 802.11i Denial of Service Vulnerability

A vulnerability was identified in Cisco Wireless LAN Controller 802.11i. A remote user can cause denial of service conditions on the target system.

Last Update Date: 5 Oct 2015 17:43 Release Date: 5 Oct 2015 3303 Views

RISK: Extremely High Risk

Android Stagefright 2.0 Media Library Remote Code Execution Vulnerabilities

Multiple vulnerabilities have been identified in Android Media Library. By sending a crafted MP3 or MP4 file, remote attackers can exploit the vulnerabilities to execute arbitrary code on the target system. Note: Vendor patch is currently unavailable. However, workaround is provided.

Last Update Date: 5 Oct 2015 17:42 Release Date: 5 Oct 2015 4047 Views