Security Bulletin

RISK: Medium Risk

Microsoft Windows Winsock Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Windows when Winsock makes a call to a memory address without verifying that the address is valid. An attacker who successfully exploited this vulnerability could gain elevated privileges on a targeted system.

Last Update Date: 11 Nov 2015 16:49 Release Date: 11 Nov 2015 4118 Views

RISK: Medium Risk

Microsoft .NET Framework Elevation of Privilege Vulnerabilities

.NET Information Disclosure VulnerabilityAn information disclosure vulnerability exists in the .NET Framework DTD parsing of certain specially crafted XML files. An attacker who successfully exploited this vulnerability could gain read access to local files on the target system. .NET Elevation of Privilege VulnerabilityAn elevation of privilege...

Last Update Date: 11 Nov 2015 16:49 Release Date: 11 Nov 2015 4188 Views

RISK: Medium Risk

Microsoft Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when NDIS fails to check the length of a buffer prior to copying memory into it. An attacker who successfully exploited this vulnerability could gain elevated privileges on a targeted system.

Last Update Date: 11 Nov 2015 16:48 Release Date: 11 Nov 2015 4055 Views

RISK: High Risk

Microsoft Office Remote Code Execution Vulnerabilities

Multiple Microsoft Office Memory Corruption VulnerabilitiesMultiple remote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. If the current user...

Last Update Date: 11 Nov 2015 16:48 Release Date: 11 Nov 2015 4051 Views

RISK: Medium Risk

Microsoft Windows Remote Code Execution Vulnerabilities

Multiple Windows Kernel Memory Elevation of Privilege VulnerabilitiesMultiple elevation of privilege vulnerabilities exist in the way that Windows handles objects in memory. An attacker who successfully exploited the vulnerabilities could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Last Update Date: 11 Nov 2015 16:47 Release Date: 11 Nov 2015 4045 Views

RISK: Medium Risk

Microsoft Windows Journal Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows when a specially crafted Journal file is opened in Windows Journal. An attacker who successfully exploited the vulnerability could cause arbitrary code to execute in the context of the current user. If a user is logged on with administrative...

Last Update Date: 11 Nov 2015 16:47 Release Date: 11 Nov 2015 3983 Views

RISK: High Risk

Microsoft Edge Cumulative Security Update

Multiple Microsoft Edge Memory Corruption VulnerabilitiesMultiple remote code execution vulnerabilities exist when Microsoft Edge improperly accesses objects in memory. The vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. Microsoft Browser ASLR BypassA security feature...

Last Update Date: 11 Nov 2015 16:46 Release Date: 11 Nov 2015 3899 Views

RISK: High Risk

Microsoft Internet Explorer Cumulative Security Update

Multiple Internet Explorer Memory Corruption VulnerabilitiesMultiple remote code execution vulnerabilities exist when Internet Explorer improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. Scripting Engine Memory Corruption VulnerabilityA remote...

Last Update Date: 11 Nov 2015 16:46 Release Date: 11 Nov 2015 4045 Views

RISK: High Risk

Adobe Flash Player Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Adobe Flash Player. A remote user can cause arbitrary code to be executed and modify files on the target system.

Last Update Date: 11 Nov 2015 10:27 Release Date: 11 Nov 2015 4249 Views

RISK: Extremely High Risk

Apache Commons Java Library Remote Code Execution Vulnerability

A vulnerability was identified in Apache Commons Components. A remote user can execute arbitrary code on the target system.

Last Update Date: 10 Nov 2015 11:36 Release Date: 10 Nov 2015 4325 Views