Radar de Segurança

CVE-2016-7855 Severidade em análise no catálogo em 03/03/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-416

Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code. EN

CVE-2016-7262 Severidade em análise no catálogo em 03/03/2022

Microsoft Office Security Feature Bypass Vulnerability

Microsoft · Excel · CWE-20

A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands. EN

CVE-2016-7193 Severidade em análise no catálogo em 03/03/2022

Microsoft Office Memory Corruption Vulnerability

Microsoft · Office · CWE-119

Microsoft Office contains a memory corruption vulnerability which can allow for remote code execution. EN

CVE-2016-5195 Severidade em análise no catálogo em 03/03/2022

Linux Kernel Race Condition Vulnerability

Linux · Kernel · CWE-362

Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges. EN

CVE-2016-4117 Severidade em análise Ransomware no catálogo em 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution. EN

CVE-2016-1019 Severidade em análise Ransomware no catálogo em 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to cause a denial of service or possibly execute arbitrary code. EN

CVE-2016-0099 Severidade em análise Ransomware no catálogo em 03/03/2022

Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability

Microsoft · Windows · CWE-264

A privilege escalation vulnerability exists in Microsoft Windows if the Windows Secondary Logon Service fails to properly manage request handles in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. EN

CVE-2015-7645 Severidade em análise Ransomware no catálogo em 03/03/2022

Adobe Flash Player Arbitrary Code Execution Vulnerability

Adobe · Flash Player

Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file. EN

CVE-2015-5119 Severidade em análise no catálogo em 03/03/2022

Adobe Flash Player Use-After-Free Vulnerability

Adobe · Flash Player · CWE-119

A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution. EN

CVE-2015-4902 Severidade em análise no catálogo em 03/03/2022

Oracle Java SE Integrity Check Vulnerability

Oracle · Java SE

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. EN

CVE-2015-3043 Severidade em análise no catálogo em 03/03/2022

Adobe Flash Player Memory Corruption Vulnerability

Adobe · Flash Player · CWE-787

A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution. EN

CVE-2015-2590 Severidade em análise no catálogo em 03/03/2022

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

Oracle · Java SE

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. EN

CVE-2015-2545 Severidade em análise no catálogo em 03/03/2022

Microsoft Office Malformed EPS File Vulnerability

Microsoft · Office · CWE-20

Microsoft Office allows remote attackers to execute arbitrary code via a crafted EPS image. EN

CVE-2015-2424 Severidade em análise no catálogo em 03/03/2022

Microsoft PowerPoint Memory Corruption Vulnerability

Microsoft · PowerPoint · CWE-119

Microsoft PowerPoint allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document. EN

CVE-2015-2387 Severidade em análise no catálogo em 03/03/2022

Microsoft ATM Font Driver Privilege Escalation Vulnerability

Microsoft · ATM Font Driver · CWE-264

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application. EN

CVE-2015-1701 Severidade em análise Ransomware no catálogo em 03/03/2022

Microsoft Win32k Privilege Escalation Vulnerability

Microsoft · Win32k · CWE-264

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges. EN

CVE-2015-1642 Severidade em análise no catálogo em 03/03/2022

Microsoft Office Memory Corruption Vulnerability

Microsoft · Office · CWE-119

Microsoft Office contains a memory corruption vulnerability that allows remote attackers to execute arbitrary code via a crafted document. EN

CVE-2014-4114 Severidade em análise no catálogo em 03/03/2022

Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability

Microsoft · Windows · CWE-20

A vulnerability exists in Windows Object Linking & Embedding (OLE) that could allow remote code execution if a user opens a file that contains a specially crafted OLE object. EN

CVE-2014-0496 Severidade em análise no catálogo em 03/03/2022

Adobe Reader and Acrobat Use-After-Free Vulnerability

Adobe · Reader and Acrobat · CWE-399

Adobe Reader and Acrobat contain a use-after-free vulnerability which can allow for code execution. EN

CVE-2013-5065 Severidade em análise no catálogo em 03/03/2022

Microsoft Windows Kernel Privilege Escalation Vulnerability

Microsoft · Windows · CWE-20

Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges. EN

CVE-2013-3897 Severidade em análise no catálogo em 03/03/2022

Microsoft Internet Explorer Use-After-Free Vulnerability

Microsoft · Internet Explorer · CWE-399

A use-after-free vulnerability exists within CDisplayPointer in Microsoft Internet Explorer that allows an attacker to remotely execute arbitrary code. EN

CVE-2013-3346 Severidade em análise no catálogo em 03/03/2022

Adobe Reader and Acrobat Memory Corruption Vulnerability

Adobe · Reader and Acrobat · CWE-119

Adobe Reader and Acrobat contain a memory corruption vulnerability which can allow attackers to execute arbitrary code or cause a denial of service. EN

CVE-2013-1347 Severidade em análise no catálogo em 03/03/2022

Microsoft Internet Explorer Remote Code Execution Vulnerability

Microsoft · Internet Explorer · CWE-94

This vulnerability may corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user within Internet Explorer. EN

CVE-2013-0641 Severidade em análise no catálogo em 03/03/2022

Adobe Reader Buffer Overflow Vulnerability

Adobe · Reader · CWE-120

A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution. EN