Mercredi 17 novembre 2021

Microsoft Exchange

Microsoft Exchange Server Remote Code Execution Vulnerability — An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

Microsoft Office

Microsoft Excel Security Feature Bypass — A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

Microsoft Windows

Microsoft Windows Win32k Privilege Escalation Vulnerability — Unspecified vulnerability allows for an authenticated user to escalate privileges.

Perl Exiftool

ExifTool Remote Code Execution Vulnerability — Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image