Jul 01, 2020 · Microsoft Confirms Windows Codecs Library Zero-Day Flaws Microsoft has confirmed a pair of bugs affecting Windows 10 machines. Specifically, the company says it has found some security problems in
Sep 24, 2019 · Of the two, the former is a zero-day vulnerability in Internet Explorer affecting versions 9, 10, and 11 and is the more severe one. The remote code execution flaw, if exploited successfully Dec 10, 2019 · Zero-Day Bug Exploited in the Wild. CVE-2019-1458 is an elevation-of-privilege vulnerability in Win32k, which has a live zero-day exploit circulating in the wild. The exploit allows attackers to Sep 25, 2019 · Microsoft has urgently patched two security vulnerabilities, one of which is an actively exploited zero-day. Urgently Patched Microsoft Zero-Day. Microsoft has issued an urgent fix for a zero-day vulnerability under active exploitation. The vendors describe it as scripting engine memory corruption vulnerability targeting Internet Explorer. Microsoft has acknowledged new zero-day vulnerabilities in all versions of Windows that are already being explored by attackers. The two remote code execution vulnerabilities have been found in Jun 15, 2019 · SkyBox Blog TeamJune 15, 2019. Over the last week, a couple of Microsoft zero-day vulnerabilities have been reported. The first is a denial-of-service flaw which lives in SymCrypt, the main cryptography library for the Windows operating system.
Microsoft has rated the vulnerability as "critical" for servers, and says it affects all supported versions of Windows Server including Windows Server 2003, 2008, 2008 R2, 2012, and 2012 R2.
Mar 25, 2020 · Cybercriminals are exploiting two unpatched zero-day flaws affecting all supported versions of Windows, Microsoft has warned. The Remote Code Execution (RCE) vulnerabilities affect Adobe Type Jul 12, 2019 · It has been revealed that a threat actor once best known for cyber bank robbery in Russia has made a move to espionage. The highly targeted attacks against government institutions in Eastern
However, SandboxEscaper has just released PoC exploits for two more new unpatched zero-day vulnerabilities in Microsoft Windows, making the zero-day disclosure to a total of 4 in the past 24 hours. Out of 4, a new exploit bypasses the patch Microsoft released for an elevation of privilege vulnerability (CVE-2019-0841) in Windows that existed
“In these campaigns, Pawn Storm used a previously unknown zero-day in Adobe’s Flash (CVE-2016-7855, fixed on October 26, 2016 with an emergency update) in combination with a privilege escalation in Microsoft’s Windows Operating System (CVE-2016-7255) that was fixed on November 8, 2016.”