Maze #Ransomware Publishes 14GB of Stolen Southwire Files
The Maze Ransomware operators have released an additional 14GB of files that they claim were stolen from one of their victims for not paying a ransomware demand.
https://www.bleepingcomputer.com/news/security/maze-ransomware-publishes-14gb-of-stolen-southwire-files/
The Maze Ransomware operators have released an additional 14GB of files that they claim were stolen from one of their victims for not paying a ransomware demand.
https://www.bleepingcomputer.com/news/security/maze-ransomware-publishes-14gb-of-stolen-southwire-files/
BleepingComputer
Maze Ransomware Publishes 14GB of Stolen Southwire Files
The Maze Ransomware operators have released an additional 14GB of files that they claim were stolen from one of their victims for not paying a ransomware demand.
CISA Releases Test for Citrix ADC and Gateway Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has released a utility that enables users and administrators to test whether their Citrix Application Delivery Controller (ADC) and Citrix Gateway software is susceptible to the CVE-2019-19781 vulnerability. According to Citrix Security Bulletin CTX267027, beginning on January 20, 2020, Citrix will be releasing new versions of Citrix ADC and Citrix Gateway that will patch CVE-2019-19781.
CISA strongly advises affected organizations to review CERT/CC’s Vulnerability Note VU#619785 and Citrix Security Bulletin CTX267027 and apply the mitigations until Citrix releases new versions of the software.
https://www.us-cert.gov/ncas/current-activity/2020/01/13/cisa-releases-test-citrix-adc-and-gateway-vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has released a utility that enables users and administrators to test whether their Citrix Application Delivery Controller (ADC) and Citrix Gateway software is susceptible to the CVE-2019-19781 vulnerability. According to Citrix Security Bulletin CTX267027, beginning on January 20, 2020, Citrix will be releasing new versions of Citrix ADC and Citrix Gateway that will patch CVE-2019-19781.
CISA strongly advises affected organizations to review CERT/CC’s Vulnerability Note VU#619785 and Citrix Security Bulletin CTX267027 and apply the mitigations until Citrix releases new versions of the software.
https://www.us-cert.gov/ncas/current-activity/2020/01/13/cisa-releases-test-citrix-adc-and-gateway-vulnerability
www.us-cert.gov
CISA Releases Test for Citrix ADC and Gateway Vulnerability | CISA
The Cybersecurity and Infrastructure Security Agency (CISA) has released a utility that enables users and administrators to test whether their Citrix Application Delivery Controller (ADC) and Citrix Gateway software is susceptible to the CVE-2019-19781 vulnerability.…
Cisco addressed a high-severity bug in Webex that could allow Remote Code Execution
Tech giant Cisco has recently addressed two high-severity vulnerabilities affecting its Webex and IOS XE Software products.
https://securityaffairs.co/wordpress/96384/security/cisco-webex-rce.html
Tech giant Cisco has recently addressed two high-severity vulnerabilities affecting its Webex and IOS XE Software products.
https://securityaffairs.co/wordpress/96384/security/cisco-webex-rce.html
Security Affairs
Cisco addressed a high-severity bug in Webex that could allow RCE
Tech giant Cisco has recently addressed two high-severity vulnerabilities affecting its Webex and IOS XE Software products.
Microsoft expected to patch major Windows security flaw today, and may NOT patch Windows 7
https://mspoweruser.com/microsoft-expected-to-patch-major-windows-security-flaw-today-and-may-not-patch-windows-7/
https://mspoweruser.com/microsoft-expected-to-patch-major-windows-security-flaw-today-and-may-not-patch-windows-7/
MSPoweruser
Microsoft expected to patch major Windows security flaw today, and may NOT patch Windows 7
Today is Patch Tuesday, and there are reports by publication KrebsonSecurity that Microsoft may be getting ready to patch a very serious cryptographic flaw in Windows which could leave installations vulnerable to malware spoofing as trusted components. Sources…
What is Cable Haunt?
Cable Haunt is a critical vulnerability found in cable modems from various manufacturers across the world. The vulnerability enables remote attackers to execute abitrary code on your modem,
https://cablehaunt.com/
Cable Haunt is a critical vulnerability found in cable modems from various manufacturers across the world. The vulnerability enables remote attackers to execute abitrary code on your modem,
https://cablehaunt.com/
CISA Releases Test Tool for Citrix ADC and Gateway Vulnerability – Sysadmins Can Test Now
https://gbhackers.com/citrix-test-tool/
https://gbhackers.com/citrix-test-tool/
GBHackers On Security
CISA Releases Test Tool for Citrix ADC and Gateway Vulnerability
CISA has published a tool that allows users and administrators to check their Citrix Application Delivery Controller (ADC) and Citrix Gateway vulnerability
Microsoft Releases January 2020 Security Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Microsoft’s January 2020 Security Update Summary and Deployment Information and apply the necessary updates.
https://www.us-cert.gov/ncas/current-activity/2020/01/14/microsoft-releases-january-2020-security-updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review Microsoft’s January 2020 Security Update Summary and Deployment Information and apply the necessary updates.
https://www.us-cert.gov/ncas/current-activity/2020/01/14/microsoft-releases-january-2020-security-updates
www.us-cert.gov
Microsoft Releases January 2020 Security Updates | CISA
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
CISA Releases Emergency Directive and Activity Alert on Critical Microsoft Vulnerabilities
The Cybersecurity and Infrastructure Security Agency (CISA) has released an Emergency Directive and Activity Alert addressing critical vulnerabilities affecting Windows CryptoAPI and Windows Remote Desktop Protocol (RDP) server and client. A remote attacker could exploit these vulnerabilities to decrypt, modify, or inject data on user connections.
https://www.us-cert.gov/ncas/current-activity/2020/01/14/cisa-releases-emergency-directive-and-activity-alert-critical
The Cybersecurity and Infrastructure Security Agency (CISA) has released an Emergency Directive and Activity Alert addressing critical vulnerabilities affecting Windows CryptoAPI and Windows Remote Desktop Protocol (RDP) server and client. A remote attacker could exploit these vulnerabilities to decrypt, modify, or inject data on user connections.
https://www.us-cert.gov/ncas/current-activity/2020/01/14/cisa-releases-emergency-directive-and-activity-alert-critical
www.us-cert.gov
CISA Releases Emergency Directive and Activity Alert on Critical Microsoft Vulnerabilities | CISA
The Cybersecurity and Infrastructure Security Agency (CISA) has released an Emergency Directive and Activity Alert addressing critical vulnerabilities affecting Windows CryptoAPI, Windows Remote Desktop Gateway (RD Gateway), and Windows Remote Desktop Client.…
Alert (AA20-014A)
Critical Vulnerabilities in Microsoft Windows Operating Systems
CryptoAPI spoofing vulnerability – CVE-2020-0601
Multiple Windows RDP vulnerabilities – CVE-2020-0609, CVE-2020-0610, and CVE-2020-0611
https://www.us-cert.gov/ncas/alerts/aa20-014a
Critical Vulnerabilities in Microsoft Windows Operating Systems
CryptoAPI spoofing vulnerability – CVE-2020-0601
Multiple Windows RDP vulnerabilities – CVE-2020-0609, CVE-2020-0610, and CVE-2020-0611
https://www.us-cert.gov/ncas/alerts/aa20-014a
us-cert.cisa.gov
Critical Vulnerabilities in Microsoft Windows Operating Systems | CISA
New vulnerabilities are continually emerging, but the best defense against attackers exploiting patched vulnerabilities is simple: keep software up to date. Timely patching is one of the most efficient and cost-effective steps an organization can take to…
NSA's First Public Vulnerability Disclosure: An Effort to Build Trust
The U.S. National Security Agency (NSA) started a new chapter after discovering and reporting to Microsoft a vulnerability tracked as CVE-2020-0601 and impacting Windows 10 and Windows Server systems.
https://www.bleepingcomputer.com/news/security/nsas-first-public-vulnerability-disclosure-an-effort-to-build-trust/
The U.S. National Security Agency (NSA) started a new chapter after discovering and reporting to Microsoft a vulnerability tracked as CVE-2020-0601 and impacting Windows 10 and Windows Server systems.
https://www.bleepingcomputer.com/news/security/nsas-first-public-vulnerability-disclosure-an-effort-to-build-trust/
BleepingComputer
NSA's First Public Vulnerability Disclosure: An Effort to Build Trust
The U.S. National Security Agency (NSA) started a new chapter after discovering and reporting to Microsoft a vulnerability tracked as CVE-2020-0601 and impacting Windows 10 and Windows Server systems.
Intel Releases Security Updates
Intel has released security updates to address vulnerabilities in multiple products. An authenticated attacker with local access could exploit some of these vulnerabilities to gain escalation of privileges.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Intel advisories and apply the necessary updates:
SNMP Subagent Stand-Alone Advisory for Windows INTEL-SA-0030
Chipset Device Software Advisory INTEL-SA-00306
RWC 3 for Windows Advisory INTEL-SA-00308
Processor Graphics Advisory INTEL-SA-00314
VTune Amplifier for Windows Advisory INTEL-SA-00325
DAAL Advisory INTEL-SA-00332
https://www.us-cert.gov/ncas/current-activity/2020/01/14/intel-releases-security-updates
Intel has released security updates to address vulnerabilities in multiple products. An authenticated attacker with local access could exploit some of these vulnerabilities to gain escalation of privileges.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the following Intel advisories and apply the necessary updates:
SNMP Subagent Stand-Alone Advisory for Windows INTEL-SA-0030
Chipset Device Software Advisory INTEL-SA-00306
RWC 3 for Windows Advisory INTEL-SA-00308
Processor Graphics Advisory INTEL-SA-00314
VTune Amplifier for Windows Advisory INTEL-SA-00325
DAAL Advisory INTEL-SA-00332
https://www.us-cert.gov/ncas/current-activity/2020/01/14/intel-releases-security-updates
www.us-cert.gov
Intel Releases Security Updates | CISA
Intel has released security updates to address vulnerabilities in multiple products. An authenticated attacker with local access could exploit some of these vulnerabilities to gain escalation of privileges.
The Cybersecurity and Infrastructure Security Agency…
The Cybersecurity and Infrastructure Security Agency…
Vulnerabilidad en VMware Tools
Fecha de publicación: 15/01/2020
Importancia: 4 - Alta
Recursos afectados:
VMware Tools, versión 10.x.y para Windows.
Descripción:
Se ha publicado una vulnerabilidad de criticidad alta. Un atacante local podría realizar una escalada de privilegios en el sistema.
Solución:
Se recomienda actualizar a VMware Tools a la versión 11.0.0 y posteriores.
Si no es posible actualizar, se puede prevenir su explotación siguiendo estas indicaciones de VMware.
Detalle:
La operación de reparación de VMware Tools para Windows tiene una condición de carrera. Un atacante, en la máquina virtual invitada, podría escalar privilegios en una máquina virtual de Windows. Se ha reservado el identificador CVE-2020-3941 para esta vulnerabilidad.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/vulnerabilidad-vmware-tools
Fecha de publicación: 15/01/2020
Importancia: 4 - Alta
Recursos afectados:
VMware Tools, versión 10.x.y para Windows.
Descripción:
Se ha publicado una vulnerabilidad de criticidad alta. Un atacante local podría realizar una escalada de privilegios en el sistema.
Solución:
Se recomienda actualizar a VMware Tools a la versión 11.0.0 y posteriores.
Si no es posible actualizar, se puede prevenir su explotación siguiendo estas indicaciones de VMware.
Detalle:
La operación de reparación de VMware Tools para Windows tiene una condición de carrera. Un atacante, en la máquina virtual invitada, podría escalar privilegios en una máquina virtual de Windows. Se ha reservado el identificador CVE-2020-3941 para esta vulnerabilidad.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/vulnerabilidad-vmware-tools
INCIBE-CERT
Vulnerabilidad en VMware Tools
Se ha publicado una vulnerabilidad de criticidad alta. Un atacante local podría realizar una escalada de privilegios en el sistema.
Actualizaciones críticas en Oracle (enero 2020)
Fecha de publicación: 15/01/2020
Importancia: 5 - Crítica
Descripción:
Oracle ha publicado una actualización crítica con parches para corregir vulnerabilidades que afectan a múltiples productos.
Solución:
Aplicar los parches correspondientes según los productos afectados. La información para descargar las actualizaciones puede obtenerse del boletín de seguridad publicado por Oracle.
Detalle:
Esta actualización resuelve un total de 255 vulnerabilidades (con 334 parches), algunas de las cuales son críticas. El detalle de las vulnerabilidades resueltas se puede consultar en el enlace de Oracle de la sección de Referencias.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/actualizaciones-criticas-oracle-enero-2020
Fecha de publicación: 15/01/2020
Importancia: 5 - Crítica
Descripción:
Oracle ha publicado una actualización crítica con parches para corregir vulnerabilidades que afectan a múltiples productos.
Solución:
Aplicar los parches correspondientes según los productos afectados. La información para descargar las actualizaciones puede obtenerse del boletín de seguridad publicado por Oracle.
Detalle:
Esta actualización resuelve un total de 255 vulnerabilidades (con 334 parches), algunas de las cuales son críticas. El detalle de las vulnerabilidades resueltas se puede consultar en el enlace de Oracle de la sección de Referencias.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/actualizaciones-criticas-oracle-enero-2020
INCIBE-CERT
Actualizaciones críticas en Oracle (enero 2020)
Oracle ha publicado una actualización crítica con parches para corregir vulnerabilidades que afectan a múltiples productos.
Boletín de seguridad de Microsoft de enero de 2020
Fecha de publicación: 15/01/2020
Importancia: 5 - Crítica
Recursos afectados:
Microsoft Windows;
Internet Explorer;
Microsoft Office, Microsoft Office Services y Web Apps;
ASP.NET Core;
.NET Core;
.NET Framework;
OneDrive para Android;
Microsoft Dynamics;
Descripción:
La publicación de actualizaciones de seguridad de Microsoft correspondiente al mes de enero consta de 50 vulnerabilidades, 8 clasificadas como críticas y 42 como importantes.
Solución:
Instalar la actualización de seguridad correspondiente. En la página de información de la instalación de las mismas actualizaciones, se informa de los distintos métodos para llevarlas a cabo.
Detalle:
Las vulnerabilidades publicadas se corresponden con los siguientes tipos:
divulgación de información,
escalada de privilegios,
denegación de servicio,
ejecución remota de código,
omisión de característica de seguridad,
suplantación de identidad.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/boletin-seguridad-microsoft-enero-2020
Fecha de publicación: 15/01/2020
Importancia: 5 - Crítica
Recursos afectados:
Microsoft Windows;
Internet Explorer;
Microsoft Office, Microsoft Office Services y Web Apps;
ASP.NET Core;
.NET Core;
.NET Framework;
OneDrive para Android;
Microsoft Dynamics;
Descripción:
La publicación de actualizaciones de seguridad de Microsoft correspondiente al mes de enero consta de 50 vulnerabilidades, 8 clasificadas como críticas y 42 como importantes.
Solución:
Instalar la actualización de seguridad correspondiente. En la página de información de la instalación de las mismas actualizaciones, se informa de los distintos métodos para llevarlas a cabo.
Detalle:
Las vulnerabilidades publicadas se corresponden con los siguientes tipos:
divulgación de información,
escalada de privilegios,
denegación de servicio,
ejecución remota de código,
omisión de característica de seguridad,
suplantación de identidad.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/boletin-seguridad-microsoft-enero-2020
INCIBE-CERT
Boletín de seguridad de Microsoft de enero de 2020
La publicación de actualizaciones de seguridad de Microsoft correspondiente al mes de enero consta de 50 vulnerabilidades, 8 clasificadas como críticas y 42 como importantes.
Actualización de seguridad de SAP de enero de 2020
Fecha de publicación: 15/01/2020
Importancia: 3 - Media
Recursos afectados:
SAP Process Integration - Rest Adapter (SAP_XIAF), versiones - 7.31, 7.40, 7.50;
SAP NetWeaver Internet Communication Manager, versiones:
KRNL32NUC y KRNL32UC 7.21, 7.21EXT, 7.22 y 7.22EXT;
KRNL64NUC y KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT y 7.49;
KERNEL 7.21, 7.22, 7.49 y 7.53;
RTCISM, versión - 100;
SAP Disclosure Management, versión - 10.1;
Automated Note Search Tool (SAP Basis), versiones - 7.0, 7.01,7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 y 7.54;
SAP UI, versiones - 7.5, 7.51, 7.52, 7.53 y 7.54;
SAP UI 700, versión - 2.0;
SAP Leasing, versiones:
(SAP_Appl) 6.18;
(EA_Appl) 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16 y 6.17;
Descripción:
SAP ha publicado varias actualizaciones de seguridad de diferentes productos en su comunicado mensual.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/actualizacion-seguridad-sap-enero-2020
Fecha de publicación: 15/01/2020
Importancia: 3 - Media
Recursos afectados:
SAP Process Integration - Rest Adapter (SAP_XIAF), versiones - 7.31, 7.40, 7.50;
SAP NetWeaver Internet Communication Manager, versiones:
KRNL32NUC y KRNL32UC 7.21, 7.21EXT, 7.22 y 7.22EXT;
KRNL64NUC y KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT y 7.49;
KERNEL 7.21, 7.22, 7.49 y 7.53;
RTCISM, versión - 100;
SAP Disclosure Management, versión - 10.1;
Automated Note Search Tool (SAP Basis), versiones - 7.0, 7.01,7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 y 7.54;
SAP UI, versiones - 7.5, 7.51, 7.52, 7.53 y 7.54;
SAP UI 700, versión - 2.0;
SAP Leasing, versiones:
(SAP_Appl) 6.18;
(EA_Appl) 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16 y 6.17;
Descripción:
SAP ha publicado varias actualizaciones de seguridad de diferentes productos en su comunicado mensual.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/actualizacion-seguridad-sap-enero-2020
INCIBE-CERT
Actualización de seguridad de SAP de enero de 2020
SAP ha publicado varias actualizaciones de seguridad de diferentes productos en su comunicado mensual.
Vulnerabilidad en VTune Amplifier para Windows de Intel
Fecha de publicación: 15/01/2020
Importancia: 4 - Alta
Recursos afectados:
Intel VTune Amplifier para Windows, versiones anteriores a la actualización 8.
Descripción:
Intel ha detectado una vulnerabilidad de criticidad alta. Un atacante local podría realizar una escalada de privilegios en el sistema.
Solución:
Aplicar la actualización 8 o posterior de Intel VTune Amplifier para Windows.
Detalle:
Un control de acceso inapropiado en el driver para Intel VTune Amplifier para Windows podría permitir a un atacante local realizar una escalada de privilegios en el sistema. Se ha reservado el identificador CVE-2019-14613 para esta vulnerabilidad.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/vulnerabilidad-vtune-amplifier-windows-intel
Fecha de publicación: 15/01/2020
Importancia: 4 - Alta
Recursos afectados:
Intel VTune Amplifier para Windows, versiones anteriores a la actualización 8.
Descripción:
Intel ha detectado una vulnerabilidad de criticidad alta. Un atacante local podría realizar una escalada de privilegios en el sistema.
Solución:
Aplicar la actualización 8 o posterior de Intel VTune Amplifier para Windows.
Detalle:
Un control de acceso inapropiado en el driver para Intel VTune Amplifier para Windows podría permitir a un atacante local realizar una escalada de privilegios en el sistema. Se ha reservado el identificador CVE-2019-14613 para esta vulnerabilidad.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/vulnerabilidad-vtune-amplifier-windows-intel
INCIBE-CERT
Vulnerabilidad en VTune Amplifier para Windows de Intel
Intel ha detectado una vulnerabilidad de criticidad alta. Un atacante local podría realizar una escalada de privilegios en el sistema.
Introducing Microsoft Application Inspector
[...]we created a source code analyzer called Microsoft Application Inspector to identify “interesting” features and metadata, like the use of cryptography, connecting to a remote entity, and the platforms it runs on.
[...]
https://www.microsoft.com/security/blog/2020/01/16/introducing-microsoft-application-inspector/
[...]we created a source code analyzer called Microsoft Application Inspector to identify “interesting” features and metadata, like the use of cryptography, connecting to a remote entity, and the platforms it runs on.
[...]
https://www.microsoft.com/security/blog/2020/01/16/introducing-microsoft-application-inspector/
Microsoft Security Blog
Introducing Microsoft Application Inspector
Microsoft Application Inspector is a new source code analyzer that helps you understand what a program does by identifying interesting features and characteristics.
Vulnerabilidad en Superdome Flex Server de HPE
Fecha de publicación: 16/01/2020
Importancia: 4 - Alta
Recursos afectados:
HPE Superdome Flex Server, versión 3.20.186 y anteriores.
Descripción:
HPE ha detectado una vulnerabilidad de criticidad alta que afecta a su servidor Flex Superdome. Un atacante remoto, con privilegios de administrador, podría revelar información.
Solución:
Actualizar el firmware del dispositivo a la versión 3.20.206 o posterior.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/vulnerabilidad-superdome-flex-server-hpe
Fecha de publicación: 16/01/2020
Importancia: 4 - Alta
Recursos afectados:
HPE Superdome Flex Server, versión 3.20.186 y anteriores.
Descripción:
HPE ha detectado una vulnerabilidad de criticidad alta que afecta a su servidor Flex Superdome. Un atacante remoto, con privilegios de administrador, podría revelar información.
Solución:
Actualizar el firmware del dispositivo a la versión 3.20.206 o posterior.
https://www.incibe-cert.es/alerta-temprana/avisos-seguridad/vulnerabilidad-superdome-flex-server-hpe
INCIBE-CERT
Vulnerabilidad en Superdome Flex Server de HPE
HPE ha detectado una vulnerabilidad de criticidad alta que afecta a su servidor Flex Superdome. Un atacante remoto, con privilegios de administrador, podría revelar información.
Microsoft Issues Mitigation for Actively Exploited IE Zero-Day
Microsoft published a security advisory containing mitigation measures for an actively exploited zero-day remote code execution (RCE) vulnerability impacting Internet Explorer.
Redmond's advisory says that the company is aware of "limited targeted attacks" targeting this vulnerability.
https://www.bleepingcomputer.com/news/security/microsoft-issues-mitigation-for-actively-exploited-ie-zero-day/
Microsoft published a security advisory containing mitigation measures for an actively exploited zero-day remote code execution (RCE) vulnerability impacting Internet Explorer.
Redmond's advisory says that the company is aware of "limited targeted attacks" targeting this vulnerability.
https://www.bleepingcomputer.com/news/security/microsoft-issues-mitigation-for-actively-exploited-ie-zero-day/
BleepingComputer
Microsoft Issues Mitigation for Actively Exploited IE Zero-Day
Microsoft published a security advisory containing mitigation measures for an actively exploited zero-day remote code execution (RCE) vulnerability impacting Internet Explorer.
Microsoft will fix currently exploited vulnerability affecting IE9,10 and 11
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
https://mspoweruser.com/microsoft-will-fix-currently-exploited-vulnerability-affecting-ie910-and-11/
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
https://mspoweruser.com/microsoft-will-fix-currently-exploited-vulnerability-affecting-ie910-and-11/
MSPoweruser
Microsoft will fix currently exploited vulnerability affecting IE9,10 and 11
At 7.44% Internet Explorer still has more market share than Edge and only slightly less than Firefox. It is therefore good news that Microsoft is set to fix a flaw in the browser which could result in Remote Code Execution if some-one visits a specially crafted…