Security Bulletin

RISK: Medium Risk

VMWare Products Session Hijack Vulnerability

A vulnerability was identified in multiple VMware products. A remote user can hijack the target user's session.Affected products include VMware vCenter Server, VMware vCloud Director and VMware vRealize Automation Identity Appliance.

Last Update Date: 15 Apr 2016 10:24 Release Date: 15 Apr 2016 6484 Views

RISK: Medium Risk

Juniper ScreenOS Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Juniper ScreenOS, which can be exploited by malicious remote users to cause denial of service and obtain potentially sensitive information.

Last Update Date: 15 Apr 2016 10:24 Release Date: 15 Apr 2016 6393 Views

RISK: High Risk

Google Chrome Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Google Chrome. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

Last Update Date: 14 Apr 2016 09:11 Release Date: 14 Apr 2016 6201 Views

RISK: Medium Risk

Microsoft Windows HTTP.sys Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP 2. protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2. requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system...

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 6271 Views

RISK: Medium Risk

Microsoft Windows CSRSS Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Windows when the Client-Server Run-time Subsystem (CSRSS) fails to properly manage process tokens in memory.

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 6257 Views

RISK: Medium Risk

Microsoft Windows SAM and LSAD Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) remote protocols when they accept authentication levels that do not protect them adequately. The vulnerability is caused by the way the SAM and LSAD remote...

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 6523 Views

RISK: Medium Risk

Microsoft Windows Secondary Logon Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Windows when the Windows Secondary Logon Service fails to properly manage requests in memory. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs; view, change, or...

Last Update Date: 13 Apr 2016 12:04 Release Date: 13 Apr 2016 6882 Views

RISK: High Risk

Microsoft Windows Hyper-V Multiple Vulnerabilties

Hyper-V Remote Code Execution VulnerabilityA remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on...

Last Update Date: 13 Apr 2016 12:03 Release Date: 13 Apr 2016 6101 Views

RISK: Medium Risk

Microsoft Windows OLE Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious code.

Last Update Date: 13 Apr 2016 12:03 Release Date: 13 Apr 2016 6109 Views

RISK: High Risk

Microsoft Office Multiple Vulnerabilities

Multiple remote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerabilities could run arbitrary code in the context of the current user. If the current user is logged on with administrative...

Last Update Date: 13 Apr 2016 12:00 Release Date: 13 Apr 2016 6079 Views