Microsoft Office SharePoint Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.

Dynamics Business Central Information Disclosure Vulnerability

Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network.

Microsoft PowerToys Tampering Vulnerability

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.

python: local privilege escalation via search path in Windows

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabled PATH entries. A non-administrative user can trigger a repair that incorrectly adds user-writable paths into PATH, enabling search-path hijacking of other users and system services. This affects Python (CPython) through 3.7.12, 3.8.x through 3.8.12, 3.9.x through 3.9.10, and 3.10.x through 3.10.2.

Microsoft Office Excel Remote Code Execution Vulnerability

Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Microsoft Office SharePoint Information Disclosure Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

Microsoft Office Excel Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

python: sys.path allowing code to be loaded from arbitrary locations

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file) is not affected.

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.

curl: Windows OpenSSL engine code injection

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it wants.

Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network.

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.

Microsoft Defender Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally.

Microsoft Office Graphics Component Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally.

SysInternals Elevation of Privilege Vulnerability

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

Dynamics Business Central Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network.

Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability

Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network.

Azure CycleCloud Remote Code Execution Vulnerability

Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally.