漏洞银行丨0Daybank

Chromium is an open-source web browser, powered by WebKit (Blink).

This update upgrades Chromium to version 52.0.2743.116.

Security Fix(es):

* Multiple flaws were found in the p[……]

net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments.

An attacker which knows a connections client IP, server IP and serv[……]

The Network Time Protocol (NTP) is used to synchronize a computer’s time with another referenced time source. These packages include the ntpd service which continuously adjusts system[……]

– Multiple remote code execution vulnerabilities exist in Microsoft Office software when the Office software fails to properly handle objects in memory.

– An information disclosure vu[……]

A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory.

This security update is rated Critical for all supported editions[……]

Microsoft Windows Authentication is vulnerable to multiple Elevation of Privilege issues.
The security update resolves the following vulnerabilities:

An elevation of privilege vulner[……]

A security feature bypass vulnerability exists when Windows Secure Boot improperly loads a boot manager that is affected by the vulnerability. An attacker who successfully exploited th[……]

This security update resolves a vulnerability in Microsoft Windows.
The update addresses the vulnerability by preventing Universal Outlook from disclosing usernames and passwords.
Th[……]

This security update is rated Critical for Internet Explorer 9 (IE 9), and Internet Explorer 11 (IE 11) on affected Windows clients, and Moderate for Internet Explorer 9 (IE 9), Intern[……]

The security update addresses the vulnerabilities by correcting how the Windows font library handles embedded fonts.

This security update is rated Critical for:
– All supported relea[……]

Multiple elevation of privilege vulnerabilities exist when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited these vulne[……]

This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage us[……]