Autor: Peter Leibling

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Windows DirectX allows an authorized attacker to elevate privileges locally.

Insertion of sensitive information into log file in Windows License Manager allows an authorized attacker to disclose information locally.

Double free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.

Concurrent execution using shared resource with improper synchronization (‚race condition‘) in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.

Improper limitation of a pathname to a restricted directory (‚path traversal‘) in OneDrive for Android allows an authorized attacker to elevate privileges over a network.

SAP korrigiert Schwachstellen in mehrere Produkten und dokumentiert dies in 18 Sicherheitsmitteilungen zum November-Patchday.

Sicherheitsupdates schließen mehrere Lücken in IBM Db2 und Business Automation Workflow.

Ein Sicherheitspatch beugt mögliche Attacken auf Windows-PCs mit Dell Display and Peripheral Manager vor.