Tal Beery

O servidor TLS/SSL no Juniper Networks Junos Space permite o uso de cifras de chave estática, o que reduz a confidencialidade do tráfego no caminho. Essas cifras não suportam Sigilo Forward Perfeito (PFS), impactando a confidencialidade de longo prazo das comunicações criptografadas.

An information disclosure issue exists due to the Windows bowser.sys kernel-mode driver's failure to properly handle objects in memory. This could allow an attacker to access the contents of system memory, potentially obtaining sensitive information and affecting the system.

The issue is related to an elevation of privilege vulnerability in Microsoft Cortana, which allows arbitrary website browsing on the lockscreen. This is due to insufficient access restrictions in the virtual voice assistant Cortana in Windows operating systems. The exploitation of this issue may allow an attacker to elevate their privileges.

An Elevation of Privilege issue exists due to Cortana retrieving data from user input services without considering status. This allows attackers to affect the system. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.