NVD disclosure day

Published threat advisories for August 15, 2012

CVE advisoryKnown Exploit

CVE-2012-1535

Adobe Flash Player Code Execution Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A vulnerability in Adobe Flash Player allows attackers to execute arbitrary code or cause a denial of service. This affects older versions of Flash Player on Windows, Mac OS X, and Linux. This poses a business risk through potential system compromise and data exposure.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2012-1856

Microsoft Office ActiveX Control Code Execution Vulnerability

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A flaw in Microsoft's TabStrip ActiveX control could allow attackers to run code on affected systems via crafted documents or webpages. This may lead to system compromise and business risk. Mitigation includes identifying exposed assets and applying fixes.

NVD published: • CISA KEV