{"id":693,"date":"2023-05-13T09:05:43","date_gmt":"2023-05-13T12:05:43","guid":{"rendered":"https:\/\/techsecurity.com.br\/?p=693"},"modified":"2023-05-13T09:05:44","modified_gmt":"2023-05-13T12:05:44","slug":"de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows","status":"publish","type":"post","link":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/","title":{"rendered":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows"},"content":{"rendered":"\n

A Microsoft corrigiu uma vulnerabilidade de seguran\u00e7a esta semana que poderia ser usada por invasores remotos para contornar patches recentes para uma falha cr\u00edtica de seguran\u00e7a 0day do Outlook. <\/p>\n\n\n\n

Esse zero click bypass (CVE-2023-29324<\/a>) afeta todas as vers\u00f5es suportadas do Windows e foi relatado pelo pesquisador de seguran\u00e7a da Akamai, Ben Barnea. “Todas as vers\u00f5es do Windows s\u00e3o afetadas pela vulnerabilidade. Como resultado, todas as vers\u00f5es do cliente Outlook no Windows s\u00e3o explor\u00e1veis”<\/em>, explicou Barnea. <\/p>\n\n\n\n

O bug 0day do Outlook corrigido em mar\u00e7o (CVE-2023-23397<\/a>) \u00e9 uma falha de escalonamento de privil\u00e9gios no cliente Outlook para Windows que permite que invasores roubem hashes NTLM sem intera\u00e7\u00e3o do usu\u00e1rio em ataques de retransmiss\u00e3o NTLM. Atores de amea\u00e7as podem explor\u00e1-lo enviando mensagens com propriedades MAPI estendidas contendo caminhos UNC para sons de notifica\u00e7\u00e3o personalizados, fazendo com que o cliente Outlook se conecte a compartilhamentos SMB sob seu controle. A Microsoft resolveu o problema incluindo uma chamada MapUrlToZone para garantir que os caminhos UNC n\u00e3o se vinculem a URLs da Internet e substituindo os sons por lembretes padr\u00e3o, se houver.<\/p>\n\n\n\n

Bypass do Outlook zero-click privilege escalation<\/p>\n\n\n\n

Ao analisar a mitiga\u00e7\u00e3o CVE-2023-23397, Barnea descobriu que a URL nas mensagens de lembrete poderia ser alterada para enganar as verifica\u00e7\u00f5es de MapUrlToZone para aceitar caminhos remotos como caminhos locais. Isso contorna o patch da Microsoft e faz com que o cliente Windows Outlook se conecte ao servidor do invasor. “Esse problema parece ser resultado da manipula\u00e7\u00e3o complexa de caminhos no Windows”<\/em>, explica Barnea. \u00c0 luz das descobertas de Barnea, a Microsoft adverte que “os clientes devem instalar as atualiza\u00e7\u00f5es para CVE-2023-23397 e CVE-2023-29324 para ficarem totalmente protegidos”. Embora o Internet Explorer tenha sido desativado, a plataforma MSHTML vulner\u00e1vel ainda est\u00e1 sendo usada por alguns aplicativos por meio do controle do WebBrowser, bem como pelo modo Internet Explorer no Microsoft Edge.<\/p>\n\n\n\n

Por causa disso, Redmond recomenda que os clientes instalem as atualiza\u00e7\u00f5es de seguran\u00e7a deste m\u00eas e as atualiza\u00e7\u00f5es cumulativas do IE lan\u00e7adas para lidar com a vulnerabilidade CVE-2023-29324 para permanecer totalmente protegido. <\/p>\n\n\n\n

Explorado por hackers russos para roubo de dados <\/p>\n\n\n\n

Como a Microsoft revelou em um relat\u00f3rio privado de an\u00e1lise de amea\u00e7as, ele foi explorado por hackers do estado russo APT28 (tamb\u00e9m conhecidos como STRONTIUM, Sednit, Sofacy ou Fancy Bear) em ataques contra pelo menos 14 organiza\u00e7\u00f5es governamentais, militares, de energia e transporte entre meados de abril e Dezembro de 2022. O APT28 foi vinculado ao servi\u00e7o de intelig\u00eancia militar da R\u00fassia, a Diretoria Principal do Estado-Maior das For\u00e7as Armadas da Federa\u00e7\u00e3o Russa (GRU). Os agentes de amea\u00e7as usaram notas e tarefas maliciosas do Outlook para roubar hashes NTLM, for\u00e7ando os dispositivos de seus alvos a se autenticarem em compartilhamentos SMB controlados pelo invasor. Essas credenciais roubadas foram usadas para movimenta\u00e7\u00e3o lateral nas redes das v\u00edtimas e para alterar as permiss\u00f5es da caixa de correio do Outlook para exfiltrar e-mails de contas espec\u00edficas. A Microsoft lan\u00e7ou um script para ajudar os administradores do Exchange a verificar se seus servidores foram violados, mas tamb\u00e9m os aconselhou a procurar outros sinais de explora\u00e7\u00e3o se os agentes da amea\u00e7a limpassem seus rastros.<\/p>\n","protected":false},"excerpt":{"rendered":"

De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows<\/p>\n","protected":false},"author":2,"featured_media":694,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[19],"tags":[111,97],"class_list":["post-693","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-informativo","tag-0day","tag-outlook"],"yoast_head":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows - Tech Security<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows - Tech Security\" \/>\n<meta property=\"og:description\" content=\"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows\" \/>\n<meta property=\"og:url\" content=\"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/\" \/>\n<meta property=\"og:site_name\" content=\"Tech Security\" \/>\n<meta property=\"article:published_time\" content=\"2023-05-13T12:05:43+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-13T12:05:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/05\/2023-05-13-outlook1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"601\" \/>\n\t<meta property=\"og:image:height\" content=\"343\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"redator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"redator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/\"},\"author\":{\"name\":\"redator\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\"},\"headline\":\"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows\",\"datePublished\":\"2023-05-13T12:05:43+00:00\",\"dateModified\":\"2023-05-13T12:05:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/\"},\"wordCount\":582,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/05\\\/2023-05-13-outlook1.jpg\",\"keywords\":[\"0day\",\"outlook\"],\"articleSection\":[\"Informativo\"],\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/\",\"name\":\"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows - Tech Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/05\\\/2023-05-13-outlook1.jpg\",\"datePublished\":\"2023-05-13T12:05:43+00:00\",\"dateModified\":\"2023-05-13T12:05:44+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#primaryimage\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/05\\\/2023-05-13-outlook1.jpg\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/05\\\/2023-05-13-outlook1.jpg\",\"width\":601,\"height\":343},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/2023\\\/05\\\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"In\u00edcio\",\"item\":\"https:\\\/\\\/techsecurity.com.br\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#website\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"name\":\"Tech Security\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/techsecurity.com.br\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#organization\",\"name\":\"Tech Security\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"contentUrl\":\"https:\\\/\\\/techsecurity.com.br\\\/%77%70%2d%63%6f%6e%74%65%6e%74\\\/uploads\\\/2023\\\/01\\\/Captura-de-tela-2023-01-26-092032-e1674773223849.png\",\"width\":100,\"height\":89,\"caption\":\"Tech Security\"},\"image\":{\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/techsecurity.com.br\\\/#\\\/schema\\\/person\\\/cbf56a9c02423f4f6f5bbfad3e3f95f6\",\"name\":\"redator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g\",\"caption\":\"redator\"},\"url\":\"https:\\\/\\\/techsecurity.com.br\\\/author\\\/redator\\\/\"}]}<\/script>","yoast_head_json":{"title":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows - Tech Security","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/","og_locale":"pt_BR","og_type":"article","og_title":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows - Tech Security","og_description":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows","og_url":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/","og_site_name":"Tech Security","article_published_time":"2023-05-13T12:05:43+00:00","article_modified_time":"2023-05-13T12:05:44+00:00","og_image":[{"width":601,"height":343,"url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/05\/2023-05-13-outlook1.jpg","type":"image\/jpeg"}],"author":"redator","twitter_card":"summary_large_image","twitter_misc":{"Escrito por":"redator","Est. tempo de leitura":"3 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#article","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/"},"author":{"name":"redator","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6"},"headline":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows","datePublished":"2023-05-13T12:05:43+00:00","dateModified":"2023-05-13T12:05:44+00:00","mainEntityOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/"},"wordCount":582,"commentCount":0,"publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/05\/2023-05-13-outlook1.jpg","keywords":["0day","outlook"],"articleSection":["Informativo"],"inLanguage":"pt-BR","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/","url":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/","name":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows - Tech Security","isPartOf":{"@id":"https:\/\/techsecurity.com.br\/#website"},"primaryImageOfPage":{"@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#primaryimage"},"image":{"@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#primaryimage"},"thumbnailUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/05\/2023-05-13-outlook1.jpg","datePublished":"2023-05-13T12:05:43+00:00","dateModified":"2023-05-13T12:05:44+00:00","breadcrumb":{"@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/"]}]},{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#primaryimage","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/05\/2023-05-13-outlook1.jpg","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/05\/2023-05-13-outlook1.jpg","width":601,"height":343},{"@type":"BreadcrumbList","@id":"https:\/\/techsecurity.com.br\/2023\/05\/de-uma-vulnerabilidade-a-outra-analise-de-patch-do-outlook-revela-falha-importante-na-api-do-windows\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"In\u00edcio","item":"https:\/\/techsecurity.com.br\/"},{"@type":"ListItem","position":2,"name":"De uma vulnerabilidade a outra: an\u00e1lise de patch do Outlook revela falha importante na API do Windows"}]},{"@type":"WebSite","@id":"https:\/\/techsecurity.com.br\/#website","url":"https:\/\/techsecurity.com.br\/","name":"Tech Security","description":"","publisher":{"@id":"https:\/\/techsecurity.com.br\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/techsecurity.com.br\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/techsecurity.com.br\/#organization","name":"Tech Security","url":"https:\/\/techsecurity.com.br\/","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/","url":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","contentUrl":"https:\/\/techsecurity.com.br\/%77%70%2d%63%6f%6e%74%65%6e%74\/uploads\/2023\/01\/Captura-de-tela-2023-01-26-092032-e1674773223849.png","width":100,"height":89,"caption":"Tech Security"},"image":{"@id":"https:\/\/techsecurity.com.br\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/techsecurity.com.br\/#\/schema\/person\/cbf56a9c02423f4f6f5bbfad3e3f95f6","name":"redator","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2b5d74aab819768fb979a436035e63bba126d07ac7df0bcd0d4f5e8e0ffb45a5?s=96&d=mm&r=g","caption":"redator"},"url":"https:\/\/techsecurity.com.br\/author\/redator\/"}]}},"wps_subtitle":"","_links":{"self":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/693","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/comments?post=693"}],"version-history":[{"count":1,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/693\/revisions"}],"predecessor-version":[{"id":695,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/posts\/693\/revisions\/695"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media\/694"}],"wp:attachment":[{"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/media?parent=693"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/categories?post=693"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techsecurity.com.br\/%77%70%2d%6a%73%6f%6e\/wp\/v2\/tags?post=693"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}