Lucene search
K

241 matches found

ATTACKERKB
ATTACKERKB
added 2022/01/11 9:15 p.m.183 views

CVE-2022-21907

HTTP Protocol Stack Remote Code Execution Vulnerability...

10CVSS7.5AI score0.91887EPSS
In wildExploits21References7Affected Software9
NCSC
NCSC
added 2022/01/11 12:0 a.m.5 views

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. The vulnerabilities potentially enable a malicious person to launch attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Remote code execution Administrator/Root rights...

10CVSS7.8AI score0.91887EPSS
Exploits33
BDU FSTEC
BDU FSTEC
added 2021/10/20 12:0 a.m.1 views

The vulnerability of the HTTP.sys driver in the Windows operating system, which allows attackers to increase their privileges

The vulnerability of the Windows HTTP.sys driver is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

7CVSS7.1AI score0.00253EPSS
Exploits0References3
NVD
NVD
added 2021/10/13 1:15 a.m.22 views

CVE-2021-26442

Windows HTTP.sys Elevation of Privilege Vulnerability...

7.8CVSS0.00253EPSS
Exploits0References1
OSV
OSV
added 2021/10/13 1:15 a.m.1 views

CVE-2021-26442

Windows HTTP.sys Elevation of Privilege Vulnerability...

7CVSS7.1AI score0.00253EPSS
Exploits0References1
Prion
Prion
added 2021/10/13 1:15 a.m.19 views

Privilege escalation

Windows HTTP.sys Elevation of Privilege Vulnerability...

4.6CVSS7.2AI score0.00253EPSS
Exploits0References1Affected Software5
Vulnrichment
Vulnrichment
added 2021/10/13 12:26 a.m.25 views

CVE-2021-26442 Windows HTTP.sys Elevation of Privilege Vulnerability

...

7CVSS6.7AI score0.00253EPSS
Exploits0References1
CVE
CVE
added 2021/10/13 12:26 a.m.183 views

CVE-2021-26442

Technical details for CVE-2021-26442 are not present in the connected documents. Public info here is generic. Monitor for updates from official advisories; no product/version/impact specifics are provided in the supplied materials.

7.8CVSS7.7AI score0.00253EPSS
Exploits0References1Affected Software10
Microsoft CVE
Microsoft CVE
added 2021/10/12 7:0 a.m.42 views

Windows HTTP.sys Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.00253EPSS
Exploits0
Kaspersky
Kaspersky
added 2021/10/12 12:0 a.m.49 views

KLA12309 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a...

8.8CVSS9.6AI score0.91507EPSS
Exploits11References44
Positive Technologies
Positive Technologies
added 2021/10/12 12:0 a.m.2 views

PT-2021-4438

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows HTTP.sys driver, which is associated with privilege management errors. Exploitation of this issue may allow an...

7.8CVSS7.1AI score0.00253EPSS
Exploits0References9
CNVD
CNVD
added 2021/05/14 12:0 a.m.20 views

Microsoft HTTP.sys Remote Code Execution Vulnerability

Microsoft HTTP.sys is an application protocol of Microsoft Corporation USA.HTTP Application Protocol. A remote code execution vulnerability exists in Microsoft HTTP.sys. No detailed vulnerability details are available at this time...

9.8CVSS7.5AI score0.93069EPSS
Exploits24References1
CNNVD
CNNVD
added 2021/05/11 12:0 a.m.6 views

Microsoft HTTP.sys 资源管理错误漏洞

Microsoft HTTP.sys is an application protocol of Microsoft Corporation USA.HTTP Application Protocol. A remote code execution vulnerability exists in Microsoft HTTP.sys. No detailed vulnerability details are available at this time...

9.8CVSS6.4AI score0.93069EPSS
Exploits24References6
Microsoft Secure
Microsoft Secure
added 2019/09/30 4:0 p.m.48 views

TLS version enforcement capabilities now available per certificate binding on Windows Server 2019

At Microsoft, we often develop new security features to meet the specific needs of our own products and online services. This is a story about how we solved a very important problem and are sharing the solution with customers. As engineers worldwide work to eliminate their own dependencies on TLS...

1.2AI score
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/08/13 7:0 a.m.38 views

HTTP/2 Server Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...

7.8CVSS2.3AI score0.03578EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/08/13 7:0 a.m.572 views

HTTP/2 Server Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...

7.8CVSS2.3AI score0.13725EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/08/13 7:0 a.m.52 views

HTTP/2 Server Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...

7.8CVSS2.3AI score0.09322EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2019/08/13 7:0 a.m.46 views

HTTP/2 Server Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...

7.8CVSS2.3AI score0.50822EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2019/08/13 7:0 a.m.108 views

HTTP/2 Server Denial of Service Vulnerability

A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...

7.8CVSS2.3AI score0.06587EPSS
Exploits0
Symantec
Symantec
added 2019/08/13 12:0 a.m.95 views

Microsoft Windows 'HTTP.sys' CVE-2019-9514 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected system to become unresponsive, resulting in a denial-of-service condition. Technologies Affected Apple SwiftNIO HTTP/2 1.0.0 Apple SwiftNIO HTTP/2 1.1.0 App...

1.6AI score0.09322EPSS
Exploits0References1Affected Software3
Rows per page
Query Builder