153 matches found
PT-2022-5616 · Microsoft · Windows Cryptoapi +1
Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows CryptoAPI, which can be exploited to bypass authentication. This vulnerability allows an attacker to conduct spoofi...
CVE-2022-34689 Windows CryptoAPI Spoofing Vulnerability
...
CVE-2022-34689
CVE-2022-34689 is a Windows CryptoAPI spoofing vulnerability in which the certificate cache index key (MD5-based) can be exploited to masquerade as a legitimate entity. A PoC was released (HIVEPRO PoC report) detailing the attack, underscoring public proof-of-concept availability. The advisory co...
CVE-2022-34689: Authentication Bypass by Spoofing
Windows CryptoAPI Spoofing Vulnerability...
Microsoft Windows CryptoAPI Spoofing Vulnerability
Microsoft Windows CryptoAPI Crypt32.dll contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography ECC certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was fro...
Ryuk Ransomware: Now with Worming Self-Propagation
A new version of the Ryuk ransomware is capable of worm-like self-propagation within a local network, researchers have found. The variant first emerged in Windows-focused campaigns earlier in 2021, according to the French National Agency for the Security of Information Systems ANSSI. The agency...
CVE-2021-1679
Windows CryptoAPI Denial of Service Vulnerability...
CVE-2021-1679
Windows CryptoAPI Denial of Service Vulnerability...
Denial of service
Windows CryptoAPI Denial of Service Vulnerability...
CVE-2021-1679 Windows CryptoAPI Denial of Service Vulnerability
...
CVE-2021-1679
Technical details for CVE-2021-1679 are not publicly provided in the supplied documents. Please monitor for updates; no product, impact, or remediation specifics are included here.
Windows CryptoAPI Denial of Service Vulnerability
...
Microsoft Windows CryptoAPI Security Vulnerability
Microsoft Windows CryptoAPI is a cryptographic compiler added to the Windows operating system by Microsoft. CryptoAPI supports synchronous and asynchronous key encryption, as well as the management of digital certificates in the operating system, as the basis for data encryption and decryption. A...
Vulnerabilities found in Microsoft Windows
Microsoft fixes multiple vulnerabilities in Windows. A malicious party could potentially exploit the vulnerabilities to: - cause a denial-of-service, - bypass security measures, - execute arbitrary code, - obtain elevated privileges, - gain access to sensitive data. Below is a summary of the...
KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...
KLA12041 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, spoof user interface, bypass security restrictions, cause denial of service. Below is a...
CVE-2021-1679: Undefined Security Weakness
Windows CryptoAPI Denial of Service Vulnerability...
PT-2021-1613 · Microsoft · Windows Cryptoapi +1
Name of the Vulnerable Software and Affected Versions: Windows CryptoAPI affected versions not specified Description: The issue is related to insufficient input validation in the Windows CryptoAPI interface of Windows operating systems. This can be exploited by a remote attacker to cause a denial...
KB4598231: Windows 10 January 2021 Security Update
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows DNS Query Information Disclosure Vulnerability CVE-2021-1637 - Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1653, CVE-2021-1654,...
