The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

May 9, 2023—KB5026370 (OS Build 20348.1726)

None None...

CVE-2023-21799

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-21685

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-21681

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

CVE-2023-21681

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

Microsoft fixes driver blocklist placing users at risk from BYOVD attacks

There may be an all-new acronym for you to try and remember, as a result of Microsoft fixing a lingering issue. This issue is called Bring Your Own Vulnerable Driver BYOVD, and BYOVD has been popping up in various forms for the last few months. These attacks may have been less impactful if a...

CVE-2022-35835

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...

July 19, 2022—KB5015879 (OS Build 20348.859) Preview

None None...

A New Bug in Microsoft Windows Could Let Hackers Easily Install a Rootkit

Security researchers have disclosed an unpatched weakness in Microsoft Windows Platform Binary Table WPBT affecting all Windows-based devices since Windows 8 that could be potentially exploited to install a rootkit and compromise the integrity of devices. "These flaws make every Windows system...

CVE-2021-24082

Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability...

Vulnerability of application control tools: Application control in Windows Defender Application Control (WDAC), a PowerShell Core automation tool, allows attackers to bypass existing security mechanisms.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass existing security measures remotely...

The vulnerability of the application control tool: Windows Defender Application Control (WDAC), a PowerShell Core automation tool that allows attackers to gain unauthorized access to protected information.

The vulnerability of the application control tool, Windows Defender Application Control WDAC, a PowerShell Core automation tool, is related to security configuration errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected informati...

PT-2021-2067 · Microsoft · Windows Defender +3

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Codecs Library affected versions not specified Microsoft Windows Camera Codec Pack affected versions not specified Description: The issue is related to a remote code execution problem. It may allow remote attackers to execut...

CVE-2020-7337

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

Design/Logic Flaw

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

CVE-2020-7337

CVE-2020-7337 affects McAfee VirusScan Enterprise (VSE) prior to 8.8 Patch 16, where an incorrect permission assignment for a critical resource enables local administrators to bypass local security protections by manipulating Code Integrity checks tied to Windows Defender Application Control. The...

CVE-2020-7337 Incorrect Permission Assignment for Critical Resource

Incorrect Permission Assignment for Critical Resource vulnerability in McAfee VirusScan Enterprise VSE prior to 8.8 Patch 16 allows local administrators to bypass local security protection through VSE not correctly integrating with Windows Defender Application Control via careful manipulation of...

Mcafee McAfee VirusScan Enterprise Permission License and Access Control Issues Vulnerability

Mcafee VirusScan Enterprise VSE is a suite of antivirus software from the American company Mcafee. The software provides a full range of security protection, scans memory for malicious code and optimizes updates for remote systems. A security vulnerability exists in McAfee VirusScan Enterprise 8....

The vulnerability of the PowerShellGet command interpreter on Windows operating systems allows an attacker to execute arbitrary code. This vulnerability stems from security flaws in the PowerShell interpreter’s mechanisms.

The vulnerability of the PowerShellGet command interpreter on Windows operating systems is related to security vulnerabilities in its implementation. Exploiting this vulnerability allows an attacker to bypass Windows Defender Application Control and execute arbitrary code...