141 matches found
msticpy
MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...
Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device
This repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling device discovery, configuring Log4j2 detection CVE-2021-44228, and validating incident response workflows. Key Features ✅ Local script onboarding for...
Microsoft Defender for Endpoint Disclosure
The vulnerability of Microsoft Defender for Endpoint on Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2026-102204
Improper link resolution before file access 'link following' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
CVE-2026-102204
A vulnerability in Microsoft Defender for Endpoint (CVE-2026-102204) arises from improper link resolution before file access (link following). This flaw allows an authorized attacker to achieve local privilege elevation . According to NCSC documentation, this could potentially lead to the access ...
EUVD-2026-100358
Improper link resolution before file access 'link following' in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
Windows Subsystem for Linux Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
PT-2026-121124
Уязвимость Защитника Microsoft Microsoft Defender for Endpoint операционных систем Windows связана с выходом операции за границы буфера в памяти. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию...
KLA91345 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft...
CVE-2026-102204: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...
PT-2026-111914
🚨 CVE-2026-102204 Improper link resolution before file access 'link following' in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
...
CVE-2026-54123
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123
Microsoft Defender for Endpoint (Mac) contains a local information disclosure vulnerability (CVE-2026-54123). Attack vector: Local; Privileges Required: Low; User Interaction: None; Confidentiality Impact: High. CVSSv3.1 base score 5.5 (Medium). A fix is available via Microsoft’s update guidance;...
EUVD-2026-56418
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
PT-2026-70389
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
Microsoft Defender for Endpoint for Mac Access Control Unauthorized Access
The vulnerability of Microsoft Defender for Endpoint for Mac is related to deficiencies in access control for personal information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...