Microsoft Faces Wormable, Critical RCE Bug & 6 Zero-Days

Microsoft has addressed a total of 97 security vulnerabilities in its January 2022 Patch Tuesday update – nine of them rated critical – including six that are listed as publicly known zero-days. The fixes cover a swath of the computing giant’s portfolio, including: Microsoft Windows and Windows...

CVE-2022-21921

Windows Defender Credential Guard Security Feature Bypass Vulnerability...

CVE-2022-21921

Windows Defender Credential Guard Security Feature Bypass Vulnerability...

CVE-2022-21921

Windows Defender Credential Guard Security Feature Bypass Vulnerability...

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability...

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability...

CVE-2022-21906

Windows Defender Application Control Security Feature Bypass Vulnerability...

Security feature bypass

Windows Defender Credential Guard Security Feature Bypass Vulnerability...

Security feature bypass

Windows Defender Application Control Security Feature Bypass Vulnerability...

CVE-2022-21921

CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...

CVE-2022-21921 Windows Defender Credential Guard Security Feature Bypass Vulnerability

...

CVE-2022-21906 Windows Defender Application Control Security Feature Bypass Vulnerability

...

CVE-2022-21906

Technical details are not publicly available in the provided documents. Monitor for official disclosures and updates.

Windows Defender Application Control Security Feature Bypass Vulnerability

...

Windows Defender Credential Guard Security Feature Bypass Vulnerability

...

Microsoft Windows Defender 安全特征问题漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft Corporation USA. Microsoft Windows Defender is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows ...

PT-2022-1566 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass security restrictions. It is a security-feature bypass vulnerability that enables attackers to...

Microsoft Windows .Reg File Dialog Spoofing / Mitigation Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSREGFILEDIALOGSPOOFMITIGATIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com A file with the .reg file extension is a...

Microsoft Windows Defender 安全特征问题漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. Microsoft Windows Defender is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version...

PT-2022-1529 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a security feature bypass that may allow attackers to access protected information. This could potentially enable unauthorized access to sensitive data. The...