Security Updates for Microsoft .NET Framework (January 2019)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross- origin Resource Sharing CORS...

KB4480962: Windows 10 January 2019 Security Update

The remote Windows host is missing security update 4480962. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

Microsoft ASP.NET Core CVE-2019-0545 Information Disclosure Vulnerability

Description Microsoft ASP.NET Core is prone to an information disclosure vulnerability. Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft .NET Core 2.1 Microsoft .NET Core 2.2 Microsoft .NET Core 2.3 Microsoft...

CVE-2019-0545: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in .NET Framework and .NET Core which allows bypassing Cross-origin Resource Sharing CORS configurations, aka ".NET Framework Information Disclosure Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .N...

PT-2019-1123

Name of the Vulnerable Software and Affected Versions: .NET Framework versions 2.0 through 4.7.2 .NET Framework version 3.5 .NET Framework version 3.5.1 .NET Core version 2.1 .NET Core version 2.2 Description: An information disclosure issue exists in .NET Framework and .NET Core, allowing...

KLA11399 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsof...

PT-2019-1124

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: A remote code execution issue exists due to improper handling of specific C++ constructs by the C++ compiler in Microsoft Visual Studio. Additionally, there's a mention of a...

KB4480964: Windows 8.1 and Windows Server 2012 R2 January 2019 Security Update

The remote Windows host is missing security update 4480964 or cumulative update 4480963. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited...

KB4480966: Windows 10 Version 1803 and Windows Server Version 1803 January 2019 Security Update

The remote Windows host is missing security update 4480966. It is, therefore, affected by multiple vulnerabilities : - A memory corruption vulnerability exists in the Windows DHCP client when an attacker sends specially crafted DHCP responses to a client. An attacker who successfully exploited th...

KB4480116: Windows 10 Version 1809 and Windows Server 2019 January 2019 Security Update

The remote Windows host is missing security update 4480116. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtai...

December 19, 2018—KB4483232 (OS Build 16299.847)

None None...

Security Updates for Microsoft .NET Framework (December 2018)

The Microsoft .NET Framework installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly. An attacker who successfully...

The vulnerability of the .NET Framework software platform is related to errors in data input processing, allowing an attacker to execute arbitrary code.

The vulnerability of the .NET Framework software platform is related to errors in data processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted input data...

Microsoft Issues Patch for Windows Zero-Day Flaw Under Active Attack

Microsoft today, on its year-end December Patch Tuesday, released security updates to patch a total 39 vulnerabilities its Windows operating systems and applications—10 of which are rated as critical and other important in severity. One of the security vulnerabilities patched by the tech giant th...

CVE-2018-8517

A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework...

Remote code execution

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft...

Denial of service

A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework...

CVE-2018-8540

A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka ".NET Framework Remote Code Injection Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft...

CVE-2018-8517

A denial of service vulnerability exists when .NET Framework improperly handles special web requests, aka ".NET Framework Denial Of Service Vulnerability." This affects Microsoft .NET Framework 4.6, Microsoft .NET Framework 3.5, Microsoft .NET Framework 4.7/4.7.1/4.7.2, Microsoft .NET Framework...

CVE-2018-8540

CVE-2018-8540 is a remote code execution vulnerability in Microsoft .NET Framework caused by improper input validation. Affected products include various .NET Framework versions (e.g., 4.6, 4.7.x, 3.5.x, 4.5.2, 4.6.2, 4.7.2, 3.5.1) and related Microsoft tools; multiple OpenVAS entries also refere...