Lucene search
+L

746 matches found

ThreatPost
ThreatPost
added 2018/01/09 12:43 p.m.23 views

Anti-Virus Updates Required Ahead of Microsoft’s Meltdown, Spectre Patches

Microsoft said it is holding off delivering security updates to Windows PCs for Spectre and Meltdown CPU flaws until hosted anti-virus software confirms it does not make unsupported calls into Windows kernel memory. Affected are PCs running certain AV products that bypass Windows built-in Kernel...

1.2AI score
SaveExploits0References7
Microsoft KB
Microsoft KB
added 2018/01/09 8:00 a.m.72 views

January 3, 2018—KB4056893 (OS Build 10240.17738)

None None...

7.8CVSS6.8AI score0.80799EPSS
SaveExploits43
Microsoft KB
Microsoft KB
added 2018/01/09 8:00 a.m.58 views

January 3, 2018—KB4056891 (OS Build 15063.850)

None None...

7.8CVSS6.8AI score0.80799EPSS
SaveExploits51
Microsoft KB
Microsoft KB
added 2018/01/09 8:00 a.m.87 views

January 3, 2018—KB4056890 (OS Build 14393.2007)

None None...

7.8CVSS6.8AI score0.80799EPSS
SaveExploits45
OSV
OSV
added 2018/01/04 2:29 p.m.7 views

CVE-2018-0749

The Microsoft Server Message Block SMB Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...

7.8CVSS7.1AI score0.03206EPSS
SaveExploits3References5
NVD
NVD
added 2018/01/04 2:29 p.m.25 views

CVE-2018-0749

The Microsoft Server Message Block SMB Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability d...

7.8CVSS7.6AI score0.03206EPSS
SaveExploits3References5
OpenVAS
OpenVAS
added 2018/01/04 12:00 a.m.147 views

Microsoft Windows Multiple Vulnerabilities (KB4056890)

This host is missing a critical security update according to Microsoft KB4056890 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.93838EPSS
SaveExploits59References1
OpenVAS
OpenVAS
added 2018/01/04 12:00 a.m.103 views

Microsoft Windows Multiple Vulnerabilities (KB4056888)

This host is missing a critical security update according to Microsoft KB4056888 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.93838EPSS
SaveExploits59References1
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:00 a.m.341 views

KB4056899: Windows Server 2012 January 2018 Security Update

The remote Windows host is missing security update 4056899 or cumulative update 4056896. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory...

7.8CVSS7.4AI score0.15023EPSS
SaveExploits15References14
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:00 a.m.902 views

KB4056898: Windows 8.1 and Windows Server 2012 R2 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056898 or cumulative update 4056895. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local...

7.8CVSS8.2AI score0.93838EPSS
SaveExploits29References19
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:00 a.m.308 views

KB4056891: Windows 10 Version 1703 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056891 or 4057144. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...

7.8CVSS8.2AI score0.93838EPSS
SaveExploits65References29
Tenable Nessus
Tenable Nessus
added 2018/01/04 12:00 a.m.505 views

KB4056897: Windows 7 and Windows Server 2008 R2 January 2018 Security Update (Meltdown)(Spectre)

The remote Windows host is missing security update 4056897 or cumulative update 4056894. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local...

7.8CVSS8.2AI score0.93838EPSS
SaveExploits20References17
OpenVAS
OpenVAS
added 2018/01/04 12:00 a.m.62 views

Microsoft Windows Multiple Vulnerabilities (KB4056891)

This host is missing a critical security update according to Microsoft KB4056891 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8AI score0.93838EPSS
SaveExploits65References1
Microsoft KB
Microsoft KB
added 2018/01/03 8:00 a.m.68 views

January 3, 2018—KB4056898 (Security-only update)

None None...

7.8CVSS6.7AI score0.15023EPSS
SaveExploits15
Microsoft KB
Microsoft KB
added 2018/01/03 8:00 a.m.123 views

January 4, 2018—KB4056894 (Monthly Rollup)

None None...

7.8CVSS6.8AI score0.11932EPSS
SaveExploits9
Microsoft KB
Microsoft KB
added 2018/01/03 8:00 a.m.58 views

Description of the security update for the SMB Server elevation of privilege vulnerability in Windows Server 2008: January 3, 2018

Description of the security update for the SMB Server elevation of privilege vulnerability in Windows Server 2008: January 3, 2018 Summary An elevation of privilege vulnerability exists in the Microsoft Server Message Block SMB server when an attacker who has valid credentials attempts to open a...

7.8CVSS7.3AI score0.03206EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2018/01/03 8:00 a.m.85 views

January 3, 2018—KB4056899 (Security-only update)

None None...

7.8CVSS6.7AI score0.15023EPSS
SaveExploits15
Microsoft KB
Microsoft KB
added 2018/01/03 8:00 a.m.252 views

January 3, 2018—KB4056897 (Security-only update)

None None...

7.8CVSS6.8AI score0.08669EPSS
SaveExploits9
Microsoft KB
Microsoft KB
added 2018/01/03 8:00 a.m.100 views

January 4, 2018—KB4056896 (Monthly Rollup)

None None...

7.8CVSS6.7AI score0.15023EPSS
SaveExploits15
Microsoft CVE
Microsoft CVE
added 2018/01/03 8:00 a.m.38 views

SMB Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Microsoft Server Message Block SMB Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine. An attacker who successfully exploited this vulnerability could bypass certa...

7.8CVSS2.6AI score0.03206EPSS
SaveExploits3
Rows per page
Query Builder