Ongoing Exploitation of Windows Installer CVE-2021-41379

CVE | Vendor Advisory | AttackerKB | IVM Content | Patching Urgency | Last Update ---|---|---|---|---|--- CVE-2021-41379 | Microsoft Advisory | AttackerKB | Scheduled when patched | ASAP when released | December 3, 2021 3:00 PM ET See the Updates section at the end of this post for new informatio...

Attackers Actively Target Windows Installer Zero-Day

Attackers are actively exploiting a Windows Installer zero-day vulnerability that was discovered when a patch Microsoft issued for another security hole inadequately fixed the original and unrelated problem. Over the weekend, security researcher Abdelhamid Naceri discovered a Windows Installer...

2021-11 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5007386)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...

Description of the security update for Office Online Server: November 9, 2021 (KB5002053)

None None...

Microsoft Windows Feedback Hub 权限许可和访问控制问题漏洞

Microsoft Windows Feedback Hub is a Windows general purpose application from Microsoft Corporation USA designed to allow users to provide feedback, feature suggestions, and bug reports for the operating system. Microsoft Windows Feedback Hub is vulnerable to privilege permission and access contro...

Microsoft Windows Virtual Machine 代码注入漏洞

Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments in a Windows environment. A code injection vulnerability exists in Microsoft Windows Virtual Machine Bus. The following products and editions are affected:Windows 10...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and versions are affected: Windows Server...

Microsoft Windows Event Tracing 权限许可和访问控制问题漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to privilege permission and access control issues. The...

Microsoft Windows Bind Filter Driver 信息泄露漏洞

Microsoft Windows Bind Filter Driver is a bind filter driver from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Bind Filter Driver. The following products and versions are affected: Windows 10 Version 2004 for 32-bit Systems,Windows 10 Version 2004...

Microsoft Windows AppContainer 安全特征问题特征问题漏洞

Microsoft Windows AppContainer is a sandboxing mechanism by Microsoft Corporation USA to control which resources UWP applications can or cannot access. A security signature issue vulnerability exists in Microsoft Windows AppContainer. The following products and versions are affected:Windows 10...

Microsoft Windows Kernel 信息泄露漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Kernel. The following products and versions are affected: Windows Server 2022,Windows Server 2022 Server Core...

Microsoft Hyper-V 代码注入漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A code injection vulnerability exists in Windows Hyper-V. The following products and editions are affected: Windows Server 2022,Windows Server 202...

Microsoft Windows Cloud Files Mini Filter Driver 信息泄露漏洞

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Nearby Sharing with privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 fo...

Microsoft Windows 安全特征问题特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Role: A security signature issue vulnerability exists in Windows Active Directory Server. The following products and versions are affected:Windows Server,...

Microsoft Windows AppX Deployment Extensions 权限许可和访问控制问题漏洞

Microsoft Windows AppX Deployment Extensions is an AppX Deployment Extension DLL from Microsoft Corporation USA that is part of the Microsoft Windows operating system. A vulnerability exists in the Microsoft Windows AppX Deployment Service with privilege permission and access control issues. The...

Microsoft DWM Core Library 权限许可和访问控制问题漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A vulnerability exists in the Microsoft DWM Core Library due to permission and access control issues. The following products and editions are affected: Windows 10 Version 1909 for 32-bit Systems,Windows...

Microsoft Windows Print Spooler Components 安全漏洞

Microsoft Windows Print Spooler Components is a printing background processor component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Print Spooler Components. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Window...

Microsoft Hyper-V 代码注入漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A code injection vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows 10 Version 1809 for x64-based...

Microsoft Active Directory Federation Services 安全漏洞

Microsoft Active Directory Federation Services is a software component of Microsoft Corporation that runs on the Windows Server operating system. It provides users with single sign-on access to systems and applications that cannot use Integrated Windows Authentication IWA through Active Directory...