August 10, 2021—KB5005088 (Monthly Rollup)

None None...

August 10, 2021—KB5005099 (Monthly Rollup)

None None...

August 10, 2021—KB5005095 (Security-only update)

None None...

August 10, 2021—KB5005090 (Monthly Rollup)

None None...

August 10, 2021—KB5005089 (Security-only update)

None None...

July 29, 2021—KB5005393 (OS Build 14393.4532) Out-of-band

None None...

KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2

KB5005391: Noncompliant devices might not work when using PIV after installing the July 13, 2021 update for Windows 8.1 or Windows Server 2012 R2 Summary This update addresses the following issue: Temporarily addresses an issue with devices that do not comply with section 3.2.1 of the RFC 4556...

July 13, 2021—KB5004294 (Monthly Rollup)

None None...

July 13, 2021—KB5004285 (Security-only update)

None None...

July 13, 2021—KB5004299 (Security-only update)

None None...

July 13, 2021—KB5004302 (Security-only update)

None None...

July 13, 2021—KB5004305 (Monthly Rollup)

None None...

July 13, 2021—KB5004307 (Security-only update)

None None...

How to Configure User SID Enumeration in the XML Service

This article contains information about configuring the Citrix XML Service to perform enumeration of Security Identifiers SIDs for user accounts when using Single Sign-on SSO or smart card authentication to Web Interface 5.0. Background When using SSO or smart card authentication, access for user...

CVE-2019-3980

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run...

Design/Logic Flaw

The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run...

CVE-2019-3980

CVE-2019-3980 affects SolarWinds DameWare Mini Remote Control (DameWare Mini Remote Client) 12.1.0.89. The issue stems from the SmartCard authentication component, which allows a user to upload an executable to be run on the DWRCS.exe host due to unclear validation/confirmation. An unauthenticate...

The vulnerability in the Key Distribution Center (KDC) of the Samba networking communication software package arises from errors during double clearing of the same memory segment. This allows a malicious actor to trigger a service failure.

The vulnerability in the Key Distribution Center KDC of the Samba networking interaction software package is related to an error that occurs during double garbage collection of the same memory block. This occurs when the Samba software package’s KDC is configured to use smart cards for...

CVE-2018-16841

Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call tallocfree twice on the same memory if the principal in a validly signed certificate does not match the principal ...

Double free

Samba from version 4.3.0 and before versions 4.7.12, 4.8.7 and 4.9.3 are vulnerable to a denial of service. When configured to accept smart-card authentication, Samba's KDC will call tallocfree twice on the same memory if the principal in a validly signed certificate does not match the principal ...