37 matches found
Virtual Secure Mode Spoofing
The vulnerability of the Virtual Secure Mode protection mechanism in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows attackers to carry out spoofing attacks...
CVE-2025-48813
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
EUVD-2025-34355
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
CVE-2025-48813
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
CVE-2025-48813
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
CVE-2025-48813 Virtual Secure Mode Spoofing Vulnerability
...
CVE-2025-48813 Virtual Secure Mode Spoofing Vulnerability
...
CVE-2025-48813
Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.
Virtual Secure Mode Spoofing Vulnerability
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
CVE-2025-48813: Use of a Key Past its Expiration Date
Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...
PT-2025-41996
Name of the Vulnerable Software and Affected Versions Versions prior to 2025 Description The use of a key after its expiration date within Virtual Secure Mode can allow a local attacker to perform spoofing. Recommendations At the moment, there is no information about a newer version that contains...
EUVD-2016-8079
Malware in sbrugna...
Exploit for Improper Input Validation in Samsung Samsung_Mobile
PoC exploit for CVE-2016-4038, a 0day vulnerability in System Management Mode code execution for Lenovo ThinkPad model line. The exploit targets the SystemSmmRuntimeRt UEFI driver GUID: 7C79AC8C-5E6C-4E3D-BA6F-C260EE7C172E and allows arbitrary code execution in System Management Mode. The...
Exploring malicious Windows drivers (Part 2): the I/O system, IRPs, stack locations, IOCTLs and more
This blog post is part of a multi-part series, and it is highly recommended to read the first entry here before continuing. As the second entry in our "Exploring malicious Windows drivers" series, we will continue where the first left off: Discussing the I/O system and IRPs. We will expand on the...
May 14, 2024—KB5037781 (OS Build 25398.887)
May 14, 2024—KB5037781 OS Build 25398.887 Applies To Windows Server, version 23H2 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server, version 23H2, see its update history...
May 14, 2024—KB5037770 (OS Build 22000.2960)
May 14, 2024—KB5037770 OS Build 22000.2960 Applies To Windows 11 version 21H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 21H2, see its update...
May 14, 2024—KB5037765 (OS Build 17763.5820) - EXPIRED
May 14, 2024—KB5037765 OS Build 17763.5820 - EXPIRED Applies To Win 10 Ent LTSC 2019 Win 10 IoT Ent LTSC 2019 Windows 10 IoT Core LTSC Windows Server 2019 Note EXPIRATION NOTICE IMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release...
May 14, 2024—KB5037782 (OS Build 20348.2461)
May 14, 2024—KB5037782 OS Build 20348.2461 Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note Follo...
Microsoft Windows: Virtual Secure Mode
When using Virtual Secure Mode VSM SHOULD It should be taken into account that forensic investigations, e.g. B. for security incident handling be restricted or made more difficult. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...
SYS.2.2.3.A26
Bei der Nutzung des Virtual Secure Mode VSM SOLLTE beruecksichtigt werden dass forensische Untersuchungen, z. B. zur Sicherheitsvorfallbehandlung eingeschraenkt bzw erschwert werden. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...