CVE-2025-48813

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...

EUVD-2025-34355

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...

CVE-2025-48813

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...

CVE-2025-48813

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...

CVE-2025-48813 Virtual Secure Mode Spoofing Vulnerability

...

CVE-2025-48813

Technical details (affected product, versions, root cause, exploitability, fixes) for CVE-2025-48813 are not provided in the supplied connected documents. Monitor for updates from Microsoft and CVE databases to confirm scope, impact, and remediation.

CVE-2025-48813 Virtual Secure Mode Spoofing Vulnerability

...

Virtual Secure Mode Spoofing Vulnerability

Use of a key past its expiration date in Virtual Secure Mode allows an authorized attacker to perform spoofing locally...

PT-2025-41996

Name of the Vulnerable Software and Affected Versions Versions prior to 2025 Description The use of a key after its expiration date within Virtual Secure Mode can allow a local attacker to perform spoofing. Recommendations At the moment, there is no information about a newer version that contains...

EUVD-2016-8079

Malware in sbrugna...

Exploit for Improper Input Validation in Samsung Samsung_Mobile

PoC exploit for CVE-2016-4038, a 0day vulnerability in System Management Mode code execution for Lenovo ThinkPad model line. The exploit targets the SystemSmmRuntimeRt UEFI driver GUID: 7C79AC8C-5E6C-4E3D-BA6F-C260EE7C172E and allows arbitrary code execution in System Management Mode. The...

Exploring malicious Windows drivers (Part 2): the I/O system, IRPs, stack locations, IOCTLs and more

This blog post is part of a multi-part series, and it is highly recommended to read the first entry here before continuing. As the second entry in our "Exploring malicious Windows drivers" series, we will continue where the first left off: Discussing the I/O system and IRPs. We will expand on the...

May 14, 2024—KB5037765 (OS Build 17763.5820) - EXPIRED

May 14, 2024—KB5037765 OS Build 17763.5820 - EXPIRED EXPIRATION NOTICEIMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows. ​​​​​​​ 11/17/20 For...

May 14, 2024—KB5037770 (OS Build 22000.2960)

May 14, 2024—KB5037770 OS Build 22000.2960 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 21H2, see its update history page. Note Follow @WindowsUpdate to find out wh...

May 14, 2024—KB5037782 (OS Build 20348.2461)

May 14, 2024—KB5037782 OS Build 20348.2461 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note Follow @WindowsUpdate to find out when ne...

May 14, 2024—KB5037781 (OS Build 25398.887)

May 14, 2024—KB5037781 OS Build 25398.887 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server, version 23H2, see its update history page. Improvements This security update...

Microsoft Windows: Virtual Secure Mode

When using Virtual Secure Mode VSM SHOULD It should be taken into account that forensic investigations, e.g. B. for security incident handling be restricted or made more difficult. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and a...

SYS.2.2.3.A26

Bei der Nutzung des Virtual Secure Mode VSM SOLLTE beruecksichtigt werden dass forensische Untersuchungen, z. B. zur Sicherheitsvorfallbehandlung eingeschraenkt bzw erschwert werden. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

SYS.2.2.3.A11

Ziel des Bausteins SYS.2.2.3 ist der Schutz von Informationen, die durch und auf Windows 10-Clients verarbeiten werden. Die Standard-Anforderung SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Information disclosure

Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability."...