468 matches found
CVE-2025-59033: Unprotected Alternate Channel
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...
CVE-2022-50238: Missing Synchronization
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...
CVE-2022-50238
CVE-2022-50238 describes that the on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft rules. Some entries have been excluded from the on-endpoint blocklist longer than expected, which can lead to inconsistent enforcement. The documents indicate th...
CVE-2025-33069: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in App Control for Business WDAC allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-26678: Improper Access Control
Improper access control in Windows Defender Application Control WDAC allows an unauthorized attacker to bypass a security feature locally...
CVE-2024-43645
Windows Defender Application Control WDAC Security Feature Bypass Vulnerability...
CVE-2024-43645: Protection Mechanism Failure
Windows Defender Application Control WDAC Security Feature Bypass Vulnerability...
CVE-2024-43519
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2024-43519 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2024-43519
CVE-2024-43519 : Microsoft WDAC OLE DB provider for SQL Server is affected by a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH); attack vector is NETWORK, with LOW attack complexity and no privileges required, but user interaction is required. The issue stems from the ...
CVE-2024-43519 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2024-43519: Numeric Truncation Error
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
August 13, 2024âKB5041160 (OS Build 20348.2655)
None None...
June 11, 2024âKB5039213 (OS Build 22000.3019)
None None...
CVE-2024-30006
CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...
CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
CVE-2024-30006 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...