14379 matches found
January 9, 2024—KB5034122 (OS Builds 19044.3930 and 19045.3930) - EXPIRED
None None...
January 9, 2024—KB5034169 (Monthly Rollup)
None None...
Microsoft Windows Themes Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Themes. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...
Microsoft Subsystem for Linux Security Vulnerability
Microsoft Windows Subsystem for Linux WSL is a Windows subsystem for Linux from Microsoft, a compatibility layer capable of running native Linux binary executables ELF format. A security vulnerability exists in Microsoft Subsystem for Linux. An attacker could exploit the vulnerability to gain...
Microsoft Windows AllJoyn API Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows AllJoyn API. An attacker has exploited the vulnerability to cause a denial of service on the system. The...
KB5034122: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (January 2024)
The remote Windows host is missing security update 5034122. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - BitLocker Security Feature Bypass Vulnerability CVE-2024-20666 - Windows Kerberos Security Feature Bypass...
KLA62827 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...
Microsoft SQL Server Security Vulnerability
Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A security vulnerability exists in Microsoft SQL Server. An attacker could exploit the vulnerability to bypass certain functionality. The following products and versions are affected:...
KB5034134: Windows 10 LTS 1507 Security Update (January 2024)
The remote Windows host is missing security update 5034134. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - BitLocker Security Feature Bypass Vulnerability CVE-2024-20666 - Windows Kerberos Security Feature Bypass...
KB5034119: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2024)
The remote Windows host is missing security update 5034119. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2024-20654 - BitLocker Security Feature Bypass Vulnerability CVE-2024-20666 - Windows Kerberos Security Feature Bypass...
Gom Player 2.3.92.5362 DLL Hijacking Vulnerability
Exploit Title: Gom Player 2.3.92.5362 - nvcuda.dll DLL Hijacking Exploit Author: Yehia Elghaly Mrvar0x Vendor Homepage: https://www.mrvar0x.com/ Version: 2.3.92.5362 Tested on: Windows 7, Windows 10 A DLL hijacking vulnerability has been discovered Gom Player 2.3.92.5362. When a user loads the...
Gom Player 2.3.92.5362 Buffer Overflow
Exploit Title: Gom Player 2.3.92.5362 - Buffer Overflow PoC Discovered by: Yehia Elghaly Mrvar0x Discovered Date: 04.01.2024 Vendor Homepage: https://www.gomlab.com/en Tested Version: 2.3.92.5362 Tested on: Windows 7, Windows 10 - Open GOM Player - Click on the settings - From the menu, select...
Gom Player 2.3.92.5362 Buffer Overflow Exploit
Exploit Title: Gom Player 2.3.92.5362 - Buffer Overflow PoC Discovered by: Yehia Elghaly Mrvar0x Vendor Homepage: https://www.gomlab.com/en Tested Version: 2.3.92.5362 Tested on: Windows 7, Windows 10 - Open GOM Player - Click on the settings - From the menu, select Audio -- Equalizer - Click on...
New Variant of DLL Search Order Hijacking Bypasses Windows 10 and 11 Protections
Security researchers have detailed a new variant of a dynamic link library DLL search order hijacking technique that could be used by threat actors to bypass security mechanisms and achieve execution of malicious code on systems running Microsoft Windows 10 and Windows 11. The approach "leverages...
Microsoft Windows 10 1507 SEoL
Microsoft Windows 10 version 1507 is running on the remote host. Microsoft ended support for Windows 10 version 1507 on May 9, 2017. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...
Logoff Windows 10 ICA session takes about 5 minutes
Logoff Windows 10 ICA session takes about 5 minutes, but console has no issue...
PT-2023-9403 · Microsoft · Windows 11 +5
Name of the Vulnerable Software and Affected Versions: Microsoft Windows 10, Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022 affected versions not specified Description: A Denial of Service in the CLFS.sys driver allows a malicious authenticated low-privilege user to...
Exploit for Improper Access Control in Microsoft
CVE-2023-41772 / UIFuckUp UIFuckUp exploit to gain system pri...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security feature bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to bypass security features and compromise integrity...
About the security content of iTunes 12.13.1 for Windows
About the security content of iTunes 12.13.1 for Windows This document describes the security content of iTunes 12.13.1 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...