Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Windows Hyper-V. No information about this vulnerability is available at this time, please stay tuned to CNNVD ...

Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. The following products and versions are affected:Windows Server, version 2004 Server Core...

Cloud Filter Arbitrary File Creation / Privilege Escalation Exploit

This Metasploit module exploits a vulnerability in cldflt.sys. The Cloud Filter driver on Windows 10 v1803 and later, prior to the December 2020 updates, did not set the IOFORCEACCESSCHECK or OBJFORCEACCESSCHECK flags when calling FltCreateFileEx and FltCreateFileEx2 within its...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-17008)

Microsoft Windows is prone to an elevation of privilege vulnerability. This VT has been deprecated and replaced by the following VTs covering the new CVE-2021-1648: - OID: 1.3.6.1.4.1.25623.1.0.817573 - OID: 1.3.6.1.4.1.25623.1.0.817569 - OID: 1.3.6.1.4.1.25623.1.0.817568 SPDX-FileCopyrightText:...

Servicing stack update for Windows 10, version 2004 and 20H2: January 12, 2021

None None...

Servicing stack update for Windows 10, version 1903 and 1909: January 12, 2021

None None...

KB4598231: Windows 10 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows DNS Query Information Disclosure Vulnerability CVE-2021-1637 - Windows CSC Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1653, CVE-2021-1654,...

KB4598242: Windows 10 Version 2004 / Windows 10 Version 20H2 January 2021 Security Update

The remote Windows host is missing security update 4598242. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-1637, CVE-2021-1645, CVE-2021-1656, CVE-2021-1663,...

KB4598229: Windows 10 Version 1909 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

Microsoft Windows Event Tracing Security Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing, for which no information is...

Microsoft Windows AppX Deployment Extensions Security Vulnerability

Microsoft Windows AppX Deployment Extensions is an AppX Deployment Extensions DLL from Microsoft Corporation USA that is part of the Microsoft Windows operating system. A security vulnerability exists in Microsoft Windows AppX Deployment Extensions. The following products and editions are...

Microsoft Projected File System Information Disclosure Vulnerability

Microsoft Projected File System is an application system from Microsoft USA. Projects hierarchical data into the file system so that it appears as files and directories in the file system. An information disclosure vulnerability exists in Microsoft Projected File System. The following products an...

KLA12037 Security vulnerability in Microsoft Apps

A security bypass vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-1669 Related products Microsoft-Windows Microsoft-Windows-Server Microsoft-Windows-10 CVE list CVE-2021-1669 critical KB list...

Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. The following products and editions are affected:Windows Server 2012 R2 Server Core...

Microsoft Windows DNS Information Disclosure Vulnerability

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and DNS clients and DNS servers work together to provide name resolution services for computers and users that map...

January 12, 2021—KB4599208 (OS Build 15063.2614)

None None...

SmartAgent 3.1.0 - Privilege Escalation

Exploit Title: SmartAgent 3.1.0 - Privilege Escalation Date: 01-11-2021 Exploit Author: Orion Hridoy Vendor Homepage: https://www.smartagent.io/ Version: Build 3.1.0 Tested on: Windows 10/Kali Linux A Low grade user like ViewOnly can create an account with SuperUser permission. Steps To Reproduce...

KB4598230: Windows 10 Version 1809 and Windows Server 2019 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

KB4598245: Windows 10 Version 1803 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...