921 matches found
Using the LockBit builder to generate targeted ransomware
The previous Kaspersky research focused on a detailed analysis of the LockBit 3.0 builder leaked in 2022. Since then, attackers have been able to generate customized versions of the threat according to their needs. This opens up numerous possibilities for malicious actors to make their attacks mo...
April’s Patch Tuesday Brings Record Number of Fixes
If only Patch Tuesdays came around infrequently -- like total solar eclipse rare -- instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to eclipse the number of vulnerabilities fixed in this months patch batch -- a record 147...
CVE-2024-26244
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26237
Windows Defender Credential Guard Elevation of Privilege Vulnerability...
CVE-2024-26237
Windows Defender Credential Guard Elevation of Privilege Vulnerability...
CVE-2024-26210
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
CVE-2024-26237 Windows Defender Credential Guard Elevation of Privilege Vulnerability
...
CVE-2024-26237
Technical details for CVE-2024-26237 are not publicly available in the provided connected documents. No concrete exploit, impact, or remediation specifics are present beyond the vulnerability title. Monitor for updates from Microsoft and security advisories.
CVE-2024-26237 Windows Defender Credential Guard Elevation of Privilege Vulnerability
...
Windows Defender Credential Guard Elevation of Privilege Vulnerability
...
PT-2024-3028 · Microsoft · Windows Defender Credential Guard +1
Name of the Vulnerable Software and Affected Versions: Windows Defender Credential Guard affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This could allow an attacker to affect the system...
Microsoft Windows Defender Credential Guard 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Defender Credential Guard. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are...
PT-2024-3018 · Microsoft · Wdac Ole Db Provider For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to a buffer overflow in the heap, allowing remote attackers to execute arbitrary code and affect the system. This can potentially...
Microsoft Windows Defender - Detection Mitigation Bypass TrojanWin32Powessere.G
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERTROJAN.WIN32.POWESSERE.GMITIGATIONBYPASSPART3.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender...
The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Security Updates for Windows Defender (March 2024)
The Antimalware Platform version of Microsoft Windows Defender installed on the remote Windows host is prior to 4.18.24010.12. It is, therefore, affected by a security feature bypass vulnerability. An authenticated attacker who successfully exploited this vulnerability could prevent Microsoft...
CVE-2024-26166
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...