921 matches found
CVE-2023-38175
Microsoft Windows Defender Elevation of Privilege Vulnerability...
CVE-2023-36882
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Windows Defender Elevation of Privilege Vulnerability...
CVE-2023-38175 Microsoft Windows Defender Elevation of Privilege Vulnerability
...
PT-2023-4312 · Microsoft · Wdac Ole Db Provider For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft WDAC OLE DB provider for SQL Server, which can be exploited by a remote attacker...
Microsoft Windows Defender Security Vulnerability
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker can exploit the vulnerability to elevate privileges...
KLA51715 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-38175 Related products Microsoft-Windows Windows-Defender CVE list CVE-2023-38175 critical KB list Solution Install necessa...
"FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly
Overview "FFRI yarai" and "FFRI yarai Home and Business Edition" provided by FFRI Security, Inc. handle exceptional conditions improperly CWE-703. When the product's Windows Defender management feature is enabled, and Microsoft Defender detects some files matching specific conditions as a threat,...
JVN#42527152: "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly
"FFRI yarai" and "FFRI yarai Home and Business Edition" provided by FFRI Security, Inc. handle exceptional conditions improperly CWE-703. When the product's Windows Defender management feature is enabled, and Microsoft Defender detects some files matching specific conditions as a threat, the...
FFRI yarai security breach
FFRI yarai is a security application from FFRI Japan. It is capable of protecting internal systems from malware attacks that could jeopardize operational processes. A security vulnerability exists in FFRI yarai and FFRI yarai Home and Business Edition that stems from a failure to properly handle...
PVS Target Device hangs/freezes when placed under isolation by Windows Defender
The PVS Target VM goes into a hung state...
Security Updates for Windows Defender (July 2023)
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23050.3. It is, therefore, affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Guidance on Microsoft Signed Drivers Being Used Maliciously
Executive Summary: Microsoft was recently informed that drivers certified by Microsoft’s Windows Hardware Developer Program MWHDP were being used maliciously in post-exploitation activity. In these attacks, the attacker gained administrative privileges on compromised systems before using the...
Microsoft Defender 安全漏洞
Microsoft Defender is a threat protection software from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker can exploit the vulnerability to elevate privileges...
KLA50772 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-33156 Related products Windows-Defender CVE list CVE-2023-33156 high KB list Solution Install necessary updates from the KB...
VulnCheck KEV: CVE-2023-32049
Microsoft Windows Defender SmartScreen contains a security feature bypass vulnerability that allows an attacker to bypass the Open File - Security Warning prompt...
Forensia - Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase
AntiForensics Tool For Red Teamers, Used For Erasing Some Footprints In The Post Exploitation Phase. Reduces Payload Burnout And Increases Detection Countdown. Can Be Used To Test The capabilities of Your Incident Response / Forensics Teams. Capabilities Unloading Sysmon Driver. Gutmann Method Fi...
CVE-2023-29372
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
WDAC Supplemental Policy for Veeam Backup & Replication Components on Azure Local
Azure Local is the new name for Azure Stack HCI Azure Stack HCI is now considered part of Azure Local. Learn more about this rename in the Microsoft Documentation: Renaming Azure Stack HCI to Azure Local. Veeam Backup & Replication Version Requirement The solution documented in this article...
