Cross site scripting

Fossil 2.18 on Windows allows attackers to cause a denial of service daemon crash via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware...

CVE-2022-34009

Fossil 2.18 on Windows allows attackers to cause a denial of service daemon crash via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware...

CVE-2022-34009

Fossil 2.18 on Windows allows attackers to cause a denial of service daemon crash via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware...

PT-2022-21965 · Microsoft · Windows Defender

Name of the Vulnerable Software and Affected Versions: Fossil version 2.18 Description: The issue allows attackers to cause a denial of service, resulting in a daemon crash, by utilizing an XSS payload in a ticket. This happens because ticket data is stored in a temporary file, and the product...

CVE-2022-30150

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

CVE-2022-30150

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

CVE-2022-30150

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

Privilege escalation

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

CVE-2022-30150 Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

...

CVE-2022-30150

Technical details about CVE-2022-30150 (Windows Defender Remote Credential Guard Elevation of Privilege) are not provided in the connected documents. The records include the CVE entry and references but do not specify root cause, affected versions, exploitability, or mitigations within the suppli...

CVE-2022-30150: Improper Authentication

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability...

Windows Defender Remote Credential Guard Elevation of Privilege Vulnerability

...

The vulnerability of Microsoft Windows Defender operating systems, which allows a hacker to trigger a service failure.

The vulnerability of Microsoft Windows Defender operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Microsoft Windows Defender 授权问题漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. Microsoft Windows Defender is vulnerable to a licensing issue. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for...

Exploit for CVE-2022-30190

CVE-2022-30190-follina Just another PoC for the new MSDT-Explo...

DuplicateDump - Dumping LSASS With A Duplicated Handle From Custom LSA Plugin

DuplicateDump is a fork of MirrorDump with following modifications: DInovke implementation LSA plugin DLL written in C++ which could be clean up after dumping LSASS. MirrorDump compile LSA plugin as .NET assembly which would not be unloaded by LSASS process. That's why MirrorDump failed to delete...

The vulnerability of Microsoft Windows Defender, a security software for Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft’s Windows Defender operating system is related to improper code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2022-3137 · Microsoft · Windows Defender Remote Credential Guard +1

Name of the Vulnerable Software and Affected Versions: Windows Defender Remote Credential Guard affected versions not specified Description: The issue is related to insufficient access restrictions in Windows Defender Remote Credential Guard, allowing a remote attacker to bypass security...

April 25, 2022—KB5012637 (OS Build 20348.681) Preview

None None...

Security Updates for Windows Defender (April 2022)

The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is equal or prior to 1.1.19100.5. It is, therefore, affected by a denial of service vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary...