1382 matches found
CVE-2025-40979
CVE-2025-40979 describes a DLL search order hijack in Grandstream Wave’s wave.exe on Windows 11 (v1.27.8). The root cause is improper DLL loading order, allowing a locally attacker-controlled file placed in the user Temp directory (C:\Users\AppData\Local\Temp) to potentially execute arbitrary cod...
CVE-2025-40979 DLL search order hijack in Wave by Grandstream Networks
DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users\AppData\Local\Temp' directory, which could lead to...
CVE-2025-40979 DLL search order hijack in Wave by Grandstream Networks
DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users\AppData\Local\Temp' directory, which could lead to...
PT-2025-37036
Name of the Vulnerable Software and Affected Versions: Windows 11 version 1.27.8 Description: A DLL search order hijacking issue exists in the wave.exe executable. Successful exploitation could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the...
Microsoft Win32k 竞争条件问题漏洞
Microsoft Win32k is a system file for Windows multi-user administration from Microsoft Corporation USA. A competitive condition issue vulnerability exists in Microsoft Win32k. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...
Microsoft NTLM 授权问题漏洞
Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. An authorization problem vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to elevate privileges. The...
September 9, 2025-KB5064403 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 22H2 and Windows 11, version 23H2
None None...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...
Microsoft Virtual Hard Disk 资源管理错误漏洞
Microsoft Virtual Hard Disk is a virtual hard disk file format from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Virtual Hard Disk. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are...
Microsoft Hyper-V 访问控制错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An access control error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could elevate privileges. The followi...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to obtain sensitive information. The following products and versions are affected:Windows 11 Version...
Microsoft Brokering File System 资源管理错误漏洞
Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Windows Server...
Microsoft Windows Defender 安全漏洞
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Window...
Microsoft Hyper-V 资源管理错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A resource management error vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could elevate privileges. The...
Microsoft Windows PowerShell 安全漏洞
Microsoft Windows PowerShell is a command line shell program and scripting environment from Microsoft Corporation USA that enables command line users and script writers to take advantage of the power of . A security vulnerability exists in Microsoft Windows PowerShell. An attacker could exploit t...
Microsoft Windows Defender 安全漏洞
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Window...
KB5065431: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (September 2025)
The remote Windows host is missing security update 5065431. It is, therefore, affected by multiple vulnerabilities - SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make t...
A week in security (September 1 – September 7)
Last week on Malwarebytes Labs: Nexar dashcam video database hacked Roblox introduces age checks to use communication features Give your PC a fresh start: New free tools to boost your PC’s speed, security, and peace of mind TP-Link warns of botnet infecting routers and targeting Microsoft 365...
