90 matches found
Transparent COM instrumentation for malware analysis
COM automation is a core Windows technology that allows code to access external functionality through well-defined interfaces. It is similar to traditionally loading a DLL, but is class-based rather than function-based. Many advanced Windows capabilities are exposed through COM, such as Windows...
EUVD-2018-1632
Malware in sbrugna...
EUVD-2018-1675
Malware in sbrugna...
EUVD-2021-13240
Malware in sbrugna...
EUVD-2018-1654
Malware in sbrugna...
EUVD-2023-40001
Malicious code in bioql PyPI...
EUVD-2022-44361
Malicious code in bioql PyPI...
Patch Tuesday - May 2025
Microsoft is addressing 77 vulnerabilities this May 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for five of the vulnerabilities published today, and these are already reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for two...
VulnCheck KEV: CVE-2025-30397
Access of resource using incompatible type 'type confusion' in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network...
CVE-2024-43584
Windows Scripting Engine Security Feature Bypass Vulnerability...
CVE-2024-43584
Windows Scripting Engine Security Feature Bypass Vulnerability...
CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability
...
CVE-2024-43584
CVE-2024-43584 affects Windows Scripting Engine and is described as a Security Feature Bypass. Public sources in connected docs identify Microsoft as the vendor and Windows Scripting as the affected component, with root cause framed as a bypass of a security feature and impact described as circum...
CVE-2024-43584 Windows Scripting Engine Security Feature Bypass Vulnerability
...
Windows Scripting Engine Security Feature Bypass Vulnerability
...
CVE-2024-43584: Protection Mechanism Failure
Windows Scripting Engine Security Feature Bypass Vulnerability...
PT-2024-7809
Name of the Vulnerable Software and Affected Versions Windows Scripting Engine affected versions not specified Description A security feature bypass issue exists in the Windows Scripting Engine, allowing attackers to bypass security restrictions. The vulnerability is related to the...
Microsoft Windows Scripting security vulnerabilities
Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft USA. A security vulnerability exists in Microsoft Windows Scripting. An attacker exploiting this vulnerability could bypass certain functionality. The following products and editions are...
VulnCheck KEV: CVE-2024-38178
Microsoft Windows Scripting Engine contains a memory corruption vulnerability that allows unauthenticated attacker to initiate remote code execution via a specially crafted URL...
Microsoft Windows Scripting Security Vulnerability
Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Scripting. An attacker exploiting this vulnerability could bypass certain features. The following products and editions are...