1685 matches found
CVE-2022-34478
The ms-msdt, search, and search-ms protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have had known vulnerabilities, exploited in the wild although we know of none exploited through Thunderbird, so in this release...
The vulnerability of the SmartScreen security component, which prevents unauthorized access and malicious programs from being executed on Windows operating systems, allows attackers to circumvent security restrictions.
The vulnerability of the SmartScreen security component against phishing and malicious programs in Windows operating systems is related to errors in security settings. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions by downloading specially created malwa...
CVE-2022-23511
A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in versions up to and including v1.247354. When users trigger a repair of the Agent, a pop-up window opens with SYSTEM...
CVE-2020-36565
Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read...
CVE-2022-37967
Windows Kerberos Elevation of Privilege Vulnerability...
Privilege escalation
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability...
Security feature bypass
Windows Mark of the Web Security Feature Bypass Vulnerability...
Privilege escalation
Windows Win32k Elevation of Privilege Vulnerability...
CVE-2022-41091 Windows Mark of the Web Security Feature Bypass Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Windows Mark of the Web Security Feature Bypass Vulnerability
...
November 8, 2022-Security Only Update for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5020680)
November 8, 2022-Security Only Update for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 KB5020680 Applies to: Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2 Microsoft .NET Framework 4.8 IMPORTANT ...
November 8, 2022-KB5020687 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2
None None...
Description of the security update for SharePoint Server Subscription Edition Language Pack: November 8, 2022 (KB5002291)
None None...
PT-2022-5406 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in security settings of the Mark of the Web mechanism in the Windows operating system. It allows a remote attacker to bypass existing security restrictions...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...
CVE-2022-41716
CVE-2022-41716 affects Go on Windows, where unsanitized NUL values in environment variables can be used to set one env var while assigning another in processes started via syscall.StartProcess or os/exec.Cmd. The root cause is improper handling of environment variable values containing NULs, enab...
CVE-2022-38043
Windows Security Support Provider Interface Information Disclosure Vulnerability...