KB5016622: Windows 10 Version 1607 and Windows Server 2016 Security Update (August 2022)

The remote Windows host is missing security update 5016622. It is, therefore, affected by multiple vulnerabilities - Windows Point-to-Point Protocol PPP Denial of Service Vulnerability CVE-2022-35747, CVE-2022-35769 - Windows Point-to-Point Protocol PPP Remote Code Execution Vulnerability...

Microsoft Windows Multiple Vulnerabilities (KB5015808)

This host is missing an important security update according to Microsoft KB5015808 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Active Directory 权限许可和访问控制问题漏洞

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

Microsoft Windows NFS 代码注入漏洞

Microsoft Windows NFS is a network file system from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Network File System. The following products and editions are affected:Windows Server, version 20H2 Server Core Installation,Windows Server 2016,Windows Server...

Microsoft DNS Server 竞争条件问题漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. Microsoft DNS Server is vulnerable to a competitive conditions issue. The following products and versions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows Server 2022,Windows Server 2022 Server Co...

KB5015808: Windows 10 Version 1607 and Windows Server 2016 Security Update (July 2022)

The remote Windows host is missing security update 5015808. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-22024, CVE-2022-22027,...

Microsoft Windows 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Performance Counters with privilege permission and access control issues. The following products and versions are affected:Windows 10 Version...

Microsoft Windows Group Policy 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A competitive conditions issue vulnerability exists in Microsoft Windows Group Policy. The following products and editions are affected:Windows 10 Version 1809 for...

2022-06 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5014702)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft Windows 日志信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A log information disclosure vulnerability exists in Microsoft Windows PowerShell. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

Microsoft Windows Encrypting File System 代码注入漏洞

Microsoft Windows Encrypting File System is a feature introduced in NTFS 3.0 in Microsoft Windows from Microsoft Corporation USA that provides file system level encryption. A code injection vulnerability exists in Microsoft Windows Encrypting File System EFS. The following products and editions a...

Microsoft Windows Defender 授权问题漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. Microsoft Windows Defender is vulnerable to a licensing issue. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for...

Microsoft Windows Network File System 安全漏洞

Microsoft Windows Network File System is a file sharing solution from Microsoft that lets you transfer files between computers running Windows Server and UNIX operating systems using the NFS protocol. A security vulnerability exists in Microsoft Windows Network File System. The following products...

Microsoft Lightweight Directory Access Protocol 代码注入漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft that runs on a layer above the TCP/IP stack. A code injection vulnerability exists in Microsoft Lightweight Directory Access Protocol and affects the following products and versions: Windows 10...

ChakraCore vulnerable to remote code execution due to insufficient InlineCache check

ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". An insufficient...

GHSA-72GM-PP6Q-GPX5 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ...

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ...

GHSA-XW5F-G937-WGM2 ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Thi...

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". Thi...

GHSA-9QPF-V72J-J9QH ChakraCore vulnerable to remote code execution

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability"...