Microsoft Windows Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Tablet Windows User Interface with privilege license and access control issues. The following products and editions are affected:Windows 10 Version 21H...

Microsoft Windows Storage Spaces Controller: Permissions and access control issues

Microsoft Windows Storage Spaces Controller is an essential driver for providing storage space functionality from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Storage with privilege permission and access control issues. The following products and editions are affected:...

Microsoft Windows DirectX security vulnerabilities

Microsoft Windows DirectX is the DirectX End-User Runtime Web Installer from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows DirectX. The following products and editions are affected:Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server...

Microsoft Win32k Buffer Error Vulnerability

Microsoft Win32k is a system file for Windows Multi-User Management from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Win32k. The following products and versions are affected:Windows 10 Version 1909 for ARM64-based Systems,Windows 11 for ARM64-based Systems,Windows ...

Microsoft Windows User Profile Service Backlink Vulnerability

Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A backlink vulnerability exists in Microsoft Windows User Profile Service. The following products and...

Microsoft Windows Resilient File System security vulnerabilities

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and editions are affected: Windows Server 2012 R2,Windows Server 2012 R2 Server Core...

Microsoft Windows Security Feature Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security feature issue vulnerability exists in Microsoft Windows Workstation Service Remote Protocol. The following products and editions are affected:Windows Server 2019 Server Core...

Microsoft Windows DirectX Resource Management Error Vulnerability

Microsoft Windows DirectX is a DirectX end-user runtime Web installer from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows DirectX. The following products and editions are affected: Windows 10 Version 20H2 for 32-bit Systems,Windows 10 Version 20H2...

Microsoft Windows Virtual Machine Permission Licensing and Access Control Vulnerabilities

Microsoft Windows Virtual Machine is a virtualization technology from Microsoft USA. It allows you to run many virtual environments in a Windows environment. A vulnerability exists in the Microsoft Windows Virtual Machine IDE Drive with privilege permission and access control issues. The followin...

Microsoft Windows IKE Extension security vulnerability

Microsoft Windows IKE Extension is a network key exchange extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows IKE Extension. The following products and editions are affected:Windows Server 2019,Windows Server 2019 Server Core installation,Windows 10...

Microsoft Graphics Component security vulnerabilities

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. The following products and versions are affected: Windows 10 Version 20H2 for ARM64-based Systems,Windows Server, version 20H2 Server Core...

Microsoft Windows Security Center code injection vulnerability

Microsoft Windows Security Center is a security center of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Security Center. The following products and editions are affected:Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019...

Microsoft Windows Trust Management Vulnerability

Certifi is a Python SSL certificate from Certifi Open Source. Microsoft Windows Certificates is vulnerable to a trust management issue. The following products and editions are affected: Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 20H...

Microsoft Windows Remote Desktop Protocol buffer error vulnerability

Microsoft Windows Remote Desktop Protocol RDP is a Microsoft application for connecting to remote Windows desktops. A buffer error vulnerability exists in Microsoft Windows Remote Desktop Protocol. The following products and versions are affected: Windows 10 Version 21H2 for ARM64-based...

Microsoft Cryptographic Permissions and Access Control Vulnerabilities

Microsoft Cryptographic is an encryption service from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Cryptographic Services with privilege permission and access control issues. The following products and versions are affected: Windows 7 for 32-bit Systems Service Pack...

Microsoft Windows Security Feature Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security feature vulnerability exists in Microsoft Windows BackupKey Remote Protocol. The following products and editions are affected: Windows Server 2008 R2 for x64-based Systems...

Microsoft Windows Event Tracing Resource Management Error Vulnerability

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism to track and log events raised by user-mode applications and kernel-mode drivers. Microsoft Windows Event Tracing is vulnerable to a resource management error. The following products and...

Microsoft Windows Remote Procedure Call Runtime Buffer Error Vulnerability

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected:Windows...

Microsoft Windows Active Directory permission licensing and access control vulnerabilities

Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...

KB5009621: Windows 7 and Windows Server 2008 R2 Security Update (January 2022)

The remote Windows host is missing security update 5009621. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21850, CVE-2022-21851,...