2965 matches found
nuc-winring0-fix
Intel NUC Уязвимый драйвер WinRing0 - Руководство по постоянному удалению Защитник Windows помечает OpenHardwareMonitorLib.sys драйвер WinRing0 как VulnerableDriver:WinNT/Winring0 из-за CVE-2020-14979. Этот драйвер входит в состав службы Intel NUC Software Studio и переустанавливается через Центр...
CVE-2025-48799
Описание Это PoC для CVE-2025-48799 — уязвимости повышения привилегий в службе обновления Windows. Данная уязвимость затрагивает клиенты Windows win11/win10 с как минимум двумя жесткими дисками. Когда на машине несколько жестких дисков, можно изменить место сохранения нового контента с помощью...
PPLmedic
PPLmedic 이 도구는 서명자 유형 Windows인 PPL에 임의 코드를 주입하고 서명자 유형 WinTcb로 승격하는 Userland 익스플로잇 체인을 구현합니다. 이러한 기법은 원래 James Forshaw일명 @tiraniddo이 자신의 블로그 게시물 Injecting Code into Windows Protected Processes using COM - Part 1에서 논의했습니다. 이 도구에 대해 더 자세히 알아보려면 관련 블로그 게시물을 여기에서 읽어보세요: Bypassing PPL in Userland agai...
CVE-2020-1313
CVE-2020-1313 Аннотация Служба оркестратора обновлений Windows Windows Update Orchestrator Service — это служба DCOM, используемая другими компонентами для установки уже загруженных обновлений Windows. USO была уязвима к повышению привилегий от любого пользователя до локальной системы из-за...
CVE-2023-23397-Patch
CVE-2023-23397 Windows 업데이트 패치 Windows 10 및 11용 CVE-2023-23397 powershell 패치 스크립트 이 스크립트 버전을 사용하면 기기에 최신 Microsoft 익스플로잇에 대한 가장 최근에 전송된 패치가 있는지 확인할 수 있습니다. PowerShell 명령 Get-Hotfix를 사용하여 보안 업데이트를 찾을 수 없는 경우 최신 Windows 업데이트를 다운로드하여 재시작 없이 자동으로 설치합니다. 필요에 따라 시스템을 재시작하는 것이 좋습니다. 대부분의 사용자는 Windows...
dazzleUP
dazzleUP A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first feature of dazzleUP is that it uses Windows Update Agent API instead of...
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...
CVE-2026-81963
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
EUVD-2026-73889
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2026-81963
Windows Update Stack is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker with low privileges to elevate privileges locally , rated CVSS 7.8 HIGH with high impact to confidentiality, integrity, and availability. The vulnerability...
Windows Update Stack Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
Microsoft Windows Link Following Vulnerability
Microsoft Windows Update Stack contains a link following vulnerability that allows a local attacker to escalate privileges locally up to SYSTEM...
PT-2026-88102
🚨HIGH - Windows Update Stack EoP via Link Following CVE-2026-81963 Windows Update Stack performs improper link resolution before file access, allowing an authenticated local attacker to abuse junctions/symlinks to redirect privileged file operations to unintended paths. This link-following flaw c...
CVE-2025-48799
설명 이것은 Windows Update 서비스의 권한 상승 취약점인 CVE-2025-48799에 대한 PoC입니다. 이 취약점은 하드 드라이브가 2개 이상 있는 Windows 클라이언트win11/win10에 영향을 미칩니다. 머신에 여러 하드 드라이브가 있는 경우 Storage Sense를 사용하여 새 콘텐츠가 저장되는 위치를 변경할 수 있습니다. 새 애플리케이션의 위치가 보조 드라이브로 변경되면, 새 애플리케이션 설치 중에 wuauserv 서비스가 심볼릭 링크를 확인하지 않고 임의 폴더 삭제를 수행합니다파일이 발견되면 서비스...
August 11, 2026—KB5121000 (OS Build 28000.2704)
None None...
Important: Red Hat Security Advisory: OpenJDK 8u502 Windows Security Update
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
KLA91174 ACE vulnerability in Microsoft Apps
Arbitrary code execution vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-50517 Exploitation CVE list CVE-2026-50517 critical KB list Solution Install necessary updates from the KB section, that are...
KLA91178 SUI vulnerability in Microsoft Server Software
User interface spoofing vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2026-56191 Exploitation CVE list CVE-2026-56191 critical KB list Solution Install necessary updates from the KB section, th...
