Lucene search
+L

65 matches found

Tenable Nessus
Tenable Nessus
added 2020/04/14 12:0 a.m.67 views

KB4550957: Windows Server 2008 April 2020 Security Update

The remote Windows host is missing security update 4550957 or cumulative update 4550951. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker...

9.3CVSS8.2AI score0.69166EPSS
SaveExploits3References38
Kaspersky
Kaspersky
added 2020/04/14 12:0 a.m.103 views

KLA11743 Multiple vulnerabilities in Microsoft products (ESU)

Multiple vulnerabilities were found in Microsoft products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corrupti...

9.3CVSS9.6AI score0.69166EPSS
SaveExploits4References54
Microsoft KB
Microsoft KB
added 2020/04/09 12:0 a.m.5 views

Windows Update Client for Windows 8.1 and Windows Server 2012 R2: March 2016

Windows Update Client for Windows 8.1 and Windows Server 2012 R2: March 2016 Support for Windows 8.1 will end on January 10, 2023 Thank you for your loyalty. We want to help you prepare and recommend you move to a Windows 11 PC to stay supported and secure.Learn more This article describes an...

6.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2020/03/30 12:0 a.m.10 views

March 30, 2020—KB4554354 (OS Build 17763.1132)

None None...

6.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.7 views

The vulnerability of the Microsoft Windows Update Client application on Windows operating systems allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft Windows Update Client application for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS5.5AI score0.0098EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.11 views

The vulnerability of the Microsoft Windows Update Client application on Windows operating systems allows a malicious individual to escalate their privileges.

The vulnerability of the Microsoft Windows Update Client application for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS5.5AI score0.00967EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/10/24 12:0 a.m.9 views

The vulnerability of the Microsoft Windows Update Client application on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Microsoft Windows Update Client application for Windows operating systems is related to the handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

5.5CVSS5.5AI score0.02199EPSS
SaveExploits4References2
OSV
OSV
added 2019/10/10 2:15 p.m.2 views

CVE-2019-1337

An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Disclosure Vulnerability'...

5.5CVSS5.8AI score0.02199EPSS
SaveExploits4References1
OSV
OSV
added 2019/10/10 2:15 p.m.4 views

CVE-2019-1323

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336...

7.8CVSS7.1AI score0.0098EPSS
SaveExploits0References1
OSV
OSV
added 2019/10/10 2:15 p.m.4 views

CVE-2019-1336

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1323...

7.8CVSS7.1AI score0.00967EPSS
SaveExploits0References1
NVD
NVD
added 2019/10/10 2:15 p.m.32 views

CVE-2019-1336

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1323...

7.8CVSS7.6AI score0.00967EPSS
SaveExploits0References1
Prion
Prion
added 2019/10/10 2:15 p.m.21 views

Information disclosure

An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Disclosure Vulnerability'...

2.1CVSS5.5AI score0.02199EPSS
SaveExploits4References1Affected Software2
Cvelist
Cvelist
added 2019/10/10 1:28 p.m.41 views

CVE-2019-1323

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336...

8.6AI score0.0098EPSS
SaveExploits0References1
CVE
CVE
added 2019/10/10 1:28 p.m.143 views

CVE-2019-1337

The CVE-2019-1337 entry describes an information disclosure vulnerability in the Windows Update Client where memory objects are mishandled. Affected component: Windows Update Client. Root cause: improper handling of in-memory objects leading to potential memory contents disclosure. Exploitation d...

5.5CVSS6.5AI score0.02199EPSS
SaveExploits4References1Affected Software3
Cvelist
Cvelist
added 2019/10/10 1:28 p.m.42 views

CVE-2019-1337

An information disclosure vulnerability exists when Windows Update Client fails to properly handle objects in memory, aka 'Windows Update Client Information Disclosure Vulnerability'...

6.7AI score0.02199EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2019/10/10 12:0 a.m.74 views

Microsoft Windows Multiple Vulnerabilities (KB4519338)

This host is missing a critical security update according to Microsoft KB4519338 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.9CVSS7.1AI score0.77733EPSS
SaveExploits41References3
Microsoft CVE
Microsoft CVE
added 2019/10/08 7:0 a.m.31 views

Microsoft Windows Update Client Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete...

7.8CVSS3.5AI score0.0098EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2019/10/08 12:0 a.m.2 views

PT-2019-3516

Name of the Vulnerable Software and Affected Versions Microsoft Windows Update Client affected versions not specified Description The issue is related to an elevation of privilege, where the Microsoft Windows Update Client does not properly handle privileges. This can be exploited by an attacker...

7.8CVSS5.8AI score0.0098EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2019/10/08 12:0 a.m.3 views

PT-2019-3541 · Microsoft · Windows Update Client +1

Name of the Vulnerable Software and Affected Versions: Windows Update Client affected versions not specified Description: An information disclosure issue exists due to the Windows Update Client's improper handling of objects in memory. This could allow an attacker to gain unauthorized access to...

5.5CVSS6.4AI score0.02199EPSS
SaveExploits4References6
Tenable Nessus
Tenable Nessus
added 2019/10/08 12:0 a.m.65 views

KB4519338: Windows 10 Version 1809 and Windows Server 2019 October 2019 Security Update

The remote Windows host is missing security update 4519338. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt...

9.9CVSS8.1AI score0.77733EPSS
SaveExploits41References43
Rows per page
Query Builder