3099 matches found
KB5001400: Servicing stack update for Windows 10, version 1803: April 13, 2021
None None...
KB4601275: Time zone change in Windows for The Republic of South Sudan: April 13, 2021
None None...
KLA12137 Multiple vulnerabilities in Microsoft Exchange Server
Remote code execution vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-28480 CVE-2021-28482 CVE-2021-28483 CVE-2021-28481 Exploitation Public exploits exist for this vulnerability. Malwa...
June 1, 2021, update for Office 2013 (KB5001937)
June 1, 2021, update for Office 2013 KB5001937 This article describes update 5001937 for Microsoft Office 2013 that was released on June 1, 2021. This update also applies to Office Home and Student 2013 RT.Be aware that the update in the Microsoft Download Center applies to the Microsoft Installe...
Back in a Bit: Attacker Use of the Windows Background Intelligent Transfer Service
In this blog post we will describe: How attackers use the Background Intelligent Transfer Service BITS Forensic techniques for detecting attacker activity with data format specifications Public release of the BitsParser tool A real-world example of malware using BITS persistence --- Introduction...
The vulnerability of the Windows Update Stack component on Windows operating systems allows a perpetrator to escalate their privileges or execute arbitrary code.
The vulnerability of the Windows Update Stack component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...
The vulnerability of the Update Service component of the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Windows operating system’s Update Service component is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
March 18, 2021—KB5001634 (OS Build 17134.2090) Out-of-band
None None...
March 18, 2021—KB5001648 (OS Build 18363.1443) Out-of-band
None None...
The vulnerability of the Windows Update Assistant software, a system for working with Windows updates, is related to deficiencies in access control. This vulnerability allows an attacker to escalate their privileges.
The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Microsoft Windows Update Assistant Improper Access Control Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows Update...
Windows Server 2012 SrClient DLL Hijacking Exploit
All editions of Windows Server 2012 but not 2012 R2 are vulnerable to DLL hijacking due to the way TiWorker.exe will try to call the non-existent SrClient.dll file when Windows Update checks for updates. This issue can be leveraged for privilege escalation if %PATH% includes directories that are...
KLA12130 ACE vulnerability in Microsoft Developer Tools
A remote code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-17163 Exploitation Related products Microsoft-Visual-Studio CVE list CVE-2020-17163 critical KB list Solution Instal...
March 15, 2021—KB5001568 (OS Build 17763.1821) Out-of-band
None None...
March 15, 2021—KB5001566 (OS Build 18363.1441) Out-of-band
None None...
Microsoft Windows Update Agent Directory Junction Denial-of-Service Vulnerability
This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...
CVE-2021-27070
Windows 10 Update Assistant Elevation of Privilege Vulnerability...
CVE-2021-26889
Windows Update Stack Elevation of Privilege Vulnerability...