3087 matches found
February 9, 2021 Servicing Stack Update (KB4601394)
None None...
The vulnerability of the Windows Update Stack component allows attackers to enhance their privileges.
The vulnerability of the Windows Update Stack component in Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
WSuspicious - A Tool To Abuse Insecure WSUS Connections For Privilege Escalations
This is a proof of concept program to escalate privileges on a Windows host by abusing WSUS. Details in this blog post: https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/ It was inspired from the WSuspect proxy project:...
January 21, 2021âKB4598298 (OS Build 18363.1350) Preview
None None...
CVE-2020-35686
The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...
CVE-2020-35686
The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...
Microsoft Security Essentials RCE Vulnerability (Jan 2021)
This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Security Essentials Protection Engine dated 12-01-2021 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability...
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability...
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability...
CVE-2021-1694 Windows Update Stack Elevation of Privilege Vulnerability
...
CVE-2021-1694
Technical details about CVE-2021-1694 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or standard CVE databases.
2021-01 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4598229)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
Description of the security update for Office 2013: January 12, 2021
Description of the security update for Office 2013: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for SharePoint Server 2010: January 12, 2021
Description of the security update for SharePoint Server 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
KB4583461 - Description of the security update for SQL Server 2016 SP2 CU15: January 12, 2021
KB4583461 - Description of the security update for SQL Server 2016 SP2 CU15: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more abou...
KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021
KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about...
KB4583456 - Description of the security update for SQL Server 2017 GDR: January 12, 2021
KB4583456 - Description of the security update for SQL Server 2017 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about the...
KB4583458 - Description of the security update for SQL Server 2019 GDR: January 12, 2021
KB4583458 - Description of the security update for SQL Server 2019 GDR: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about the...