January 11, 2022-KB5008876 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2

None None...

KLA12419 ACE vulnerabilities in Microsoft Server Software

Remote code execution vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Original advisories CVE-2022-21855 CVE-2022-21846 CVE-2022-21969 Exploitation Public exploits exist for this vulnerability. Related products...

KLA12421 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in .NET Framework can be exploited remotely to cause...

January 11, 2022 Security update (KB5009542)

None None...

KLA12393 RCE vulnerability in Microsoft System Center

Remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-44228 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such...

2021-12 Cumulative Update for Windows 10 Version 21H1 for ARM64-based Systems (KB5008212)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

December 14, 2021—KB5008218 (OS Build 17763.2366)

None None...

December 14, 2021—KB5008212 (OS Builds 19041.1415, 19042.1415, 19043.1415, and 19044.1415)

None None...

December 14, 2021—KB5008207 (OS Build 14393.4825) - EXPIRED

None None...

Microsoft Windows Update 后置链接漏洞

Microsoft Windows Update is a program update service from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Update Stack. The following products and versions are affected: Windows 10 Version 21H2 for x64-based Systems,Windows 10 Version 1909 for 32-bit Systems,Window...

KLA62329 ACE vulnerability in Microsoft Mariner

A spoofing vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-43896 Exploitation Public exploits exist for this vulnerability. Related products CBL-Mariner-2.0 PowerShell CVE list CVE-2021-43896 high K...

KLA12384 RCE vulnerability in Microsoft Device

A remote code execution vulnerability was found in Microsoft 4K Wireless Display Adapter. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-43899 Exploitation Related products Microsoft-4K-Wireless-Display-Adapter CVE list CVE-2021-43899 unknow...

Microsoft Windows Update 权限许可和访问控制问题漏洞

Microsoft Windows Update is a program update service from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Update Stack with privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 2004 for 32-bit Systems,Window...

December 14, 2021—Hotpatch KB5008286 (OS Build 20348.410)

None None...

A week in security (Dec 6 – 12)

Last week on Malwarebytes Labs: Log4j zero-day “Log4Shell” arrives just in time to ruin your weekend Click “OK” to defeat MFA Fake job interviews plague major game developers like Riot Games and Rockstar Has your WordPress site been backdoored by a skimmer? What is a search engine and why does...

CVE-2021-43211

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

Microsoft Windows Update Assistant权限提升漏洞

Microsoft Windows Update Assistant, a system update tool from Microsoft Corporation, contains an elevation of privilege vulnerability that stems from a lack of filtering and restriction on privilege handling, which could be exploited by an attacker to The vulnerability is caused by a lack of...

November 22, 2021—KB5007262 (OS Build 22000.348) Preview

None None...

November 22, 2021—KB5007253 (OS Builds 19041.1387, 19042.1387, 19043.1387, and 19044.1387) Preview

None None...

The vulnerability of the Windows Update Assistant’s software for handling updates leads to a lack of access control, allowing attackers to escalate their privileges.

The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...