Microsoft Windows Kerberos 安全漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

Microsoft Windows Virtualization-Based Security Enclave 数据伪造问题漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment in the host application address space from Microsoft Corporation USA. Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is...

Microsoft OpenSSH 输入验证错误漏洞

Microsoft OpenSSH is a suite of connection tools for secure access to remote computers from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft OpenSSH. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

Microsoft Local Security Authority Server 安全漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...

Microsoft Windows NTFS 缓冲区错误漏洞

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing, and logging capabilities. A buffer error vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to obtain sensitive...

Microsoft Windows Power Dependency Coordinator 信息泄露漏洞

The Microsoft Windows Power Dependency Coordinator is a component of Microsoft's Windows systems that coordinates power management related operations. An information disclosure vulnerability exists in Microsoft Windows Power Dependency Coordinator. An attacker could exploit this vulnerability to...

Microsoft Windows Telephony Server 安全漏洞

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 10 Version 18...

.NET 8.0 Update - April 08, 2025 (KB5056686)

None None...

.NET 9.0 Update - April 08, 2025 (KB5056687)

None None...

CVE-2025-30401

A spoofing issue in WhatsApp for Windows prior to version 2.2450.6 displayed attachments according to their MIME type but selected the file opening handler based on the attachment’s filename extension. A maliciously crafted mismatch could have caused the recipient to inadvertently execute arbitra...

CVE-2024-4877

OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges...

Exploit for Path Traversal in Splunk

Splunk Path Traversal Exploit CVE-2024-36991 Descript...

Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Microsoft today issued more than 50 security updates for its various Windows operating systems, including fixes for a whopping six zero-day vulnerabilities that are already seeing active exploitation. Two of the zero-day flaws include CVE-2025-24991 and CVE-2025-24993, both vulnerabilities in NTF...

CVE-2025-1828

Crypt::Random Perl package 1.05 through 1.55 may use rand function, which is not cryptographically strong, for cryptographic functions. If the Provider is not specified and /dev/urandom or an Entropy Gathering Daemon egd service is not available Crypt::Random will default to use the...

Microsoft Windows Fast Fat Driver 安全漏洞

Microsoft Windows Fast Fat Driver is a complete file system from Microsoft USA that solves a variety of problems such as storing data on disk, interacting with a cache manager, and handling a variety of I/O operations such as file creation, performing reads/writes to files, setting file...

Microsoft Management Console 安全漏洞

Microsoft Management Console is a general-purpose management console framework from Microsoft Corporation USA that hosts and manages a variety of system management tools called console plug-ins or management units. A security vulnerability exists in Microsoft Management Console. An attacker...

Microsoft KernelStream 安全漏洞

Microsoft KernelStream is a service from Microsoft Corporation USA for supporting streaming data in the kernel. A security vulnerability exists in Microsoft KernelStream. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10...

Microsoft Streaming Service 安全漏洞

Microsoft Streaming Service is a video platform from Microsoft Corporation USA. A security vulnerability exists in Microsoft Streaming Service. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Windows Kernel 代码问题漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A code issue vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and versions are...