Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

This repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling device discovery, configuring Log4j2 detection CVE-2021-44228, and validating incident response workflows. Key Features ✅ Local script onboarding for...

CVE-2023-3897

CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2026-88174

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-88174

A race condition exists in Windows Deployment Services due to improper synchronization during concurrent execution using a shared resource. This vulnerability allows an unauthorized attacker to achieve remote code execution over the network. No specific exploit details or official patch versions ...

EUVD-2026-100104

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2026-88174: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

PT-2026-112982

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description An improper synchronization issue, known as a race condition, occurs during concurrent execution using a shared resource. This allows an unauthorized attacker to execute...

Microsoft Windows: CVE-2026-88174: Windows Deployment Services Remote Code Execution Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-72957

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72954

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72943

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-69607

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-73708

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69607

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...