242 matches found
Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device
Este repositorio documenta la implementación de Microsoft Defender for Endpoint en un dispositivo Windows 11, incluida la incorporación mediante script local, la habilitación de la detección de dispositivos, la configuración de la detección de Log4j2 CVE-2021-44228 y la validación de los flujos d...
CVE-2023-3897
CVE-2023-3897 La enumeración de nombres de usuario es posible evadiendo el CAPTCHA en la solución SureMDM local en implementaciones de Windows, lo que permite al atacante enumerar información de usuarios locales a través de mensajes de error. Este problema afecta a SureMDM local: versión 6.31 y...
CVE-2026-72957
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
CVE-2026-72954
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-72943
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-69607
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
EUVD-2026-73708
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-69607
CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...
CVE-2026-72954
CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...
EUVD-2026-73674
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-72957
CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...
EUVD-2026-73671
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
CVE-2026-72943
A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...
EUVD-2026-73112
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-74239
XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
Windows Deployment Services Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
