CVE-2023-3897

CVE-2023-3897 Windows 배포에서 On-premise SureMDM 솔루션의 CAPTCHA 우회를 통해 사용자 이름 열거가 가능하며, 이를 통해 공격자가 오류 메시지를 통해 로컬 사용자 정보를 열거할 수 있습니다. 이 문제는 SureMDM On-premise 6.31 및 이하 버전에 영향을 미칩니다. https://nvd.nist.gov/vuln/detail/CVE-2023-3897...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

このリポジトリでは、Windows 11 デバイスへの Microsoft Defender for Endpoint の展開について文書化しています。ローカルスクリプトによるオンボーディング、デバイス検出の有効化、Log4j2 検出（CVE-2021-44228）の構成、インシデント対応ワークフローの検証を含みます。 主な機能 ✅ Windows 10/11 向けローカルスクリプトによるオンボーディング 🔍 標準デバイス検出のセットアップ 🧨 Log4j2 の脆弱性検出 📈 アラート検証とインシデント対応 📋 Defender ツールを使用した修復ワークフロー プロジェクトの目的 ✔️...

CVE-2026-72957

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72954

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72943

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-69607

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

EUVD-2026-73708

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69607

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

EUVD-2026-73674

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72957

CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...

EUVD-2026-73671

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72943

A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...

EUVD-2026-73112

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-74239

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...