NetScope

NetScope Windows向けオフラインファーストのネットワーク調査・対応プラットフォーム。 NetScopeは、セキュリティアナリスト、インシデントレスポンダー、CTFプレイヤーのための デスクトップアプリケーションです。パケットキャプチャ.pcap / .pcapngまたは ライブインターフェースを取り込み、完全な証拠に基づく調査結果 — 判定、攻撃ストーリー、 侵害指標IoC、抽出した戦利品loot、ワンクリック対応アクション — に変換します。 クラウドサービスも有料APIも使わず、すべてお使いのマシン上で完結します。 NetScopeを選ぶ理由...

CVE-2024-34474

CVE-2024-34474 Clario 2024-04-11 기준 Windows Desktop 버전는 %PROGRAMDATA%\Clario에 대해 약한 권한을 가지며, 해당 위치에서 DLL을 SYSTEM 권한으로 로드하려고 시도합니다. 설명: Clario for Windows 데스크톱 애플리케이션은 사용자가 안티바이러스 검사를 수행할 때 C:\ProgramData\Clario\ 및 C:\ProgramData\Clario\Engines\에서 존재하지 않는 DLL 라이브러리를 로드하려고 시도합니다. DLL 파일은 존재하지 않으며, ...

CVE-2026-62897

A flaw was found in .NET Framework. This integer overflow or wraparound vulnerability allows an unauthorized attacker to execute code locally. By exploiting this flaw, an attacker could gain control over the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not shi...

CVE-2026-70354

A flaw was found in .NET. This vulnerability, caused by an out-of-bounds write, could allow an unauthorized attacker to execute code locally. Exploitation requires local access and user interaction, but if successful, it can lead to significant impact on the system's confidentiality, integrity, a...

CVE-2026-62871

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthorized attacker to execute arbitrary code locally. This could lead to a complete compromise of the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not ship the Windows Desktop runtime...

Vulnerabilities exploited in Zoom

Zoom has identified vulnerabilities in the Zoom Client for Windows, Zoom Rooms for Windows, and other Zoom Windows products, such as the Windows Desktop Client, VDI Client, and Meeting SDK. These vulnerabilities include a TOCTOU race condition that can be exploited by authenticated local users to...

EUVD-2026-45048

Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via XAML parsing in Windows Presentation Foundation WPF. An attacker can execute arbitrary code by supplying specially crafted XAML input that is processed by a vulnerable WPF application. Improper handling of...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via XAML parsing in Windows Presentation Foundation WPF. An attacker can execute arbitrary code by supplying specially crafted XAML input that is processed by a vulnerable WPF application. Improper handling of...

PT-2026-60396

Name of the Vulnerable Software and Affected Versions Zoom Clients for Windows affected versions not specified Description A time-of-check to time-of-use TOCTOU race condition exists in the installation and uninstallation process. This flaw allows an authenticated local user to escalate privilege...

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows DWM allows an authorized attacker to elevate privileges locally...

Security Updates for Windows App Client for Windows Desktop (June 2026)

The Windows app installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network. CVE-2026-42908 - Heap-based buffer overflow in Remote Deskt...

CVE-2026-44813

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-44807

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-42983

CVE-2026-42983 is a Windows vulnerability described across multiple sources as a use-after-free in the DWM Core Library that allows an authorized, local attacker to elevate privileges. The issue is identified consistently in Microsoft’s MSRC page and NVD records; no public exploit details or defa...

EUVD-2026-35748

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to improper bounds checking in memory operations. An attacker can execute arbitrary code or escalate privileges by supplying crafted input to the affected process. Remediation Upgrade...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound due to improper validation of user-supplied input in the authentication process. An attacker can gain elevated privileges by providing crafted input during local interaction. Remediation Upgrade...