The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-38212

Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability...

PT-2024-6720 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a remote code execution vulnerability in the Remote Desktop Client. It is associated with the use of memory after it has been freed, which can be exploited...

PT-2024-6719 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Remote Desktop Client versions prior to 1.2.5709 Description: The issue is related to a use-after-free vulnerability in the Remote Desktop Protocol RDP Client of Windows operating systems. This vulnerability can be exploited by a remote...

The vulnerability of the Power Automate for Desktop automation platform on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Power Automate for Desktop automation platform for Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2024-6849 · Microsoft · Windows Ocsp Server +1

Name of the Vulnerable Software and Affected Versions: Windows Online Certificate Status Protocol OCSP Server affected versions not specified Description: The issue is related to an uncontrolled consumption of resources in the implementation of the Online Certificate Status Protocol OCSP in Windo...

Microsoft Windows Resilient File System 资源管理错误漏洞

The Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Resilient File System. An attacker could exploit the vulnerability to elevate privileges. The following products and...

The vulnerability of Windows operating systems, related to the use of an insecure search path, allows attackers to escalate their privileges.

The vulnerability of Windows operating systems is related to the use of an insecure search path. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Networking (WNet) service in Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the Windows Networking WNet service in Windows operating systems is related to the use of the NULL pointer pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the use of unsafe mechanisms for processing authentication data in the operating system’s memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the MHTML export function in the Spreadsheet module of the WPS Office office software for Windows operating systems allows a malicious individual to perform arbitrary commands.

The vulnerability of the MHTML export function in the Spreadsheet module of the WPS Office office software on Windows operating systems is related to the loading of malicious DLL libraries due to an incorrect limitation on the path to the ksoqing directory. Exploiting this vulnerability allows a...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Mobile Broadband Driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Mobile Broadband Driver for Windows operating systems is related to buffer overflow in the “heap”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-6247 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to Server 2022 23H2 Description: The issue is related to a buffer overflow in the TCP/IP protocol implementation in Windows operating systems. This can be exploited by a remote attacker to execute arbitrary code,...

VulnCheck KEV: CVE-2024-38217

Microsoft Windows Mark of the Web MOTW contains a protection mechanism failure vulnerability that allows an attacker to bypass MOTW-based defenses. This can result in a limited loss of integrity and availability of security features such as Protected View in Microsoft Office, which rely on MOTW...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are...