23471 matches found
Microsoft .NET、Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, and Microsoft .NET Framework is a comprehensive and consistent programming model and a development platform for building applications for Windows, Windows Store, Windows Phone,...
Microsoft Windows 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Smart Card. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions...
Microsoft Windows COM 安全漏洞
Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation USA.COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A security vulnerability exists in Microsoft Windows COM...
Microsoft Windows Digital Media 缓冲区错误漏洞
Microsoft Windows Digital Media is a collection of technologies and features for playing, managing, sharing, delivering, and protecting digital media content from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit the...
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers
A proof-of-concept PoC exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol LDAP that could trigger a denial-of-service DoS condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 CVSS score: 7.5. It was addressed ...
Attackers exploiting a patched FortiClient EMS vulnerability in the wild
Introduction During a recent incident response, Kaspersky's GERT team identified a set of TTPs and indicators linked to an attacker that infiltrated a company's networks by targeting a Fortinet vulnerability for which a patch was already available. This vulnerability is an improper filtering of S...
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2022-40733
CVE-2022-40733 is a kernel vulnerability in Windows DirectComposition via the win32kbase.sys driver. The TALOS report details a NULL pointer dereference in DirectComposition GetWeakReferenceBase due to a mis-managed weak-reference flag in the resource marshaler lifecycle, triggered when certain f...
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2022-40732
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
CVE-2022-40732
CVE-2022-40732 affects Microsoft Windows DirectComposition in the win32kbase.sys driver (Windows 11 10.0.22000.593; Windows Server 2022 10.0.20348.643). Talos details a NULL pointer dereference in DirectComposition::CCompositionSurfaceBitmapMarshaler when setting integer property 0x3, which leads...
PT-2024-11634 · Microsoft · Windows 11 +1
Name of the Vulnerable Software and Affected Versions: Windows 11 version 10.0.22000.593 Windows Server 2022 version 10.0.20348.643 Description: An access violation vulnerability exists in the DirectComposition functionality of the win32kbase.sys driver. A specially-crafted set of syscalls can le...
PT-2024-11633 · Microsoft · Windows 11 +1
Name of the Vulnerable Software and Affected Versions: Windows 11 version 10.0.22000.593 Windows Server 2022 version 10.0.20348.643 Description: An access violation issue exists in the DirectComposition functionality of the win32kbase.sys driver. A specially-crafted set of syscalls can lead to a...
CVE-2022-40733: NULL Pointer Dereference
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...
2024-12 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5048800)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
2024-12 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5048661)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2024-12 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5048671)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
