23141 matches found
Microsoft Windows Secure Boot ĺŽĺ ¨ćźć´
Microsoft Windows Secure Boot is a security boot feature provided by Microsoft Corporation. There are security vulnerabilities associated with Microsoft Windows Secure Boot. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected:...
KB5087471: Windows Server 2012 R2 Security Update (May 2026)
The remote Windows host is missing security update 5087471. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network. CVE-2026-41089 - Heap-based buffer overflow in Windows Win32K - GRFX...
Exploit for Unrestricted Upload of File with Dangerous Type in Filemanagerpro File_Manager
wp-file-manager-exploit-CVE-2020-25213-with-Zerologon Project...
CVE-2026-7461
CVE-2026-7461 affects the FSx Windows File Server volume mounting component inside Amazon ECS Agent on Windows, prior to version 1.103.0. The root cause is improper neutralization of inputs used in an OS command, allowing a remote authenticated actor to run shell commands with SYSTEM privileges o...
Exploit for Improper Authentication in Microsoft
CVE-2026-24294 - Local NTLM Reflection LPE via SMB Arbitrary P...
April 19, 2026âKB5091572 (OS Build 14393.9062) Out-of-band
None None...
April 19, 2026âKB5091575 (OS Build 20348.5024) Out-of-band
None None...
April 19, 2026âKB5091157 (OS Build 26100.32698) Out-of-band
None None...
April 19, 2026âKB5091571 (OS Build 25398.2276) Out-of-band
None None...
BadSuccessor-PoC
đĄď¸ Advanced BadSuccessor CVE-2025-53779 â Weaponized PoC & D...
Microsoft Windows Server Domain Role Detection
SMB-login based domain role detection with powershell fallback for Windows Server. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
KB5061195: Windows Server 2008 R2 OOB Security Update (May 2025) (CVE-2025-32709)
The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...
KB5061197: Windows Server 2008 OOB Security Update (May 2025) (CVE-2025-32709)
The remote Windows host is missing a security update and is therefore affected by an elevation of privilege vulnerability: - Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. CVE-2025-32709 Note that Nessus has n...
The vulnerability of the Windows Server Update Service (WSUS) for Windows operating systems arises from insufficient input validation. This allows attackers to make changes to the system via the network.
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
CVE-2026-26174
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-26154
Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-22612
Use after free in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-22410
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
