Microsoft Exchange Server DlpUtils AddTenantDlpPolicy RCE

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exchange Server. Authentication is required to exploit this vulnerability. Additionally, the target user must have the "Data Loss Prevention" role assigned and an active mailbox. If the user is in th...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

Microsoft Windows AppX Deployment Extensions Security Vulnerability

Microsoft Windows AppX Deployment Extensions is an AppX Deployment Extensions DLL from Microsoft Corporation USA that is part of the Microsoft Windows operating system. A security vulnerability exists in Microsoft Windows AppX Deployment Extensions. The following products and editions are...

Microsoft Windows Media Foundation Security Vulnerability

Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...

Microsoft Windows TPM 设备驱动程序信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. The Microsoft Windows/Windows Server TPM device driver is vulnerable to...

Microsoft Windows Licensing Issues Vulnerabilities

Microsoft Windows is an operating system for personal devices from Microsoft Corporation. There is a license issue vulnerability in Microsoft Windows, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements. The following products and...

KB4598287: Windows Server 2008 January 2021 Security Update

The remote Windows host is missing security update 4598287 or cumulative update 4598288. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions...

KB4598230: Windows 10 Version 1809 and Windows Server 2019 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

KB4598289: Windows 7 and Windows Server 2008 R2 January 2021 Security Update

The remote Windows host is missing security update 4598289 or cumulative update 4598279. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

Microsoft Windows Installer Security Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. The following products and editions are affected:Windows 10 Version 200...

Microsoft Windows Kernel Security Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Kernel. The following products and editions are affected:Windows 10 Version 2004 for ARM64-based Systems,Windows 10 Version 2004 for 32-bit...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

Windows Remote Desktop Protocol Security Vulnerability

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft USA. A security vulnerability exists in Windows Remote Desktop Protocol. The following products and versions are affected:Microsoft Remote Desktop,Remote Desktop client for...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

January 12, 2021-KB4598499 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server, version 2019

None None...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Microsoft Windows/Windows Server "Remote...

Microsoft Windows splwow64 License Issue Vulnerability

Microsoft Windows splwow64 is a printing-related program on Windows systems from Microsoft Corporation USA. Microsoft splwow64 suffers from a License Issue vulnerability, for which no information is available at this time, please stay tuned to CNNVD or the vendor's announcement. The following...

Microsoft Graphics Component Information Disclosure Vulnerability

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows Server 2016 Server Core installation,Windows Server 2016,Windows 10...