2958 matches found
KLA12070 Multiple vulnerabilities in Microsoft Dynamics
Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Dataverse can be exploited...
February 9, 2021 Security Update (KB4601317)
None None...
February 9, 2021 Servicing Stack Update (KB4601394)
None None...
KLA12068 SUI vulnerabilities in Microsoft Exchange Server
A spoofing vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2021-24085 CVE-2021-1730 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More...
KB4601393: Servicing stack update for Windows 10, version 1809: February 9, 2021
None None...
The vulnerability of the Windows Update Stack component allows attackers to enhance their privileges.
The vulnerability of the Windows Update Stack component in Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
WSuspicious - A Tool To Abuse Insecure WSUS Connections For Privilege Escalations
This is a proof of concept program to escalate privileges on a Windows host by abusing WSUS. Details in this blog post: https://www.gosecure.net/blog/2020/09/08/wsus-attacks-part-2-cve-2020-1013-a-windows-10-local-privilege-escalation-1-day/ It was inspired from the WSuspect proxy project:...
January 21, 2021—KB4598298 (OS Build 18363.1350) Preview
None None...
CVE-2020-35686
The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...
CVE-2020-35686
The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...
Microsoft Security Essentials RCE Vulnerability (Jan 2021)
This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Security Essentials Protection Engine dated 12-01-2021 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability...
CVE-2021-1694
Windows Update Stack Elevation of Privilege Vulnerability...
CVE-2021-1694 Windows Update Stack Elevation of Privilege Vulnerability
...
CVE-2021-1694
Technical details about CVE-2021-1694 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or standard CVE databases.
2021-01 Cumulative Update for Windows 10 Version 1909 for x86-based Systems (KB4598229)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...
KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021
KB4583462 - Description of the security update for SQL Server 2014 SP3 CU4: January 12, 2021 Summary Data can be sent over a network to an affected Microsoft SQL Server instance that might cause code to run against the SQL Server process if a certain extended event is enabled. To learn more about...
January 12, 2021—KB4598231 (OS Build 10240.18818) - EXPIRED
None None...
Description of the security update for Office 2013: January 12, 2021
Description of the security update for Office 2013: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for SharePoint Server 2010: January 12, 2021
Description of the security update for SharePoint Server 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...