Lucene search
+L

2958 matches found

BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.14 views

The vulnerability of the Windows Update Assistant’s software for handling updates leads to a lack of access control, allowing attackers to escalate their privileges.

The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

5CVSS6.2AI score0.01396EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:00 a.m.14 views

The vulnerability of the Windows Update Assistant’s software for handling updates leads to a lack of access control, allowing attackers to escalate their privileges.

The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

5.5CVSS6.4AI score0.00832EPSS
SaveExploits0References2
Kaspersky
Kaspersky
added 2021/11/16 12:00 a.m.33 views

KLA12347 PE vulnerabilities in Microsoft Windows

Elevation of privilege vulnerabilities were found in Microsoft Windows. Malicious users can remotely exploit this vulnerability to gain privileges. Original advisories CVE-2021-43211 CVE-2021-42297 Related products Microsoft-Windows CVE list CVE-2021-43211 high CVE-2021-42297 critical KB list...

7.8CVSS5.8AI score0.01396EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/11/16 12:00 a.m.15 views

Microsoft Windows Update Assistant 权限许可和访问控制问题漏洞

Microsoft Windows Update Assistant, a system update tool from Microsoft Corporation, contains an elevation of privilege vulnerability that stems from a lack of filtering and restriction on privilege handling, which could be exploited by an attacker to The vulnerability is caused by a lack of...

7.1CVSS5.7AI score0.00832EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2021/11/16 12:00 a.m.18 views

PT-2021-4763 · Microsoft · Windows 10 Update Assistant

Name of the Vulnerable Software and Affected Versions: Windows 10 Update Assistant affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Assistant, which can be exploited to elevate privileges. Recommendations: At the moment, there ...

7.8CVSS4.8AI score0.01396EPSS
SaveExploits1References8
Microsoft Security Update
Microsoft Security Update
added 2021/11/09 6:00 p.m.16 views

2021-11 Cumulative Update for Windows Server, version 20H2 for ARM64-based Systems (KB5007186)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

6.7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/11/09 8:00 a.m.99 views

November 9, 2021—KB5007207 (OS Build 10240.19119) - EXPIRED

None None...

8.8CVSS6.8AI score0.19381EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/11/09 8:00 a.m.113 views

November 9, 2021—KB5007189 (OS Build 18363.1916)

None None...

9CVSS6.8AI score0.19381EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2021/11/09 12:00 a.m.53 views

KLA12340 RCE vulnerabilities in Microsoft Apps

Remote code execution vulnerabilities were found in Microsoft Apps. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-43208 CVE-2021-43209 CVE list CVE-2021-43208 unknown CVE-2021-43209 unknown Solution Install necessary updates from the KB...

7.8CVSS8.5AI score0.06771EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2021/11/09 12:00 a.m.27 views

November 9, 2021-KB5006365 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2, and Windows Version 21H1

None None...

6.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/11/09 12:00 a.m.16 views

November 9, 2021—Hotpatch KB5007386 (OS Build 20348.344)

None None...

5.3AI score
SaveExploits0
CNNVD
CNNVD
added 2021/11/09 12:00 a.m.16 views

Microsoft Windows Update Assistant 后置链接漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Update Assistant. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

7.8CVSS5.6AI score0.01396EPSS
SaveExploits1References7
Kaspersky
Kaspersky
added 2021/11/09 12:00 a.m.71 views

KLA12349 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Edge can be exploited remotely to spoof user interface...

7.5CVSS6.3AI score0.03878EPSS
SaveExploits0References9
Microsoft KB
Microsoft KB
added 2021/11/09 12:00 a.m.16 views

November 9, 2021 Servicing Stack Update (KB5007349)

None None...

5.8AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2021/10/27 12:00 a.m.12 views

PT-2021-4762 · Microsoft · Windows Update Assistant

Name of the Vulnerable Software and Affected Versions: Windows Update Assistant versions affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Assistant, which can be exploited to elevate privileges. Recommendations: At the moment,...

7.1CVSS5.2AI score0.00832EPSS
SaveExploits0References8
Zero Day Initiative
Zero Day Initiative
added 2021/10/27 12:00 a.m.23 views

(0Day) Microsoft Windows Update Assistant Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within Windows Update...

7.3CVSS5.5AI score0.00832EPSS
SaveExploits0
Kaspersky
Kaspersky
added 2021/10/18 12:00 a.m.40 views

KLA12326 SB vulnerability in Microsoft Device

A security feature bypass vulnerability was found in Microsoft Device. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2021-42299 Related products Microsoft-Surface CVE list CVE-2021-42299 high KB list Solution Install necessary updates from...

6.1CVSS5.5AI score0.00865EPSS
SaveExploits0References3
Microsoft Security Update
Microsoft Security Update
added 2021/10/12 5:00 p.m.19 views

2021-10 Cumulative Update for Windows 10 Version 2004 for ARM64-based Systems (KB5006670)

Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information. After you install this item, you may have to restart your computer...

6.7AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/10/12 7:00 a.m.244 views

October 12, 2021—KB5006672 (OS Build 17763.2237)

None None...

9CVSS6.8AI score0.74129EPSS
SaveExploits11
Microsoft KB
Microsoft KB
added 2021/10/12 7:00 a.m.80 views

October 12, 2021—KB5006675 (OS Build 10240.19086) - EXPIRED

None None...

8.8CVSS6.8AI score0.74129EPSS
SaveExploits11
Rows per page
Query Builder