Microsoft Local Security Authority Server 信息泄露漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Local Security Authority Server lsasrv. The following products and editions are affected:Windows 10 Version 1809 for x64-based...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft DNS Server 代码注入漏洞

Microsoft DNS Server is a service of Microsoft Corporation USA. A code injection vulnerability exists in Microsoft DNS Server. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An input validation error vulnerability exists in Microsoft Windows Fax Compose Form. The following products and versions are affected: Windows 7 for x64-based Systems Service Pack 1,Windows...

Microsoft Windows Feedback Hub 权限许可和访问控制问题漏洞

Microsoft Windows Feedback Hub is a Windows general purpose application from Microsoft Corporation USA designed to allow users to provide feedback, feature suggestions, and bug reports for the operating system. Microsoft Windows Feedback Hub is vulnerable to privilege permission and access contro...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft Lightweight Directory Access Protocol输入验证错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that operates on a layer above the TCP/IP stack. An input validation error vulnerability exists in Microsoft Lightweight Directory Access Protocol LDAP. The following products and...

Microsoft Lightweight Directory Access Protocol输入验证错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that operates on a layer above the TCP/IP stack. An input validation error vulnerability exists in Microsoft Lightweight Directory Access Protocol LDAP. The following products and...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An input validation error vulnerability exists in Microsoft Windows Fax Compose Form. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 1...

Microsoft Windows Local Security Authority Subsystem Service 权限许可和访问控制问题漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft Windows File Server 权限许可和访问控制问题漏洞

Microsoft Windows File Server is a server role from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows File Server with privilege permission and access control issues. The following products and editions are affected: Windows 10 Version 1909 for x64-based Systems,Windows 10...

Microsoft Windows Kerberos 权限许可和访问控制问题漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. Microsoft Windows Kerberos is...

Microsoft Windows User Profile Service 竞争条件问题漏洞

Microsoft Windows User Profile Service is a service host from Microsoft Corporation USA that performs user profile loading and unloading operations, such as logging on logging in to Windows . A competitive conditions issue vulnerability exists in Microsoft Windows User Profile Service. The...

CVE-2022-26503

Deserialization of untrusted data in Veeam Agent for Windows 2.0, 2.1, 2.2, 3.0.2, 4.x, and 5.x allows local users to run arbitrary code with local system privileges...

VulnCheck KEV: CVE-2015-2370

The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not prevent DCE/RPC connection...

CVE-2022-25943

The installer of WPS Office for Windows versions prior to v11.2.0.10258 fails to configure properly the ACL for the directory where the service program is installed...

Microsoft Tablet Windows User Interface 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Tablet Windows User Interface with privilege permission and access control issues. The following products and editions are affected: Windows Server...

Microsoft Windows NT OS Kernel 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows NT OS Kernel with privilege permission and access control issues. The following products and editions are affected: Windows Server...

Microsoft Remote Desktop Client 代码注入漏洞

Microsoft Remote Desktop Client is a remote desktop client from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Remote Desktop Client. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based...

Microsoft Windows COM 权限许可和访问控制问题漏洞

Microsoft Windows COM is a technology for the purpose of reusing software from Microsoft Corporation, U.S.A. COM is described as a platform-independent, decentralized, object-oriented system for creating interactive binary software components. A vulnerability exists in Microsoft Windows COM with...