4902 matches found
EUVD-2022-53430
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death BSOD crash of the Windows kernel. For most...
Microsoft Windows ALPC 安全漏洞
Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows ALPC. The following products and versions are affected: Windows 10 Version 21H2 for x64-based Systems,Windows 10 for 32-bit...
Microsoft Windows 资源管理错误漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Network Address Translation NAT. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...
Microsoft Windows 信息泄露漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The vulnerability stems from a security issue with Intel processors. The following products and versions are...
The vulnerability of the Win32 Stream Enumeration component in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Win32 Stream Enumeration component in Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows operating system, related to errors in the code, allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the DiskUsage.exe executable in the Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the DiskUsage.exe executable in the Windows operating system exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Fax Compose Form component in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Fax Compose Form component in Windows operating systems is related to insufficient validation of entered data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Exploit for CVE-2022-30190
Deathnote Proof of Concept of CVE-2022-30190 A...
The vulnerability of the File Server Resource Manager in the Microsoft Windows operating system, related to deficiencies in access control, allows a perpetrator to increase their privileges.
The vulnerability of the File Server Resource Manager in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows operating system arises from synchronization errors when using a shared resource, allowing a perpetrator to execute arbitrary code.
The vulnerability of the Windows operating system arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Windows operating system, related to insufficient input validation, allows a hacker to execute arbitrary code.
The vulnerability of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Proofpoint Insider Threat Management Agent for Windows software lies in the use of a potentially dangerous function that allows a hacker to execute arbitrary code with system privileges.
The vulnerability of the Proofpoint Insider Threat Management Agent for Windows software is related to the use of a potentially dangerous function. Exploiting this vulnerability could allow an attacker to execute arbitrary code with system privileges...
Microsoft Office zero-day “Follina”—it’s not a bug, it’s a feature! (It’s a bug)
Update: Please see our FAQ for the latest guidance and mitigation tips on Follina. On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. The mitigation offered by Microsoft consists of an alternative method to...
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by transmitting specially crafted data...
