10858 matches found
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the categories of damage listed below. The most serious vulnerability has been assigned attribute CVE-2024-38124 and is located in the NETLOGON functionality...
CVE-2024-43517
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
CVE-2024-43517
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
CVE-2024-43517
CVE-2024-43517 is a Microsoft ActiveX Data Objects Remote Code Execution vulnerability. Documented details indicate an in-the-wild risk with network access (AV:N) and user interaction required (UI:R), with a high impact on confidentiality, integrity, and availability (C/I/A: High) and a base scor...
CVE-2024-43517 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
CVE-2024-43517 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
Microsoft ActiveX 安全漏洞
Microsoft ActiveX are small applications from Microsoft USA that allow websites to serve up content such as videos and games. They also let you interact with content such as toolbars and stock quotes while browsing the Web. A security vulnerability exists in Microsoft ActiveX. An attacker...
New Attack Technique Exploits Microsoft Management Console Files
Threat actors are exploiting a novel attack technique in the wild that leverages specially crafted management saved console MSC files to gain full code execution using Microsoft Management Console MMC and evade security defenses. Elastic Security Labs has codenamed the approach GrimResource after...
January 9, 2024—KB5034134 (OS Build 10240.20402) - EXPIRED
None None...
January 9, 2024—KB5034119 (OS Build 14393.6614) - EXPIRED
None None...
The vulnerability of the application programming interface for accessing ActiveX Data Objects (ADO) on Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the application programming interface for accessing ActiveX Data Objects ADO on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Windows Defender - VBScript Detection Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERVBSCRIPTTROJANMITIGATIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender Vulnerability Type...
Microsoft Windows Defender - VBScript Detection Bypass Vulnerability
This is additional research regarding a mitigation bypass in Windows Defender. Back in 2022, the researcher disclosed how it could be easily bypassed by passing an extra path traversal when referencing mshtml but that issue has since been mitigated. However, the researcher discovered using multip...
Microsoft Windows Defender / Trojan.Win32/Powessere.G VBScript Detection Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: https://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSDEFENDERVBSCRIPTTROJANMITIGATIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com Product Windows Defender Vulnerability Type...
CVE-2024-21349
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
Remote code execution
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability...
CVE-2024-21349 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
CVE-2024-21349 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
CVE-2024-21349
Technical details for CVE-2024-21349 (Microsoft ActiveX Data Objects remote code execution) are not provided in the connected documents; no affected versions, root cause, impact, or remediation are cited. Monitor for updates.