Lucene search
+L

482 matches found

Tenable Nessus
Tenable Nessus
added 2017/12/12 12:00 a.m.96 views

KB4053578: Windows 10 Version 1511 December 2017 Security Update

The remote Windows host is missing security update 4053578. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a wa...

9.8CVSS7.9AI score0.55108EPSS
SaveExploits48References26
Tenable Nessus
Tenable Nessus
added 2017/12/12 12:00 a.m.260 views

KB4053579: Windows 10 Version 1607 and Windows Server 2016 December 2017 Security Update

The remote Windows host is missing security update 4053579. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a wa...

9.8CVSS7.9AI score0.55108EPSS
SaveExploits48References26
Tenable Nessus
Tenable Nessus
added 2017/12/12 12:00 a.m.98 views

KB4054517: Windows 10 Version 1709 and Windows Server Version 1709 December 2017 Security Update

The remote Windows host is missing security update 4054517. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a wa...

9.8CVSS7.9AI score0.55108EPSS
SaveExploits48References27
Tenable Nessus
Tenable Nessus
added 2017/12/12 12:00 a.m.70 views

KB4053580: Windows 10 Version 1703 December 2017 Security Update

The remote Windows host is missing security update 4053580. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a wa...

9.8CVSS7.9AI score0.55108EPSS
SaveExploits48References26
Symantec
Symantec
added 2017/12/12 12:00 a.m.52 views

Microsoft Windows Device Guard CVE-2017-11899 Remote Security Bypass Vulnerability

Description Microsoft Windows is prone to a remote security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit System...

7.5CVSS2.2AI score0.05264EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
added 2017/12/12 12:00 a.m.81 views

KB4053581: Windows 10 December 2017 Security Update

The remote Windows host is missing security update 4053581. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass exists when Device Guard incorrectly validates an untrusted file. An attacker who successfully exploited this vulnerability could make an unsigned file...

9.8CVSS7.9AI score0.50362EPSS
SaveExploits31References21
BDU FSTEC
BDU FSTEC
added 2017/12/04 12:00 a.m.14 views

The vulnerability of the Microsoft Device Guard component in Windows operating systems allows a hacker to inject malicious code into Windows PowerShell sessions.

The vulnerability of the components used to protect the integrity of Microsoft Device Guard’s hardware and software on Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to bypass integrity checks and...

7.2CVSS7.2AI score0.03221EPSS
SaveExploits4References6
zdt
zdt
added 2017/11/20 12:00 a.m.100 views

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass Vulnerability

Exploit for windows platform in category local exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1332 Windows: CiSetFileCache TOCTOU Security Feature Bypass Platform: Windows 10 10586/14393/10S not tested 8.1 Update 2 or Windows 7 Class: Security Feature Bypass Summary:...

4.6CVSS6.3AI score0.03087EPSS
SaveExploits9
exploitpack
exploitpack
added 2017/11/20 12:00 a.m.27 views

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1332 Windows: CiSetFileCache TOCTOU Security Feature Bypass Platform: Windows 10 10586/14393/10S not tested 8.1 Update 2 or Windows 7 Class: Security Feature Bypa...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2017/11/20 12:00 a.m.111 views

Microsoft Windows 10 - CiSetFileCache TOCTOU Security Feature Bypass

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1332 Windows: CiSetFileCache TOCTOU Security Feature Bypass Platform: Windows 10 10586/14393/10S not tested 8.1 Update 2 or Windows 7 Class: Security Feature Bypass Summary: It’s possible to add a cached signing level to an unsigne...

5.3CVSS6.7AI score0.03087EPSS
SaveExploits9
CNVD
CNVD
added 2017/11/16 12:00 a.m.26 views

Microsoft Windows Device Guard Security Bypass Vulnerability (CNVD-2017-37111)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Device Guard is one of the device protection components. A security feature bypass vulnerability exists in Device Guard in Microsoft Windows. A remote attacker could exploit this vulnerability to...

5.3CVSS6.8AI score0.03087EPSS
SaveExploits9References1
attackerkb
attackerkb
added 2017/11/15 3:29 a.m.8 views

CVE-2017-11830

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability"...

5.3CVSS5.5AI score0.03087EPSS
SaveExploits9References5
OSV
OSV
added 2017/11/15 3:29 a.m.5 views

CVE-2017-11830

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability"...

5.3CVSS5.8AI score0.03087EPSS
SaveExploits9References4
Prion
Prion
added 2017/11/15 3:29 a.m.20 views

Security feature bypass

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability"...

4.6CVSS5.3AI score0.03087EPSS
SaveExploits9References4Affected Software2
NVD
NVD
added 2017/11/15 3:29 a.m.22 views

CVE-2017-11830

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability"...

5.3CVSS5.9AI score0.03087EPSS
SaveExploits9References4
Cvelist
Cvelist
added 2017/11/15 3:00 a.m.48 views

CVE-2017-11830

Device Guard in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016, and Windows Server, version 1709 allows an attacker to make an unsigned file appear to be signed, due to a security feature bypass, aka "Device Guard Security Feature Bypass Vulnerability"...

6.1AI score0.03087EPSS
SaveExploits9References4
CVE
CVE
added 2017/11/15 3:00 a.m.128 views

CVE-2017-11830

CVE-2017-11830 is a Windows Device Guard security feature bypass. Connected sources describe a TOCTOU race in the WDAC cache signing path (CiSetFileCache) that can allow an unsigned file to appear signed. The issue was addressed previously via NtSetCachedSigningLevel, but public reports (Exploit-...

5.3CVSS5.9AI score0.03087EPSS
SaveExploits9References4Affected Software3
OpenVAS
OpenVAS
added 2017/11/15 12:00 a.m.48 views

Microsoft Windows Multiple Vulnerabilities (KB4048954)

This host is missing a critical security update according to Microsoft KB4048954 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.8AI score0.55893EPSS
SaveExploits44References39
OpenVAS
OpenVAS
added 2017/11/15 12:00 a.m.49 views

Microsoft Windows Multiple Vulnerabilities (KB4048956)

This host is missing a critical security update according to Microsoft KB4048956 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.8AI score0.48783EPSS
SaveExploits30References30
OpenVAS
OpenVAS
added 2017/11/15 12:00 a.m.63 views

Microsoft Windows Multiple Vulnerabilities (KB4048953)

This host is missing a critical security update according to Microsoft KB4048953 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS6.8AI score0.55893EPSS
SaveExploits39References33
Rows per page
Query Builder