26 matches found
echoac-poc
CVE-2023-38817 关于 echo.ac 驱动中发现漏洞的 PoC 与详细分析。 CVE 信息 编号：CVE-2023-38817 厂商：Inspect Element Ltd 13017981，以 Echo 名义运营。 受影响产品：echo.ac 反作弊扫描工具。 受影响版本：echo.ac - 5.2.1.0，echodriver.sys - 所有已发布版本。 受影响操作系统：从 Windows 7 到 Windows 11 的 64 位 Windows 版本。 缓解措施：不要使用该软件，并将驱动签名加入黑名单。 证书已吊销 微软已将 Echo...
EUVD-2022-55223
Malicious code in bioql PyPI...
Microsoft Windows inconsistent driver blocking
RISK EVALUATION Microsoft Windows Defender Application Control WDAC and the Microsoft vulnerable driver blocklist do not adequately block known-vulnerable drivers. These unexpected behaviors can confuse users about whether or not driver blocking is working and which drivers are being blocked. 2...
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control WDAC policy. Entries that specify only the to-be-signed TBS part of the code signer certificate are properly blocked, but entries that specify the signing certificate's TBS hash along with a...
PT-2025-36472
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list...
CVE-2022-50238
CVE-2022-50238 describes that the on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft rules. Some entries have been excluded from the on-endpoint blocklist longer than expected, which can lead to inconsistent enforcement. The documents indicate th...
CVE-2022-50238: Missing Synchronization
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended driver block rules. Some entries present on the online list have been excluded from the on-endpoint blocklist longer than the expected periodic monthly Windows updates. It is...
May 13, 2025—KB5058385 (OS Build 20348.3692)
None None...
April 22, 2025—KB5055612 (OS Build 19045.5796) Preview
None None...
February 11, 2025—KB5051980 (OS Build 25398.1425)
None None...
January 14, 2025—KB5049981 (OS Builds 19044.5371 and 19045.5371) - EXPIRED
None None...
January 14, 2025—KB5049984 (OS Build 25398.1369)
None None...
November 12, 2024—KB5046615 (OS Build 17763.6532) - EXPIRED
None None...