342 matches found
KLA91207 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...
KLA91091 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...
CLSA-2026-1778177253 perl: Fix of 2 CVEs
CVE-2023-47038: fix write past buffer end via illegal user-defined Unicode property, for almalinux9.2esu - CVE-2025-40909: clone dirhandles without fchdir, for almalinux9.2esu...
March 10, 2026—KB5078775 (Monthly Rollup)
None None...
February 10, 2026—KB5075971 (Monthly Rollup)
None None...
KLA90838 Multiple vulnerabilities were found in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service. Below is a...
December 9, 2025—KB5071546 (OS Builds 19045.6691 and 19044.6691)
None None...
November 11, 2025—KB5068905 (Monthly Rollup)
None None...
KLA89277 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information, spoof user interface, gain privileges. Below is a...
KLA86901 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...
MAL-2025-11352 Malicious code in @zalastax/nolb-esu (npm)
The package @zalastax/nolb-esu was found to contain malicious code...
Malicious code in @zalastax/nolb-esu (npm)
The package @zalastax/nolb-esu was found to contain malicious code...
July 22, 2025—KB5062649 (OS Build 19045.6159) Preview
None None...
May 13, 2025—KB5058403 (Monthly Rollup)
None None...
November 12, 2024—KB5046682 (Monthly Rollup)
None None...
November 12, 2024—KB5046639 (Security-only update)
None None...
November 12, 2024—KB5046697 (Monthly Rollup)
None None...
CVE-2024-50591 Local Privilege Escalation via Command Injection
An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\SYSTEM" by exploiting a command injection vulnerability in the Elefant Update Service. The command injection can be exploited by communicating with the Elefant Update Service whi...