The vulnerability of the Windows Group Policy Preference Client component of the operating system allows a perpetrator to increase their privileges.

The vulnerability of the Windows Group Policy Preference Client component of the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

October 11, 2022—KB5018450 (Monthly Rollup)

None None...

October 11, 2022—KB5018446 (Security-only update)

None None...

October 11, 2022—KB5018457 (Monthly Rollup)

None None...

October 11, 2022—KB5018478 (Security-only update)

None None...

October 11, 2022—KB5018419 (OS Build 17763.3532) - EXPIRED

None None...

September 13, 2022—KB5017370 (Monthly Rollup)

None None...

September 13, 2022—KB5017377 (Security-only update)

None None...

September 13, 2022—KB5017327 (OS Build 10240.19444) - EXPIRED

None None...

Grouper - A PowerShell script for helping to find vulnerable settings in AD Group Policy

Grouper is a slightly wobbly PowerShell module designed for pentesters and redteamers although probably also useful for sysadmins which sifts through the usually very noisy XML output from the Get-GPOReport cmdlet part of Microsoft's Group Policy module and identifies all the settings defined in...

Find Vulnerable Settings in AD Group Policy: Grouper

Grouper is a slightly wobbly PowerShell module designed for pentesters and redteamers although probably also useful for sysadmins which sifts through the usually very noisy XML output from the Get-GPOReport cmdlet part of Microsoft’s Group Policy module and identifies all the settings defined in...

PT-2014-1013 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to the patchday that contains the fix for the vulnerability Description: The Group Policy implementation in Microsoft Windows does not properly handle distribution of passwords, which allows remote authenticat...

MS14-025: Vulnerability in Group Policy Preferences Could Allow Elevation of Privilege (2962486)

The remote Windows host is potentially affected by a vulnerability in the way that Active Directory distributes passwords that are configured using Group Policy preferences. This could allow a remote attacker to retrieve and decrypt passwords stored with Group Policy preferences. The following...

MS14-025: An Update for Group Policy Preferences

Today, we released an update to address a vulnerability in Group Policy Preferences MS14-025. Group Policy Preferences was an addition made to Group Policy to extend its capabilities. Among other things, Group Policy Preferences allows an administrator to configure: Local administrator accounts...

MS14-025: Description of the security update for Group Policy Preferences for systems that don't have update 2919355 installed: May 13, 2014

None None...

MS14-025: Description of the security update for Group Policy Preferences for systems that have update 2919355 installed: May 13, 2014

None None...

Exploiting Windows 2008 Group Policy Preferences: получение некоторых паролей из AD

Active Directory в Windows 2008 содержит такую Group Policy Preferences как "Local Users and Groups". При создании юзеров из AD в этом пункте, компьютеры, для которых создаются эти юзеры, скачивают файл с AD и находят там нового юзера и его пароль, который необходимо создать у себя локально. В...