3620 matches found
KLA12202 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...
Microsoft Hyper-V 远程代码执行漏洞（CVE-2021-28476）
CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys Network virtualization service provider patched by Microso...
GSD-2021-1000282 Drivers: hv: vmbus: Use after free in __vmbus_open()
Drivers: hv: vmbus: Use after free in vmbusopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000291 Drivers: hv: vmbus: Drop error message when 'No request id available'
Drivers: hv: vmbus: Drop error message when 'No request id available' This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...
GSD-2021-1000379 Drivers: hv: vmbus: Use after free in __vmbus_open()
Drivers: hv: vmbus: Use after free in vmbusopen This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...
The vulnerability of the Hyper-V component of the Windows operating system, related to improper code generation, allows a perpetrator to execute arbitrary code.
The vulnerability of the Hyper-V component of the Windows operating system is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:0723-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Microsoft Hyper-V Remote Code Execution Vulnerability
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A remote code execution vulnerability exists in Microsoft Hyper-V. No detailed vulnerability details are available at this time...
Latest Microsoft Windows Updates Patch Dozens of Security Flaws
Microsoft on Tuesday rolled out its scheduled monthly security update with patches for 55 security flaws affecting Windows, Exchange Server, Internet Explorer, Office, Hyper-V, Visual Studio, and Skype for Business. Of these 55 bugs, four are rated as Critical, 50 are rated as Important, and one ...
Microsoft Windows Multiple Vulnerabilities (KB5003172)
This host is missing a critical security update according to Microsoft KB5003172 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB5003209)
This host is missing a critical security update according to Microsoft KB5003209 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Patch Tuesday - May 2021
Here we are again with another installment of Patch Tuesday. When compared to the past few months this one feels a bit light both in severity and number of vulnerabilities addressed. Microsoft has only released patches for 55 CVEs this month, less than half of the usual volume, with only 4 of the...
Microsoft & Adobe Patch Tuesday (May 2021) – Qualys covers 85 Vulnerabilities, 26 Critical
Microsoft Patch Tuesday – May 2021 Microsoft patched 55 CVEs in their May 2021 Patch Tuesday release, of which 4 are rated as critical severity. Three 0-day vulnerability patches were included in the release. As of this publication date, none have been exploited. Qualys released 12 QIDs on the sa...
Wormable Windows Bug Opens Door to DoS, RCE
Microsoft’s May Patch Tuesday release addressed a modest 55 cybersecurity vulnerabilities, including just four critical bugs. It’s the smallest monthly update from the computing giant since 2020, but it does contain a patch for a concerning wormable vulnerability found in the Windows OS. The good...
CVE-2021-28476
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2021-28476
Windows Hyper-V Remote Code Execution Vulnerability...
Remote code execution
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2021-28476
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2021-28476
CVE-2021-28476 is a Hyper-V vmswitch.sys vulnerability enabling guest-to-host access via an out-of-bounds read in VmsIfrInfoParams_OID_SWITCH_NIC_REQUEST when processing OID_SWITCH_NIC_REQUEST. Public PoC/exploit code exists (e.g., 0vercl0k and LaCeeKa repos) and prior reports describe guest-trig...
