EUVD-2020-12100

Malware in sbrugna...

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in question is CVE-2024-38178 CVSS score: 7.5, a memory corruption bug in the Scripting Engine...

September 10, 2024—KB5042881 (OS Build 20348.2700)

None None...

May 14, 2024—KB5037765 (OS Build 17763.5820) - EXPIRED

None None...

May 14, 2024—KB5037770 (OS Build 22000.2960)

None None...

April 9, 2024—KB5036909 (OS Build 20348.2402)

None None...

January 9, 2024—KB5034127 (OS Build 17763.5329) - EXPIRED

None None...

July 11, 2023—KB5028169 (OS Build 14393.6085) - EXPIRED

None None...

April 25, 2023—KB5025305 (OS Build 22621.1635) Preview

None None...

April 11, 2023—KB5025229 (OS Build 17763.4252) - EXPIRED

None None...

September 30, 2022—KB5017389 (OS Build 22621.608) Preview

None None...

September 20, 2022—KB5017383 (OS Build 22000.1042) Preview

None None...

August 16, 2022—KB5016693 (OS Build 20348.946) Preview

None None...

July 12, 2022—KB5015814 (OS Build 22000.795)

None None...

May 24, 2022—KB5014019 (OS Build 22000.708) Preview

None None...

February 15, 2022—KB5010421 (OS Build 20348.558) Preview

None None...

February 15, 2022—KB5010415 (OS Builds 19042.1566, 19043.1566, and 19044.1566) Preview

None None...

CVE-2021-41351

Microsoft Edge Chrome based Spoofing on IE Mode...

Code injection

Microsoft Edge Chrome based Spoofing on IE Mode...

CVE-2021-41351

CVE-2021-41351 refers to spoofing vulnerability in Microsoft Edge (Chromium-based) when used in Internet Explorer (IE) mode. The initial document lists a MEDIUM severity (CVSS v3.1 base score 4.3) with network attack vector and required user interaction, but provides no concrete details on root c...