CVE-2023-21725 Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

...

CVE-2023-21725

CVE-2023-21725 is a Windows Malicious Software Removal Tool (MSRT) elevation-of-privilege vulnerability. Affected component: MSRT; vulnerability type: elevation of privileges with local attack vector (CVSS 3.1: 6.3, LOCAL, HIGH) and no user interaction. The issue impacts MSRT on Windows systems a...

PT-2023-1065 · Microsoft · Windows Malicious Software Removal Tool

Name of the Vulnerable Software and Affected Versions: Windows Malicious Software Removal Tool affected versions not specified Description: The issue is related to synchronization errors when using a shared resource in the Malicious Software Removal Tool MSRT, which can allow an attacker to eleva...

Security Updates for Windows Malicious Software Removal Tool (January 2023)

The Windows Malicious Software Removal Tool installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2023-21725 %NASLMINLEVEL...

CVE-2023-21725 Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability

...

MAL-2023-49 Malicious code in @playgami/eslint-config-portal-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4be15151b5b32f83c0928b720d19807598f2d07da01e47b15a580083f99000f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-52 Malicious code in @playgami/portal-dynamic-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9deabd3b5198948a51a1c164772947fe70aa65670b1ca24263fad525b65cbfc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-54 Malicious code in @playgami/portal-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02680029cc7be83ef6c68dbbaff4fb6d92bd8c1a71759092c1b7f625c99b786a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-166 Malicious code in central-ui-component (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2782e2ac553cc54c3f260350e2d849a07145301efed884e5526b17cab6e08973 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-271 Malicious code in donuts.node-remote (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 589d937e738773f2893caf9608e4b93c3616dad1f93e5d6dc62834864e46182e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5328 Malicious code in phup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1dac74638b6d2daf3c5fba99cb693badc947e824ec0622ec155ad7f1a0ee3100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1565 Malicious code in big-design (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c644e7d9d5b08b109d7457ceb490ea4a1171713706689d3b66a9a2114f478d4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5494 Malicious code in prova-admin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 938fc5bb5c8e1be3541bd49183cc6bed9f7683b7d3d547f7273b89117e79d193 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

Malware operations continue to rapidly evolve as threat actors add new capabilities to existing botnets, increasingly targeting and recruiting new types of devices. Attackers update malware to target additional operating systems, ranging from PCs to IoT devices, growing their infrastructure...

Zoom Client for Meetings < 5.5.4 Vulnerability (ZSB-21016)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.5.4. It is, therefore, affected by a vulnerability as referenced in the ZSB-21016 advisory. - The Zoom Client for Meetings for Windows installer before version 5.5.4 does not properly verify the signature of files...

MAL-2022-6488 Malicious code in test-pls (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e944bd9669b6670b936f57b7f11202f8a8c0bdf172864bc6e95f9ff567a97ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6038 Malicious code in setup-gamma (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deba7e063fe3b4609326e55cea28db816c7049297f8cef8b23d8c2d7589f69f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5701 Malicious code in read.node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4ddf471b9c973b8f6e9dc9c46a3c4ad26c64012e45c73a8594e3a3ea0eb7b75c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3633 Malicious code in hiljsonhil (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 731a91dadef06d9fd1634cbb1c33ed8a1fbaaa638e3fdc30d953d422e169b7ea Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6519 Malicious code in testherejson (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47c63f695aeb904f6eab5e51afade94f1521960e41be223b65673ae0920df981 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...