63 matches found
msticpy
MSTIC Jupyter and Python Security Tools Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations a...
CVE-2026-54123 Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
...
CVE-2026-54123
Microsoft Defender for Endpoint (Mac) contains a local information disclosure vulnerability (CVE-2026-54123). Attack vector: Local; Privileges Required: Low; User Interaction: None; Confidentiality Impact: High. CVSSv3.1 base score 5.5 (Medium). A fix is available via Microsoft’s update guidance;...
EUVD-2026-56418
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
PT-2026-70389
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-54123: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...
CVE-2026-56178: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2026-45647: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
KLA90872 ACE vulnerability in Microsoft System Center
A remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2026-21537 Exploitation Related products Microsoft-Defender-for-Endpoint-for-Linux CVE list...
CVE-2025-47161: Improper Access Control
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
The vulnerability of Microsoft Defender for Endpoint on Linux operating systems, related to improper external management of file names or paths, allows attackers to escalate their privileges.
The vulnerability of Microsoft Defender for Endpoint on Linux operating systems is related to incorrect external management of file names or file paths. Exploiting this vulnerability can allow attackers to increase their privileges...
CVE-2025-26684: External Control of File Name or Path
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2024-49057: Improper Input Validation
Microsoft Defender for Endpoint on Android Spoofing Vulnerability...
October 8, 2024—KB5044288 (OS Build 25398.1189)
None None...
CVE-2024-43614: Relative Path Traversal
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally...
KLA73904 Multiple vulnerabilities in Microsoft System Center
Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Configuration Manager can be...
CVE-2024-5535
...
KLA63962 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21315 Exploitation Related products Microsoft-Windows Microsoft-Defender-for-Endpoint-for-Windows CVE list CVE-2024-21315...