2824 matches found
PT-2025-40439
Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description An inappropriate implementation in the Omnibox allows attackers to affect the system. Microsoft Edge Chromium-based is also impacted as it ingests Chromium. Recommendations At the moment,...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
CVE-2023-28293 – Vulnerable Driver Exploit Local Privilege Esca...
Microsoft Windows Remote Desktop Services Remote Code Execution Vulnerability (CNVD-2025-01190)
Microsoft Windows Remote Desktop Services is a collection of features from Microsoft USA that allow users to remotely access graphical desktops and Windows applications. A remote code execution vulnerability exists in Microsoft Windows Remote Desktop Services, which is caused by a flaw in the...
Patch Tuesday, December 2024 Edition
Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common Log File System...
Microsoft and Adobe Patch Tuesday, December 2024 Security Update Review
Closing out 2024, Microsoft’s December Patch Tuesday highlights the importance of year-end maintenance with updates tackling critical vulnerabilities. As cyber threats remain persistent, these patches serve as a vital reminder of the ongoing need for robust system security. Microsoft Patch Tuesda...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
Microsoft Fixes AI, Cloud, and ERP Security Flaws; One Exploited in Active Attacks
Microsoft has addressed four security flaws impacting its artificial intelligence AI, cloud, enterprise resource planning, and Partner Center offerings, including one that it said has been exploited in the wild. The vulnerability that has been tagged with an "Exploitation Detected" assessment is...
Unlock 24/7 SOC Coverage: Rapid7 MXDR Now Supports with Microsoft Security Products
In today’s complex threat landscape, organizations need every advantage at their disposal to stay secure–starting with maximizing the tools they already have within their ecosystem. With the launch of Rapid7 MXDR’s SOC support for key Microsoft security products, we’re making it possible for...
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs
Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager NTLM and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 202...
Microsoft Releases November 2024 Security Updates
Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft...
GHSA-7VW9-CFWX-9GX9 Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability
Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 8.0 and .NET 9.0. This advisory also provides guidance on what developers can do to update the...
Microsoft Releases October 2024 Security Updates
Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft...
Description of the security update for Visual Studio 2015 Update 3: October 8, 2024 (KB5045536)
None None...
Microsoft Security Update Validation Report September 2024
Microsoft’s September 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing...
Microsoft Releases September 2024 Security Updates
Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft...