Microsoft Windows 10 1507 Education SEoL

Microsoft Windows 10 1507 Education is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'...

CVE-2024-2209

HP DeskJet printers are affected by CVE-2024-2209 in the Printer Firmware Update Utility (FUU) bundle. A user with administrative privileges can replace the original DLL in the FUU bundle with a malicious DLL of the same name and place it in the Windows default downloads directory, potentially ca...

CVE-2024-2209 HP Printer Firmware Update Utility for Certain HP DeskJet Printers - Potential Execution of Arbitrary Code

A user with administrative privileges can create a compromised dll file of the same name as the original dll within the HP printer’s Firmware Update Utility FUU bundle and place it in the Microsoft Windows default downloads directory which can lead to potential arbitrary code execution...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2024-21151)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to elevate privileges...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2024-21149)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to obtain sensitive information from heap memory...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2024-21150)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows Kernel, which can be exploited by an attacker to obtain the value of a registry entry...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2024-21146)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. Microsoft Windows Kernel suffers from an elevation of privilege vulnerability due to a flaw in a kernel component. An attacker can exploit the vulnerability to gain SYSTEM privileges...

Microsoft Windows USB Print Driver Elevation of Privilege Vulnerability

Microsoft Windows USB Print Driver is a USB printer device driver from Microsoft USA. Microsoft Windows USB Print Driver suffers from an elevation of privilege vulnerability that is due to a flaw in the kernel. An attacker could exploit this vulnerability to gain SYSTEM privileges...

Microsoft Windows USB Hub Driver Remote Code Execution Vulnerability

Microsoft Windows USB Hub Driver is a driver from Microsoft USA. The Microsoft Windows USB Hub Driver suffers from a remote code execution vulnerability caused by a flaw in the USB Hub Driver component that can be exploited by an attacker to execute arbitrary code on a system...

Microsoft Windows Kerberos Security Feature Bypass Vulnerability

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft.Kerberos also serves as a network authentication protocol designed to provide authentication services to client/server applications through a key system. A security feature bypass vulnerability exists i...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CNVD-2024-21147)

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. Microsoft Windows Kernel suffers from an elevation of privilege vulnerability due to a flaw in a kernel component that can be exploited by an attacker to gain SYSTEM privileges...

Microsoft Windows Kernel Denial of Service Vulnerability

The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. A denial of service vulnerability exists in Microsoft Windows Kernel, which can be exploited by a local attacker to cause a denial of service...

Microsoft Windows USB Print Driver Elevation of Privilege Vulnerability (CNVD-2024-21142)

Microsoft Windows USB Print Driver is a USB printer device driver from Microsoft USA. Microsoft Windows USB Print Driver suffers from an elevation of privilege vulnerability due to a flaw in the kernel, which can be exploited by an authenticated attacker to gain SYSTEM privileges...

KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow

Exploit Title: KiTTY 0.76.1.13 - 'Start Duplicated Session Username' Buffer Overflow Exploit Author: DEFCESCO Austin A. DeFrancesco Vendor Homepage: https://github.com/cyd01/KiTTY/= Software Link: https://github.com/cyd01/KiTTY/releases/download/v0.76.1.13/kitty-bin-0.76.1.13.zip Version: ≤...

CVE-2024-21412: DarkGate Operators Exploit Microsoft Windows SmartScreen Bypass in Zero-Day Campaign

In addition to our Water Hydra APT zero day analysis, the Zero Day Initiative ZDI observed a DarkGate campaign which we discovered in mid-January 2024 where DarkGate operators exploited CVE-2024-21412...

Microsoft Windows Multiple Vulnerabilities (KB5035853)

This host is missing an important security update according to Microsoft KB5035853 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5035845)

This host is missing an important security update according to Microsoft KB5035845 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5035854)

This host is missing an important security update according to Microsoft KB5035854 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5035849)

This host is missing an important security update according to Microsoft KB5035849 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5035858)

This host is missing a critical security update according to Microsoft KB5035858 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...