Microsoft Windows Multiple Vulnerabilities (KB5004298)

This host is missing a critical security update according to Microsoft KB5004298 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-5714 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the DNS Server component of the Microsoft Windows operating system. It allows remote attackers to execute arbitrar...

PT-2021-6966 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel, allowing an attacker to potentially elevate their privileges. This could impact the system's...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation-of-privilege vulnerability exists in InstallService in Microsoft...

Microsoft Windows DNS 代码注入漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft Corporation USA. The Domain Name System DNS is one of the industry standard protocol suites that includes TCP/IP, and the DNS client and DNS server work together to provide computer and user name resolution services for...

Microsoft Windows SMB Client 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA Microsoft Windows is a set of operating systems for personal devices Microsoft Windows Server is a set of server operating systems. An information disclosure vulnerability exists in SMB in Microsoft...

Microsoft Windows Kernel Elevation of Privilege (CVE-2021-31979)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Local Security Authority Server 安全特征问题漏洞

Windows Server is the brand name of a series of server operating systems released by Microsoft, including all Windows operating systems released under the brand name "Windows Server." Security features in the LSA in Microsoft Windows Server Bypass vulnerability. No details of the vulnerability ar...

Microsoft Windows DNS 代码注入漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A remote code execution vulnerability exists in the DNS Snap-in in...

Microsoft Windows Raw Image Extensions Library RCE (July 2021)

The Windows 'Raw Image Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Microsoft Win32k Elevation of Privilege (CVE-2021-34449)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2021-4847 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Event Tracing service of the Microsoft Windows operating system. Exploitation of this issue may allow an attacker to...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA Microsoft Windows is a set of operating systems for personal devices Microsoft Windows Server is a set of server operating systems. An elevation of privilege vulnerability exists in GDI in Microsoft...

Microsoft Windows Shell 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server is a server operating system. An information disclosure vulnerability exists in the Remote Access Connection Manager in Microsoft...

Microsoft Windows DNS 输入验证错误漏洞

Windows Server is the brand name of a series of server operating systems released by Microsoft, which includes all Windows operating systems released under the brand name "Windows Server". A denial of service vulnerability exists in Windows DNS Server in Microsoft Windows Server. No details of th...

Microsoft Win32k 信息泄露漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. An information disclosure vulnerability exists in Win32k in Microsoft...

KLA12221 Multiple vulnerabillities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of...

Microsoft Windows HEVC Codecs Library Multiple Vulnerabilities (July 2021)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by multiple remote code execution vulnerabilities. Remote code execution vulnerabilities exists in the Microsoft Windows Codecs Library HEVC Extension. An attacker who successfully...

Microsoft Windows Print Spooler RCE Vulnerability (KB5005010, PrintNightmare)

This host is missing a critical security update according to Microsoft KB5005010. The flaw is dubbed SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Security Bulletin: IBM SDK, Java Technology Edition Version could allow a local authenticated attacker to execute arbitrary code on the system

Summary IBM SDK, Java Technology Edition Version 7.0.0.0 through 7.0.10.55, 7.1.0.0 through 7.1.4.55, and 8.0.0.0 through 8.0.6.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft Windows client. By...