18408 matches found
CVE-2022-32230 SMBv3 FileNormalizedNameInformation NULL Pointer Dereference
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death BSOD crash of the Windows kernel. For most...
CVE-2022-32230
CVE-2022-32230 affects Microsoft Windows SMBv3 prior to the April 2022 patch set. A malformed FileNormalizedNameInformation SMBv3 request sent over a named pipe can trigger a null pointer dereference in the Windows kernel, resulting in a Blue Screen of Death (BSOD) and reboot of the SMBv3 server....
Microsoft Windows HEVC Video Extensions Remote Code Execution (June 2022)
The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits these vulnerabilities could execute arbitrary code. Exploitation of the vulnerability requires that a...
Microsoft Windows Installer Elevation of Privilege (CVE-2022-30147)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Windows SMBv3 code-related vulnerabilities
Microsoft Windows SMB Client and Microsoft Windows SMB Server are both products of Microsoft Corporation.Microsoft Windows SMB Client is a software application. an SMB client. Microsoft Windows SMB Server is a network file sharing protocol. It allows applications on a computer to read and write...
Microsoft Windows ALPC security vulnerabilities
Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows ALPC. The following products and versions are affected: Windows 10 Version 21H2 for x64-based Systems,Windows 10 for 32-bit...
Microsoft Windows Codecs Library security vulnerabilities
Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...
Microsoft Windows Information Leakage Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The vulnerability stems from a security issue with some Intel processors. The following products and versions are...
Microsoft Windows AV1 Video Extensions Multiple Vunerabilities (June 2022)
The Windows 'AV1 Video Extension' app installed on the remote host is affected by multiple remote code execution vulnerabilities. An attacker who successfully exploits these vulnerabilities could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially...
PT-2022-2935
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the April, 2022 patch set Description The issue is related to a null pointer dereference in the implementation of the Windows SMBv3 protocol. By sending a malformed FileNormalizedNameInformation SMBv3 reques...
CVE-2022-32230: NULL Pointer Dereference
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death BSOD crash of the Windows kernel. For most...
KLA12569 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, gain privileges, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of...
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application...
Researchers Warn of Unpatched "DogWalk" Microsoft Windows Vulnerability
An unofficial security patch has been made available for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool MSDT, even as the Follina flaw continues to be exploited in the wild. The issue — referenced as DogWalk — relates to a path traversal flaw that can be exploited t...
Exploit for CVE-2022-30190
Follina MS-MSDT exploitation with Spring Boot This repository...
Microsoft Windows 10 Version 20H2 Unsupported Version Detection
Microsoft Windows 10 version 20H2 is running on the remote host. Microsoft ended support for Windows 10 version 20H2 on May 10, 2022. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...
Exploit for CVE-2022-30190
CVE-2022-30190 This Repository Talks about the Follina MSDT fr...
CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
...
Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...