Microsoft Windows Multiple Vulnerabilities (KB5009546)

This host is missing a critical security update according to Microsoft KB5009546 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5009624)

This host is missing a critical security update according to Microsoft KB5009624 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5009610)

This host is missing a critical security update according to Microsoft KB5009610 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5009557)

This host is missing a critical security update according to Microsoft KB5009557 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass

Exploit Title: Microsoft Windows .Reg File - Dialog Spoof / Mitigation Bypass Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSREGFILEDIALOGSPOOFMITIGATIONBYPASS.txt twitter.com/hyp3rlinx ISR: ApparitionSe...

Microsoft Windows Codecs Library RCE (January 2022)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a...

Microsoft Windows Resilient File System security vulnerabilities

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and editions are affected: Windows 10 Version 21H1 for 32-bit Systems,Windows Server...

Microsoft Windows Resilient File System security vulnerabilities

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version...

Microsoft Windows Security Feature Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security feature issue vulnerability exists in Microsoft Windows Workstation Service Remote Protocol. The following products and editions are affected:Windows Server 2019 Server Core...

Microsoft Windows IKE Extension security vulnerability

Microsoft Windows is a set of operating systems for personal devices used by the U.S. Microsoft Windows IKE Extension remote code execution vulnerability, for which no detailed vulnerability details are currently available...

Microsoft Windows IKE Extension Resource Management Error Vulnerability

Microsoft Windows is a windowed operating system developed by Microsoft Corporation. A denial-of-service vulnerability exists in Microsoft Windows IKE Extension, which can be exploited by attackers to cause the target system to stop responding...

Microsoft Windows Permission Licensing and Access Control Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in the Microsoft Windows Bind Filter Driver with privilege permission and access control issues. The following products and versions are affected: Windows 10 Versio...

Microsoft Windows Diagnostic Hub Permission Authorization and Access Control Vulnerabilities

Microsoft Windows Diagnostic Hub is an application from Microsoft USA. It is not only a task manager but also a device diagnostic center. This application combines Windows developer tools with UWP features for new information and functionality. A vulnerability exists in Microsoft Windows Diagnost...

Microsoft Windows Common Log File System Driver Elevation of Privilege (CVE-2022-21897)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Win32k Elevation of Privilege (CVE-2022-21882)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Installer Elevation of Privilege (CVE-2022-21908)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows User Profile Service Elevation of Privilege (CVE-2022-21919)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows Kernel Elevation of Privilege (CVE-2022-21881)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Microsoft Windows .Reg File Dialog Spoofing / Mitigation Bypass

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/MICROSOFTWINDOWSREGFILEDIALOGSPOOFMITIGATIONBYPASS.txt + twitter.com/hyp3rlinx + ISR: ApparitionSec Vendor www.microsoft.com A file with the .reg file extension is a...

Microsoft Windows Resilient File System Code Injection Vulnerability

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and editions are affected:Windows 10 Version 1809 for ARM64-based Systems,Windows...