Microsoft Windows Cortana CVE-2018-8140 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary command with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1803 for 32-bit Systems Microsoft Windows 10 Version 1803 for...

Microsoft Windows Kernel CVE-2018-8207 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

Microsoft Windows Hyper-V CVE-2018-8218 Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Windows 10 version 1709 for x64-based Systems Microsoft Windows Server 1709...

Microsoft Windows Device Guard CVE-2018-8201 Local Security Bypass Vulnerability

Description Microsoft Windows is prone to a local security-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems...

Microsoft Windows: Network security: Allow PKU2U authentication requests to this computer to use online identities

Starting with Windows Server 2008 R2 and Windows 7, the Negotiate Security Support Provider SSP supports an extension SSP, Negoexts.dll. This extension SSP is treated as an authentication protocol by the Windows operating system, and it supports SSPs from Microsoft, including PKU2U. You can also...

Microsoft Windows: User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop

This security setting controls whether User Interface Accessibility UIAccess or UIA programs can automatically disable the secure desktop for elevation prompts that are used by a standard user. Note: This setting does not change the behavior of the UAC elevation prompt for administrators. C...

Microsoft Windows: User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode

This policy setting determines the behavior of the elevation prompt for accounts that have administrative credentials. C Microsoft Corporation 2017. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Microsoft Windows: Network security: Do not store LAN Manager hash value on next password change

This policy setting determines whether LAN Manager is prevented from storing hash values for the new password the next time the password is changed. Hash values are a representation of the password after the encryption algorithm is applied that corresponds to the format that is specified by the...

Microsoft Windows: Network access: Remotely accessible registry paths

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnaremoteaccessregpaths.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Network access: Remotely accessible registry paths Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Network access: Restrict anonymous access to Named Pipes and Shares

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnaanonymousaccesspipedshares.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Network access: Restrict anonymous access to Named Pipes and Shares Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

Microsoft Windows: Network access: Storage of passwords and credentials for network authentication

This security setting determines whether Stored User Names and Passwords saves passwords, credentials, or .NET Passports for later use when it gains domain authentication. If it is enabled, this setting prevents the Stored User Names and Passwords from storing passwords and credentials. C Microso...

Microsoft Windows: Network access: Restrict clients allowed to make remote calls to SAM

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnaclientsallowedremotesam.nasl 11098 2018-08-23 14:32:47Z emoss $ Check value for Network access: Restrict clients allowed to make remote calls to SAM Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...

Microsoft Windows: Network access: Named Pipes that can be accessed anonymously

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnapipesaccessedanonym.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Network access: Named Pipes that can be accessed anonymously Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Network access: Remotely accessible registry paths and sub-paths

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winnaremoteregsubpaths.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Network access: Remotely accessible registry paths and sub-paths Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Network access: Shares that can be accessed anonymously

This security setting determines which network shares can accessed by anonymous users. C Microsoft Corporation 2015. Note: This policy check will report compliance by default if the key is empty or missing. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a...

How to do an Application Item Restore using Standalone Veeam Agent Backups in a Cloud Connect Repository

Article Applicability This article documents a method for performing Application Item Restore from restore points created by a Standalone Veeam Agent for Microsoft Windows deployment and stored in a Cloud Connect Repository. For Veeam Agent for Microsoft Windows deployments managed by a tenant's...

Microsoft Windows: Microsoft network client: Send unencrypted password to third-party SMB servers

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winncunencryptedpasswordsmb.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Microsoft network client: Send unencrypted password to third-party SMB servers Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone...

Microsoft Windows: Interactive logon: Number of previous logons to cache

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilnumpreviouslogoncache.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for nteractive logon: Number of previous logons to cache in case domain controller is not available Authors: Emanuel Moss Copyright: Copyright ...

Microsoft Windows: Interactive logon: Smart card removal behavior

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilsmartcardremovalbehaviour.nasl 11532 2018-09-21 19:07:30Z cfischer $ Check value for Interactive logon: Smart card removal behavior Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

(Pwn2Own) Microsoft Windows D3DKMTCreateDCFromMemory Memory Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the creation of ...