Lucene search
+L

15433 matches found

CNNVD
CNNVD
added 2022/06/14 12:00 a.m.10 views

Microsoft Windows Codecs Library 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

7.8CVSS7AI score0.02238EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.8 views

Microsoft Windows ALPC 安全漏洞

Microsoft Windows ALPC is an inter-process communication tool for high-speed messaging from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows ALPC. The following products and versions are affected: Windows 10 Version 21H2 for x64-based Systems,Windows 10 for 32-bit...

7.8CVSS7.4AI score0.06292EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.6 views

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows has a security vulnerability. The vulnerability stems from a security issue with some Intel processors. The following products and versions are...

5.5CVSS6.5AI score0.06155EPSS
SaveExploits0References72
CISA KEV Catalog
CISA KEV Catalog
added 2022/06/14 12:00 a.m.57 views

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run code with the privileges of the calling application...

9.3CVSS8.2AI score0.99234EPSS
SaveIn wildExploits63
Check Point Advisories
Check Point Advisories
added 2022/06/14 12:00 a.m.25 views

Microsoft Windows Installer Elevation of Privilege (CVE-2022-30147)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.2CVSS5.8AI score0.04533EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/06/14 12:00 a.m.15 views

Microsoft Windows SMBv3 代码问题漏洞

Microsoft Windows SMB Client and Microsoft Windows SMB Server are both products of Microsoft Corporation.Microsoft Windows SMB Client is a software application. an SMB client. Microsoft Windows SMB Server is a network file sharing protocol. It allows applications on a computer to read and write...

7.8CVSS8.1AI score0.07533EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
added 2022/06/14 12:00 a.m.248 views

Microsoft Windows HEVC Video Extensions Remote Code Execution (June 2022)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits these vulnerabilities could execute arbitrary code. Exploitation of the vulnerability requires that a...

7.8CVSS8.7AI score0.02532EPSS
SaveExploits0References2
The Hacker News
The Hacker News
added 2022/06/08 2:24 p.m.255 views

Researchers Warn of Unpatched "DogWalk" Microsoft Windows Vulnerability

An unofficial security patch has been made available for a new Windows zero-day vulnerability in the Microsoft Support Diagnostic Tool MSDT, even as the Follina flaw continues to be exploited in the wild. The issue — referenced as DogWalk — relates to a path traversal flaw that can be exploited t...

9.3CVSS0.9AI score0.99234EPSS
SaveExploits63
GithubExploit
GithubExploit
added 2022/06/07 10:46 p.m.452 views

Exploit for CVE-2022-30190

Follina MS-MSDT exploitation with Spring Boot This repository...

9.3CVSS8.5AI score0.99234EPSS
SaveExploits63
Tenable Nessus
Tenable Nessus
added 2022/06/07 12:00 a.m.42 views

Microsoft Windows 10 Version 20H2 Unsupported Version Detection

Microsoft Windows 10 version 20H2 is running on the remote host. Microsoft ended support for Windows 10 version 20H2 on May 10, 2022. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilities...

7.6AI score
SaveExploits0References2
GithubExploit
GithubExploit
added 2022/06/02 12:58 p.m.53 views

Exploit for CVE-2022-30190

CVE-2022-30190 This Repository Talks about the Follina MSDT fr...

9.3CVSS8.3AI score0.99234EPSS
SaveExploits91
Vulnrichment
Vulnrichment
added 2022/06/01 8:10 p.m.14 views

CVE-2022-30190 Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability

...

7.8CVSS7.5AI score0.99234EPSS
SaveExploits63References1
Zero Day Initiative
Zero Day Initiative
added 2022/06/01 12:00 a.m.62 views

Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

7.8CVSS6.2AI score0.00963EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2022/05/31 2:10 p.m.72 views

Exploit for CVE-2022-30190

MSDTCVE-2022-30190 This Repository Talks about the Follina MS...

9.3CVSS8.3AI score0.99234EPSS
SaveExploits91
Tenable Nessus
Tenable Nessus
added 2022/05/31 12:00 a.m.1361 views

The Microsoft Windows Support Diagnostic Tool (MSDT) RCE Workaround Detection (CVE-2022-30190)

The remote host has the HKEYCLASSESROOT\ms-msdt registry key. This is a known exposure for CVE-2022-30190. Note that Nessus has not tested for CVE-2022-30190. It is only checking if the registry key exists. The recommendation is to apply the latest patch. C Tenable, Inc. include'compat.inc'; if...

9.3CVSS6.8AI score0.99234EPSS
SaveExploits63References3
CNNVD
CNNVD
added 2022/05/30 12:00 a.m.9 views

Microsoft Windows Support Diagnostic Tool 操作系统命令注入漏洞

Microsoft Support Diagnostic Tool MSDT, Microsoft Support Diagnostic Tool is a utility program used to troubleshoot and collect diagnostic data for professionals to analyze and solve problems.Microsoft Office is a popular office software developed by Microsoft Corporation. Microsoft Support...

9.3CVSS9.3AI score0.99234EPSS
SaveExploits63References9
Kaspersky
Kaspersky
added 2022/05/30 12:00 a.m.547 views

KLA12549 RCE vulnerability in Microsoft Windows

A remote code execution vulnerability was found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2022-30190 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such malware...

9.3CVSS8.2AI score0.99234EPSS
SaveExploits63References20
IBM Security Bulletins
IBM Security Bulletins
added 2022/05/27 8:55 p.m.27 views

Security Bulletin: Vulnerability in Rational Rhapsody Help System (CVE-2013-0599) affecting Rational Rhapsody and Rational Rhapsody Design Manager

Summary A vulnerability in the IBM Eclipse Help System could allow a remote attacker to obtain sensitive information. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more information requires login with your...

5CVSS0.1AI score0.02112EPSS
SaveExploits0Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:00 a.m.13 views

The vulnerability of the Windows Graphics component in Microsoft Windows operating systems arises from insufficient input data validation, allowing attackers to execute arbitrary code.

The vulnerability of the Windows Graphics component in Microsoft Windows systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.3CVSS7.7AI score0.02577EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/05/26 12:00 a.m.12 views

The vulnerability of the BitLocker data protection function of the Microsoft Windows operating system, which allows a hacker to bypass the authentication process

The vulnerability of the BitLocker data protection function in the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to bypass the authentication process...

4.7CVSS6.4AI score0.00805EPSS
SaveExploits0References3
Rows per page
Query Builder