3961 matches found
September 9, 2025—Hotpatch KB5065474 (OS Build 26100.6508) for Windows Server
None None...
October 14, 2025—KB5066875 (Monthly Rollup)
None None...
October 23, 2025—KB5070886 (Monthly Rollup) Out-of-band
None None...
October 23, 2025—KB5070879 (OS Build 25398.1916) Out-of-band
None None...
October 23, 2025—KB5070887 (Monthly Rollup) Out-of-band
None None...
September 9, 2025—KB5065431 (OS Builds 22621.5909 and 22631.5909)
None None...
September 9, 2025—Hotpatch KB5065306 (OS Build 20348.4106)
None None...
MITRE CVE-2025-47827: Secure Boot bypass in IGEL OS before 11
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image. MITRE created this CVE on their behalf. The documented Windows updates...
KB5066873: Windows Server 2012 R2 Security Update (October 2025)
The remote Windows host is missing security update 5066873. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
KB5066835: Windows 11 Version 24H2 / Windows Server 2025 / Windows 11 Version 25H2 Security Update (October 2025)
The remote Windows host is missing security update 5066835. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
KB5066793: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (October 2025)
The remote Windows host is missing security update 5066793. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
KB5066782: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2025)
The remote Windows host is missing security update 5066782. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
KB5066794: Servicing stack update for Windows Server 2012 R2: October 14, 2025
None None...
KB5066795: Servicing stack update for Windows Server 2012: October 14, 2025
None None...
KB5066584: Servicing stack update for Windows 10, version 1607 and Windows Server 2016: October 14, 2025
None None...
IGEL OS Use of a Key Past its Expiration Date Vulnerability
IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
VulnCheck KEV: CVE-2025-47827
IGEL OS contains a use of a key past its expiration date vulnerability that allows for Secure Boot bypass. The igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image...
PT-2025-41991
Name of the Vulnerable Software and Affected Versions Aruba Access Points affected versions not specified Description A security flaw allows an attacker to bypass the hardware root of trust verification, enabling the execution of modified or custom firmware on affected devices. This bypass impact...
KB5066780: Windows Server version 23H2 Security Update (October 2025)
The remote Windows host is missing security update 5066780. It is, therefore, affected by multiple vulnerabilities - tifpredict.h and tifpredict.c in libtiff 4.0.6 have assertions that can lead to assertion failures in debug mode, or buffer overflows in release mode, when dealing with unusual til...
CVE-2025-37147: Authentication Bypass by Spoofing
A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware o...