Secure Boot Security Feature Bypass Vulnerability

...

Windows Defender Credential Guard Security Feature Bypass Vulnerability

...

Workstation Service Remote Protocol Security Feature Bypass Vulnerability

...

KB5009555: Windows Server 2022 Security Updates (January 2022)

The Windows Server 2022 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A remote co...

KB5009543: Windows 10 Version 20H2 / 21H1 / 21H2 Security Update (January 2022)

The remote Windows host is missing security update 5009543. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...

KB5009595: Windows 8.1 and Windows Server 2012 R2 Security Updates (January 2022)

The remote Windows host is missing security update 5009595 or cumulative update 5009624. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...

KB5009619: Windows Server 2012 Security Update (January 2022)

The remote Windows host is missing security update 5009619. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21850, CVE-2022-21851,...

PT-2022-15188 · Unknown +1 · Workstation Service +1

Name of the Vulnerable Software and Affected Versions: Workstation Service affected versions not specified Description: A security-feature bypass issue allows attackers to affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-14878)

Google Chrome is a Web browser from Google, Inc. A security feature vulnerability exists in Google Chrome, which stems from an incorrect implementation of the product's Compositing feature. A remote attacker could exploit the vulnerability to create a specially designed web page, tricking victims...

KB5009566: Windows 11 Security Updates (January 2022)

The Windows 11 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2022-21836 - A remote code...

KB5009601: Windows Server 2008 Security Update (January 2022)

The remote Windows host is missing security update 5009601 or cumulative update 5009627. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2022-21880, CVE-2022-21904,...

Microsoft Windows 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security feature issue vulnerability exists in Microsoft Windows Workstation Service Remote Protocol. The following products and editions are affected:Windows Server 2019 Server Core...

Microsoft Windows Defender 安全特征问题漏洞

Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. Microsoft Windows Defender is vulnerable to a security feature issue. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version...

PT-2022-1529 · Microsoft · Windows Defender +1

Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to a security feature bypass that may allow attackers to access protected information. This could potentially enable unauthorized access to sensitive data. The...

KB5009621: Windows 7 and Windows Server 2008 R2 Security Update (January 2022)

The remote Windows host is missing security update 5009621. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21850, CVE-2022-21851,...

KB5009545: Windows 10 Version 1909 Security Update (January 2022)

The remote Windows host is missing security update 5009545. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...

KB5009546: Windows 10 Version 1607 and Windows Server 2016 Security Update (January 2022)

The remote Windows host is missing security update 5009546. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2022-21849, CVE-2022-21850,...

Incorrect Calculation in the MSR JavaScript Cryptography Library

A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library's Elliptic Curve Cryptography ECC implementation.An attacker could potentially abuse these bugs to learn information about a server's private ECC key a key...

Google Chrome 安全特征问题漏洞

Google Chrome is a Web browser from the U.S. company Google Google. Google Chrome is vulnerable to a security feature issue that exists due to an incorrect implementation of a vulnerability in automatically populating Google Chrome. A remote attacker could exploit the vulnerability to be able to...

Security feature bypass

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain...