Description of the security update for SharePoint Enterprise Server 2016: January 12, 2021 (KB4493163)

None None...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-17008)

Microsoft Windows is prone to an elevation of privilege vulnerability. This VT has been deprecated and replaced by the following VTs covering the new CVE-2021-1648: - OID: 1.3.6.1.4.1.25623.1.0.817573 - OID: 1.3.6.1.4.1.25623.1.0.817569 - OID: 1.3.6.1.4.1.25623.1.0.817568 SPDX-FileCopyrightText:...

Microsoft Windows Print Spooler Components Access Control Error Vulnerability

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Print Spooler Components. The following products and editions are affected:Windows Server 2012 R2 Server Core...

Microsoft Windows Remote Procedure Call Runtime Security Vulnerability

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. The following products and editions are affected:Windows...

Microsoft Hyper-V Security Vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. The following products and editions are affected:Windows Server 2012 R2 Server Core...

Microsoft SQL Server SQL Injection Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft that is used under Microsoft Windows. A SQL injection vulnerability exists in Microsoft SQL Server. The following products and versions are affected:Microsoft SQL Server 2019 for x64-based Systems GDR,Microsoft SQL Server...

Microsoft Exchange Server DlpUtils AddTenantDlpPolicy RCE

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exchange Server. Authentication is required to exploit this vulnerability. Additionally, the target user must have the "Data Loss Prevention" role assigned and an active mailbox. If the user is in th...

KB4598243: Windows 10 Version 1607 and Windows Server 2016 January 2021 Security Update

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685. CVE-2021-1642 - Windows DNS Query Information Disclosure Vulnerability...

Microsoft Windows Bluetooth Service Security Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Bluetooth Service. The following products and versions are affected:Windows Server, version 1909 Server Core installation,Windows 10 Version 1909 for...

Microsoft Diagnostics Hub Standard Collector Service Control Error Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. An access control error vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. The following products and versions are...

Microsoft Graphics Component Information Disclosure Vulnerability

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Graphics Component. The following products and versions are affected:Windows Server 2016 Server Core installation,Windows Server 2016,Windows 10...

Wynis - Audit Windows Security With Best Practice

Just a powershell scripts for auditing security with CIS BEST Practices Windows 10 and Window Server 2016 You just need to run the script, it will create a directory named : AUDITCONF%DATE% The directory output will contain the files belows: -Antivirus-%COMPUTERNAME% : List installed Antivirus...

Patch Tuesday, Good Riddance 2020 Edition

Microsoft today issued its final batch of security updates for Windows PCs in 2020, ending the year with a relatively light patch load. Nine of the 58 security vulnerabilities addressed this month earned Microsofts most-dire "critical" label, meaning they can be abused by malware or miscreants to...

2020-12 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4593226)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Microsoft SharePoint Enterprise Server 2016 (KB4486721) farm-deployment

A security vulnerability exists in Microsoft SharePoint Enterprise Server 2016 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Description of the security update for SharePoint Enterprise Server 2016: December 8, 2020 (KB4486753)

None None...

Microsoft Kerberos Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Kerberos. The following products and versions are affected:Windows Server, version 20H2 Server Core installation,Windows Server 201...

Microsoft Windows Lock Screen Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Lock Screen. The following products and versions are affected:Windows Server 2016 Server Core installation,Window...

Microsoft Windows Error Reporting Information Disclosure Vulnerability

Microsoft Windows Error Reporting WER is a component of Microsoft Corporation USA. It enables users to notify Microsoft of application failures, kernel failures, unresponsive applications, and other application-specific issues. An information disclosure vulnerability exists in Microsoft Windows...

Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Exploit

Exploit Title: Foxit Reader 9.0.1.1049 - Arbitrary Code Execution Exploit Author: CrossWire Vendor Homepage: https://www.foxitsoftware.com/ Software Link: https://www.foxitsoftware.com/downloads/latest.php?product=Foxit-Reader&platform=Windows&version=9.0.1.1049&packagetype=exe&language=English...