337 matches found
BadSuccessor Exploits Windows Server 2025 Flaw for Full AD Takeover
Akamai researchers reveal a critical flaw in Windows Server 2025 dMSA feature that allows attackers to compromise any…...
Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise
A privilege escalation flaw has been demonstrated in Windows Server 2025 that makes it possible for attackers to compromise any user in Active Directory AD. "The attack exploits the delegated Managed Service Account dMSA feature that was introduced in Windows Server 2025, works with the default...
Microsoft Windows Remote Desktop Gateway 资源管理错误漏洞
Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Gateway. An...
Microsoft Windows 代码问题漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A code issue vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions...
Microsoft Brokering File System 资源管理错误漏洞
Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Windows Server...
KB5058411: Windows 11 Version 24H2 / Windows Server 2025 Security Update (May 2025)
The remote Windows host is missing security update 5058411 or Hot Patch 5058497. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. CVE-2025-29967 - Use of...
Microsoft Windows Remote Desktop Gateway 安全漏洞
Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A security vulnerability exists in Microsoft Windows Remote Desktop Gateway. An attacker exploiting th...
Microsoft Windows Remote Desktop Services 安全漏洞
Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A security vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker exploiting this...
Microsoft Hyper-V 输入验证错误漏洞
Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker could exploit this vulnerability to cause a denial of service on...
Microsoft Windows Hardware Lab Kit 信任管理问题漏洞
Microsoft Windows Hardware Lab Kit is a test framework from Microsoft Corporation USA used to verify the compatibility of hardware devices and drivers with the Windows operating system. A trust management issue vulnerability exists in Microsoft Windows Hardware Lab Kit. An attacker could exploit...
Microsoft Windows Remote Desktop Gateway 安全漏洞
Microsoft Windows Remote Desktop Gateway RD Gateway is a role service from Microsoft Corporation USA that allows authorized users to securely access internal network resources over the Internet. A security vulnerability exists in Microsoft Windows Remote Desktop Gateway. The following products an...
Microsoft DWM Core Library 资源管理错误漏洞
Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A resource management error vulnerability exists in the Microsoft DWM Core Library. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...
PVS boot fails for Server 2025 based PVS vdisks running on Azure and Hyperv after windows update
When applying windows updates to a PVS vdisk with Server 2025 which is running on Azure or Hyper-V, after rebooting to finish installing windows updates, PVS boot fails. Issue when applying windows updates to a PVS Streamed server 2025 vdisk: 1. The vdisk is booted in read/write mode 2. Windows...
Microsoft Windows UPnP 安全漏洞
Microsoft Windows UPnP is a device agent from Microsoft Corporation USA. Providing a proxy allows a Windows network connection to recognize the IP address of the ZoneDirector. A security vulnerability exists in Microsoft Windows UPnP. An attacker could exploit the vulnerability to elevate...
Microsoft Windows Digital Media 资源管理错误漏洞
Microsoft Windows Digital Media is a collection of technologies and features for playing, managing, sharing, delivering, and protecting digital media content from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Digital Media. An attacker could...
Microsoft Windows Routing and Remote Access Service 安全漏洞
Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...
Microsoft Windows Routing and Remote Access Service 安全漏洞
Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...
Microsoft Local Security Authority Server 安全漏洞
Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...
Microsoft Active Directory Certificate Services 安全漏洞
Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...
Microsoft Windows Kernel Mode Drivers 缓冲区错误漏洞
Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:...