29733 matches found
CVE-2025-26641
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
CVE-2025-26641
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
CVE-2025-29808 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2025-29808
CVE-2025-29808 affects Windows Cryptographic Services. The flaw is a risky implementation of a cryptographic primitive in Windows, enabling a locally-authenticated attacker to disclose data. CVSS: Local, Low attack complexity, Low privileges required, Confidentiality impact High. Public exploits ...
CVE-2025-29808 Windows Cryptographic Services Information Disclosure Vulnerability
...
CVE-2025-27482 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2025-27480 Windows Remote Desktop Services Remote Code Execution Vulnerability
...
CVE-2025-26671
CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...
CVE-2025-26641
CVE-2025-26641 affects Windows Cryptographic Services, causing Denial of Service via uncontrolled resource consumption over the network. Base score 7.5 (Network, High availability impact). Exploitation status not detailed in the provided connected documents; remediation per Microsoft security upd...
CVE-2025-27740 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
CVE-2025-27740 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
2025 Ransomware: Business as Usual, Business is Booming
Getting an edge on your adversaries involves understanding their behaviors and their mindset. Rapid7 Labs took a look at internal and publicly-available ransomware data for Q1 2025 and added our own insights to provide a picture of the year thus far—and what you can do now to reduce your attack...
Windows Cryptographic Services Information Disclosure Vulnerability
Use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services allows an authorized attacker to disclose information locally...
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
Uncontrolled resource consumption in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network...
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
Active Directory Certificate Services Elevation of Privilege Vulnerability
Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network...
Unauthorized File Access
awssamcli is vulnerable to Unauthorized File Access. The vulnerability is due to improper handling of symlinks during the Docker build process, allowing access to privileged host files via elevated permissions...
Microsoft Active Directory Domain Services 访问控制错误漏洞
Microsoft Active Directory Domain Services is a key service from Microsoft Corporation USA that is used to manage and organize resources, users, computers, and other security objects in a network. An access control error vulnerability exists in Microsoft Active Directory Domain Services. An...
PT-2025-15539 · Microsoft · Remote Desktop Gateway Service +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Description: The issue allows remote attackers to execute arbitrary code and affect the system. This is due to a use-after-free condition in the Windows Remote Desktop Gateway...
Microsoft Active Directory Certificate Services 安全漏洞
Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...