8140 matches found
Patch Tuesday - August 2021
Hot off the press, it’s another issue of the Patch Tuesday blog! While the number of vulnerabilities is low this month, there are a number of high risk items administrators will want to patch right away including a few that will require additional remediation steps. This Patch Tuesday also includ...
PT-2021-3777 · Microsoft · Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in processing packets in the TCP/IP protocol implementation in the Hyper-V virtualization system in Windows. This can allow a remote attacker to execute...
OESA-2021-1304 openvswitch security update
Open vSwitch is a production quality, multilayer virtual switch licensed under the open source Apache 2.0 license. Security Fixes: Open vSwitch aka openvswitch 2.11.0 through 2.15.0 has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a...
hAFL1 – Our Journey of Fuzzing Hyper-V and Discovering a Critical 0-Day
Within hours from the moment our in-house built fuzzer, hAFL1, started running – it found a critical, CVSS 9.9 RCE vulnerability in Hyper-V’s virtual driver...
PT-2021-7675 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the Linux kernel is related to incorrect calculation of used IPC identifiers in the sysvipc find ipc function. This issue may lead to resource exhaustion and denial of servic...
Critical 9.9 Vulnerability in Hyper-V Allowed Attackers to Exploit Azure
Guardicore Labs, in collaboration with SafeBreach Labs, found a critical vulnerability in Hyper-V’s virtual network switch driver vmswitch.sys...
Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62472)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Hyper-V in Microsoft Windows/Windows...
CVE-2021-34450
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2021-34450
Windows Hyper-V Remote Code Execution Vulnerability...
Remote code execution
Windows Hyper-V Remote Code Execution Vulnerability...
CVE-2021-34450
CVE-2021-34450 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Hyper-V components on Windows Server/Windows; attacker could exploit from within a guest VM to execute code on the host (authenticated VM user). Exploitation details in connected sources indicate host compromise vi...
CVE-2021-34450 Windows Hyper-V Remote Code Execution Vulnerability
...
Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66058)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A denial-of-service vulnerability exists in Hyper-V in Microsoft...
Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66057)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. A denial-of-service vulnerability exists in Hyper-V in Microsoft...
Vulristics Microsoft Patch Tuesday July 2021: Zero-days EoP in Kernel and RCE in Scripting Engine, RCEs in Kernel, DNS Server, Exchange and Hyper-V
Hello everyone! For the past 9 months, Ive been doing Microsoft Patch Tuesday reviews quarterly. Now I think it would be better to review the July Patch Tuesday while the topic is still fresh. And that will save us some time in the next Last Week’s Security news episode. So, July Patch Tuesday, 1...
CVE-2021-33755
Windows Hyper-V Denial of Service Vulnerability...
CVE-2021-33758
Windows Hyper-V Denial of Service Vulnerability...
CVE-2021-33755
Windows Hyper-V Denial of Service Vulnerability...