284 matches found
CVE-2023-3897
CVE-2023-3897 Username enumeration is possible through Bypassing CAPTCHA in On-premise SureMDM Solution on Windows deployment allows attacker to enumerate local user information via error message. This issue affects SureMDM On-premise: 6.31 and below version...
Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device
This repository documents how deployment of Microsoft Defender for Endpoint on a Windows 11 device, including onboarding via local script, enabling device discovery, configuring Log4j2 detection CVE-2021-44228, and validating incident response workflows. Key Features ✅ Local script onboarding for...
CVE-2026-118213
Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network...
CVE-2026-113818
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network...
CVE-2026-112977
Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally...
CVE-2026-105558
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network...
EUVD-2026-122445
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
CVE-2026-119951
A use-after-free flaw in Windows Deployment Services allows an unauthorized attacker to execute code over a network. This vulnerability was addressed in the November 2026 security updates. Remediation is available through the installation of the latest cumulative updates, such as KB5131080 for Wi...
CVE-2026-118213
A relative path traversal vulnerability in Windows Deployment Services allows an unauthorized attacker to disclose information over a network. This flaw resides in the Windows Deployment Services component and impacts the confidentiality of system information. Remediation is available through off...
EUVD-2026-122099
Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network...
CVE-2026-105558
CVE-2026-105558 identifies a Heap-based buffer overflow in Windows Deployment Services that could allow an authorized attacker to execute code over a network. While several provided knowledge base (MSKB) documents (e.g., KB5131080, KB5131085, KB5131091, KB5131291) mention fixes for Windows Deploy...
EUVD-2026-122044
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code over a network...
CVE-2026-113818
A relative path traversal vulnerability in Windows Deployment Services allows an authorized attacker to disclose information over a network. While the specific root cause is not detailed, the vulnerability impacts the service's ability to restrict unauthorized file system access. Remediation is p...
EUVD-2026-121943
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network...
CVE-2026-112977
Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally. This vulnerability is addressed in multiple security updates, including KB5131077 , KB5131080 , KB5131085 , KB5131090 , and KB5131291 . These updates ensure that the Import-...
EUVD-2026-121901
Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally...
Windows Deployment Services Information Disclosure Vulnerability
Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally...
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network...