CVE-2023-3897

CVE-2023-3897 La enumeración de nombres de usuario es posible evadiendo el CAPTCHA en la solución SureMDM local en implementaciones de Windows, lo que permite al atacante enumerar información de usuarios locales a través de mensajes de error. Este problema afecta a SureMDM local: versión 6.31 y...

Microsoft-Defender-for-Endpoint-Deployment-on-Windows-10-11-device

Este repositorio documenta la implementación de Microsoft Defender for Endpoint en un dispositivo Windows 11, incluida la incorporación mediante script local, la habilitación de la detección de dispositivos, la configuración de la detección de Log4j2 CVE-2021-44228 y la validación de los flujos d...

CVE-2026-72957

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72954

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72943

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-69607

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69607

CVE-2026-69607 is a use-after-free vulnerability in Windows Deployment Services (WDS) that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector, high complexity, no privileges required, and user interactio...

EUVD-2026-73708

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-72954

CVE-2026-72954 is a use-after-free vulnerability in Windows Deployment Services (Microsoft) that allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack...

EUVD-2026-73674

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

EUVD-2026-73671

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-72957

CVE-2026-72957 is a heap-based buffer overflow in Windows Deployment Services that allows an authorized attacker to achieve local code execution. The vulnerability is rated CVSS 3.1 7.8 (HIGH) with the vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a low-privilege local attacker requires ...

CVE-2026-72943

A use after free vulnerability in Windows Deployment Services allows an authorized attacker (low privileges) to achieve remote code execution over a network. The CVSS v3.1 score is 7.5 (HIGH) with vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexity but high impact on con...

EUVD-2026-73112

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-74239

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

Windows Deployment Services Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...

CVE-2026-40145

A vulnerability exists in the interaction between a Endpoint Privilege Management Windows Deployment support utility and the agent's tamper protection controls. Under certain conditions, the protections applied to the utility process may not be enforced as intended...