Researchers Follow the Breadcrumbs: The Latest Vulnerabilities in Windows' Network Stack | McAfee Blogs

ARCHIVED STORY Researchers Follow the Breadcrumbs: The Latest Vulnerabilities in Windows’ Network Stack Steve Povolny · FEB 09, 2021 The concept of a trail of breadcrumbs in the offensive security community is nothing new; for many years, researchers on both sides of the ethical spectrum have...

Privilege escalation

Windows Network Connections Service Elevation of Privilege Vulnerability...

Windows Network Connections Service Elevation of Privilege Vulnerability

...

PT-2020-5295 · Microsoft · Windows Network Connections Service +1

Name of the Vulnerable Software and Affected Versions: Windows Network Connections Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows Network Connections Service, which can be exploited to elevate privileges. This allows an...

Microsoft Windows Licensing Issues Vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Windows Network Connections Service. The following products and models are affected: Windows Server version 20H2 Server Core...

CVE-2020-17069

Windows NDIS Information Disclosure Vulnerability...

CVE-2020-17047

Windows Network File System Denial of Service Vulnerability...

Information disclosure

Windows Network File System Information Disclosure Vulnerability...

CVE-2020-17056 Windows Network File System Information Disclosure Vulnerability

...

CVE-2020-17051 Windows Network File System Remote Code Execution Vulnerability

...

Nanjing Xindi EcoGod Windows Network Web Edition suffers from an out-of-bounds access vulnerability

Nanjing New Dixon Software Technology Co., Ltd. is a high-tech enterprise specializing in the research, development and sales of industrial control general configuration and embedded software. Nanjing Xindishen Windows Network Web Edition has an out-of-bounds access vulnerability that can be...

Nanjing Xindi EcoGod Windows Network Web Edition suffers from information leakage vulnerability

Nanjing New Dixon Software Technology Co., Ltd. is a high-tech enterprise specializing in the research, development and sales of industrial control general configuration and embedded software. Nanjing Xindishen Windows Network Web Edition has an information leakage vulnerability that can be...

The vulnerability of Windows Network Connections on operating systems allows attackers to increase their privileges.

The vulnerability of Windows Network Connections in operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Network Address Translation technology implemented in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Network Address Translation technology in the Windows operating system lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2020-16899

A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attacker who successfully exploited this vulnerability could cause a target system to stop responding. To exploit this vulnerability, an attacker would have to send...

CVE-2020-16887

An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

Microsoft Windows Multiple Vulnerabilities (KB4580346)

This host is missing a critical security update according to Microsoft KB4580346 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4580327)

This host is missing a critical security update according to Microsoft KB4580327 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2020-4307 · Microsoft · Windows Network Connections +1

Name of the Vulnerable Software and Affected Versions: Windows Network Connections affected versions not specified Description: The issue is related to errors in handling objects in memory by the Windows Network Connections Service, which can allow an attacker to elevate their privileges. A local...

Samba Command Injection Vulnerability

Samba is a set of free software that enables the UNIX family of operating systems to connect to the SMB/CIFS network protocol of the Microsoft Windows operating system. Samba suffers from a command injection vulnerability that can be exploited by an attacker to elevate privileges...