638 matches found
CVE-2023-36884-MS-Office-HTML-RCE
CVE-2023-36884: 조작된 문서를 통한 MS Office HTML RCE 2023년 7월 11일, Microsoft는 적극적으로 악용되고 있는 여러 원격 코드 실행RCE 취약점을 해결하기 위한 패치를 발표했습니다. 이 조치를 통해 유럽 및 북미 지역의 조직을 대상으로 하는 위협 행위자 Storm-0978이 주도한 피싱 캠페인이 밝혀졌습니다. 이 캠페인의 핵심은 CVE-2023-36884로 지정된 제로데이 취약점으로, 공격자가 우크라이나 세계 회의UWC와 관련된 지정학적 미끼가 포함된 정교하게 조작된 Office Ope...
mitigate-folina
mitigate-folina "Folina" 제로데이CVE-2022-30190와 "Search" 나이트메어현재 CVE 미할당를 완화합니다. 이 스크립트는 영향을 받는 레지스트리 키를 백업한 후 제거하여Microsoft 권장 CVE-2022-30190을 완화합니다. "-revert" 매개변수를 사용하면 스크립트가 키를 다시 가져옵니다. 이는 Microsoft가 패치를 출시할 때 사용할 수 있습니다. 스크립트는 관리자 또는 NT-AUTHORITY\SYSTEM 권한으로 실행해야 합니다GPP를 통해 시작 스크립트 또는 예약된 작업으로...
CVE-2026-70145
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-69911
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69608
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69600
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69585
Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69554
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69507
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
CVE-2026-69453
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
CVE-2026-69322
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-69305
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
CVE-2026-68896
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
EUVD-2026-73902
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
CVE-2026-70145
CVE-2026-70145 is an out-of-bounds read in the Microsoft Windows Search Component that allows an authorized attacker to disclose information locally. The vulnerability is rated CVSS 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and no user interaction. The prim...
CVE-2026-68896
CVE-2026-68896 is an absolute path traversal vulnerability in the Microsoft Windows Search Component that allows an authorized local attacker to achieve privilege escalation . The vulnerability requires low privileges, no user interaction, and has low attack complexity, with a CVSS 3.1 base score...
EUVD-2026-73680
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-69911
CVE-2026-69911 is a use-after-free vulnerability in the Microsoft Windows Search Component that allows a locally authenticated attacker to achieve local privilege escalation . The flaw requires low privileges , high attack complexity , and no user interaction , with unchanged scope and high impac...