Description of the security update for the Windows COM elevation of privilege vulnerability in Windows Embedded POSReady 2009 and Windows Embedded Standard 2009: November 13, 2018

None None...

Guidance for configuring BitLocker to enforce software encryption

Microsoft is aware of reports of vulnerabilities in the hardware encryption of certain self-encrypting drives SEDs. Customers concerned about this issue should consider using the software only encryption provided by BitLocker Drive Encryption™. On Windows computers with self-encrypting drives,...

Microsoft Windows 10 Version 1607 Unsupported Version Detection (deprecated)

This plugin has been replaced by Windows Security-End-of-Life plugins. C Tenable Network Security, Inc. @DEPRECATED@ Deprecated on 2024 Mar 14. Replaced by Windows SEoL plugins. include"compat.inc"; if description scriptid118715; scriptversion"1.12";...

Microsoft PowerShell Core Information Disclosure Vulnerability (Oct 2018) - Windows

This host is missing an important security update for PowerShell Core according to Microsoft security advisory CVE-2018-8292. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2018-8489

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka "Windows Hyper-V Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1,...

KB4462919: Windows 10 Version 1803 and Windows Server Version 1803 October 2018 Security Update

The remote Windows host is missing security update 4462919. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in DNS Global Blocklist feature. An attacker who successfully exploited this vulnerability could redirect traffic to malicious DNS...

Privilege escalation

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server...

Description of the security update for the remote code execution vulnerability in Visual Studio 2015 Update 3: July 10, 2018

None None...

July 10, 2018—KB4338824 (Security-only update)

None None...

July 10, 2018—KB4338823 (Security-only update)

None None...

Microsoft Windows: Prevent Codec Download (Media Player)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: wincodecdownload.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Prevent Codec Download users listed in HKU Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This...

Microsoft Windows: Shell protocol protected mode

This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applications can open folders and launch files. The protected mode reduces the functionality of this protocol allowing applications to only...

Microsoft Windows: Use of smart cards on fixed data drives

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winsmartcardsfixeddrives.nasl 11363 2018-09-12 13:46:05Z emoss $ Check value for Configure use of smart cards on fixed data drives Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-8169

An elevation of privilege vulnerability exists when the Human Interface Device HID Parser Library driver improperly handles objects in memory, aka "HIDParser Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...

RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation

RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Date: 2017-12-11 Author: LiquidWorm Vendor: Rockwell Automation, Inc. Product web page: https://www.rockwellautomation.com Affected version: Rockwell...

Microsoft Windows: Interactive logon: Message title for users attempting to log on

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winilmessagetitleuserslogon.nasl 11098 2018-08-23 14:32:47Z emoss $ Check value for Interactive logon: Message title for users attempting to log on Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

CVE-2018-8132

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958,...

Security feature bypass

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0958,...

CVE-2018-0854

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0958,...

Microsoft Windows Security Feature Bypass Vulnerability (CNVD-2018-10983)

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the U.S. Windows uses a graphical mode GUI. A security feature bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass the User Mode Code Integrity UMCI policy on...