1683 matches found
CVE-2024-43509
CVE-2024-43509 is listed in connected advisories as affecting the Windows Graphics Component with an elevation of privilege impact. The ENISA/NCSC entries corroborate this CVE under Windows Graphics Component and assign an impact/score (7.80) and local, privilege‑required conditions. Concrete det...
CVE-2024-43453 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
CVE-2024-37982 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
...
CVE-2024-37982 Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability
...
CVE-2024-37976
CVE-2024-37976 is described as a Windows EFI Partition vulnerability: a security feature bypass (Circumvention of security measure) with CVSS 3.1 base score 6.7 (LOCAL, LOW attack complexity, HIGH privileges required, no user interaction). The connected data specifies affected component as Window...
Description of the security update for Visual Studio 2015 Update 3: October 8, 2024 (KB5045536)
None None...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
Windows Secure Channel Spoofing Vulnerability
...
PT-2024-6671 · Microsoft · Saved Console +2
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to 10.0.10240.20796 Microsoft Windows versions prior to 10.0.14393.7428 Microsoft Windows versions prior to 10.0.17763.6414 Microsoft Windows versions prior to 10.0.19044.5011 Microsoft Windows versions prior ...
KB5044277: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2024)
The remote Windows host is missing security update 5044277. It is, therefore, affected by multiple vulnerabilities - libcurl's ASN1 parser has this utf8asn1str function used for parsing an ASN.1 UTF-8 string. Itcan detect an invalid field and return error. Unfortunately, when doing so it also...
About the security content of Apple TV 1.5.0.152 for Windows
About the security content of Apple TV 1.5.0.152 for Windows This document describes the security content of Apple TV 1.5.0.152 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred...
Microsoft Windows Drag and Drop SmartScreen Bypass Vulnerability
This vulnerability allows remote attackers to bypass the SmartScreen security feature on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2024-43487
CVE-2024-43487 corresponds to a Windows Mark of the Web (MOTW) security feature bypass. The MOTW component itself is identified as the vulnerable area, enabling bypass of the MOTW protection. Public materials in the connected documents indicate the vulnerability is addressed by Microsoft security...
CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability
...
CVE-2024-30073
CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...
CVE-2024-30073 Windows Security Zone Mapping Security Feature Bypass Vulnerability
...
CVE-2024-38045
Technical details about CVE-2024-38045 are not publicly provided in the supplied documents. References acknowledge a Windows TCP/IP remote code execution vulnerability but do not specify affected products, root cause, versions, or fixes; monitor for updates.
CVE-2024-38217
CVE-2024-38217 is a security feature bypass in Microsoft Windows Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections when opening booby-trapped Office files, as discussed in multiple sources. Exploitation details are not fully disclosed in the provided documents, but the C...
Windows Security Zone Mapping Security Feature Bypass Vulnerability
...
MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure', 'Description' = %q This module dumps memory contents using...