Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to elevate privileges. The following products and versions are...

Microsoft Windows Telephony Server 安全漏洞

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...

Microsoft Windows Event Tracing 后置链接漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A backlink vulnerability exists in Microsoft Windows Event Tracing. An attacker could exploit this...

Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and edition...

Microsoft .NET、Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, and Microsoft .NET Framework is a comprehensive and consistent programming model and a development platform for building applications for Windows, Windows Store, Windows Phone,...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Client-Side Caching CSC Service. An attacker can exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows PrintWorkflowUserSvc 输入验证错误漏洞

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. An input validation error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc. An attacker could exploit the vulnerability to elevate...

Microsoft Windows 缓冲区错误漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Client-Side Caching CSC Service. An attacker exploiting this vulnerability could gain access to sensitive information. The followi...

KB5050115: Servicing stack update for Windows Server 2012 R2: January 14, 2025

None None...

KB5050009: Windows 11 Version 24H2 / Windows Server 2025 Security Update (January 2025)

The remote Windows host is missing security update 5050009. It is, therefore, affected by multiple vulnerabilities - Windows NTLM V1 Elevation of Privilege Vulnerability CVE-2025-21311 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223, CVE-2025-21233, CVE-2025-21236,...

KB5050006: Windows Server 2008 R2 Security Update (January 2025)

The remote Windows host is missing security update 5050006. It is, therefore, affected by multiple vulnerabilities - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability CVE-2025-21307 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223...

KB5050004: Windows Server 2012 Security Update (January 2025)

The remote Windows host is missing security update 5050004. It is, therefore, affected by multiple vulnerabilities - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability CVE-2025-21307 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223...

KB5049993: Windows 10 Version 1607 / Windows Server 2016 Security Update (January 2025)

The remote Windows host is missing security update 5049993. It is, therefore, affected by multiple vulnerabilities - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability CVE-2025-21307 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223...

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

A proof-of-concept PoC exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol LDAP that could trigger a denial-of-service DoS condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 CVSS score: 7.5. It was addressed ...

Attackers exploiting a patched FortiClient EMS vulnerability in the wild

Introduction During a recent incident response, Kaspersky's GERT team identified a set of TTPs and indicators linked to an attacker that infiltrated a company's networks by targeting a Fortinet vulnerability for which a patch was already available. This vulnerability is an improper filtering of S...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...