Microsoft SMBv3 资源管理错误漏洞

Microsoft SMBv3 is a support firmware from Microsoft Corporation USA that provides SMB functionality for devices. A resource management error vulnerability exists in Microsoft SMBv3. An attacker exploiting this vulnerability could remotely execute code. The following products and versions are...

Microsoft Active Directory Certificate Services 安全漏洞

Microsoft Active Directory Certificate Services is a Windows Server role from Microsoft Corporation USA that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols. A security vulnerability exists in Microsoft Active Directory...

Microsoft Windows Kerberos 安全漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications through a key system. A security vulnerability...

KB5046639: Windows Server 2008 Security Update (November 2024)

The remote Windows host is missing security update 5046639. It is, therefore, affected by multiple vulnerabilities - Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-43620, CVE-2024-43621, CVE-2024-43622, CVE-2024-43627, CVE-2024-43628, CVE-2024-43635 - Windows NT OS Kernel...

KB5046705: Windows Server 2008 R2 Security Update (November 2024)

The remote Windows host is missing security update 5046705. It is, therefore, affected by multiple vulnerabilities - Windows Telephony Service Remote Code Execution Vulnerability CVE-2024-43620, CVE-2024-43621, CVE-2024-43622, CVE-2024-43627, CVE-2024-43628, CVE-2024-43635 - Windows NT OS Kernel...

KB5046618: Windows Server version 23H2 Security Update (November 2024)

The remote Windows host is missing security update 5046618. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Remote Code Execution Vulnerability CVE-2024-43639 - Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2024-43623 - Windows Telephony Service Elevation...

KB5046617: Windows 11 Version 24H2 / Windows Server 2025 Security Update (November 2024)

The remote Windows host is missing security update 5046617 and Hot Patch 5046696. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Remote Code Execution Vulnerability CVE-2024-43639 - Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2024-43623 - Windows...

.NET 6.0 Update - November 12, 2024 (KB5047486)

None None...

November 12, 2024-Security and Quality Rollup for .NET Framework 2.0, 3.0, 3.5 SP1, 4.6.2 for Windows Server 2008 SP2 (KB5046546)

None None...

November 12, 2024-KB5046540 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10, version 1809 and Windows Server 2019

None None...

KB5046615: Windows 10 version 1809 / Windows Server 2019 Security Update (November 2024)

The remote Windows host is missing security update 5046615. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Remote Code Execution Vulnerability CVE-2024-43639 - Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2024-43623 - Windows Telephony Service Elevation...

Microsoft NTLM 安全漏洞

Microsoft NTLM is a Microsoft USA authentication protocol used on networks including systems running the Windows operating system as well as standalone systems. A security vulnerability exists in Microsoft NTLM. An attacker could exploit the vulnerability to perform spoofing attacks. The followin...

Microsoft Manage Virtual Hard Disks 安全漏洞

Microsoft Manage Virtual Hard Disks is a disk image file format from Microsoft Corporation USA. A security vulnerability exists in Microsoft Manage Virtual Hard Disks. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and editions are...

Microsoft Windows Secure Kernel Mode 安全漏洞

Microsoft Windows Secure Kernel Mode is a security feature from Microsoft Corporation USA that uses virtualization technology to enhance system security. A security vulnerability exists in Microsoft Windows Secure Kernel Mode. An attacker could exploit the vulnerability to elevate privileges. The...

Microsoft Windows CSC Service 缓冲区错误漏洞

Microsoft Windows CSC Service is an application from Microsoft Corporation USA. It allows the use of network files while the local computer is offline. A buffer error vulnerability exists in Microsoft Windows CSC Service. An attacker exploiting this vulnerability could elevate privileges. The...

KB5046697: Windows Server 2012 Security Update (November 2024)

The remote Windows host is missing security update 5046697. It is, therefore, affected by multiple vulnerabilities - Windows Kerberos Remote Code Execution Vulnerability CVE-2024-43639 - Windows NT OS Kernel Elevation of Privilege Vulnerability CVE-2024-43623 - Windows Telephony Service Elevation...

The severity of the Elevation of Privilege – Windows Kernel-Mode Driver (CVE-2024-35250) vulnerability has increased

The severity of the Elevation of Privilege - Windows Kernel-Mode Driver CVE-2024-35250 vulnerability has increased. This vulnerability was fixed as part of the June Microsoft Patch Tuesday. As in the case of the CVE-2024-30090 vulnerability, it was discovered by a researcher with the nickname...

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

On May 18, 2024, Kaspersky's Global Research & Analysis Team GReAT, with the help of its partners, held the qualifying stage of the SAS CTF, an international competition of cybersecurity experts held as part of the Security Analyst Summit conference. More than 800 teams from all over the world to...

Microsoft .NET Framework Multiple DoS Vulnerabilities (KB5044089)

This host is missing an important security update according to Microsoft KB5044090 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5044293)

This host is missing an important security update according to Microsoft KB5044293 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...