Microsoft Windows Local Security Authority (LSA) 安全漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft Windows Connected User Experiences and Telemetry 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Connected User Experiences and Telemetry. An attacker could exploit the vulnerability to elevate privileges. The following...

Microsoft Windows Authentication Methods 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Authentication Methods. An attacker could exploit this vulnerability to cause a denial of service. The following...

Microsoft Windows Transaction Manager 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Transaction Manager. An attacker could exploit the vulnerability to elevate privileges. The following products an...

Microsoft Windows OLE 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows OLE. An attacker exploiting this vulnerability could remotely execute code. The following products and versions a...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. An attacker could exploit this vulnerability to cause a deni...

PT-2023-3914

Name of the Vulnerable Software and Affected Versions Windows Server Update Services WSUS affected versions not specified Description The issue is related to insufficient access restrictions in Windows Server Update Services WSUS, which can allow an attacker to elevate their privileges. This can...

KLA50775 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, gain privileges, bypass security restrictions. Below is a complete list of...

Microsoft Windows Remote Procedure Call Runtime 安全漏洞

Microsoft Windows Remote Procedure Call Runtime is a powerful technology for creating distributed client/server programs from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Remote Procedure Call Runtime. An attacker could exploit this vulnerability to cause a deni...

Microsoft Windows Remote Desktop 安全漏洞

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft USA. A security vulnerability exists in Microsoft Windows Remote Desktop. An attacker exploiting this vulnerability could bypass certain features. The following products and...

KB5028224: Windows Server 2008 R2 Security Update (July 2023)

The remote Windows host is missing security update 5028224. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

KB5028168: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2023)

The remote Windows host is missing security update 5028168. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

Microsoft HTTP.sys 安全漏洞

Microsoft HTTP.sys is an application protocol of Microsoft Corporation USA.HTTP application protocol. A security vulnerability exists in Microsoft HTTP.sys. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and versions are affected:...

Microsoft Windows Failover Cluster 安全漏洞

The Microsoft Windows Failover Cluster is a group of independent computers from Microsoft Corporation USA that work together to improve the availability and scalability of cluster roles formerly known as clustered applications and services. A security vulnerability exists in Microsoft Windows...

Microsoft Message Queuing 安全漏洞

Microsoft Message Queuing is a solution for implementing asynchronous and synchronous scenarios that require high performance. A security vulnerability exists in Microsoft Message Queuing. An attacker could exploit this vulnerability to remotely execute code. The following products and editions a...

Microsoft HTTP.sys 安全漏洞

Microsoft HTTP.sys is an application protocol of Microsoft Corporation USA.HTTP application protocol. A security vulnerability exists in Microsoft HTTP.sys. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and versions are...

Microsoft Windows Volume Shadow Copy 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Volume Shadow Copy. An attacker could exploit this vulnerability to gain elevated privileges. The following...

Microsoft Windows Routing and Remote Access Service (RRAS) 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Routing and Remote Access Service RRAS. An attacker exploiting this vulnerability could remotely execute code. The following products...

Microsoft Windows Remote Desktop Protocol 安全漏洞

Microsoft Windows Remote Desktop Protocol RDP is an application for connecting to remote Windows desktops from Microsoft USA. A security vulnerability exists in Microsoft Windows Remote Desktop. An attacker exploiting this vulnerability could bypass certain features. The following products and...

Microsoft Windows DNS 安全漏洞

Microsoft Windows DNS is a domain name resolution service from Microsoft. The Domain Name System DNS is one of the industry-standard suite of protocols that encompasses TCP/IP, and DNS clients and DNS servers work together to provide computers and users with name resolution services that map...