Microsoft Windows Media Foundation 缓冲区错误漏洞

Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...

Microsoft Windows Fastfat Driver 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Fastfat Driver with privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 fo...

Microsoft Tablet Windows User Interface 权限许可和访问控制问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Tablet Windows User Interface with privilege permission and access control issues. The following products and editions are affected: Windows Server...

KB5011569: Servicing stack update for Windows 10: March 8, 2022

None None...

Microsoft SMBv3 代码注入漏洞

Microsoft SMBv3 is a support firmware from Microsoft Corporation USA that provides SMB functionality for devices. A code injection vulnerability exists in Microsoft SMBv3 Client/Server. The following products and versions are affected: Windows 10 Version 21H1 for x64-based Systems,Windows 10...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows ALPC for competitive conditions. The following products and editions are affected:Windows Server 2008 R2 for x64-based Systems Service Pack 1...

KB5011495: Windows 10 Version 1607 and Windows Server 2016 Security Update (March 2022)

The remote Windows host is missing security update 5011495. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-23283, CVE-2022-23284, CVE-2022-23287, CVE-2022-23290, CVE-2022-23293,...

Microsoft Hyper-V 竞争条件问题漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A vulnerability exists in Microsoft Hyper-V due to a competitive condition issue. The following products and versions are affected: Windows Server...

KB5011942: Servicing stack update for Windows Server 2008 SP2: March 8, 2022

KB5011942: Servicing stack update for Windows Server 2008 SP2: March 8, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU make sure that you have a robust and reliable servicing stack so th...

KB5011571: Servicing stack update for Windows Server 2012: March 8, 2022

KB5011571: Servicing stack update for Windows Server 2012: March 8, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable servicing stack so that...

KB5011529: Windows 7 and Windows Server 2008 R2 (March 2022) Security Update

The remote Windows host is missing security update 5011529 or cumulative update 5011529. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-23283, CVE-2022-23290, CVE-2022-23293,...

Microsoft Windows Installer 权限许可和访问控制问题漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A vulnerability exists in Microsoft Windows Installer due to permission and access control issues. The following products and editions...

Microsoft DWM Core Library 权限许可和访问控制问题漏洞

The Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A vulnerability exists in the Microsoft DWM Core Library due to permission and access control issues. The following products and editions are affected: Windows 10 Version 20H2 for x64-based Systems,...

KB5011570: Servicing stack update for Windows 10, version 1607 and Server 2016: March 8, 2022

None None...

KB5011525: Windows Server 2008 Security Update (March 2022)

The remote Windows host is missing security update 5011525 or cumulative update 5011534. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-23283, CVE-2022-23290, CVE-2022-23293,...

Microsoft Windows Event Tracing 代码注入漏洞

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism to track and log events raised by user-mode applications and kernel-mode drivers. A code injection vulnerability exists in Microsoft Windows Event Tracing. The following products and editions...

Red Team lab automation

It’s not uncommon for red teamers to regularly tear down and rebuild their test labs, I know I do on a sometimes daily basis. It keeps things fresh and manageable, and now, using Infrastructure as Code IaC, we can create a consistent environment to test tools and techniques in. If we break...

Microsoft Win32k Privilege Escalation Vulnerability

An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges...

Microsoft ATM Font Driver Privilege Escalation Vulnerability

ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server allows local users to gain privileges via a crafted application...

Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability

The Graphics Device Interface GDI in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges...