23507 matches found
PT-2018-1476
Name of the Vulnerable Software and Affected Versions Windows Server 2008 Windows 7 Windows Server 2008 R2 Description A remote code execution issue exists in the way the Windows Graphics Device Interface GDI handles objects in memory. This allows remote attackers to execute arbitrary code by...
Security Updates for Windows Server 2008 (August 2018) (Foreshadow)
The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - Errors exist related to microprocessors utilizing speculative execution and L1 data cache that could allow information disclosure. CVE-2018-3615, CVE-2018-3620, CVE-2018-3646 - A remote...
KB4343896: Windows Server 2012 August 2018 Security Update (Foreshadow)
The remote Windows host is missing security update 4343896 or cumulative update 4343901. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a...
Microsoft Windows Diagnostics Hub CVE-2018-0952 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to elevate the privileges and take control of an affected system. Technologies Affected Microsoft Visual Studio 2015 Update 3 Microsoft Visual Studio 2017 15.8 Microsoft...
Microsoft Windows NDIS CVE-2018-8343 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windo...
Microsoft Windows NDIS CVE-2018-8342 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 fo...
Microsoft Windows DirectX Graphics Kernel CVE-2018-8405 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
Microsoft Windows DirectX Graphics Kernel CVE-2018-8401 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
PT-2018-1462
Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description The issue is related to errors in handling embedded fonts ...
PT-2018-1487
Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A security feature bypass issue exists, allowing an attacker to inject malicious code into a Windows PowerShell session. This is related to an improperly implemented security check...
KLA11305 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Diagnostic Hub Standard Collector can be...
Security and Quality Rollup updates for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 (KB 4345591)
Security and Quality Rollup updates for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 KB 4345591 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This update resolves an information disclosure vulnerability in Microsoft...
Security Only updates for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2 and 4.6 for Windows Server 2008 SP2 (KB 4345682)
Security Only updates for .NET Framework 2.0 SP2, 3.0 SP2, 4.5.2 and 4.6 for Windows Server 2008 SP2 KB 4345682 Summary This security update resolves an information disclosure vulnerability in Microsoft .NET Framework that could allow an attacker to access information in multi-tenant environments...
Security Only updates for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 (KB 4345680)
Security Only updates for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, and 4.7.2 for Windows Server 2012 KB 4345680 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This security update resolves an information disclosure vulnerability in Microsoft .NET...
Privilege Bypass Vulnerability in SeAssignPrimaryTokenPrivilege of Background Intelligent Transfer Service Service
The Background Intelligent Transfer Service service is an intelligent backup and transfer service for transferring data over a LAN using free network bandwidth. A privilege bypass vulnerability exists in SeAssignPrimaryTokenPrivilege of the Background Intelligent Transfer Service service under th...
How to Enable the Firewall Rules Required by Veeam ONE for Event Collection
Purpose This article describes how to enable the Microsoft Windows Firewall rules that Veeam ONE requires to collect event data from monitored Windows servers, such as Hyper-V hosts and Veeam Backup & Replication servers. Solution Using Windows Defender Firewall with Advanced Security On a server...
New Relic: stamp2-azure-ext.newrelic.com is vulnerable to MS12-020
Hi security team member, On stamp2-azure-ext.newrelic.com, there is running Windows Server 2008, which is vulnerable to MS12-020. F322944 Step to reproduce To show exploit, the server will shut down. 1- Download the attached file with the name MS12-020.rb 2- Run the below command on terminal ruby...
Windows Server Code Execution
The vulnerability of the Windows Server operating system component in Mac OS X is caused by an overflow in memory buffers. Exploiting this vulnerability can allow an attacker to execute arbitrary code with system privileges or cause a service failure using a specially created application...
Microsoft Windows Device Guard Local Security Bypass Vulnerability (CNVD-2018-15448)
Microsoft Windows Server 2016 and others are a series of operating systems released by Microsoft USA Device Guard is one of the device protection components. A security feature bypass vulnerability exists in Microsoft Device Guard. An attacker could exploit the vulnerability to bypass code...
2018-07 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4338814)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...