Microsoft Windows 11 21H2 SEoL

Microsoft Windows 11 21H2 is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Microsoft Windows 11 22H2 Pro SEoL

Microsoft Windows 11 22H2 Pro is no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

Start menu may stop responding if December 2024 or newer security updates installed on Windows 11

Start menu within a Windows 11 VDI session may not respond for some users after installing Microsoft's December 2024 or newer security updates TPV-6122 Solution This issue is fixed in the Citrix Virtual Apps and Desktops 7 2503 and newer versions. If users are using LTSR or older versions of Citr...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40733

CVE-2022-40733 is a kernel vulnerability in Windows DirectComposition via the win32kbase.sys driver. The TALOS report details a NULL pointer dereference in DirectComposition GetWeakReferenceBase due to a mis-managed weak-reference flag in the resource marshaler lifecycle, triggered when certain f...

CVE-2022-40732

CVE-2022-40732 affects Microsoft Windows DirectComposition in the win32kbase.sys driver (Windows 11 10.0.22000.593; Windows Server 2022 10.0.20348.643). Talos details a NULL pointer dereference in DirectComposition::CCompositionSurfaceBitmapMarshaler when setting integer property 0x3, which leads...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

CVE-2022-40732

An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version 10.0.22000.593 as part of Windows 11 version 22000.593 and version 10.0.20348.643 as part of Windows Server 2022 version 20348.643. A specially-crafted set of syscalls can lead to a reboo...

December 10, 2024—KB5048685 (OS Builds 22621.4602 and 22631.4602)

None None...

Microsoft Lightweight Directory Access Protocol 资源管理错误漏洞

Microsoft Lightweight Directory Access Protocol LDAP is a directory services protocol from Microsoft Corporation USA that runs on a layer above the TCP/IP stack. A resource management error vulnerability exists in Microsoft Lightweight Directory Access Protocol. The following products and edition...

KB5048685: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (December 2024)

The remote Windows host is missing security update 5048685. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-49090 - Windows...

Microsoft Hyper-V 安全漏洞

Microsoft Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Hyper-V. An attacker exploiting this vulnerability could remotely execute code. The following products and versio...

Microsoft Windows Resilient File System 安全漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

Microsoft Windows Virtualization-Based Security Enclave 授权问题漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment within the host application address space from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Windows Virtualization-Based...

KB5048667: Windows 11 Version 24H2 / Windows Server 2025 Security Update (December 2024)

The remote Windows host is missing security update 5048667 or hotpatch 5048794. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...

The Image Does Not Have Layer Data Located In HKEY_CLASSES_ROOT or HKEY_CURRENT_USER

In one use case the published image, with Windows 11 OS, was missing the value, HKEYCLASSESROOT\mailto\Default. The Windows 10 images were ok...

Kolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3)

An implementation bug in the Kolide Agent known as launcher allows for local privilege escalation to the SYSTEM user on Windows 10 and 11. Impacted versions include versions = 1.5.3 and the fix has been released in 1.12.3. The bug was introduced in version 1.5.3 when launcher started storing...