929 matches found
Windows Defender Attack Surface Reduction Security Feature Bypass
...
September 12, 2023—KB5030216 (OS Build 20348.1970)
None None...
PT-2023-5060 · Microsoft · Windows Defender
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to bypass existing security restrictions using a specially crafted file. Recommendations: At the moment,...
Microsoft Windows Defender Security Vulnerability
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker exploiting the vulnerability could bypass certain features...
AD_Enumeration_Hunt - Collection Of PowerShell Scripts And Commands That Can Be Used For Active Directory (AD) Penetration Testing And Security Assessment
Description Welcome to the AD Pentesting Toolkit! This repository contains a collection of PowerShell scripts and commands that can be used for Active Directory AD penetration testing and security assessment. The scripts cover various aspects of AD enumeration, user and group management, computer...
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Microsoft Windows Defender operating system, which allows a hacker to increase their privileges
The vulnerability of Microsoft Windows Defender operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
Security Updates for Windows Defender (August 2023)
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23060.3001. It is, therefore, affected by a privilege escalation vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...
CVE-2023-38175
Microsoft Windows Defender Elevation of Privilege Vulnerability...
CVE-2023-36882
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability...
Privilege escalation
Microsoft Windows Defender Elevation of Privilege Vulnerability...
CVE-2023-38175 Microsoft Windows Defender Elevation of Privilege Vulnerability
...
PT-2023-4312 · Microsoft · Wdac Ole Db Provider For Sql Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft WDAC OLE DB provider for SQL Server, which can be exploited by a remote attacker...
Microsoft Windows Defender Security Vulnerability
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender. An attacker can exploit the vulnerability to elevate privileges...
KLA51715 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2023-38175 Related products Microsoft-Windows Windows-Defender CVE list CVE-2023-38175 critical KB list Solution Install necessa...
"FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly
Overview "FFRI yarai" and "FFRI yarai Home and Business Edition" provided by FFRI Security, Inc. handle exceptional conditions improperly CWE-703. When the product's Windows Defender management feature is enabled, and Microsoft Defender detects some files matching specific conditions as a threat,...
JVN#42527152: "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly
"FFRI yarai" and "FFRI yarai Home and Business Edition" provided by FFRI Security, Inc. handle exceptional conditions improperly CWE-703. When the product's Windows Defender management feature is enabled, and Microsoft Defender detects some files matching specific conditions as a threat, the...
FFRI yarai security breach
FFRI yarai is a security application from FFRI Japan. It is capable of protecting internal systems from malware attacks that could jeopardize operational processes. A security vulnerability exists in FFRI yarai and FFRI yarai Home and Business Edition that stems from a failure to properly handle...
PVS Target Device hangs/freezes when placed under isolation by Windows Defender
The PVS Target VM goes into a hung state...
Security Updates for Windows Defender (July 2023)
The Malware Protection Engine version of Microsoft Windows Defender installed on the remote Windows host is prior to 1.1.23050.3. It is, therefore, affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...