Microsoft Windows Remote Desktop Services security vulnerabilities

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A security vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker could exploit this...

Microsoft Windows Buffer Error Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...

Microsoft MapUrlToZone security vulnerability

Microsoft MapUrlToZone is a lightweight console application written in C++ by Microsoft Corporation USA. A security vulnerability exists in Microsoft MapUrlToZone. An attacker exploiting this vulnerability could bypass certain functionality. The following products and versions are affected: Windo...

Microsoft Digest Authentication security vulnerability

Microsoft Digest Authentication is a simple authentication mechanism from Microsoft USA. A security vulnerability exists in Microsoft Digest Authentication. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windows 10 Version...

Microsoft Windows Kernel log information leakage vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A log information disclosure vulnerability exists in Microsoft Windows Kernel Memory. An attacker could exploit this vulnerability to obtain sensitive information. The following products and...

Microsoft Windows Security Account Manager security vulnerabilities

Microsoft Windows Security Account Manager is a Windows security account manager from Microsoft USA that is used to store user passwords. It can be used to authenticate local and remote users. A security vulnerability exists in Microsoft Windows Security Account Manager. An attacker could exploit...

Microsoft Windows Remote Desktop Services Resource Management Vulnerability

Microsoft Windows Remote Desktop Services is a collection of features from Microsoft Corporation USA that allow users to remotely access graphical desktops and Windows applications. A resource management error vulnerability exists in Microsoft Windows Remote Desktop Services. An attacker exploiti...

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in the Microsoft Windows Client-Side Caching CSC Service. An attacker can exploit the vulnerability to elevate privileges. The following products and...

Microsoft Windows Telephony Server security vulnerabilities

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. A security vulnerability exists in Microsoft Windows Telephony Server. A...

Microsoft Windows Buffer Error Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows Buffer Error Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Client-Side Caching CSC Service. An attacker exploiting this vulnerability could gain access to sensitive information. The followi...

Microsoft Windows Digital Media Buffer Error Vulnerability

Microsoft Windows Digital Media is a collection of technologies and features for playing, managing, sharing, delivering, and protecting digital media content from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows Digital Media. An attacker could exploit the...

Microsoft .NET, Microsoft .NET Framework, and Microsoft Visual Studio security vulnerabilities

Microsoft Visual Studio is a family of development tool suites and a fundamentally complete set of development tools, and Microsoft .NET Framework is a comprehensive and consistent programming model and a development platform for building applications for Windows, Windows Store, Windows Phone,...

KB5049983: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (January 2025)

The remote Windows host is missing security update 5049983. It is, therefore, affected by multiple vulnerabilities - Windows Reliable Multicast Transport Driver RMCAST Remote Code Execution Vulnerability CVE-2025-21307 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223...

KB5050681: Servicing stack update for Windows Server 2008 R2 SP1: January 14, 2025

None None...

KB5050115: Servicing stack update for Windows Server 2012 R2: January 14, 2025

None None...

KB5050682: Servicing stack update for Windows Server 2008 SP2: January 14, 2025

None None...

Microsoft Windows security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Smart Card. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions...

LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain Controllers

A proof-of-concept PoC exploit has been released for a now-patched security flaw impacting Windows Lightweight Directory Access Protocol LDAP that could trigger a denial-of-service DoS condition. The out-of-bounds reads vulnerability is tracked as CVE-2024-49113 CVSS score: 7.5. It was addressed ...

Attackers exploiting a patched FortiClient EMS vulnerability in the wild

Introduction During a recent incident response, Kaspersky's GERT team identified a set of TTPs and indicators linked to an attacker that infiltrated a company's networks by targeting a Fortinet vulnerability for which a patch was already available. This vulnerability is an improper filtering of S...