23512 matches found
CVE-2024-46796 smb: client: fix double put of @cfile in smb2_set_path_size()
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double put of @cfile in smb2setpathsize If smb2compoundop is called with a valid @cfile and returned -EINVAL, we need to call cifsgetwritablepath before retrying it as the reference of @cfile was already dropped ...
Microsoft Windows TOCTOU Local Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Kernel Time of Check Time of Use LPE in AuthzBasepCopyoutInternalSecurityAttributes', 'Description' = %q CVE-2024-30088 is a Windows Kern...
Microsoft Windows Multiple Vulnerabilities (KB5043050)
This host is missing an important security update according to Microsoft KB5043050 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
2024-09 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5042880)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
2024-09 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5043050)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2024-09 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5043051)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
September 10, 2024—KB5043087 (Security-only update)
None None...
September 10, 2024—KB5043092 (Security-only update)
None None...
September 10, 2024—KB5043135 (Monthly Rollup)
None None...
September 10, 2024—KB5043125 (Monthly Rollup)
None None...
KB5043049: Cumulative security update for Internet Explorer: September 10, 2024
None None...
September 10, 2024—KB5043138 (Monthly Rollup)
None None...
Microsoft Win32k security vulnerability
Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32k. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows 11 version 21H2 for x64-based...
KB5042881: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2024)
The remote Windows host is missing security update 5042881 or hotpatch update 5042880. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Desktop Licensing Service Spoofing Vulnerability CVE-2024-43455 - Windows...
Microsoft KernelStream has a vulnerability related to input validation errors.
Microsoft KernelStream is a service from Microsoft Corporation USA that is used to support streaming data in the kernel. An input validation error vulnerability exists in Microsoft KernelStream. An attacker could exploit the vulnerability to elevate privileges. The following products and versions...
Microsoft Windows security vulnerabilities
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are affected:Windows Server 2019,Windo...
Microsoft Windows security vulnerabilities
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected:Windows 10...
Microsoft Windows Input Validation Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to cause a denial of service. The following products and versions are...