May 14, 2024—KB5037778 (Monthly Rollup)

None None...

CVE-2024-3037 Arbitrary File Deletion in PaperCut NG/MF Web Print

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

Microsoft Windows Mobile Broadband Input Validation Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 1...

Microsoft Windows Hyper-V numerical error vulnerability

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. A numeric error vulnerability exists in Microsoft Windows Hyper-V. The following products and editions are affected:Windows Server 2019,Windows...

Microsoft Windows Routing and Remote Access Service security vulnerabilities

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

Microsoft Windows Mobile Broadband Input Validation Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 1...

Microsoft Windows Mobile Broadband Input Validation Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband. The following products and versions are affected:Windows 10 Version 21H2 for x64-based Systems,Window...

Microsoft Windows Hyper-V security vulnerabilities

Microsoft Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Windows Hyper-V. The following products and editions are affected:Windows Server 2019,Windows Server 2019 Server...

KB5037778: Windows Server 2012 Security Update (May 2024)

The remote Windows host is missing security update 5037778. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2024-30009, CVE-2024-30014, CVE-2024-30015, CVE-2024-30022, CVE-2024-30023, CVE-2024-30024,...

KB5037836: Windows Server 2008 Security Update (May 2024)

The remote Windows host is missing security update 5037836. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2024-30009, CVE-2024-30014, CVE-2024-30015, CVE-2024-30022, CVE-2024-30023, CVE-2024-30024,...

KB5037763: Windows 10 Version 1607 / Windows Server 2016 Security Update (May 2024)

The remote Windows host is missing security update 5037763. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Security Feature Bypass Vulnerability CVE-2024-30040 - Windows Common Log File System Driver Elevation of Privilege Vulnerability CVE-2024-29996,...

PT-2024-3600 · Microsoft · Windows Server +1

Name of the Vulnerable Software and Affected Versions: Windows Server affected versions not specified Description: The issue is related to insufficient access control in the Brokering File System BFS of Windows Server, allowing an attacker to elevate their privileges. This can impact the system,...

Microsoft Windows Cryptographic Services security vulnerabilities

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. The following products and versions are affected:Windows 10 Version 1607 for 32-bit Systems,Windows 10...

Microsoft Windows Routing and Remote Access Service security vulnerabilities

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

CVE-2024-3037: Improper Link Resolution Before File Access

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

Microsoft Windows Kernel Backlink Vulnerability

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows Kernel. The following products and editions are affected:Windows 10 Version 22H2 for 32-bit Systems,Windows 11 Version 23H2 for ARM64-based...

Microsoft Windows Mobile Broadband Input Validation Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 1...

Microsoft Windows Mobile Broadband Input Validation Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Mobile Broadband. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 1...

Microsoft Windows Routing and Remote Access Service security vulnerabilities

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

Microsoft Windows Hyper-V security vulnerabilities

Microsoft Hyper-V is an application from Microsoft USA. A system hypervisor virtualization technology that enables desktop virtualization. A security vulnerability exists in Microsoft Windows Hyper-V. The following products and editions are affected:Windows 11 Version 23H2 for ARM64-based...