Lucene search
+L

2944 matches found

CNNVD
CNNVD
added 2021/09/14 12:0 a.m.10 views

Microsoft Windows Update Assistant 权限许可和访问控制问题漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Update Assistant due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

7.8CVSS7.1AI score0.00829EPSS
SaveExploits0References7
Microsoft KB
Microsoft KB
added 2021/09/14 12:0 a.m.31 views

September 14, 2021 Servicing Stack Update (KB5005942)

None None...

5.8AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2021/09/14 12:0 a.m.15 views

September 14, 2021 Security Update (KB5005567)

None None...

5.8AI score
SaveExploits0
OSV
OSV
added 2021/09/08 3:15 p.m.3 views

CVE-2021-1857

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processi...

6.5CVSS6.5AI score0.01224EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2021/09/08 12:0 a.m.11 views

The vulnerability of the Windows Update Assistant’s software for handling updates leads to a lack of access control, allowing attackers to escalate their privileges.

The vulnerability of the Windows Update Assistant software relates to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

7.3CVSS7.2AI score0.01729EPSS
SaveExploits0References6
Kaspersky
Kaspersky
added 2021/09/07 12:0 a.m.224 views

KLA12278 RCE vulnerability in Microsoft Products (ESU)

A remote code execution vulnerability was found in Microsoft Producy Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-40444 Exploitation Public exploits exist for this vulnerability. Malware exists for this...

8.8CVSS8.5AI score0.97242EPSS
SaveExploits38References15
Microsoft KB
Microsoft KB
added 2021/08/26 12:0 a.m.7 views

August 26, 2021—KB5005103 (OS Build 18363.1766) Preview

None None...

6.1AI score
SaveExploits0
NVD
NVD
added 2021/08/12 6:15 p.m.28 views

CVE-2021-36948

Windows Update Medic Service Elevation of Privilege Vulnerability...

7.8CVSS0.1991EPSS
SaveExploits0References2
OSV
OSV
added 2021/08/12 6:15 p.m.6 views

CVE-2021-36948

Windows Update Medic Service Elevation of Privilege Vulnerability...

7.8CVSS7.2AI score0.1991EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/08/12 6:15 p.m.5 views

CVE-2021-36945

Windows 10 Update Assistant Elevation of Privilege Vulnerability...

7.8CVSS7AI score0.01729EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/08/12 6:15 p.m.35 views

Privilege escalation

Windows Update Medic Service Elevation of Privilege Vulnerability...

4.6CVSS8.7AI score0.1991EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/08/12 6:12 p.m.53 views

CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability

...

7.8CVSS8.8AI score0.1991EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/08/12 6:12 p.m.12 views

CVE-2021-36948 Windows Update Medic Service Elevation of Privilege Vulnerability

...

7.8CVSS7.2AI score0.1991EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:0 a.m.11 views

The vulnerability of the Windows Update Medic Service component in Windows operating systems arises from operations that go beyond the buffer limits in memory, allowing attackers to execute arbitrary code with elevated privileges.

The vulnerability of the Windows Update Medic Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with elevated privileges...

7.8CVSS8.1AI score0.1991EPSS
SaveExploits0References4
Kaspersky
Kaspersky
added 2021/08/11 12:0 a.m.49 views

KLA12282 RCE vulnerability in Microsoft Products (ESU)

A remote code execution vulnerability was found in Microsoft Products Extended Security Update. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-36958 Related products Windows-Print-Spooler CVE list CVE-2021-36958 unknown KB list 5005633 50056...

9.3CVSS8.9AI score0.31729EPSS
SaveExploits0References7
Krebs on Security
Krebs on Security
added 2021/08/10 9:12 p.m.246 views

Microsoft Patch Tuesday, August 2021 Edition

Microsoft today released software updates to plug at least 44 security vulnerabilities in its Windows operating systems and related products. The software giant warned that attackers already are pouncing on one of the flaws, which ironically enough involves an easy-to-exploit bug in the software...

7.5CVSS0.3AI score0.58898EPSS
SaveExploits1
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.554 views

August 10, 2021—KB5005030 (OS Build 17763.2114)

None None...

9.9CVSS6.8AI score0.67252EPSS
SaveExploits19
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.118 views

August 10, 2021—KB5005040 (OS Build 10240.19022) - EXPIRED

None None...

9.9CVSS6.8AI score0.58898EPSS
SaveExploits3
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.112 views

August 10, 2021—KB5005088 (Monthly Rollup)

None None...

9.9CVSS6.8AI score0.65543EPSS
SaveExploits7
Microsoft KB
Microsoft KB
added 2021/08/10 7:0 a.m.251 views

August 10, 2021—KB5005033 (OS Builds 19041.1165, 19042.1165, and 19043.1165)

None None...

9.9CVSS6.9AI score0.58898EPSS
SaveExploits1
Rows per page
Query Builder