/ feedMicrosoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network. CISA required action: Apply mitigations in accordance with vendor in…
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.
Microsoft Windows Error Reporting (WER) contains a privilege escalation vulnerability due to the way it handles files, allowing for code execution in kernel mode. CISA required action: Apply updates per vendor instruc…
Microsoft Windows Common Log File System (CLFS) driver improperly handles objects in memory which can allow for privilege escalation. CISA required action: Apply updates per vendor instructions.
Microsoft Windows CryptoAPI (Crypt32.dll) contains a spoofing vulnerability in the way it validates Elliptic Curve Cryptography (ECC) certificates. An attacker could exploit the vulnerability by using a spoofed code-s…
Microsoft Windows Scripting Engine contains an unspecified vulnerability that allows for memory corruption. CISA required action: Apply updates per vendor instructions.
Microsoft Windows Print Spooler contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.
Microsoft Windows contains an unspecified vulnerability due to the way ws2ifsl.sys (Winsock) handles objects in memory, allowing for privilege escalation. Successful exploitation allows an attacker to execute code wit…
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against…
Microsoft Windows DNS Servers fail to properly handle requests, allowing an attacker to perform remote code execution in the context of the Local System Account. The vulnerability is also known under the moniker of SI…
Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform re…
Microsoft Windows contains a spoofing vulnerability when Windows incorrectly validates file signatures, allowing an attacker to bypass security features and load improperly signed files. CISA required action: Apply up…
Microsoft Windows Server Message Block 1.0 (SMBv1) contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.
Microsoft Windows Update Medic Service contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.
Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode. CISA required action: Apply updates per vend…
Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all syst…
Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all syst…
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.
Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application. CISA required action: Apply updates per vendo…
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.