Page 32 of 610 results (0.025 seconds)

CVSS: 9.1EPSS: 0%CPEs: 3EXPL: 0

13 Aug 2024 — Windows Network Virtualization Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38160 • CWE-122: Heap-based Buffer Overflow •

CVSS: 9.1EPSS: 0%CPEs: 3EXPL: 0

13 Aug 2024 — Windows Network Virtualization Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38159 • CWE-416: Use After Free •

CVSS: 7.3EPSS: 0%CPEs: 13EXPL: 0

08 Aug 2024 — Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Backup, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security (VBS). However, an attacker attempting to exploit this vulnerability requires additional interaction by a privileged user to be successful. Microsoft is developing a security update to mitigate this threat, but it is not yet available. G... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38202 • CWE-284: Improper Access Control •

CVSS: 6.7EPSS: 0%CPEs: 16EXPL: 0

08 Aug 2024 — Summary: Microsoft was notified that an elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security (VBS) including a subset of Azure Virtual Machine SKUS; enabling an attacker with administrator privileges to replace current versions of Windows system files with outdated versions. By exploiting this vulnerability, an attacker could reintroduce previously mitigated vulnerabilities, circumvent some features of VBS, and exfiltrate data protected by VBS. For mo... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21302 • CWE-284: Improper Access Control •

CVSS: 6.5EPSS: 0%CPEs: 14EXPL: 0

09 Jul 2024 — Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Vulnerabilidad de denegación de servicio del controlador de Windows Layer-2 Bridge Network • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38105 • CWE-20: Improper Input Validation •

CVSS: 6.5EPSS: 0%CPEs: 14EXPL: 0

09 Jul 2024 — Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability Vulnerabilidad de denegación de servicio del controlador de Windows Layer-2 Bridge Network • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38101 • CWE-125: Out-of-bounds Read •

CVSS: 5.9EPSS: 0%CPEs: 8EXPL: 0

09 Jul 2024 — Windows Remote Desktop Licensing Service Denial of Service Vulnerability Vulnerabilidad de denegación de servicio del servicio Windows Remote Desktop Licensing • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38099 • CWE-287: Improper Authentication •

CVSS: 7.8EPSS: 0%CPEs: 24EXPL: 0

09 Jul 2024 — Windows Graphics Component Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38079 • CWE-122: Heap-based Buffer Overflow •

CVSS: 10.0EPSS: 0%CPEs: 6EXPL: 0

09 Jul 2024 — Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38076 • CWE-122: Heap-based Buffer Overflow •

CVSS: 10.0EPSS: 0%CPEs: 12EXPL: 0

09 Jul 2024 — Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38074 • CWE-191: Integer Underflow (Wrap or Wraparound) •