Windows Archives - Page 2 of 10

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Trend Micro, Sophos, Dell, QNAP)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / April 2, 2022 / CVE-2018-10561, CVE-2018-10562, CVE-2021-21551, CVE-2021-28799, CVE-2021-34484, CVE-2022-1040, CVE-2022-26871, Dasan, Dell, QNAP, Sophos, Trend Micro, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added 7 vulnerabilities to its Known Exploited Vulnerabilities Catalog. Recent additions include vulnerabilities affecting Trend Micro, Sophos, Windows, QNAP, Dell, and Dasan products.

CISA adds 7 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include Trend Micro, Sophos, Dell, QNAP) Read More »

CISA adds 66 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include WatchGuard and Mitel)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 26, 2022 / CVE-2022-21999, CVE-2022-26143, CVE-2022-26318, Mitel, WatchGuard, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added 66 vulnerabilities to its Known Exploited Vulnerabilities Catalog. Recent additions include WatchGuard, Mitel, Windows and many other product vulnerabilities.

CISA adds 66 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include WatchGuard and Mitel) Read More »

CISA adds 15 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include SonicOS and Windows UPnP)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 19, 2022 / CVE-2019-1405, CVE-2020-5135, SonicOS, SonicWall, UPnP, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added 15 vulnerabilities to its Known Exploited Vulnerabilities Catalog. Recent additions include SonicWall SonicOS, Windows UPnP, and other Microsoft Windows vulnerabilities.

CISA adds 15 vulnerabilities to Known Exploited Vulnerabilities Catalog (to include SonicOS and Windows UPnP) Read More »

CISA adds 16 new vulnerabilities to Known Exploited Vulnerabilities Catalog

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / February 11, 2022 / CISA, CVE-2018-1000861, CVE-2020-0796, CVE-2021-36934, CVE-2022-22620, SAM, SeriousSAM, SMBv1, Watchbog, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added 16 vulnerabilities to its Known Exploited Vulnerabilities Catalog. The issues include recently patched Apple WebKit zero-day, SeriousSAM, SMBv3, and Jenkins vulnerabilities among others.

CISA adds 16 new vulnerabilities to Known Exploited Vulnerabilities Catalog Read More »

Microsoft February 2022 Security Updates (fixes for 16 RCEs, 1 zero-day)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / February 9, 2022 / Azure, CVE-2013-3900, HEVC, Microsoft Dynamics, Microsoft Office, RCE, SharePoint, Windows

It was a relatively light Patch Tuesday for Microsoft this month. The Microsoft February 2022 Security Updates includes patches and advisories for 50 vulnerabilities, 16 of those remote code execution flaws and one zero-day (CVE-2022-21989). None are rated Critical.

Microsoft February 2022 Security Updates (fixes for 16 RCEs, 1 zero-day) Read More »

CISA adds another vulnerability (CVE-2022-21882) to Known Exploited Vulnerabilities Catalog

Vulnerabilities & Exploits / Frank Crast / February 6, 2022 / CISA, CVE-2022-21882, Exploit, Win32K, Windows

The Cybersecurity and Infrastructure Security Agency (CISA) has added another vulnerability (a Microsoft Win32k vulnerability CVE-2022-21882) to its Known Exploited Vulnerabilities Catalog.

CISA adds another vulnerability (CVE-2022-21882) to Known Exploited Vulnerabilities Catalog Read More »

NotLegit: 4-year old Microsoft Azure App Service 0-day vulnerability affects source code repositories

Application Security, Cybersecurity Attacks, Vulnerabilities & Exploits / Frank Crast / December 29, 2021 / 0-day, App Service, Azure, GitHub, IIS, Local Git, Microsoft, Node, PHP, Python, Ruby, Windows

A four-year old Microsoft Azure App Service 0-day vulnerability dubbed “NotLegit” affects hundreds of source code repositories.

NotLegit: 4-year old Microsoft Azure App Service 0-day vulnerability affects source code repositories Read More »

Microsoft December 2021 Security Updates includes fix for zero-day exploit used to spread Emotet malware

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / December 15, 2021 / CVE-2021-42310, CVE-2021-43215, CVE-2021-43217, CVE-2021-43233, CVE-2021-43890, CVE-2021-43899, CVE-2021-43905, CVE-2021-43907, Emotet, Windows

Microsoft has released the December 2021 Security Updates that includes patches for 73 vulnerabilities, 7 of those rated Critical. The updates also address one vulnerability being actively exploited in the wild and used to spread Emotet malware.

Microsoft December 2021 Security Updates includes fix for zero-day exploit used to spread Emotet malware Read More »

Windows Mobile Device Management 0-day vulnerability could lead to local privilege escalation

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / November 30, 2021 / 0-day, CVE-2021-24084, HiveNightmare, mobile, SeriousSAM, Windows

A security researcher has discovered a zero-day vulnerability CVE-2021-24084 in Windows Mobile Device Management that could allow information disclosure and local privilege escalation (LPE).

Windows Mobile Device Management 0-day vulnerability could lead to local privilege escalation Read More »

Attackers exploit Windows Installer zero-day vulnerability (CVE-2021-41379)

Malware, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 24, 2021 / CVE-2021-41379, Group Policy, Installer, Windows

Bad actors have been exploiting a previously patched Windows Installer zero-day privileged escalation vulnerability CVE-2021-41379.

Attackers exploit Windows Installer zero-day vulnerability (CVE-2021-41379) Read More »