Windows Archives - Page 3 of 10

Apple releases security fixes for iCloud for Windows 13

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / November 11, 2021 / Apple, iCloud, Windows

Apple has released security fixes for iCloud for Windows 13. An attacker could exploit these vulnerabilities to take control of affected devices.

Apple releases security fixes for iCloud for Windows 13 Read More »

Microsoft September 2021 Security Updates includes fix for an RCE bug in MSHTML under active attack

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / September 15, 2021 / Azure, CVE-2021-26435, CVE-2021-36965, CVE-2021-40444, Office, OMI, Windows

Microsoft has released the September 2021 Security updates that includes patches for 66 vulnerabilities, 3 of those rated Critical. The updates also include a fix for one zero-day bug in MSHTML (CVE-2021-40444) exploited in the wild.

Microsoft September 2021 Security Updates includes fix for an RCE bug in MSHTML under active attack Read More »

Microsoft August 2021 Security Updates includes fixes for 7 Critical RCEs, 3 zero-day vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / August 11, 2021 / CVE-2021-26424, CVE-2021-26432, CVE-2021-34480, CVE-2021-34530, CVE-2021-34534, CVE-2021-34535, CVE-2021-36936, CVE-2021-36942, CVE-2021-36948, Microsoft, Print Spooler, Windows, Windows 10

Microsoft has released the August 2021 Security updates that includes patches for 49 vulnerabilities, 7 of those rated Critical. The updates also include fixes for 3 zero-day bugs exploited in the wild.

Microsoft August 2021 Security Updates includes fixes for 7 Critical RCEs, 3 zero-day vulnerabilities Read More »

Microsoft issues guidance on mitigating PetitPotam NTLM relay attacks

Cybersecurity Attacks, Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 28, 2021 / AD SC, Certificate Authority, Domain Controller, EPA, IIS, NTLM, PetitPotam, Relay Attack, SMB, Windows

Microsoft has issued guidance on mitigating PetitPotam NTLM relay attacks against Windows domain controllers or other Windows servers.

Microsoft issues guidance on mitigating PetitPotam NTLM relay attacks Read More »

Citrix patches privileged escalation vulnerability in Virtual Apps and Desktops

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / July 17, 2021 / Citrix, CVE-2021-2292, VDA, Virtual Apps and Desktops, Windows

Citrix has patched a vulnerability (CVE-2021-22928) in Virtual Apps and Desktops that could result in privilege escalation on a Windows Virtual Delivery Agent (VDA).

Citrix patches privileged escalation vulnerability in Virtual Apps and Desktops Read More »

Microsoft July 2021 Security Updates includes fixes for 13 Critical RCEs, 3 zero-day vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / July 14, 2021 / CVE-2021-33740, CVE-2021-34439, CVE-2021-34448, CVE-2021-34450, CVE-2021-34458, CVE-2021-34464, CVE-2021-34473, CVE-2021-34474, CVE-2021-34494, CVE-2021-34497, CVE-2021-34503, CVE-2021-34522, CVE-2021-34527, Dynamics, Exchange, Malware Protection Engine, Windows, Windows 10, Windows Server

Microsoft has released the July 2021 Security updates that includes patches for 117 vulnerabilities, 13 of those rated Critical. The updates also include fixes for 3 zero-day bugs exploited in the wild.

Microsoft July 2021 Security Updates includes fixes for 13 Critical RCEs, 3 zero-day vulnerabilities Read More »

Microsoft June 2021 Security Updates includes fixes for 6 zero-day vulnerabilities

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / June 9, 2021 / Cryptography, CVE-2021-31959, CVE-2021-31963, CVE-2021-31967, CVE-2021-31985, CVE-2021-33742, DWM, MSHTML, NTFS, RCE, SharePoint, VP9, Windows, Windows 10

Microsoft has released the June 2021 Security updates that includes patches for 50 vulnerabilities, 5 of those rated Critical. The updates also include fixes for 6 zero-day flaws exploited in the wild.

Microsoft June 2021 Security Updates includes fixes for 6 zero-day vulnerabilities Read More »

PoC exploit code released for Windows wormable RCE (CVE-2021-31166)

Security Updates & Patches, Vulnerabilities & Exploits, Zero-days / Frank Crast / May 21, 2021 / CVE-2021-31166, POC, RCE, Windows

A security researcher has published proof-of-concept (PoC) exploit code for a Windows HTTP protocol stack remote code execution (RCE) vulnerability CVE-2021-31166.

PoC exploit code released for Windows wormable RCE (CVE-2021-31166) Read More »

Microsoft March 2021 Security Updates, fixes for 14 Critical bugs

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / March 10, 2021 / Azure, CVE-2021-26411, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-26897, CVE-2021-27065, DNS, DNS Server, Exchange, Git, HEVC, Hyper-V, Office, OpenType, Visual Studio, Windows

Microsoft has released the March 2021 Security updates that includes patches for 89 vulnerabilities, 14 of those rated Critical. The fixes follow just after the tech giant released emergency patched for Exchange flaws being exploited in the wild.

Microsoft March 2021 Security Updates, fixes for 14 Critical bugs Read More »

Microsoft launches Phase 2 fix for Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472)

Security Updates & Patches, Vulnerabilities & Exploits / Frank Crast / February 11, 2021 / CVE-2020-1472, Domain Controller, Microsoft, MS-NRPC, Windows

Microsoft has announced the launch of Phase 2 permanent fix for a Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472) that was patched last August.

Microsoft launches Phase 2 fix for Netlogon Elevation of Privilege Vulnerability (CVE-2020-1472) Read More »