Tenable

MAY 13, 2025

This vulnerability allows an unauthenticated attacker with Local Area Network (LAN) access to perform a spoofing attack. Microsoft patched 71 CVEs in its May 2025 Patch Tuesday release, with five rated critical and 66 rated as important. It was assigned a CVSSv3 score of 6.5 and is rated as Important.

Windows 102

Windows Azure LAN SMB 102

Tenable

FEBRUARY 13, 2024

Successful exploitation of this flaw would allow an attacker to relay a New Technology LAN Manager Version 2 (NTLMv2) hash against a vulnerable server. In order to exploit this flaw, an attacker would need to be authenticated with LAN-access and have a valid login for an Exchange user.

LAN 133

LAN Windows Azure Internet 133

Tenable

SEPTEMBER 12, 2023

Successful exploitation of this flaw would allow for the disclosure of New Technology LAN Manager (NTLM) hashes. Successful exploitation of these vulnerabilities requires an attacker to authenticate with LAN-access and have valid credentials for an Exchange user. Each of these vulnerabilities were given CVSSv3 scores of 8.0

LAN 128

LAN Windows 3D Azure 128

Tenable

AUGUST 13, 2024

Critical CVE-2024-38109 | Azure Health Bot Elevation of Privilege Vulnerability CVE-2024-38109 is a critical severity EoP vulnerability affecting Azure Health Bot. and is the result of a SSRF vulnerability in Azure Health Bot that can be abused to escalate privileges. This vulnerability received a CVSSv3 score of 9.1

IPv6 132

IPv6 Windows Azure LAN 132

Tenable

AUGUST 8, 2023

NET and Visual Studio Denial of Service Vulnerability CVE-2023-38180 is a Denial of Service (DoS) vulnerability in Microsoft Visual Studio,NET versions 6.0 In order to successfully exploit this flaw, the attacker would first need to have LAN access and valid credentials for an Exchange user. These were omitted from our totals.

Windows 98

Windows Software Review .Net Azure 98

Tenable

AUGUST 10, 2021

This month’s update includes patches for: NET Core & Visual Studio. Azure Sphere. Microsoft Azure Active Directory Connect. This is the second time in 2021 that Microsoft has patched less than 50 vulnerabilities in a Patch Tuesday release. Microsoft Dynamics. Microsoft Graphics Component. Microsoft Office.

Windows 101

Windows Azure LAN .Net 101

Tenable

JANUARY 10, 2023

This month’s update includes patches for: NET Core. Azure Service Fabric Container. Successful exploitation could lead to disclosure of New Technology LAN Manager (NTLM) hashes and NTLM relay attacks. Microsoft patched 98 CVEs in its January 2023 Patch Tuesday Release, with 11 rated as critical, and 87 rated as important.

Windows 101

Windows Software Review Operating System LAN 101