Tenable

FEBRUARY 13, 2024

Since 2022, there have been five Windows SmartScreen vulnerabilities disclosed across Patch Tuesday. CVE Description CVSSv3 Severity Patch Tuesday CVE-2022-44698 Windows SmartScreen Security Feature Bypass Vulnerability 5.4 Moderate December 2022 CVE-2023-24880 Windows SmartScreen Security Feature Bypass Vulnerability 4.4

LAN 125

LAN Windows Azure Internet 125

Tenable

SEPTEMBER 12, 2023

Successful exploitation of this flaw would allow for the disclosure of New Technology LAN Manager (NTLM) hashes. Successful exploitation of these vulnerabilities requires an attacker to authenticate with LAN-access and have valid credentials for an Exchange user. Each of these vulnerabilities were given CVSSv3 scores of 8.0

LAN 120

LAN Windows 3D Azure 120

Tenable

JANUARY 10, 2023

Azure Service Fabric Container. Windows Authentication Methods. This continues a trend observed last year, where the NSA disclosed three vulnerabilities in Print Spooler, beginning with CVE-2022-29104 and CVE-2022-29132 in May 2022 and leading to CVE-2022-38028 in O​​ctober 2022. 3D Builder.

Windows 99

Windows Software Review Operating System LAN 99

Tenable

OCTOBER 10, 2023

Successful exploitation could lead to the disclosure of New Technology LAN Manager (NTLM) hashes. Researcher Florian Hauser of Code White GmbH published a two-part blog series in September 2022 investigating Skype for Business 2019. Details about this flaw are included in our analysis below. and is rated as important.

Windows 115

Windows Software Review Azure Systems Review 115

Ivanti

OCTOBER 25, 2022

Bandwidth utilization in the Agent Policy manages network performance by allowing users to set the percentage of WAN/LAN bandwidth to be used when downloading patch content packages from Ivanti Neurons. Enabled default domains and remote authentication. Enabled default domains and remote authentication. iOS/iPadOS 16/macOS 13.

Software Review 40

Software Review Windows Systems Review Development Team Review 40