Remove Authentication Remove LAN Remove Technology Remove Windows
article thumbnail

Microsoft’s February 2024 Patch Tuesday Addresses 73 CVEs (CVE-2024-21351, CVE-2024-21412)

Tenable

Moderate CVE-2024-21351 | Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-21351 is a security feature bypass vulnerability in Windows SmartScreen. Since 2022, there have been five Windows SmartScreen vulnerabilities disclosed across Patch Tuesday. It was assigned a CVSSv3 score of 7.6 and is rated moderate.

LAN 126
article thumbnail

Microsoft’s September 2023 Patch Tuesday Addresses 61 CVEs (CVE-2023-36761)

Tenable

Successful exploitation of this flaw would allow for the disclosure of New Technology LAN Manager (NTLM) hashes. Successful exploitation of these vulnerabilities requires an attacker to authenticate with LAN-access and have valid credentials for an Exchange user. Both CVEs were assigned a CVSSv3 score of 7.8

LAN 121
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Microsoft’s August 2024 Patch Tuesday Addresses 88 CVEs

Tenable

and could be abused by an authenticated attacker to bypass server-side request forgery (SSRF) protections in order to leak potentially sensitive information. This vulnerability received a CVSSv3 score of 8.5 CVE-2024-38133 and CVE-2024-38153 received CVSSv3 scores of 7.8, while CVE-2024-38106 was scored as a 7.

IPv6 124
article thumbnail

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Tenable

Successful exploitation could lead to the disclosure of New Technology LAN Manager (NTLM) hashes. of the vulnerabilities patched this month, followed by elevation of privilege (EoP) vulnerabilities at 25.2%. of the vulnerabilities patched this month, followed by elevation of privilege (EoP) vulnerabilities at 25.2%. and rated critical.

Windows 116
article thumbnail

Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)

Tenable

Windows ALPC. Windows Ancillary Function Driver for WinSock. Windows Authentication Methods. Windows Backup Engine. Windows Bind Filter Driver. Windows BitLocker. Windows Boot Manager. Windows Credential Manager. Windows Cryptographic Services. Windows DWM Core Library.

Windows 100
article thumbnail

Microsoft’s May 2022 Patch Tuesday Addresses 73 CVEs (CVE-2022-26925)

Tenable

Microsoft Windows ALPC. Role: Windows Fax Service. Role: Windows Hyper-V. Tablet Windows User Interface. Windows Active Directory. Windows Address Book. Windows Authentication Methods. Windows BitLocker. Windows Cluster Shared Volume (CSV). Windows Kerberos. Windows Kernel.

Windows 100
article thumbnail

It's 2022. Why do you keep using SMB?

Ivanti

Let’s take a look back at this technology for some good background. communication protocol that was originally created by IBM and was used by Microsoft in its LAN Manager product during the mid-1990s. Windows 10?and?Windows Windows Server 2016. a key technology to support the business. Server Message Block?(SMB)

SMB 75