information disclosure

Microsoft’s ongoing commitment to security is highlighted by their recent identification of a vulnerability in the Local Security Authority (LSA) server, designated as CVE-2024-38122. This vulnerability is classified as an information disclosure issue and could potentially expose sensitive...

On August 13, 2024, Microsoft disclosed a significant security vulnerability known as CVE-2024-38118 affecting the Local Security Authority (LSA) Server. This vulnerability bears critical implications for users and administrators of Windows operating systems, leading to potential information...

On August 13, 2024, Microsoft issued an alert regarding a significant security vulnerability identified as CVE-2024-38167. This vulnerability notably affects .NET and Visual Studio, raising concerns among developers and organizations relying on these technologies. Overview of CVE-2024-38167...

On August 13, 2024, Microsoft disclosed a significant vulnerability in its Windows Bluetooth driver known as CVE-2024-38123. This vulnerability poses an information disclosure risk, potentially allowing attackers to obtain sensitive information through Bluetooth connections. Understanding this...

Microsoft's May 2024 Patch Tuesday updates have addressed critical vulnerabilities in .NET 6.0.31 (KB5039843) and .NET 7.0.20 (KB5039844), among other products. These updates are crucial for enhancing the security and stability of systems running these frameworks. .NET 6.0.31 (KB5039843) This...

Hi, I'm using Windows Server 2012 R2 Standard, and I have "MS12-073: Vulnerabilities in Microsoft IIS Could Allow Information Disclosure" vulnerability in my production server. When I search the internet for this, all I can see is that this is the issue for Vista, 2008, 7, and 2008 R2 , not...

Revision Note: V3.0 (April 14, 2015): Revised advisory to announce with the release of security update 3038314 on April 14, 2015 SSL 3.0 is disabled by default in Internet Explorer 11, and to add instructions for how to undo the workarounds. Summary: Microsoft is aware of detailed information...

Intel has revealed another major security vulnerability in its CPUs, similar to the Meltdown/Spectre vulnerabilities revealed earlier this year. It is understood that at this time there are no current exploits and further information can be found on the released Link Removed . AMD chips are...

Severity Rating: Important Revision Note: V1.0 (March 14, 2017): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow an Information Disclosure if Windows DirectShow opens specially crafted media content that is hosted on...

Severity Rating: Important Revision Note: V1.0 (March 14, 2017): Bulletin published. Summary: This security update resolves a vulnerability in Active Directory Federation Services (ADFS). The vulnerability could allow information disclosure if an attacker sends a specially crafted request to an...

Severity Rating: Important Revision Note: V1.0 (December 13, 2016): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow Information Disclosure when the Windows Common Log File System (CLFS) driver improperly handles...

Severity Rating: Important Revision Note: V1.0 (July 12, 2016): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft .NET Framework. The vulnerability could cause information disclosure if an attacker uploads a specially crafted XML file to web-based...

Severity Rating: Important Revision Note: V1.0 (June 14, 2016): Bulletin published. Summary: This security update resolves vulnerabilites in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if an attacker sends a specially crafted image URL in...

Severity Rating: Important Revision Note: V1.0 (May 10, 2016): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft .NET Framework. The vulnerability could cause information disclosure if an attacker injects unencrypted data into the target secure channel and...

Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Exchange Server. The most severe of the vulnerabilities could allow information disclosure if Outlook Web Access (OWA) fails to properly...

Link Removed

Severity Rating: Important Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow information disclosure if an attacker forces an encrypted Secure Socket Layer (SSL) 2.0 session with a...

Severity Rating: Important Revision Note: V1.0 (August 11, 2015): Bulletin published. Summary: This security update helps to resolve an information disclosure vulnerability in Microsoft Windows, Internet Explorer, and Microsoft Office. To exploit the vulnerability an attacker would first have to...

Severity Rating: Important Revision Note: V1.0 (May 12, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow information disclosure when Secure Channel (Schannel) allows the use of a weak Diffie-Hellman ephemeral...

Severity Rating: Important Revision Note: V1.0 (April 14, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft .NET Framework. The vulnerability could allow information disclosure if an attacker sends a specially crafted web request to an affected server...