privilege escalation

  1. VIDEO CVE-2021-24084 | Windows MDM Local Privilege Escalation Zero Day | Unpatched Since 2020

    :eek:
    • whoosh
    • Thread
    • cve-2021-24084 mdm privilege escalation security unpatched vulnerability windows zero day
    • Replies: 1
    • Forum: The Water Cooler

  2. VIDEO AA21-265A: Conti Ransomware

    Original release date: September 22, 2021 Summary Immediate Actions You Can Take Now to Protect Against Conti Ransomware • Use Link Removed. • Segment and segregate networks and functions. • Update your operating system and software. Note: This Alert uses the MITRE Adversarial Tactics...
    • News
    • Thread
    • attack techniques cisa conti credential access cybersecurity data protection exploit fbi incident response malware mitigation multi-factor authentication network security phishing privilege escalation ransomware security updates threat intelligence vulnerabilities windows
    • Replies: 0
    • Forum: Security Alerts

  3. AA21-008A: Detecting Post-Compromise Threat Activity in Microsoft Cloud Environments

    Original release date: January 8, 2021 Summary This Advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques. This Alert is a companion alert to Link Removed...
    • News
    • Thread
    • advanced persistent threats api access application security azure security cisa alerts cloud forensics cybersecurity data breach forensics tools hawk tool identity management malware analysis microsoft 365 mitigation strategies networking oauth tokens privilege escalation security protocols sparrow tool threat detection
    • Replies: 0
    • Forum: Security Alerts

  4. AA20-283A: APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations

    Original release date: October 9, 2020 Summary This joint cybersecurity advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. Note: the analysis in this joint...
    • News
    • Thread
    • active directory apt cisa cve-2020-1472 cybersecurity elections exploitation fortinet incident response legacy systems malware mitigation monitoring netlogon network security privilege escalation remote access vpn vulnerabilities windows
    • Replies: 0
    • Forum: Security Alerts

  5. Bountycraft at Nullcon 2017

    Security is a critical component of our products at Microsoft. A strong emphasis on security is a persistent factor throughout our entire development process. Microsoft is committed to designing and developing secure software. Testing is performed both internally and by working closely with the...
    • News
    • Thread
    • asia authentication azure bounty bug bounty china cloud services cross site scripting high impact india microsoft mitigations nullcon privilege escalation research community security security program vulnerabilities windows 10 workshop
    • Replies: 0
    • Forum: Security Alerts

  6. MS17-001 - Important: Security Update for Microsoft Edge (3214288) - Version: 1.0

    Severity Rating: Important Revision Note: V1.0 (January 10, 2017): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Edge. This vulnerability could allow elevation of privilege if a user views a specially crafted webpage using Microsoft Edge. An attacker who...
    • News
    • Thread
    • bulletin important january 2017 microsoft edge ms17-001 privilege escalation security update update vulnerability webpage
    • Replies: 0
    • Forum: Security Alerts

  7. MS16-149 - Important: Security Update for Microsoft Windows (3205655) - Version: 1.0

    Severity Rating: Important Revision Note: V1.0 (December 13, 2016): Bulletin published. Summary: This security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow elevation of privilege if a locally authenticated attacker runs a specially...
    • News
    • Thread
    • march 2016 microsoft ms16-149 patch management privilege escalation revision note security update vulnerability windows
    • Replies: 0
    • Forum: Security Alerts

  8. MS16-123 - Important: Security Update for Windows Kernel-Mode Drivers (3192892) - Version: 1.1

    Severity Rating: Important Revision Note: V1.1 (October 11, 2016): Bulletin revised to correct a CVE ID. CVE-2016-7191 has been changed to CVE-2016-7211. This is an informational change only. Customers who have successfully installed the updates do not need to take any further action. Summary...
    • News
    • Thread
    • cve cybersecurity drivers important malware microsoft windows ms16-123 october 2016 patch management privilege escalation revision note security update software system security system update technology threat mitigation update vulnerabilities windows kernel
    • Replies: 0
    • Forum: Security Alerts

  9. MS15-104 - Important: Vulnerabilities in Skype for Business Server and Lync Server Could...

    Severity Rating: Important Revision Note: V1.0 (September 8, 2015): Bulletin published. Summary: This security update resolves vulnerabilities in Skype for Business Server and Microsoft Lync Server. The most severe of these vulnerabilities could allow elevation of privilege if a user clicks a...
    • News
    • Thread
    • crafted url email security important instant messenger lync server microsoft ms15-104 patch management privilege escalation remote access security bulletin security update september 2015 skype for business threats update vulnerabilities web security
    • Replies: 0
    • Forum: Security Alerts

  10. TA15-195A: Adobe Flash and Microsoft Windows Vulnerabilities

    Original release date: July 14, 2015 | Last revised: July 15, 2015 Systems Affected Microsoft Windows systems with Adobe Flash Player installed. Overview Used in conjunction, recently disclosed vulnerabilities in Adobe Flash and Microsoft Windows may allow a remote attacker to execute...
    • News
    • Thread
    • adobe flash attack surface reduction cve-2015-2387 cve-2015-5119 cve-2015-5122 cve-2015-5123 cybersecurity defense techniques exploit exploit mitigation internet security memory corruption microsoft windows patch management privilege escalation security system privileges update user awareness vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  11. MS15-072 - Important: Vulnerability in Windows Graphics Component Could Allow Elevation of...

    Severity Rating: Important Revision Note: V1.0 (July 14, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if the Windows graphics component fails to properly process bitmap conversions. An...
    • News
    • Thread
    • administrative rights attack vector authenticated attack critical elevation of privilege graphics component july 2015 malware microsoft ms15-072 patch privilege escalation risk assessment security software update system security update vulnerability windows
    • Replies: 0
    • Forum: Security Alerts

  12. MS15-063 - Important: Vulnerability in Windows Kernel Could Allow Elevation of Privilege...

    Severity Rating: Important Revision Note: V1.0 (June 9, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an attacker places a malicious .dll file in a local directory on the machine or...
    • News
    • Thread
    • attacker malicious dll ms15-063 network share privilege escalation security bulletin update vulnerability windows kernel windows security
    • Replies: 0
    • Forum: Security Alerts

  13. MS15-049 - Important: Vulnerability in Silverlight Could Allow Elevation of Privilege...

    Severity Rating: Important Revision Note: V1.0 (May 12, 2015): Bulletin published. Summary: This security update resolves a vulnerability in Microsoft Silverlight. The vulnerability could allow elevation of privilege if a specially crafted Silverlight application is run on an affected system. To...
    • News
    • Thread
    • application attacker crafted application cybersecurity elevation of privilege important july 2015 microsoft ms15-049 patch privilege escalation revision note security silverlight system security technical documentation update user security vulnerability
    • Replies: 0
    • Forum: Security Alerts

  14. MS15-050: Vulnerability in Service Control Manager could allow elevation of privilege: May...

    Link Removed
    • News
    • Thread
    • may update ms15-050 patch management privilege escalation security service control manager vulnerability windows updates
    • Replies: 0
    • Forum: Knowledge Base (KB)

  15. TA14-323A: Microsoft Windows Kerberos KDC Remote Privilege Escalation Vulnerability

    Original release date: November 19, 2014 Systems Affected Microsoft Windows Vista, 7, 8, and 8.1 Microsoft Server 2003, Server 2008, Server 2008 R2, Server 2012, and Server 2012 R2 Overview A remote escalation of privilege vulnerability exists in implementations of Kerberos Key Distribution...
    • News
    • Thread
    • administrator attack bulletin cve defense domain controller domain user escalation impact kerberos microsoft privilege escalation remote access research security service tickets systems affected update vulnerability windows
    • Replies: 0
    • Forum: Security Alerts

  16. MS14-044 - Important: Vulnerabilities in SQL Server Could Allow Elevation of Privilege...

    Severity Rating: Important Revision Note: V1.0 (August 12, 2014): Bulletin published. Summary: This security update resolves two privately reported vulnerabilities in Microsoft SQL Server (one in SQL Server Master Data Services and the other in the SQL Server relational database management...
    • News
    • Thread
    • attacks bulletin client-side crafted websites data services database email security internet explorer malware management system microsoft phishing privilege escalation revision note security sql server update vulnerabilities web security
    • Replies: 0
    • Forum: Security Alerts

  17. MS13-103 - Important : Vulnerability in ASP.NET SignalR Could Allow Elevation of Privilege...

    Severity Rating: Important Revision Note: V1.0 (December 10, 2013): Bulletin published. Summary: This security update resolves a privately reported vulnerability in ASP.NET SignalR. The vulnerability could allow elevation of privilege if an attacker reflects specially crafted JavaScript back to...
    • News
    • Thread
    • asp.net javascript microsoft patch privilege escalation security signalr trustworthy update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  18. TA13-253A: Microsoft Updates for Multiple Vulnerabilities

    Original release date: September 10, 2013 Systems Affected Windows Operating System and Components Microsoft Server Software Microsoft Office Internet Explorer Overview Select Microsoft software products contain multiple vulnerabilities. Microsoft has released updates to address these...
    • News
    • Thread
    • automated updates denial of service home users information disclosure internet explorer microsoft office patch privilege escalation remote code execution security security bulletin september server system administration testing updates vulnerabilities windows wsus
    • Replies: 0
    • Forum: Security Alerts

  19. TA13-168A: Microsoft Updates for Multiple Vulnerabilities

    Original release date: June 17, 2013 | Last revised: June 18, 2013 Systems Affected Microsoft Windows Microsoft Internet Explorer Microsoft Office Overview Select Microsoft software products contain multiple vulnerabilities. Microsoft has released updates to address these...
    • News
    • Thread
    • administration automated update cybersecurity denial of service information disclosure internet explorer june 2013 microsoft office patch management privilege escalation remote access remote code execution security security bulletin software update system security updates vulnerabilities windows
    • Replies: 0
    • Forum: Security Alerts

  20. MS13-012 - Critical : Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution

    Severity Rating: Critical Revision Note: V1.0 (February 12, 2013): Bulletin published. Summary: This security update resolves publicly disclosed vulnerabilities in Microsoft Exchange Server. The most severe vulnerability is in Microsoft Exchange Server WebReady Document...
    • News
    • Thread
    • critical exchange server localservice microsoft outlook web app privilege escalation remote code execution security update vulnerabilities webready document viewing
    • Replies: 0
    • Forum: Security Alerts