Thursday, November 28, 2024

Windows Server 2012 Mark of the Web Vulnerability (0day) - and Free Micropatches for it

›
Our researchers discovered a previously unknown vulnerability on Windows Server 2012 and Server 2012 R2 that allows an attacker to bypass a ...

Micropatches for "LNK Stomping" Windows Mark of the Web Security Feature Bypass (CVE-2024-38217)

›
  September 2024 Windows Updates brought a patch for CVE-2024-38217 a.k.a. "LNK Stomping", a security bypass vulnerability allowi...
Monday, November 18, 2024

Fixing a Bunch of Scripting Engine Vulnerabilities by Disabling Just-In-Time Compiler (CVE-2024-38178)

›
  August 2024 Windows Updates brought a patch for CVE-2024-38178 , a remotely exploitable memory corruption issue in "legacy" Scri...
Tuesday, November 12, 2024

Micropatches Released for Remote Registry Service Elevation of Privilege Vulnerability (CVE-2024-43532)

›
  October 2024 Windows Updates brought a patch for CVE-2024-43532 , a vulnerability in Windows Remote Registry Service that could allow an...
Tuesday, October 29, 2024

We Patched CVE-2024-38030, Found Another Windows Themes Spoofing Vulnerability (0day)

›
TL;DR: While patching CVE-2024-38030, we found another similar issue, reported it to Microsoft and created free micropatches for 0patch user...
Wednesday, October 2, 2024

Micropatches for Windows Installer Elevation of Privilege Vulnerability (CVE-2024-38014)

›
  September 2024 Windows Updates brought a patch for CVE-2024-38014 , a privilege escalation vulnerability in Windows Installer that could ...
Thursday, September 19, 2024

Micropatches for "MadLicense" Windows Remote Desktop Licensing Service Remote Code Execution (CVE-2024-38077)

›
  July 2024 Windows Updates brought a patch for CVE-2024-38077 , a memory corruption vulnerability in Remote Desktop Licensing Service that...