Search Results | AttackerKB

1,721 Total Results

Displaying 1-10 of 1,721

Attacker Value

Very High

CVE-2021-34527 "PrintNightmare"

Disclosure Date: July 02, 2021 (last updated November 28, 2024)

A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. UPDATE July 7, 2021: The security update for Windows Server 2012, Windows Server 2016 and Windows 10, Version 1607 have been released. Please see the Security Updates table for the applicable update for your system. We recommend that you install these updates immediately. If you are unable to install these updates, see the FAQ and Workaround sections in this CVE for information on how to help protect your system from this vulnerability. In addition to installing the updates, in order to secure your system, you must confirm that the following registry settings are set to 0 (zero) or are not defined (Note</strong…

Attacker Value

High

CVE-2021-41379

Disclosure Date: November 10, 2021 (last updated November 28, 2024)

Windows Installer Elevation of Privilege Vulnerability

Attacker Value

High

CVE-2022-30190

Disclosure Date: June 01, 2022 (last updated January 03, 2025)

A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs, view, change, or delete data, or create new accounts in the context allowed by the user’s rights. Please see the MSRC Blog Entry for important information about steps you can take to protect your system from this vulnerability.