article thumbnail

CVE-2020-1350: Wormable Remote Code Execution Vulnerability in Windows DNS Server Disclosed (SIGRed)

Tenable

Researchers disclose a 17-year old wormable flaw in Windows DNS servers. On July 14, Microsoft patched a critical vulnerability in Windows Domain Name System (DNS) Server as part of Patch Tuesday for July 2020. According to the researchers, the vulnerability has persisted in Windows DNS Server for 17 years. Background.

Windows 139
article thumbnail

CVE-2021-34527: Microsoft Releases Out-of-Band Patch for PrintNightmare Vulnerability in Windows Print Spooler

Tenable

On July 6, Microsoft updated its advisory to announce the availability of out-of-band patches for a critical vulnerability in its Windows Print Spooler that researchers are calling PrintNightmare. This remote code execution (RCE) vulnerability affects all versions of Microsoft Windows. Description. CVE-2021-34527. Affected Version.

Windows 101
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Tenable

This vulnerability was exploited in the wild according to Microsoft, though no details have been shared at the time this blog post was published. Researcher Florian Hauser of Code White GmbH published a two-part blog series in September 2022 investigating Skype for Business 2019. and rated critical. and rated as important.

Windows 114
article thumbnail

CVE-2022-37958: FAQ for Critical Microsoft SPNEGO NEGOEX Vulnerability

Tenable

CVE-2022-37958 is a remote code execution (RCE) vulnerability in the SPNEGO NEGOEX protocol of Windows operating systems, which supports authentication in applications. There are no reports of confirmed in-the-wild exploitation for CVE-2022-37958 at the time this blog post was released. What is CVE-2022-37958? What is SPNEGO NEGOEX?

Windows 98
article thumbnail

Local HTTPS for Optimizely, IIS, and Kestrel using certificates (Pt 2)

Perficient

In part 1 of this two-part blog series on securing your local development with HTTPS and Self-Signed Certificates, I described how to create a local self-signed certificate. Solution On Windows Server 2012, IIS supports Server Name Indication (SNI), which is a TLS extension to include a virtual domain as a part of SSL negotiation.

Windows 96
article thumbnail

August Patch Tuesday 2022

Ivanti

on Windows 8.1 Windows Operating System. Microsoft has resolved a remote code execution vulnerability in Microsoft Windows Support Diagnostic Tool (MSDT) ( CVE-2022-34713 ), which has been publicly disclosed and observed in attacks in the wild. Two are revisions to older.Net updates to include.Net 3.5 Affected products.

Windows 94
article thumbnail

July 2023 Patch Tuesday

Ivanti

One of the six exploited vulnerabilities released originally in May , and has been updated this month to address all versions of Microsoft Windows. The token could thenbe used to create a long-lived assertion using the Windows Hello for Business Key from the victim’s device. Six CVEs and one Advisory have confirmed exploits.