article thumbnail

CVE-2020-1350: Wormable Remote Code Execution Vulnerability in Windows DNS Server Disclosed (SIGRed)

Tenable

Researchers disclose a 17-year old wormable flaw in Windows DNS servers. On July 14, Microsoft patched a critical vulnerability in Windows Domain Name System (DNS) Server as part of Patch Tuesday for July 2020. According to the researchers, the vulnerability has persisted in Windows DNS Server for 17 years. Background.

Windows 139
article thumbnail

Want to tackle technical debt? Sell it as business risk

CIO

A recent example is Windows Server 2012, which was sunsetted by Microsoft in October 2023. Windows Server 2012 is not alone. Despite this sunsetting, companies still run the platform, primarily because they want to defer investing or can’t afford to invest in the upgrade.

Budget 321
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

November 2023 Patch Tuesday

Ivanti

This month is also the first patch cycle for Server 2012 and 2012 R2 extended support (ESU). Products affected include Windows OS, Office 365,Net, ASP.NET, Azure DevOps Server, Visual Studio, Exchange Server and SQL Server. Microsoft Server 2012 and 2012 R2 officially reached their end-of-life in October.

Windows 121
article thumbnail

CVE-2021-34527: Microsoft Releases Out-of-Band Patch for PrintNightmare Vulnerability in Windows Print Spooler

Tenable

On July 6, Microsoft updated its advisory to announce the availability of out-of-band patches for a critical vulnerability in its Windows Print Spooler that researchers are calling PrintNightmare. This remote code execution (RCE) vulnerability affects all versions of Microsoft Windows. for 32-bit systems Windows 8.1 Description.

Windows 101
article thumbnail

SME Server Platform: Is Server 2012 Essentials the Right Choice?

Gitprime

Microsoft definitely kept the small business in mind in rolling out Server 2012. The platform works kind of like Small Business Server (SBS) in previous iterations of the platform, but now it's simply Windows Server 2012 Essentials.

article thumbnail

October 2023 Patch Tuesday

Ivanti

The lineup from Microsoft includes Windows, Office 365, SQL Server, Exchange Server and multiple Azure components. Along with the large lineup of fixes, October also marks the end-of-life for Windows Server 2012 and 2012 R2. The vulnerability has been resolved in the Windows OS and in Visual Studio,Net and ASP.Net.

article thumbnail

Microsoft’s October 2023 Patch Tuesday Addresses 103 CVEs (CVE-2023-36563, CVE-2023-41763)

Tenable

Critical CVE-2023-35349 | Microsoft Message Queuing Remote Code Execution Vulnerability CVE-2023-35349 is a RCE vulnerability in the Microsoft Message Queuing (MSMQ) component of Windows operating systems that was assigned a CVSSv3 score of 9.8 and rated critical. and rated as important.

Windows 114