Continuous enterprise threat intelligence tracking active in-the-wild zero-days (CISA KEV), Microsoft Windows KB cumulative updates, MSRC security advisories, and CVE remediation.
Vulnerability in Microsoft Windows components (Microsoft Remote Registry Service Remote Code Execution Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows HMAC Key Derivation Elevation of Privilege Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows Storage Elevation of Privilege Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows Search Service Elevation of Privilege Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows User Interface Application Core Remote Code Execution Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows Authentication Elevation of Privilege Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows DWM Core Library Elevation of Privilege Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Windows Scripting Engine Memory Corruption Vulnerability). Remediation requires deploying cumulative update KB5032190 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow). Remediation requires deploying cumulative update KB5031354 or latest Patch Tuesday release.
Vulnerability in Microsoft Windows components (Hackerone: CVE-2023-38039 HTTP headers eat all memory). Remediation requires deploying cumulative update KB5031354 or latest Patch Tuesday release.
![[CISA KEV] BQE BillQuick Web Suite SQL Injection Vulnerability](/rss/assets/images/zeroday_alert_hero.jpg)
BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.
Zoho ManageEngine ADSelfService Plus contains an authentication bypass vulnerability affecting the REST API URLs which allow for remote code execution.
Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing privilege escalation.
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.
Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.
Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Google Chromium contains an information disclosure vulnerability within the core memory component that allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.