Everything RedTeam Monitor has reported about Microsoft: 6 stories, newest first. Part of our Vulnerabilities coverage.
A takedown of the YAM Store marketplace removed CoGUI and Iron Man tools used to automate large-scale credential theft across multiple regions.
Microsoft releases updates for .NET Windows Desktop runtimes to address a high-severity vulnerability that allows remote attackers to disclose sensitive information.
An unauthenticated attacker can run code on Windows systems via a heap overflow in the iSCSI service, rated 9.8 by the National Vulnerability Database.
An unauthenticated attacker can run arbitrary code on Windows systems by exploiting a memory error in the iSCSI service, according to Microsoft.
A critical flaw in Windows Internet Information Services allows unauthorized remote code execution via a stack-based buffer overflow.
A heap overflow in Windows Error Reporting lets attackers run code remotely without credentials, earning a critical 9.8 CVSS score.