Vulnerabilities
Microsoft warns of critical remote code execution flaw in Windows iSCSI
An unauthenticated attacker can run code on Windows systems via a heap overflow in the iSCSI service, rated 9.8 by the National Vulnerability Database.
Windows
Everything RedTeam Monitor has reported about Windows: 4 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Microsoft warns of critical iSCSI flaw allowing remote code execution
An unauthenticated attacker can run arbitrary code on Windows systems by exploiting a memory error in the iSCSI service, according to Microsoft.
Vulnerabilities
AES Key Flaw in NetEase Cloud Music Windows Lets Attackers Execute Arbitrary Local Binaries
A flaw in the Windows music app allows attackers to run local binaries by injecting content into the renderer process via an unvalidated API.
Vulnerabilities
Unauthenticated Attackers Can Run Windows Commands via Dromara Skyeye Flaw
A critical command injection bug in the Dromara Skyeye monitoring tool allows remote attackers to execute arbitrary PowerShell code on Windows servers without a login.