Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:microsoft:windows_7:-:Sp1:*:*:*:*:*:*

4 briefs RSS
critical threat

Active Exploitation of Windows IKE Extension RCE

CVE-2022-34721 is a critical remote code execution vulnerability in the Windows Internet Key Exchange (IKE) extension, which is being actively exploited in the wild to gain unauthorized code execution.

exploited Windows vulnerability remote-code-execution
2t 1c
high advisory

Suspicious Microsoft Office Child Process Activity

Microsoft Office applications are frequently abused to spawn system processes to execute malicious code, download payloads, or facilitate privilege escalation.

Microsoft Office
1r 3t 1c
high advisory

Potential Privilege Escalation via InstallerFileTakeOver (CVE-2021-41379)

This rule detects potential exploitation of the InstallerTakeOver vulnerability (CVE-2021-41379), where successful exploitation allows an unprivileged user to escalate privileges to SYSTEM.

Edge privilege-escalation cve-2021-41379 windows
2r 1t 1c
high advisory

Detection of Vulnerable Driver Loading on Windows Systems

Detection of loading known vulnerable Windows drivers that may indicate persistence or privilege escalation attempts via exploitation.

vulnerable-driver privilege-escalation persistence windows
2r 1t 2c updated