Security
Headlines
HeadlinesLatestCVEs

Tag

#Windows Enroll Engine

CVE-2024-38069: Windows Enroll Engine Security Feature Bypass Vulnerability

**According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?** Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.

Microsoft Security Response Center
#vulnerability#windows#Windows Enroll Engine#Security Vulnerability
CVE-2023-28226: Windows Enroll Engine Security Feature Bypass Vulnerability

**According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?** The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a man-in-the-middle (MITM) attack.