#windows

Windows Domain Name Service Remote Code Execution Vulnerability

Windows Error Reporting Service Elevation of Privilege Vulnerability

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability

Windows Enroll Engine Security Feature Bypass Vulnerability

Windows Boot Manager Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Network File System Information Disclosure Vulnerability

Windows Registry Elevation of Privilege Vulnerability

April is the third month in a row in which at least one of the vulnerabilities Microsoft released in a Patch Tuesday had been exploited in the wild prior to disclosure.

No access control for the OTP key   on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager Linux 2022.3.2.0 and prior versions allows non admin users to see OTP keys via the user interface.