KLA11048 Multiple vulnerabilities in Windows Kernel

🗓️ 13 Jun 2017 00:00:00Reported by Kaspersky LabType

kaspersky🔗 threats.kaspersky.com👁 242 Views

Multiple vulnerabilities in Windows Kernel. Malicious users can exploit these vulnerabilities to obtain sensitive information and gain privileges. Improper handling of memory addresses can be exploited locally to gain privileges and obtain sensitive information

Reporter	Title	Published	Views	Family All 298
0day.today	Microsoft Windows - nt!NtQueryInformationTransaction (information class 1) Kernel Stack Memory Discl	22 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - nt!NtNotifyChangeDirectoryFile Kernel Pool Memory Disclosure Exploit	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - nt!NtQueryVolumeInformationFile (FileFsVolumeInformation) Kernel Pool Memory Dis	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - IOCTL_DISK_GET_DRIVE_LAYOUT_EX Kernel partmgr Pool Memory Disclosure Exploit	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - IOCTL_DISK_GET_DRIVE_GEOMETRY_EX Kernel partmgr Pool Memory Disclosure Exploit	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - IOCTL_VOLUME_GET_VOLUME_DISK_EXTENTS volmgr Pool Memory Disclosure Exploit	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - win32k!NtGdiEnumFonts Kernel Pool Memory Disclosure Exploit	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - 0x224000 IOCTL (WmiQueryAllData) Kernel WMIDataDevice Pool Memory Disclosure Exp	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - win32k!NtGdiGetOutlineTextMetricsInternalW Kernel Pool Memory Disclosure Exploit	21 Jun 201700:00	–	zdt
0day.today	Microsoft Windows - nt!KiDispatchException Kernel Stack Memory Disclosure in Exception Handling Expl	21 Jun 201700:00	–	zdt

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8478
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8479
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8474
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8476
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8477
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0300
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8481
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8480
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8482
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8485

22 Jan 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 27.2

CVSS 37.8

EPSS0.15731