CVE-2017-8623

CVE-2017-8623 affects Microsoft Windows Hyper-V (Windows 10 versions 1607/1703 and Windows Server 2016). The flaw is due to Hyper-V Denial of Service arising from improper validation of input by a privileged user on a guest operating system, enabling a guest VM to cause the host to crash. The pra...

CVE-2017-8664

Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows...

CVE-2017-8623

Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability"...

CVE-2017-8664

CVE-2017-8664 affects Windows Hyper-V remote code execution when input from a privileged user on a guest OS is not properly validated. Connected sources (e.g., CNVD-2017-28010 and OpenVAS/Nessus listings) corroborate Hyper-V input-validation as the root cause and remote-code-execution impact, but...

Microsoft Patches Critical Windows Search Vulnerability

Microsoft patched more than two dozen remote code execution vulnerabilities today, many of them rated critical. One was a RCE bug that allowed an attacker to take complete control of a server or workstation via Windows Search. The fixes were part of Microsoft’s August Patch Tuesday update that...

Microsoft Patch Tuesday - August 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 48 new vulnerabilities with 25 of them rated critical, 21 rated important, and 2 rated moderate. These...

Windows Hyper-V Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system. An attacker who successfully exploited the vulnerability could cause the host server to crash. To exploit the...

Windows Hyper-V Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could...

August 8, 2017—KB4034672 (Security-only update)

None None...

PT-2017-18443

Name of the Vulnerable Software and Affected Versions Windows Hyper-V versions 10 1607 through 10 1703 Windows Server 2016 Description A denial of service issue arises when Windows Hyper-V fails to properly validate input from a privileged user on a guest operating system. This allows attackers t...

CVE-2017-8664: Improper Input Validation

Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows...

Microsoft Windows Hyper-V CVE-2017-8623 Remote Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Hyper-V Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...

PT-2017-2646

Name of the Vulnerable Software and Affected Versions Windows Hyper-V versions in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 Description The issue exists due to insufficient input validation from a privileged user i...

KLA11087 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

CVE-2017-8623: Improper Input Validation

Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability"...

VMSA-2017-0014:VMware NSX-V Edge updates address OSPF Protocol LSA DoS

VMSA-2017-0014 VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2017-0014 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware NSX-V Edge updates address OSPF Protocol LSA DoS VMware...

RedHat Update for ghostscript RHSA-2017:2180-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for curl RHSA-2017:2016-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Android Janus APK Signature bypass

This module exploits CVE-2017-13156 in Android to install a payload into another application. The payload APK will have the same signature and can be installed as an update, preserving the existing data. The vulnerability was fixed in the 5th December 2017 security patch, and was additionally fix...

Announcing the Windows Bounty Program

Windows 10 represents the best and newest in our strong commitment to security with world-class mitigations. One of Microsoft’s longstanding strategies toward improving software security involves investing in defensive technologies that make it difficult and costly for attackers to find, exploit...