Information disclosure

The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an information disclosure vulnerability due to the way...

Memory corruption

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka...

Privilege escalation

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity...

Remote code execution

Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how file copy destinations...

CVE-2018-0891

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Internet Explorer and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow information disclosure, due ...

CVE-2018-0815

CVE-2018-0815 affects the Windows GDI subsystem in Windows Server 2008 SP2, R2 SP1, and Windows 7 SP1. The vulnerability is an elevation of privilege caused by how objects are handled in memory. The entry notes it is distinct from CVE-2018-0816 and CVE-2018-0817. The provided data includes CVSS v...

CVE-2018-0942

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allow elevation of privilege, due to how Internet Explorer handles zone and integrity...

CVE-2018-0935

Technical details about CVE-2018-0935 are not provided in the supplied documents; no affected product/version or remediation is specified here. Monitor for updates in connected sources.

CVE-2018-0904

The Windows kernel in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows information disclosure vulnerability due to how memory addresses...

CVE-2018-0817

Technical details about CVE-2018-0817 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are specified here.

Description of the security update for vulnerabilities in Windows Server 2008 and WES09 and POSReady 2009: March 13, 2018

Description of the security update for vulnerabilities in Windows Server 2008 and WES09 and POSReady 2009: March 13, 2018 Summary An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An information disclosure...

Description of the security update for the Windows shell remote code execution vulnerability in Windows Server 2008: March 13, 2018

Description of the security update for the Windows shell remote code execution vulnerability in Windows Server 2008: March 13, 2018 Summary A remote code execution vulnerability exists when Windows Shell does not properly validate file copy destinations. To learn more about the vulnerability, go ...

Description of the security update for the Windows Hyper-V denial of service vulnerability in Windows Server 2008: March 13, 2018

Description of the security update for the Windows Hyper-V denial of service vulnerability in Windows Server 2008: March 13, 2018 Summary A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a...

Description of the security update for the Windows Installer elevation of privilege Vulnerability in Windows Server 2008 and WES09 and POSReady 2009: March 13, 2018

Description of the security update for the Windows Installer elevation of privilege Vulnerability in Windows Server 2008 and WES09 and POSReady 2009: March 13, 2018 Summary An elevation of privilege vulnerability exists in Windows Installer when the Installer fails to properly sanitize input,...

Description of the security update for the Hyper-V information disclosure vulnerability in Windows Server 2008: March 13, 2018

Description of the security update for the Hyper-V information disclosure vulnerability in Windows Server 2008: March 13, 2018 Summary An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a...

Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018

Description of the security update for the Windows Kernel vulnerabilities in Windows Server 2008: March 13, 2018 Summary An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve information that could lead to a Kernel Address Space Layout...

Description of the security update for the Windows remote assistance information disclosure vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: March 13, 2018

None None...

Microsoft Windows GDI Component CVE-2018-0816 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code within the context of the kernel privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

Advantech WebAccess Directory Traversal / Remote Code Execution

!/usr/bin/python2.7 Exploit Title: Advantech WebAccess 8.3 webvrpcs Directory Traversal RCE Vulnerability Date: 03-11-2018 Exploit Author: Chris Lyne @lynerc Vendor Homepage: www.advantech.com Software Link:...

Microsoft Windows Remote Assistance CVE-2018-0878 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Successful exploits may lead to other attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Window...