CVE-2016-0089

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."...

CVE-2016-0167

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-0090

Summary: CVE-2016-0090 is a Windows Hyper-V Information Disclosure vulnerability. It affects Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10 where a guest OS user can cause the Hyper-V host to disclose memory contents via a crafted application. Root cause: inadequate validation of ...

CVE-2016-0153

CVE-2016-0153 is a Windows OLE remote code execution vulnerability in Ole32/OLE handling. The issue arises when Windows OLE fails to properly validate user input, allowing a crafted file or webpage/email to execute arbitrary code with the caller’s privileges. Affected platforms include Windows Vi...

Security Update for Adobe Flash Player for Windows Server 2012 R2 (KB3154132)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Security Update for Adobe Flash Player for Windows Server 2012 (KB3154132)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: April 12, 2016

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: April 12, 2016 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remo...

MS16-050: Security update for Adobe Flash Player: April 12, 2016

None None...

Microsoft Windows Hyper-V CVE-2016-0088 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...

KLA10788 Multiple vulnerabilities in Microsoft Graphics Component

Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...

MS16-040: Security Update for Microsoft XML Core Services (3148541)

The remote Windows host is affected by a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this vulnerability, by convincing a user to visit a specially-crafted...

PT-2016-1687 · Microsoft · Windows Server 2012 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 8.1, 10 Gold, 10 1511, Server 2012 Gold, Server 2012 R2, and RT 8.1 Description: The issue is related to the mismanagement of process tokens by the Client-Server Run-time Subsystem CSRSS in Microsoft Windows, allowi...

Microsoft XML Core Services CVE-2016-0147 Remote Code Execution Vulnerability

Description Microsoft XML Core Services is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10...

CVE-2012-6700

The decodesearch function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response...

DEBIAN-CVE-2012-6699

The decodesearch function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service out-of-bounds read via a crafted response...

CVE-2012-6698

The decodesearch function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service out-of-bounds write via a crafted response...

CVE-2012-6698

The decodesearch function in dhcp.c in dhcpcd 3.x allows remote DHCP servers to cause a denial of service out-of-bounds write via a crafted response...

CVE-2012-6700

The CVE-2012-6700 issue affects dhcpcd 3.x where the decode_search function in dhcp.c fails to free allocated memory, enabling a remote DHCP server to trigger a denial-of-service via a crafted response. Root cause: improper memory deallocation in decode_search. Impact: denial of service (availabi...

CVE-2012-6699

CVE-2012-6699 affects dhcpcd 3.x, where decode_search in dhcp.c can be triggered by a crafted DHCP response from a remote server, causing an out-of-bounds read and denial of service. Connected records confirm this vulnerability and link to advisories (e.g., Debian DSA-3534 and related OSV/NVD ent...

CVE-2012-6700

The decodesearch function in dhcp.c in dhcpcd 3.x does not properly free allocated memory, which allows remote DHCP servers to cause a denial of service via a crafted response...