Microsoft Windows Multiple Vulnerabilities (KB4516070)

This host is missing a critical security update according to Microsoft KB4516070 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

KLA11552 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, spoof user interface, execute arbitrary code, bypass security restrictions. Below is a complete list of...

VulnCheck KEV: CVE-2019-1214

Microsoft Windows Common Log File System CLFS driver improperly handles objects in memory which can allow for privilege escalation...

KLA11493 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...

PT-2018-11489

Name of the Vulnerable Software and Affected Versions Linux kernel version 4.15.0 Description The issue is related to the ntfs end buffer async read function in the ntfs.ko filesystem driver, which allows attackers to trigger a stack-based out-of-bounds write. This can cause a denial of service,...

KLA11241 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerabili...

February 13, 2018—KB4074587 (Security-only update)

February 13, 2018—KB4074587 Security-only update Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Security...

February 13, 2018—KB4074589 (Security-only update)

February 13, 2018—KB4074589 Security-only update Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Security updates to...

KLA11200 Multiple vulnerabilties in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

August 8, 2017—KB4034672 (Security-only update)

August 8, 2017—KB4034672 Security-only update Applies To Windows 8.1 Windows Server 2012 R2 Standard Improvements and fixes This security update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where a LUN...

KLA11087 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in...

KLA11846 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation of...

UBUNTU-CVE-2017-0358

Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation...

CVE-2016-3338: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

PT-2016-2940

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-11-05 Description A remote code execution issue could enable a remote attacker to execute arbitrary code when the user is navigating to ...

November 2016 Security Monthly Quality Rollup for Windows Server 2012

November 2016 Security Monthly Quality Rollup for Windows Server 2012 Summary This security updates includes improvements and fixes from update 3192406. To learn more about the non-security improvements and fixes in this update, see the October 18, 2016 — KB3192406 Preview of Monthly Rollup entry...

MS16-134: Security Update for Common Log File System Driver (3193706)

The remote Windows host is missing a security update. It is, therefore, affected by multiple elevation of privilege vulnerabilities in the Windows Common Log File System CLFS driver due to improper handling of objects in memory. A local attacker can exploit this, via a specially crafted...

PT-2013-3052 · Microsoft · Ntfs Kernel-Mode Driver +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 Gold Microsoft Windows 7 SP1 Description: The issue allows local users to gain privileges ...