Microsoft Windows Kernel Elevation of Privilege Vulnerability (KB4100480)

This host is missing a critical security update according to Microsoft KB4100480 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows - Desktop Bridge VFS Privilege Escalation Exploit

Exploit for windows platform in category local exploits Windows: Windows: Desktop Bridge VFS EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the VFS for desktop bridge applications can allow an application to create virtual files in...

Microsoft Windows - Desktop Bridge VFS Privilege Escalation

Windows: Windows: Desktop Bridge VFS EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the VFS for desktop bridge applications can allow an application to create virtual files in system folder which can result in EoP. Description: The...

Microsoft Windows - Desktop Bridge VFS Privilege Escalation

Microsoft Windows - Desktop Bridge VFS Privilege Escalation Windows: Windows: Desktop Bridge VFS EoP Platform: Windows 1709 not tested earlier version Class: Elevation of Privilege Summary: The handling of the VFS for desktop bridge applications can allow an application to create virtual files in...

Microsoft Desktop Bridge elevation of privilege vulnerability (CNVD-2018-05834)

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Desktop Bridge is one of the desktop application converters. A boost vulnerability exists in Microsoft Desktop Bridge, which stems from the program's failure to properly manage the...

Microsoft Windows kernel mode elevation of privilege vulnerability

Microsoft Windows is a series of operating systems released by Microsoft.Windows kernel mode driver is one of the kernel mode drivers. An elevation vulnerability exists in the Microsoft Windows kernel mode driver due to a failure of the program to properly handle objects in memory. The...

Microsoft Windows GDI elevation of privilege vulnerability (CNVD-2018-06285)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. The Windows Graphics Device Interface GDI is one of the application program interfaces, whose main task is to be responsible for the exchange of information between the system and the graphics program...

Microsoft Desktop Bridge VFS Elevation of Privilege Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. Desktop Bridge Virtual File System VFS is one of these virtual file systems. An elevation of privilege vulnerability exists in Microsoft Desktop Bridge VFS, which stems from the program...

Microsoft Windows GDI elevation of privilege vulnerability (CNVD-2018-07324)

Microsoft Windows Server 2008 SP2 and so on are a series of operating systems from Microsoft.Windows Graphics Device Interface GDI is one of the application program interfaces, whose main task is to be responsible for the exchange of information between the system and the graphics program, as wel...

Microsoft Windows GDI elevation of privilege vulnerability (CNVD-2018-07325)

Microsoft Windows Server 2008 SP2 and so on are a series of operating systems from Microsoft.Windows Graphics Device Interface GDI is one of the application program interfaces, whose main task is to be responsible for the exchange of information between the system and the graphics program, as wel...

CVE-2018-0977

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability"...

CVE-2018-0977

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability"...

CVE-2018-0902

The Cryptography Next Generation CNG kernel-mode driver cng.sys in Windows 10 Gold, 1511, 1607, 1703, and 1709. Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way the kernel-mode driver validates and enforces impersonation levels, ak...

CVE-2018-0902

The Cryptography Next Generation CNG kernel-mode driver cng.sys in Windows 10 Gold, 1511, 1607, 1703, and 1709. Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way the kernel-mode driver validates and enforces impersonation levels, ak...

Security feature bypass

The Cryptography Next Generation CNG kernel-mode driver cng.sys in Windows 10 Gold, 1511, 1607, 1703, and 1709. Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way the kernel-mode driver validates and enforces impersonation levels, ak...

CVE-2018-0977

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability"...

CVE-2018-0902

CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...

Windows Desktop Bridge Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or...

CNG Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Cryptography Next Generation CNG kernel-mode driver cng.sys when it fails to properly validate and enforce impersonation levels. An attacker could exploit this vulnerability by convincing a user to run a specially crafted application that is...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...