CVE-2017-0077

The kernel-mode drivers in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow a local authenticated attacker to execute a specially crafted application to obtain...

CVE-2017-0263

The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka “Win32k Elevation of...

Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2017-06619)

Microsoft Windows is the popular computer operating system. A local elevation of privilege vulnerability in the Windows Kernel's handling of memory objects exists in some versions of Windows, which when successfully exploited allows an attacker to run arbitrary code in kernel mode...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07445)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler in the NVIDIA Windows GPU Display Driver. An attacker could use this vulnerability ...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07280)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the kernel mode layer handler in the NVIDIA GPU Display Driver. The vulnerability can be exploited to cause a denial of service null pointer backreference or elevatio...

NVIDIA Windows GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07444)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A local elevation of privilege vulnerability exists in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver, which arises when the...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability (CNVD-2017-07447)

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A denial of service vulnerability exists in the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could exploit this vulnerability to...

Xen Hypervisor Multiple Vulnerabilities (XSA-213 - XSA-215)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the getuser function due to permissions for accessing MMIO ranges being checked only after accessing them. A...

NVIDIA Windows GPU Display Driver Denial of Service Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A denial of service vulnerability exists in the kernel mode layer handler for DxgkDdiEscape in the NVIDIA Windows GPU Display Driver. An attacker could exploit this vulnerability to...

NVIDIA Windows GPU Display Driver Competitive Conditions Vulnerability

NVIDIA Windows GPU Display Driver is a set of graphics processor GPU graphics card drivers for Windows from NVIDIA. A competitive condition vulnerability exists in the kernel mode layer nvlddmkm.sys in the NVIDIA Windows GPU Display Driver, which stems from a lack of synchronization between two...

NVIDIA GPU Display Driver Local Elevation of Privilege Vulnerability (CNVD-2017-07279)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the kernel mode layer handler in NVIDIA GPU Display Driver due to the program failing to properly validate user-submitted values during offset calculations. An attack...

NVIDIA GPU Display Driver Denial of Service Vulnerability (CNVD-2017-07277)

NVIDIA GPU Display Driver is a set of graphics processor GPU graphics card drivers from NVIDIA. A security vulnerability exists in the kernel mode layer handler for DxgDdiEscape in the NVIDIA GPU Display Driver. An attacker could exploit this vulnerability to cause a denial of service...

Microsoft Windows 'Win32k.sys' Multiple Vulnerabilities (KB4019204)

This host is missing an important security update according to Microsoft security update KB4019204. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Issues Patches for Another Four Zero-Day Vulnerabilities

As part of this month's Patch Tuesday, Microsoft has released security patches for a total of 55 vulnerabilities across its products, including fixes for four zero-day vulnerabilities being exploited in the wild. Just yesterday, Microsoft released an emergency out-of-band update separately to pat...

Design/Logic Flaw

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a call to certain function requiring lower IRQL can be made under raised IRQL which may lead to a denial of service...

CVE-2017-0349

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a pointer passed from a user to the driver is not correctly validated before it is dereferenced for a write operation, may lead to denial of service ...

CVE-2017-0355

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it may access paged memory while holding a spinlock, leading to a denial of service...

Null pointer dereference

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caused by invalid user input may lead to denial of service or potential escalation of privileges...

Null pointer dereference

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a NULL pointer dereference may lead to denial of service or potential escalation of privileges...

CVE-2017-0350

All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not correctly validated and used in an offset calculation may lead to denial of service or potential escalation of privileges...