CVE-2016-7385

CVE-2016-7385 affects NVIDIA Windows GPU Display Driver nvlddmkm.sys in the kernel-mode DxgDdiEscape handler (ID 0x700010d). A user-supplied value is used as an index into an internal array without validation, enabling denial of service or possible privilege escalation. Affected driver versions: ...

CVE-2016-7387

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x600000D where a value passed from a user to the driver is used without...

CVE-2016-8808

CVE-2016-8808 affects NVIDIA Windows GPU Display Driver on Quadro, NVS, and GeForce Windows systems. The vulnerability lies in the kernel-mode driver nvlddmkm.sys in the DxgDdiEscape handler, where an input value from user space is used as an index into an internal array without proper validation...

CVE-2016-7387

This CVE affects NVIDIA Windows GPU Display Driver (nvlddmkm.sys) in Quadro/NVS/GeForce on Windows. The vulnerability arises in the DxgDdiEscape handler for ID 0x600000D where a user-supplied value is used as an internal array index without validation, enabling denial of service or potential priv...

CVE-2016-8806

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x5000027 where a pointer passed from an user to the driver is used without...

CVE-2016-7385

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x700010d where a value passed from a user to the driver is used without...

November 2016 Security Monthly Quality Rollup for Windows Server 2012

November 2016 Security Monthly Quality Rollup for Windows Server 2012 Summary This security updates includes improvements and fixes from update 3192406. To learn more about the non-security improvements and fixes in this update, see the October 18, 2016 — KB3192406 Preview of Monthly Rollup entry...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

November 2016 Security Only Quality Update for Windows Server 2012

November 2016 Security Only Quality Update for Windows Server 2012 Summary This security update resolves the following vulnerabilities in Windows Server 2012: MS16-142 Cumulative security update for Internet Explorer MS16-140 Security update for boot manager MS16-138 Security update to Microsoft...

November 2016 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2

November 2016 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security updates includes improvements and fixes from update 3192404. To learn more about the non-security improvements and fixes in this update, see the October 18, 2016 — KB3192404 Preview of...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Windows Bowser.sys Information Disclosure Vulnerability

An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could potentially disclose contents of System memory to which they should not have access. ...

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2

November 2016 Security Only Quality Update for Windows 8.1, and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-142 Cumulative security update for Internet Explorer: November 8, 2016 MS16-140 Security updat...

MS16-135: Description of the security update for Windows kernel-mode drivers: November 8, 2016

None None...

Cumulative update for Windows 10: November 8, 2016

None None...

MS16-135: Description of the security update for Windows kernel-mode drivers: November 8, 2016

None None...

Microsoft Win32k Elevation of Privilege (MS16-135: CVE-2016-7215)

An elevation of privilege vulnerability exists in the Windows kernel-mode driver. The vulnerability is due to the way the driver fails to properly handle objects in memory. An attacker can exploit this vulnerability by logging on to the system and running a specially crafted application...

November 8, 2016 — KB3198585 (OS Build 10240.17190)

None None...

MS16-135: Security Update for Windows Kernel-Mode Drivers (3199135)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the Windows kernel that allows a local attacker, via a specially crafted application, to bypass the Address Space Layout Randomization...