Privilege escalation

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

Privilege escalation

The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Windows Transaction Manager Elevation of Privilege Vulnerability."...

CVE-2016-3376

CVE-2016-3376 is a local privilege escalation in the Windows kernel Win32k subsystem affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7, 8.1, Server 2012, Windows RT 8.1, and Windows 10 releases 1511/1607). The flaw involves the kernel-mode drivers mishandling objects i...

CVE-2016-3341

CVE-2016-3341 affects Windows kernel‑mode drivers in Transaction Manager (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607) and is described as a local elevation of privilege via a crafted application. The root cause involves improper handling of memory objects in the Ker...

EUVD-2016-4300

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-7185

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3266

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3376

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2016-7185

CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...

CVE-2016-3341

The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Windows Transaction Manager Elevation of Privilege Vulnerability."...

Microsoft Windows Kernel Win32k Privilege Extraction Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Graphics is one of the graphics components. A privilege extraction vulnerability exists in the Microsoft Windows kernel that stems from a program's failure to properly handle objects in memory. An...

Microsoft Windows Kernel 'Win32k.sys' Local Privilege Mobilization Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft USA. win32k.sys is the kernel part of the Windows subsystem, a kernel-mode device driver, which contains a window manager, a background control window and screen output management. An elevation of privilege vulnerability...

Microsoft Windows Graphics Remote Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the Windows Graphics Graphics component handling memory objects. This vulnerability could be exploited by an attacker to run arbitrary code in kernel mode...

Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2016-09367)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists when the Microsoft kernel mode driver does not properly handle memory objects. This could allow an attacker to run arbitrary code in kernel mode...

MS16-123: Security Update for Windows Kernel-Mode Drivers (3192892)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to improper handling of objects in memory. A local attacker can exploit these, via a special...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3192892)

This host is missing an important security update according to Microsoft Bulletin MS16-123. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Multiple Vulnerabilities (3192884)

This host is missing a critical security update according to Microsoft Bulletin MS16-120. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

None None...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...