CVE-2016-3249: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-3256: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."...

CVE-2016-3250: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2016-3251: Exposure of Sensitive Information to an Unauthorized Actor

The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafte...

CVE-2016-3286: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Microsoft Kernel-Mode Drivers Multiple Privilege Elevation Vulnerabilities (3171481)

This host is missing an important security update according to Microsoft Bulletin MS16-090. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Secure Kernel Mode Information Disclosure Vulnerability (3170050)

This host is missing an important security update according to Microsoft Bulletin MS16-089. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-04746)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An elevation of privilege vulnerability exists in the kernel-mode driver in Microsoft Windows Server 2012 and Windows 10...

CVE-2016-3252: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Windows Secure Kernel Mode Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Secure Kernel Mode improperly handles objects in memory. A locally authenticated attacker who successfully exploited this vulnerability could be able to read sensitive information on the target system. To exploit this vulnerability, an...

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

PT-2016-2504

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue ...

PT-2016-2506

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in a Windows operating system kernel-mode driver, which can be exploited by an attacker to elevate privileges using a specially crafted...

PT-2016-2500

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511 Description The issue is related to a lack of protection for system data, allowing a local attacker to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information using a...

PT-2016-2479

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to a lack of access control in Microsoft Windows kernel-mode drivers, which can be exploited by an attacker to elevate their privileges using a specially crafte...

PT-2016-2503

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in a Windows operating system kernel-mode driver, which can be exploited by an attacker to elevate their privileges using a specially craft...

MS16-090: Security Update for Windows Kernel-Mode Drivers (3171481)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the kernel-mode driver due to improper handling of objects in memory. An authenticated, remote attacker can exploit these, via ...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3249 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

PT-2016-2505

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2012 Windows 10 versions Gold and 1511 Description The issue is related to the kernel-mode drivers in the operating system, which have inadequate access restrictions. This allows a local attacker to gain elevated...

PT-2016-2502

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of access control in a Windows kernel mode driver, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This...