Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2016-06299)

Microsoft Windows is the popular computer operating system. Some versions of the Windows kernel-mode driver do not properly handle memory objects and an elevation of privilege vulnerability exists, which can be exploited by a local user with a constructed application...

CVE-2016-3310

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3310

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka “Win32k Elevation of...

PT-2016-2580 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a lack of proper access control in a Windows operating system kernel-mode driver, which can be exploited by a local attacker using a specially crafted...

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2016-04936)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An elevation of privilege vulnerability exists in the Microsoft Windows kernel-mode driver that stems from the program's...

Privilege escalation

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Privilege escalation

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-3286

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-04746)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An elevation of privilege vulnerability exists in the kernel-mode driver in Microsoft Windows Server 2012 and Windows 10...

PT-2016-2503

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in a Windows operating system kernel-mode driver, which can be exploited by an attacker to elevate their privileges using a specially craft...

PT-2016-2506

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in a Windows operating system kernel-mode driver, which can be exploited by an attacker to elevate privileges using a specially crafted...

PT-2016-2502

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of access control in a Windows kernel mode driver, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This...

Windows Privilege Escalation

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

Windows Privilege Escalation

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

Microsoft Windows - Kernel ATMFD.dll NamedEscape 0x250C Pool Corruption (MS16-074)

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785 The Adobe Type Manager Font Driver ATMFD.DLL responsible for handling PostScript and OpenType fonts in the Windows kernel provides a channel of communication with user-mode...

Microsoft Windows Kernel - 'ATMFD.dll' NamedEscape 0x250C Pool Corruption (MS16-074)

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785 The Adobe Type Manager Font Driver ATMFD.DLL responsible for handling PostScript and OpenType fonts in the Windows kernel provides a channel of communication with user-mode applications via an undocumented gdi32!NamedEscape API...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-04197)

Microsoft Windows Server is a popular operating system. A security vulnerability exists in Microsoft Windows Server where the kernel mode driver fails to properly handle objects in memory, allowing a local attacker to exploit the vulnerability for elevated privileges...

EUVD-2016-4257

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2016-3219

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2016-3219

CVE-2016-3219 affects Windows 10 (Gold/1511) kernel-mode Win32k; root cause is a privilege-escalation path via IO Manager/file creation with INPC and IFAC, combined with object-manager shadow directories. Project Zero analysis details an IO flow where INPC disables MemAC/SecAC and OFAC handling g...