7290 matches found
CVE-2016-0148: Undefined Security Weakness
Microsoft .NET Framework 4.6 and 4.6.1 mishandles library loading, which allows local users to gain privileges via a crafted application, aka ".NET Framework Remote Code Execution Vulnerability."...
Microsoft Windows Graphics Component CVE-2016-0145 Memory Corruption Vulnerability
Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft .NET Framework 3.0 SP2...
PT-2016-1689
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 4.6 through 4.6.1 Description The issue is related to the improper handling of library loading, which can be exploited by a local user to gain privileges via a crafted application. This can lead to a remote co...
PT-2016-1690
Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold and 1511 Office 2007 SP3 and 2010 SP2 Word Viewer .NET Framework 3.0 SP2, 3.5, and 3.5.1...
April 12, 2016 — KB3147458 (OS Build 10586.218)
None None...
MS16-039: Security update for Microsoft Graphics Component: April 12, 2016
Resolves vulnerabilities in Microsoft Windows, Microsoft .NET Framework, Microsoft Office, Skype for Business, and Microsoft Lync. The most severe of the vulnerabilities could allow remote code execution if a user opens a specially crafted document or visits a webpage that contains specially...
MS16-041: Security update for the .NET Framework: April 12, 2016
Resolves vulnerabilities in Microsoft .NET Framework that could cause remote code execution if an attacker with access to the local system executes a malicious application.View products that this article applies to.SummaryThis security update resolves vulnerabilities in the Microsoft .NET...
Microsoft .NET Framework mscoreei DLL Planting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft .NET Framework. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious directory or device. The specific flaw...
KLA10788 Multiple vulnerabilities in Microsoft Graphics Component
Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...
KLA10786 Code execution vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in .NET Framework can be exploited remotely to execute arbitrary cod...
CVE-2016-0132
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...
Security feature bypass
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...
CVE-2016-0132
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5/3.5.1, 4.5.2, 4.6, and 4.6.1 suffer a security feature bypass vulnerability in XML signature validation, allowing remote attackers to spoof signatures by modifying signed XML documents. The issue enables an XML validation bypass across multiple Windo...
CVE-2016-0132
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...
CVE-2016-0132: Improper Input Validation
Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 mishandles signature validation for unspecified elements of XML documents, which allows remote attackers to spoof signatures via a modified document, aka ".NET XML Validation Security Feature Bypass."...
Microsoft .NET XML Validation Security Feature Bypass Vulnerability (3141780)
This host is missing an important security update according to Microsoft Bulletin MS16-035 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS16-035: Security Update for .NET Framework to Address Security Feature Bypass (3141780)
The remote Windows host is missing a security update. It is, therefore, affected by a security feature bypass vulnerability in the .NET Framework due to improper validation of certain elements in a signed XML document. An attacker can exploit this vulnerability to modify the contents of an XML fi...
PT-2016-1370
Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 2.0 SP2 through 4.6.1 Description The issue is related to the mishandling of signature validation for certain elements of XML documents, allowing remote attackers to spoof signatures via a modified document...
Microsoft .NET Framework CVE-2016-0132 Security Bypass Vulnerability
Description Microsoft .NET Framework is prone to a security-bypass vulnerability because it fails to properly validate certain elements of a signed XML document. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further...