MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 10, 2016

MS16-065: Description of the security update for the .NET Framework 4.6 and 4.6.1 in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2: May 10, 2016 View products that this article applies to. Summary This security update resolves a vulnerability in the Microsoft .NET Framework. The...

MS16-062: Description of the security update for Windows Kernel-Mode Drivers: May 10, 2016

None None...

MS16-067: Security update for volume manager driver: May 10, 2016

None None...

Microsoft Windows DirectX Graphics Kernel CVE-2016-0197 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0196 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

MS16-067: Security Update for Volume Manager Driver (3155784)

The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability due to a failure to correctly tie the session of the mounting user to the USB disk being mounted. This issue occurs when the USB disk is mounted over the Remote Desktop...

Microsoft Windows XML Core Services Remote Code Execution Vulnerability (3148541)

This host is missing a critical security update according to Microsoft Bulletin MS15-040. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows SAM and LSAD Privilege Elevation Vulnerability (3148527)

This host is missing an important security update according to Microsoft Bulletin MS16-047 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Information disclosure

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."...

CVE-2016-0090

Summary: CVE-2016-0090 is a Windows Hyper-V Information Disclosure vulnerability. It affects Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10 where a guest OS user can cause the Hyper-V host to disclose memory contents via a crafted application. Root cause: inadequate validation of ...

CVE-2016-0090

Hyper-V in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows 10 allows guest OS users to obtain sensitive information from host OS memory via a crafted application, aka "Hyper-V Information Disclosure Vulnerability."...

Security Update for Adobe Flash Player for Windows Server 2012 R2 (KB3154132)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Microsoft Support

None None...

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: April 12, 2016

MS16-039: Description of the security update for the .NET Framework 3.5 in Windows 8.1 and Windows Server 2012 R2: April 12, 2016 View products that this article applies to. Summary This security update resolves vulnerabilities in the Microsoft .NET Framework. The vulnerabilities could allow remo...

PT-2016-1687 · Microsoft · Windows Server 2012 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 8.1, 10 Gold, 10 1511, Server 2012 Gold, Server 2012 R2, and RT 8.1 Description: The issue is related to the mismanagement of process tokens by the Client-Server Run-time Subsystem CSRSS in Microsoft Windows, allowi...

MS16-040: Security Update for Microsoft XML Core Services (3148541)

The remote Windows host is affected by a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this vulnerability, by convincing a user to visit a specially-crafted...

R2 D2 Widget Droid Sounds - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application R2 D2 Widget Droid Sounds published at the 'play' market has multiple vulnerabilities...

CVE-2016-0092

OLE in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted file, aka "Windows OLE Memory Remote Code Execution...

CVE-2016-0087

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 do not properly validate handles, which allows local users to gain privileges via a crafted application, aka "Windows Elevation of Privilege Vulnerability."...

Immunity Canvas: MS16_032

Name| ms16032 ---|--- CVE| CVE-2016-0099 Exploit Pack| CANVAS Description| MS16-032 Seclogon Thread Handle Leak Notes| CVE Name: CVE-2016-0099 VENDOR: Microsoft Notes: Our exploit module is really two modules: 1 An exploit, based off of Google Project Zero's post by James Foreshaw. It is extremel...