Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2015-2366

CVE-2015-2366 affects Win32k.sys in multiple Windows kernel‑mode drivers (Windows 7 SP1, Windows 8/8.1, Windows Server 2008 R2 SP1, 2012, RT) and allows local privilege escalation via a crafted application. The root cause is improper handling in the kernel‑mode driver, enabling an attacker to gai...

Buffer overflow

Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service buffer overflow by leveraging guest OS privileges, aka "Hyper-V Buffer Overfl...

Remote code execution

Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Windows DLL Remote Code Execution Vulnerability."...

CVE-2015-2368

Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Windows DLL Remote Code Execution Vulnerability."...

CVE-2015-2361

Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service buffer overflow by leveraging guest OS privileges, aka "Hyper-V Buffer Overfl...

CVE-2015-2361

CVE-2015-2361 affects Microsoft Windows 8.1 and Windows Server 2012 R2 Hyper-V. The vulnerability arises from improper initialization of guest OS system data structures in Hyper-V, enabling a guest OS user to execute arbitrary code on the host or cause a denial of service (buffer overflow) when e...

PT-2015-5730

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Description A local user can gain privileges via a Trojan horse DLL in the current working directory. This issue...

Microsoft DCOM RPC CVE-2015-2370 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevate privileges on a targeted system. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.1.0 Avaya Meeting Exchange - Client...

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-2366 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5.0 Avaya CallPilot 5.0....

PT-2015-1532

Name of the Vulnerable Software and Affected Versions Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 Description The issue is related to the win32k.sys driver in the Windows kernel-mode drivers, which allows local users to ga...

MS15-074: Vulnerability in Windows Installer service could allow elevation of privilege: July 14, 2015

None None...

Microsoft security advisory: Update to harden use of DES encryption: July 14, 2015

None None...

MS15-071: Vulnerability in Netlogon could allow elevation of privilege: July 14, 2015

None None...

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-2381 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5...

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-2382 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory and obtain sensitive information that may aid in further attacks. Technologies Affected Avaya CallPilot 4.0 Avaya CallPilot 4.0.1 Avaya CallPilot 5...

CVE-2015-2361: Improper Restriction of Operations within the Bounds of a Memory Buffer

Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause a denial of service buffer overflow by leveraging guest OS privileges, aka "Hyper-V Buffer Overfl...

CVE-2015-2362: Undefined Security Weakness

Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS by leveraging guest OS privileges, aka "Hyper-V...

PT-2015-1655

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version win32k.sys in Windows 8 win32k.sys in Windows 8.1 win32k.sys in Windows Server 2012 Gold and R2 win32k.sys in Windows RT Gold and 8.1 Description The issue is related to the win32k.sys driver in the...

CVE-2015-2368: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "Windows DLL Remote Code Execution Vulnerability."...