MS KB3033929: Availability of SHA-2 Code Signing Support for Windows 7 and Windows Server 2008 R2

The remote host is missing Microsoft KB3033929, an update that improves cryptography and digital certificate handling in Windows 7 and Windows Server 2008 R2. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid81731; scriptversion"1.3"; scriptcvsdate"Date: 2018/11/15...

Windows 2012/2012R2 leaks memory when a hardware snapshot is created multiple times on a CSV

Challenge Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a hardware snapshot is created/removed multiple times on a CSV with a hardware provider. Cause Windows 2012 / 2012 R2 Hyper-V hosts leak memory when a snapshot is created on a CSV using hardware provider. Due to the fact that only a...

CVE-2015-0058

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."...

Double free

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."...

CVE-2015-0012

The CVE affects Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4. The vulnerability arises from improper validation of user roles, allowing a local attacker who has valid Active Directory credentials to establish a server session and obtain administrative privileges f...

CVE-2015-0058

CVE-2015-0058 is a local privilege-escalation flaw in Windows caused by a double-free in win32k.sys (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1) that an attacker could exploit via a crafted application to gain privilege. The issue is addressed by MS15-010 updates (KBs 3013455/3023562/303...

PT-2015-4394

Name of the Vulnerable Software and Affected Versions Microsoft System Center Virtual Machine Manager VMM 2012 R2 Update Rollup 4 Description The issue allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory...

PT-2015-4433

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows 8.1 Windows Server 2012 R2 Windows RT 8.1 Description The issue is related to a double-free condition in the Windows kernel-mode driver, specifically in the win32k.sys file. This...

PT-2015-4434

Name of the Vulnerable Software and Affected Versions Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 Description A remote code execution issue exists in the Windows kernel-mode driver win32k.sys due to improper handling of...

Microsoft Windows Kernel 'Win32k.sys' CVE-2015-0058 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges and gain access to kernel memory. Technologies Affected Microsoft Windows 8 for 32-bit Systems Microsoft Windows 8 for...

Microsoft Windows Network Location Awareness Service Security Bypass Vulnerability (3022777)

This host is missing an important security update according to Microsoft Bulletin MS15-005. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Application Compatibility Cache Privilege Escalation (3023266)

This host is missing an important security update according to Microsoft Bulletin MS15-001. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Network Policy Server Denial-of-Service Vulnerability (3014029)

This host is missing an important security update according to Microsoft Bulletin MS15-007. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerability (3019215)

This host is missing an important security update according to Microsoft Bulletin MS15-008. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Error Reporting Security Feature Bypass Vulnerability (3004365)

This host is missing an important security update according to Microsoft Bulletin MS15-006. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-0001

The Windows Error Reporting WER component in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to bypass the Protected Process Light protection mechanism and read the contents of arbitrary process-memory locations by leveraging...

MS15-001: Vulnerability in Windows Application Compatibility cache could allow elevation of privilege: January 13, 2015

None None...

MS15-007: Vulnerability in Network Policy Server RADIUS implementation could cause denial of service: January 13, 2015

None None...

MS15-004: Description of the security update for Windows: January 13, 2015

None None...

PT-2015-4389

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Description A security issue...