CVE-2018-0854: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0958,...

CVE-2018-8129: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-0958,...

CVE-2018-0958: Undefined Security Weakness

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-0854, CVE-2018-8129,...

CVE-2018-8126: Undefined Security Weakness

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity UMCI policies, aka "Internet Explorer Security Feature Bypass Vulnerability." This affects Internet Explorer 11...

PT-2018-18459

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A security feature bypass issue exists due to the improper handling of attachments by the Microsoft Outlook attachment block filter. Recommendations At the moment, there is no...

Description of the Security Only update for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 (KB 4095513)

Description of the Security Only update for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 KB 4095513 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components process XML documents...

Description of the Security Only update for .NET Framework 3.5 SP1 for Windows 8.1 and Server 2012 R2 (KB 4095515)

Description of the Security Only update for .NET Framework 3.5 SP1 for Windows 8.1 and Server 2012 R2 KB 4095515 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components process XML documents...

Description of the Security Only update for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 SP2 (KB 4095519)

Description of the Security Only update for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 SP2 KB 4095519 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components process X...

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 (KB 4095872)

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 KB 4095872 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 for Windows Server 2012 KB 4291495. This update w...

Description of the Security and Quality Rollup for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 (KB 4095873)

Description of the Security and Quality Rollup for .NET Framework 2.0 SP2 and 3.0 SP2 for Windows Server 2008 SP2 KB 4095873 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 2.0, 3.0, 4.5.2 and 4.6 for Windows Server 2008 KB 4291501. This update wa...

Description of the Security and Quality Rollup for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4095874)

Description of the Security and Quality Rollup for .NET Framework 3.5.1 for Windows 7 SP1 and Server 2008 R2 SP1 KB 4095874 Notice This update is included in the June 2018 Preview of the Quality Rollups for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 for Windows Server 2012 KB...

Description of the Security and Quality Rollup for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 SP2 (KB 4096495)

Description of the Security and Quality Rollup for .NET Framework 4.5.2 for Windows 7 SP1, Server 2008 R2 SP1, and Server 2008 SP2 KB 4096495 Summary This update resolves a vulnerability in Microsoft .NET Framework that could cause denial of service when .NET Framework and .NET core components...

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins. The vulnerability allows Microsoft Edge to bypass Same-Origin Policy SOP restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploite...

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacker would first...

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacker would first...

Windows Security Feature Bypass Vulnerability

A security feature bypass exists when Windows incorrectly validates kernel driver signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed drivers into the kernel. In an attack scenario, an attacker could bypass security...

Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability could circumvent a User Mode Code Integrity UMCI policy on the machine. To exploit the vulnerability, an attacke...

PT-2018-9864

Name of the Vulnerable Software and Affected Versions: Microsoft .NET Framework versions 2.0 through 4.7.1 Description: A security feature bypass issue exists that could allow an attacker to bypass Device Guard. This could enable an attacker to circumvent a User Mode Code Integrity UMCI policy on...

PT-2018-18450

Name of the Vulnerable Software and Affected Versions Internet Explorer 11 Description A security feature bypass issue exists due to Internet Explorer's failure to validate User Mode Code Integrity UMCI policies. This could allow an attacker to bypass Device Guard UMCI policies. Recommendations F...

PT-2018-18440

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: A security feature bypass issue exists due to Microsoft Edge's improper handling of requests from different origins. This allows the browser to bypass Same-Origin Policy SOP...