CVE-2019-1214

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka ‘Windows Common Log File System Driver Elevation of Privilege Vulnerability’. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

Windows Common Log File System Driver Information Disclosure Vulnerability

An information disclosure exists in the Windows Common Log File System CLFS driver when it fails to properly handle sandbox checks. An attacker who successfully exploited this vulnerability could potentially read data outside their expected limits. To exploit the vulnerability, an attacker would...

VulnCheck KEV: CVE-2019-1214

Microsoft Windows Common Log File System CLFS driver improperly handles objects in memory which can allow for privilege escalation...

CVE-2018-8167

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory, aka "Windows Common Log File System Driver Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server...

Privilege escalation

The Windows Common Log File System CLFS driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability...

Privilege escalation

The Windows Common Log File System CLFS driver in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability...

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017

Security update for the Windows CLFS elevation of privilege vulnerability in Windows Server 2008: July 11, 2017 Summary An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory.To learn more about the vulnerability, se...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...

Microsoft Windows Common Controls Memory Misreference Vulnerability

Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft windows universal control allows an attacker to construct specially crafted links to trick users into loading them, which when followed by the targeted user using the F12 exploit tool in Internet Explorer,...

PT-2013-4219 · Microsoft · Windows Xp +10

Name of the Vulnerable Software and Affected Versions: Windows common control library versions in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT Description: A remote code...

MS13-083: Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2864058)

The remote host has an integer overflow vulnerability in the Windows Common Control Library. The vulnerability could allow remote code execution if an attacker sends a specially crafted web request to an ASP.NET web application running on an affected system. An attacker could exploit this...

MS12-060: Description of the security update for Visual Basic 6.0 Service Pack 6: August 14, 2012

Resolves a vulnerability that exists in Windows common controls that could allow remote code execution if a user visits a website that contains specially crafted content that is designed to exploit the vulnerability.View products that this article applies to.IntroductionMicrosoft has released the...

MS12-060: Vulnerability in Windows common controls could allow remote code execution: August 14, 2012

Resolves a vulnerability in Windows common controls that could allow remote code exescution if a user visits a website that contains specially crafted content that is designed to exploit the vulnerability.View products that this article applies to.IntroductionMicrosoft has released security...

Microsoft MSCOMCTL.OCX ActiveX Control Remote Code Execution (MS12-027; CVE-2012-0158)

A remote code execution vulnerability has been reported in the Microsoft Windows common controls...

MS10-081: Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2296011)

The remote host has a heap-based buffer overflow vulnerability in the Windows common control library. This vulnerability can be exploited when a user visits a specially crafted web page while using a third- party scalable vector graphics SVG viewer. A remote attacker could exploit this by trickin...

Microsoft Visual Basic multiple ActiveX security vulnerabilities

Memory corruptions in DataGrid, FlexGrid, Hierarchical FlexGrid, Windows Common AVI, Charts, Masked Edit controls...