CVE-2020-0955: Undefined Security Weakness

An information disclosure vulnerability exists when certain central processing units CPU speculatively access memory, aka 'Windows Kernel Information Disclosure in CPU Memory Access'...

CVE-2020-0913: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1000, CVE-2020-1003, CVE-2020-1027...

CVE-2020-0821: Undefined Security Weakness

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1007...

CVE-2020-1027: Out-of-bounds Write

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003...

CVE-2020-1027

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka ‘Windows Kernel Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003. Recent assessments: gwillcox-r7 at November 22, 2020 2:27...

April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion

This month’s Microsoft Patch Tuesday addresses 113 vulnerabilities with 19 of them labeled as Critical. The 19 Critical vulnerabilities cover Adobe Font Manager Library 0-day, SharePoint, Hyper-V, Scripting Engines, Media Foundation, Microsoft Graphics, Windows Codecs, and Dynamics Business...

April 14, 2020—KB4550970 (Security-only update)

None None...

April 14, 2020—KB4550965 (Security-only update)

None None...

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

PT-2020-2250

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially crafte...

KB4550970: Windows 8.1 and Windows Server 2012 R2 April 2020 Security Update

The remote Windows host is missing security update 4550970 or cumulative update 4550961. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully...

PT-2020-2052

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system kernel. It allows an attacker to potentially elevate their privileges. Recommendations At the moment, the...

PT-2020-2272

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Windows operating system kernel. It allows an attacker to potentially elevate their privileges using a specially crafte...

KLA11743 Multiple vulnerabilities in Microsoft products (ESU)

Multiple vulnerabilities were found in Microsoft products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corrupti...

KB4550971: Windows Server 2012 April 2020 Security Update

The remote Windows host is missing security update 4550971 or cumulative update 4550917. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully...

KB4550929: Windows 10 Version 1607 and Windows Server 2016 April 2020 Security Update

The remote Windows host is missing security update 4550929. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

KB4550927: Windows 10 Version 1709 April 2020 Security Update

The remote Windows host is missing security update 4550927. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections. An attacker who successfully exploited this vulnerability could...

Exploit for CVE-2017-0213

windows-kernel-exploits 简介 windows-kernel-exploits 漏洞列表 Security Bulletin KB Description Operating System - MS17-017 KB4013081 GDI Palette Objects Local Privilege Escalation windows 7/8 - CVE-2017-8464 LNK Remote Code Execution Vulnerability windows 10/8.1/7/2016/2010/2008 - CVE-2017-0213...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to errors in handling links that point to file and directory paths. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

KB4537822: Windows Server 2008 February 2020 Security Update

The remote Windows host is missing security update 4537822 or cumulative update 4537810. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the Windows Common Log File System CLFS driver when it fails to properly handle objects in memory. ...