The vulnerability of the BIOS loader of the Hyper-V hardware virtualization platform for Windows operating systems allows a hacker to circumvent built-in security restrictions.

The vulnerability of the BIOS loader of Hyper-V hardware virtualization systems for Windows operating systems arises from the unstable provision of high entropy during loading. Exploiting this vulnerability allows a remote attacker to circumvent built-in security restrictions...

CVE-2018-8411

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016,...

Microsoft WindowsCodecs.dll SniffAndConvertToWideString Information Leak Vulnerability

These vulnerabilities were discovered by Marcin Noga of Cisco Talos. Today, Cisco Talos is disclosing a vulnerability in the WindowsCodecs.dll component of the Windows operating system. WindowsCodecs.dll is a component library that exists in the implementation of Windows Imaging Component WIC,...

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-21219)

Microsoft Windows is a series of operating systems released by Microsoft Corporation USA.Edge is a browser built by Microsoft for Windows 10. A remote memory corruption vulnerability exists in Microsoft Edge Chakra Scripting Engine. An attacker can exploit this vulnerability to execute arbitrary...

The vulnerability of the Microsoft JET Database Engine driver for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft JET Database Engine for Windows operating systems arises due to buffer overflow in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created Excel file...

The compatibility subsystem’s vulnerability allows for the execution of Linux applications on Windows operating systems, enabling attackers to replace or delete any files they desire.

The vulnerability of the compatibility subsystem for running Linux applications on Windows operating systems is related to errors in character registry handling. Exploiting this vulnerability allows an attacker to replace or delete any files using a specially created application...

Microsoft Windows JET Database Engine Remote Code Execution Vulnerability (CNVD-2019-14431)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. JET Database Engine is an underlying data engine. A remote code execution vulnerability exists in Microsoft Windows JET Database Engine. An attacker can exploit the vulnerability to execute arbitrary...

Researcher Discloses New Zero-Day Affecting All Versions of Windows

A security researcher has publicly disclosed an unpatched zero-day vulnerability in all supported versions of Microsoft Windows operating system including server editions after the company failed to patch a responsibly disclosed bug within the 120-days deadline. Discovered byLucas Leong of the...

The vulnerability in the implementation of the SMB network protocol of the Windows operating system allows a perpetrator to trigger a service failure.

The vulnerability of the Microsoft Server Message Block SMB network protocol in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to cause service interruptions by sending specially crafted SMB requests to the...

The vulnerability of the compatibility subsystem for running Linux applications on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the compatibility subsystem for running Linux applications on Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

CVE-2018-8468

An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 20...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2018-18624)

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation in the U.S. Microsoft Windows Server 2016 is a set of server operating systems.Windows 8.1 is a set of operating systems for personal computers. An information disclosure vulnerability exists in...

Microsoft Jet Database Engine Buffer Overflow Vulnerability (CNVD-2019-00354)

Microsoft Windows 10, etc. are a series of operating systems released by Microsoft Corporation in the U.S. JET Database Engine is one of the underlying database engines. A buffer overflow vulnerability exists in Microsoft JET Database Engine. The vulnerability can be exploited by a remote attacke...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2018-24936)

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Windows Hyper-V is one of the virtualization products that supports the creation of virtual machines in Windows. Microsoft Windows suffers from a remote denial of service vulnerability. An attacker ca...

Microsoft Windows SMB Server Information Disclosure Vulnerability

Microsoft Windows 10 and others are a series of operating systems released by Microsoft Corporation in the U.S. SMBv2 server is one of the communication protocol servers. An information disclosure vulnerability exists in the way the SMBv2 server in Microsoft Windows handles requests. A remote...

The vulnerability of Windows operating systems, related to errors in processing files with the .LNK extension, allows a hacker to execute arbitrary code.

The vulnerability of Windows operating systems is related to errors in processing files with the extension .LNK link files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .LNK file...

The vulnerability of the DirectX Graphics Kernel driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the DirectX Graphics Kernel Driver DXGKRNL on Windows operating systems is related to object handling errors in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the components of Device Guard in Windows operating systems allows a hacker to bypass code integrity checks.

The vulnerability of the Device Guard component of Windows operating systems is related to improperly implemented security checks. Exploiting this vulnerability allows an attacker to bypass code integrity checks by injecting malicious code into the trusted PowerShell process...

Vulnerability of Windows operating systems, related to errors in processing .LNK file extensions, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system is related to errors in processing files with the extension .LNK link files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted .LNK file...

The vulnerability of the PDF library in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of PDF libraries in Windows operating systems is related to improper handling of objects in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or PDF file...