Lucene search
K

1946 matches found

OSV
OSV
added 2017/04/12 2:59 p.m.0 views

CVE-2017-0058

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure...

4.7CVSS7.3AI score0.03655EPSS
Exploits2References4
BDU FSTEC
BDU FSTEC
added 2017/04/06 12:0 a.m.3 views

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Hyper-V virtualization system for the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially created application...

2.3CVSS6.7AI score0.01394EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/04/06 12:0 a.m.4 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Graphics Device Interface application in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a specially created application...

7.2CVSS7.1AI score0.01858EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/04/06 12:0 a.m.4 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of kernel-level drivers in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially crafted application...

7.2CVSS7.2AI score0.02388EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/04/06 12:0 a.m.2 views

Vulnerability of the Windows operating system, allowing a hacker to check files on the disk

The vulnerability of the Microsoft XML service on the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely check files on the disk using a specially crafted web page...

4.3CVSS6.6AI score0.18069EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.3 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system arises from incorrect checking of buffer size. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges...

4.6CVSS7.4AI score0.0113EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.4 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the kernel control driver in the Windows transaction monitor is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

6.8CVSS7.1AI score0.57482EPSS
Exploits3References5
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.3 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

7.2CVSS7.2AI score0.0139EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.4 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

7.2CVSS7.2AI score0.02388EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2017/03/31 12:0 a.m.4 views

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the DCOM application in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using a specially created application...

4.4CVSS7.2AI score0.04957EPSS
Exploits3References3
BDU FSTEC
BDU FSTEC
added 2017/03/23 12:0 a.m.2 views

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

4.3CVSS5.8AI score0.22471EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2017/03/23 12:0 a.m.3 views

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

4.3CVSS5.8AI score0.22471EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2017/03/23 12:0 a.m.3 views

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

4.3CVSS5.8AI score0.22471EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2017/03/23 12:0 a.m.2 views

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

4.3CVSS5.8AI score0.22471EPSS
Exploits1References3
CNVD
CNVD
added 2017/03/20 12:0 a.m.1 views

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03757)

Microsoft Uniscribe is a component of the Windows operating system developed by Microsoft Corporation for the correct presentation of Unicode characters. An information disclosure vulnerability exists in Microsoft Uniscribe's handling of in-memory objects, which allows remote attackers to exploit...

4.3CVSS6.2AI score0.22471EPSS
Exploits1References1
CNVD
CNVD
added 2017/03/20 12:0 a.m.2 views

Microsoft Windows iSNS Server Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. iSNS Server is one of the network intelligent storage servers. A memory corruption vulnerability exists in iSNS Server in Microsoft Windows. A remote attacker can exploit this vulnerability...

9.3CVSS7.7AI score0.13823EPSS
Exploits0References1
OSV
OSV
added 2017/03/17 12:59 a.m.1 views

CVE-2017-0073

The Graphics Device Interface GDI in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a...

4.3CVSS5.8AI score0.33359EPSS
Exploits0References3
OSV
OSV
added 2017/03/17 12:59 a.m.1 views

CVE-2017-0047

The Graphics Device Interface GDI in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application, aka "Windows GDI...

7.8CVSS5.8AI score0.01858EPSS
Exploits0References3
CNVD
CNVD
added 2017/03/17 12:0 a.m.2 views

Microsoft Windows Uniscribe Information Disclosure Vulnerability (CNVD-2017-03354)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Uniscribe also known as Unicode Script Processor is one of the components that enables the Windows operating system to correctly present Unicode text. An information disclosure vulnerability exists in...

4.3CVSS6.3AI score0.22471EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2017/03/14 12:0 a.m.4 views

PT-2017-1937 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue exists due to insufficient input validation in the SMBv1 protocol of Microsoft Windows. It allows a remote attacker to execute arbitrary code using specially crafted...

9.3CVSS8.9AI score0.89862EPSS
Exploits27References37
Rows per page
Query Builder