Microsoft Windows Information Disclosure And Elevation of Privilege Vulnerabilities (3205655)

This host is missing a critical security update according to Microsoft Bulletin MS16-149. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Edge Multiple Vulnerabilities (3204062)

This host is missing a critical security update according to Microsoft Bulletin MS16-145. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Kernel Information Disclosure Vulnerability (3199709)

This host is missing an important security update according to Microsoft Bulletin MS16-152 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-12469)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 and Windows Server 2016 versions due to Windows Secure Kernel Mode failing to properly handle memory objects. An attacker can explo...

MS16-145: Cumulative Security Update for Microsoft Edge (3204062)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3204062. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities. An unauthenticated, remote attacker can exploit these vulnerabilities by...

Security Update for Adobe Flash Player for Windows Server 2016 (for x64-based Systems) (KB3209498)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

MS16-154: Security update for Adobe Flash Player: December 13, 2016

None None...

MS16-150: Security update for secure kernel mode: December 13, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege when Windows Secure Kernel Mode improperly handles objects in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege when Windows Secure Kern...

PT-2016-7282

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, and 1607 Windows Server 2016 Description The issue allows local users to bypass the virtual trust level protection mechanism via a crafted application. It is an elevation-of-privilege issue that affect...

PT-2016-7284

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions 10 Gold, 1511, and 1607 Windows Server 2016 Description The issue allows remote attackers to execute arbitrary code via a crafted web site. This enables attackers to affect the system. Recommendations For Microsof...

PT-2016-7272

Name of the Vulnerable Software and Affected Versions Windows 10 versions Gold, 1511, and 1607 Windows Server 2016 Description The issue allows local users to obtain sensitive information from arbitrary processes via a crafted application. It is related to the mishandling of page-fault system...

Microsoft .NET Framework CVE-2016-7270 Information Disclosure Vulnerability

Description The Microsoft .NET Framework is prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information. Successful exploits will lead to other attacks. Technologies Affected Microsoft .NET Framework 4.6.2 Microsoft Windows 10 Version 1607...

Microsoft Edge Scripting Engine - Memory Corruption (MS16-129) Exploit

Exploit for windows platform in category dos / poc !-- Source: http://www.security-assessment.com/files/documents/advisory/edgechakramemcorruption.pdf Name: Microsoft Edge Scripting Engine Memory Corruption Vulnerability MS16-129 CVE: CVE-2016-7202 Vendor Website: http://www.microsoft.com/ Date...

Microsoft Edge Scripting Engine - Memory Corruption (MS16-129)

Microsoft Edge Scripting Engine - Memory Corruption MS16-129 !-- Source: http://www.security-assessment.com/files/documents/advisory/edgechakramemcorruption.pdf Name: Microsoft Edge Scripting Engine Memory Corruption Vulnerability MS16-129 CVE: CVE-2016-7202 Vendor Website:...

Microsoft Edge Scripting Engine - Memory Corruption (MS16-129)

k ChildEBP RetAddr 0328fab0 6a589768 jscript9!Recycler::ScanO...

CVE-2016-7255

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka...

CVE-2016-7247

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow physically proximate attackers to bypass the Secure Boot protection mechanism via a crafted boot policy, aka "Secure Boot Component Vulnerability."...

Remote code execution

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a...

CVE-2016-7237

Local Security Authority Subsystem Service LSASS in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote authenticated users to cause a...

CVE-2016-7226

Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."...