Microsoft Windows Authenticode 安全漏洞

Authenticode is Trail of Bits open source a small cross-platform library . Used to partially verify Authenticode digital signatures. A security vulnerability exists in Microsoft Windows Authenticode. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...

Microsoft Win32k 权限许可和访问控制问题漏洞

Microsoft Win32k is a system file for Windows multi-user administration by Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Win32K with privilege license and access control issues. The following products and editions are affected: Windows Server 2008 for 32-bit Systems Servi...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. An information disclosure vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...

Microsoft Windows 后置链接漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A backlink vulnerability exists in Microsoft Windows. The following products and editions are affected:Windows 10 Version 21H1 for x64-based Systems,Windows 10 Version 21H1 for ARM64-base...

Windows Kernel-Mode Drivers 权限许可和访问控制问题漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Kernel-Mode Drivers. The following products and editions are affected:Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows...

Windows DCOM Server 安全特征问题漏洞

Microsoft Windows and Windows are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for use on personal devices.Windows is a desktop operating system. A security vulnerability exists in Windows DCOM Server. The following products and editions are...

Microsoft Windows MSHTML Platform 缓冲区错误漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows MSHTML Platform. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10 Version 1809 for x64-based Systems,Windows 1...

Microsoft Windows OpenType Font Parsing 代码注入漏洞

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A code injection vulnerability exists in Microsoft Windows OpenType Font Parsing. The following products and editions are affected:Windows 10 Version 1803 for ARM64-based Systems,Windows 10...

Microsoft Application Virtualization 代码注入漏洞

Microsoft Application Virtualization is an application virtualization and application streaming solution from Microsoft Corporation USA. A code injection vulnerability exists in Microsoft Application Virtualization. The following products and editions are affected: Windows 10 Version 20H2 for...

Microsoft Win32k Security Feature Issue Vulnerability

Microsoft Win32k is a system file for Windows multi-user administration from Microsoft Corporation USA. A security feature vulnerability exists in Microsoft Win32k. The following products and editions are affected: Windows 10 Version 20H2 for x64-based Systems,Windows 10 Version 20H2 for 32-bit...

Microsoft Windows Bluetooth Service Access Control Error Vulnerability

Microsoft Windows Bluetooth Service is a Bluetooth driver from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Bluetooth Service. The following products and editions are affected:Windows Server 2012 R2 Server Core installation,Windows Server 2012 R2...

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge. The following products and editions are affected: Microsoft Edge EdgeHTML-based in Windows 10 Version 20H2 for 32-bit Systems, Microsoft Edge...

4 New BlueKeep-like 'Wormable' Windows Remote Desktop Flaws Discovered

If you are using any supported version of the Windows operating system, stop everything and install the latest security updates from Microsoft immediately. Windows operating system contains four new critical wormable, remote code execution vulnerabilities in Remote Desktop Services, similar to th...

CVE-2018-8561

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Window...

CVE-2018-8476

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows Server 2012, Windows...

CVE-2018-8420

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2018-8314

An elevation of privilege vulnerability exists when Windows fails a check, allowing a sandbox escape, aka "Windows Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2,...

CVE-2017-0191

A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system...