Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-06259)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly handle memory objects, and multiple remote code execution vulnerabilities exist in the way the Chakra JavaScript engine renders, which could allow a remote attacker to corrupt memory and execute...

CVE-2016-3320

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow attackers to bypass the Secure Boot protection mechanism by leveraging 1 administrative or 2 physical access to install a crafted boot manager, aka "Secure Boot Security Feature Bypass."...

CVE-2016-3312

ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Information Disclosure Vulnerability."...

August 9, 2016 — KB3176492 (OS Build 10240.17071)

None None...

Cumulative Update for Windows 10 Version 1607: August 2, 2016

None None...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-04923)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows 10 Gold and 1511. A local attacker can exploit the vulnerability with the help of a specially crafted application to gain access to...

CVE-2016-3256

Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."...

CVE-2016-3249

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-04789)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge that stems from a program failing to properly access objects in memory. A remote attacker can exploit t...

July 12, 2016 — KB3163912 (OS Build 10240.17024)

None None...

Exploit for Out-of-bounds Write in Microsoft

CVE-2016-0189 Proof-of-Concept exploit for CVE-2016-0189 VBSc...

CVE-2016-3219

The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2016-3215

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201...

CVE-2016-3203

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."...

Microsoft Win32k Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 Gold and 1511 that stems from a program failing to properly handle objects in memory. A local attacker is allowed to exploit the...

PT-2016-2893 · Microsoft · Edge +2

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 8.1, 10 Gold, and 10 1511 Microsoft Edge Microsoft Windows Server versions 2012 Gold and 2012 R2 Description: A issue allows remote attackers to obtain sensitive information from process memory via a crafted PDF...

June 7, 2016, update for Office 2016 (KB3115189)

None None...

Microsoft Windows HVCI Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A security bypass vulnerability exists in Microsoft Windows 10 Gold and 1511, which stems from a program failing to properly allow certain kernel-mode pages to be marked as Read, Write, and Execute RWX....

CVE-2016-0197

dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a...

CVE-2016-0182

Windows Journal in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted Journal aka .jnt file, aka "Windows Journal Memory Corruption Vulnerability."...