Turns Out Microsoft Has Already Patched Exploits Leaked By Shadow Brokers

The latest dump of hacking tools allegedly belonged to the NSA is believed to be the most damaging release by the Shadow Brokers till the date. But after analyzing the disclosed exploits, Microsoft security team says most of the windows vulnerabilities exploited by these hacking tools, including...

CVE-2017-0022

Microsoft XML Core Services MSXML in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold and R2; Windows Server 2016; and Windows Vista SP2 improperly handles objects in memory, allowing attackers to test for...

Microsoft revealed there have been hacker using the Microsoft Edge vulnerability in the attack-vulnerability warning-the black bar safety net

Microsoft today to Windows 7, Windows 8.1, Windows 1 0 and Office to push a security update to fix vulnerabilities. These updates fixes the IE, Microsoft Edge, Office, Windows and Skype Business 4 9 security vulnerabilities. This 4 9 a security vulnerability 5 the vulnerability can be used to...

PT-2016-4085 · Microsoft · Windows 8.1 +7

Name of the Vulnerable Software and Affected Versions: Windows Vista version SP2 Windows Server 2008 versions SP2 and R2 SP1 Windows 7 version SP1 Windows 8.1 Windows Server 2012 versions Gold and R2 Windows RT 8.1 Windows 10 versions Gold, 1511, and 1607 Description: The issue allows local users...

Researchers Crack Furtim, SFG Malware Connection

New research is challenging what security researchers know about Furtim, a new malware strain that has been compared to Stuxnet because of its believed targeting of industrial controls in energy companies. According to security experts at Damballa, Furtim and the recently discovered SFG malware a...

Malware Dropper Built to Target European Energy Company

A malware dropper with designs on specific targets was found in a private underground forum and is likely the predecessor to the Furtim malware that was uncovered in May. Researchers at SentinelOne today published a report that says the dropper sample they investigated, which they’re calling SFG,...

MS16-073: Security update for kernel mode drivers: June 14, 2016

Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow elevation...

CVE-2016-0165

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

MS16-014: Description of the security update for Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, and Windows Server 2012 R2: February 9, 2016

None None...

CVE-2016-0006

The sandbox implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandles reparse points, which allows local users to gain privileges via a...

MS16-005: Security update for Windows kernel-mode drivers to address remote code execution: January 12, 2016

Resolves vulnerabilities in Windows that could allow remote code execution if a user visits a malicious website.SummaryTo learn more about the vulnerability, see Microsoft Security Bulletin MS16-005. More InformationImportant All future security and non-security updates for Windows RT 8.1, Window...

Cumulative update for Windows 10 Version 1511: December 8, 2015

None None...

Microsoft Releases June 2015 Security Bulletin

Microsoft has released eight updates to address vulnerabilities in Microsoft Windows. Exploitation of some of these vulnerabilities could allow remote code execution or elevation of privileges. US-CERT encourages users and administrators to review Microsoft Security Bulletins MS15-056 through...

CVE-2015-3987

Multiple unquoted Windows search path vulnerabilities in the 1 Client Management and 2 Gateway in McAfee ePO Deep Command 2.1 and 2.2 before HF 1058831 allow local users to gain privileges via unspecified vectors...

MS15-051: Vulnerabilities in Windows kernel-mode drivers could allow information disclosure: May 12, 2015

Resolves vulnerabilities in Windows that could allow remote code execution if a user opens a specially crafted document or could allow elevation of privilege if an attacker logs on locally and runs arbitrary code in kernel mode.SummaryThis security update resolves vulnerabilities in Windows, the...

MS15-020: Vulnerabilities in Windows could allow remote code execution: March 10, 2015

Resolves vulnerabilities in Windows that could allow remote code execution if an attacker successfully convinces a user to browse to a specially crafted website or working directory.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow remote...

Microsoft February 2015 Patch Tuesday security bulletins

Microsoft’s first foray into patching Internet Explorer in 2015 is still short one zero day fix. Today’s Patch Tuesday security bulletins included a monster IE rollup taking care of 41 vulnerabilities in the browser, and another bulletin patching a Windows zero day publicly disclosed by Google’s...

CVE-2014-0540

The CVE-2014-0540 entry concerns memory address discovery bypass of ASLR in Adobe Flash Player prior to 13.0.0.241, 14.x before 14.0.0.176 (Windows/macOS), Linux version 11.2.202.400, and Adobe AIR before 14.0.0.178 (Windows/macOS) and before 14.0.0.179 (Android), plus related AIR SDKs. It is des...

GUI Bugs Expose Information Disclosure, Privilege Escalation

Developers are creating countless information disclosure and privilege escalation vulnerabilities by misusing elements of various graphical user interfaces as a mechanisms for access control, according to a new research paper from the Northeastern University College of Computer and Information...

CVE-2013-3894

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted CMAP table in a TrueType font T...