Microsoft Windows Local Lift Vulnerability (CNVD-2017-03624)

Microsoft Windows is an operating system developed by the American company Microsoft. Microsoft Windows suffers from a local elevation vulnerability. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

PT-2017-1939

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code using...

IVPN Client for Windows Elevation of Privilege Vulnerability

IVPN Client for Windows is a virtual private network service from IVPN that runs on the windows platform and is designed for personal use. An elevation of privilege vulnerability exists in IVPN Client for Windows. An attacker can exploit this vulnerability to gain elevated privileges...

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

UBUNTU-CVE-2016-5214

Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted image...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the atmfd.dll library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory...

CVE-2016-7272

The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site...

Microsoft Windows UAC Protection Security Bypass Vulnerability

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the United States. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to perform unauthorized operations bypassing security constraints...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s virtual hard disk driver stems from an improper restriction on access to files. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LSASS service in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system shutdown through a specially crafted request...

Microsoft Windows Local Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Universal Log File System driver, which arises from a failure of the program driver to properly handle objects in memory. The...

MS16-146: Security update for Microsoft graphics component: December 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the atmfd.dll library in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page from a remote location...

Microsoft MSINFO32.EXE '.NFO' XML External Entity Injection Vulnerability

Microsoft MSINFO32.EXE is a software from Microsoft that is used to display performance views of hardware, system components, and software environments. Microsoft MSINFO32.EXE V6.1.7601 An XML external entity injection vulnerability exists in the '.NFO' file, which can be exploited by an attacker...

Vulnerability of Microsoft Edge browser and Windows operating system, allowing attackers to obtain confidential information

Vulnerability of Microsoft Edge browser and Windows operating system, allowing attackers to obtain confidential information...

The vulnerability of the Internet Explorer browser and the Windows operating system allows a perpetrator to determine the presence of arbitrary files.

The vulnerability of the Internet Explorer browser and the Windows operating system allows a perpetrator to determine the presence of arbitrary files...

Tor (Firefox 41 < 50) - Code Execution

TOR Browser 0day : JavaScript Exploit ! Works on Firefox versions 41 - 50 The critical vulnerability is believed to affect multiple Windows versions of the open source Firefox web browser as far back as Firefox version 41, and up to Firefox version 50. When exploit opened by a Firefox or Tor...

CVE-2016-7212

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file, aka "Windows Remote Cod...