Windows operating system’s vulnerability, which allows a malicious actor to trigger a service failure

The vulnerability of the TCP protocol in the Windows operating system allows a malicious actor to induce a service failure by creating TCP packets that contain incorrect data fields in the “Options” header...

The vulnerability of the Windows operating system, which allows a malicious individual to alter the information transmitted during an RDP session

The vulnerability in the Remote Desktop Protocol RDP allows an attacker to modify the contents of the traffic for an active RDP session...

Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing attackers to obtain confidential information

The vulnerability of the Windows operating system and the Microsoft Edge browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially crafted PDF document...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the dynamically linked GDI32.dll library of the Windows operating system’s Graphics component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted NetLogon request...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the SMB server component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application that requests authentication f...

Vulnerability of the Windows operating system and the Internet Explorer browser, allowing attackers to increase their privileges

The vulnerability of the Web Proxy Auto Discovery protocol for the Windows operating system and the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely by using the NetBIOS name...

Information disclosure

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201...

Elevation of Privilege Vulnerability Found in Microsoft Windows WPAD Agent

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows that stems from a program's inability to properly handle certain proxy discovery scenarios using the Web Proxy Autodiscovery WPAD...

Microsoft Windows and Microsoft Windows PDF Information Disclosure Vulnerability

Microsoft Windows and Microsoft Edge are both products of Microsoft Corporation USA. The former is a series of operating systems; the latter is a web browser that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits ---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril...

Microsoft Windows WPAD Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Web Proxy Autodiscovery WPAD protocol for Microsoft Windows. An attacker could exploit this vulnerability to bypass security checks and obtain...

MS16-078: Security update for Windows Diagnostic Hub: June 14, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application.Summary This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an...

PT-2016-2168

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to the Web Proxy Auto Discovery WPAD protocol implementation, which mishandles proxy discovery. This allows remote attackers to redirect network traffic via...

The vulnerability of the Windows operating system allows a perpetrator to bypass the protection mechanisms of Virtual Secure Mode Hypervisor Code Integrity.

The vulnerability of the Windows operating system is related to errors in security settings. Exploiting this vulnerability allows a malicious actor to bypass the Virtual Secure Mode Hypervisor Code Integrity protection mechanism and execute RWX page marking using a specially created application...

The vulnerability of the Windows operating system, allowing a hacker to read arbitrary files on the disk

The vulnerability of the Volume Manager Driver in the Windows operating system is related to the lack of user verification when accessing the RemoteFX RDP USB function. Exploiting this vulnerability allows a malicious actor to read arbitrary files from the disk by making requests to RemoteFX...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the dxgkrnl.sys sub-component of the DirectX graphics kernel in Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

CVE-2016-3958

Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use of the LoadLibrary function...

CVE-2015-8156

Summary of CVE-2015-8156 from provided documents The issue affects Symantec Endpoint Encryption (SEE), specifically the Drive Encryption/EEDService component in SEE 11.x before 11.1.1. A local attacker could exploit an unquoted Windows search path vulnerability to escalate privileges by placing a...

EUVD-2016-2161

Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC Continuous before 15.016.20039 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different...