The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the ATML component in the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to enhance their privileges through a specially crafted application...

PT-2015-1994 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by a buffer overflow in the Windows operating system. It can be exploited by a local attacker using a specially crafted application to elevate privileges. Recommendation...

CVE-2015-2546

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption...

SiS Windows VGA Display Manager Multiple Privilege Escalation

Vulnerability Details Affected Vendor: Silicon Integrated Systems Corporation Affected Product: Windows VGA Display Manager Affected Version: 6.14.10.3930 Platform: Microsoft Windows 7 x86, Microsoft Windows XP SP3 CWE Classification: CWE-123: Write-what-where condition Impact: Arbitrary Code...

Dell SonicWall NetExtender CVE-2015-4173 Remote Privilege Escalation Vulnerability

Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE%...

Apache ActiveMQ upload/download function directory traversal vulnerability

Apache ActiveMQ is a popular messaging and integration model provider . A directory traversal vulnerability in the upload/download function for blob messages in the fileserver in Apache ActiveMQ for Windows versions prior to 5.11.2 can be exploited by an attacker to create JSP files in an arbitra...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the win32k.sys driver in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a local attacker to gain access to protected information through a specially crafted application...

CVE-2015-1769

Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connectin...

Microsoft Windows TrueType Fonts Remote Code Execution Vulnerability (CNVD-2015-05278)

Microsoft Windows is a family of operating systems from Microsoft. A remote code execution vulnerability exists in Microsoft Windows TrueType Fonts. Allows an attacker to execute arbitrary code within the context of a vulnerable application or cause a denial of service...

The vulnerability of the Windows operating system allows a perpetrator to execute arbitrary code or cause malfunctions in the host operating system.

The vulnerability of the Hyper-V service in the Windows operating system arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a failure in the host operating system by elevating the privileges of the ho...

Buffer overflow

Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a...

Microsoft releases Emergency Patch Update for all versions of Windows

In the wake of a critical Remote Code Execution vulnerability in all supported versions of its operating system platform, Microsoft has just issued an emergency fix. Yes, it’s time to patch your Windows operating system against an alarming security hole that could allow remote attackers to run...

MS15-066: Description of the security update for the VBScript 5.8 scripting engine: July 14, 2015

Resolves a vulnerability in the VBScript scripting engine in Windows that could allow remote code execution if a user goes to a specially crafted website. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.SummaryThis security update...

IBM i Access for Windows Stack Buffer Overflow Vulnerability

IBM i Access for Windows is a suite of client solutions from IBM in the United States that provide access to and use of desktop resources from a variety of different Windows operating systems. A stack buffer overflow vulnerability exists in IBM i Access for Windows that stems from the program's...

VulnCheck KEV: CVE-2015-2426

A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts...

Google“zero project”hackers released a serious vulnerability to get all the Windows-vulnerability warning-the black bar safety net

Google“zero project”hack Mateusz Jurczyk（@j00ru）one-time release the 1 5 remote code execution vulnerabilities, which contains a serious vulnerability affecting almost all of the Adobe Reader and the Windows version and will defeat all the defense measures. Jurczyk in the month, held at Recon...

The vulnerability of the Windows operating system allows a malicious individual to obtain user authentication information.

The vulnerability of the Windows operating system exists in the implementation of system calls such as URLDownloadA, URLDownloadW, URLDownloadToCacheFileA, URLDownloadToCacheFileW, URLDownloadToFileA, URLDownloadToFileW, URLOpenStream, and URLOpenBlockingStream. During these calls, the operating...

VMware Horizon Client for windows arbitrary code execution vulnerability (CNVD-2015-03817)

Horizon Client for Windows is used to virtualize desktops and applications. A memory allocation error vulnerability exists in Horizon Client for Windows 'TPView.ddl' that allows remote attackers on the View desktop to execute arbitrary code...

Microsoft Windows Kernel 'Win32k.sys' Buffer Overflow Vulnerability

Microsoft Windows is a popular operating system. A buffer overflow vulnerability in Microsoft Windows Kernel 'Win32k.sys' allows local attackers to exploit the vulnerability to execute arbitrary code with elevated privileges...

Beckhoff IPC Diagnostics Arbitrary User Creation Vulnerability

Beckhoff IPC Diagnostics is a set of support software pre-installed in all Beckhoff IPCs/PLCs Programmable Logic Controllers running on the Microsoft Windows operating system. Beckhoff IPC Diagnostics fails to properly restrict access to functions in the /config URI, allowing a remote attacker to...