CVE-2024-38187: Untrusted Pointer Dereference

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-38185: Untrusted Pointer Dereference

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2024-38062: Out-of-bounds Read

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

Microsoft and Adobe Patch Tuesday, June 2024 Security Update Review

Microsofts June Patch Tuesday is here, bringing fixes for vulnerabilities impacting its multiple products. This months release highlights the ongoing battle against cybersecurity threats, from critical updates to important fixes. Lets dive into the crucial insights from Microsofts Patch Tuesday...

CVE-2024-35250 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

CVE-2024-35250: Untrusted Pointer Dereference

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

PT-2024-4291 · Microsoft · Windows Kernel-Mode Driver +2

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an untrusted pointer dereference weakness in the Microsoft Kernel Streaming Service MSKSSRV.SYS, allowing local attackers to gain SYSTEM privilege...

CVE-2024-30084: Time-of-check Time-of-use (TOCTOU) Race Condition

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

PT-2024-1572 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Kernel-Mode Driver, which is caused by insufficient access restrictions. This vulnerability...

CVE-2024-21309: Integer Underflow (Wrap or Wraparound)

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

CVE-2021-31952: Undefined Security Weakness

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability...

KLA12202 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An informati...

CVE-2020-1310: Undefined Security Weakness

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1251, CVE-2020-1253...

CVE-2020-1253: Undefined Security Weakness

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1207, CVE-2020-1247, CVE-2020-1251, CVE-2020-1310...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

CVE-2020-0956

Technical details for CVE-2020-0956 are not publicly available in the provided connected documents; monitor for updates.

KB4512491: Windows Server 2008 August 2019 Security Update

The remote Windows host is missing security update 4512491 or cumulative update 4512476. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who...

KB4338814: Windows 10 Version 1607 and Windows Server 2016 July 2018 Security Update

The remote Windows host is missing security update 4338814. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A remote code execution...

KB4088776: Windows 10 Version 1709 and Windows Server Version 1709 March 2018 Security Update

The remote Windows host is missing security update 4088776. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain...

CVE-2017-8689: Undefined Security Weakness

The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to...