The vulnerability of the Hyper-V hardware virtualization system for Windows operating systems allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems is related to errors in the authentication process in the guest operating system. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Exploit for Use After Free in Microsoft

CVE-2019-0708-PoC-Hitting-Path Really Really Bad, don't judg...

Microsoft Internet Explorer Input Validation Error Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. An input validation error vulnerability exists in Microsoft IE 9, 10, and 11. The vulnerability originates from a network system or product that does not properly...

Exploit for Use After Free in Microsoft

CVE-2019-0708 Introduction Microsoft has released its mont...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2019-9801

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry...

CVE-2019-9794

A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the...

CVE-2019-9801

Firefox will accept any registered Program ID as an external protocol handler and offer to launch this local application when given a matching URL on Windows operating systems. This should only happen if the program has specifically registered itself as a "URL Handler" in the Windows registry...

CVE-2019-9794

A vulnerability was discovered where specific command line arguments are not properly discarded during Firefox invocation as a shell handler for URLs. This could be used to retrieve and execute files whose location is supplied through these command line arguments if Firefox is configured as the...

The vulnerability of the Windows operating system’s LUAFV driver allows a hacker to execute arbitrary code.

The vulnerability of the LUAFV driver luafv.sys in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...

The vulnerability of the Windows Graphics Device Interface component of the Windows operating system allows attackers to compromise the confidentiality of protected information.

The vulnerability of the Windows Graphics Device Interface GDI component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows an attacker to compromise the confidentiality of protected information through a specially created...

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to execute arbitrary code in kernel mode

The vulnerability of the Win32k component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary code in kernel mode using a specially created application...

The vulnerability of the OLE Automatization component of the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the OLE Automatization component of the Windows operating system is related to a memory object handling error. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Vulnerability of Windows operating systems, related to errors in memory object handling, allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the DirectX component in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectX component in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Microsoft JET Database Engine database driver on Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft JET Database Engine database driver for Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Windows Zero-Day Emerges in Active Exploits

A just-patched vulnerability in the Windows operating system that was previously unknown up until last week is being actively exploited in the wild; it opens the door for full system takeover. Discovered by Vasily Berdnikov and Boris Larin of Kaspersky Lab on St. Patrick’s Day this year, the flaw...

Microsoft Windows GDI Information Disclosure Vulnerability (CNVD-2019-16752)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Graphics Device Interface GDI is one of the graphic device interfaces. An...

Microsoft Internet Explorer VBScript Engine Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Internet Explorer VBScript Engine. An attacker could exploit this vulnerability to execute arbitrary code in...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege-lifting vulnerability exists in Microsoft Windows that stems from Windows'...