Windows DCE-RPC MIBEntryGet vulnerability (ErraticGopher)

Added: 04/28/2017 Background Distributed Computing Environment - Remote Procedure Call DCE-RPC is the protocol used by Windows operating systems for calling program functions on remote targets. Problem A memory corruption vulnerability in the DCE-RPC MIBEntryGet call could allow remote attackers ...

The vulnerability of the Windows operating system and the Microsoft Office software package allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows operating system and the Microsoft Office suite is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted document...

Microsoft Windows LDAP Remote Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. Microsoft Windows fails to correctly calculate the LDAP request buffer length is implemented with an elevation of privilege vulnerability that can be exploited by an attacker to send malicious traffic to a domain controller to elevate...

CVE-2017-0191

A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 handles objects in memory. An attacker who successfully exploited the vulnerability could cause a target system...

CVE-2017-0058

A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's system, aka "Win32k Information Disclosure...

What About the Plant Floor? Six Subversive Concerns for ICS Environments

Industrial enterprises such as electric utilities, petroleum companies, and manufacturing organizations invest heavily in industrial control systems ICS to efficiently, reliably, and safely operate industrial processes. Without this technology operating the plant floor, these businesses cannot...

Vulnerability of the Windows operating system, allowing a hacker to check files on the disk

The vulnerability of the Microsoft XML service on the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to remotely check files on the disk using a specially crafted web page...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Graphics Device Interface application in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of kernel-level drivers in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially crafted application...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Hyper-V virtualization system for the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially created application...

Lenovo Updates Remote Code Execution - Lenovo Support US

No description provided...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system arises from incorrect checking of buffer size. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the kernel control driver in the Windows transaction monitor is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the DCOM application in Windows operating systems is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...