CVE-2016-7246

The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-7224

Virtual Hard Disk Driver in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation...

CVE-2016-3333

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

Microsoft Windows Universal Log File System Driver Elevation of Privilege Vulnerability (CNVD-2016-11020)

Microsoft Windows is a series of operating systems released by the American company Microsoft Microsoft. CLFS is a high-performance, general-purpose log file subsystem. An elevated privilege vulnerability exists when the Windows Common Log File System CLFS driver fails to properly handle objects ...

Microsoft Windows Universal Log File System Driver Elevation of Privilege Vulnerability (CNVD-2016-11019)

Microsoft Windows is a series of operating systems released by the American company Microsoft Microsoft. CLFS is a high-performance, general-purpose log file subsystem. An elevated privilege vulnerability exists when the Windows Common Log File System CLFS driver fails to properly handle objects ...

Microsoft Windows Universal Log File System Driver Elevation of Privilege Vulnerability (CNVD-2016-11023)

Microsoft Windows is a family of operating systems released by the American company Microsoft Microsoft. CLFS is a high-performance, general-purpose log file subsystem. Elevated privilege vulnerabilities exist when the Windows Common Log File System CLFS driver fails to properly handle objects in...

CVE-2016-3298

Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to determine the existence of arbitrary files via a crafted web site, aka "Internet Explorer Information Disclosure...

Microsoft Windows SMB Server Remote Code Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. SMBv1 server is one of the server protocol components. An authenticated remote code execution vulnerability exists in the SMBv1 server in Microsoft Windows. A remote attacker can exploit this...

CVE-2016-6925

Use-after-free vulnerability in Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4272, CVE-2016-4279,...

CVE-2016-3344

The Secure Kernel Mode feature in Microsoft Windows 10 Gold and 1511 allows local users to obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."...

CVE-2016-3345

The SMBv1 server in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Authenticat...

Microsoft Windows GDI Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Graphics Device Interface GDI is one of the graphics device interface components. A memory corruption vulnerability exists in the Graphics Device Interface in Microsoft Windows. A remote attacker coul...

Microsoft Windows GDI Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Graphics Device Interface GDI is one of the graphics device interface components. An elevation of privilege vulnerability exists in the Graphics Device Interface in Microsoft Windows. An attacker can...

Vulnerability of Microsoft Edge browser and Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Microsoft Edge browser’s PDF library and the Windows operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the authentication process

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by manipulating the system’s recovery mechanism, thereby enabling them to check the authenticity of the NTLM...

The vulnerability of the Windows operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Windows operating system’s kernel is related to the improper handling of system call errors during page faults. Exploiting this vulnerability can allow an attacker, operating locally, to obtain confidential information through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating locally, to enhance their privileges through a specially created application...

Configuring KMS Licensing for Windows and Office

This article contains information for administrators about configuring Citrix Provisioning , formerly Provisioning ServicesPVS 5.6 Service Pack 1 or later target devices that are using the Microsoft Key Management Server KMS in their environment. Background KMS can be configured on the virtual di...

Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2016-04936)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An elevation of privilege vulnerability exists in the Microsoft Windows kernel-mode driver that stems from the program's...

CVE-2016-4250

Adobe Reader and Acrobat before 11.0.17, Acrobat and Acrobat Reader DC Classic before 15.006.30198, and Acrobat and Acrobat Reader DC Continuous before 15.017.20050 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...