Microsoft Windows Assisted Login Privilege Elevation Vulnerability (CNVD-2016-02248)

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Secondary Logon Service is one of the secondary logon services. An elevation of privilege vulnerability exists in the Secondary Logon Service service in Microsoft Windows 10 Gold and 1511, which stems...

Microsoft Internet Explorer DLL Loading Remote Code Execution Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE version 11, which originates from a program that fails to properly...

PT-2016-1675 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to a lack of access control in the Windows operating system kernel mode driver, which can be exploited by a local attacker to elevate privileges using a...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the OLE component in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel mode driver is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

CVE-2016-0121

The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka "OpenType...

Microsoft Internet Explorer Memory Corruption Vulnerability (CNVD-2016-01530)

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A remote code execution vulnerability exists in Microsoft IE versions 9 through 11. Due to the program failing to properly access...

Microsoft .NET XML Validation Security Feature Bypass Vulnerability (3141780)

This host is missing an important security update according to Microsoft Bulletin MS16-035 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Sync Framework component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures using specially crafted data...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the authentication mechanism based on forms in the ADFS component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using specially...

The vulnerability of the Windows operating system and the Internet Explorer browser allows attackers to increase their privileges.

The vulnerability of the Windows operating system and the Internet Explorer browser is related to errors in library loading. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Network Policy Server component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through specially crafted requests...

The vulnerability of the Windows operating system, which allows a perpetrator to bypass the authentication process

The vulnerability of the Kerberos component of the Windows operating system is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures locally...

CVE-2016-0042

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "Windows DLL Loading Remote...

CVE-2016-0041

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 10 and 11 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka...

CVE-2016-0036

The Remote Desktop Protocol RDP implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol RDP Elevation of Privilege Vulnerability."...

CURL-CVE-2016-0754 remote filename path traversal in curl tool for Windows

curl does not sanitize colons in a remote filename that is used as the local filename. This may lead to a vulnerability on systems where the colon is a special path character. Currently Windows is the only OS where this vulnerability applies. curl offers command line options --remote-name also...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s RPC implementation is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a local attacker to enhance their privileges by using a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to gain access to user accounts

The vulnerability of the Netlogon service in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain access to user accounts due to configuration errors in the domain controller...