Microsoft Windows SMB Client Driver CVE-2019-1293 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...

KLA11554 Multiple vulnerabilities in Microsoft Developer tools

Multiple vulnerabilities were found in Microsoft Developer tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An elevation...

Microsoft Compatibility Appraiser CVE-2019-1267 Local Privilege Escalation Vulnerability

Description Microsoft Compatibility Appraiser is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges on the system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

KB4512578: Windows 10 Version 1809 and Windows Server 2019 September 2019 Security Update

The remote Windows host is missing security update 4512578. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Text Service Framework TSF when the TSF server process does not validate the source of input or commands it receives. An...

Servicing stack update for Windows 10 version 1607: September 10, 2019

None None...

Microsoft Windows JET Database Engine CVE-2019-1249 Remote Code Execution Vulnerability

Description Microsoft Windows JET Database Engine is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

Design/Logic Flaw

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

CVE-2019-13517

CVE-2019-13517 affects BD Pyxis ES and Pyxis Enterprise Server. Affected versions: Pyxis ES 1.3.4–1.5.3 (and 1.6.1 noted in some entries) with Windows Server 4.4–4.12 for Pyxis Enterprise Server. Vulnerability type: session fixation (CWE-384) where existing access privileges are not restricted in...

CVE-2019-13517

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

U.S. Dept Of Defense: Improper Neutralization of Input During Web Page Generation

Summary: Cross-site scripting XSS vulnerabilities occur when: 1. Untrusted data enters a web application, typically from a web request. 2. The web application dynamically generates a web page that contains this untrusted data. Description: Impact Once the malicious script is injected, the attacke...

Servicing stack update for Windows Server 2012: September 10, 2019

Servicing stack update for Windows Server 2012: September 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include: Addressed an issue in which adding vulnerable boot level components to the Secure Bo...

Servicing stack update for Windows Server 2008 SP2: September 10, 2019

Servicing stack update for Windows Server 2008 SP2: September 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates.We strongly recommend you install the latest servicing stack update SSU for your operating system befo...

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: September 10, 2019

Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: September 10, 2019 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Key changes include: Addressed an issue in which adding vulnerable boot level...

The vulnerability of the DHCP server service for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the DHCP server service for Windows operating systems arises from an operation that goes beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted packet to the DHCP server...

Servicing stack update for Windows 10 version 1903: August 27, 2019

None None...

Microsoft Windows and Windows Server Denial of Service Vulnerability (CNVD-2019-34583)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A denial-of-service vulnerability exists in Microsoft Windows, which arises from the failu...

Microsoft Windows and Windows Server Privilege Permission and Access Control Issues Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege-granting and access-control issue vulnerability exists in Microsoft Windows an...

Microsoft Windows power lifting vulnerability (CNVD-2019-31062)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in the way the wcmsvc.dll file handles memo...

Microsoft Windows and Windows Server Input Validation Error Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An input validation error vulnerability exists in fontsub.dll in Microsoft Windows and...

Microsoft Windows and Windows Server Jet Database Engine Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Jet Database Engine is one of the database engines. A remote code execution...