PT-2018-2031 · Microsoft · Windows 10 Servers +12

Name of the Vulnerable Software and Affected Versions: Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description: The issue is caused by the Windows...

The vulnerability of the Windows operating system, related to errors in the driver authenticity verification mechanism, allows a hacker to load improperly signed drivers into the kernel.

The vulnerability of the Windows operating system is related to errors in the mechanism for verifying the authenticity of kernel drivers. Exploiting this vulnerability allows an attacker to load improperly signed drivers into the kernel...

The vulnerability of the Windows operating system, related to errors in the installation process, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system is related to errors during the installation process from physical media USB, DVD, etc.. Exploiting this vulnerability can allow an attacker to increase their privileges by using the “keep nothing” option during the installation process...

CVE-2018-6263

NVIDIA GeForce Experience contains a vulnerability in all versions prior to 3.16 on Windows in which an attacker who has access to a local user account can plant a malicious dynamic link library DLL during application installation, which may lead to escalation of privileges...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recordin...

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.

The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted files in the Advanced Recordin...

Microsoft Windows RemoteFX Virtual GPU Microport Driver Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. Microsoft Windows suffers from a local elevation of privilege vulnerability. An attacker could exploit this issue to gain elevated privileges...

Microsoft Windows JScript Local Security Bypass Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local security bypass vulnerability exists in Microsoft Windows. An attacker could use this issue to bypass certain security restrictions and perform unauthorized operations. This could facilitate...

Remote code execution

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...

The vulnerability of Microsoft Hyper-V hardware virtualization system for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Hyper-V hardware virtualization technology for Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code on the host operating system through a specially created...

CVE-2018-13397

There was an argument injection vulnerability in Sourcetree for Windows from version 0.5.1.0 before version 3.0.0 via Git subrepositories in Mercurial repositories. An attacker with permission to commit to a Mercurial repository linked in Sourcetree for Windows is able to exploit this issue to ga...

Windows vulnerability allows hackers administrator permission to transfer to the guest account-vulnerability warning-the black bar safety net

Colombia cyber security experts SebastianCastro recently shared a report, the disclosure of the Windows system in the“critical”level vulnerabilities, allowing hackers the administrator permission to transfer to the other account. The vulnerability from the Windows XP system already exists, in a...

The vulnerability in the set of components of Device Guard for Windows operating systems allows a hacker to circumvent security restrictions.

The vulnerability of the Device Guard component of the Windows operating system is related to errors during file signature verification. Exploiting this vulnerability can allow an attacker to circumvent security restrictions using a specially crafted file...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-23235)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the processing of the getAttribute method in Foxit Reader 9.2.0.9297 and earlier...

Foxit Reader and Foxit PhantomPDF for Windows out-of-bounds write vulnerability (CNVD-2018-23222)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. An out-of-bounds write vulnerability exists in the conversion of HTML files to PDF in Foxit Reader 9.2.0.9297 and earlier versions...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-24462)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the resolveNode event in Foxit Reader 9.2.0.9297 and earlier versions...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-21829)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the removeField property of the app object in Foxit Reader 9.2.0.9297...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-25193)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the Form count property in Foxit Reader 9.2.0.9297 and earlier versio...

Foxit Reader and Foxit PhantomPDF for Windows Out-of-Bounds Read Vulnerability (CNVD-2018-23228)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. An out-of-bounds read vulnerability exists in the conversion of HTML files to PDF in Foxit Reader 9.2.0.9297 and earlier versions a...

Foxit Reader and Foxit PhantomPDF for Windows Memory Misreference Vulnerability (CNVD-2018-24460)

Foxit Reader for Windows is a Windows-based PDF document reader from China's Foxit Foxit Software Corporation.Foxit PhantomPDF for Windows is its commercial version. A memory misreference vulnerability exists in the handling of the id attribute of aliasNode in Foxit Reader 9.2.0.9297 and earlier...