Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12064)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2017-12784)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to obtain sensitive information...

Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-12792)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information, bypass security restrictions, and perform...

Microsoft Windows Remote Code Execution Vulnerability (CNVD-2017-12781)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in RPC in Microsoft Windows. A remote attacker could exploit this vulnerability to execute arbitrary code on the target system...

Microsoft Windows TDX Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. TDX is a multifunctional securities information platform of China Fortune Trend Technology Corporation. A local elevation of privilege vulnerability exists in Microsoft Windows TDX. A local attacker c...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to insufficient checking of descriptors. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...

Lenovo Service Bridge Cross-Site Request Forgery Vulnerability

Lenovo Service Bridge is a Windows program from the Chinese company Lenovo Lenovo that automatically detects the serial number and model number of your device. A cross-site request forgery vulnerability exists in versions prior to Lenovo Service Bridge 4. A remote attacker could exploit this...

Fastspot BigTree CMS on Windows Directory Traversal Vulnerability

Fastspot BigTree CMS on Windows is the U.S. Fastspot company's set of Winsows platform based on PHP and MySQL open source content management system CMS. A directory traversal vulnerability exists in the core\admin\ajax\developer\extensions\file-browser.php file in Fastspot BigTree CMS on Windows...

Sharp RW-4040 for Windows Untrusted Search Path Vulnerability

Sharp RW-4040 for Windows is a tool for Windows-based IC card readers from Sharp Japan that can be used to verify the execution environment. An untrustworthy search path vulnerability exists in Sharp RW-4040 for Windows version 7 1.2.0.0. An attacker can exploit this vulnerability to gain...

Microsoft Quietly Patches Another Critical Malware Protection Engine Flaw

Microsoft quietly patched a critical vulnerability Wednesday in its Malware Protection Engine. The vulnerability was found May 12 by Google’s Project Zero team, which said an attacker could have crafted an executable that when processed by the Malware Protection Engine’s emulator could enable...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to incorrect calculations of buffer lengths during LDAP requests. Exploiting this vulnerability allows a malicious actor to enhance their privileges by running specially created applications remotely...

The vulnerability of the Hyper-V Network Switch component of the Windows operating system allows a hacker to bypass the certification verification.

The vulnerability of the Hyper-V Network Switch component of the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to bypass certificate verification...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Microsoft Windows SMB Server Remote Denial of Service Vulnerability (CNVD-2017-08208)

Microsoft Windows is the popular computer operating system. A denial of service vulnerability exists in the processing of certain requests by the Microsoft Server Message Block 1.0 SMBv1 server. An attacker could exploit the vulnerability by constructing a request that would cause the affected...

Microsoft Windows SMB Server Remote Code Execution Vulnerability (CNVD-2017-07392)

Microsoft Windows is a family of operating systems released by Microsoft Corporation in the U.S. Sever Message Block SMB is one of the components that provides authentication for computers to access printers and file systems on servers. A remote code execution vulnerability exists in SMB version...

CVE-2017-0213

Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a speciall...

PT-2017-10460

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold, 1511, 1607, and 1703 Windows Server 2016 Description An...

Google find Windows nuke-level vulnerability and cannot be fixed-bug warning-the black bar safety net

Google security experts recently in the Microsoft Windows operating system find an unpatched vulnerability, and the security risk is high. Project zero researchers TavisOrmandy and NatalieSilvanovich this week announced that they on the Windows in the found they say“the worst”RCE, but did not...

Within the network of a large kill. Metasploit transplant MS17-010 vulnerabilities in the code module use-vulnerability warning-the black bar safety net

0x01 introduction 2017 year 4 June, a network of the most sensational events is undoubtedly TheShadowBrokers the release of a large number of NSA US National Security Agency“The formula of the organization” Equation Groupusing a destructive hacker tools, including remote compromised globally, abo...

The vulnerability of the SMBv1 protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...