CVE-2017-0146

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka...

Microsoft Windows Local Lift Vulnerability (CNVD-2017-03628)

Microsoft Windows is an operating system developed by the American company Microsoft. Microsoft Windows suffers from a local elevation vulnerability. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

Microsoft Windows Graphics Local Elevation of Privilege Vulnerability (CNVD-2017-03698)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the Windows Graphics Device Interface GDI Handling Memory Object, which can be exploited by an attacker to execute arbitrary code in kernel mode...

Microsoft Hyper-V Network Switch Denial of Service Vulnerability

Microsoft Windows is a popular operating system.Hyper-V is one of the virtualization products. A security vulnerability in the Hyper-V network switch for Microsoft Windows allows an attacker to exploit the vulnerability to crash the system via a specially crafted request...

Microsoft Windows Local Lift Vulnerability (CNVD-2017-03624)

Microsoft Windows is an operating system developed by the American company Microsoft. Microsoft Windows suffers from a local elevation vulnerability. An attacker could exploit this vulnerability to execute arbitrary code with kernel privileges...

Microsoft Windows Color Management Information Disclosure Vulnerability

Microsoft Windows is an operating system developed by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to obtain sensitive information...

PT-2017-1939

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue exists due to insufficient input validation in the SMBv1 protocol of the Microsoft Windows operating system. It allows a remote attacker to execute arbitrary code using...

IVPN Client for Windows Elevation of Privilege Vulnerability

IVPN Client for Windows is a virtual private network service from IVPN that runs on the windows platform and is designed for personal use. An elevation of privilege vulnerability exists in IVPN Client for Windows. An attacker can exploit this vulnerability to gain elevated privileges...

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

UBUNTU-CVE-2016-5214

Google Chrome prior to 55.0.2883.75 for Windows mishandled downloaded files, which allowed a remote attacker to prevent the downloaded file from receiving the Mark of the Web via a crafted HTML page...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted image...

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the atmfd.dll library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to obtain confidential information from the process’s memory...

CVE-2016-7272

The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site...

Microsoft Windows UAC Protection Security Bypass Vulnerability

Microsoft Windows is a set of operating systems developed by Microsoft Corporation in the United States. A security bypass vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to perform unauthorized operations bypassing security constraints...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s virtual hard disk driver stems from an improper restriction on access to files. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LSASS service in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system shutdown through a specially crafted request...

Microsoft Windows Local Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Universal Log File System driver, which arises from a failure of the program driver to properly handle objects in memory. The...

MS16-146: Security update for Microsoft graphics component: December 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the atmfd.dll library in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page from a remote location...