4893 matches found
Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability of the Windows operating system’s print queue dispatcher is related to security configuration errors. Exploiting this vulnerability allows a perpetrator performing a “man-in-the-middle” attack to execute arbitrary code using a specially crafted print driver during printer...
The vulnerability of the Microsoft Windows operating system, which allows a perpetrator to bypass the security mechanisms for secure downloads
The vulnerability of the Microsoft Windows operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious individual to bypass the security mechanisms for secure loading by using administrative privileges to install the necessary policies...
Microsoft Netlogon elevation of privilege vulnerability (CNVD-2016-06260)
Microsoft Windows is the popular computer operating system. Windows Netlogon does not properly establish a secure channel to a domain controller and an elevation of privilege vulnerability exists that can be successfully exploited to run a constructed application on a domain-connected system...
Microsoft Windows Graphics Remote Code Execution Vulnerability (CNVD-2016-06272)
Microsoft Windows is the popular computer operating system. A remote code execution vulnerability exists in Microsoft Windows due to a font library that does not properly handle constructed embedded fonts. This vulnerability could be exploited by an attacker to take full control of an affected...
Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2016-06299)
Microsoft Windows is the popular computer operating system. Some versions of the Windows kernel-mode driver do not properly handle memory objects and an elevation of privilege vulnerability exists, which can be exploited by a local user with a constructed application...
CVE-2016-3237
Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a fallback to NTLM...
CVE-2016-5253
The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...
Windows A high-risk vulnerability allows a hacker in the user access to phishing pages to steal their Microsoft account and related services-vulnerability warning-the black bar safety net
! In all Windows System are the presence of a security may cause the user to visit a phishing site case leaked their Microsoft account user name, password, and Microsoft account binding and is associated with a large number of important business, this information will also be affected Including:...
MS16-094: Security update for Secure Boot: July 12, 2016
Resolves a vulnerability in Windows that could allow Secure Boot security features to be bypassed if an attacker installs an affected policy on a target device. An attacker must have either administrative privileges or physical access to install a policy and bypass Secure Boot.SummaryThis securit...
Dropping Elephant hacker group using the old Windows vulnerability to implementation attacks-vulnerability warning-the black bar safety net
! As the old saying goes:don't judge people on. For the network of criminal organizations is the same,not only from its use of the vulnerability to determine a hacker organizations. According to foreign media reports,Kaspersky Lab's global research and analysis team has discovered a network of...
CVE-2016-0287
IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors...
The vulnerability of the Windows operating system allows a remote attacker to execute arbitrary code within the system account context.
The vulnerability of the HTTP.sys driver on Windows operating systems, which implements the HTTP protocol, lies in the improper handling of HTTP requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code within the system account’s context. To exploit this...
The vulnerabilities in Acrobat software allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in Acrobat for Windows allows attackers to bypass the sandbox protection mechanism and execute native code in a privileged context...
The vulnerability of the Windows operating system, which allows a hacker to bypass the account locking mechanism
The vulnerability that allows bypassing the protection mechanism is related to incorrect checking of the user lock status by the SAMR protocol remote security account management...
The vulnerability of the Windows operating system allows a perpetrator to execute arbitrary code or cause a service failure.
A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. This...
The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
A vulnerability that allows for remote execution of code exists in the Windows event log system and is related to the processing of specially crafted files. Exploiting this vulnerability enables remote execution of code provided that the user opens a specially crafted event log file. If the user...
The vulnerability of the Windows operating system, which allows a perpetrator to increase their privileges or execute arbitrary code
Vulnerability exists in the Message Queue Service MSMQ, the BthPan.sys and MQAC.sys drivers. This allows a malicious individual to elevate their privileges within the system and execute arbitrary code...
The vulnerability of the Windows operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in DirectShow allows for an increase in privilege levels...
The vulnerability of the Windows operating system allows a malicious intruder to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the Remote Procedure Call LRPC of Microsoft allows attackers to circumvent security restrictions. This vulnerability relates to the leakage of messages sent by the LRPC server to clients, if those messages contain data that is not intended for such messages. RPC considers suc...
The vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code
The vulnerability in GDI+, related to the processing of specially crafted images, allows for remote execution of code provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...