Vulnerability of the Windows operating system, allowing a malicious individual to access confidential information

The vulnerability that allows access to confidential information is related to the incorrect processing by the Windows kernel driver of objects in memory...

The vulnerability of the Windows operating system, which allows a malicious individual to increase their privileges

A vulnerability that allows for increasing the level of privileges related to incorrect handling of objects in memory by the kernel-level driver in Windows. Exploiting this vulnerability enables attackers to increase their privileges and gain access to arbitrary kernel memory...

Windows operating system’s vulnerability, which allows a malicious actor to trigger a service failure

The vulnerability of the TCP protocol in the Windows operating system allows a malicious actor to induce a service failure by creating TCP packets that contain incorrect data fields in the “Options” header...

The vulnerability of the Windows operating system, which allows a malicious individual to trigger a service failure

A vulnerability that can lead to service failure exists in the Windows operating system and is related to the processing of iSCSI packets. If exploited successfully, a malicious individual will be able to cause a service failure or service disruption...

The vulnerability of the Windows operating system, which allows a malicious individual to increase their privileges

A vulnerability that allows for increased privileges exists in Active Directory and is related to the distribution of passwords created based on group policy settings. Successful exploitation of this vulnerability enables an attacker who has been authenticated to decrypt passwords and use them to...

Vulnerability of the Windows operating system, allowing a malicious individual to execute arbitrary code

The vulnerability exists in Windows components and is related to the processing of specially crafted two-dimensional 2D geometric figures. Exploiting this vulnerability allows for the execution of code remotely, provided that the user opens the file containing such specially crafted figures using...

The vulnerability of the Windows operating system, which allows a malicious individual to trigger a service failure

The vulnerability in the implementation of the IPv6 TCP/IP protocol in Windows allows a malicious actor to trigger a failure of the vulnerable system using an ICMPv6 packet...

The vulnerability of the Windows operating system, which allows a malicious individual to alter the information transmitted during an RDP session

The vulnerability in the Remote Desktop Protocol RDP allows an attacker to modify the contents of the traffic for an active RDP session...

Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing attackers to obtain confidential information

The vulnerability of the Windows operating system and the Microsoft Edge browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially crafted PDF document...

Vulnerability of the Windows operating system and the Internet Explorer browser, allowing attackers to increase their privileges

The vulnerability of the Web Proxy Auto Discovery protocol for the Windows operating system and the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely by using the NetBIOS name...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted NetLogon request...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the dynamically linked GDI32.dll library of the Windows operating system’s Graphics component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the SMB server component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application that requests authentication f...

Information disclosure

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201...

Microsoft Windows and Microsoft Windows PDF Information Disclosure Vulnerability

Microsoft Windows and Microsoft Edge are both products of Microsoft Corporation USA. The former is a series of operating systems; the latter is a web browser that is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft...

Elevation of Privilege Vulnerability Found in Microsoft Windows WPAD Agent

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows that stems from a program's inability to properly handle certain proxy discovery scenarios using the Web Proxy Autodiscovery WPAD...

Microsoft Windows WPAD Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the Web Proxy Autodiscovery WPAD protocol for Microsoft Windows. An attacker could exploit this vulnerability to bypass security checks and obtain...

AdobeUpdateService 3.6.0.248 - Unquoted Service Path Privilege Escalation

Exploit for windows platform in category local exploits ---------------------------------------------------------------------------------------------------------- Exploit Title: AdobeUpdateService - Privilege Escalation Unquoted Service Path vulnerability Date: 18/05/2016 Exploit Author : Cyril...

PT-2016-2168

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to the Web Proxy Auto Discovery WPAD protocol implementation, which mishandles proxy discovery. This allows remote attackers to redirect network traffic via...

MS16-078: Security update for Windows Diagnostic Hub: June 14, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application.Summary This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if an...