Privilege escalation

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...

CVE-2018-8342

Summary (CVE-2018-8342): A local elevation-of-privilege flaw in Microsoft Windows’ Network Driver Interface Specification (NDIS) due to ndis.sys not validating the buffer length before copying memory. Affected: Windows 7 and Windows Server 2008 R2. Root cause: buffer-length check missing during m...

KLA11789 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Eextended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

Microsoft Windows NDIS CVE-2018-8342 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2008 R2 fo...