CVE-2017-3753

CVE-2017-3753 affects Lenovo systems using AMI UEFI BIOS. Root cause: BIOS SMI Handler input validation failure allowing code execution in System Management Mode. Impact: attacker with local admin access could bypass protections (e.g., Device Guard, Hyper-V). Affected products are Lenovo machines...

Microsoft Windows Multiple Vulnerabilities (KB4034668)

This host is missing a critical security update according to Microsoft KB4034668 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4034660)

This host is missing a critical security update according to Microsoft KB4034660 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4034658)

This host is missing a critical security update according to Microsoft KB4034658 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4034674)

This host is missing a critical security update according to Microsoft KB4034674 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Hyper-V Remote Code Execution Vulnerability (CNVD-2017-28010)

Microsoft Windows is the popular operating system. Microsoft Windows Hyper-V does not properly validate user input, allowing an attacker to exploit a vulnerability by submitting a special request that could execute arbitrary code...

Microsoft Windows Hyper-V Denial of Service Vulnerability (CNVD-2017-20507)

Microsoft Windows is a family of operating systems from Microsoft Corporation, U.S.A. Hyper-V is one of the virtualization products. A denial of service vulnerability exists in Hyper-V in Microsoft Windows, which originates from the program failing to properly validate input from privileged users...

Microsoft Windows Multiple Vulnerabilities (KB4034672)

This host is missing a critical security update according to Microsoft KB4034672 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Server 2012 Multiple Vulnerabilities (KB4034665)

This host is missing a critical security update according to Microsoft KB4034665 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-8664

Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows...

CVE-2017-8664

Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows...

Remote code execution

Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows...

CVE-2017-8623

Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability"...

CVE-2017-8623

Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability"...

Denial of service

Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability"...

CVE-2017-8623

Windows Hyper-V in Windows 10 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability"...

CVE-2017-8664

CVE-2017-8664 affects Windows Hyper-V remote code execution when input from a privileged user on a guest OS is not properly validated. Connected sources (e.g., CNVD-2017-28010 and OpenVAS/Nessus listings) corroborate Hyper-V input-validation as the root cause and remote-code-execution impact, but...

CVE-2017-8623

CVE-2017-8623 affects Microsoft Windows Hyper-V (Windows 10 versions 1607/1703 and Windows Server 2016). The flaw is due to Hyper-V Denial of Service arising from improper validation of input by a privileged user on a guest operating system, enabling a guest VM to cause the host to crash. The pra...

CVE-2017-8664

Windows Hyper-V in Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to properly validate input from a privileged user on a guest operating system, aka "Windows...

Microsoft Patches Critical Windows Search Vulnerability

Microsoft patched more than two dozen remote code execution vulnerabilities today, many of them rated critical. One was a RCE bug that allowed an attacker to take complete control of a server or workstation via Windows Search. The fixes were part of Microsoft’s August Patch Tuesday update that...