6104 matches found
Microsoft Kernel-Mode Drivers Multiple Privilege Elevation Vulnerabilities (3171481)
This host is missing an important security update according to Microsoft Bulletin MS16-090. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Secure Kernel Mode Information Disclosure Vulnerability (3170050)
This host is missing an important security update according to Microsoft Bulletin MS16-089. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2016-3249: Undefined Security Weakness
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...
CVE-2016-3252: Undefined Security Weakness
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...
CVE-2016-3256: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability."...
CVE-2016-3250: Undefined Security Weakness
The kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...
CVE-2016-3251: Exposure of Sensitive Information to an Unauthorized Actor
The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafte...
CVE-2016-3286: Undefined Security Weakness
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...
CVE-2016-3254: Undefined Security Weakness
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...
Windows Kernel Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...
Windows Secure Kernel Mode Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows Secure Kernel Mode improperly handles objects in memory. A locally authenticated attacker who successfully exploited this vulnerability could be able to read sensitive information on the target system. To exploit this vulnerability, an...
PT-2016-2506
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in a Windows operating system kernel-mode driver, which can be exploited by an attacker to elevate privileges using a specially crafted...
PT-2016-2503
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in a Windows operating system kernel-mode driver, which can be exploited by an attacker to elevate their privileges using a specially craft...
PT-2016-2502
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a lack of access control in a Windows kernel mode driver, which can be exploited by an attacker to elevate their privileges using a specially crafted application. This...
PT-2016-2504
Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue ...
PT-2016-2500
Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511 Description The issue is related to a lack of protection for system data, allowing a local attacker to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information using a...
PT-2016-2479
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to a lack of access control in Microsoft Windows kernel-mode drivers, which can be exploited by an attacker to elevate their privileges using a specially crafte...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-3249 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...
MS16-089: Security Update for Windows Secure Kernel Mode (3170050)
The remote Windows host is missing a security update. It is, therefore, affected by an information disclosure vulnerability in the Windows Secure Kernel Mode due to improper handling of objects in memory. An authenticated, remote attacker can exploit this, via a crafted application, to disclose...
