KingCloud Antivirus v2.4.2.39 Personal Edition ZySandbox.sys Driver Has Denial of Service Vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus for personal end devices launched by Tatsunobuilder.ZySandbox.sys is a kernel-mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the ZySandbox.sys driver for KingCloud Antivirus...

KingCloud Antivirus v2.4.2.39 Personal Edition ZySandbox.sys Driver Has Denial of Service Vulnerability

KingCloud Antivirus is a next-generation artificial intelligence antivirus for personal end devices launched by Tatsunobuilder.ZySandbox.sys is a kernel-mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the ZySandbox.sys driver for KingCloud Antivirus...

CVE-2018-8282: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012,...

CVE-2018-8282

CVE-2018-8282 is a Win32k Elevation of Privilege vulnerability in Windows, caused by the Windows kernel-mode driver failing to properly handle objects in memory. It affects Windows 7, Server 2012 R2, RT 8.1, Server 2008/2012, 8.1, Server 2016, Server 2008 R2, 10 and Server 10 servers. Impact is l...

Microsoft Windows Multiple Vulnerabilities (KB4338815)

This host is missing a critical security update according to Microsoft KB4338815 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Description of the security update for the Win32k elevation of privilege vulnerability in Windows Server 2008, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009: July 10, 2018

None None...

KB4338820: Windows Server 2012 July 2018 Security Update

The remote Windows host is missing security update 4338820 or cumulative update 4338830. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who...

PT-2018-18528

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2008 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 Windows Server 2016 Windows 8.1 Windows RT 8.1 Windows 10 Windows 10 Servers Description An issue exists in Windows when the Windows kernel-mode...

KB4338814: Windows 10 Version 1607 and Windows Server 2016 July 2018 Security Update

The remote Windows host is missing security update 4338814. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A remote code execution...

KB4338823: Windows 7 and Windows Server 2008 R2 July 2018 Security Update

The remote Windows host is missing security update 4338823 or cumulative update 4338818. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. CVE-2018-8202 - A...

Denial of Service Vulnerability in Fair Smart Antivirus fildds.sys Handling Malformed Data

Fair Intelligent Antivirus 8 is an antivirus program from Beijing FairShield Technology Co. fildds.sys is a kernel mode driver in Fair Intelligent Antivirus 8. A security vulnerability exists in the fildds.sys driver in Fair Intelligent Antivirus 8 V8.1.5.6109 V8.1.7.6865. An attacker can exploit...

Cryptomining Campaign Returns Coal and Not Diamond

Executive summary Soon after a launch of a new cryptocurrency, Bitvote, in January, Talos discovered a new mining campaign affecting systems in India, Indonesia, Vietnam and several other countries that were tied to Bitvote. Apart from the fact that the attackers have chosen to target the new...

CVE-2018-0977

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability"...

CVE-2018-0902

The Cryptography Next Generation CNG kernel-mode driver cng.sys in Windows 10 Gold, 1511, 1607, 1703, and 1709. Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way the kernel-mode driver validates and enforces impersonation levels, ak...

Security feature bypass

The Cryptography Next Generation CNG kernel-mode driver cng.sys in Windows 10 Gold, 1511, 1607, 1703, and 1709. Windows Server 2016 and Windows Server, version 1709 allows a security feature bypass vulnerability due to the way the kernel-mode driver validates and enforces impersonation levels, ak...

CVE-2018-0902

CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...

CVE-2018-0977: Undefined Security Weakness

The Windows kernel mode driver in Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how objects are handled in memory, aka "Win32k Elevation of Privilege Vulnerability"...

CNG Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Cryptography Next Generation CNG kernel-mode driver cng.sys when it fails to properly validate and enforce impersonation levels. An attacker could exploit this vulnerability by convincing a user to run a specially crafted application that is...

KB4088782: Windows 10 Version 1703 March 2018 Security Update

The remote Windows host is missing security update 4088782. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry. An attacker who successfully exploited this...

KB4088776: Windows 10 Version 1709 and Windows Server Version 1709 March 2018 Security Update

The remote Windows host is missing security update 4088776. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain...