Old certificate, new signature: Open-source tools forge signature timestamps on Windows drivers

Cisco Talos has observed threat actors taking advantage of a Windows policy loophole that allows the signing and loading of cross-signed kernel mode drivers with signature timestamp prior to July 29, 2015. Actors are leveraging multiple open-source tools that alter the signing date of kernel mode...

Microsoft Windows Kernel Mode Drivers information leakage vulnerability

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. An information disclosure vulnerability exists in Microsoft Windows Kernel Mode Drivers. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows 10...

Windows Kernel-mode Driver Permission and Access Control Vulnerabilities

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. A security vulnerability exists in Windows Kernel-Mode Drivers. The following products and editions are affected:Windows 10 Version 1809 for x64-based Systems,Windows 10 Version 1809 for ARM64-based Systems,Windows...

Microsoft Windows Event Tracing Security Vulnerabilities

Microsoft Windows Event Tracing is an application from Microsoft Corporation USA. It provides a mechanism for tracking and logging events raised by user-mode applications and kernel-mode drivers. A security vulnerability exists in Microsoft Windows Event Tracing. The following products and editio...

Intel® Graphics Drivers Multi-Generation Processor Privilege Escalation Vulnerability

Intel is an American company that develops CPUs and is the world's largest manufacturer of personal computer parts and CPUs. Intel® Graphics Drivers Multi-Generation Processor Privilege Escalation Vulnerability, Inadequate control flow management in some IntelR kernel-mode drivers for graphics...

CVE-2019-0143

Unhandled exception in Kernel-mode drivers for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0143

Unhandled exception in Kernel-mode drivers for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

Design/Logic Flaw

Unhandled exception in Kernel-mode drivers for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0143

Unhandled exception in Kernel-mode drivers for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0143: Improper Handling of Exceptional Conditions

Unhandled exception in Kernel-mode drivers for IntelR Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access...

PT-2019-4034

Name of the Vulnerable Software and Affected Versions IntelR Ethernet 700 Series Controllers versions before 7.0 Description The issue is related to unhandled exceptions in Kernel-mode drivers, potentially allowing an authenticated user to enable a denial of service via local access. It is also...

Microsoft Windows Multiple Vulnerabilities (KB4048957)

This host is missing a critical security update according to Microsoft KB4048957 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

November 14, 2017—KB4048962 (Security-only update)

None None...

November 14, 2017—KB4048961 (Security-only update)

None None...

October 10, 2017—KB4041678 (Security-only update)

None None...

Microsoft Patch Tuesday - October 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 63 new vulnerabilities with 28 of them rated critical and 35 rated important. These vulnerabilities impact Graphic...

September 12, 2017—KB4038793 (Security-only update)

None None...

CVE-2017-8675

The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k...

CVE-2017-8675

The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k...

Privilege escalation

The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k...