CVE-2016-3376

CVE-2016-3376 is a local privilege escalation in the Windows kernel Win32k subsystem affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7, 8.1, Server 2012, Windows RT 8.1, and Windows 10 releases 1511/1607). The flaw involves the kernel-mode drivers mishandling objects i...

CVE-2016-7185

CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...

CVE-2016-3376: Improper Privilege Management

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-7185: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-7211: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3266: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3341: Undefined Security Weakness

The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Windows Transaction Manager Elevation of Privilege Vulnerability."...

Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3192892)

This host is missing an important security update according to Microsoft Bulletin MS16-123. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-123: Security Update for Windows Kernel-Mode Drivers (3192892)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple elevation of privilege vulnerabilities exist in the Windows kernel-mode driver due to improper handling of objects in memory. A local attacker can exploit these, via a special...

October 2016 Security Only Quality Update for Windows Server 2012

October 2016 Security Only Quality Update for Windows Server 2012 Summary This security update resolves the following vulnerabilities in Windows Server 2012: MS16-101 Security update for Windows authentication methods MS16-124 Security update for Windows registry MS16-123 Security update for...

MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

None None...

October 2016 security monthly quality rollup for Windows 8.1 and Windows Server 2012 R2

October 2016 security monthly quality rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security updates includes improvements and fixes from an update that was shipped earlier by update 3185279. To learn more about the non-security improvements and fixes in this update, see the...

MS16-120 and MS16-123: Description of the security update for kernel-mode drivers: October 11, 2016

None None...

October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2

October 2016 Security Only Quality Update for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1, and Windows Server 2012 R2: MS16-101 Security update for Windows authentication methods MS16-118 Cumulative security update for...

Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016

None None...

Cumulative update for Windows 10 Version 1511: October 11, 2016

None None...

CVE-2016-3349

The CVE-2016-3349 issue is a Win32k Elevation of Privilege in Windows where the Windows kernel-mode driver (Win32k.sys) fails to handle memory objects correctly. An attacker who can log on locally and run a crafted application could execute arbitrary code in kernel mode, gaining full control and ...

CVE-2016-3348

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

CVE-2016-3349: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2016-3348: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...