CVE-2016-0175: Exposure of Sensitive Information to an Unauthorized Actor

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to obtain sensitive information about kernel-object addresses, and consequently...

Microsoft Kernel-Mode Drivers Privilege Elevation Vulnerabilities (3158222)

This host is missing an important security update according to Microsoft Bulletin MS16-062. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Win32k Elevation of Privilege Vulnerability (CNVD-2016-03103)

Microsoft Windows is a series of operating systems released by the American company Microsoft. The vulnerability exists in the Microsoft Windows kernel mode driver. An elevation of privilege vulnerability exists in the Microsoft Windows kernel mode driver, which arises from a program's failure to...

CVE-2016-0171: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

DirectX Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

Cumulative Update for Windows 10: May 10, 2016

None None...

MS16-062: Description of the security update for Windows Kernel-Mode Drivers: May 10, 2016 (KB3156017)

None None...

Cumulative Update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: May 10, 2016

None None...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-0174 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

Microsoft Windows DirectX Graphics Kernel CVE-2016-0197 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsof...

MS16-062: Security update for kernel mode drivers: May 10, 2016

Resolves vulnerabilities in Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation...

PT-2016-1986

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to a lack of proper access control in a Windows operating system kernel-mode driver, which can be exploited by a local attacker using a specially crafted...

PT-2016-2006

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to insufficient access control in Windows kernel mode drivers, which can be exploited by a local attacker using a specially crafted application to elevate...

PT-2016-2004

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue...

PT-2016-2005

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in Windows kernel-mode drivers, which can be exploited by a local attacker using a specially crafted application to elevate their privilege...

PT-2016-2007

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access control in Windows kernel-mode drivers, which can be exploited by a local attacker using a specially crafted application to elevate their privilege...

PT-2016-1999

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511 Description The issue is related to errors in security settings, allowing a local attacker to bypass the Virtual Secure Mode Hypervisor Code Integrity protection mechanism. This can be achieved via a...