PT-2016-7588

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a handle to a kernel object may be returned to the user. This could...

PT-2016-7593

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to improper access controls in the kernel mode layer handler for DxgDdiEscape, allowing a regular user to write to a part of the registry intend...

PT-2016-7589

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a missing check on a function return value in the kernel mode layer handler for DxgDdiEscape, potentially allowing an uninitialized value to ...

PT-2016-7585

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where a value passed from a user to the driver is used without validation ...

PT-2016-7594

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver versions affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where the size of an input buffer is not validated. This can lead...

PT-2016-7592

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a lack of validation of the size of an input buffer in the kernel mode layer handler for DxgDdiEscape. This can lead to a denial of service o...

PT-2016-7583

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where multiple pointers are used without checking for NULL. This can lead ...

PT-2016-7587

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgDdiEscape, where a pointer passed from a user to the driver is used without validation. This...

CVE-2016-8823: Improper Restriction of Operations within the Bounds of a Memory Buffer

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where the size of an input buffer is not validated leading to a denial of service or possible escalation of privileges...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-12469)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows 10 and Windows Server 2016 versions due to Windows Secure Kernel Mode failing to properly handle memory objects. An attacker can explo...

Security Bulletin: Multiple vulnerabilities in the NVIDIA Windows GPU Display Driver kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape and a vulnerability in the Linux GPU Display Driver kernel mode layer (nvidia.ko)

Vulnerability Details CVE-2016-8821 NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where improper access controls may allow a user to access arbitrary physical memory, leading to an escalation of privileges. CVSS Base...

Microsoft Windows Kernel Mode Drivers Multiple Vulnerabilities (3205651)

This host is missing an important security update according to Microsoft Bulletin MS16-151 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)

This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Information Disclosure And Elevation of Privilege Vulnerabilities (3205655)

This host is missing a critical security update according to Microsoft Bulletin MS16-149. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-149: Security Update for Microsoft Windows (3205655)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in a Windows Crypto driver running in kernel mode due to improper handling of objects in memory. A local attacker can exploit this, via a...

Nvidia Windows Kernel Mode Driver Denial Of Service

Summary An local denial of service vulnerability exists in the communication functionality of Nvidia Windows Kernel Mode Driver. A specially crafted message can cause a vulnerability resulting in a machine crash BSOD. An attacker can send a specific message to trigger this vulnerability. Tested...

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...

MS16-151: Description of the security update for Windows kernel-mode drivers: December 13, 2016

None None...

December 2016 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2

December 2016 Security Monthly Quality Rollup for Windows 8.1 and Windows Server 2012 R2 Summary This security update resolves the following vulnerabilities in Windows 8.1 and Windows Server 2012 R2: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows...

December 2016 Security Only Quality Update for Windows Server 2012

December 2016 Security Only Quality Update for Windows Server 2012 Summary This security update resolves the following vulnerabilities in Windows Server 2012: MS16-153 Security update for common log file system driver MS16-151 Security update for Windows kernel-mode drivers MS16-149 Security upda...