17161 matches found
CVE-2016-7271: Undefined Security Weakness
The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level VTL protection mechanism via a crafted application, aka "Secure Kernel Mode Elevation of Privilege Vulnerability."...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - us
Lenovo Security Advisory: LEN-11306 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8226 Summary Description: A vulnerability was identified in the BIOS of Lenovo System X M5, M6, and X6 systems. An attacker with administrative access...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - Lenovo Support US
No description provided...
Microsoft Windows Icon File Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file or folder. The specific flaw exists within the...
CVE-2016-6848: Undefined Security Weakness
An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. API requests can be used to inject, generate and download executable files to the client "Reflected File Download". Malicious platform specific e.g. Microsoft Windows batch file can be created via a trusted domain without...
Design/Logic Flaw
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected...
Microsoft Windows Uniscribe Component Remote Code Execution Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in the Microsoft Windows Uniscribe component. An attacker could exploit this vulnerability to compromise an affected system...
MS16-149: Security Update for Microsoft Windows (3205655)
The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in a Windows Crypto driver running in kernel mode due to improper handling of objects in memory. A local attacker can exploit this, via a...
Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)
This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Crypto Driver Local Information Disclosure Vulnerability
Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Crypto driver. An attacker can exploit this vulnerability to obtain sensitive information with the help of specially crafted files...
Microsoft Edge Multiple Vulnerabilities (3204062)
This host is missing a critical security update according to Microsoft Bulletin MS16-145. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Information Disclosure And Elevation of Privilege Vulnerabilities (3205655)
This host is missing a critical security update according to Microsoft Bulletin MS16-149. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Kernel Mode Drivers Multiple Vulnerabilities (3205651)
This host is missing an important security update according to Microsoft Bulletin MS16-151 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows CLFS Driver Information Disclosure (MS16-153: CVE-2016-7295)
An elevation of privilege vulnerability exists in the Windows Common Log File System CLFS driver of Microsoft Windows. The vulnerability is due to the way Windows improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run processes in an elevated...
MS16-151: Security update for Windows kernel-mode drivers: December 13, 2016
Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to an affected system and runs a specially crafted application that could exploit the vulnerabilities and take control of the system.SummaryThis security update resolves vulnerabilities in Microsoft...
Microsoft Windows Graphics Component CVE-2016-7257 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Office 2016 for Mac Microsoft Office for Mac 2011 Microsoft Windows 7 for...
Microsoft Windows Graphics Component CVE-2016-7272 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10...
Microsoft Windows CVE-2016-7271 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft...
Microsoft Windows Graphics Component CVE-2016-7273 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10...
Microsoft Windows Graphics Remote Code Execution (MS16-146: CVE-2016-7272)
A remote code execution vulnerability exists in Microsoft Windows Graphics. The vulnerability is due to the improper handling of objects in the memory. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...