17844 matches found
Microsoft Windows Win32k Elevation of Privilege (MS17-018: CVE-2017-0056)
A use after free vulnerability exists in Microsoft Windows Win32k. A remote attacker can bypass a security check in win32k to load a custom font from an arbitrary file on disk. Successful exploitation could allow an attacker to run arbitrary code with elevated privileges...
Microsoft Win32k Elevation of Privilege (MS17-018: CVE-2017-0082)
Multiple elevation of privilege vulnerabilities have been reported in Microsoft Windows. The vulnerability is due to the way Windows kernel-mode driver handles objects in memory. A remote attacker can exploit this vulnerability to execute arbitrary code...
Microsoft Windows Kernel Elevation of Privilege (MS17-017: CVE-2017-0050)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows kernel API enforces permissions. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Microsoft Windows GDI Elevation of Privilege (MS17-013: CVE-2017-0047)
Elevation of privilege vulnerabilities exists in Windows Graphics Device Interface. The vulnerability is due to the way Windows Graphics Device Interface handles objects in memory. A remote attacker can exploit this issue by enticing a victim to open a specially crafted file...
Microsoft Windows Uniscribe Remote Code Execution (MS17-011: CVE-2017-0089)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows Uniscribe handles objects in the memory. A remote attacker can exploit this vulnerability by enticing the target user to open a specially crafted file...
Microsoft Windows Hyper-V CVE-2017-0098 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10 for...
Microsoft Windows CVE-2017-0055 Cross Site Scripting Vulnerability
Description Microsoft Windows is prone to a cross-site-scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may...
MS17-009: Security Update for Microsoft Windows PDF Library (4010319)
The remote Windows host is missing a security update. It is, therefore, affected by a remote code execution vulnerability in the Windows PDF Library due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this vulnerability, by convincing a user to open a...
PT-2017-1630
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Media Player in Microsoft Windows 8.1 Windows Media Player in Microsoft Windows Server 2012 R2 Windows Media Player in Microsoft Windows RT 8.1 Windows Media Player in Microsoft...
PT-2017-1599
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 Gold, 10 1511, 10 1607, and Windows Server versions 2012 R2, 2016 Windows RT 8.1 Description The issue is related to the DNS client in Microsoft Windows, which fails to properly process DNS queries. This allo...
PT-2017-1634
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Microsoft Windows affected versions not specified Description The issue is caused by a buffer overflow in memory due to an operation exceeding buffer boundaries. This can be exploited by a remote...
PT-2017-1648
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 10 Gold, 1511, and 1607 Microsoft Windows 8.1 Microsoft Windows RT 8.1 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Description The issue is related to the improper handling of certain requests in...
Microsoft Windows Kernel CVE-2017-0103 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows Server 2008 R...
PT-2017-1655
Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold, 1511, 1607 Microsoft Windows Server 2016 Description The issue allows remote attackers to modify PowerShell script without invalidating associated signatures. It exists due to insufficient input validation,...
Microsoft Windows Uniscribe CVE-2017-0091 Information Disclosure Vulnerability
Description Microsoft Windows Uniscribe is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-bas...
Microsoft Windows CVE-2017-0043 XML External Entity Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information. Successful exploits may lead to other attacks. Technologies Affected Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft...
Microsoft Windows Hyper-V CVE-2017-0097 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial of service vulnerability. An attacker can exploit this issue to crash the host machine, resulting in a denial of service condition. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10 for...
PT-2017-1940
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server Message Block SMBv1 affected versions not specified Description The issue allows remote attackers to execute arbitrary code and affect the system. This is due to insufficient input validation in the SMBv1 protocol of t...
PT-2017-1936 · Microsoft · Windows Server 2012 +9
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions prior to Windows 10 and Windows Server 2016, including Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1 Description: The vulnerabilit...
Microsoft Windows SMB Server CVE-2017-0143 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...