17844 matches found
Microsoft Windows CVE-2016-3338 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Windows Animation Manager CVE-2016-7205 Memory Corruption Vulnerability
Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for...
Microsoft Windows Kernel CVE-2016-7214 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows CVE-2016-3333 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7215 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
PT-2016-2993
Name of the Vulnerable Software and Affected Versions Media Foundation in Microsoft Windows versions prior to the fixed version Description The issue is caused by a buffer overflow in memory operations, allowing remote attackers to execute arbitrary code via a crafted web site. This can affect th...
Microsoft Windows CLFS Driver Elevation of Privilege (MS16-134: CVE-2016-3335)
A memory corruption vulnerability exists within the CLFS.SYS component of Microsoft Windows. It can be triggered by loading specially crafted .blf files. Successful exploitation of this issue might lead to local privilege escalation...
Microsoft Windows VHDFS Driver Elevation of Privilege (MS16-138: CVE-2016-7225)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is due to insufficient specification for a certain flag. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable...
Microsoft Windows Open Type Font Remote Code Execution (MS16-132: CVE-2016-7256)
A remote code execution vulnerability exists in Microsoft Windows. The vulnerability is due to the way Windows font library improperly handles specially crafted embedded fonts. A remote attacker can exploit this vulnerability by enticing a target user to open a specially crafter OTF file...
Microsoft Windows CLFS Driver Elevation of Privilege (MS16-134: CVE-2016-3334)
A memory corruption vulnerability was discovered within the CLFS.SYS component of Microsoft Windows. It can be triggered by loading specially crafted .blf files. Successful exploitation of this issue might lead to local privilege escalation...
Microsoft Windows CLFS Driver Elevation of Privilege (MS16-134: CVE-2016-3340)
A memory corruption vulnerability exists in Microsoft Windows. The vulnerability is due to incorrect calling of the functions AddLogContainer and CreateLogMarshallingArea using special parameters. Successful exploitation of this issue might lead to local privilege escalation...
Microsoft Windows CLFS Driver Elevation of Privilege (MS16-134: CVE-2016-3333)
A memory corruption vulnerability was discovered within the CLFS.SYS component of Microsoft Windows. It can be triggered by loading specially crafted .blf files. Successful exploitation of this issue might lead to local privilege escalation...
Microsoft Windows CLFS Elevation of Privilege (MS16-134: CVE-2016-7184)
An elevation of privilege vulnerability has been reported in Microsoft Windows. The vulnerability is due to an malformed blf file, which could be abused by attackers to gain local privilege escalation. The attacker must entice the victim to run an executable file to exploit this vulnerability...
Microsoft Windows Win32k Information Disclosure (MS16-135: CVE-2016-7214)
An out-of-bounds read vulnerability was discovered within Microsoft Windows. The vulnerability is caused when Microsoft Windows improperly deals with one of its kernel components. Successful exploitation of this issue might lead to leakage of sensitive information from the kernel...
Microsoft Windows CLFS Elevation of Privilege (MS16-134: CVE-2016-0026)
An elevation of privilege vulnerability has been reported in Microsoft Windows. The vulnerability is due to an malformed blf file, which could be abused by attackers to gain local privilege escalation. The attacker must entice the victim to run an executable file to exploit this vulnerability...
Microsoft Windows Driver CLFS Elevation Of Privilege (MS16-134: CVE-2016-3332)
An elevation of privilege vulnerability has been reported in Microsoft Windows. The vulnerability is due to an malformed blf file, which could be abused by attackers to gain local privilege escalation. The attacker must entice the victim to run an executable file to exploit this vulnerability...
Microsoft Windows CLFS Driver Elevation of Privilege (MS16-134: CVE-2016-3338)
A memory corruption vulnerability exists within the CLFS.SYS component of Microsoft Windows. It can be triggered by loading specially crafted .blf files. Successful exploitation of this issue might lead to local privilege escalation...
PT-2016-2930
Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 versions Gold, 1511, and 1607...
PT-2016-2935
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 Gold, 1511, and 1607, Windows Server versions 2012 Gold and R2, 2016, and Windows RT 8.1 Description The Virtual Hard Disk Driver in Microsoft Windows does not properly restrict access to files, allowing loca...
PT-2016-2966
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted Open Type font on a web site. It is also related to insufficient access contr...