PT-2016-2935

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10 Gold, 1511, and 1607, Windows Server versions 2012 Gold and R2, 2016, and Windows RT 8.1 Description The Virtual Hard Disk Driver in Microsoft Windows does not properly restrict access to files, allowing loca...

PT-2016-2966

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue allows remote attackers to obtain sensitive information from process memory via a crafted Open Type font on a web site. It is also related to insufficient access contr...

PT-2016-2994

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Description The issue is related to insufficient access control in the Windows kernel API, allowing local users to gain...

PT-2016-3135

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description The issue is related to insufficient access control in the Windows operating system, allowing remote attackers to execute arbitrary code via a crafted image file. This can affec...

PT-2016-2992

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold, 1511, and 1607 Microsoft Windo...

PT-2016-2917

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 versions Gold through 1607 Microsoft Windows Server 2016 Description The...

KLA10897 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, bypass security restrictions, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A memory...

Microsoft Windows Task Scheduler CVE-2016-7222 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...

Microsoft Windows CVE-2016-3332 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...

PT-2016-2991

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 affected versions not specified Description The issue is related to the Virtual Secure Mode component in Microsoft Windows 10, which lacks proper protection of internal data. This allows a local attacker to obtain sensitiv...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7255 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...

KLA10900 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in Microsoft Browser c...

PT-2016-2990

Name of the Vulnerable Software and Affected Versions Microsoft Windows Input Method Editor versions prior to the fixed version Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold, 1511, and 1607 Windows...

Microsoft Windows win32k.sys Bitmap Null Pointer Dereference Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

PT-2016-2936

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Windows 10 versions 1511 and 1607 Windows Server 2016 Description The issue is related to an elevation-of-privilege vulnerability. It allows local users to gain privileges via a crafted UNC...

PT-2016-2931

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 versions Gold through 1607 Microsoft...

Microsoft Windows CVE-2016-7226 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...

Microsoft Windows Win32k Elevation of Privilege (MS16-135: CVE-2016-7255)

An elevation of privilege vulnerability exists in Microsoft Windows Win32k. A remote attacker can bypass a security check in win32k when Microsoft Windows improperly deals with one of its kernel components. A successful exploitation could allow an attacker to run arbitrary code with elevated...

Microsoft Windows Video Control CVE-2016-7248 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10...

MS16-137: Security update for Windows authentication methods: November 8, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The more severe of the vulnerabilities could allow elevation of privilege. To exploit this vulnerability, the attacker would first have to...