CVE-2016-3201

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than...

CVE-2016-3216

CVE-2016-3216 involves GDI32.dll in the Windows Graphics Component, where memory handling flaws allow remote attackers to bypass ASLR and disclose memory contents. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT ...

CVE-2016-3226

CVE-2016-3226 describes a denial-of-service vulnerability in Microsoft Active Directory on Windows Server 2008 R2 SP1 and Windows Server 2012/2012 R2. An authenticated attacker with privileges to join machines to the domain can cause the AD service to become nonresponsive by creating a large numb...

CVE-2016-3225

The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an authentication...

EUVD-2016-4258

atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka...

CVE-2016-3225

A local elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) component across various versions of Microsoft Windows , including Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 Gold and 1511, and various Windows Server editions. The root cause is a deficiency i...

CVE-2016-3218

CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...

CVE-2016-3230

The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to cause a denial of service performance degradation via a crafted application, aka "Windows Search Component Deni...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-3221

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

Microsoft Windows and Microsoft Edge PDF Remote Code Execution Vulnerability

Microsoft Windows and Microsoft Edge are both products of Microsoft Corporation USA. The former is a series of operating systems; the latter is a web browser that is the default browser that comes with the Windows 10 operating system. A remote code execution vulnerability exists in Microsoft...

CVE-2016-3220: Undefined Security Weakness

atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka...

CVE-2016-3213: Undefined Security Weakness

The Web Proxy Auto Discovery WPAD protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet Explorer 9 through 11 has an improper fallback mechanis...

CVE-2016-3221: Undefined Security Weakness

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

CVE-2016-3232: Exposure of Sensitive Information to an Unauthorized Actor

The Virtual PCI VPCI virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability."...

CVE-2016-3228: Improper Input Validation

Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authenticated users to execute arbitrary code via a crafted NetLogon request, aka "Windows Netlogon Memory Corruption Remote Code Execution Vulnerability."...

CVE-2016-3203: Improper Input Validation

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."...

CVE-2016-3216: Exposure of Sensitive Information to an Unauthorized Actor

GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to bypass the ASLR protection mechanism via unspecified vectors...

CVE-2016-3226: Improper Access Control

Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service service hang by creating many machine accounts, aka "Active Directory Denial of Service Vulnerability."...

PT-2016-2176

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 SP1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2 Description The issue is related to insufficient access control in the Active Directory service of the Windows operating system. It allows...