Denial of service

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service system hang via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."...

CVE-2016-0135

CVE-2016-0135 is a local elevation-of-privilege vulnerability in the Windows Secondary Logon Service, affecting Windows 10 Gold and 1511. The issue stems from the service failing to properly manage in-memory requests, enabling a crafted local attacker to gain administrator-level privileges. Micro...

CVE-2016-0150

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service system hang via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."...

CVE-2016-0150

CVE-2016-0150 describes a Denial of Service in Microsoft Windows HTTP.sys (HTTP 2.0 stack). A remote, unauthenticated attacker can send specially crafted HTTP/2 requests to Windows 10 Gold and 1511 to cause the system to become unresponsive. Connected advisories (MS16-049) document the fix as a s...

CVE-2016-0135: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Secondary Logon Elevation of Privilege Vulnerability."...

CVE-2016-0150: Undefined Security Weakness

HTTP.sys in Microsoft Windows 10 Gold and 1511 allows remote attackers to cause a denial of service system hang via crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability."...

KLA10788 Multiple vulnerabilities in Microsoft Graphics Component

Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...

CVE-2016-0118: Improper Input Validation

The PDF library in Microsoft Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows Remote Code Execution Vulnerability."...

Microsoft Edge Multiple Vulnerabilities (3142019)

This host is missing a critical security update according to Microsoft Bulletin MS16-024. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Edge CVE-2016-0124 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

Microsoft Edge CVE-2016-0129 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

PT-2016-1238

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows 10 Description The issue is related to the Remote Desktop Protocol RDP implementation, which allows remote authenticated users to execute...

Microsoft Windows Multiple Vulnerabilities (3134228)

This host is missing an important security update according to Microsoft Bulletin MS16-014. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2016-0036: Undefined Security Weakness

The Remote Desktop Protocol RDP implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol RDP Elevation of Privilege Vulnerability."...

PT-2016-1172

Name of the Vulnerable Software and Affected Versions Windows Reader versions in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Description The issue is related to insufficient data validation in the Windows Reader component, allowing remote attackers to execute arbitrary...

Microsoft Edge CVE-2016-0084 Remote Memory Corruption Vulnerability

Description Microsoft Edge is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Faile...

PT-2016-1166

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1, 10, and Windows Server 2012 Gold and R2 Description The issue is caused by a buffer overflow in the PDF Library component, allowing remote attackers to execute arbitrary code via a crafted PDF document that...

Security feature bypass

The Remote Desktop Protocol RDP service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass...

CVE-2016-0019: Undefined Security Weakness

The Remote Desktop Protocol RDP service implementation in Microsoft Windows 10 Gold and 1511 allows remote attackers to bypass intended access restrictions and establish sessions for blank-password accounts via a modified RDP client, aka "Windows Remote Desktop Protocol Security Bypass...

PT-2016-1044

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 versions Gold and 1511 Description The issue is related to a security feature bypass in the Remote Desktop Protocol RDP service implementation, allowing remote attackers to bypass intended access restrictions. This can...