CVE-2016-3226: Improper Access Control

Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service service hang by creating many machine accounts, aka "Active Directory Denial of Service Vulnerability."...

CVE-2016-3228: Improper Input Validation

Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authenticated users to execute arbitrary code via a crafted NetLogon request, aka "Windows Netlogon Memory Corruption Remote Code Execution Vulnerability."...

CVE-2016-3227: Undefined Security Weakness

Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability."...

PT-2016-2175

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2012 Gold and R2 Description The issue is related to a use-after-free vulnerability in the DNS Server component, which allows remote attackers to execute arbitrary code via crafted requests. This vulnerability can be...

PT-2016-2176

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 R2 SP1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2 Description The issue is related to insufficient access control in the Active Directory service of the Windows operating system. It allows...

PT-2016-2174

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows Server 2012 Gold and R2 Description The issue exists due to insufficient input validation in the Windows operating system. Exploitation of this issue may allow a remote attacker to...

Microsoft Windows Privilege Elevation Vulnerability (3154846)

This host is missing an important security update according to Microsoft Bulletin MS16-060 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2016-1985

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold and 1511 Description The issue ...

PT-2016-1992

Name of the Vulnerable Software and Affected Versions Volume Manager Driver in Microsoft Windows versions 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 Description The issue is related to the lack of user verification when accessing the RemoteFX RDP USB function. This allows a local...

PT-2016-1686

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Description The issue is related to the OLE component in...

KLA10788 Multiple vulnerabilities in Microsoft Graphics Component

Multiple serious vulnerabilities have been found in Microsoft Graphics Component as used in multiple Microsoft products. Malicious users can exploit these vulnerabilities to execute arbitrary code or gain privileges. Below is a complete list of vulnerabilities 1. An improper memory objects handli...

PT-2016-3131

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 Description The issue is related to the mishandling of library loading, allowing local users to gain privileges via a crafted application. This can lead to a remote code execution...

CVE-2016-0037

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

Design/Logic Flaw

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

CVE-2016-0037

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

CVE-2016-0050: Improper Input Validation

Network Policy Server NPS in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service RADIUS authentication outage via crafted requests, aka "Network Policy Server RADIUS Implementation Denial o...

CVE-2016-0037: Improper Input Validation

The forms-based authentication implementation in Active Directory Federation Services ADFS 3.0 in Microsoft Windows Server 2012 R2 allows remote attackers to cause a denial of service daemon outage via crafted data, aka "Microsoft Active Directory Federation Services Denial of Service...

CVE-2016-0036: Undefined Security Weakness

The Remote Desktop Protocol RDP implementation in Microsoft Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 allows remote authenticated users to execute arbitrary code via crafted data, aka "Remote Desktop Protocol RDP Elevation of Privilege Vulnerability."...

PT-2016-1238

Name of the Vulnerable Software and Affected Versions Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows 10 Description The issue is related to the Remote Desktop Protocol RDP implementation, which allows remote authenticated users to execute...

PT-2016-1227

Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 SP1 Microsoft Windows Server 2012 Gold Microsoft Windows Server 2012 R2 Description The issue is related to the Network Policy Server NPS component in Microsoft Windows Server,...