Privilege escalation

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager NTLM Authentication...

Privilege escalation

Windows kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege...

CVE-2017-8495

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with...

CVE-2017-8556

Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory,...

CVE-2017-8590

CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...

CVE-2017-8590

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System CLFS driver...

CVE-2017-8566

Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor IME improperly handling parameters in a method of a DCOM class, aka "Windows IME Elevation of Privilege Vulnerability"...

CVE-2017-8582

HTTP.sys in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosure vulnerability when the component improperly handles objects in...

CVE-2017-8495

CVE-2017-8495 is a Kerberos security feature bypass in which Extended Protection for Authentication can be circumvented by tampering with the SNAME field during ticket exchange (Orpheus’ Lyre). Affected Windows family includes Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1, Windows RT 8.1...

CVE-2017-8495

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with...

CVE-2017-8580

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, ak...

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8581

CVE-2017-8581 is a Win32k elevation of privilege vulnerability affecting multiple Windows platforms (Windows 7/8.1/10 and corresponding Server editions) where improper handling of objects in memory could allow an attacker to run code with elevated privileges. The provided documents identify the a...

CVE-2017-8589

CVE-2017-8589 is a Windows Search Remote Code Execution vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (gold and 1511–1703) and Windows Server 2016. The root cause is the way Windows Search handles objects in memory, e...

CVE-2017-8618

CVE-2017-8618 affects Internet Explorer across multiple Windows versions, describing memory corruption in scripting engines when handling objects in memory (VBScript/JavaScript rendering). The root cause is how the scripting engines render in memory, enabling remote code execution when a user vis...

CVE-2017-8577

Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, ak...

CVE-2017-8562

CVE-2017-8562 is an elevation-of-privilege vulnerability in Windows caused by improper handling of Advanced Local Procedure Call (ALPC) calls. The issue allows a local attacker to run arbitrary code with the security context of the local system, given successful exploitation. Affected Windows ver...

CVE-2017-8467

CVE-2017-8467 is a Windows graphics elevation-of-privilege vulnerability in the graphics/Win32k component. The root cause is theGraphics subsystem failing to properly handle objects in memory, enabling a local attacker to gain higher privileges. Affected platforms include Windows 7 SP1, Windows S...

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory via the Microsoft Windows Text Services Framework. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

WinPayloads: Generate Undetectable Windows Payloads!

PenTestIT RSS Feed An older post of mine - MicroSploit dealt with generating backdoored documents for the Office platform. This post is about another open source framework, called WinPayloads which helps you create custom malicious payloads for the Microsoft Windows operating system. What is...