15433 matches found
Microsoft Windows Kernel Information Disclosure (CVE-2017-0175)
An information disclosure vulnerability exists within Microsoft Windows. The vulnerability is caused when Microsoft Windows kernel improperly handles objects in memory. Successfully exploiting this vulnerability can result in Elevation-of-Privilege...
Microsoft Windows Kernel CVE-2017-0220 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based...
KLA11022 Obsolete Adobe Flash Player for Windows
Microsoft released update to address vulnerabilities in Flash Player for Internet Explorer. For details look at KLA11008. Original advisories ADV170006 Related products Microsoft-Windows CVE list KB list 4020821 Solution Install necessary updates from the KB section, that are listed in your Windo...
Microsoft Windows COM CVE-2017-0214 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for...
Microsoft Windows Graphics Device Interface CVE-2017-0190 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows Kernel 'Win32k.sys' CVE-2017-0245 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. A local attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based...
Microsoft Windows SMB Server CVE-2017-0269 Remote Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microso...
KLA11012 Remote code execution vulnerability in the Microsoft Malware Protection Engine
An improper way of scanning files was found in the Microsoft Malware Protection. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file. Technical details To exploit this vulnerability, a malformed fi...
Microsoft Windows SMB Server CVE-2017-0268 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows SMB Server CVE-2017-0278 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks will cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
Microsoft Windows SMB Server CVE-2017-0276 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows COM CVE-2017-0213 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code within the context of the application. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 16...
Microsoft Windows Hyper-V CVE-2017-0212 Remote Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for x64-based Systems Microsoft Windows 10 for x64-based Systems Microsoft Windows 10...
KLA11009 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...
PT-2017-13: Elevation of Privilege in Microsoft Windows
The specialists of the Positive Research center have detected an Elevation of Privilege vulnerability in Microsoft Windows. An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully...
Carbanak Attackers Devise Clever New Persistence Trick
Hackers behind the Carbanak criminal gang have devised a clever way to gain persistence on targeted systems to more effectively pull off financially motivated crimes. The technique involves creating a bogus instance of a Microsoft Windows app compatibility feature. On Wednesday, Mandiant, FireEye...
The vulnerability of the SMBv1 protocol in the Microsoft Windows operating system allows a hacker to execute arbitrary code.
The vulnerability of the SMBv1 protocol in Microsoft Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...
Unspecified Vulnerabilities in Quick Heal Internet Security, Total Security and AntiVirus Pro
Quick Heal Internet Security, Total Security and AntiVirus Pro are all antivirus programs. Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316 and Quick Heal AntiVirus Pro 10.1.0.316 have a security vulnerability due to Microsoft WIM Header The dwCompressionSize of...
Mozilla Firefox v52.02 - (Stack Overflow) DoS Vulnerability
Document Title: =============== Mozilla Firefox v52.02 - Stack Overflow DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2050 Release Date: ============= 2017-05-04 Vulnerability Laboratory ID VL-ID: ====================================...
Mozilla Firefox v52.02 - (Stack Overflow) DoS Vulnerability
Document Title: =============== Mozilla Firefox v52.02 - Stack Overflow DoS Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2050 Release Date: ============= 2017-05-03 Vulnerability Laboratory ID VL-ID: ====================================...