Remote code execution

The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code Execution Vulnerability."...

Remote code execution

The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2016-7259

The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a...

CVE-2016-7260

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka...

CVE-2016-7219

The Crypto driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to obtain sensitive information via a crafted application,...

CVE-2016-7272

The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site...

CVE-2016-7257

CVE-2016-7257 concerns the GDI component in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1) and Office for Mac/Office 2016 for Mac. The vulnerability enables a remote attacker to disclose sensitive information from a process’s memory by prompting a user to visit a cr...

CVE-2016-7274

CVE-2016-7274 concerns the Windows Uniscribe component (usp10.dll). The issue stems from an integer/heap-related vulnerability in the LoadUvsTable() function that could enable remote code execution when processing untrusted font data via a crafted web site. Public analyses (e.g., Google Project Z...

CVE-2016-7259

CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...

KLA10923 Privilege escalation vulnerability in Microsoft Windows

Improper objects handling in memory was found in the Secure Kernel Mode implementation in Microsoft Windows. By exploiting this vulnerability malicious users can gain priveleges and violate virtual trust levels VTL. This vulnerability can be exploited locally via a specially designed application...

Denial of service attack on Lenovo System X M5, M6, and X6 systems - us

Lenovo Security Advisory: LEN-11306 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8226 Summary Description: A vulnerability was identified in the BIOS of Lenovo System X M5, M6, and X6 systems. An attacker with administrative access...

Microsoft Windows Icon File Integer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file or folder. The specific flaw exists within the...

Denial of service attack on Lenovo System X M5, M6, and X6 systems - Lenovo Support US

No description provided...

Design/Logic Flaw

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected...

Microsoft Windows Secure Kernel Mode Privilege Elevation Vulnerability (3205642)

This host is missing an important security update according to Microsoft Bulletin MS16-150. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-149: Security Update for Microsoft Windows (3205655)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in a Windows Crypto driver running in kernel mode due to improper handling of objects in memory. A local attacker can exploit this, via a...

Microsoft Windows Uniscribe Component Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in the Microsoft Windows Uniscribe component. An attacker could exploit this vulnerability to compromise an affected system...

Microsoft Windows Crypto Driver Local Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Crypto driver. An attacker can exploit this vulnerability to obtain sensitive information with the help of specially crafted files...

Microsoft Windows Kernel Mode Drivers Multiple Vulnerabilities (3205651)

This host is missing an important security update according to Microsoft Bulletin MS16-151 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows Information Disclosure And Elevation of Privilege Vulnerabilities (3205655)

This host is missing a critical security update according to Microsoft Bulletin MS16-149. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...