CVE-2016-7224

CVE-2016-7224 concerns the Microsoft Virtual Hard Disk (VHD) Driver, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The vulnerability arises from the VHD Driver not properly restricting access to files, enabling a local ...

CVE-2016-7222

CVE-2016-7222 affects Task Scheduler in Windows 10 (Gold/1511/1607) and Windows Server 2016. A locally authenticated attacker can abuse Task Scheduler by creating a task that uses a specially crafted UNC path to execute code with elevated privileges. The root cause is how Task Scheduler handles U...

CVE-2016-7214

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to bypass the ASLR protection mechanism via a crafted...

CVE-2016-7210

atmfd.dll in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to obtain sensitive information from process memory via a...

CVE-2016-7217

CVE-2016-7217 : Memory corruption in Media Foundation (Windows Graphics/Media Foundation) allows remote code execution via a crafted web site. Affected: Windows 8.1; Windows Server 2012 RT/Gold and R2; Windows RT 8.1; Windows 10 (Gold, 1511, 1607); Windows Server 2016. Root cause: memory corrupti...

CVE-2016-7217

Media Foundation in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Media Foundation Memory Corruption Vulnerability."...

CVE-2016-7255

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow local users to gain privileges via a crafted application, aka...

CVE-2016-3342

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

CVE-2016-7256

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a...

CVE-2016-7223

CVE-2016-7223 describes a Local Privilege Escalation in the Microsoft Virtual Hard Disk (VHD) Driver affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (variants 1511, 1607), and Windows Server 2016. The root cause is improper access restriction to VHD-related files, allowi...

CVE-2016-7184

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

CVE-2016-7237

CVE-2016-7237 affects Local Security Authority Subsystem Service (LSASS) in Windows between Vista SP2 and Windows Server 2016. The vulnerability allows remote authenticated users to cause a denial of service (system hang) by sending a crafted request, via the LSASS handling path (notably connecte...

CVE-2016-7220

Virtual Secure Mode in Microsoft Windows 10 allows local users to obtain sensitive information via a crafted application, aka "Virtual Secure Mode Information Disclosure Vulnerability."...

CVE-2016-7212

CVE-2016-7212 affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8.1, 2012 Gold/R2, RT 8.1, 10 up to 1607, and Server 2016) where a crafted image file can lead to remote code execution. Root cause: improper handling in the Windows image load feature. Impact is remote cod...

CVE-2016-7205

CVE-2016-7205 is a Windows memory corruption vulnerability in the Animation Manager that can be triggered by visiting a crafted web site, enabling remote code execution. Affected products include Windows 7 SP1, Windows 8.1, Windows 10 (various builds), Windows Server 2008 R2 SP1, Windows Server 2...

CVE-2016-3334

Technical details for CVE-2016-3334 are not publicly available in the provided documents; monitor for updates.

CVE-2016-3335

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

CVE-2016-3338

CVE-2016-3338 concerns the Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. It affects multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 pre-1709, and Server 2016) and is triggered by a crafted application that allows ...

CVE-2016-3338

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

CVE-2016-3340

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...