Lucene search
+L

15460 matches found

NVD
NVD
added 2015/02/11 3:01 a.m.45 views

CVE-2015-0058

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."...

7.2CVSS6.3AI score0.02693EPSS
SaveExploits1References3
Prion
Prion
added 2015/02/11 3:01 a.m.24 views

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, a...

7.2CVSS7AI score0.12752EPSS
SaveExploits5References4Affected Software5
Prion
Prion
added 2015/02/11 3:01 a.m.43 views

Double free

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."...

7.2CVSS6.8AI score0.02693EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2015/02/11 3:00 a.m.39 views

CVE-2015-0009

The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to...

3.3CVSS6.1AI score0.08074EPSS
SaveExploits4References5
NVD
NVD
added 2015/02/11 3:00 a.m.33 views

CVE-2015-0008

The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not include authentication from the server to the client, which allows remot...

8.3CVSS8AI score0.2858EPSS
SaveExploits4References8
NVD
NVD
added 2015/02/11 3:00 a.m.28 views

CVE-2015-0003

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...

6.9CVSS6.4AI score0.04536EPSS
SaveExploits3References3
Prion
Prion
added 2015/02/11 3:00 a.m.26 views

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...

6.9CVSS7AI score0.04536EPSS
SaveExploits3References3Affected Software5
Prion
Prion
added 2015/02/11 3:00 a.m.17 views

Security feature bypass

The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to...

3.3CVSS6.7AI score0.08074EPSS
SaveExploits4References5Affected Software5
Prion
Prion
added 2015/02/11 3:00 a.m.34 views

Remote code execution

The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not include authentication from the server to the client, which allows remot...

8.3CVSS8.7AI score0.2858EPSS
SaveExploits4References8Affected Software5
CVE
CVE
added 2015/02/11 2:00 a.m.87 views

CVE-2015-0062

CVE-2015-0062 is a local privilege escalation in multiple Windows platforms (Windows 7 SP1, Windows 8/8.1, Windows Server 2008 R2 SP1, Server 2012/2012 R2, etc.) caused by incorrect impersonation handling in a process that uses SeAssignPrimaryTokenPrivilege, allowing a crafted local attacker to g...

7.2CVSS6.5AI score0.0175EPSS
SaveExploits0References6Affected Software7
Cvelist
Cvelist
added 2015/02/11 2:00 a.m.51 views

CVE-2015-0009

The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to...

6.1AI score0.08074EPSS
SaveExploits4References5
Cvelist
Cvelist
added 2015/02/11 2:00 a.m.43 views

CVE-2015-0058

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allows local users to gain privileges via a crafted application, aka "Windows Cursor Object Double Free Vulnerability."...

6.2AI score0.02693EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2015/02/11 2:00 a.m.45 views

CVE-2015-0057

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, a...

6.3AI score0.12752EPSS
SaveExploits5References4
CVE
CVE
added 2015/02/11 2:00 a.m.90 views

CVE-2015-0059

CVE-2015-0059 is the Windows kernel-mode TrueType font parsing remote code execution vulnerability (win32k.sys) exposed via crafted TTF files. Affects multiple Windows versions including Windows 7, Windows 8/8.1, Windows Server 2008 R2 SP1, Windows Server 2012, and Windows RT/8.1; root cause is i...

6.9CVSS6.9AI score0.11104EPSS
SaveExploits1References3Affected Software7
CVE
CVE
added 2015/02/11 2:00 a.m.98 views

CVE-2015-0058

CVE-2015-0058 is a local privilege-escalation flaw in Windows caused by a double-free in win32k.sys (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1) that an attacker could exploit via a crafted application to gain privilege. The issue is addressed by MS15-010 updates (KBs 3013455/3023562/303...

7.2CVSS6.3AI score0.02693EPSS
SaveExploits1References3Affected Software3
CVE
CVE
added 2015/02/11 2:00 a.m.142 views

CVE-2015-0057

CVE-2015-0057 is a local privilege escalation in the Windows kernel-mode driver win32k.sys. The vulnerability in Win32k.sys allows local attackers to gain elevated privileges by exploiting crafted applications, specifically tied to MS15-010. Public exploits exist (e.g., Exploit-DB MS15-010 entry ...

7.2CVSS6.4AI score0.12752EPSS
SaveExploits5References4Affected Software9
Cvelist
Cvelist
added 2015/02/11 2:00 a.m.44 views

CVE-2015-0003

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...

6.3AI score0.04536EPSS
SaveExploits3References3
Cvelist
Cvelist
added 2015/02/11 2:00 a.m.46 views

CVE-2015-0010

The CryptProtectMemory function in cng.sys aka the Cryptography Next Generation driver in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gol...

8.8AI score0.0265EPSS
SaveExploits2References3
OpenVAS
OpenVAS
added 2015/02/11 12:00 a.m.86 views

Microsoft Windows Kernel-Mode Driver RCE Vulnerabilities (3036220)

This host is missing a critical security update according to Microsoft Bulletin MS15-010. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.2CVSS5.4AI score0.12752EPSS
SaveExploits8References9
securityvulns
securityvulns
added 2015/02/11 12:00 a.m.188 views

Microsoft Windows multiple security vulnerabilities

Multiple Internet Explorer memory corruptions, kernel privilege escalation, group policies code execution and restrictions bypass, process creation privilege escalation, TIFF parsing information leakage...

9.3CVSS5.6AI score0.71698EPSS
SaveExploits28References2Affected Software1
Rows per page
Query Builder