15483 matches found
CVE-2015-2478
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application that triggers a Winsock call referencing an...
CVE-2015-6097
CVE-2015-6097 is a heap-based buffer overflow in Windows Journal’s handling of Journal (.jnt) files, affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The flaw—improper parsing of journal files—allows remote code execution and has public exploit activity accordin...
CVE-2015-6098
CVE-2015-6098 is a local privilege-escalation flaw in the Windows Network Driver Interface Specification (NDIS) with a buffer-overflow in ndis.sys. A crafted local app can gain elevated privileges on Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. Public exploit references e...
CVE-2015-6102
The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 allows local users to bypass the KASLR protection mechanism, and consequently discover a...
Microsoft Windows Excel Viewer Remote Code Execution Vulnerability (3104540)
This host is missing an important security update according to Microsoft Bulletin MS15-116. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows Winsock Elevation of Privilege Vulnerability (3104521)
This host is missing an important security update according to Microsoft Bulletin MS15-119. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Microsoft Windows IPSec CVE-2015-6111 Denial of Service Vulnerability
Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the system to become non-responsive, resulting in a denial-of-service condition. Technologies Affected Microsoft Windows 8 for 32-bit Systems Microsoft Windows 8 for...
Microsoft Windows Graphics Memory CVE-2015-6103 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...
Microsoft Windows Kernel CVE-2015-6113 Local Security Bypass Vulnerability
Description Microsoft Windows is prone to a local security-bypass vulnerability. Local attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based System...
Microsoft Windows SChannel CVE-2015-6112 Man in the Middle Security Bypass Vulnerability
Description Microsoft Windows is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow attackers to perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems...
Microsoft Windows Graphics Memory CVE-2015-6104 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. Successful exploits allow attackers to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will result in a denial-of-service condition. Technologies Affected Microsoft Window...
Microsoft Windows Journal CVE-2015-6097 Heap Overflow Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service conditions. Technologies Affected Microsof...
Microsoft Windows Kernel CVE-2015-6109 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...
Microsoft Windows Winsock Elevation of Privilege (MS15-119: CVE-2015-2478)
An elevation of privilege vulnerability exists in Windows Winsock. The vulnerability is due to an error in the way windows kernel verifies memory address. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted code...
Microsoft Windows Kernel CVE-2015-6100 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems...
Microsoft Windows CVE-2015-2478 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to gain elevated privileges on a targeted system. Technologies Affected Microsoft Windows 10 for 32-bit Systems Microsoft Windows 10 for x64-based Systems Microsoft Window...
MS15-115: Security Update for Microsoft Windows to Address Remote Code Execution (3105864)
The remote Windows host is affected by the following vulnerabilities : - Multiple elevation of privilege vulnerabilities exist that are related to the handling of objects in memory. A local attacker can exploit these, via a crafted application, to run arbitrary code in kernel mode. CVE-2015-6100,...
Microsoft Windows VBScript Join Function Type Confusion Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code in applications using the VBScript scripting language running on vulnerable installations of Microsoft Windows. Microsoft Internet Explorer is an affected application. User interaction is required to exploit this vulnerability i...
Microsoft Windows Kernel Security Feature Bypass (MS15-115: CVE-2015-6113)
A kernel security feature bypass vulnerability has been reported in Microsoft Windows. A remote attacker may exploit this vulnerability by calling a procedure which bypasses access check and allows privileged file access...
MS15-119: Security update for Winsock to address elevation of privilege: November 10, 2015
Resolves a vulnerability in Windows that could allow elevation of privilege if an attacker logs on to a computer and runs specially crafted code that exploits the vulnerability.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of...