3271 matches found
CVE-2018-8349
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM for Windows Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...
CVE-2018-8401
CVE-2018-8401 describes a local privilege escalation in the DirectX Graphics Kernel driver (DXGKRNL) for Windows. The root cause is improper handling of objects in memory within DXGKRNL, allowing an attacker with local access to elevate privileges. Affected products include Windows Server 2016, W...
CVE-2018-8200
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...
CVE-2018-8348
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...
CVE-2018-8204
CVE-2018-8204 is a Device Guard local security bypass vulnerability that could allow an attacker to inject malicious code into a Windows PowerShell session by bypassing the Code Integrity policy. Affected software includes Windows Server 2016 and Windows 10/Windows 10 Servers. The root cause is a...
CVE-2018-8200
CVE-2018-8200 is a local security bypass in Windows Device Guard, enabling an attacker to inject malicious code into a PowerShell session by bypassing the Code Integrity Policy. Affected: Windows Server 2016, Windows 10 (and variants). Root cause: Device Guard Code Integrity Policy bypass vulnera...
CVE-2018-8343
An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...
CVE-2018-8406
CVE-2018-8406 is a DirectX Graphics Kernel (DXGKRNL) privilege-escalation vulnerability caused by the DXGKRNL driver improperly handling memory objects. Affected products include Windows Server 2016 and Windows 10 (and Windows 10 Servers). The CVE is characterized by a local, low-complexity attac...
CVE-2018-0952
An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka “Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability.” This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10...
CVE-2018-8401
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka “DirectX Graphics Kernel Elevation of Privilege Vulnerability.” This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from...
CVE-2018-8406
An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka “DirectX Graphics Kernel Elevation of Privilege Vulnerability.” This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from...
2018-08 Cumulative Update for Windows Server 2016 (1709) for x64-based Systems (KB4343897)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Cumulative Update for Windows Server 2016 for x64-based Systems (KB4343887)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
2018-08 Security Update for Adobe Flash Player for Windows Server 2016 for x64-based Systems (KB4343902)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
KB4458842 - Description of the security update for the remote code execution vulnerability in SQL Server 2016 SP1 (GDR): August 22, 2018
KB4458842 - Description of the security update for the remote code execution vulnerability in SQL Server 2016 SP1 GDR: August 22, 2018 Summary A buffer overflow vulnerability exists in Microsoft SQL Server that could allow remote code execution on an affected system. An attacker who successfully...
KB4293808 - Description of the security update for the remote code execution vulnerability in SQL Server 2016 SP1 (CU): August 14, 2018
KB4293808 - Description of the security update for the remote code execution vulnerability in SQL Server 2016 SP1 CU: August 14, 2018 Summary A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system. An attacker who successful...
Security update for Adobe Flash Player: August 14, 2018
None None...
KB4458621 - Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 (CU): August 21, 2018
KB4458621 - Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 CU: August 21, 2018 Summary A buffer overflow vulnerability exists in Microsoft SQL Server that could allow remote code execution on an affected system. An attacker who successfully...
KB4293802 - Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 (GDR): August 14, 2018
KB4293802 - Description of the security update for the Remote Code Execution vulnerability in SQL Server 2016 SP2 GDR: August 14, 2018 Summary A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system. An attacker who...