3740 matches found
CVE-2016-7249: Undefined Security Weakness
Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL RDBMS Engine Elevation of Privilege Vulnerability."...
CVE-2016-7256
atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a...
CVE-2016-7251: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the MDS API in Microsoft SQL Server 2016 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka "MDS API XSS Vulnerability."...
CVE-2016-7222: Undefined Security Weakness
Task Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted UNC pathname in a task, aka "Task Scheduler Elevation of Privilege Vulnerability."...
CVE-2016-7225: Improper Access Control
Virtual Hard Disk Driver in Windows 10 Gold, 1511, and 1607 and Windows Server 2016 does not properly restrict access to files, which allows local users to gain privileges via a crafted application, aka "VHD Driver Elevation of Privilege Vulnerability."...
Security Update for Adobe Flash Player for Windows Server 2016 (for x64-based Systems) (KB3202790)
A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...
KB3194717 - MS16-136: Description of the security update for SQL Server 2016 CU: November 8, 2016
KB3194717 - MS16-136: Description of the security update for SQL Server 2016 CU: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or to...
KB3194716 - MS16-136: Description of the security update for SQL Server 2016 GDR: November 8, 2016
KB3194716 - MS16-136: Description of the security update for SQL Server 2016 GDR: November 8, 2016 Summary This update resolves vulnerabilities in Microsoft SQL Server. The most severe vulnerabilities could allow an attacker to gain elevated privileges that might be used to create accounts, or to...
Cumulative update for Windows 10 Version 1607 and Windows Server 2016: November 8, 2016
None None...
PT-2016-7267
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via an unspecified parameter in the MDS API. This could enable an attacker to inject a client-side...
Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7246 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...
PT-2016-2914 · Microsoft · Windows Server 2012 +8
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 Gold, 1511, and 1607 Microsoft...
PT-2016-7265
Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description The issue arises from improper handling of pointer casting, allowing remote authenticated users to gain privileges. An attacker could exploit this by accessing an affected SQL server database, potentially...
Microsoft Windows CVE-2016-7225 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Windows CVE-2016-7226 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Windows Media Foundation CVE-2016-7217 Memory Corruption Vulnerability
Description Microsoft Windows is prone to a memory-corruption vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed attacks will cause denial-of-service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for...
Microsoft Windows CVE-2016-7224 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
Microsoft Windows CVE-2016-7184 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...
PT-2016-2933
Name of the Vulnerable Software and Affected Versions Windows 10 versions 1511 through 1607 Windows Server 2016 Description The issue is caused by incorrect access restriction to files in the virtual hard disk driver of the Windows operating system. This allows a local attacker to gain elevated...
PT-2016-2934
Name of the Vulnerable Software and Affected Versions Windows 10 versions 10, 1511, and 1607 Windows Server 2016 Description The Virtual Hard Disk Driver in Windows does not properly restrict access to files, allowing local users to gain privileges via a crafted application. This issue is related...