PT-2016-7268

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2016 Description The issue is related to the improper handling of the FILESTREAM path in Microsoft SQL Analysis Services, which can lead to an information disclosure. This can be exploited by an attacker with access to an...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7215 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...

Microsoft Windows Kernel 'Win32k.sys' CVE-2016-7255 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. A local attacker can exploit this issue to execute arbitrary code in kernel mode with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit...

Microsoft Windows CVE-2016-7223 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to run processes with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Syste...

Security Update for Adobe Flash Player for Windows Server 2016 (for x64-based Systems) (KB3201860)

A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article...

Servicing stack update for Windows 10 Version 1607 and Windows Server 2016: October 27, 2016

None None...

HPE Sizer for Microsoft Exchange Server Detection (Windows SMB Login)

Detects the installed version of HPE Sizer for Microsoft Exchange Server. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cumulative update for Windows 10 Version 1607 and Windows Server 2016: October 11, 2016

None None...

Cumulative Update for Windows Server 2016: September 26, 2016

None None...

CVE-2016-3379

CVE-2016-3379 is an XSS in Microsoft Exchange Server 2016 (CU1/CU2) that can be exploited remotely via a meeting invitation request to inject arbitrary script/HTML. The connected documents confirm the vulnerability and reference the MS16-108 update, but do not provide exploit details. Remediation...

CVE-2016-3379: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, aka "Microsoft Exchange Elevation of Privilege Vulnerability."...

MS16-108: Description of the security update for Exchange Server 2016 and 2013: September 13, 2016

None None...

Microsoft Exchange Server Information Disclosure Vulnerability (3160339)

This host is missing an important security update according to Microsoft Bulletin MS16-079. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Unable to Delete NTUSER.DAT* Files When a User Logs off

Occasionally, when Delete Locally Cached Profiles on logoff policy is enabled on Windows 10 Redstone, or on Windows Server 2016, NTUSER.DAT files cannot be deleted when a user logs off...

Microsoft SQL Server 2016 Detection

Binary data 9512.prm...

Microsoft Open Sources PowerShell; Now Available for Linux and Mac OS X

'Microsoft loves Linux' and this has never been so true than now. Microsoft today made its PowerShell scripting language and command-line shell available to the open source developer community on GitHub under the permissive MIT license. The company has also launched alpha versions of PowerShell f...

Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: July 12, 2016

None None...

MS16-088: Description of the security update for SharePoint Server 2016: July 12, 2016

None None...

Cumulative Update for Windows 10 version 1511 and Windows Server 2016 Technical Preview 4: June 14, 2016

None None...

KLA10826 OSI vulnerability in Microsoft Server Software

An information disclosure vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2016-0028 ADV160012 Exploitation Related products Microsoft-Exchange-Server CVE list CVE-2016-0028 high KB list...