CVE-2018-8417

CVE-2018-8417 is a security feature bypass in Microsoft JScript that could allow bypass of Device Guard. Affected products/versions identified in the provided data include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The vulnerability is described as a loc...

CVE-2018-8454

CVE-2018-8454 is a Windows information-disclosure vulnerability in the Windows Audio Service where memory objects may be mishandled. Affected products listed in the CVE entry include Windows 10, Windows 10 Servers, and Windows Server 2019. In the Nessus/OpenVAS content, this vulnerability is incl...

CVE-2018-8584

CVE-2018-8584 is an elevation-of-privilege vulnerability in Windows where ALPC calls are not handled correctly, enabling a local attacker to run code with the system security context. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server family. Root cause: improper ha...

CVE-2018-8566

Technical details on CVE-2018-8566 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2018-8562

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Serv...

CVE-2018-8417

A security feature bypass vulnerability exists in Microsoft JScript that could allow an attacker to bypass Device Guard, aka "Microsoft JScript Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers...

CVE-2018-8561: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Window...

CVE-2018-8450: Improper Resource Shutdown or Release

A remote code execution vulnerability exists when Windows Search handles objects in memory, aka "Windows Search Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows...

CVE-2018-8565: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka "Win32k Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server...

CVE-2018-8547: Improper Neutralization of Input During Web Page Generation

A cross-site-scripting XSS vulnerability exists when an open source customization for Microsoft Active Directory Federation Services AD FS does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Active Directory Federation Services XSS Vulnerability." This...

CVE-2018-8485: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1, Windows 10, Window...

CVE-2018-8476: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory, aka "Windows Deployment Services TFTP Server Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows Server 2008, Windows Server 2012, Windows...

Microsoft Outlook Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or...

PT-2018-18571

Name of the Vulnerable Software and Affected Versions Microsoft JScript affected versions not specified Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers Description A security feature bypass issue exists that could allow an attacker to bypass Device Guard. This issue affects...

PT-2018-1809

Name of the Vulnerable Software and Affected Versions Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description A security feature bypass exists due to incorrect validation of kernel driver signatures by...

Microsoft Active Directory Federation Services CVE-2018-8547 Cross-Site Scripting Vulnerability

Description Microsoft Active Directory Federation Services is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

PT-2018-1877

Name of the Vulnerable Software and Affected Versions Windows 10 versions affected versions not specified Windows Server 2019 versions affected versions not specified Windows 10 Servers versions affected versions not specified Description An information disclosure issue exists due to the Windows...

PT-2018-1794

Name of the Vulnerable Software and Affected Versions Windows Server versions prior to the fixed version Windows Server 2012 R2 Windows Server 2008 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows Server 2008 R2 Windows 10 Servers Description A remote code execution issue exist...

PT-2018-1795

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description An information disclosure issue exists due to the win32k...

PT-2018-1810

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers Description The issue arises from improper handling of calls to Advanced Local Procedure Call ALPC in Windows, leading to an elevation of privilege. This can be exploited by...