CVE-2018-8205

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10,...

CVE-2018-8211

CVE-2018-8211 describes a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session. Affected products listed in the sources include Windows 10 and Windows 10 Server variants. The vulnerability is characterized as a b...

Shopify: Subdomain Takeover - https://competition.shopify.com/

Dear Shopify Security Team, The Shopify.com subdomain competition.shopify.com was vulnerable to a subdomain takeover as it was pointing to an unclaimed Heroku service through the CNAME competition.shopify.com.herokudns.com, while the custom domain 'competition.shopify.com' was unclaimed in Heroku...

CVE-2018-8121: Improper Initialization

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8207...

CVE-2018-0982: Incorrect Permission Assignment for Critical Resource

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8211: Undefined Security Weakness

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is uniqu...

CVE-2018-8209: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8213: Improper Resource Shutdown or Release

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8210...

CVE-2018-8233: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 10, Windows 10 Servers...

CVE-2018-8218: Improper Input Validation

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows 10, Windows 10 Servers...

CVE-2018-8215: Undefined Security Weakness

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-1040: Undefined Security Weakness

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

CVE-2018-8226: Undefined Security Weakness

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8175: Undefined Security Weakness

An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory, aka "WEBDAV Denial of Service Vulnerability." This affects Windows 10 Servers, Windows 10...

CVE-2018-8140: Undefined Security Weakness

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10...

PT-2018-18447

Name of the Vulnerable Software and Affected Versions Windows 10 Servers affected versions not specified Windows 10 affected versions not specified Description The issue is related to an information disclosure problem. It occurs when the Windows kernel fails to properly initialize objects in...

PT-2018-18493

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description An elevation of privilege issue exists due to the failure of Windows Hyper-V instruction emulation to properly enforce privilege levels. This allows attackers to affect the system...

PT-2018-18455

Name of the Vulnerable Software and Affected Versions Windows 10 affected versions not specified Windows 10 Servers affected versions not specified Description An Elevation of Privilege issue exists due to Cortana retrieving data from user input services without considering status. This allows...

PT-2018-18497

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description A denial of service issue exists due to improper parsing of specially crafted HTTP 2.0 requests in the HTTP.sys protocol stack. This allows attackers to affect the system...

PT-2018-18506

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description An information disclosure issue exists due to improper memory disclosure by the Windows GDI component. This allows attackers to obtain sensitive information and potentially affect t...