Microsoft Win32k Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel-mode drivers is one of the kernel driver management software. An information disclosure vulnerability exists in the GDI component of kernel-mode drivers in Microsoft Windows. A local...

Windows File System Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Windows kernel that could allow an attacker to exploit time of check time of use TOCTOU issues in file path-based checks from a low-integrity application. An attacker who successfully exploited this vulnerability could potentially modify files...

MS16-092: Description of the security update for Windows Kernel: July 12, 2016

None None...

KLA11909 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions. Below is a complete list of...

MS16-092: Security Update for Windows Kernel (3171910)

The remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in the Windows kernel due to improper validation of how a low integrity application can use certain object manager features. An attacker...

Microsoft Win32k Elevation of Privilege (MS16-090 : CVE-2016-3252)

An elevation of privilege vulnerability exists in Windows Kernel. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...

July 12, 2016 — KB3172985 (OS Build 10586.494)

None None...

July 12, 2016 — KB3163912 (OS Build 10240.17024)

None None...

Microsoft Win32k Elevation of Privilege (MS16-090 : CVE-2016-3286)

An elevation of privilege vulnerability exists in Windows Kernel. The vulnerability is caused when the Windows kernel-mode driver fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by running a specially crafted application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability that allows for increased privileges is related to incorrect handling of objects in memory by the kernel-level driver in Windows. If this vulnerability is exploited successfully, a malicious individual will be able to execute arbitrary code at the kernel level. As a result, they...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

A vulnerability that allows for increased privileges exists in the NDProxy component of the Windows kernel, due to improper validation of input data passed to the kernel in user mode. This vulnerability enables a malicious individual to execute code in kernel mode. Exploiting this vulnerability...

The vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability that allows for remote execution of code is related to improper processing of TrueType fonts by the kernel-level driver in Windows. If this vulnerability is exploited successfully, a malicious individual can execute arbitrary code at the kernel level. As a result, they can insta...

The vulnerability of the Windows operating system allows a malicious individual to compromise the confidentiality of protected information.

A vulnerability that allows access to confidential information exists in Windows and is related to kernel memory handling. Exploiting this vulnerability enables a malicious individual to obtain information about memory addresses or other details related to the kernel...

Vulnerability of the Windows operating system, allowing for an increase in privilege levels

The vulnerability that allows for increased privilege levels is related to the improper use of the Windows kernel mode driver’s window descriptors for objects in memory that belong to the thread. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with elevated...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of Windows operating system’s kernel mode drivers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application...

A year of Windows kernel font fuzzing #2: the techniques

Posted by Mateusz Jurczyk of Google Project Zero In part 1 of the series see here, we discussed the motivation and outcomes of our year long fuzzing effort against the Windows kernel font engine, followed by an analysis of two bug collisions with Keen Team and Hacking Team that ensued as a result...

A year of Windows kernel font fuzzing #1: the results

Posted by Mateusz Jurczyk of Google Project Zero This post series is about how we used at-scale fuzzing to discover and report a total of 16 vulnerabilities in the handling of TrueType and OpenType fonts in the Windows kernel during the last year. In part 1 here, we present a general overview of...

Microsoft Windows - Kernel ATMFD.dll NamedEscape 0x250C Pool Corruption (MS16-074)

Exploit for windows platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785 The Adobe Type Manager Font Driver ATMFD.DLL responsible for handling PostScript and OpenType fonts in the Windows kernel provides a channel of communication with user-mode...

Microsoft Windows Kernel - ATMFD.dll NamedEscape 0x250C Pool Corruption (MS16-074)

Microsoft Windows Kernel - ATMFD.dll NamedEscape 0x250C Pool Corruption MS16-074 Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=785 The Adobe Type Manager Font Driver ATMFD.DLL responsible for handling PostScript and OpenType fonts in the Windows kernel provides a channel of...

CVE-2016-3221

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...