4912 matches found
CVE-2017-8473: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly initializes objects in memory, aka "Win32k...
CVE-2017-8470: Exposure of Sensitive Information to an Unauthorized Actor
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an authenticated attacker to run a specially crafted application when the Windows kernel improperly...
CVE-2017-8490: Exposure of Sensitive Information to an Unauthorized Actor
The kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information via a specially crafted application. aka...
Microsoft Windows Kernel Information Disclosure Vulnerability (CNVD-2017-12797)
Microsoft Windows is a series of operating systems released by the American company Microsoft. A local information disclosure vulnerability exists in Microsoft Windows. A local attacker could exploit this vulnerability to obtain sensitive information...
Automated mining Windows kernel information disclosure vulnerability-vulnerability warning-the black bar safety net
2017 6 on patch day, to fix up before we report 5-a kernel information leak vulnerability , the end of the article have details. The year before I demonstrate how to use JS to fuzz the kernel, today we want to bring to you is not dependent on the fuzz, and to automate the mining kernel...
Microsoft Windows Multiple Vulnerabilities (KB4022715)
This host is missing a critical security update according to Microsoft KB4022715 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB4022717)
This host is missing a critical security update according to Microsoft KB4022717 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Windows 2008 June 2017 Multiple Security Updates
The remote Windows host is missing multiple security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited the vulnerability...
Windows kernel information disclosure vulnerability: June 13, 2017 (KB4022013)
None None...
Windows kernel information disclosure vulnerability: June 13, 2017 (KB4022010)
None None...
Windows kernel information disclosure vulnerability: June 13, 2017 (KB4022883)
None None...
Windows 10 the next MS16-098 RGNOBJ integer overflow vulnerability analysis and exploit-vulnerability warning-the black bar safety net
This article with reference to , the text talked about the Windows Kernel Pool Feng Shui, SetBitmapBits/GetBitmapBits to any address read and write, etc. the use of Means, and very helpful in learning the Windows kernel exploits. Test environment: Windows 10 1511 x64 Professional Edition2016.04 2...
KLA11048 Multiple vulnerabilities in Windows Kernel
Multiple serious vulnerabilities have been found in Microsoft Windows kernel. Malicious users can exploit these vulnerabilities to obtain sensitive information and gain privileges. Below is a complete list of vulnerabilities: 1. An improper handling of objects in memory can be exploited locally v...
Microsoft Win32k Elevation of Privilege (CVE-2017-8468)
An elevation of privilege vulnerability exists in Microsoft Windows. The vulnerability is caused when the Windows kernel-mode fails to properly handle objects in memory. A remote attacker can exploit this vulnerability by enticing a user to run a specially crafted executable file...
PT-2017-2326
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions 8.1 through 10 including Windows RT 8.1, Windows Server 2012 R2, Windows Server 2016, and versions 1511, 1607, 1703 Description The issue is related to the improper handling of data in device memory by the Windows...
KLA11842 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. An information disclosure vulnerability in...
KB4022715: Windows 10 Version 1607 and Windows Server 2016 June 2017 Cumulative Update
The remote Windows host is missing security update KB4022715. It is, therefore, affected by multiple vulnerabilities : - Multiple security bypass vulnerabilities exist in Device Guard. A local attacker can exploit these, via a specially crafted script, to bypass the Device Guard Code Integrity...
Vulnerabilities in kernel-level drivers of the Windows operating system, which allow attackers to access confidential information or cause system failures
The vulnerability of kernel-level drivers in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an intruder, operating locally, to gain access to confidential information or cause service failures through a specially crafted...
Vulnerability of Windows operating system kernel drivers, which allows attackers to increase their privileges
The vulnerability of Windows operating system kernel drivers is related to incorrect handling of objects in memory by the kernel-level driver. Exploiting this vulnerability can allow a local attacker to enhance their privileges through a specially created application...