Denial of service

A denial of service vulnerability exists in the Microsoft Server Block Message SMB when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016,...

CVE-2018-8445

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8336, CVE-2018-8419, CVE-2018-8442, CVE-2018-844...

Privilege escalation

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server...

CVE-2018-8335

A denial of service vulnerability exists in the Microsoft Server Block Message SMB when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016,...

CVE-2018-8420

CVE-2018-8420 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser that processes user input. Affected software includes Windows platforms listed in the description (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016, and others). The underlying ...

CVE-2018-8435

A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8438

CVE-2018-8438 is a denial-of-service vulnerability in Microsoft Hyper-V Network Switch. The issue occurs when the host fails to properly validate input from a privileged user on a guest OS, potentially impacting availability. Affected products include Windows Server 2012 R2, Windows RT 8.1, Windo...

CVE-2018-8444

An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests, aka "Windows SMB Information Disclosure Vulnerability." This affects Windows Server 2012, Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012 R2...

CVE-2018-8449: Time-of-check Time-of-use (TOCTOU) Race Condition

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8446

CVE-2018-8446 is an information disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 (and Windows Server 2016/Servers). The issue is described as a lo...

CVE-2018-8435: Insufficient Entropy

A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-V Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8393: Undefined Security Weakness

A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, aka "Microsoft JET Database Engine Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008,...

CVE-2018-8462: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8332

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows...

CVE-2018-8393

The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...

CVE-2018-8335

Technical details about CVE-2018-8335 are not publicly provided in the connected documents. Monitor for updates.

CVE-2018-8462

CVE-2018-8462 is a local elevation-of-privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver. The CNVD entry states that the DXGKRNL driver’s handling of memory objects is vulnerable, enabling privilege escalation on Windows platforms (Windows Server 2016 and Windows 10 family). ...

CVE-2018-8336

CVE-2018-8336 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected are Windows Server 2008, Windows 7, and Windows Server 2008 R2. The entry notes it is distinct from CVE-2018-8419 and other related CVEs. The initial descripti...

Microsoft Internet Explorer and Edge Memory Corruption Vulnerability (CNVD-2018-18626)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft.Internet Explorer IE and Edge are web browsers developed by Microsoft.IE is the default browser that came with the operating system before Windows 10.Edge is the default browser that came with the...

CVE-2018-0965

CVE-2018-0965 describes a remote code execution vulnerability in Windows Hyper‑V, triggered when a host server fails to properly validate input from an authenticated user on a guest OS. Affected products include Windows Server 2016 and Windows 10/Windows 10 servers. The root cause is improper inp...