CVE-2018-8342

Summary (CVE-2018-8342): A local elevation-of-privilege flaw in Microsoft Windows’ Network Driver Interface Specification (NDIS) due to ndis.sys not validating the buffer length before copying memory. Affected: Windows 7 and Windows Server 2008 R2. Root cause: buffer-length check missing during m...

CVE-2018-8341

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows...

EUVD-2018-19991

A security feature bypass vulnerability exists when Active Directory Federation Services AD FS improperly handles multi-factor authentication requests, aka "AD FS Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows Server 2012 R2, Windows 10 Servers...

CVE-2018-8340

CVE-2018-8340 is a security feature bypass in Active Directory Federation Services (AD FS) where multi-factor authentication requests are improperly handled. The description across sources identifies the vulnerability affecting Windows Server 2016 , Windows Server 2012 R2 , and Windows 10 Servers...

CVE-2018-8339

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior, aka "Windows Installer Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Window...

CVE-2018-8339

Technical details about CVE-2018-8339 are not publicly provided in the connected documents. Available sources reiterate the elevated-privilege issue in Windows Installer but do not disclose affected versions, specific vulnerable components, exploit vectors, or remediation steps beyond general gui...

CVE-2018-8204

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8253

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10...

CVE-2018-8204

CVE-2018-8204 is a Device Guard local security bypass vulnerability that could allow an attacker to inject malicious code into a Windows PowerShell session by bypassing the Code Integrity policy. Affected software includes Windows Server 2016 and Windows 10/Windows 10 Servers. The root cause is a...

CVE-2018-8253

CVE-2018-8253 overview (normal): A local elevation-of-privilege in Microsoft Cortana on the lockscreen where arbitrary website browsing is allowed. Affects Windows 10 and Windows Server 2016; root cause is Cortana-enabled lockscreen browsing. Exploitation requires physical access and Cortana assi...

CVE-2018-8343

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it, aka "Windows NDIS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT...

CVE-2018-8398

The connected CPAI-2019-0228 advisory describes a related information-disclosure vulnerability in the Microsoft Graphics Component due to improper in-memory handling of JPEG decoding. While CVE-2018-8398 (Windows GDI Information Disclosure) is the primary CVE here, the document confirms a memory-...

CVE-2018-8200

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8341

CVE-2018-8341 describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly handled. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 (and corresponding Server SKUs 2008/2012/2016/2019-era fa...

CVE-2018-0952

CVE-2018-0952 is a local Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector (used by Windows Diagnostics Hub and Visual Studio components). The root cause, as documented, is the ability to create arbitrary files due to lack of proper client impersonation in DiagnosticsHub....

CVE-2018-0952

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Serve...

CVE-2018-8406: Improper Resource Shutdown or Release

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from...

CVE-2018-0952: Undefined Security Weakness

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka "Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Serve...

Security Only update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 and 4.7.2 for Windows Server 2012 (KB 4340005)

Security Only update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1 and 4.7.2 for Windows Server 2012 KB 4340005 This article also applies to the following: Microsoft .NET Framework 3.5 Summary This security update resolves the following vulnerabilities: A "remote code execution"...

CVE-2018-8253: Undefined Security Weakness

An elevation of privilege vulnerability exists when Microsoft Cortana allows arbitrary website browsing on the lockscreen, aka "Microsoft Cortana Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10...