Description of the security update for the Windows Remote Desktop Protocol (RDP) denial of service vulnerability in Windows Server 2008: April 10, 2018

Description of the security update for the Windows Remote Desktop Protocol RDP denial of service vulnerability in Windows Server 2008: April 10, 2018 Notice An updated version of this security update was released June 12, 2018. Summary A denial of service vulnerability exists in the Remote Deskto...

Security update for Adobe Flash Player: April 10, 2018

None None...

April 10, 2018—KB4093115 (Security-only update)

None None...

PT-2018-9174

Name of the Vulnerable Software and Affected Versions: Windows Server 2016 Windows 10 Windows 10 Servers Description: A security feature bypass exists due to incorrect validation of an untrusted file by Device Guard, allowing attackers to affect the system. Recommendations: For Windows Server 201...

PT-2018-1267

Name of the Vulnerable Software and Affected Versions Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers Description The issue is related to an elevation of privilege vulnerability that occurs when Windows improperly handles...

PT-2018-1268

Name of the Vulnerable Software and Affected Versions Windows 7 Windows Server 2012 R2 Internet Explorer 9 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Description A remote code execution issue exists due to the way the VBScript engine handl...

PT-2018-1281

Name of the Vulnerable Software and Affected Versions Windows Server 2016 Windows 10 Windows 10 Servers Description The issue is related to the implementation of the HTTP 2.0 protocol in the HTTP.sys driver of Windows operating systems, which is associated with insufficient input validation. This...

PT-2018-9127

Name of the Vulnerable Software and Affected Versions: Windows Server 2016 Windows 10 Windows 10 Servers Description: A security feature bypass issue exists due to incorrect application of Network Isolation settings in Active Directory. This allows attackers to affect the system. No information i...

PT-2018-18443

Name of the Vulnerable Software and Affected Versions: Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers Description: A denial of service issue exists in the way that Windows...

Microsoft Windows 'HTTP.sys' CVE-2018-0956 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based Systems Microso...

Microsoft Windows VBScript Engine CVE-2018-1004 Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code in the context of the current user. Failed exploit attempts may result in a denial of service condition. Technologies Affected Microsoft Internet Explorer ...

PT-2018-9172

Name of the Vulnerable Software and Affected Versions: Windows Server 2016 Windows 10 Windows 10 Servers Description: An elevation of privilege issue exists in the way the Windows Kernel handles objects in memory. This allows attackers to affect the system. Recommendations: For Windows Server 201...

Security Updates for Windows Server 2008 (April 2018)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who successfully...

Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008: March 13, 2018

Description of the security update for the speculative execution side-channel vulnerabilities in Windows Server 2008: March 13, 2018 Summary Microsoft is aware of a new publicly disclosed class of vulnerabilities referred to as "speculative execution side-channel attacks" that affect many modern...

Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009

Update to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 SP2, Windows Embedded POSReady 2009, and Windows Embedded Standard 2009 Summary An update is available to add support for TLS 1.1 and TLS 1.2 in Windows Server 2008 Service Pack 2 SP2, Windows Embedded POSReady 2009, and Windows...

Microsoft Malware Protection Engine < 1.1.14700.5 RCE

The version of Microsoft Malware Protection Engine MMPE installed on the remote Windows host is prior to 1.1.14700.5. It is, therefore, affected by a remote code execution vulnerability which could allow an attacker who successfully exploited this vulnerability to execute arbitrary code in the...

Microsoft Malware Protection Engine on Windows Defender RCE Vulnerability (Apr 2018)

This host is missing a critical security update according to Microsoft Security Updates released for Microsoft Malware Protection Engine dated 03-04-2018 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

KLA11217 ACE vulnerability in Windows Defender

An ACE vulnerability was found in Windows Defender. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed file or possible via a specially designed website. Original advisories CVE-2018-0986 CVE-2018-0986...

Windows Server 2008 Critical RCE Vulnerabilities (uncredentialed) (PCI/DSS)

According to the version number obtained by NTLM the remote host has Windows Server 2008 installed. The host may be vulnerable to a number of vulnerabilities including remote unauthenticated code execution. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108811;...

CVE-2018-1038

The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability."...