The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the LSASS service in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system shutdown through a specially crafted request...

Microsoft Windows Local Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in the Microsoft Windows Universal Log File System driver, which arises from a failure of the program driver to properly handle objects in memory. The...

MS16-146: Security update for Microsoft graphics component: December 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document.SummaryThis security update resolves vulnerabilities in Microsoft Windows. The most severe of the vulnerabilities could allow remote...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the atmfd.dll library in the Windows operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially crafted web page from a remote location...

Microsoft MSINFO32.EXE '.NFO' XML External Entity Injection Vulnerability

Microsoft MSINFO32.EXE is a software from Microsoft that is used to display performance views of hardware, system components, and software environments. Microsoft MSINFO32.EXE V6.1.7601 An XML external entity injection vulnerability exists in the '.NFO' file, which can be exploited by an attacker...

Vulnerability of Microsoft Edge browser and Windows operating system, allowing attackers to obtain confidential information

Vulnerability of Microsoft Edge browser and Windows operating system, allowing attackers to obtain confidential information...

The vulnerability of the Internet Explorer browser and the Windows operating system allows a perpetrator to determine the presence of arbitrary files.

The vulnerability of the Internet Explorer browser and the Windows operating system allows a perpetrator to determine the presence of arbitrary files...

Tor (Firefox 41 < 50) - Code Execution

TOR Browser 0day : JavaScript Exploit ! Works on Firefox versions 41 - 50 The critical vulnerability is believed to affect multiple Windows versions of the open source Firefox web browser as far back as Firefox version 41, and up to Firefox version 50. When exploit opened by a Firefox or Tor...

CVE-2016-7212

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allow remote attackers to execute arbitrary code via a crafted image file, aka "Windows Remote Cod...

CVE-2016-3335

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

CVE-2016-7256

atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows remote attackers to execute arbitrary code via a...

CVE-2016-3332

The Common Log File System CLFS driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows local users to gain privileges via a crafted...

Microsoft windows Open Type Font Information Disclosure Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists when the ATMFD component fails to properly disclose the contents of memory. An attacker who successfully exploited this vulnerability could gain access to...

Microsoft Windows Local Security Privilege Subsystem Service Denial of Service Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A denial of service vulnerability exists in the Microsoft Windows Local Security Privilege Subsystem service. A remote attacker exploiting the vulnerability could cause a denial of service attack via a...

Microsoft Win32k Elevation of Privilege Vulnerability (CNVD-2016-10938)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the kernel mode driver for Microsoft Windows. An attacker could exploit this vulnerability to run arbitrary code in kernel mode...

Microsoft Windows Local Elevation of Privilege Vulnerability (CNVD-2016-10980)

Microsoft Windows is the popular computer operating system. An elevation of privilege vulnerability exists in the implementation of the Windows Common Log File System CLFS driver that does not properly handle memory objects. Successful exploitation could allow an attacker to run processes with...

CVE-2016-5852

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

CVE-2016-5852

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

CVE-2016-3161

For the NVIDIA Quadro, NVS, and GeForce products, GFE GameStream and NVTray Plugin unquoted service path vulnerabilities are examples of the unquoted service path vulnerability in Windows. A successful exploit of a vulnerable service installation can enable malicious code to execute on the system...

MS16-140: Security update for boot manager: November 8, 2016

Resolves a vulnerability in Windows that could allow security feature bypass if a physically-present attacker installs an affected boot policy.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow a security feature bypass if a physically present...