MS16-131: Security update for Microsoft Video Control: November 8, 2016

Resolves a vulnerability in Windows that could allow remote code execution when Microsoft Video Control fails to properly handle objects in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if Microsoft Video...

Evernote Loaded Remote Code Execution Vulnerability

Evernote Impression Notes is a suite of note-taking software from the American company Evernote. The software allows you to create, manage, synchronize, search and share notes anytime, anywhere. A loaded remote code execution vulnerability exists in Evernote for Windows version 6.1.2.2292. A remo...

Microsoft Windows Kernel Local Elevation of Privilege Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the United States. kernel is one of the kernels. A local elevation of privilege vulnerability exists in the kernel in Microsoft Windows, which arises from a failure of the kernel API to properly restrict acces...

Privilege escalation

The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitiv...

EUVD-2016-4300

The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of...

Microsoft Windows Video Control Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists when Microsoft Video Control fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code i...

CVE-2016-7004

Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Adobe Creative Cloud Desktop Application before 3.8.0.310 on Windows allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

PHP 7 is due. 0. 0 format string vulnerability with the EIP hijack analysis-vulnerability warning-the black bar safety net

PHP 7 is due. 0. 0 this format string vulnerability is 1 5 year 1 2 On On exploit-db. When found, the author in Beijing to the North-East of a information security company to work, then busy, and failed to delve into it. In recent days inadvertently saw this vulnerability and found this...

MS16-126: Security update for Microsoft Internet Messaging API: October 11, 2016

Resolves a vulnerability in Windows that could allow information disclosure when the Microsoft Internet Messaging API improperly handles objects in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. An information disclosure vulnerability exists when the Microsoft...

CVE-2016-5793

Unquoted Windows search path vulnerability in Moxa Active OPC Server before 2.4.19 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system is related to incorrect restrictions on the download of web content when the screen is blocked. Exploiting this vulnerability allows a local attacker to execute arbitrary code using a specially crafted Wi-Fi access point or broadband mobile device...

The vulnerability of the Windows operating system, which allows a perpetrator to gain access from the administrator’s perspective

The vulnerability of the Windows operating system is related to incorrect access control. Exploiting this vulnerability can allow a local attacker to gain access from the administrator through a specially crafted DLL library...

The vulnerability of the Windows operating system, which allows a hacker to crack the password

The vulnerability of the Windows operating system is related to incorrect checking of NTLM SSO requests for MSAs. Exploiting this vulnerability allows a malicious actor to select a password by using brute-force attacks on NTLM password hashes...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the SMBv1 server in Windows operating systems is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...

Adobe AIR SDK & Compiler Information Disclosure Vulnerability

Adobe AIR SDK & Compiler is a standard development toolkit for Adobe AIR a cross-OS runtime environment from Adobe Adobe. An information disclosure vulnerability exists in Adobe AIR SDK & Compiler 22.0.0.153 and earlier versions for Windows-based platforms, which stems from the program not...

Microsoft Windows Information Disclosure Vulnerability (CNVD-2016-07600)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An information disclosure vulnerability exists in Microsoft Windows, which can be exploited by an attacker with the help of a specially crafted application to obtain sensitive information on the target...

Microsoft SMBv1 Server Authenticated Remote Code Execution Vulnerability (3185879)

This host is missing an important security update according to Microsoft Bulletin MS16-114. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-116: Security update in OLE Automation for VBScript Scripting Engine: September 13, 2016

Resolves a vulnerability in Windows that could allow remote code execution if an attacker convinces a user of an affected system to visit a malicious or compromised website.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code executi...

UBUNTU-CVE-2016-5167

Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux allow attackers to cause a denial of service or possibly have other impact via unknown vectors...