The vulnerability of the Windows operating system allows a perpetrator to execute arbitrary code or cause a service failure.

A vulnerability that allows for remote execution of code exists in vulnerable components and is related to the processing of specially crafted font files. Exploiting this vulnerability enables remote execution of code, provided that the user opens a specially crafted file or webpage. This...

The vulnerability of the Windows operating system, which allows a perpetrator to increase their privileges or execute arbitrary code

Vulnerability exists in the Message Queue Service MSMQ, the BthPan.sys and MQAC.sys drivers. This allows a malicious individual to elevate their privileges within the system and execute arbitrary code...

The vulnerability of the Windows operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in DirectShow allows for an increase in privilege levels...

The vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability in GDI+, related to the processing of specially crafted images, allows for remote execution of code provided that the user opens a specially crafted image. Exploiting this vulnerability enables a malicious individual to gain full control over the system. They can then install...

The vulnerability of the Windows operating system, which allows a malicious individual to alter the information transmitted during an RDP session

The vulnerability in the Remote Desktop Protocol RDP allows an attacker to modify the contents of the traffic for an active RDP session...

The vulnerability of the Windows operating system, which allows a malicious individual to trigger a service failure

A vulnerability that can lead to service failure exists in the Windows operating system and is related to the processing of iSCSI packets. If exploited successfully, a malicious individual will be able to cause a service failure or service disruption...

The vulnerability of the Windows operating system, which allows a malicious individual to trigger a service failure

The Windows operating system contains a vulnerability related to errors in handling iSCSI connections. Exploiting this vulnerability can lead to service failures...

Vulnerability of the Windows operating system, allowing a malicious individual to execute arbitrary code

The vulnerability exists in Windows components and is related to the processing of specially crafted two-dimensional 2D geometric figures. Exploiting this vulnerability allows for the execution of code remotely, provided that the user opens the file containing such specially crafted figures using...

Vulnerability of the Windows operating system, allowing a malicious individual to access confidential information

The vulnerability that allows access to confidential information is related to the incorrect processing by the Windows kernel driver of objects in memory...

Windows operating system’s vulnerability, which allows a malicious actor to trigger a service failure

The vulnerability of the TCP protocol in the Windows operating system allows a malicious actor to induce a service failure by creating TCP packets that contain incorrect data fields in the “Options” header...

The vulnerability of the Windows operating system, which allows a malicious individual to increase their privileges

A vulnerability that allows for increased privileges exists in Active Directory and is related to the distribution of passwords created based on group policy settings. Successful exploitation of this vulnerability enables an attacker who has been authenticated to decrypt passwords and use them to...

The vulnerability of the Windows operating system, which allows a malicious individual to increase their privileges

A vulnerability that allows for increasing the level of privileges related to incorrect handling of objects in memory by the kernel-level driver in Windows. Exploiting this vulnerability enables attackers to increase their privileges and gain access to arbitrary kernel memory...

The vulnerability of the Windows operating system, which allows a malicious individual to trigger a service failure

The vulnerability in the implementation of the IPv6 TCP/IP protocol in Windows allows a malicious actor to trigger a failure of the vulnerable system using an ICMPv6 packet...

The vulnerability of the Windows operating system, which allows a hacker to bypass the ASLR protection mechanism

The vulnerability of the dynamically linked GDI32.dll library of the Windows operating system’s Graphics component is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection mechanism...

Vulnerability of the Windows operating system and the Microsoft Edge browser, allowing attackers to obtain confidential information

The vulnerability of the Windows operating system and the Microsoft Edge browser is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially crafted PDF document...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the SMB server component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating locally, to enhance their privileges through a specially created application that requests authentication f...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted NetLogon request...

Vulnerability of the Windows operating system and the Internet Explorer browser, allowing attackers to increase their privileges

The vulnerability of the Web Proxy Auto Discovery protocol for the Windows operating system and the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely by using the NetBIOS name...

Information disclosure

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201...

Elevation of Privilege Vulnerability Found in Microsoft Windows WPAD Agent

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows that stems from a program's inability to properly handle certain proxy discovery scenarios using the Web Proxy Autodiscovery WPAD...