CVE-2016-0167

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege...

MS16-046: Security update for secondary logon: April 12, 2016

Resolves a vulnerability vulnerabilities in Windows. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator.SummaryThis security update resolves a vulnerability in Microsoft Windows. An attacker who successfully exploited this vulnerability could ru...

MS16-048: Security update for CSRSS: April 12, 2016

Resolves a vulnerability in Windows that could allow security feature bypass if an attacker logs on to a target system and runs a specially crafted application.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass if an...

CVE-2016-1015

Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code by overriding NetConnection object properties to leverage an unspecified "type confusion," a different vulnerability than...

The vulnerability of the Windows operating system, which allows a perpetrator to trigger a service failure

The vulnerability of the Adobe Type Manager library on the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure system freeze using a special OpenType font...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Adobe Type Manager library on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a special OpenType font remotely...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted media content, from a remote location...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted media content, from a remote location...

The vulnerability of the Windows operating system, which allows a perpetrator to increase their privileges

The vulnerability of the secondary input service in the Windows operating system is related to the improper handling of incoming requests. Exploiting this vulnerability allows a local attacker to enhance their privileges through a specially created application...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the OLE component in the Windows operating system exists due to insufficient checking of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file...

CVE-2016-1976

Use-after-free vulnerability in the DesktopDisplayDevice class in the WebRTC implementation in Mozilla Firefox before 45.0 on Windows might allow remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors...

Microsoft Windows OpenType Font Analysis Vulnerability (CNVD-2016-01568)

Microsoft Windows is a series of operating systems released by Microsoft.Adobe Type Manager Library is one of the font driver libraries. A remote code execution vulnerability exists in the Windows Adobe Type Manager Library for Microsoft Windows, which arises from the program not properly handlin...

Microsoft Windows Media Analytics Remote Code Execution Vulnerability

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows. A remote attacker could exploit this vulnerability to execute code and compromise a vulnerable system by tricking a user into opening...

MS16-032: Security update for Secondary Logon to address elevation of privilege: March 8, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if the Windows Secondary Logon Service fails to properly manage request handles in memory.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow elevation of privilege if...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel driver exists due to an error in the handling of memory objects by the Win32k.sys driver. Exploiting this vulnerability allows a local attacker to increase their privileges through a specially created application...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious individual to enhance their privileges through a specially created application...

Avast Virtualization aswSnx.sys Buffer Overflow Vulnerability

aswSnx.sys handles the 'Sandbox' and 'DeepScreen' features of all Avast Windows products. A buffer overflow vulnerability exists in the Avast Virtualization driver aswSnx.sys v11.1.2245 and earlier. Successful exploitation could allow a local attacker to execute arbitrary code with system...

MS16-017: Security update for Remote Desktop display driver to address elevation of privilege: February 9, 2016

Resolves a vulnerability in Windows that could allow elevation of privilege if an authenticated attacker uses RDP to log on to the target system and sends specially crafted data over the connection.SummaryThis security update resolves a vulnerability in Microsoft Windows. The vulnerability could...

The vulnerability of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the graphical component of the Windows operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker, operating locally, to increase their privileges...

Vulnerability of the Windows operating system, allowing a perpetrator to execute arbitrary code

The vulnerability of the ATMFD.DLL library in the Windows operating system arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted script...