4937 matches found
The vulnerability of the Windows operating system allows a perpetrator to execute arbitrary code or cause malfunctions in the host operating system.
The vulnerability of the Hyper-V service in the Windows operating system arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a failure in the host operating system by elevating the privileges of the ho...
Buffer overflow
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a...
Microsoft releases Emergency Patch Update for all versions of Windows
In the wake of a critical Remote Code Execution vulnerability in all supported versions of its operating system platform, Microsoft has just issued an emergency fix. Yes, it’s time to patch your Windows operating system against an alarming security hole that could allow remote attackers to run...
MS15-066: Description of the security update for the VBScript 5.8 scripting engine: July 14, 2015
Resolves a vulnerability in the VBScript scripting engine in Windows that could allow remote code execution if a user goes to a specially crafted website. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.SummaryThis security update...
IBM i Access for Windows Stack Buffer Overflow Vulnerability
IBM i Access for Windows is a suite of client solutions from IBM in the United States that provide access to and use of desktop resources from a variety of different Windows operating systems. A stack buffer overflow vulnerability exists in IBM i Access for Windows that stems from the program's...
VulnCheck KEV: CVE-2015-2426
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially crafted OpenType fonts...
Google“zero project”hackers released a serious vulnerability to get all the Windows-vulnerability warning-the black bar safety net
Google“zero project”hack Mateusz Jurczyk(@j00ru)one-time release the 1 5 remote code execution vulnerabilities, which contains a serious vulnerability affecting almost all of the Adobe Reader and the Windows version and will defeat all the defense measures. Jurczyk in the month, held at Recon...
The vulnerability of the Windows operating system allows a malicious individual to obtain user authentication information.
The vulnerability of the Windows operating system exists in the implementation of system calls such as URLDownloadA, URLDownloadW, URLDownloadToCacheFileA, URLDownloadToCacheFileW, URLDownloadToFileA, URLDownloadToFileW, URLOpenStream, and URLOpenBlockingStream. During these calls, the operating...
VMware Horizon Client for windows arbitrary code execution vulnerability (CNVD-2015-03817)
Horizon Client for Windows is used to virtualize desktops and applications. A memory allocation error vulnerability exists in Horizon Client for Windows 'TPView.ddl' that allows remote attackers on the View desktop to execute arbitrary code...
Microsoft Windows Kernel 'Win32k.sys' Buffer Overflow Vulnerability
Microsoft Windows is a popular operating system. A buffer overflow vulnerability in Microsoft Windows Kernel 'Win32k.sys' allows local attackers to exploit the vulnerability to execute arbitrary code with elevated privileges...
Beckhoff IPC Diagnostics Arbitrary User Creation Vulnerability
Beckhoff IPC Diagnostics is a set of support software pre-installed in all Beckhoff IPCs/PLCs Programmable Logic Controllers running on the Microsoft Windows operating system. Beckhoff IPC Diagnostics fails to properly restrict access to functions in the /config URI, allowing a remote attacker to...
IBM SPSS Statistics ActiveX Control Code Execution Vulnerability
IBM SPSS Statistics is a suite of statistical analysis software that helps organizations address the entire analytics process, from planning and data collection to analysis, reporting, and deployment. A code execution vulnerability exists in the ActiveX control of IBM SPSS Statistics version 22.0...
The vulnerability of the Windows operating system allows a hacker to execute arbitrary code in the context of the current user.
The vulnerability of the Windows operating system exists due to improper handling of the event log file. The vulnerability can be exploited by opening the event log file created by the attacker. As a result of exploiting this vulnerability, an attacker who operates remotely can execute arbitrary...
Microsoft Windows Type 1 Font callother Opcode Heap Buffer Underflow Remote Code Execution Vulnerability
This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...
Microsoft Management Console Denial of Service Vulnerability
Microsoft Windows is a popular operating system. A security vulnerability in the Microsoft Windows Management Console's handling of the special '.msc' file allows an attacker to exploit the vulnerability to trick users into loading the file for a denial-of-service attack...
The vulnerability of the Windows operating system allows a malicious attacker to execute a special application with privileges of the current user.
The Microsoft Windows operating system contains a vulnerability related to the presence of unauthorized tasks in the system. This vulnerability allows a malicious individual to execute a specially crafted application with privileges of the current user. If successful, the perpetrator will be able...
The vulnerability of the Windows operating system, which allows a remote attacker to escalate their privileges
The Microsoft Windows operating system contains a vulnerability related to improper verification and application of impersonation levels. This allows attackers to bypass security checks and elevate their privileges, including gaining administrator account information. If exploited successfully,...
The vulnerability of the Windows operating system, which allows a remote attacker to escalate their privileges
The Microsoft Windows operating system contains a vulnerability related to improper verification and application of impersonation levels. This allows attackers to bypass security checks and elevate their privileges, including gaining administrator account information. If exploited successfully,...
CVE-2015-1484
Symantec Workspace Streaming Agent is affected by a local privilege escalation due to an unquoted search/path in AppMgrService.exe when installed as a service. A Trojan horse executable placed in the system root can be launched at service startup to gain SYSTEM privileges. Affected versions inclu...
Microsoft Windows MSXML3 Same Origin Policy SFB Vulnerability
Microsoft XML Core Services MSXML is a set of services that can be used to build XML-based Windows-native applications written in JScript, VBScript, and Microsoft development tools. A same-origin policy security feature bypass vulnerability exists in Microsoft XML Core Services MSXML. This...