CVE-2018-1040

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

CVE-2018-8224

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows Server 2008, Windows 7, Windows Server 2008 R2...

CVE-2018-8225

A remote code execution vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses, aka "Windows DNSAPI Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server...

CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...

CVE-2018-1036

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,...

CVE-2018-8207

The CVE-2018-8207 entry describes an information disclosure vulnerability in the Windows kernel caused by improper handling of memory objects. Affected products include Windows 7, Windows Server 2008/R2/2012/2012 R2, Windows 8.1, Windows 10 and corresponding server variants. The issue stems from ...

CVE-2018-8205

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10,...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8207

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2018-1036

The CVE-2018-1036 entry describes an NTFS elevation of privilege in Windows where access checks are improperly performed. Affected products include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions such as 2008, 2012, 2016, and 2012 R2 variants). The vulnerability is l...

CVE-2018-8169

CVE-2018-8169 is a local elevation-of-privilege vulnerability in the HIDParser driver used by Windows HID parsing. The root cause, per CNVD-2018-11571, is that HIDParser fails to properly handle objects in memory, enabling a local attacker to execute code with higher privileges by running a craft...

Microsoft Windows: Service: Remote Access Auto Connection Manager

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winrasauto.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Remote Access Auto Connection Manager RasAuto Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program...

Microsoft Windows: Service: Windows Remote Management (WS-Management)

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremotemanagement.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Windows Remote Management WS-Management WinRM Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Microsoft Windows: Service: Microsoft iSCSI Initiator Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winiscsiinitiatorservice.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Microsoft iSCSI Initiator Service MSiSCSI Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net Th...

RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation

Title: RSLinx Classic and FactoryTalk Linx Gateway - Privilege Escalation Date: 2017-12-11 Author: LiquidWorm Vendor: Rockwell Automation, Inc. Product web page: https://www.rockwellautomation.com Affected version: Rockwell Automation RSLinx Classic 3.90.01 Rockwell Automation RSLinx Classic...

Microsoft Windows: Service: Peer Networking Grouping

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winpeernetworkinggrouping.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Peer Networking Grouping p2psvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Microsoft Windows: Service: Link-Layer Topology Discovery Mapper

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winlinklayertopologydiscoverymapper.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Link-Layer Topology Discovery Mapper lltdsvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Service: Web Management Service

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winwebmanagementservice.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Web Management Service WMSvc Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is...

KLA11891 Microsoft Advisory for Microsoft Products (ESU)

Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown. An additional vulnerability involving side channel speculative execution has been announced and assigned CVE-2018-3665. An attacker locally could caus...

Microsoft Windows: Service: Remote Registry

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winremoteregistry.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for Remote Registry RemoteRegistry Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...