22312 matches found
CVE-2018-0781
CVE-2018-0781 maps to a Microsoft Edge scripting engine memory corruption vulnerability affecting Windows 10 (various builds) and Windows Server 2016. The connected advisory indicates a remote code execution flaw caused by how the scripting engine handles objects in memory, allowing a remote unau...
CVE-2018-0750
CVE-2018-0750 affects the Win32k/Windows GDI component in Windows 7 SP1 and Windows Server 2008 SP2/R2 SP1. The vulnerability is a Win32k information disclosure caused by improper handling of objects in memory, allowing an attacker who logs on to obtain kernel memory addresses and potentially fur...
CVE-2018-0744
CVE-2018-0744 is a Windows kernel elevation-of-privilege vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds up to 1709), and Windows Server 2016/1709. The issue arises from how the kernel handles objects in memory, enabling local privilege escalation. E...
CVE-2018-0781
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is...
CVE-2018-0743
Summary (CVE-2018-0743): Elevation of privilege in Windows Subsystem for Linux (WSL) on Windows 10 (versions 1703 and 1709) and Windows Server 1709 due to improper handling of memory objects. The vulnerability allows a local attacker to run code with elevated privileges by exploiting how WSL mana...
Microsoft Windows Multiple Vulnerabilities (KB4056899)
This host is missing an important security update according to Microsoft KB4056899 OpenVAS Vulnerability Test $Id: gbmskb4056899.nasl 8364 2018-01-10 16:59:46Z gveerendra $ Microsoft Windows Multiple Vulnerabilities KB4056899 Authors: Shakeel Copyright: Copyright C 2018 Greenbone Networks GmbH,...
Microsoft Windows Multiple Vulnerabilities (KB4056892)
This host is missing a critical security update according to Microsoft KB4056892. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security Bulletin: NVIDIA Driver Security Updates for CPU Speculative Side Channel Vulnerabilities
NVIDIA driver response to CPU speculative side channel vulnerabilities - CVE-2017-5753, CVE-2017-5715, CVE-2017-5754 Bulletin Summary NVIDIA is providing an initial security update to mitigate aspects of Google Project Zero’s January 3, 2018 publication of novel information disclosure attacks tha...
KB4056899: Windows Server 2012 January 2018 Security Update
The remote Windows host is missing security update 4056899 or cumulative update 4056896. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists in Windows Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory...
KB4056892: Windows 10 Version 1709 and Windows Server Version 1709 January 2018 Security Update (Meltdown)(Spectre)
The remote Windows host is missing security update 4056892 or 4073291. It is, therefore, affected by multiple vulnerabilities : - An vulnerability exists within microprocessors utilizing speculative execution and indirect branch prediction, which may allow an attacker with local user access to...
Microsoft Windows Multiple Vulnerabilities (KB4056897)
This host is missing an important security update according to Microsoft KB4056897 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB4056898)
This host is missing an important security update according to Microsoft KB4056898 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Description of the security update for SQL Server 2014 SP2 CU10: January 16, 2018
None None...
Description of the security update for the Windows GDI information disclosure vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the Windows GDI information disclosure vulnerability in Windows Server 2008: January 3, 2018 Summary A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfull...
Description of the security update for the Microsoft Color Management information disclosure vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the Microsoft Color Management information disclosure vulnerability in Windows Server 2008: January 3, 2018 Summary An information disclosure vulnerabilities exists in the way that the Color Management Module ICM32.dll handles objects in memory. This...
Description of the security update for the ATMFD.dll information disclosure vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the ATMFD.dll information disclosure vulnerability in Windows Server 2008: January 3, 2018 Summary An information disclosure vulnerability exists in Adobe Type Manager Font Driver ATMFD.dll when it fails to properly handle objects in memory. An attacker who...
Description of the security update for the elevation of privilege vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the elevation of privilege vulnerability in Windows Server 2008: January 3, 2018 Summary An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions. An attacker who successfully exploits the vulnerability could...
Description of the security update for SQL Server 2008 SP4 GDR: January 6, 2018
None None...
Description of the security update for SQL Server 2012 SP3 CU: January 16, 2018
None None...
Description of the security update for the SMB Server elevation of privilege vulnerability in Windows Server 2008: January 3, 2018
Description of the security update for the SMB Server elevation of privilege vulnerability in Windows Server 2008: January 3, 2018 Summary An elevation of privilege vulnerability exists in the Microsoft Server Message Block SMB server when an attacker who has valid credentials attempts to open a...