CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2018-8995
https://notcve.org/view.php?id=CVE-2018-8995
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002002. En Windows Master (también conocido como Windows Optimization Master) 7.99.13.604, el archivo del controlador (WoptiHWDetect.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o que, posiblemente, causen otro impacto sin especificar debido a que no se validan los valores de entrada desde IOCtl 0xf1002002. • https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002002 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2018-8904
https://notcve.org/view.php?id=CVE-2018-8904
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0xf1002000. En Windows Master (también conocido como Windows Optimization Master) 7.99.13.604, el archivo del controlador (WoptiHWDetect.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o que, posiblemente, tengan otro impacto sin especificar debido a que no valida los valores de entrada desde IOCtl 0xf1002000. • https://github.com/D0neMkj/POC_BSOD/tree/master/Windows%20Optimization%20master/0xf1002000 • CWE-20: Improper Input Validation •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1CVE-2018-7289 – Armadito Antivirus 0.12.7.2 - Detection Bypass
https://notcve.org/view.php?id=CVE-2018-7289
An issue was discovered in armadito-windows-driver/src/communication.c in Armadito 0.12.7.2. ... Se ha descubierto un problema en armadito-windows-driver/src/communication.c en Armadito 0.12.7.2. • https://www.exploit-db.com/exploits/44169 https://github.com/armadito/armadito-windows-driver/issues/5 • CWE-172: Encoding Error •
CVSS: 7.8EPSS: 3%CPEs: 3EXPL: 2CVE-2018-0833 – Microsoft Windows SMB Client Improper Initialization Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2018-0833
The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specially crafted requests are handled, aka "SMBv2/SMBv3 Null Dereference Denial of Service Vulnerability". El cliente Microsoft Server Message Block 2.0 y 3.0 (SMBv2/SMBv3) en Windows 8.1 y RT 8.1 y Windows Server 2012 R2 permite una vulnerabilidad de denegación de servicio (DoS) debido a la forma en la que se gestionan las peticiones especialmente manipuladas. ... This vulnerability allows remote attackers to deny service to vulnerable installations of Microsoft Windows. In some cases, user interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file, but attack vectors may vary depending on the implementation. The specific flaw exists within the mrxsmb.sys driver. • https://www.exploit-db.com/exploits/44189 http://www.securityfocus.com/bid/102924 http://www.securitytracker.com/id/1040375 https://github.com/KINGSABRI/CVE-in-Ruby/tree/master/CVE-2018-0833 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0833 • CWE-476: NULL Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2018-5270
https://notcve.org/view.php?id=CVE-2018-5270
In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x9c40e010. NOTE: the vendor reported that they "have not been able to reproduce the issue on any Windows operating system version (32-bit or 64-bit). ** EN DISPUTA ** En Malwarebytes Premium 3.3.1.2183, el archivo del controlador (FARFLT.SYS) permite que usuarios locales provoquen una denegación de servicio (BSOD) o que, posiblemente, tengan otro impacto sin especificar debido a que no valida los valores de entrada desde IOCtl 0x9c40e010. NOTA: El fabricante ha indicado que "no han sido capaces de reproducir el problema en ninguna versión del sistema operativo de Windows (32 o 64 bits)". • https://github.com/ZhiyuanWang-Chengdu-Qihoo360/Malwarebytes_POC/tree/master/0x9c40e010 • CWE-20: Improper Input Validation •