Page 33 of 167 results (0.009 seconds)

CVSS: 9.3EPSS: 12%CPEs: 16EXPL: 1

CVE-2018-8420 – Microsoft Windows VBScript Class_Terminate MSXML6 Use-After-Free Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2018-8420

A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, aka "MS XML Remote Code Execution Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Existe una vulnerabilidad de ejecución remota de código cuando el analizador Microsoft XML Core Services MSXML procesa las entradas de usuario. Esto también se conoce como "MS XML Remote Code Execution Vulnerability". Esto afecta a Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 y Windows 10 Servers. • https://github.com/idkwim/CVE-2018-8420 http://www.securityfocus.com/bid/105259 http://www.securitytracker.com/id/1041627 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8420 • CWE-611: Improper Restriction of XML External Entity Reference •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 2

CVE-2018-8410 – Microsoft Windows - Double Dereference in NtEnumerateKey Elevation of Privilege

https://notcve.org/view.php?id=CVE-2018-8410

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory, aka "Windows Registry Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. Existe una vulnerabilidad de elevación de privilegios cuando la API del kernel de Windows no gestiona adecuadamente los objetos en la memoria. Esto también se conoce como "Windows Registry Elevation of Privilege Vulnerability". Esto afecta a Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 y Windows 10 Servers. • https://www.exploit-db.com/exploits/45436 https://github.com/trapmine/CVE-2018-8410 http://www.securityfocus.com/bid/105256 http://www.securitytracker.com/id/1041635 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8410 • CWE-404: Improper Resource Shutdown or Release •

CVSS: 9.3EPSS: 19%CPEs: 18EXPL: 0

CVE-2018-8332

https://notcve.org/view.php?id=CVE-2018-8332

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. Existe una vulnerabilidad de ejecución remota de código cuando la biblioteca de fuentes de Windows gestiona fuentes embebidas especialmente manipuladas. Esto también se conoce como "Win32k Graphics Remote Code Execution Vulnerability". Esto afecta a Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10 y Windows 10 Servers. • http://www.securityfocus.com/bid/105248 http://www.securitytracker.com/id/1041628 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8332 •

CVSS: 7.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2018-8335

https://notcve.org/view.php?id=CVE-2018-8335

A denial of service vulnerability exists in the Microsoft Server Block Message (SMB) when an attacker sends specially crafted requests to the server, aka "Windows SMB Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. Existe una vulnerabilidad de denegación de servicio (DoS) en Microsoft Server Block Message (SBM) cuando un atacante envía peticiones especialmente manipuladas al servidor. Esto también se conoce como "Windows SMB Denial of Service Vulnerability". Esto afecta a Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10 y Windows 10 Servers. • http://www.securityfocus.com/bid/105224 http://www.securitytracker.com/id/1041634 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8335 •

CVSS: 6.8EPSS: 0%CPEs: 10EXPL: 0

CVE-2018-8438

https://notcve.org/view.php?id=CVE-2018-8438

A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privileged user on a guest operating system, aka "Windows Hyper-V Denial of Service Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8436, CVE-2018-8437. Existe una vulnerabilidad de denegación de servicio cuando Microsoft Hyper-V Network Switch, en un servidor host valida incorrectamente entradas de un usuario privilegiado en un sistema operativo invitado. Esto también se conoce como "Windows Hyper-V Denial of Service Vulnerability". • http://www.securityfocus.com/bid/105249 http://www.securitytracker.com/id/1041624 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8438 • CWE-20: Improper Input Validation •