Page 370 of 2398 results (0.010 seconds)

CVSS: 7.0EPSS: 0%CPEs: 9EXPL: 0

CVE-2017-8562

https://notcve.org/view.php?id=CVE-2017-8562

Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows improperly handling calls to Advanced Local Procedure Call (ALPC), aka "Windows ALPC Elevation of Privilege Vulnerability". Microsoft Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permiten una vulnerabilidad de escalada de privilegios debido a que Windows maneja inapropiadamente las llamadas a Advanced Local Procedure Call (ALPC), también se conoce como "Windows ALPC Elevation of Privilege Vulnerability". • http://www.securityfocus.com/bid/99397 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8562 • CWE-281: Improper Preservation of Permissions •

CVSS: 9.3EPSS: 24%CPEs: 12EXPL: 0

CVE-2017-8463

https://notcve.org/view.php?id=CVE-2017-8463

Windows Shell in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it improperly handles executable files and shares during rename operations, aka "Windows Explorer Remote Code Execution Vulnerability". Windows Shell en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permite una vulnerabilidad de ejecución de código remota debido a la manera en que se manejan inapropiadamente los archivos ejecutables y los recursos compartidos durante las operaciones de cambio de nombre, también se conoce como "Windows Explorer Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/99389 http://www.securitytracker.com/id/1038850 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8463 •

CVSS: 7.0EPSS: 0%CPEs: 12EXPL: 0

CVE-2017-8573

https://notcve.org/view.php?id=CVE-2017-8573

Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory, aka "Microsoft Graphics Component Elevation of Privilege Vulnerability". This CVE ID is unique from CVE-2017-8574 and CVE-2017-8556. Graphics en Microsoft Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 versión Gold y R2, Windows RT versión 8.1, Windows 10 versiones Gold, 1511, 1607 y 1703, y Windows Server 2016, permite una vulnerabilidad de elevación de privilegios cuando no se manejan apropiadamente los objetos en la memoria, también se conoce como "Microsoft Graphics Component Elevation of Privilege Vulnerability". Este CVE es diferente de los CVE-2017-8574 y CVE-2017-8556. • http://www.securityfocus.com/bid/99431 http://www.securitytracker.com/id/1038856 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8573 • CWE-281: Improper Preservation of Permissions •

CVSS: 8.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2017-8590 – Microsoft Windows CLFS Driver Uninitialized Memory Privilege Escalation Vulnerability

https://notcve.org/view.php?id=CVE-2017-8590

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver handles objects in memory, aka "Windows CLFS Elevation of Privilege Vulnerability". Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 Gold, 1511, 1607, 1703 y Windows Server 2016 permiten una vulnerabilidad de elevación de privilegios debido a la forma en la que el controlador Common Log File System (CLFS) de Windows gestiona los objetos en la memoria. Esto también se conoce como "Windows CLFS Elevation of Privilege Vulnerability". This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Common Log File System (CLFS) driver. • http://www.securityfocus.com/bid/99427 http://www.securitytracker.com/id/1038853 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8590 • CWE-281: Improper Preservation of Permissions •

CVSS: 7.2EPSS: 0%CPEs: 12EXPL: 0

CVE-2017-8467 – Microsoft Windows fnHKINLPRECT Untrusted Pointer Dereference Privilege Escalation Vulnerability

https://notcve.org/view.php?id=CVE-2017-8467

Graphics in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory, aka "Win32k Elevation of Privilege Vulnerability". Graphics en Microsoft Windows 7 SP1, Windows Server 2008 SP2 y R2 SP1, Windows 8.1 y Windows RT 8.1, Windows Server 2012 y R2, Windows 10 versiones Gold, 1511, 1607, 1703 y Windows Server 2016, permite una vulnerabilidad de escalada de privilegios debido a la manera en que se manejan los objetos en la memoria, también se conoce como "Win32k Elevation of Privilege Vulnerability". This vulnerability allows local attackers to escalate privileges on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull.sys driver. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. • http://www.securityfocus.com/bid/99409 http://www.securitytracker.com/id/1038853 https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8467 • CWE-281: Improper Preservation of Permissions •