microsoft vulnerabilities and exploits

(subscribe to this query)

NA

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory by the Codecs Library. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute...

3 Articles available

NA

Microsoft Windows could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory by the Codecs Library. By persuading a victim to open a specially crafted image file, an attacker could exploit this vulnerability to execute...

3 Articles available

NA

Windows Spatial Data Service Elevation of Privilege Vulnerability. An elevation of privilege vulnerability exists when the Windows Spatial Data Service improperly handles objects in memory. An attacker could exploit the vulnerability to overwrite or modify a protected file...

1 Article available

6.9

CVSSv2

A time-of-check time-of-use vulnerability in PulseSecureService.exe in Pulse Secure Client versions prior to 9.1.6 down to 5.3 R70 for Windows (which runs as NT AUTHORITY/SYSTEM) allows unprivileged users to run a Microsoft Installer executable with elevated privileges....

Pulsesecure Pulse Secure Desktop Client Pulse Secure Installer Service

7.2

CVSSv2

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow local users to interact with the On-Access Scan Messages - Threat Alert Window with elevated privileges via running McAfee Tray with...

Mcafee Virusscan Enterprise

6.9

CVSSv2

Privilege Escalation vulnerability in Microsoft Windows client (McTray.exe) in McAfee VirusScan Enterprise (VSE) 8.8 prior to Patch 14 may allow unauthorized users to interact with the On-Access Scan Messages - Threat Alert Window when the Windows Login Screen is locked....

Mcafee Virusscan Enterprise

4.6

CVSSv2

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer...

Microsoft Windows 10 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows Server 2019

6.8

CVSSv2

An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'OLE Automation Elevation of Privilege Vulnerability'....

Microsoft Windows 10 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows Server 2019

7.2

CVSSv2

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'....

Microsoft Windows 10 Windows Server 2016 Windows Server 2019

7.2

CVSSv2

An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback Hub Elevation of Privilege Vulnerability'....

Microsoft Windows 10

1 2 3 4 5 6 NEXT »