Microsoft Windows 10

Windows Denial of Service Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Microsoft Outlook Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass

Adobe Flash Player version 32.0.0.192 and earlier versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Windows TCP/IP Driver Denial of Service Vulnerability

Windows Secure Channel Denial of Service Vulnerability

Network Policy Server (NPS) RADIUS Protocol Denial of Service Vulnerability

Windows Network Address Translation (NAT) Denial of Service Vulnerability

Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Windows Kerberos Denial of Service Vulnerability

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Win32 Stream Enumeration Remote Code Execution Vulnerability

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

Microsoft Windows Elevation of Privilege Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Web Account Manager Information Disclosure Vulnerability

Win32 Stream Enumeration Remote Code Execution Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

In the Windows 10 April 2018 Update, Windows Defender SmartScreen honors the "SEE_MASK_FLAG_NO_UI" flag associated with downloaded files and will not show any UI. Files that are unknown and potentially dangerous will be allowed to run because SmartScreen will not prompt the user for a decision, and if the user is offline all files will be allowed to be opened because Windows won't prompt the user to ask what to do. Firefox incorrectly sets this flag when downloading files, leading to less secure behavior from SmartScreen. Note: this issue only affects Windows 10 users running the April 2018 update or later. It does not affect other Windows users or other operating systems. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.

Windows Active Directory Domain Services API Denial of Service Vulnerability

Windows Cryptographic Services Information Disclosure Vulnerability

Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability

Win32 File Enumeration Remote Code Execution Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability