Microsoft Windows 10 1507

Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

Windows Media Remote Code Execution Vulnerability

Windows Telephony Server Remote Code Execution Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Miracast Wireless Display Remote Code Execution Vulnerability

Windows SmartScreen Security Feature Bypass Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Windows Speech Runtime Elevation of Privilege Vulnerability

Windows Speech Runtime Elevation of Privilege Vulnerability

Universal Print Management Service Elevation of Privilege Vulnerability

Windows Input Method Editor (IME) Elevation of Privilege Vulnerability

Windows Security Zone Mapping Security Feature Bypass Vulnerability

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8641.

Remote Desktop Client Remote Code Execution Vulnerability

Windows Cryptographic Services Remote Code Execution Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka "Win32k Memory Corruption Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518.

Windows MSHTML Platform Remote Code Execution Vulnerability

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.

Windows OLE Remote Code Execution Vulnerability

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.

Windows MSHTML Platform Spoofing Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Telephony Server Elevation of Privilege Vulnerability

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Windows LSA Spoofing Vulnerability

Windows Netlogon Elevation of Privilege Vulnerability