Microsoft Windows 8.1

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and CVE-2016-4278.

Adobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related to the Flash API used by Internet Explorer. Successful exploitation could lead to information disclosure.

Adobe Flash Player versions 29.0.0.113 and earlier have an exploitable out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

Adobe Flash Player before 18.0.0.375 and 19.x through 23.x before 23.0.0.162 on Windows and OS X and before 11.2.202.635 on Linux allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-4271 and CVE-2016-4277.

A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs, aka 'Internet Explorer Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0768.

Adobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption vulnerability in the Action Script 2 BitmapData class. Successful exploitation could lead to memory address disclosure.

A regression affecting Adobe Flash Player version 27.0.0.187 (and earlier versions) causes the unintended reset of the global settings preference file when a user clears browser data.

A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'.

Windows CryptoAPI Denial of Service Vulnerability

An spoofing vulnerability exists when Internet Explorer improperly handles URLs, aka 'Internet Explorer Spoofing Vulnerability'.

Windows Remote Assistance Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Windows Server Service Information Disclosure Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows GDI+ Information Disclosure Vulnerability

Windows Print Spooler Information Disclosure Vulnerability

Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Windows Kernel Denial of Service Vulnerability

Windows NetBIOS in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a denial of service vulnerability when it improperly handles NetBIOS packets, aka "Windows NetBIOS Denial of Service Vulnerability".

Windows iSCSI Target Service Information Disclosure Vulnerability

Windows Security Account Manager (SAM) Denial of Service Vulnerability

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

Windows DNS Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Microsoft Browser Information Disclosure Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Windows Hyper-V Security Feature Bypass Vulnerability

Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

Windows Local Security Authority (LSA) Denial of Service Vulnerability

Windows NTLM Spoofing Vulnerability

Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability

Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Information Disclosure Vulnerability

Windows WLAN AutoConfig Service Denial of Service Vulnerability

Windows Graphics Component Information Disclosure Vulnerability

GRUB2 contained integer overflows when handling the initrd command, leading to a heap-based buffer overflow.

GRUB2: avoid loading unsigned kernels when GRUB is booted directly under secureboot without shim