Microsoft Windows Server

Windows Hyper-V Remote Code Execution Vulnerability

Windows Cryptographic Services Remote Code Execution Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Shell Remote Code Execution Vulnerability

Windows Virtual Registry Provider Elevation of Privilege Vulnerability

Windows Task Scheduler Elevation of Privilege Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows DHCP Client Remote Code Execution Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability

Windows NTFS Remote Code Execution Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet Explorer 11, Microsoft Edge.

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Windows Hyper-V Remote Code Execution Vulnerability'.

Windows Kernel Information Disclosure Vulnerability

Storage Spaces Direct Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted, legitimate source, aka 'Windows CryptoAPI Spoofing Vulnerability'.

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement function in mshtml.dll, which allows remote attackers to execute arbitrary code via vectors involving a crafted Cascading Style Sheets (CSS) token sequence and crafted JavaScript code that operates on a TH element.

Windows MSHTML Platform Spoofing Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Windows Telephony Server Elevation of Privilege Vulnerability

Windows KDC Proxy Service (KPSSVC) Remote Code Execution Vulnerability

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows SMB Information Disclosure Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

The Windows NetBT Session Services component on Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability when it fails to maintain certain sequencing requirements, aka "NetBIOS Remote Code Execution Vulnerability".