Microsoft Windows Server

Windows Kerberos Elevation of Privilege Vulnerability

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

Windows LSA Spoofing Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Netlogon Elevation of Privilege Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol, aka "Windows Elevation of Privilege Vulnerability".

Windows Scripting Engine Memory Corruption Vulnerability

Windows Network File System Remote Code Execution Vulnerability

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

A security feature bypass vulnerability exists when Windows Netlogon improperly handles a secure communications channel, aka 'NetLogon Security Feature Bypass Vulnerability'.

Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Scripting Engine Memory Corruption Vulnerability

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Windows Certificate Spoofing Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Azure AD Security Feature Bypass Vulnerability

Windows AD FS Security Feature Bypass Vulnerability

Netlogon RPC Elevation of Privilege Vulnerability

Windows Kerberos Remote Code Execution Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to attempt to exploit the vulnerability, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

Windows HTML Platforms Security Feature Bypass Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Group Policy Elevation of Privilege Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Windows Remote Desktop Services Remote Code Execution Vulnerability

Chakra Scripting Engine Memory Corruption Vulnerability

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

Windows Distributed Transaction Coordinator Remote Code Execution Vulnerability