Priority MEDIUM 48
The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Neighbor Solicitation messages, a different vulnerability than CVE-2010-4669.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.14534 · Published 2020-02-20 · No fix listed CWE-400
Priority MEDIUM 48
The IPv6 implementation in Microsoft Windows 7 and earlier allows remote attackers to cause a denial of service via a flood of ICMPv6 Router Advertisement packets containing multiple Routing entries.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.14534 · Published 2020-02-20 · No fix listed CWE-400
Priority LOW 30
An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc.
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.02924 · Published 2018-02-26 · No fix listed CWE-200
Priority LOW 34
An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 before KB3086255, and as shipped in Macrovision SafeDisc.
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.01468 · Published 2018-02-26 · No fix listed CWE-362
Priority CRITICAL 93KEV
Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute a…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.99497 · Published 2017-04-12 · No fix listed
Priority LOW 29
The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold , 1511,…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.06034 · Published 2017-04-12 · No fix listed CWE-200
Priority MEDIUM 45
An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated.
CVSS 3.0HIGH 8.1· Network · No auth · No interaction · EPSS 0.06415 · Published 2017-04-12 · No fix listed CWE-131
Priority MEDIUM 47
An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Scri…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.12793 · Published 2017-04-12 · No fix listed
Priority LOW 35
The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Windows Graphics Elevation…
CVSS 3.0HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.02106 · Published 2017-04-12 · No fix listed
Priority LOW 28
A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information.
CVSS 3.0MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.03655 · Published 2017-04-12 · No fix listed CWE-200
Priority CRITICAL 90KEV
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 20…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.99693 · Published 2017-03-17 · No fix listed
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 49
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows r…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.43581 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows Uniscribe I…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.22811 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows Server 2016 allows r…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.22951 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Priority MEDIUM 40
Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Uniscribe Informati…
CVSS 3.0MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.23249 · Published 2017-03-17 · No fix listed CWE-200
Load more