Microsoft Windows vulnerabilities

Security feature bypass vulnerability in Internet Shortcut Files. Allows an attacker to bypass system security features.

Windows Graphics Component Remote Code Execution Vulnerability. Details are not provided in the description, but it allows remote code execution.

Windows Installer Elevation of Privilege Vulnerability. Details are not provided in the description, but it allows privilege escalation.

Win32k Elevation of Privilege Vulnerability. Technical details are not provided in the description, but it is a vulnerability allowing privilege escalation.

Win32k Elevation of Privilege Vulnerability. Technical details are not provided in the description, but it is a vulnerability allowing privilege escalation.

Win32k Elevation of Privilege Vulnerability. Technical details are not provided in the description, but it is a vulnerability allowing privilege escalation.

An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An attacker who successfully exploited the vulnerability could run a specially crafted application on a device on the network. To exploit the vulnerability, an unauthenticated attacker would be required to use MS-NRPC to connect to a domain controller to obtain domain administrator access.

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode, install programs, view/change/delete data, or create new accounts with full user rights.

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. It could allow an attacker to gain higher privileges.

An elevation of privilege vulnerability exists when Windows improperly handles authentication requests. This affects multiple versions of Windows, including Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10, and Windows 10 Servers.

A vulnerability in Mount Manager in multiple versions of Microsoft Windows mishandles symlinks, allowing physically proximate attackers to execute arbitrary code by connecting a crafted USB device, known as "Mount Manager Elevation of Privilege Vulnerability".

The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.

A remote code execution vulnerability exists in the way the WinVerifyTrust function handles Windows Authenticode signature verification for portable executable (PE) files. An attacker could modify an existing signed executable to add malicious code without invalidating the signature. Microsoft does not plan to enforce stricter verification by default — it requires manually setting the EnableCertPaddingCheck registry key.