Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1 vulnerabilities

The kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows Server 2012 mishandles registry objects in memory, allowing local users to gain privileges via a crafted application.

The kernel API in Microsoft Windows improperly enforces permissions, allowing local users to spoof processes, spoof inter-process communication, or cause a denial of service via a crafted application.

A vulnerability in Microsoft Windows related to improper caching for NTLM password-change requests. It allows local users to gain elevated privileges via a crafted application.

The Input Method Editor (IME) in Windows has a DLL loading mishandling issue, allowing local users to gain elevated privileges.

A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted image file. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Windows Server.

A vulnerability in Microsoft Windows allows remote authenticated users to execute arbitrary code by leveraging a domain account to make a crafted request.

A vulnerability in Microsoft Windows systems, including Windows Vista, Windows 7, Windows 8.1, and Windows 10, related to improper handling of LDAP authentication. This allows man-in-the-middle attackers to gain privileges by modifying group-policy update data within a domain-controller data stream.

The WPAD protocol implementation in Windows has an improper fallback mechanism, allowing remote attackers to gain privileges via NetBIOS name responses.

The OLE vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted file. This affects multiple versions of the operating system, including Windows Vista, Windows 7, and Windows 8.1.

The font library in Microsoft Windows and certain applications allows remote attackers to execute arbitrary code via a crafted embedded font, known as 'Graphics Memory Corruption Vulnerability'.

The OLE vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted file. This affects multiple versions of Windows, including Vista, 7, 8.1, 10, and Server 2008 and 2012.

The OLE vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted file. It affects multiple versions of Windows, including Vista, 7, 8.1, 10, and servers 2008 and 2012.

The vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 involves improper handle validation, allowing local users to gain elevated privileges via a crafted application.

A vulnerability in Microsoft Windows related to improper DLL loading, allowing local users to gain privileges via a crafted application.

A vulnerability in Microsoft Windows and Internet Explorer allows local users to gain elevated privileges through a crafted application due to improper DLL loading.

A vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 related to improper DLL loading, allowing local users to gain elevated privileges via a crafted application.

A vulnerability in Microsoft Windows related to improper DLL loading, allowing local users to gain elevated privileges via a crafted application.

A vulnerability in Microsoft Windows related to improper DLL loading, allowing local users to gain elevated privileges via a crafted application.

A vulnerability in Microsoft Windows related to improper library loading, allowing local users to gain privileges via a crafted application.

The vulnerability in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 involves improper library loading, allowing local users to gain privileges via a crafted application.

Buffer overflow in the Network Driver Interface Standard (NDIS) implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application.

A vulnerability in Microsoft Windows allows local users to gain elevated privileges via a crafted application that triggers a Winsock call referencing an invalid address.

A vulnerability in Microsoft Windows and applications related to TrueType font handling allows remote attackers to execute arbitrary code. This affects multiple versions of operating systems and components, including .NET Framework and Silverlight.

A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of operating systems and components, including .NET Framework and Silverlight.

A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of operating systems and components, including .NET Framework and Silverlight.

A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of Windows operating systems and components such as .NET Framework and Silverlight.

A vulnerability in Microsoft Windows and applications that allows remote attackers to execute arbitrary code via a crafted TrueType font. This affects multiple versions of operating systems and Microsoft applications.

A vulnerability in Microsoft Windows allows attackers to bypass an application sandbox protection mechanism and perform unspecified filesystem actions via a crafted application.

A vulnerability in Microsoft Windows allows attackers to bypass an application sandbox protection mechanism and perform unspecified registry actions via a crafted application.

A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted Journal file. This affects multiple versions of Windows, including Vista, 7, 8, 8.1, and servers 2008 and 2012.

A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted Journal file. This affects multiple versions of Windows, including Vista, 7, 8, 8.1, and servers 2008 and 2012.

A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted Journal file. This affects multiple versions of Windows, including Vista, 7, 8, 8.1, and servers 2008 and 2012.

A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted Journal file. This affects multiple versions of Windows, including Vista, 7, 8, and servers 2008 and 2012.

A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted Journal file. This affects multiple versions of Windows, including Vista, 7, 8, and servers 2008 and 2012.

A vulnerability in Microsoft Windows allows remote attackers to execute arbitrary code via a crafted Journal file. This affects multiple versions of Windows, including Vista, 7, 8, 8.1, and Server 2008 and 2012.

A vulnerability in Windows systems allows attackers to bypass access restrictions by leveraging low-integrity processes to launch the On-Screen Keyboard and upload a crafted application.

The WPAD protocol implementation in Windows has issues with proxy discovery, allowing remote attackers to redirect network traffic.