Windows vulnerabilities

A privilege escalation vulnerability exists in Windows due to improper calculation of LDAP request buffer lengths. An attacker could exploit this vulnerability by sending malicious traffic to a Domain Controller using a specially crafted application.

The IsLocal function on Windows incorrectly detects reserved device names in some cases. Reserved names followed by spaces (e.g., "COM1 ") and names "COM" and "LPT" with superscript 1, 2, or 3 are incorrectly reported as local. The fix ensures IsLocal now correctly identifies these.

A remote code execution vulnerability in Windows due to improper handling of objects in memory. An attacker with a domain user account could exploit it by creating a specially crafted request. The update corrects how Windows handles objects in memory.

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, allowing remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.

Remote attackers can perform a denial of service on Windows machines using malicious ARP packets, causing a message box to display for each packet or filling up log files.

A missing authentication vulnerability in Windows allows a local privileged attacker to use WMI commands to arbitrarily trigger a System Management Interrupt handler. This could lead to privilege escalation or system instability.

A protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.

Microsoft confirmed a Windows vulnerability called 'YellowKey' that bypasses security features. Proof of concept has been published. Users with TPM+PIN are not affected. Microsoft provided temporary mitigations.

Security feature bypass vulnerability in Windows Mark of the Web. Could allow execution of dangerous files without warning.

CVE-2023-35330 is a vulnerability in Windows that allows for a Denial of Service (DoS) attack through the use of extended negotiation. An attacker can cause the system to stop responding to requests, leading to disruption of its operation.

A vulnerability in Windows allows for the disclosure of cryptographic information. This may lead to unauthorized access to sensitive data.

Windows Bind Filter Driver Elevation of Privilege Vulnerability.

Windows Overlay Filter Elevation of Privilege Vulnerability.

Windows Overlay Filter Elevation of Privilege Vulnerability.

Windows Digital Media Receiver Elevation of Privilege Vulnerability.

Windows Extensible File Allocation Table Elevation of Privilege Vulnerability.

Denial of service vulnerability in Windows. Allows an attacker to cause a system or service crash.

Windows Event Tracing Elevation of Privilege Vulnerability.

Certificate spoofing vulnerability in Windows. An attacker could spoof a certificate, which could lead to impersonation of trusted entities.

Windows Event Tracing Elevation of Privilege Vulnerability.

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability.

Remote code execution vulnerability in OpenType Font Parsing. Allows an attacker to execute arbitrary code on the victim's system.

Elevation of privilege vulnerability in Windows. An attacker who logs on can run a specially crafted application to execute arbitrary code, allowing installation of programs, data modification, or creation of accounts with full user rights.

Denial of service vulnerability in Windows due to improper handling of objects in memory.

Elevation of privilege vulnerability in Windows due to improper handling of errors tied to Remote Access Common Dialog.

The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker to recover it and use it to decrypt EFS data.

The unattended installation of Windows 2000 with the OEMPreinstall option sets insecure permissions for the All Users and Default Users directories.

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, allowing local users to gain privileges by decrypting the passwords.