Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-3225 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:58.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB server component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an authentication request to an unintended service, aka "Windows SMB Server Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms
otes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-075 - http://www.securitytracker.com/id/1036110 - https://www.exploit-db.com/exploits/45562/
CVE ID: CVE-2016-3226 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:58.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (service hang) by creating many machine accounts, aka "Active Directory Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036108 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-081
CVE ID: CVE-2016-3227 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:58.422Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in the DNS Server component in Microsoft Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted requests, aka "Windows DNS Server Use After Free Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036095 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-071
CVE ID: CVE-2016-3228 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:58.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 allow remote authenticated users to execute arbitrary code via a crafted NetLogon request, aka "Windows Netlogon Memory Corruption Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036103 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-076
CVE ID: CVE-2016-3229 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3230 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:59.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Search component in Microsoft Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to cause a denial of service (performance degradation) via a crafted application, aka "Windows Search Component Denial of Service Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-082 - http://www.securitytracker.com/id/1036102
CVE ID: CVE-2016-3231 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:58.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-078 - http://www.securitytracker.com/id/1036105 - http://www.zerodayinitiative.com/advisories/ZDI-16-372 - http://www.securityfocus.com/bid/91116
CVE ID: CVE-2016-3232 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:59.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Virtual PCI (VPCI) virtual service provider in Microsoft Windows Server 2012 Gold and R2 allows local users to obtain sensitive information from uninitialized memory locations via a crafted application, aka "Windows Virtual PCI Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036109 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-073
CVE ID: CVE-2016-3233 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:58.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 - http://www.securitytracker.com/id/1036093
CVE ID: CVE-2016-3234 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:59.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word Automation Services on SharePoint Server 2010 SP2, Word Automation Services on SharePoint Server 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote attackers to obtain sensitive information from process memory via a crafted Office document, aka "Microsoft Office Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.co
on Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 - http://www.securitytracker.com/id/1036093
CVE ID: CVE-2016-3235 State: PUBLISHED Published: 2016-06-16T01:00:00.000Z Last Updated: 2025-10-21T23:55:51.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loading Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.securify.nl/advisory/SFY20150804/microsoft_visio_multiple_dll_side_loading_vulnerabilities.html - https://docs.microsoft.com/en-us/security-updates/secur
microsoft_visio_multiple_dll_side_loading_vulnerabilities.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-070 - http://www.securityfocus.com/archive/1/538685/100/0/threaded - http://www.securitytracker.com/id/1036093 - http://packetstormsecurity.com/files/137490/Microsoft-Visio-DLL-Hijacking.html - http://seclists.org/fulldisclosure/2016/Jun/32
CVE ID: CVE-2016-3236 State: PUBLISHED Published: 2016-06-16T01:00:00 Last Updated: 2024-08-05T23:47:58.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles proxy discovery, which allows remote attackers to redirect network traffic via unspecified vectors, aka "Windows WPAD Proxy Discovery Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates
ity." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-077 - http://www.securitytracker.com/id/1036104
CVE ID: CVE-2016-3237 State: PUBLISHED Published: 2016-08-09T21:00:00 Last Updated: 2024-08-05T23:47:58.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows man-in-the-middle attackers to bypass authentication via vectors related to a fallback to NTLM authentication during a domain account password change, aka "Kerberos Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92290 - https://docs.microsoft.c
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/92290 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-101 - http://www.securitytracker.com/id/1036576 - https://www.exploit-db.com/exploits/40409/
CVE ID: CVE-2016-3238 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows man-in-the-middle attackers to execute arbitrary code by providing a crafted print driver during printer installation, aka "Windows Print Spooler Remote Code Execution Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms1
tes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-087 - http://www.securityfocus.com/bid/91609 - http://www.securitytracker.com/id/1036277
CVE ID: CVE-2016-3239 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations, aka "Windows Print Spooler Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-087 - http://www.securitytracker.c
nces: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-087 - http://www.securitytracker.com/id/1036277 - http://www.securityfocus.com/bid/91612
CVE ID: CVE-2016-3240 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3241 and CVE-2016-3242. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036283 - http://www.securityfocus.com/bid/91568 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084
CVE ID: CVE-2016-3241 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.062Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3240 and CVE-2016-3242. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036283 - http://www.securityfocus.com/bid/91569 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084
CVE ID: CVE-2016-3242 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3240 and CVE-2016-3241. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036283 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084 - http://www.securityfocus.com/bid/91570
CVE ID: CVE-2016-3243 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91571 - http://www.securitytracker.com/id/1036283 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084
CVE ID: CVE-2016-3244 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature Bypass." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036286 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085 - http://www.securityfocus.com/bid/91599
CVE ID: CVE-2016-3245 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to trick users into making TCP connections to a restricted port via a crafted web site, aka "Internet Explorer Security Feature Bypass Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91585 - http://www.securitytracker.com/id/1036283 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084
CVE ID: CVE-2016-3246 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036286 - http://www.securityfocus.com/bid/91602 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085
CVE ID: CVE-2016-3247 State: PUBLISHED Published: 2016-09-14T10:00:00 Last Updated: 2024-08-05T23:47:59.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036789 - http://www.securityfocus.com/bid/92828 - http://seclists.org/fulldisclosure/2016/Nov/111 - http://www.securityfocus.com/archive/1/539779/100/0/threaded - http://blog.skylined.nl/20161118002.html
e/2016/Nov/111 - http://www.securityfocus.com/archive/1/539779/100/0/threaded - http://blog.skylined.nl/20161118002.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-104 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-105 - http://www.securitytracker.com/id/1036788 - https://www.exploit-db.com/exploits/40797/
CVE ID: CVE-2016-3248 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3259. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036283 - http://www.securityfocus.com/bid
tes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036283 - http://www.securityfocus.com/bid/91578 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-084 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-085
CVE ID: CVE-2016-3249 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3252, CVE-2016-3254, and CVE-2016-3286. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/m
Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-090 - http://www.securityfocus.com/bid/91597 - http://www.securitytracker.com/id/1036288
CVE ID: CVE-2016-3250 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91613 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-090 - http://www.securitytracker.com/id/1036288
CVE ID: CVE-2016-3251 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafted application, aka "Win32k Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-090 - http://www.securityt
: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-090 - http://www.securitytracker.com/id/1036288
CVE ID: CVE-2016-3252 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3249, CVE-2016-3254, and CVE-2016-3286. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91614 - https://docs.microsoft.com/en-us/
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91614 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-090 - http://www.securitytracker.com/id/1036288
CVE ID: CVE-2016-3253 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3254 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:59.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3249, CVE-2016-3252, and CVE-2016-3286. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91615 - https://docs.microsoft.com/en-us/
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91615 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-090 - http://www.securitytracker.com/id/1036288
CVE ID: CVE-2016-3255 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows remote attackers to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka ".NET Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1036291 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-091 - http://www.securityfocus.com/bi
91 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-091 - http://www.securityfocus.com/bid/91601
CVE ID: CVE-2016-3256 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows 10 Gold and 1511 allows local users to bypass the Secure Kernel Mode protection mechanism and obtain sensitive information via a crafted application, aka "Windows Secure Kernel Mode Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-089 - http://www.securityfocus.com/bid/91590 - http://www.securitytracker.com/id/1036287
CVE ID: CVE-2016-3257 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-3258 State: PUBLISHED Published: 2016-07-13T01:00:00 Last Updated: 2024-08-05T23:47:58.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the kernel in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to bypass the Low Integrity protection mechanism and write to files by leveraging unspecified object-manager features, aka "Windows File System Security Feature Bypass." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/91606 - http://www.securitytracker.com/id/1036289 - https://docs.microsoft.com/en-us/security-updates/securitybu
com/bid/91606 - http://www.securitytracker.com/id/1036289 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-092