Msrc Windows Server 2008 R2 vulnerabilities

CVE-2016-0197 [HIGH] Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system. An attacker

CVE-2016-0174 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnera

CVE-2016-0189 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren

CVE-2016-0128 [MEDIUM] Windows SAM and LSAD Downgrade Vulnerability Windows SAM and LSAD Downgrade Vulnerability Description: An elevation of privilege vulnerability exists in the Security Account Manager (SAM) and Local Security Authority (Domain Policy) (LSAD) remote protocols when they accept authentication levels that do not protect them adequately. The vulnerability is caused by the way the SAM and LSAD remote protocols establish the Remote Procedure Call (RPC) channel. An attacker who suc

CVE-2016-0143 [HIGH] Win32k Elevation of Privilege Vulnerability Win32k Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnera

CVE-2016-0167 [HIGH] Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted applicatio

CVE-2016-0165 [HIGH] Windows Graphics Component Elevation of Privilege Vulnerability Windows Graphics Component Elevation of Privilege Vulnerability Description: An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted applicatio

CVE-2016-0002 [HIGH] Scripting Engine Memory Corruption Vulnerability Scripting Engine Memory Corruption Vulnerability Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curren

CVE-2016-0016 [HIGH] CVE-2016-0016: Windows Library Loading: Windows Library Loading Exploit Status: Publicly Disclosed:No;Exploited:No Reference: https://catalog Windows Library Loading: Windows Library Loading Exploit Status: Publicly Disclosed:No;Exploited:No Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3110329

CVE-2016-0014 [HIGH] CVE-2016-0014: Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No Reference: https://catalog Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3121918

CVE-2016-0015 [HIGH] CVE-2016-0015: Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No Reference: https://catalog Impact: Remote Code Execution Exploit Status: Publicly Disclosed:No;Exploited:No Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3109560

CVE-2016-0007 [HIGH] CVE-2016-0007: Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Rel Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3121212

CVE-2016-0006 [HIGH] CVE-2016-0006: Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Rel Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;Older Software Release:Exploitation More Likely Reference: https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB3121212

CVE-2016-0018 [HIGH] CVE-2016-0018: Impact: Remote Code Execution Exploit Status: Publicly Disclosed:Yes;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation Mor Impact: Remote Code Execution Exploit Status: Publicly Disclosed:Yes;Exploited:No;Latest Software Release:N/A;Older Software Release:Exploitation More Likely