CVE Vulnerability Advisory Database

[Affected Scope] Broad range of Microsoft Windows operating systems including Windows XP, Vista, 7, 8, 8.1, 10, and Windows Server 2003, 2008, 2012, 2016.

[Impact] An unauthenticated remote attacker can exploit this vulnerability via SMB to execute arbitrary code with SYSTEM privileges, leading to full system compromise.

[Mitigation] Immediately apply the official Microsoft security patches, or disable the Windows Search service and block SMB port (TCP 445) as a temporary workaround.

[Affected Scope] All end-of-life and legacy operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016

[Impact] Attackers can execute arbitrary code with the privileges of the local user simply by having the user open a folder containing a crafted .LNK file, without requiring any execution or double-click

[Mitigation] Apply official Microsoft security patches immediately, disable Autorun features, and restrict access to untrusted removable media and network shares

[Affected Scope] Windows Client/Server and Exchange Server environments running Windows Defender or Forefront with active scanning

[Impact] Memory corruption leading to arbitrary code execution under Local System privileges when scanning a specially crafted file

[Mitigation] Immediately update the Microsoft Malware Protection Engine to version 1.1.13804.0 or higher

[Affected Scope] Legacy and modern Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016 utilizing the win32k.sys driver.

[Impact] A local attacker can execute a specially crafted application to gain elevated SYSTEM privileges, completely bypassing OS security boundaries.

[Mitigation] Apply the official Microsoft security patches immediately and restrict execution privileges for untrusted local users.

[Affected Scope] Multiple legacy Windows operating systems including Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016

[Impact] A local attacker can execute a specially crafted application to elevate privileges to SYSTEM and gain full control of the target system

[Mitigation] Apply the official Microsoft security patches immediately and restrict unnecessary DCOM/COM configurations

[Affected Scope] Microsoft Office 2007/2010/2013/2016, Windows Vista/7/8.1, and Windows Server 2008

[Impact] Remote attackers can execute arbitrary code with the logged-in user's privileges by enticing a user to open a specially crafted document

[Mitigation] Apply official Microsoft security patches immediately, restrict opening untrusted documents, and disable automatic OLE link updates via registry hardening

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending crafted packets, leading to complete system compromise

[Mitigation] Apply the MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can extract sensitive information from kernel process memory via crafted SMBv1 packets, which can be chained with tools like DOUBLEPULSAR for further compromise

[Mitigation] Apply the MS17-010 security update immediately and completely disable the legacy SMBv1 protocol across the enterprise

[Affected Scope] Legacy Microsoft Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled.

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted SMBv1 packets, leading to complete system compromise.

[Mitigation] Immediately apply the official Microsoft security update (MS17-010) and completely disable the legacy SMBv1 protocol across the enterprise network.

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM/kernel privileges by sending specially crafted SMBv1 packets, leading to complete system compromise

[Mitigation] Immediately apply the Microsoft MS17-010 security patch and completely disable the legacy SMBv1 protocol across the enterprise network

[Affected Scope] Legacy and modern Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled.

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges by sending specially crafted SMBv1 packets, leading to complete system compromise.

[Mitigation] Immediately apply the Microsoft MS17-010 security patch and completely disable the legacy SMBv1 protocol across the enterprise network.

[Affected Scope] Legacy Windows operating systems including Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016 with SMBv1 enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system by sending crafted SMBv1 packets

[Mitigation] Apply the Microsoft MS17-010 security patch immediately and completely disable the legacy SMBv1 protocol across the enterprise network

[Affected Scope] Legacy and active Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016 utilizing the Kernel Transaction Manager (KTM)

[Impact] A local attacker can execute a specially crafted application to trigger kernel memory corruption (CWE-119), leading to complete system takeover with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft security patches (such as MS17-013) and restrict execution privileges for non-administrative local accounts

[Affected Scope] Microsoft XML Core Services (MSXML) running on Windows Vista, 7, 8.1, 10, and Windows Server 2008, 2012, 2016

[Impact] Attackers can determine the existence of specific files on the local disk and gather system intelligence via crafted malicious websites

[Mitigation] Apply the official Microsoft cumulative security updates and restrict MSXML ActiveX control execution via registry hardening

[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, RT 8.1, 10 (Gold, 1511, 1607), and Windows Server 2008, 2012 families.

[Impact] Local attackers can execute arbitrary code in kernel mode and elevate privileges to SYSTEM via a crafted application.

[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict local execution privileges on unpatched systems.

[Affected Scope] Windows Vista SP2, 7 SP1, 8.1, RT 8.1, 10 (Gold, 1511, 1607) and Windows Server 2008 SP2/R2 SP1, 2012 Gold/R2.

[Impact] Local attackers can execute arbitrary code in kernel mode and gain SYSTEM privileges via a crafted application.

[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict local execution privileges on unpatched systems.

[Affected Scope] Microsoft Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10 (Gold/1511/1607), and Windows Server 2008, 2012, 2016

[Impact] Remote attackers can execute arbitrary code with kernel privileges by enticing users to visit a malicious website or open a crafted document containing malicious OpenType fonts

[Mitigation] Immediately apply the official Microsoft security patch (MS16-132) or implement the registry workaround to disable the ATMFD.dll driver

[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016

[Impact] A local attacker can execute arbitrary code in kernel mode and elevate privileges to SYSTEM via a specially crafted application

[Mitigation] Apply the official Microsoft security patch (MS16-135) immediately and restrict local execution privileges on unpatched systems

[Affected Scope] Legacy Windows operating systems including Windows Vista SP2, 7 SP1, 8.1, 10, and Windows Server 2008, 2012, 2016

[Impact] Remote attackers can execute arbitrary code with the privileges of the current user and compromise the system via crafted websites or documents

[Mitigation] Apply the official Microsoft security updates (MS16-120) immediately and restrict access to untrusted websites on unpatched systems

[Affected Scope] Internet Explorer 9 through 11 and Internet Messaging API on Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1.

[Impact] Remote attackers can determine the existence of arbitrary local files via a crafted website, facilitating targeted secondary attacks.

[Mitigation] Apply official Microsoft security updates (MS16-118, MS16-126) and disable legacy Internet Explorer components.