Non notée
CVE-2018-0886 The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7…
Description
The Credential Security Support Provider protocol (CredSSP) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709 Windows Server 2016 and Windows Server, version 1709 allows a remote code execution vulnerability due to how CredSSP validates request during the authentication process, aka "CredSSP Remote Code Execution Vulnerability".
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Windows | Versions non publiées |
Références
- 1040506 www.securitytracker.com
- 103265 www.securityfocus.com
- ics-cert.us-cert.gov ics-cert.us-cert.gov
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- blog.preempt.com blog.preempt.com
- 44453 www.exploit-db.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Windows
Les 33 CVE de Windows →
CVE-2018-1038
The Windows kernel in Windows 7 SP1 and Windows Server 2008 R2 SP1 allows an elevation of privilege vulnerability due to…
Non notée
CVE-2018-0817
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…
Non notée
CVE-2018-0816
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows…
Non notée
CVE-2018-0815
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows…
Non notée