Peter Hlavaty

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** The issue is caused by synchronization errors when using a shared resource in the Windows Hyper-V hardware virtualization system. It may allow an attacker to execute arbitrary code or gain unauthorized access to the device. The vulnerability can be exploited by remote attackers to execute arbitrary code and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Hyper-V (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows Hyper-V hardware virtualization system, which can be exploited by an attacker to cause a denial of service using specially crafted data. This can affect the system, allowing attackers to disrupt service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined. **Description** An elevation-of-privilege issue allows attackers to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows versions prior to the fixed version dxgkrnl.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 **Description** The issue is related to insufficient access restrictions in the dxgkrnl.sys file, a component of the DirectX Graphics kernel subsystem in the Windows operating system. Exploitation of this issue can allow a local attacker to elevate their privileges using a specially crafted application. This can affect the system, allowing attackers to gain privileges. **Recommendations** For Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511, update to a version that includes the fix for the DirectX Graphics Kernel Subsystem Elevation of Privilege issue. As a temporary workaround, consider restricting access to the dxgkrnl.sys kernel driver to minimize the risk of exploitation. Avoid using the vulnerable dxgkrnl.sys component in the DirectX Graphics kernel subsystem until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1 Microsoft Windows 10 Microsoft Office 2007 SP3 and 2010 SP2 Microsoft Live Meeting 2007 Console Microsoft Lync 2010 Microsoft Lync 2010 Attendee Microsoft Lync 2013 SP1 Microsoft Lync Basic 2013 SP1 Microsoft Silverlight before 5.1.40728 **Description** A remote code execution issue exists when components of Windows, .NET Framework, Office, Lync, and Silverlight fail to properly handle TrueType fonts. An attacker who successfully exploited this issue could take complete control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** For Microsoft Windows Vista SP2, update to a newer version to mitigate the risk. For Microsoft Windows Server 2008 SP2 and R2 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 7 SP1, update to a newer version to mitigate the risk. For Microsoft Windows 8, update to a newer version to mitigate the risk. For Microsoft Windows 8.1, update to a newer version to mitigate the risk. For Microsoft Windows Server 2012 Gold and R2, update to a newer version to mitigate the risk. For Microsoft Windows RT Gold and 8.1, update to a newer version to mitigate the risk. For Microsoft Windows 10, update to a newer version to mitigate the risk. For Microsoft Office 2007 SP3 and 2010 SP2, update to a newer version to mitigate the risk. For Microsoft Live Meeting 2007 Console, update to a newer version to mitigate the risk. For Microsoft Lync 2010, update to a newer version to mitigate the risk. For Microsoft Lync 2010 Attendee, update to a newer version to mitigate the risk. For Microsoft Lync 2013 SP1, update to a newer version to mitigate the risk. For Microsoft Lync Basic 2013 SP1, update to a newer version to mitigate the risk. For Microsoft Silverlight before 5.1.40728, update to version 5.1.40728 or later to mitigate the risk.