https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:50:23.324396+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2015-avi-061 certfr-2015-avi-061 — De multiples vulnérabilités ont été corrigées dans le pilote en mode noyau de <span class="textit">Microsoft Windows</s… 2026-10-09T01:50:23.331644+00:00 certfr-2015-avi-061 https://cve.radiocsirt.org/vuln/cnvd-2015-01099 cnvd-2015-01099 2026-10-09T01:50:23.331706+00:00 cnvd-2015-01099 https://cve.radiocsirt.org/vuln/euvd-2026-89013 EUVD-2026-89013 2026-10-09T01:50:23.331729+00:00 EUVD-2026-89013 https://cve.radiocsirt.org/vuln/fkie_cve-2015-0010 fkie_cve-2015-0010 2026-10-09T01:50:23.331746+00:00

The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token's level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka "CNG Security Feature Bypass Vulnerability" or MSRC ID 20707.

 https://cve.radiocsirt.org/vuln/ghsa-m8v6-5m42-3wc3 GHSA-m8v6-5m42-3wc3 2026-10-09T01:50:23.331795+00:00

The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1, when the CRYPTPROTECTMEMORY_SAME_LOGON option is used, does not check an impersonation token's level, which allows local users to bypass intended decryption restrictions by leveraging a service that (1) has a named-pipe planting vulnerability or (2) uses world-readable shared memory for encrypted data, aka "CNG Security Feature Bypass Vulnerability" or MSRC ID 20707.

 https://cve.radiocsirt.org/vuln/gsd-2015-0010 gsd-2015-0010 2026-10-09T01:50:23.331826+00:00 gsd-2015-0010