Top Windows 10 OS Vulnerabilities \u2013 Latest Listing 2019<\/h2>\n\n<\/p>\n\n<\/p>\n\n- (CVE-2015-0057) Win32k Elevation of Privilege Vulnerability<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- Windows 10 WiFi Sense Contact Sharing<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- (MS15-078) Microsoft Font Driver Vulnerability<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- (MS15-092) .NET Framework Escalation of Privilege Vulnerability<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- (CVE-2015-5143) Redirect to SMB Vulnerability<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- (MS15-098) Microsoft Windows Journal Vulnerability<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- (MS15-079) Internet Explorer Vulnerabilities<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- (MS15-080) Microsoft Graphics Component Vulnerabilities<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- (MS15-091) Microsoft Edge Vulnerabilities<\/li>\n<\/div>\n<\/div>\n\n<\/p>\n\n
- Windows 10 Mount Manager Vulnerability (CVE-2015-1769, MS15-085)<\/li>\n<\/div>\n<\/div>\n<\/ol>\n<\/div>\n
1. (CVE-2015-0057) Win32k Elevation of Privilege Vulnerability<\/strong><\/p>\nThis is a flaw in Windows 10 GUI component, commonly known as the scrollbar element, which allows the hackers to gain control of a Windows machine through privilege escalation. Microsoft has released a patch<\/a> to fix this flaw.<\/p>\n2. Windows 10 WiFi Sense Contact Sharing<\/strong><\/p>\nBy default, Windows 10 will share your wifi credentials to Outlook, Skype, and Facebook contacts\u2014presumably to make wifi and hotspot sharing easier. This makes it possible for any of these said contacts to hop onto your WiFi network\u2014if in proximity\u2014without authorization. While not necessarily a software vulnerability, this feature can lead to compromises, and should be remediated through the following steps:<\/p>\n
Windows by default have been designed in a way that makes hotspot sharing easily, the credentials are with Skype, outlook, and even Facebook. So this makes it vulnerable as any contact with proximity to snoop into your WiFi without authorization. This may not be a vulnerability, but it gives way to the hacker to compromise. This can be rectified with the following steps.<\/p>\n
Change the wifi network name\/SSID to include the terms \u201c_nomap_optout,” prior to upgrading to Windows 10.<\/p>\n
Post-upgrade, change your Windows privacy settings to disable Wifi Sense sharing.<\/p>\n
3. (MS15-078) Microsoft Font Driver Vulnerability<\/strong><\/p>\nAdobe Type Manager in Windows at times are not able to handle the OpenType fonts, this results in remote code execution, and its a vulnerability. This gives attackers the room to gain access to the system and install programs, and create new accounts view\/change\/delete data. Though Microsoft has released a patch for this flaw, still this can be manually downloaded and installed.<\/p>\n
4. (MS15-092) .NET Framework Escalation of Privilege Vulnerability<\/strong><\/p>\nThis is the another version of the above point No.1. The .NET application can enable privilege exploits, where the user is tricked to run the application. You can read more about this vulnerability on Microsoft item security bulletin page.<\/p>\n
5. (CVE-2015-5143) Redirect to SMB Vulnerability<\/strong><\/p>\nA flaw that has the ability to impact all the versions of Windows. A core Window API library that connects with Windows SMB. This results in Windows user getting redirected to a malicious SMB-based server, and then their credentials get stolen. The best way to stop this is to block TCP ports 139 and 445 and disable SMB.<\/p>\n
6. (MS15-098) Microsoft Windows Journal Vulnerability<\/strong><\/p>\nWhen the user opens a specially-crafted Journal file, it tends to allow remote code execution. More details can be sought on the Windows security<\/a> bulletin page.<\/p>\n7. (MS15-079) Internet Explorer Vulnerabilities<\/strong><\/p>\nRemember Microsoft’s browser, which also has its share of vulnerabilities that come with Windows 10. The most dangerous of the flaw is that it allows the hackers to gain access to the system through the browser. The details of the patch are available on the security bulletin page.<\/p>\n
8. (MS15-080) Microsoft Graphics Component Vulnerabilities<\/strong><\/p>\nA flaw related graphic memory management and fonts, and this results in remote code execution, which directs you to some dubious website with embedded fonts. Visit the Microsoft website and get the patch under a security bulletin page.<\/p>\n
9. (MS15-091) Microsoft Edge Vulnerabilities<\/strong><\/p>\nThe Microsoft Edge (browser) was never in the list of the secured browser. The various remote code execution and security bypass exploits enabled hackers to gain control over the system. Visit the Microsoft website and get the patch under a security bulletin page.<\/p>\n
10. Windows 10 Mount Manager Vulnerability (CVE-2015-1769, MS15-085)<\/strong><\/p>\nThis vulnerability involves the potential escalation of privilege by inserting a USB device into the target system. Through this method, an attacker could write a malicious binary to disk and execute the code. An update is available from Microsoft to patch this vulnerability.<\/p>\n
How to Protect Computer from Virus?<\/a><\/p>\n![\"comodo](\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2018\/04\/Comodo-Free-Antivirus.png\")
<\/a><\/p>\n![\"comodo](\"https:\/\/antivirus.comodo.com\/blog\/wp-content\/uploads\/2020\/08\/complete-antivirus.png\")
<\/a><\/p>\nRelated Resources:<\/strong><\/p>\nhttps:\/\/antivirus.comodo.com\/blog\/computer-safety\/best-antivirus-of-2019\/<\/a><\/strong><\/p>\nBest Virus Removal<\/a><\/p>\n
1. (CVE-2015-0057) Win32k Elevation of Privilege Vulnerability<\/strong><\/p>\n This is a flaw in Windows 10 GUI component, commonly known as the scrollbar element, which allows the hackers to gain control of a Windows machine through privilege escalation. Microsoft has released a patch<\/a> to fix this flaw.<\/p>\n 2. Windows 10 WiFi Sense Contact Sharing<\/strong><\/p>\n By default, Windows 10 will share your wifi credentials to Outlook, Skype, and Facebook contacts\u2014presumably to make wifi and hotspot sharing easier. This makes it possible for any of these said contacts to hop onto your WiFi network\u2014if in proximity\u2014without authorization. While not necessarily a software vulnerability, this feature can lead to compromises, and should be remediated through the following steps:<\/p>\n Windows by default have been designed in a way that makes hotspot sharing easily, the credentials are with Skype, outlook, and even Facebook. So this makes it vulnerable as any contact with proximity to snoop into your WiFi without authorization. This may not be a vulnerability, but it gives way to the hacker to compromise. This can be rectified with the following steps.<\/p>\n Change the wifi network name\/SSID to include the terms \u201c_nomap_optout,” prior to upgrading to Windows 10.<\/p>\n Post-upgrade, change your Windows privacy settings to disable Wifi Sense sharing.<\/p>\n 3. (MS15-078) Microsoft Font Driver Vulnerability<\/strong><\/p>\n Adobe Type Manager in Windows at times are not able to handle the OpenType fonts, this results in remote code execution, and its a vulnerability. This gives attackers the room to gain access to the system and install programs, and create new accounts view\/change\/delete data. Though Microsoft has released a patch for this flaw, still this can be manually downloaded and installed.<\/p>\n 4. (MS15-092) .NET Framework Escalation of Privilege Vulnerability<\/strong><\/p>\n This is the another version of the above point No.1. The .NET application can enable privilege exploits, where the user is tricked to run the application. You can read more about this vulnerability on Microsoft item security bulletin page.<\/p>\n 5. (CVE-2015-5143) Redirect to SMB Vulnerability<\/strong><\/p>\n A flaw that has the ability to impact all the versions of Windows. A core Window API library that connects with Windows SMB. This results in Windows user getting redirected to a malicious SMB-based server, and then their credentials get stolen. The best way to stop this is to block TCP ports 139 and 445 and disable SMB.<\/p>\n 6. (MS15-098) Microsoft Windows Journal Vulnerability<\/strong><\/p>\n When the user opens a specially-crafted Journal file, it tends to allow remote code execution. More details can be sought on the Windows security<\/a> bulletin page.<\/p>\n 7. (MS15-079) Internet Explorer Vulnerabilities<\/strong><\/p>\n Remember Microsoft’s browser, which also has its share of vulnerabilities that come with Windows 10. The most dangerous of the flaw is that it allows the hackers to gain access to the system through the browser. The details of the patch are available on the security bulletin page.<\/p>\n 8. (MS15-080) Microsoft Graphics Component Vulnerabilities<\/strong><\/p>\n A flaw related graphic memory management and fonts, and this results in remote code execution, which directs you to some dubious website with embedded fonts. Visit the Microsoft website and get the patch under a security bulletin page.<\/p>\n 9. (MS15-091) Microsoft Edge Vulnerabilities<\/strong><\/p>\n The Microsoft Edge (browser) was never in the list of the secured browser. The various remote code execution and security bypass exploits enabled hackers to gain control over the system. Visit the Microsoft website and get the patch under a security bulletin page.<\/p>\n 10. Windows 10 Mount Manager Vulnerability (CVE-2015-1769, MS15-085)<\/strong><\/p>\n This vulnerability involves the potential escalation of privilege by inserting a USB device into the target system. Through this method, an attacker could write a malicious binary to disk and execute the code. An update is available from Microsoft to patch this vulnerability.<\/p>\n How to Protect Computer from Virus?<\/a><\/p>\n Related Resources:<\/strong><\/p>\n https:\/\/antivirus.comodo.com\/blog\/computer-safety\/best-antivirus-of-2019\/<\/a><\/strong><\/p>\n Best Virus Removal<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n