Privilege escalation

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-820...

Information disclosure

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

Remote code execution

A remote code execution vulnerability exists when HTTP Protocol Stack Http.sys improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

Privilege escalation

An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8175

An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory, aka "WEBDAV Denial of Service Vulnerability." This affects Windows 10 Servers, Windows 10...

CVE-2018-1040

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

CVE-2018-8140

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10...

CVE-2018-8226

The CVE-2018-8226 entry describes a denial-of-service in the HTTP/2 protocol stack (HTTP.sys) for Windows. Affected components include HTTP.sys on Windows Server 2016 and Windows 10/Windows 10 Servers, with the root cause being improper parsing of specially crafted HTTP/2 requests, leading to sys...

CVE-2018-8208

The CVE-2018-8208 entry describes an elevation-of-privilege vulnerability in Windows Desktop Bridge where the virtual registry is not managed correctly. Affected products include Windows Server 2016 and Windows 10 variants. The root cause is related to Desktop Bridge’s handling of the virtual reg...

CVE-2018-8140

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status, aka "Cortana Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10...

CVE-2018-8219

An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8210

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers. This CVE I...

CVE-2018-8209

An information disclosure vulnerability exists when Windows allows a normal user to access the Wireless LAN profile of an administrative user, aka "Windows Wireless Network Profile Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8239

CVE-2018-8239 — Windows GDI Information Disclosure Vulnerability affects Windows Server 2016, Windows 10, and Windows 10 Server variants. The root cause is that the Windows GDI component improperly discloses the contents of memory (an information-disclosure flaw). An attacker could exploit this b...

CVE-2018-8226

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8219

CVE-2018-8219 is a privilege-escalation flaw in Windows Hyper-V Code Integrity. The vulnerability arises when Hyper-V instruction emulation fails to properly enforce privilege levels, enabling elevation of privileges. Affected products include Windows Server 2016 and Windows 10 (including Windows...

CVE-2018-8211

CVE-2018-8211 describes a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session. Affected products listed in the sources include Windows 10 and Windows 10 Server variants. The vulnerability is characterized as a b...

CVE-2018-8175

CVE-2018-8175 describes a denial-of-service in Windows WebDAV Minirdr when querying a WebDAV directory. The vulnerability can be triggered by a user visiting a attacker-controlled site or link, leading to the victim’s system stopping to respond. Affected products include Windows 10 and Windows Se...

CVE-2018-8205

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10,...

CVE-2018-8175

An denial of service vulnerability exists when Windows NT WEBDAV Minirdr attempts to query a WEBDAV directory, aka "WEBDAV Denial of Service Vulnerability." This affects Windows 10 Servers, Windows 10...