CVE-2018-8215

CVE-2018-8215 (and related CVEs) is described in CNVD-2018-12041 as a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows Server 2016 and Windows 10 variants. The CNVD entry confirms the vulne...

CVE-2018-8218

CVE-2018-8218 is a denial-of-service vulnerability in the Microsoft Hyper-V Network Switch. It arises when a privileged guest user’s input is not properly validated by the Hyper-V component on the host, causing the host server to crash (DoS). Affected: Windows 10 client and Windows Server variant...

CVE-2018-8217

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10. This CVE ID is uniq...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8239

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8239

CVE-2018-8239 — Windows GDI Information Disclosure Vulnerability affects Windows Server 2016, Windows 10, and Windows 10 Server variants. The root cause is that the Windows GDI component improperly discloses the contents of memory (an information-disclosure flaw). An attacker could exploit this b...

CVE-2018-8212

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8212

The CVE-2018-8212 entry describes a security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow an attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 Servers. The underlying is...

CVE-2018-8208

The CVE-2018-8208 entry describes an elevation-of-privilege vulnerability in Windows Desktop Bridge where the virtual registry is not managed correctly. Affected products include Windows Server 2016 and Windows 10 variants. The root cause is related to Desktop Bridge’s handling of the virtual reg...

CVE-2018-8208

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-821...

CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...

CVE-2018-0982: Incorrect Permission Assignment for Critical Resource

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-1040: Undefined Security Weakness

A denial of service vulnerability exists in the way that the Windows Code Integrity Module performs hashing, aka "Windows Code Integrity Module Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

CVE-2018-8239: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows GDI Information Disclosure Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8219: Undefined Security Weakness

An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels, aka "Hypervisor Code Integrity Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8226: Undefined Security Weakness

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8231: Undefined Security Weakness

A remote code execution vulnerability exists when HTTP Protocol Stack Http.sys improperly handles objects in memory, aka "HTTP Protocol Stack Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8213: Improper Resource Shutdown or Release

A remote code execution vulnerability exists when Windows improperly handles objects in memory, aka "Windows Remote Code Execution Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-8210...

CVE-2018-8215: Undefined Security Weakness

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8201: Undefined Security Weakness

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...