CVE-2018-8251

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka "Media Foundation Memory Corruption Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Serve...

CVE-2018-1036

An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2,...

CVE-2018-8218

CVE-2018-8218 is a denial-of-service vulnerability in the Microsoft Hyper-V Network Switch. It arises when a privileged guest user’s input is not properly validated by the Hyper-V component on the host, causing the host server to crash (DoS). Affected: Windows 10 client and Windows Server variant...

CVE-2018-8226

A denial of service vulnerability exists in the HTTP 2.0 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP 2.0 requests, aka "HTTP.sys Denial of Service Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-8201

CVE-2018-8201 describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10 (including Windows 10 servers). The vulnerability stems from bypas...

CVE-2018-8216

The CVE-2018-8216 entry describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 variants; the vulnerability relates to bypass...

CVE-2018-8215

CVE-2018-8215 (and related CVEs) is described in CNVD-2018-12041 as a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows Server 2016 and Windows 10 variants. The CNVD entry confirms the vulne...

CVE-2018-8217

CVE-2018-8217 is a local security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected are Windows Server 2016 and Windows 10/Windows 10 Servers. The vulnerability is described acros...

CVE-2018-8205

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka "Windows Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10,...

CVE-2018-8207

The CVE-2018-8207 entry describes an information disclosure vulnerability in the Windows kernel caused by improper handling of memory objects. Affected products include Windows 7, Windows Server 2008/R2/2012/2012 R2, Windows 8.1, Windows 10 and corresponding server variants. The issue stems from ...

CVE-2018-8208

An elevation of privilege vulnerability exists in Windows when Desktop Bridge does not properly manage the virtual registry, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers. This CVE ID is unique from CVE-2018-821...

CVE-2018-8219

CVE-2018-8219 is a privilege-escalation flaw in Windows Hyper-V Code Integrity. The vulnerability arises when Hyper-V instruction emulation fails to properly enforce privilege levels, enabling elevation of privileges. Affected products include Windows Server 2016 and Windows 10 (including Windows...

CVE-2018-0982

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...

CVE-2018-0982

CVE-2018-0982 is a local-elevation-of-privilege flaw in the Windows Kernel API permission enforcement. Affected products per documents include Windows Server 2016, Windows 10, and Windows 10 Server. CVSS3 vector shows LOCAL attack, HIGH impact on confidentiality, integrity, and availability, with...

CVE-2018-1036

The CVE-2018-1036 entry describes an NTFS elevation of privilege in Windows where access checks are improperly performed. Affected products include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions such as 2008, 2012, 2016, and 2012 R2 variants). The vulnerability is l...

CVE-2018-8207

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Windows Kernel Information Disclosure Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2018-8210

Technical details such as affected product versions, root cause, exploitability, and patch guidance are not provided in the connected documents; monitor for updates.

CVE-2018-8216

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10. This CVE ID is uniq...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8221

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session, aka "Device Guard Code Integrity Policy Security Feature Bypass Vulnerability." This affects Windows Server 2016, Windows 10, Windows 10 Servers...