CVE-2019-0614

The connected advisories confirm an information disclosure vulnerability in Microsoft Windows GDI. The Graphics Device Interface component is affected by improper handling of in-memory objects, exposing memory contents. CPAI-2019-1525 notes remote attackers could exploit this to access sensitive ...

CVE-2019-0844

Technical details about CVE-2019-0844 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected products, impact, and remediation.

CVE-2019-0845

Technical details for CVE-2019-0845 are not publicly available in the provided documents. Monitor for updates to determine affected products, impact, and fixes.

CVE-2019-0902

The connected documents describe a vulnerability in the Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow arising when memory-boundary checks are not properly performed during operations in memory. The root cause is that data boundaries are not validated, leading to an out-of...

CVE-2019-1256

CVE-2019-1256 is a Windows Win32k Elevation of Privilege vulnerability caused by the Win32k component failing to properly handle objects in memory, enabling local privilege escalation. The CVE is distinct from CVE-2019-1285, and is corroborated by multiple records (NVD/CVE list, CNVD, EUVD mentio...

CVE-2020-0671

Technical details for CVE-2020-0671 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2020-16939

CVE-2020-16939 is a Microsoft Windows elevation-of-privilege vuln in Group Policy where access is not correctly checked. An attacker must log on and run a crafted application to execute code in an elevated context. NVD/metrics: CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW, User Intera...

CVE-2021-28334

CVE-2021-28334 is associated with a Remote Procedure Call Runtime remote code execution vulnerability in Microsoft Windows/Windows Server. The CNVD-2021-74287 entry describes a RPC Runtime RCE vulnerability affecting Windows/Windows Server, implying a remote attacker could execute code over the n...

CVE-2022-21901

Technical details for CVE-2022-21901 are not publicly available in the provided documents. No explicit affected components, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2022-21928

This CVE affects the Windows Resilient File System (ReFS). The entry documents a Remote Code Execution vulnerability in ReFS, with CVSSv3.1 base score 6.4 (MEDIUM) and a physical attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. The Connected doc...

CVE-2022-24466

Technical details for CVE-2022-24466 are not publicly provided in the supplied documents. The connected entries reference this CVE among others but do not describe affected products, root cause, impact, or fixes.

CVE-2022-26793

Technical details (affected component, root cause, vulnerable versions, exploitability) are not provided in the supplied documents. Monitor for updates.

CVE-2022-30164

Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.

CVE-2022-35764

CVE-2022-35764 refers to a Storage Spaces Direct Elevation of Privilege vulnerability. The CVSS v3.1 metrics indicate a LOCAL, low-attack-complexity vector with Privileges Required: LOW and UI: NONE, Confidentiality/Integrity/Availability impacts: HIGH, base score 7.8 (HIGH). Exploitation status ...

CVE-2016-0145

CVE-2016-0145 is a Graphics Memory Corruption vulnerability in the Windows font library. A remote attacker can execute arbitrary code by delivering a crafted embedded font, affecting Windows flavors listed in the vulnerability entry (e.g., Windows Vista through Windows 10 versions, Windows Server...

CVE-2017-8565

CVE-2017-8565 is a Windows PowerShell remote code execution vulnerability triggered when PSObject wraps a CIM Instance. Connected sources describe in detail that deserialization via PSObject, LosFormatter, ObjectStateFormatter (and related gadget chains) can enable remote code execution in PowerS...

CVE-2017-8676

CVE-2017-8676 is an information disclosure vulnerability in the Windows GDI+ component. The NVD entry describes that an authenticated attacker can retrieve information from the targeted system by presenting a specially crafted application, affecting a wide range of Windows versions (Windows clien...

CVE-2018-0832

CVE-2018-0832 affects the Windows kernel and relates to how memory objects are handled, causing an information disclosure vulnerability. Affected products/versions include Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 versions 1511, ...

CVE-2018-0897

CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...

CVE-2019-0636

CVE-2019-0636 is described as an information disclosure vulnerability where Windows improperly discloses file information. The provided documents do not supply concrete technical details (affected products/versions, root cause, exploit info, or remediation). No further technical specifics are ava...

CVE-2019-0765

CVE-2019-0765: remote code execution in comctl32.dll due to how the library handles objects in memory, termed the Comctl32 Remote Code Execution Vulnerability. Affected software is Windows’ comctl32.dll component; exact versions and vulnerable configurations are not specified in the provided docu...

CVE-2019-0790

Technical details for CVE-2019-0790 are not provided in the supplied documents; no affected products, versions, root cause, or mitigations are listed. Monitor for updates.

CVE-2019-1144

CVE-2019-1144 is a remote code execution vulnerability in the Windows font library (fontsub.dll) triggered by specially crafted embedded fonts. The impact, per NVD/NVD-derived sources, is full system compromise: attacker can install programs, view/modify/delete data, and create accounts with full...

CVE-2019-1145

CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...

CVE-2019-1150

CVE-2019-1150 affects the Windows font library’s handling of embedded fonts, leading to remote code execution. The vulnerability arises from how font data is processed, enabling an attacker to run arbitrary code on the targeted system. Documented impact includes potential full system compromise, ...

CVE-2019-1232

CVE-2019-1232 is a local elevation-of-privilege flaw in the Diagnostics Hub Standard Collector Service. Affected: Diagnostics Hub Standard Collector Service; root cause: improper impersonation of certain file operations. Impact per sources: confidentiality, integrity, and availability are rated p...

CVE-2019-1243

CVE-2019-1243 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution with the user’s pr...

CVE-2020-0670

Technical details about CVE-2020-0670 are not publicly available in the provided documents. No affected products, impact, or remediation are described here. Monitor for updates from official advisories and trusted sources.

CVE-2020-1243

CVE-2020-1243 affects Microsoft Hyper-V. The vulnerability arises when Hyper-V on a host does not properly validate certain malicious data from a guest VM, enabling a locally authenticated attacker with a guest-VM privilege to trigger a denial-of-service by running a specially crafted application...

CVE-2020-1558

The connected document confirms CVE-2020-1558 targets the Windows Jet Database Engine, with a remote code execution vulnerability that arises from improper handling of objects in memory. An attacker can trigger code execution by persuading a user to open a specially crafted file. The issue is mit...

CVE-2020-1566

CVE-2020-1566 is a Windows Kernel Elevation of Privilege vulnerability arising from a memory handling flaw in the Windows kernel, where mismanagement of objects in memory could allow a local attacker to execute arbitrary code in kernel mode, potentially install programs, view/change/delete data, ...

CVE-2021-28479

CVE-2021-28479 maps to a Windows CSC Service Information Disclosure vulnerability. Affected software is Windows operating systems with the CSC service; the root cause relates to information disclosure in the CSC service. The NVD metrics show CVSS base scores of 2.1 (2.0/6.0) depending on version,...

CVE-2021-34504

Technical details about CVE-2021-34504 are not provided in the connected documents; the Initial Description lists a Windows Address Book RCE vulnerability but lacks affected product/version specifics. Monitor for updates.

CVE-2021-36960

CVE-2021-36960 is a Windows SMB information-disclosure vulnerability with a CVSS v3.1 base score of 7.5 (HIGH). It is exploitable over a network, requires no privileges and no user interaction, and impacts confidentiality only (I: HIGH; C: HIGH; A: NONE). The initial description labels it as a Wi...

CVE-2022-21873

Technical details for CVE-2022-21873 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are stated here; monitor for updates.

CVE-2022-37979

CVE-2022-37979 is a Windows Hyper-V elevation-of-privilege vulnerability. Public sources describe it as a local privilege escalation stemming from improper privilege assignment within the Hyper-V component. The CVE affects Windows Hyper-V with a CVSS v3.1 vector of Local, High severity (7.8). Rem...

CVE-2022-41121

CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...

CVE-2017-0100

CVE-2017-0100 is a local elevation-of-privilege vulnerability in a DCOM object registered by Helppane.exe (Windows HelpPane). A crafted application can exploit RunAs authentication issues to execute code in another user’s session on affected Windows 7 SP1, Server 2008 R2, 8.1, 2012, RT 8.1, 10 (1...

CVE-2018-0752

CVE-2018-0752 is a Windows Kernel API elevation-of-privilege vulnerability. It affects Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 all listed versions (Gold, 1511, 1607, 1703, 1709), Windows Server 2016, and Windows Server version 1709, due to how the Kernel API enforces permissio...

CVE-2018-8349

CVE-2018-8349 is a remote code execution vulnerability in Microsoft COM for Windows caused by improper handling of serialized objects. The vulnerability affects multiple Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server editions such as Server 2008/2012/2016 and R2 varian...

CVE-2018-8404

CVE-2018-8404 is a Windows local elevation-of-privilege vulnerability in the Win32k subsystem. Root cause: Win32k.sys fails to properly handle objects in memory, enabling elevation of privilege on affected Windows variants (Windows 7, Windows 8.1, Windows 10, and corresponding Server editions). C...

CVE-2018-8455

Technical details about CVE-2018-8455 are not publicly provided in the supplied documents; monitor for updates on affected products, root cause, and remediation.

CVE-2019-0713

Technical details about CVE-2019-0713 are not publicly provided in the connected documents. The initial description summarizes a Hyper-V denial-of-service vulnerability. Monitor for updates from official sources.

CVE-2019-0853

Technical details about CVE-2019-0853 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates and corroborating risk information from official advisories.

CVE-2019-1044

CVE-2019-1044 is a Windows security feature bypass in Windows Secure Kernel Mode where improper handling of memory objects can allow a locally-authenticated attacker to violate virtual trust levels (VTL). Affects Windows client/server releases referenced in the advisory (e.g., Windows 10/Server 2...

CVE-2019-1082

Technical details such as affected products, root cause, and remediation for CVE-2019-1082 are not provided in the supplied documents; connected EUVD entries discuss malware but do not add specifics for this CVE. Monitor for updates.

CVE-2020-1512

CVE-2020-1512 affects the Windows State Repository Service. The information-disclosure vulnerability arises from the service improperly handling objects in memory, allowing a locally-executed, specially crafted application to obtain information to further compromise the system. The provided docum...

CVE-2020-1519

CVE-2020-1519 is a Windows elevation-of-privilege vulnerability in the Windows UPnP Device Host that arises from improper handling of memory. An attacker must first gain execution on the target, then run a crafted application to elevate privileges. Microsoft’s security update fixes how the UPnP D...

CVE-2021-1674

Technical details (affected product, root cause, impact, or remediation) are not provided in the connected documents. The CVE entry’s specifics are not disclosed here; monitor for updates.

CVE-2021-34536

CVE-2021-34536 refers to a Windows Storage Spaces Controller Elevation of Privilege vulnerability. The NVD entry lists a CVSS 3.1 base score of 7.8 with Local attack vector, Low privileges required, and No user interaction, and indicates a High impact on confidentiality, integrity, and availabili...