CVE-2018-8424

CVE-2018-8424 describes an information-disclosure vulnerability in the Windows GDI component where memory contents may be leaked. Affected products include Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, Windows 10 and their Server counterparts (e.g., Windows Server 2008, 201...

CVE-2018-8439

CVE-2018-8439 describes a remote code execution vulnerability in Microsoft Windows Hyper‑V. The issue arises when Hyper‑V on a host fails to properly validate input coming from an authenticated user on a guest operating system. Affected products include Windows Server 2012 R2, Windows RT 8.1, Win...

CVE-2019-0553

CVE-2019-0553 is a Windows Subsystem for Linux information disclosure vulnerability caused by improper in-memory handling in WSL. Affected products include Windows 10 (client) and Windows Server 2019. The databases concur on the vulnerability description and impact (information disclosure; no int...

CVE-2019-0692

CVE-2019-0692 describes an elevation-of-privilege vulnerability in Windows Subsystem for Linux caused by an integer overflow. The issue enables local attackers to potentially escalate privileges within affected Windows environments. The initial entry notes the vulnerability and distinguishes it f...

CVE-2019-0711

The CVE-2019-0711 vulnerability affects Microsoft Hyper-V and involves denial-of-service when a host server fails to properly validate input from a privileged guest OS user. An attacker with a privileged guest account can run a crafted application inside a VM to crash the host. The vulnerability ...

CVE-2019-0908

The CVE-2019-0908 issue affects the Windows Jet Database Engine and is a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could lure a user to open a specially crafted file, triggering arbitrary code execution on a vulnerable system. Microsoft addr...

CVE-2019-1093

Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.

CVE-2019-1156

The CVE-2019-1156 entry concerns the Windows Jet Database Engine. It describes a remote code execution vulnerability caused by improper handling of memory objects, permitting an attacker to execute arbitrary code on a victim system. Exploitation involves enticing a user to open a specially crafte...

CVE-2019-1164

CVE-2019-1164 is a Windows kernel elevation-of-privilege vulnerability. The security flaw arises when the Windows kernel mishandles objects in memory, allowing a logged-on attacker to run arbitrary code in kernel mode and potentially install programs, view/change/delete data, or create privileged...

CVE-2019-1285

CVE-2019-1285 is a Windows Win32k elevation of privilege vulnerability caused by improper handling of memory objects in the Win32k component. Affects Windows systems; root cause is in-memory object handling leading to local privilege escalation. CVSS indicators: CVSSv2 base 7.2 (HIGH, LOCAL, no a...

CVE-2019-1469

CVE-2019-1469 is a Windows win32k information-disclosure vulnerability. The gained CVE details indicate the flaw resides in the win32k component exposing kernel information due to incorrect handling, enabling local attackers with logon rights to disclose information. Connected documents describe ...

CVE-2020-0615

Technical details about CVE-2020-0615 are not publicly provided in the supplied documents. Monitor for updates from official advisories and CNVD/ENISA entries to confirm affected products, impact, and fixes.

CVE-2020-0631

Technical details are not publicly available in the provided documents for CVE-2020-0631; no affected products, impact, or remediation are specified beyond the initial description. Monitor for updates.

CVE-2020-0916

Technical details for CVE-2020-0916 are not publicly available in the provided documents. No explicit affected product/version or root cause is given here. Monitor for updates.

CVE-2020-1011

CVE-2020-1011: Elevation of Privilege in Windows System Assessment Tool due to improper handling of file operations. Affected: Windows System Assessment Tool; root cause: file handling flaw enabling local privilege escalation. CVSS v3.1 shows HIGH impact (base 7.8) with Local attack vector, Privi...

CVE-2020-1270

CVE-2020-1270 is documented as a Windows WLAN Service Privilege Elevation Vulnerability. The connected CNVD entry describes a privilege escalation in the way memory objects are handled by the Windows WLAN Service, enabling code execution with elevated privileges via a crafted application. Other c...

CVE-2020-1362

CVE-2020-1362 affects the Windows WalletService, an elevation-of-privilege vulnerability caused by how WalletService handles objects in memory. Multiple connected sources (CNVD entries) confirm the root cause is improper in‑memory handling leading to privilege escalation. No specific exploit vect...

CVE-2020-1393

Summary: CVE-2020-1393 is an elevation of privilege in Windows Diagnostics Hub related to the Standard Collector Service failing to sanitize input, causing insecure library loading. The root cause is input validation/sanitization weaknesses leading to loading of untrusted libraries. This CVE is r...

CVE-2020-1473

CVE-2020-1473 : A remote code execution vulnerability in the Windows Jet Database Engine arises from improper handling of objects in memory. An attacker could trigger arbitrary code execution by enticing a user to open a specially crafted file. Mitigation is provided by the update that fixes the ...

CVE-2020-1479

CVE-2020-1479 is a Windows/DirectX-related elevation of privilege vulnerability. The issue arises from improper handling of objects in memory, enabling a locally authenticated attacker to run code in kernel mode after logging on and executing a crafted application. The impact, as described in the...

CVE-2020-1560

CVE-2020-1560 is a remote code execution in Microsoft Windows Codecs Library. It arises from how the Windows Codecs Library handles objects in memory, allowing an unauthenticated attacker to craft an image file that, when processed, could execute arbitrary code on the affected system. Public sour...

CVE-2020-16921

CVE-2020-16921 is an information-disclosure vulnerability in the Windows Text Services Framework caused by improper handling of objects in memory. An attacker who can log on to an affected system and open a specially crafted file could read data not intended to be disclosed. The issue does not en...

CVE-2021-1656

CVE-2021-1656 is a TPM device driver information disclosure vulnerability affecting Windows TPM drivers. It yields a confidentiality impact (HIGH per CVSS v3.1 and PARTIAL per CVSS v2) with LOCAL attack vector and LOW privileges required; exploitation status is not detailed in the provided docume...

CVE-2021-1671

CVE-2021-1671 corresponds to a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability in Microsoft Windows/Windows Server. The connected documents confirm an RPC Runtime RCE with a network attack vector and a high-severity impact profile (CVSSv3.1 base score 8.8; Confidentiality/...

CVE-2021-38624

Technical details about CVE-2021-38624 are not provided in the connected documents. Available records do not specify affected products/versions or fixes beyond the vulnerability title. Monitor for updates.

CVE-2022-22712

CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...

CVE-2022-29125

Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.

CVE-2022-35834

CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...

CVE-2022-37954

CVE-2022-37954 is a Elevation of Privilege vulnerability in the DirectX Graphics Kernel component of Windows. The initial CVSSv3.1 data indicates Local exploitability with Low attack complexity and Low privileges required, yielding a high base score of 7.8 (C:H, I:H, A:H). The vulnerability affec...

CVE-2022-37989

CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...

CVE-2022-38016

CVE-2022-38016 is a Windows Local Security Authority (LSA) Elevation of Privilege vulnerability. Affects Windows LSA component; root cause involves improper privilege handling within LSA, enabling local attackers with LOW privileges and NO user interaction to gain SYSTEM-level access. CVSS v3.1 m...

CVE-2022-38051

CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...

CVE-2023-36907

Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.

CVE-2017-0180

Technical details for CVE-2017-0180 are not publicly provided in the connected documents. Available sources reference Hyper-V Network Switch input validation issues but do not disclose affected versions, root cause specifics, or exploit information. Monitor for updates.

CVE-2017-0271

CVE-2017-0271 is an information-disclosure vulnerability in Microsoft Windows SMBv1 server processing. It stems from improper handling of SMBv1 requests, potentially allowing a remote attacker to obtain partial sensitive information from affected Windows systems. Affected products include Windows...

CVE-2017-0275

CVE-2017-0275 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB server handling of certain requests. The initial description lists affected products as Windows platforms including Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and ...

CVE-2018-0854

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2018-0896

CVE-2018-0896 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows 10 versions 1511–1709, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709) where memory address handling allows an information disclosure vulnerability. Root ca...

CVE-2018-0974

CVE-2018-0974 is a Windows kernel information disclosure vulnerability that could enable an attacker to obtain information facilitating a Kernel ASLR bypass. Affected are Windows client and server families including Windows 7, Server 2008/2008 R2, 8.1, 10 (and Server equivalents). The vulnerabili...

CVE-2018-8213

CVE-2018-8213 is a Windows remote code execution vulnerability caused by improper handling of objects in memory. Affected products per provided data: Windows Server 2016 and Windows 10 (including Windows 10 Servers). The entry is linked to CVE-2018-8210 as a distinct CVE with its own affected set...

CVE-2018-8393

The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...

CVE-2018-8472

CVE-2018-8472 is a Windows GDI information-disclosure vulnerability. The issue arises from how the Windows Graphics Device Interface handles objects in memory, enabling a local attacker to retrieve information from the target system. Affected software/hosts include multiple Windows platforms list...

CVE-2019-0715

The CVE-2019-0715 entry affects Microsoft Hyper-V Network Switch and is described as a denial-of-service vulnerability. A privileged attacker on a guest OS can run a crafted application to crash the host server, indicating that input validation in the Hyper-V Network Switch path is inadequate. Th...

CVE-2019-0766

CVE-2019-0766 involves a local elevation of privilege in the Windows AppX Deployment Server. The connected documents indicate an attacker who can log on to the system can create files in arbitrary locations, indicating a race/permission issue enabling privilege escalation. The description across ...

CVE-2019-0787

CVE-2019-0787 is described as a remote code execution vulnerability in the Windows Remote Desktop Client when a user connects to a malicious server. Connected documents confirm this CVE refers to the RDP client and note it alongside other remote‑network bugs Microsoft has addressed (e.g., CVE-201...

CVE-2019-0896

The Connected CNVD entries describe a Microsoft Windows Jet Database Engine vulnerability: a buffer overflow occurring when the engine executes memory operations without proper data-boundary validation, potentially enabling read/write corruption (buffer/heap overflow). This aligns with a Jet DB E...

CVE-2019-0936

CVE-2019-0936 is a Windows elevation-of-privilege vulnerability arising from improper handling of certain symbolic links. The root cause is an inadequate check of symbolic link handling that can enable a local attacker to escalate privileges to Administrator. Affected software is Windows (per des...

CVE-2019-0972

CVE-2019-0972 affects the Local Security Authority Subsystem Service (LSASS) where an authenticated attacker can trigger a denial of service by sending specially crafted authentication requests. Exploitation could cause the LSASS service to reboot the target system. Microsoft’s security update mi...

CVE-2019-1174

CVE-2019-1174 is an elevation of privilege vulnerability in how the Windows component PsmServiceExtHost.dll handles objects in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. A Microsoft security update fixes the issue by ensurin...

CVE-2019-1344

Technical details about CVE-2019-1344 are not publicly provided in the supplied documents. The Connected documents do not include affected products, root cause, impact, or fixes. Monitor for updates from official sources.