CVE-2019-0553

CVE-2019-0553 is a Windows Subsystem for Linux information disclosure vulnerability caused by improper in-memory handling in WSL. Affected products include Windows 10 (client) and Windows Server 2019. The databases concur on the vulnerability description and impact (information disclosure; no int...

CVE-2019-0710

CVE-2019-0710 is a Windows Hyper-V denial-of-service vulnerability. A privileged guest-OS user can run a crafted application inside a VM that causes the host server to crash, due to Hyper-V failing to validate certain guest requests. The issue affects Hyper-V on the host and is exploitable by a g...

CVE-2019-0908

The CVE-2019-0908 issue affects the Windows Jet Database Engine and is a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could lure a user to open a specially crafted file, triggering arbitrary code execution on a vulnerable system. Microsoft addr...

CVE-2019-1017

CVE-2019-1017 is a Windows Win32k elevation-of-privilege vulnerability. The Win32k component mishandles in-memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode after logging on and executing a crafted application. This could enable installation of program...

CVE-2019-1097

Technical details about CVE-2019-1097 are not publicly provided in the connected documents. The initial entry notes a DirectWrite information disclosure but lacks vendor/affected products, versions, impact, or remediation in the supplied materials. Monitor for updates.

CVE-2019-1180

The CVE-2019-1180 entry describes an elevation-of-privilege vulnerability in how wcmsvc.dll handles objects in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. The vulnerability is addressed by a security update that ensures wcmsv...

CVE-2019-1344

Technical details about CVE-2019-1344 are not publicly provided in the supplied documents. The Connected documents do not include affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2019-1393

Technical details about CVE-2019-1393 are not provided in the connected documents. The EUVD entries mention malware 'sbrugna' but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2020-0916

Technical details for CVE-2020-0916 are not publicly available in the provided documents. No explicit affected product/version or root cause is given here. Monitor for updates.

CVE-2020-1203

CVE-2020-1203 is an elevation of privilege affecting the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector, caused by improper handling of memory in affected objects. The description notes this CVE is distinct from CVE-2020-1202 and does not provide explicit affected ver...

CVE-2020-1231

Technical details for CVE-2020-1231 are not provided in the connected documents. Monitor for updates; information on affected components, root cause, and remediation is not available here.

CVE-2020-1293

CVE-2020-1293 is an Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector Service where file operations are mishandled. The connected AVLeonarov item places CVE-2020-1293 under Diagnostics Hub Standard Collector EOP and lists it alongside CVE-2020-1257 and CVE-2020-1278, but ...

CVE-2020-1527

CVE-2020-1527 – Windows Custom Protocol Engine Elevation of Privilege Root cause: The vulnerability stems from the Windows Custom Protocol Engine improperly handling memory, enabling an attacker who already has code execution on the victim system to run a crafted application and gain higher privi...

CVE-2020-1534

CVE-2020-1534 is an Elevation of Privilege in Windows Backup Engine/Windows Backup Service. The connected AVLEONOV post confirms the affected component as Windows Backup Engine and describes the root cause as improper handling of file operations by the Backup Service, enabling privilege escalatio...

CVE-2020-1536

CVE-2020-1536 is a Windows elevation of privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker must first gain execution on the target, then run a specially crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-1542

CVE-2020-1542 is a Windows Backup Engine elevation-of-privilege vulnerability caused by improper memory handling. An attacker must first gain execution on the victim and then run a crafted application to elevate privileges. Windows updates fix the issue by correcting how the Backup Engine handles...

CVE-2020-16894

CVE-2020-16894 is a Windows NAT denial-of-service vulnerability: a privileged guest-VM user can craft input that forces the host to crash due to improper NAT validation. Remediation is to apply the Microsoft update that modifies how Windows NAT accesses the host.

CVE-2021-1650

Technical details for CVE-2021-1650 are not publicly provided in the connected documents. Monitor for updates from official advisories; no specific affected product/version, root cause, impact, or remediation is included here.

CVE-2021-33774

CVE-2021-33774 is a Windows Event Tracing elevation-of-privilege vulnerability in Microsoft Windows/Windows Server. Connected sources confirm the flaw resides in Event Tracing and can yield increased privileges, with local attack prerequisites (no user interaction) per CVSS vectors cited in publi...

CVE-2021-42286

CVE-2021-42286: Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability. Affected component: Windows Core Shell SI Host Extension Framework. Root cause: elevation of privilege in the Composable Shell path (Core Shell). Impact (per sources): local a...

CVE-2022-21860

CVE-2022-21860 is a Windows vulnerability described as a Windows AppContracts API Server Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges and no user ...

CVE-2022-21879

Technical details for CVE-2022-21879 are not publicly provided in the supplied documents; no affected products or fixes are described here. Monitor for official disclosures and updates.

CVE-2022-21962

CVE-2022-21962 corresponds to a Windows Resilient File System (ReFS) remote code execution vulnerability. The NVD entry lists two CVSS assessments: CVSS v2 base score 7.2 (LOCAL, with no user interaction, impact to confidentiality/integrity/availability) and CVSS v3.1 base score 6.8 (attack vecto...

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-29125

Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.

CVE-2022-37999

CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...

CVE-2022-38039

CVE-2022-38039 is referenced in associated material as a Windows kernel hive/registry bug arising from a 16-bit integer overflow when computing the length of a dynamically allocated buffer during registry hive processing. This memory corruption pattern is discussed alongside related CVEs (e.g., C...

CVE-2022-44681

Technical details about CVE-2022-44681 are not publicly provided in the connected documents. Monitoring for updates is recommended.

CVE-2016-0070

Technical details of CVE-2016-0070 are not publicly provided in the Connected Documents. Monitor for updates.

CVE-2016-0178

The CVE refers to CVE-2016-0178, describing a remote code execution flaw in the RPC Network Data Representation (NDR) Engine. The root cause is improper freeing of memory in the RPC NDR Engine, exploited via malformed RPC requests to remote hosts. Affected products include Windows Vista SP2, Wind...

CVE-2016-3340

CVE-2016-3340 affects the Windows Common Log File System (CLFS) driver across multiple Windows client/server SKUs (e.g., Vista/7/8.1/10 and corresponding server editions). The vulnerability enables local users to gain privileges via a crafted application, representing a local elevation-of-privile...

CVE-2016-7205

CVE-2016-7205 is a Windows memory corruption vulnerability in the Animation Manager that can be triggered by visiting a crafted web site, enabling remote code execution. Affected products include Windows 7 SP1, Windows 8.1, Windows 10 (various builds), Windows Server 2008 R2 SP1, Windows Server 2...

CVE-2017-8577

Technical details for CVE-2017-8577 are not provided in the supplied documents; no explicit affected product/version, root cause, impact, or fix is disclosed here. Monitor for updates.

CVE-2017-8681

Technical details about CVE-2017-8681 are not publicly provided in the connected documents. No specifics on affected versions, root cause, impact, or remediation are present. Monitor for updates.

CVE-2018-0887

CVE-2018-0887 describes an information-disclosure in the Windows kernel caused by improper initialization of a memory address. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 family and corresponding Server variants). The vulnerability exposes partial confi...

CVE-2018-8393

The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...

CVE-2018-8484

CVE-2018-8484 is an elevation of privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver where objects in memory are improperly handled. Affected products/versions (as per documents): Windows 10 and Windows Server editions listed (Windows 8.1, Windows 10, Windows 10 Servers, Windo...

CVE-2019-0766

CVE-2019-0766 involves a local elevation of privilege in the Windows AppX Deployment Server. The connected documents indicate an attacker who can log on to the system can create files in arbitrary locations, indicating a race/permission issue enabling privilege escalation. The description across ...

CVE-2019-0895

The connected CNVD entries describe a Windows Jet Database Engine vulnerability as a buffer overflow/heap overflow issue arising when memory boundaries are not properly validated. They state an attacker could exploit this condition to cause memory corruption, affecting Windows/Windows Server envi...

CVE-2019-0973

CVE-2019-0973 affects the Windows Installer. The issue stems from improper input sanitization that enables insecure library loading, leading to elevation of privilege. A locally authenticated attacker could execute arbitrary code with elevated system privileges, potentially installing programs, v...

CVE-2019-1174

CVE-2019-1174 is an elevation of privilege vulnerability in how the Windows component PsmServiceExtHost.dll handles objects in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. A Microsoft security update fixes the issue by ensurin...

CVE-2019-1247

Technical details about CVE-2019-1247 are not publicly provided in the supplied documents. The materials reference the Jet Database Engine RCE generally but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2020-0613

Technical details about CVE-2020-0613 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0704

The CVE-2020-0704 entry concerns a Windows Wireless Network Manager Elevation of Privilege vulnerability. The affected component is the Windows Wireless Network Manager, where memory is improperly handled. The root cause is a memory handling issue that allows an attacker who already has code exec...

CVE-2020-0771

CVE-2020-0771 is a Windows CSC Service privilege-elevation vulnerability caused by improper memory handling. It requires local execution to exploit and could allow an attacker to gain elevated privileges on the system. Connected documents confirm the affected component is Windows CSC Service and ...

CVE-2020-1306

Technical details about CVE-2020-1306 are not provided in the connected documents. The entry notes a Windows Runtime elevation of privilege issue but does not specify affected products/versions or fixes. Monitor for updates.

CVE-2020-1524

CVE-2020-1524 is a Windows vulnerability affecting the Windows Speech Shell Components, where memory handling leads to elevation of privilege. The issue requires an attacker who already has code execution on the target to run a crafted application to gain higher privileges. Microsoft’s advisory i...

CVE-2020-1551

CVE-2020-1551 : Elevation of Privilege in Windows Backup Engine due to improper handling of memory. The vulnerability requires prior execution on a vulnerable system and can be exploited by running a specially crafted application to elevate privileges. The Windows security update fixes memory han...

CVE-2020-1578

CVE-2020-1578 is an information disclosure vulnerability in the Windows kernel that could allow an attacker to retrieve kernel object memory addresses, potentially bypassing ASLR. Exploitation requires user login on the affected system and running a crafted app. The mitigation is a Microsoft secu...

CVE-2020-16960

CVE-2020-16960 is a Windows Backup Engine Elevation of Privilege vulnerability. Documents indicate a local attacker could exploit this to gain HIGH-severity privileges (CVSSv3.1 base score 7.8) with no user interaction required. Affected component is the Windows Backup Engine; the vulnerability i...