CVE-2020-1080

Windows Hyper-V Elevation of Privilege (CVE-2020-1080) is documented as an elevation of privilege in Hyper-V when handling objects in memory on a host server. Exploitation is described as local (requires access to the host), with the flaw not by itself enabling arbitrary code execution but potent...

CVE-2018-0966

CVE-2018-0966 is a Device Guard Security Feature Bypass in Microsoft Windows. The vulnerability arises when Device Guard inadequately validates an untrusted file, enabling a security feature bypass on affected platforms. Affected products include Windows 10 and Windows Server 2016/Windows Server ...

CVE-2019-1178

CVE-2019-1178 is an elevation-of-privilege vulnerability in the memory handling of ssdpsrv.dll. The NVD entry states that a locally authenticated attacker could execute code with elevated permissions by running a crafted application, and that a security update fixes the issue by ensuring ssdpsrv....

CVE-2019-1212

CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...

CVE-2019-1236

CVE-2019-1236 describes a remote code execution vulnerability in the VBScript engine related to how it handles objects in memory. The issue is tied to the VBScript engine’s object memory management and is documented as a vulnerability distinct from CVE-2019-1208. The vulnerability affects Interne...

CVE-2019-1294

CVE-2019-1294 is a Windows Secure Boot security feature bypass vulnerability that allows access to debugging functionality. The connected records corroborate that the issue enables bypass of Secure Boot protections, with the primary impact described as compromising confidentiality (C High) while ...

CVE-2019-1321

CVE-2019-1321 : An elevation-of-privilege flaw in Windows CloudStore occurs when a Discretionary Access Control List (DACL) is mishandled. Technical description across connected documents confirms the issue is a local-elevation vulnerability in Windows CloudStore. The NVD entry lists CVSS results...

CVE-2019-1345

Technical details (affected product/version/patch) for CVE-2019-1345 are not publicly provided in the connected documents. The initial text notes a Windows kernel information disclosure but lacks specific vendor/product/version or mitigation details; monitor for updates.

CVE-2019-1359

CVE-2019-1359 is a remote code-execution issue in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected updates state that security fixes in October 2019 (KB4519990/4519998/4519985/4519338 and related MSKBs) include Microsoft JET Database Engine remediation a...

CVE-2020-0641

CVE-2020-0641 affects Windows Media Service and enables elevation of privilege by allowing a logged-on attacker to create a file in an arbitrary location. The vulnerability is referenced in NVD with local, low-attack complexity conditions and high impact (confidentiality, integrity, availability)...

CVE-2020-0704

The CVE-2020-0704 entry concerns a Windows Wireless Network Manager Elevation of Privilege vulnerability. The affected component is the Windows Wireless Network Manager, where memory is improperly handled. The root cause is a memory handling issue that allows an attacker who already has code exec...

CVE-2020-0739

CVE-2020-0739 is an elevation-of-privilege vulnerability in Windows where dssvc.dll improperly handles file creation, enabling file overwrite/creation in secured locations. The CVE description confirms this as a Windows privilege issue, distinct from CVE-2020-0737. Connected sources provide the c...

CVE-2020-0896

Technical details about CVE-2020-0896 are not provided in the connected documents. Public information in these sources does not specify affected products, root cause, or fixes. Monitor for updates.

CVE-2020-0999

Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.

CVE-2020-1008

CVE-2020-1008 describes a Remote Code Execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. The connected KB4549951 article references fixes related to the JET Database Engine within Windows 10 builds 18362.778/18363.778, but does not provide a produc...

CVE-2020-1030

Technical details about CVE-2020-1030 are not publicly provided in the connected documents. The initial entry describes a local elevation of privilege via the Windows Print Spooler but lacks explicit product/version/root cause specifics beyond that. Monitor for updates.

CVE-2020-1052

Technical details for CVE-2020-1052 (ssdpsrv.dll memory handling vulnerability) are not provided in the connected documents. Monitor for updates; no public exploit specifics, affected versions, root cause, or remediation details are given here.

CVE-2020-1115

The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...

CVE-2020-1272

CVE-2020-1272 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer component is affected by improper input sanitization that leads to insecure library loading, enabling a locally authenticated attacker to execute arbitrary code with elevated system privileges. Exploi...

CVE-2020-1400

CVE-2020-1400 is a Jet Database Engine RCE in Windows: the Jet DB Engine improperly handles in-memory objects, enabling remote code execution. Exploitation requires a user to open a specially crafted file or visit a malicious website. Connected coverage notes this CVE under Jet DB Engine RCEs but...

CVE-2020-1468

CVE-2020-1468: Information disclosure in Windows GDI. The Windows GDI component improperly discloses memory contents, enabling partial confidentiality impact. Connected CNVD entry corroborates Windows/Windows Server information disclosure presence; no vendor/product patch details are provided in ...

CVE-2020-1546

CVE-2020-1546 is an elevation-of-privilege vulnerability in Windows Backup Engine caused by improper memory handling. An attacker must first gain code execution on the victim, then execute a crafted application to elevate privileges. Microsoft’s security update fixes memory handling in the Window...

CVE-2020-16997

Technical details about CVE-2020-16997 are not provided in the connected documents. The Initial Description is generic; no affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2020-17043

Technical details for CVE-2020-17043 are not provided in the supplied documents. Public information is limited to a general vulnerability description; no product/version/root-cause/exploit details are included. Monitor for updates from official advisories.

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2021-26415

CVE-2021-26415 affects the Windows Installer component and is described as a Windows privilege-elevation vulnerability. The connected documents confirm a local, low-privilege escalation path with no user interaction required, leveraging improper handling in Windows Installer. The CVE is associate...

CVE-2021-28349

Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.

CVE-2022-22000

Technical details about CVE-2022-22000 are not provided in the connected documents. The available sources confirm the vulnerability label but do not document affected products, root cause, or fixes here. Monitor for updates.

CVE-2022-35767

Technical details are not provided in the supplied connected documents for CVE-2022-35767. Public disclosure, affected products, exploit status, and fixes are not specified here; monitor for updates.

CVE-2017-0299

The CVE-2017-0299 entry describes a Windows kernel information disclosure vulnerability in the NT kernel affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2012/2016, Windows 10 various builds, and more). The issue allows an authenticated attacker to obtain informatio...

CVE-2017-8682

CVE-2017-8682 is a Win32k Graphics Remote Code Execution issue where remote code could be executed by mis-handling embedded fonts. Affected products include multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 10 1511/1607/1703, Server 2012/2016) and Office Word Viewer/Office 20...

CVE-2018-0882

CVE-2018-0882 affects Windows 10 (versions 1607, 1703, 1709) and Windows Server 2016/1709, due to how the Desktop Bridge virtual registry is managed. This creates a local elevation-of-privilege condition. The CIRCL/CVE references indicate exploitation evidence (Exploit-DB: 44315). Public technica...

CVE-2018-0890

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2018-8211

CVE-2018-8211 describes a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session. Affected products listed in the sources include Windows 10 and Windows 10 Server variants. The vulnerability is characterized as a b...

CVE-2018-8335

Technical details about CVE-2018-8335 are not publicly provided in the connected documents. Monitor for updates.

CVE-2018-8612

CVE-2018-8612 is a Denial of Service vulnerability in the Connected User Experiences and Telemetry Service of Windows. The issue arises when the service fails to validate certain function values, enabling a local attacker to cause an availability impact on affected systems. Affected products incl...

CVE-2019-0788

Technical details for CVE-2019-0788 are not provided in the supplied documents. The connected MS blog discusses general endpoint network mitigations and related RDP issues but does not specify affected components, versions, root cause, or fixes for this CVE. Monitor for updates.

CVE-2019-0965

The CVE-2019-0965 issue affects Microsoft Windows Hyper-V on a host server, where the host fails to properly validate input from a guest OS. According to connected records, a specially crafted application running on a guest could trigger Hyper-V to execute arbitrary code on the host. The vulnerab...

CVE-2019-1395

CVE-2019-1395 denotes a Windows Win32k elevation-of-privilege vulnerability where the Win32k component mishandles objects in memory. Affects Windows with local access and low attack complexity, enabling complete confidentiality, integrity, and availability compromise for the attacker. The entry s...

CVE-2019-1407

Technical details for CVE-2019-1407 are not publicly available in the provided Connected documents. Monitor for updates; no specifics on affected products/versions, root cause, impact, or fixes are included here.

CVE-2019-1456

The CVE-2019-1456 entry describes a remote code execution vulnerability in Microsoft Windows where the Windows Adobe Type Manager Library fails to properly handle specially crafted OpenType fonts. Affected component: Windows Adobe Type Manager Library; root cause: improper handling of OpenType fo...

CVE-2020-0724

Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.

CVE-2020-0794

CVE-2020-0794 is a Windows denial-of-service vulnerability caused by improper handling of memory objects. The CVE entry indicates local attack vector with low complexity and no authentication, resulting in availability impact (DoS). Public records in the connected documents reference Windows secu...

CVE-2020-0807

Technical details for CVE-2020-0807 are not provided in the supplied documents. Monitor for updates.

CVE-2020-0849

Technical details for CVE-2020-0849 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0904

CVE-2020-0904 is a denial-of-service vulnerability affecting Microsoft Hyper-V. The issue arises when Hyper-V fails to properly validate specific malicious data originating from a user on a guest OS, potentially allowing an authenticated attacker inside a VM (with privileged guest access) to trig...

CVE-2020-0965

CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...

CVE-2020-1004

Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.

CVE-2020-1435

The CVE-2020-1435 entry refers to a remote code execution in the Windows Graphics Device Interface (GDI), via how GDI/GDI+ handles objects in memory. The connected CNVD-2021-67491 description confirms the root cause as a memory-handling problem in the Windows GDI that can be exploited to execute ...

CVE-2020-1548

The CVE-2020-1548 entry concerns a memory-handling information disclosure in the Windows WaasMedic Service. The vulnerability requires an attacker to first gain execution on the target, then run a crafted application to disclose memory. The affected component is Windows WaasMedic Service; the und...