CVE-2022-44674

CVE-2022-44674 is a Windows Bluetooth Driver information disclosure vulnerability. The CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and an unchanged scope; confidentiality impact is High. Exploitation would ...

CVE-2016-0075

CVE-2016-0075 affects the Windows kernel on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). It enables a local attacker to gain privileges by a crafted application that calls a kernel API to read sensitive information from the registry. Exploit PoCs exist (...

CVE-2016-7274

CVE-2016-7274 concerns the Windows Uniscribe component (usp10.dll). The issue stems from an integer/heap-related vulnerability in the LoadUvsTable() function that could enable remote code execution when processing untrusted font data via a crafted web site. Public analyses (e.g., Google Project Z...

CVE-2017-0285

CVSS context : CVE-2017-0285 is an information-disclosure vulnerability in Windows Uniscribe. The connected document KLA11039 lists an information-disclosure vulnerability in Windows Uniscribe that can be exploited remotely via specially crafted documents to obtain sensitive information. What is ...

CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2017-8708

CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...

CVE-2018-0966

CVE-2018-0966 is a Device Guard Security Feature Bypass in Microsoft Windows. The vulnerability arises when Device Guard inadequately validates an untrusted file, enabling a security feature bypass on affected platforms. Affected products include Windows 10 and Windows Server 2016/Windows Server ...

CVE-2018-8121

Technical details for CVE-2018-8121 are not publicly available in the provided connected documents. No specific affected products, root cause, impacts, or remediation are described here; monitor for updates.

CVE-2018-8490

CVE-2018-8490 is a remote code execution vulnerability in Windows Hyper-V where a host fails to properly validate input from a guest OS user. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server variants. Root cause (as described): improper input validation in Hyper-V...

CVE-2018-8506

The CVE-2018-8506 entry affects Microsoft Windows Codecs Library. Root cause: improper handling of objects in memory, leading to information disclosure. An attacker could exploit this by persuading a user to open a specially crafted image file, potentially exposing sensitive information. The vuln...

CVE-2019-1078

CVE-2019-1078 is a Windows Graphics Component information-disclosure vulnerability. It stems from the component improperly handling memory objects, allowing an attacker to obtain information that could help compromise the system. An authenticated attacker could exploit this by running a specially...

CVE-2019-1212

CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...

CVE-2020-0641

CVE-2020-0641 affects Windows Media Service and enables elevation of privilege by allowing a logged-on attacker to create a file in an arbitrary location. The vulnerability is referenced in NVD with local, low-attack complexity conditions and high impact (confidentiality, integrity, availability)...

CVE-2020-0785

CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...

CVE-2020-0793

CVE-2020-0793 is an elevation-of-privilege vulnerability affecting the Diagnostics Hub Standard Collector Service, where improper handling of file operations enables local attacker exploitation. The CVSSv3.1 vector indicates LOCAL access, LOW attack complexity, LOW privileges required, and NONE u...

CVE-2020-0865

CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...

CVE-2020-0960

CVE-2020-0960 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects. The connected Microsoft KB4549951 entry confirms that a security update addressing the JET Database Engine was released (OS builds 18362.778/18363.778) and notes guida...

CVE-2020-1030

Technical details about CVE-2020-1030 are not publicly provided in the connected documents. The initial entry describes a local elevation of privilege via the Windows Print Spooler but lacks explicit product/version/root cause specifics beyond that. Monitor for updates.

CVE-2020-1115

The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...

CVE-2020-1234

CVE-2020-1234 is described in the CNVD-2021-31216 entry as a Windows Error Reporting elevation of privilege vulnerability that arises from improper handling of memory objects, enabling an attacker to gain elevated privileges by running a specially crafted application. The initial document also no...

CVE-2020-1511

CVE-2020-1511 : A privilege-elevation vulnerability in the Connected User Experiences and Telemetry Service arises from improper handling of file operations. An attacker could run a specially crafted application on the victim’s system to execute code in an elevated context. The threat is mitigate...

CVE-2020-1526

Technical details for CVE-2020-1526 are not publicly provided in the supplied documents; no specifics on affected products, root cause, or remediation are present. Monitor for updates.

CVE-2020-17090

Technical details about CVE-2020-17090, including affected product versions, root cause, and fix, are not publicly available in the provided documents. Monitor for updates from NVD, OSV, and vendor advisories.

CVE-2021-1642

CVE-2021-1642 affects Windows AppX Deployment Extensions and is described as an Elevation of Privilege vulnerability. CVSSv3.1 score 7.8 (HIGH) with local attack vector, low complexity, and privileges required LOW; impact to confidentiality, integrity, and availability is HIGH. Connected document...

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-43233

CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...

CVE-2022-21998

CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...

CVE-2022-22000

Technical details about CVE-2022-22000 are not provided in the connected documents. The available sources confirm the vulnerability label but do not document affected products, root cause, or fixes here. Monitor for updates.

CVE-2022-22711

Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.

CVE-2022-35833

Technical details about CVE-2022-35833 are not publicly available in the provided documents. The sources mention a Windows Secure Channel Denial of Service vulnerability, but no specifics on affected products, versions, impact, or fixes are included.

CVE-2022-37973

CVE-2022-37973 is a Windows Local Session Manager (LSM) Denial of Service vulnerability with a CVSS v3.1 base score of 7.7 (HIGH). The initial documents indicate a network-based DoS risk affecting Windows LSM, but do not provide exploit specifics, affected versions, or concrete remediation steps ...

CVE-2022-44673

CVE-2022-44673 affects Windows CSRSS (Windows Client Server Run-time Subsystem) with Elevation of Privilege. The provided data lists a CVSSv3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH confidentiality, integrity, and availability impact, and LOW privileges required with no user int...

CVE-2023-21701

CVE-2023-21701 is described as a Microsoft PEAP Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (Network attack, no user interaction, high impact to availability). The provided documents do not include concrete exploit details, affected product versions, root cause, or a confir...

CVE-2016-7218

Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...

CVE-2017-0058

CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...

CVE-2017-0278

CVE-2017-0278 corresponds to a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The issue is triggered by how the SMBv1 server handles certain requests, affecting multiple Windows editions (e.g., Windows 7, Windows 8.1, Windows Server 2008/2012/2016, and related .NET env...

CVE-2017-0282

CVE-2017-0282 is an information disclosure vulnerability in the Windows Uniscribe component. It affects Windows and Office products listed in the initial entry, with memory contents disclosure possible via specially crafted documents. Public sources in the connected materials confirm an informati...

CVE-2017-11783

CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...

CVE-2017-11830

CVE-2017-11830 is a Windows Device Guard security feature bypass. Connected sources describe a TOCTOU race in the WDAC cache signing path (CiSetFileCache) that can allow an unsigned file to appear signed. The issue was addressed previously via NtSetCachedSigningLevel, but public reports (Exploit-...

CVE-2018-0890

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2018-0902

CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...

CVE-2018-8116

The provided connected documents confirm CVE-2018-8116 is a DoS vulnerability in the Windows Graphics Component, arising from how the component handles objects in memory and affecting multiple Windows versions (e.g., Windows 7, Windows 10, server editions). Concrete details include the affected p...

CVE-2018-8132

Technical details about CVE-2018-8132 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2019-1046

CVE-2019-1046 affects the Windows GDI component, where improper handling of memory allows information to be disclosed to an attacker. This vulnerability can be triggered by user actions such as opening a specially crafted document or visiting an untrusted webpage, leading to potential further com...

CVE-2019-1186

CVE-2019-1186 affects Windows via wcmsvc.dll, where improper handling of memory objects enables local privilege escalation. A locally authenticated attacker can run a crafted application to execute code with elevated privileges. A security update patches wcmsvc.dll to correctly handle memory obje...

CVE-2019-1358

CVE-2019-1358 is a Windows Jet Database Engine Remote Code Execution vulnerability. The issue arises from improper handling of objects in memory within the JET Database Engine, enabling a remote attacker to potentially execute code. Connected Microsoft KB updates (e.g., KB4519990, KB4519998, KB45...

CVE-2019-1456

The CVE-2019-1456 entry describes a remote code execution vulnerability in Microsoft Windows where the Windows Adobe Type Manager Library fails to properly handle specially crafted OpenType fonts. Affected component: Windows Adobe Type Manager Library; root cause: improper handling of OpenType fo...

CVE-2019-1488

Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.

CVE-2020-0703

CVE-2020-0703 affects the Windows Backup Service. It is an Elevation of Privilege vulnerability caused by improper handling of file operations. attacker must first gain execution on the victim system; the description does not provide a vendor-specific fix or version details in the provided docume...

CVE-2020-0737

CVE-2020-0737 is a Windows elevation-of-privilege vulnerability tied to how tapisrv.dll handles in-memory objects. The root cause is memory-objects handling in this DLL, enabling an attacker who can supply or manipulate objects to execute code with elevated privileges on affected Windows systems....