CVE-2020-0960

CVE-2020-0960 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects. The connected Microsoft KB4549951 entry confirms that a security update addressing the JET Database Engine was released (OS builds 18362.778/18363.778) and notes guida...

CVE-2020-0964

CVE-2020-0964 is a remote code execution vulnerability in Microsoft Windows GDI+ where memory objects are mishandled by the Graphics Device Interface. The issue affects GDI+ processing and can allow an attacker to run arbitrary code on a vulnerable system. Microsoft’s April 2020 Patch Tuesday upd...

CVE-2020-1030

Technical details about CVE-2020-1030 are not publicly provided in the connected documents. The initial entry describes a local elevation of privilege via the Windows Print Spooler but lacks explicit product/version/root cause specifics beyond that. Monitor for updates.

CVE-2020-1257

Technical details about CVE-2020-1257 are not provided in the connected documents. Public aliases, affected components, impact or fixes are not specified here; monitor for authoritative updates.

CVE-2020-1272

CVE-2020-1272 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer component is affected by improper input sanitization that leads to insecure library loading, enabling a locally authenticated attacker to execute arbitrary code with elevated system privileges. Exploi...

CVE-2020-1293

CVE-2020-1293 is an Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector Service where file operations are mishandled. The connected AVLeonarov item places CVE-2020-1293 under Diagnostics Hub Standard Collector EOP and lists it alongside CVE-2020-1257 and CVE-2020-1278, but ...

CVE-2020-1508

CVE-2020-1508 affects Windows Media Audio Decoder and is described as a remote code execution vulnerability. The connected document (AVLEONOV article) lists Windows Media Audio Decoder as vulnerable under the September 2020 Patch Tuesday with multiple CVEs, including CVE-2020-1508, indicating an ...

CVE-2020-1513

CVE-2020-1513 : Elevation of privilege in the Windows CSC Service caused by improper memory handling. An attacker must gain execution locally and run a crafted application to escalate privileges. The fix is a security update that corrects how the CSC Service handles memory. No additional technica...

CVE-2020-16998

Technical details about CVE-2020-16998 are not publicly provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, root causes, and remediation guidance.

CVE-2020-17014

CVE-2020-17014 is a Windows Print Spooler elevation of privilege vulnerability. The NVD record lists a local, low-complexity attack with LOW privileges required and no user interaction, yielding HIGH integrity and availability impact (CVSS v3.1 base score 7.1; v2 base score 6.6). The provided doc...

CVE-2020-17057

CVE-2020-17057 affects Windows Win32k via elevation of privilege. A PoC/exploit exists in a connected document, and Microsoft issued a patch on 2020-11-10 to fix the issue. The exact affected product/version details and vulnerability root cause are not fully enumerated in the provided sources, bu...

CVE-2021-1673

CVE-2021-1673 is described as a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server. The CVE entry lists a high-severity CVSS score (3.1) of 8.8 with network access, low attack complexity, and no user interaction, implying reliable RC...

CVE-2021-31960

CVE-2021-31960 affects the Windows Bind Filter Driver and is an information-disclosure vulnerability that can be exploited locally (attack vector: local) to obtain sensitive data. Reported details show low privileges required (PR:L) with no user interaction, confidentiality impact high. Public ex...

CVE-2021-41346

CVE-2021-41346 refers to a security feature bypass vulnerability in the Windows Console Window Host. Exploitation is local (AV:L, UI:N, integrity/confidentiality/availability impact: partial), effectively bypassing security controls and potentially enabling privilege escalation or data exposure a...

CVE-2021-42276

Technical details about CVE-2021-42276 are not provided in the supplied connected documents. Please monitor for updates in the sources list to learn affected products, root cause, impact, and remediation.

CVE-2021-43228

CVE-2021-43228 is a SymCrypt Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (HIGH), vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is described in multiple sources as a Denial of Service vulnerability and is associated with Microsoft’s SymCrypt component. The connected ...

CVE-2022-26916

CVE-2022-26916 describes a remote code execution vulnerability in the Windows Fax Compose Form. The entry lists a CVSSv3.1 base score of 7.8 (HIGH) with a LOCAL exploit vector, meaning exploitation requires local access, and the vector indicates user interaction is required. The risk and scope ar...

CVE-2022-34726

Technical details (affected component, root cause, impact, and fix) are not provided in the supplied documents; no concrete technical specifics are available. Monitor for official disclosures and updates.

CVE-2022-35833

Technical details about CVE-2022-35833 are not publicly available in the provided documents. The sources mention a Windows Secure Channel Denial of Service vulnerability, but no specifics on affected products, versions, impact, or fixes are included.

CVE-2022-37997

CVE-2022-37997 is a local-elevation-of-privilege vulnerability in the Windows Graphics Component. It is documented as affecting the Microsoft Windows Graphics Component with a CVSS v3.1 base score of 7.8 (High) and an attack vector of LOCAL with LOW attack complexity, requiring LOW privileges and...

CVE-2022-44669

Technical details about CVE-2022-44669 are not provided in the connected documents. The sources mention Windows Error Reporting elevation of privilege but do not disclose affected components, versions, or fixes. Monitor for updates.

CVE-2022-44673

CVE-2022-44673 affects Windows CSRSS (Windows Client Server Run-time Subsystem) with Elevation of Privilege. The provided data lists a CVSSv3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH confidentiality, integrity, and availability impact, and LOW privileges required with no user int...

CVE-2016-3373

CVE-2016-3373 is a Windows kernel local elevation-of-privilege vulnerability. The Windows Kernel API improperly restricts access to registry information, enabling a locally authenticated attacker to obtain sensitive user account data via a crafted application. Affected products include Windows Vi...

CVE-2016-7218

Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...

CVE-2016-7274

CVE-2016-7274 concerns the Windows Uniscribe component (usp10.dll). The issue stems from an integer/heap-related vulnerability in the LoadUvsTable() function that could enable remote code execution when processing untrusted font data via a crafted web site. Public analyses (e.g., Google Project Z...

CVE-2017-0278

CVE-2017-0278 corresponds to a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The issue is triggered by how the SMBv1 server handles certain requests, affecting multiple Windows editions (e.g., Windows 7, Windows 8.1, Windows Server 2008/2012/2016, and related .NET env...

CVE-2017-11783

CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...

CVE-2017-8682

CVE-2017-8682 is a Win32k Graphics Remote Code Execution issue where remote code could be executed by mis-handling embedded fonts. Affected products include multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 10 1511/1607/1703, Server 2012/2016) and Office Word Viewer/Office 20...

CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2018-0885

CVE-2018-0885 : DoS in the Microsoft Hyper-V Network Switch triggered by unvalidated input from a guest OS. Affected: 64‑bit Windows Server 2008 SP2/ R2 SP1; Windows Server 2012/R2; Windows 10 (various builds); Windows Server 2016; and Windows Server version 1709. Root cause is described as impro...

CVE-2018-0890

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2018-8204

CVE-2018-8204 is a Device Guard local security bypass vulnerability that could allow an attacker to inject malicious code into a Windows PowerShell session by bypassing the Code Integrity policy. Affected software includes Windows Server 2016 and Windows 10/Windows 10 Servers. The root cause is a...

CVE-2018-8212

The CVE-2018-8212 entry describes a security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow an attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 Servers. The underlying is...

CVE-2018-8335

Technical details about CVE-2018-8335 are not publicly provided in the connected documents. Monitor for updates.

CVE-2018-8490

CVE-2018-8490 is a remote code execution vulnerability in Windows Hyper-V where a host fails to properly validate input from a guest OS user. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server variants. Root cause (as described): improper input validation in Hyper-V...

CVE-2018-8492

CVE-2018-8492 is a Device Guard Code Integrity Policy Security Feature Bypass vulnerability in Windows. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server editions. The root cause is a security feature bypass in Device Guard that could allow an a...

CVE-2019-0984

The CVE-2019-0984 entry concerns a Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. The issue arises from improper handling of memory objects in CLFS, enabling an attacker who can log on to the system to run a specially crafted application with elevated privilege...

CVE-2019-1085

Technical details for CVE-2019-1085 are not provided in the connected documents. The initial description mentions a Windows WLAN Service elevation of privilege vulnerability but includes no vendor/product/version specifics, exploit info, or remediation details. Monitor for updates and refer to of...

CVE-2019-1158

The CVE-2019-1158 entry corresponds to a Windows Graphics Device Interface (GDI) information disclosure vulnerability. Connected sources describe it as an issue in GDI’s handling of memory, specifically involving EMF file parsing, which can allow an attacker to obtain sensitive information. Explo...

CVE-2019-1321

CVE-2019-1321 : An elevation-of-privilege flaw in Windows CloudStore occurs when a Discretionary Access Control List (DACL) is mishandled. Technical description across connected documents confirms the issue is a local-elevation vulnerability in Windows CloudStore. The NVD entry lists CVSS results...

CVE-2019-1358

CVE-2019-1358 is a Windows Jet Database Engine Remote Code Execution vulnerability. The issue arises from improper handling of objects in memory within the JET Database Engine, enabling a remote attacker to potentially execute code. Connected Microsoft KB updates (e.g., KB4519990, KB4519998, KB45...

CVE-2020-0739

CVE-2020-0739 is an elevation-of-privilege vulnerability in Windows where dssvc.dll improperly handles file creation, enabling file overwrite/creation in secured locations. The CVE description confirms this as a Windows privilege issue, distinct from CVE-2020-0737. Connected sources provide the c...

CVE-2020-0794

CVE-2020-0794 is a Windows denial-of-service vulnerability caused by improper handling of memory objects. The CVE entry indicates local attack vector with low complexity and no authentication, resulting in availability impact (DoS). Public records in the connected documents reference Windows secu...

CVE-2020-0865

CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...

CVE-2020-1008

CVE-2020-1008 describes a Remote Code Execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. The connected KB4549951 article references fixes related to the JET Database Engine within Windows 10 builds 18362.778/18363.778, but does not provide a produc...

CVE-2020-1203

CVE-2020-1203 is an elevation of privilege affecting the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector, caused by improper handling of memory in affected objects. The description notes this CVE is distinct from CVE-2020-1202 and does not provide explicit affected ver...

CVE-2020-1208

CVE-2020-1208 is a remote code execution vulnerability in the Jet Database Engine when it improperly handles objects in memory. The connected updates indicate this issue is among Windows updates that address the Jet Database Engine (e.g., KB4560960) as part of multiple fixes, signaling a patch ex...

CVE-2020-1400

CVE-2020-1400 is a Jet Database Engine RCE in Windows: the Jet DB Engine improperly handles in-memory objects, enabling remote code execution. Exploitation requires a user to open a specially crafted file or visit a malicious website. Connected coverage notes this CVE under Jet DB Engine RCEs but...

CVE-2020-1521

CVE-2020-1521 corresponds to an Elevation of Privilege in Windows Speech Runtime caused by improper memory handling. The initial and connected sources consistently state that an attacker must first gain execution on the target to run a crafted application and elevate privileges, with a security u...

CVE-2020-1546

CVE-2020-1546 is an elevation-of-privilege vulnerability in Windows Backup Engine caused by improper memory handling. An attacker must first gain code execution on the victim, then execute a crafted application to elevate privileges. Microsoft’s security update fixes memory handling in the Window...