CVE-2020-0849

Technical details for CVE-2020-0849 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0886

Technical details about CVE-2020-0886 (Windows Storage Services elevation of privilege) are not present in the provided connected documents; no product/version specifics or fixes are disclosed here. Monitor for official updates.

CVE-2020-0964

CVE-2020-0964 is a remote code execution vulnerability in Microsoft Windows GDI+ where memory objects are mishandled by the Graphics Device Interface. The issue affects GDI+ processing and can allow an attacker to run arbitrary code on a vulnerable system. Microsoft’s April 2020 Patch Tuesday upd...

CVE-2020-1080

Windows Hyper-V Elevation of Privilege (CVE-2020-1080) is documented as an elevation of privilege in Hyper-V when handling objects in memory on a host server. Exploitation is described as local (requires access to the host), with the flaw not by itself enabling arbitrary code execution but potent...

CVE-2020-1152

Technical details about CVE-2020-1152 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The entry’s description is present, but no concrete technical details are supplied. Monitor for updates.

CVE-2020-1272

CVE-2020-1272 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer component is affected by improper input sanitization that leads to insecure library loading, enabling a locally authenticated attacker to execute arbitrary code with elevated system privileges. Exploi...

CVE-2020-1278

CVE-2020-1278 relates to an elevation of privilege in the Diagnostics Hub Standard Collector Service due to improper file operations. The vulnerability enables local privilege elevation, as the service handles files in a way that can be exploited by an authenticated attacker with access to the sy...

CVE-2020-1381

CVE-2020-1381 pertains to the Windows Graphics Component and is an elevation-of-privilege vulnerability caused by improper handling of objects in memory. The issue could allow a local attacker to run processes in an elevated context by executing a specially crafted application on the affected sys...

CVE-2020-1486

The CVE-2020-1486 entry describes a Windows kernel Elevation of Privilege vulnerability caused by the kernel’s improper handling of objects in memory. An attacker who can log on could run arbitrary code in kernel mode, potentially installing programs, stealing data, or creating accounts with full...

CVE-2020-1508

CVE-2020-1508 affects Windows Media Audio Decoder and is described as a remote code execution vulnerability. The connected document (AVLEONOV article) lists Windows Media Audio Decoder as vulnerable under the September 2020 Patch Tuesday with multiple CVEs, including CVE-2020-1508, indicating an ...

CVE-2020-1545

CVE-2020-1545 describes an Elevation of Privilege in the Windows Backup Engine caused by improper handling of memory. The vulnerability requires an attacker to gain execution on the target before applying a crafted command to elevate privileges. Microsoft-reported fix mitigates by correcting how ...

CVE-2021-31972

Technical details about CVE-2021-31972 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, vulnerability scope, and fixes.

CVE-2021-42288

CVE-2021-42288 is identified as Windows Hello Security Feature Bypass Vulnerability. NVD CVSS details: CVSSv3.1 base score 6.1 (PHYSICAL access, NONE privileges, UI NONE; C:H/I:H/A:N; Confidentiality/Integrity HIGH). Connected docs corroborate this CVE in Microsoft KB updates KB5007186 (OS builds...

CVE-2021-43228

CVE-2021-43228 is a SymCrypt Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (HIGH), vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is described in multiple sources as a Denial of Service vulnerability and is associated with Microsoft’s SymCrypt component. The connected ...

CVE-2021-43240

Technical details about CVE-2021-43240 are not publicly provided in the supplied documents. No affected products, root cause, fixes, or exploitation details are specified here. Monitor official disclosures and updates.

CVE-2023-21697

Technical details about CVE-2023-21697 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and Vulners for affected products, exploit information, and remediation.

CVE-2023-21702

CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...

CVE-2016-0171

CVE-2016-0171 is a Windows kernel‑mode elevation of privilege vulnerability affecting Win32k in several Windows releases (Vista SP2 to Windows 10 1511). The entry describes that a crafted user‑mode application can trigger a local privilege escalation via a flaw in the Win32k subsystem, with explo...

CVE-2017-0284

CVE-2017-0284 is an information-disclosure vulnerability in Windows Uniscribe that can disclose memory contents. It affects Windows and Office components (notably Uniscribe) across multiple OS releases (Windows 7/8.1/10, Windows Server variants, Office 2007/2010). The root cause is improper discl...

CVE-2017-8495

CVE-2017-8495 is a Kerberos security feature bypass in which Extended Protection for Authentication can be circumvented by tampering with the SNAME field during ticket exchange (Orpheus’ Lyre). Affected Windows family includes Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1, Windows RT 8.1...

CVE-2018-0884

Technical details for CVE-2018-0884 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and related advisories.

CVE-2018-0885

CVE-2018-0885 : DoS in the Microsoft Hyper-V Network Switch triggered by unvalidated input from a guest OS. Affected: 64‑bit Windows Server 2008 SP2/ R2 SP1; Windows Server 2012/R2; Windows 10 (various builds); Windows Server 2016; and Windows Server version 1709. Root cause is described as impro...

CVE-2018-0899

Technical details for CVE-2018-0899 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-1003

CVE-2018-1003 is a buffer overflow vulnerability in the Microsoft JET Database Engine that could enable remote code execution on affected Windows systems (e.g., Windows 7, Windows 10, Windows Server variants). The connected OSV entry confirms the same description; no concrete exploit details or s...

CVE-2018-8221

The connected CNVD entry CNVD-2018-12041 confirms a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows 10 and Windows Server 2016 . The underlying issue is a bypass of the Device Guard/Code I...

CVE-2018-8492

CVE-2018-8492 is a Device Guard Code Integrity Policy Security Feature Bypass vulnerability in Windows. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server editions. The root cause is a security feature bypass in Device Guard that could allow an a...

CVE-2019-0961

The CVE-2019-0961 entry concerns Microsoft Windows GDI (Graphics Device Interface). The vulnerability arises from improper handling of memory objects, leading to information disclosure of memory contents in GDI. Affected component: Windows GDI in Microsoft Windows. Impact, as stated, is informati...

CVE-2019-1179

CVE-2019-1179 describes an elevation-of-privilege flaw in how unistore.dll handles objects in memory. A locally authenticated attacker could execute code with elevated permissions by running a crafted application. The vulnerability is addressed by a security update that ensures unistore.dll prope...

CVE-2019-1267

CVE-2019-1267 describes an elevation of privilege in Microsoft Compatibility Appraiser. A local attacker can exploit a vulnerable configuration file through symbolic/link attacks to gain higher privileges. Documented impact is elevation of privilege with local access required; CVSS scores indicat...

CVE-2019-1270

This CVE (CVE-2019-1270) describes an elevation-of-privilege vulnerability in the Windows Store Installer. The root cause is a symbolic-link attack on the WindowsApps directory, allowing misuse of the Windows Store Installer to escalate privileges locally. The issue is tied to the Windows Store I...

CVE-2019-1311

IBM Security Bulletin: CVE-2019-1311 is acknowledged within IBM Spectrum Symphony 7.3.1, with an interim fix that upgrades third‑party libraries to address the vulnerability. The bulletin confirms affected product version 7.3.1 and lists a remediation build: sym-7.3.1-build600124. The described C...

CVE-2019-1359

CVE-2019-1359 is a remote code-execution issue in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected updates state that security fixes in October 2019 (KB4519990/4519998/4519985/4519338 and related MSKBs) include Microsoft JET Database Engine remediation a...

CVE-2019-1407

Technical details for CVE-2019-1407 are not publicly available in the provided Connected documents. Monitor for updates; no specifics on affected products/versions, root cause, impact, or fixes are included here.

CVE-2020-0617

CVE-2020-0617 relates to a Microsoft Hyper-V Denial of Service vulnerability. The CNVD entry describes that the vulnerability stems from Hyper-V Virtual PCI on the host failing to properly validate input submitted by privileged users from a guest OS, allowing an attacker with privileged access an...

CVE-2020-0791

CVE-2020-0791 is a Windows Graphics Component privilege-escalation vulnerability. Attackerkb aggregations cite a kernel-mode out-of-bounds dereference in win32kfull!vStrWrite01 that can be triggered from user-mode via gdi32!StretchBlt, potentially enabling arbitrary code execution with the caller...

CVE-2020-0911

CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...

CVE-2020-1008

CVE-2020-1008 describes a Remote Code Execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. The connected KB4549951 article references fixes related to the JET Database Engine within Windows 10 builds 18362.778/18363.778, but does not provide a produc...

CVE-2020-1211

CVE-2020-1211 is confirmed in OSV as an elevation of privilege in the Connected Devices Platform Service. The description states the vulnerability stems from how the service handles objects in memory, enabling an attacker to gain elevated code execution privileges. The Connected Devices Platform ...

CVE-2020-1435

The CVE-2020-1435 entry refers to a remote code execution in the Windows Graphics Device Interface (GDI), via how GDI/GDI+ handles objects in memory. The connected CNVD-2021-67491 description confirms the root cause as a memory-handling problem in the Windows GDI that can be exploited to execute ...

CVE-2020-1513

CVE-2020-1513 : Elevation of privilege in the Windows CSC Service caused by improper memory handling. An attacker must gain execution locally and run a crafted application to escalate privileges. The fix is a security update that corrects how the CSC Service handles memory. No additional technica...

CVE-2020-1521

CVE-2020-1521 corresponds to an Elevation of Privilege in Windows Speech Runtime caused by improper memory handling. The initial and connected sources consistently state that an attacker must first gain execution on the target to run a crafted application and elevate privileges, with a security u...

CVE-2020-1598

Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.

CVE-2020-16876

CVE-2020-16876 refers to an elevation of privilege in the Windows Application Compatibility Client Library due to improper handling of registry operations. The vulnerability requires code execution on the victim system and the attacker must subsequently run a specially crafted application to gain...

CVE-2020-16890

CVE-2020-16890 is a Windows kernel elevation-of-privilege vulnerability where the kernel mishandles objects in memory, allowing a locally authenticated attacker to run arbitrary code in kernel mode after logging on and running a crafted application. The exploit could lead to full system compromis...

CVE-2020-16901

CVE-2020-16901 – Windows Kernel Information Disclosure : An information-disclosure vulnerability occurs when the Windows kernel improperly initializes objects in memory. An authenticated attacker could run a specially crafted application to obtain information that could aid further compromise. Th...

CVE-2020-16919

CVE-2020-16919 : An information disclosure vulnerability exists in the Windows Enterprise App Management Service due to improper handling of certain file operations. An attacker with unprivileged local access could read arbitrary files. The security update addresses this by ensuring the service p...

CVE-2020-16974

Technical details about CVE-2020-16974 (affected product/version, root cause, impact, or patch specifics) are not provided in the connected documents. Monitor for updates.

CVE-2020-17014

CVE-2020-17014 is a Windows Print Spooler elevation of privilege vulnerability. The NVD record lists a local, low-complexity attack with LOW privileges required and no user interaction, yielding HIGH integrity and availability impact (CVSS v3.1 base score 7.1; v2 base score 6.6). The provided doc...

CVE-2021-1659

No public technical details for CVE-2021-1659 are provided in the supplied documents. Monitor for updates.

CVE-2021-28349

Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.