2974 matches found
CVE-2020-1381
CVE-2020-1381 pertains to the Windows Graphics Component and is an elevation-of-privilege vulnerability caused by improper handling of objects in memory. The issue could allow a local attacker to run processes in an elevated context by executing a specially crafted application on the affected sys...
CVE-2020-1436
CVE-2020-1436 concerns Windows font library handling of specially crafted fonts. Root cause: improper input handling in the font subsystem. Impact: remote code execution on affected Windows versions (excluding Windows 10 per the description). Connected sources confirm the vulnerability exists; no...
CVE-2020-1513
CVE-2020-1513 : Elevation of privilege in the Windows CSC Service caused by improper memory handling. An attacker must gain execution locally and run a crafted application to escalate privileges. The fix is a security update that corrects how the CSC Service handles memory. No additional technica...
CVE-2020-1526
Technical details for CVE-2020-1526 are not publicly provided in the supplied documents; no specifics on affected products, root cause, or remediation are present. Monitor for updates.
CVE-2020-1543
CVE-2020-1543 is an Elevation of Privilege in Windows Backup Engine caused by improper memory handling. An attacker who already has code execution on the victim system could run a crafted application to gain higher privileges. Microsoft’s security update fixes the vulnerability by correcting how ...
CVE-2020-16901
CVE-2020-16901 – Windows Kernel Information Disclosure : An information-disclosure vulnerability occurs when the Windows kernel improperly initializes objects in memory. An authenticated attacker could run a specially crafted application to obtain information that could aid further compromise. Th...
CVE-2021-24083
Technical details about CVE-2021-24083 are not provided in the connected documents. Public details are limited to the Windows Address Book RCE label; monitor for updates.
CVE-2021-28315
CVE-2021-28315 is a Windows Media Video Decoder Remote Code Execution Vulnerability. Public entries describe an RCE affecting Windows systems via the Windows Media Video Decoder component; CVSS metrics show a Local, Low-Complexity access with Partial confidentiality, integrity, and availability i...
CVE-2022-22717
CVE-2022-22717 is a Windows Print Spooler elevation-of-privilege vulnerability. Affected: Windows OS with Print Spooler; the provided docs do not specify the exact root cause. CVSSv3.1 base score 7.0 (HIGH), vector LOCAL, Privileges Required LOW, User Interaction NONE, and impacts to confidential...
CVE-2022-35832
CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...
CVE-2022-44677
CVE-2022-44677 is a Windows Projected File System Elevation of Privilege vulnerability. The CVSS 3.1 base metrics (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicate a local exploit that requires low privileges and no user interaction, with high impact on confidentiality, integrity, and availability. ...
CVE-2022-44683
Technical details for CVE-2022-44683 are not provided in the connected documents. No product, version, root cause, impact, or fix details are present. Monitor for updates.
CVE-2015-2506
The CVE-2015-2506 issue is a remote DoS in the Windows Adobe Type Manager Library (atmfd.dll) triggered by specially crafted OpenType fonts. The vulnerable component is the Adobe Type Manager Library integrated in Windows (atmfd.dll). Underlying cause is improper parsing/handling of OpenType font...
CVE-2016-7247
CVE-2016-7247 describes a Secure Boot component vulnerability that could allow physically proximate attackers to bypass Secure Boot by crafting a boot policy, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (versions 1511 and 1607), and Windows Server 2016. The Op...
CVE-2017-0058
CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...
CVE-2017-0184
Microsoft Hyper-V remote Denial of Service vulnerability (CVE-2017-0184) arises from improper validation of input from a privileged user on a guest OS, potentially allowing a guest to crash the host. Affected component: Hyper-V on Windows Server. Consequence: denial of service impacting host avai...
CVE-2018-0881
CVE-2018-0881 concerns a privilege-elevation flaw in the Microsoft Video Control component. The vulnerability stems from how objects are handled in memory, enabling an attacker who can log on and run a crafted application to execute code with elevated/system privileges on affected Windows release...
CVE-2018-0888
CVE-2018-0888 corresponds to a vulnerability in the Microsoft Hyper-V Network Switch where 64-bit Windows clients/servers (Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012/R2; Windows 10 versions 1511–1709; Windows Server 2016) are exposed to information disclos...
CVE-2018-0902
CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...
CVE-2018-0982
CVE-2018-0982 is a local-elevation-of-privilege flaw in the Windows Kernel API permission enforcement. Affected products per documents include Windows Server 2016, Windows 10, and Windows 10 Server. CVSS3 vector shows LOCAL attack, HIGH impact on confidentiality, integrity, and availability, with...
CVE-2018-8132
Technical details about CVE-2018-8132 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2018-8200
CVE-2018-8200 is a local security bypass in Windows Device Guard, enabling an attacker to inject malicious code into a PowerShell session by bypassing the Code Integrity Policy. Affected: Windows Server 2016, Windows 10 (and variants). Root cause: Device Guard Code Integrity Policy bypass vulnera...
CVE-2018-8221
The connected CNVD entry CNVD-2018-12041 confirms a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows 10 and Windows Server 2016 . The underlying issue is a bypass of the Device Guard/Code I...
CVE-2018-8239
CVE-2018-8239 — Windows GDI Information Disclosure Vulnerability affects Windows Server 2016, Windows 10, and Windows 10 Server variants. The root cause is that the Windows GDI component improperly discloses the contents of memory (an information-disclosure flaw). An attacker could exploit this b...
CVE-2018-8484
CVE-2018-8484 is an elevation of privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver where objects in memory are improperly handled. Affected products/versions (as per documents): Windows 10 and Windows Server editions listed (Windows 8.1, Windows 10, Windows 10 Servers, Windo...
CVE-2019-0942
CVE-2019-0942 concerns Windows 10 Unified Write Filter (UWF). The connected sources describe an elevation of privilege resulting from improper restriction of access to the registry within UWF. Affected component: UWF on Windows 10; root cause cited as registry access restriction flaw. Documented ...
CVE-2020-0614
Technical details about CVE-2020-0614 are not provided in the connected documents; no specifics on affected products, root cause, or remediation are available here. Monitor for updates.
CVE-2020-0717
Technical details for CVE-2020-0717 are not publicly provided in the supplied documents. No affected products/versions or remediation are specified here. Monitor for updates from official sources.
CVE-2020-0793
CVE-2020-0793 is an elevation-of-privilege vulnerability affecting the Diagnostics Hub Standard Collector Service, where improper handling of file operations enables local attacker exploitation. The CVSSv3.1 vector indicates LOCAL access, LOW attack complexity, LOW privileges required, and NONE u...
CVE-2020-0997
CVE-2020-0997 is a Windows Camera Codec Pack remote code execution vulnerability caused by improper handling of objects in memory. An attacker could execute arbitrary code in the context of the current user, potentially taking control if the user has admin rights. Exploitation requires the user t...
CVE-2020-1098
CVE-2020-1098 is a Windows privilege-escalation in the Shell infrastructure component where memory object handling could be improperly managed. An attacker must log on and run a crafted application to elevate, gaining control of the system in an elevated context. The issue is addressed by Microso...
CVE-2020-1486
The CVE-2020-1486 entry describes a Windows kernel Elevation of Privilege vulnerability caused by the kernel’s improper handling of objects in memory. An attacker who can log on could run arbitrary code in kernel mode, potentially installing programs, stealing data, or creating accounts with full...
CVE-2020-1598
Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.
CVE-2020-16876
CVE-2020-16876 refers to an elevation of privilege in the Windows Application Compatibility Client Library due to improper handling of registry operations. The vulnerability requires code execution on the victim system and the attacker must subsequently run a specially crafted application to gain...
CVE-2020-17036
CVE-2020-17036 corresponds to a Windows Function Discovery SSDP Provider Information Disclosure Vulnerability. The vulnerability affects Windows Function Discovery SSDP Provider and is described as an information disclosure issue. The provided documents do not include concrete technical details s...
CVE-2020-17097
Technical details (affected products, root cause, exploitability) for CVE-2020-17097 are not provided in the supplied documents. Monitor for updates.
CVE-2021-1642
CVE-2021-1642 affects Windows AppX Deployment Extensions and is described as an Elevation of Privilege vulnerability. CVSSv3.1 score 7.8 (HIGH) with local attack vector, low complexity, and privileges required LOW; impact to confidentiality, integrity, and availability is HIGH. Connected document...
CVE-2021-1731
Technical details about CVE-2021-1731 are not publicly provided in the connected documents. Monitor for updates from NVD/OSV/MSKB mentions to clarify affected product, root cause, and remediation.
CVE-2021-21552
CVE-2021-21552 affects Dell Wyse Windows Embedded System (WIE10 LTSC 2019 and earlier). The vulnerability is described as an improper authorization that could allow a local authenticated user with low privileges to bypass the restricted environment and perform unauthorized actions on the system. ...
CVE-2021-28443
Technical details about CVE-2021-28443 (affected Windows Console Driver DoS) are not provided in the connected documents. No product/version/root-cause/exploit or remediation details are disclosed here; monitor for official updates.
CVE-2021-43233
CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...
CVE-2021-43240
Technical details about CVE-2021-43240 are not publicly provided in the supplied documents. No affected products, root cause, fixes, or exploitation details are specified here. Monitor official disclosures and updates.
CVE-2022-21998
CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...
CVE-2022-26797
Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.
CVE-2022-37996
CVE-2022-37996 is documented as a Windows kernel memory information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (LOCAL attack vector, LOW attack complexity, LOW privileges required, HIGH confidentiality impact). The linked NCSC advisory lists CVE-2022-37996 under Windows NTFS with ...
CVE-2022-44679
CVE-2022-44679 is a Windows Graphics Component Information Disclosure vulnerability. Affected: Windows Graphics Component; root cause details are not provided in the supplied documents beyond the vulnerability type. CVSS 3.1 base score 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N); attack vector loca...
CVE-2016-0171
CVE-2016-0171 is a Windows kernel‑mode elevation of privilege vulnerability affecting Win32k in several Windows releases (Vista SP2 to Windows 10 1511). The entry describes that a crafted user‑mode application can trigger a local privilege escalation via a flaw in the Win32k subsystem, with explo...
CVE-2016-3252
CVE-2016-3252 is a Windows kernel-mode privilege-escalation vulnerability affecting multiple Windows versions (Vista SP2 through Windows 10 1511) where a crafted application may exploit kernel-mode drivers to gain privileges. The root cause is insufficient handling of objects in memory within ker...
CVE-2016-3319
CVE-2016-3319 affects the Windows PDF Library in Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (various builds), and Edge. The vulnerability stems from how the PDF library handles memory objects in PDFs, allowing remote code execution when a crafted PDF is opened or viewed. Connected sourc...