CVE-2022-37994

Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.

CVE-2016-0179

CVE-2016-0179 describes a remote code execution vulnerability in Windows Shell across Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (Gold/1511). The root cause is improper handling of objects in memory within Windows Shell, enabling an attacker to trigger arbitrary code exec...

CVE-2016-3319

CVE-2016-3319 affects the Windows PDF Library in Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (various builds), and Edge. The vulnerability stems from how the PDF library handles memory objects in PDFs, allowing remote code execution when a crafted PDF is opened or viewed. Connected sourc...

CVE-2017-0042

CVE-2017-0042 is a Windows DirectShow information disclosure vulnerability affecting Windows Media Player and related Windows versions (Windows 7/8.x/Server variants). The underlying issue is improper handling of objects in memory during media processing, which allows an unauthenticated, remote a...

CVE-2017-0056

Technical details for CVE-2017-0056 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2017-0273

CVE-2017-0273 is a Windows SMBv1 vulnerability described as a denial-of-service issue in the SMBv1 server. The affected component is the Microsoft Windows Server Message Block 1.0 (SMBv1) server; the root cause is improper handling of crafted SMB requests that can cause the server to stop respond...

CVE-2017-0296

CVE-2017-0296 affects Windows platforms (Windows 7 SP1 to Windows Server 2016) with a privilege-escalation via tdx.sys due to a missing length check when copying memory. The affected component is tdx.sys; root cause is inadequate buffer length validation. Impact per description: privilege escalat...

CVE-2018-0888

CVE-2018-0888 corresponds to a vulnerability in the Microsoft Hyper-V Network Switch where 64-bit Windows clients/servers (Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012/R2; Windows 10 versions 1511–1709; Windows Server 2016) are exposed to information disclos...

CVE-2018-8201

CVE-2018-8201 describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10 (including Windows 10 servers). The vulnerability stems from bypas...

CVE-2018-8215

CVE-2018-8215 (and related CVEs) is described in CNVD-2018-12041 as a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows Server 2016 and Windows 10 variants. The CNVD entry confirms the vulne...

CVE-2018-8239

CVE-2018-8239 — Windows GDI Information Disclosure Vulnerability affects Windows Server 2016, Windows 10, and Windows 10 Server variants. The root cause is that the Windows GDI component improperly discloses the contents of memory (an information-disclosure flaw). An attacker could exploit this b...

CVE-2018-8612

CVE-2018-8612 is a Denial of Service vulnerability in the Connected User Experiences and Telemetry Service of Windows. The issue arises when the service fails to validate certain function values, enabling a local attacker to cause an availability impact on affected systems. Affected products incl...

CVE-2019-0726

CVE-2019-0726 affects the Windows DHCP Client. The connected advisories describe a remote code execution vulnerability caused by improper processing of DHCP responses, leading to memory corruption. Exploitation is described as remote code execution with administrative privileges in the advisories...

CVE-2019-1158

The CVE-2019-1158 entry corresponds to a Windows Graphics Device Interface (GDI) information disclosure vulnerability. Connected sources describe it as an issue in GDI’s handling of memory, specifically involving EMF file parsing, which can allow an attacker to obtain sensitive information. Explo...

CVE-2019-1163

Technical details (affected products, components, versions, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and CVE records.

CVE-2019-1172

Technical details about CVE-2019-1172 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are listed beyond a generic description. Monitor for updates.

CVE-2019-1188

CVE-2019-1188 is a remote code execution vulnerability in Microsoft Windows involving processing of .LNK shortcut references. An attacker could trick a user into opening a removable drive or remote share containing a malicious .LNK file and an associated binary; when the user opens the drive or p...

CVE-2019-1190

CVE-2019-1190 is a Windows kernel image elevation of privilege vulnerability. The issue arises from how the kernel image handles objects in memory, allowing a locally authenticated attacker to run code with elevated privileges via a crafted application. Public exploits exist for this vulnerabilit...

CVE-2019-1321

CVE-2019-1321 : An elevation-of-privilege flaw in Windows CloudStore occurs when a Discretionary Access Control List (DACL) is mishandled. Technical description across connected documents confirms the issue is a local-elevation vulnerability in Windows CloudStore. The NVD entry lists CVSS results...

CVE-2019-1430

CVE-2019-1430 affects Windows Media Foundation. Root cause: improper parsing of specially crafted QuickTime files, enabling remote code execution with the caller’s privileges when a user opens the tainted file. Public exploits exist; attacker must lure the user to open the QuickTime content. Miti...

CVE-2019-1474

Technical details for CVE-2019-1474 are not publicly provided in the connected documents. The CVE entry lacks explicit product/version/impact/fix mapping in the supplied materials; monitor for updates.

CVE-2020-0717

Technical details for CVE-2020-0717 are not publicly provided in the supplied documents. No affected products/versions or remediation are specified here. Monitor for updates from official sources.

CVE-2020-0807

Technical details for CVE-2020-0807 are not provided in the supplied documents. Monitor for updates.

CVE-2020-0881

CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...

CVE-2020-0965

CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...

CVE-2020-0982

CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...

CVE-2020-1310

CVE-2020-1310 is a Windows Win32k elevation of privilege vulnerability where the Windows kernel-mode driver fails to properly handle objects in memory. The description identifies it as a local-privilege escalation (LOCAL vector, high privileges required) with a kernel-mode trust boundary issue in...

CVE-2020-1390

CVE-2020-1390 — Windows Network Connections Service elevation of privilege vulnerability. Root cause: the service mishandles objects in memory, enabling code execution with elevated privileges on a locally accessible Windows host. Affected: Windows Network Connections Service (Windows). Exploitat...

CVE-2020-1485

CVE-2020-1485 is a Windows Information Disclosure vulnerability in the Windows Image Acquisition (WIA) Service. It allows an authenticated, local attacker who can connect an imaging device (camera/scanner/phone) and run a crafted app to disclose memory contents from WIA, potentially exposing info...

CVE-2020-1546

CVE-2020-1546 is an elevation-of-privilege vulnerability in Windows Backup Engine caused by improper memory handling. An attacker must first gain code execution on the victim, then execute a crafted application to elevate privileges. Microsoft’s security update fixes memory handling in the Window...

CVE-2020-1548

The CVE-2020-1548 entry concerns a memory-handling information disclosure in the Windows WaasMedic Service. The vulnerability requires an attacker to first gain execution on the target, then run a crafted application to disclose memory. The affected component is Windows WaasMedic Service; the und...

CVE-2021-1694

Technical details about CVE-2021-1694 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories or standard CVE databases.

CVE-2021-1703

CVE-2021-1703 affects the Windows Event Logging Service and is classified as an Elevation of Privilege vulnerability (obtaining increased entitlements). Public material in the connected documents identifies Windows Event Logging Service as the affected component and notes an entitlement-raising i...

CVE-2021-1710

Technical details for CVE-2021-1710 are not provided in the connected documents. The initial description only notes a Windows Media Foundation remote code execution vulnerability; no affected products, root cause, or remediation details are given here.

CVE-2021-1731

Technical details about CVE-2021-1731 are not publicly provided in the connected documents. Monitor for updates from NVD/OSV/MSKB mentions to clarify affected product, root cause, and remediation.

CVE-2021-24083

Technical details about CVE-2021-24083 are not provided in the connected documents. Public details are limited to the Windows Address Book RCE label; monitor for updates.

CVE-2021-28348

CVE-2021-28348 is described in the NVD entry as a Windows GDI+ Remote Code Execution Vulnerability. The NVD metrics show CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attacker complexity, PRIVILEGES REQUIRED: LOW, NONE user interaction, and impacts to Confidentiality, Integrity, an...

CVE-2021-41346

CVE-2021-41346 refers to a security feature bypass vulnerability in the Windows Console Window Host. Exploitation is local (AV:L, UI:N, integrity/confidentiality/availability impact: partial), effectively bypassing security controls and potentially enabling privilege escalation or data exposure a...

CVE-2021-43247

CVE-2021-43247 affects the Windows TCP/IP driver, enabling local elevation of privilege. It is rated HIGH (CVSSv3.1: LOCAL, LOW privileges required, NONE user interaction) withImpact/H. The vulnerability is addressed by Microsoft security updates (e.g., KB5008212/KB5008218 family; OS builds 19041...

CVE-2022-26787

Technical details for CVE-2022-26787 are not provided in the supplied documents. Please monitor for updates from official sources for affected products, impact specifics, and remediations.

CVE-2022-34728

CVE-2022-34728 is described as a Windows Graphics Component Information Disclosure Vulnerability. The provided metrics indicate a CVSSv3.1 base score of 5.5 (MEDIUM), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction. The confidentiality impact is...

CVE-2022-44677

CVE-2022-44677 is a Windows Projected File System Elevation of Privilege vulnerability. The CVSS 3.1 base metrics (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicate a local exploit that requires low privileges and no user interaction, with high impact on confidentiality, integrity, and availability. ...

CVE-2022-44679

CVE-2022-44679 is a Windows Graphics Component Information Disclosure vulnerability. Affected: Windows Graphics Component; root cause details are not provided in the supplied documents beyond the vulnerability type. CVSS 3.1 base score 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N); attack vector loca...

CVE-2016-0180

CVE-2016-0180 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10 variants). The root cause is how the Windows kernel mishandles symbolic links, enabling a local attacker to gain privileges via a...

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...

CVE-2017-0299

The CVE-2017-0299 entry describes a Windows kernel information disclosure vulnerability in the NT kernel affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2012/2016, Windows 10 various builds, and more). The issue allows an authenticated attacker to obtain informatio...

CVE-2017-8491

Technical details about CVE-2017-8491 are not publicly provided in the supplied documents; monitor for updates.

CVE-2018-0881

CVE-2018-0881 concerns a privilege-elevation flaw in the Microsoft Video Control component. The vulnerability stems from how objects are handled in memory, enabling an attacker who can log on and run a crafted application to execute code with elevated/system privileges on affected Windows release...

CVE-2018-0964

CVE-2018-0964 describes an information-disclosure vulnerability in Windows Hyper-V where input from a guest OS is not properly validated by a host, enabling potential data exposure on Windows 10 and Windows Server 201X where Hyper-V is involved. Connected records reiterate the vulnerable componen...

CVE-2018-0982

CVE-2018-0982 is a local-elevation-of-privilege flaw in the Windows Kernel API permission enforcement. Affected products per documents include Windows Server 2016, Windows 10, and Windows 10 Server. CVSS3 vector shows LOCAL attack, HIGH impact on confidentiality, integrity, and availability, with...