CVE-2018-8200

CVE-2018-8200 is a local security bypass in Windows Device Guard, enabling an attacker to inject malicious code into a PowerShell session by bypassing the Code Integrity Policy. Affected: Windows Server 2016, Windows 10 (and variants). Root cause: Device Guard Code Integrity Policy bypass vulnera...

CVE-2018-8433

Technical details about CVE-2018-8433 are not publicly provided in the connected documents. Monitor for updates.

CVE-2019-0942

CVE-2019-0942 concerns Windows 10 Unified Write Filter (UWF). The connected sources describe an elevation of privilege resulting from improper restriction of access to the registry within UWF. Affected component: UWF on Windows 10; root cause cited as registry access restriction flaw. Documented ...

CVE-2019-1326

CVE-2019-1326 describes a denial of service vulnerability affecting Windows Remote Desktop Protocol (RDP). The Red Hat entry repeats the DoS description (attacker connects via RDP and sends specially crafted requests) but provides no further technical details, affected software versions, root cau...

CVE-2019-1341

Technical details about CVE-2019-1341 are not provided in the connected documents. The current set does not reveal affected products, root cause, or fixes beyond the initial description. Monitor for updates.

CVE-2019-1389

CVE-2019-1389 is a Windows Hyper-V remote code execution vulnerability where input from a guest OS is not properly validated on the host, allowing an authenticated guest user to run arbitrary code on the host. Affected software is Windows Hyper-V; the root cause is improper input validation. Impa...

CVE-2019-1411

CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...

CVE-2020-0622

CVE-2020-0622 : Information disclosure in the Microsoft Windows Graphics Component caused by improper handling of memory objects. Documented as a local vulnerability with partial/high impact to confidentiality (CVSS v3.1: MEDIUM, base score 5.5) and low base score in CVSS v2 (2.1). Affected produ...

CVE-2020-0719

Technical details about CVE-2020-0719 are not publicly provided in the connected documents. Monitor for updates; current sources only reference malware entries unrelated to the technical specifics.

CVE-2020-0753

Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).

CVE-2020-0904

CVE-2020-0904 is a denial-of-service vulnerability affecting Microsoft Hyper-V. The issue arises when Hyper-V fails to properly validate specific malicious data originating from a user on a guest OS, potentially allowing an authenticated attacker inside a VM (with privileged guest access) to trig...

CVE-2020-0994

The CVE-2020-0994 entry describes a Remote Code Execution in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected documents corroborate a Jet Database Engine memory-corruption vulnerability that could allow arbitrary code execution when a user opens a crafte...

CVE-2020-0997

CVE-2020-0997 is a Windows Camera Codec Pack remote code execution vulnerability caused by improper handling of objects in memory. An attacker could execute arbitrary code in the context of the current user, potentially taking control if the user has admin rights. Exploitation requires the user t...

CVE-2020-1004

Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.

CVE-2020-1067

CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2020-1153

CVE-2020-1153 is a remote code execution vulnerability in the way Microsoft Graphics Components handles objects in memory. The connected MSKB entries reference Windows updates that include security fixes for the Microsoft Graphics Component as part of the May 2020 updates (e.g., KB4556799 and rel...

CVE-2020-1176

The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...

CVE-2020-1196

CVE-2020-1196 is described as an elevation of privilege vulnerability in Windows Print Configuration, caused by how printconfig.dll handles objects in memory. The CVE entry notes local access is required with low attack complexity, and the impact is high on confidentiality, integrity, and availab...

CVE-2020-1365

Technical details about CVE-2020-1365 are not publicly provided in the connected documents. The Windows Event Logging Service elevation-of-privilege vulnerability lacks product/version/impact/fix specifics here. Monitor sources for updates and confirmed technical details.

CVE-2020-1556

CVE-2020-1556 affects Windows WalletService. It is an Elevation of Privilege vulnerability arising from how WalletService handles objects in memory, enabling a locally authenticated attacker to run a crafted application and execute code with elevated permissions. Exploitation requires local acces...

CVE-2020-16877

CVE-2020-16877 is a Windows elevation-of-privilege vulnerability caused by improper handling of reparse points. An attacker with local logon could run a crafted application to overwrite or delete files that normally require elevated permissions. Microsoft provides a security update addressing thi...

CVE-2020-16968

CVE-2020-16968 describes a remote code execution vulnerability in the Windows Camera Codec Pack caused by improper handling of objects in memory. An attacker who can entice a user to open a specially crafted file could execute arbitrary code in the user’s context; if the user runs with administra...

CVE-2020-17000

CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...

CVE-2020-17040

Technical details for CVE-2020-17040 are not publicly provided in the Connected documents. The NVD entry summarizes a Windows Hyper-V security feature bypass but does not disclose affected products, root cause, exploit vectors, or remediation here. Monitor for updates.

CVE-2021-1696

CVE-2021-1696 is a Windows Graphics Component Information Disclosure Vulnerability. The initial entry provides the vulnerability type but no detailed product/version/affected component beyond that. Connected sources (OpenVAS entries and a Xerox advisory) reference CVE-2021-1696 among broader Wind...

CVE-2021-27086

CVE-2021-27086 concerns a local-elevation-of-privilege in Windows where the Windows Services and Controller App is the affected component. The CVE’s base metrics indicate a local, low-attack-complexity path with high-impact (confidentiality, integrity, and availability) if exploited, with no user...

CVE-2021-27094

Technical details for CVE-2021-27094 are not publicly provided in the supplied documents; the entry only states a Windows Early Launch Antimalware Driver security feature bypass. Monitor for updates; no affected products, impacts, or fixes are specified here.

CVE-2021-28439

Technical details for CVE-2021-28439 (Windows TCP/IP Driver DoS) are not present in the provided Connected documents. Public details, affected products/versions, impact, and fixes are not specified here—monitor for updates.

CVE-2021-28446

CVE-2021-28446 is a Windows Portmapping Information Disclosure Vulnerability with local attack vector. NVD data shows Confidentiality Impact HIGH (I) and no Integrity/Availability impact, base score 5.5 (3.1) / 2.1 (2.0) and a higher CNA score 7.1 (HIGH). Exploitation status is listed as null in ...

CVE-2022-34734

Technical details (affected product/version, root cause, exploit vector, impact, and fix) are not publicly provided in the supplied documents. Monitor for updates from official vulnerability feeds.

CVE-2022-44670

CVE-2022-44670 affects Windows SSTP and allows remote code execution via a race condition in the SSTP/RAS handshake. An unauthenticated attacker could send a crafted SSTP connection request to a RAS server to achieve RCE. Public details in connected sources describe exploit path and patch context...

CVE-2022-44682

CVE-2022-44682 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry notes a CVSS v3.1 base score of 6.8 (Medium) with AV:A, AC:L, PR:L, UI:N, S:C, C:N, I:N, A:H, indicating an adjacent attacker with low complexity and low privileges can impact availability. Connected OpenVAS entrie...

CVE-2015-2455

CVE-2015-2455 (TrueType Font Parsing Vulnerability) is a Windows font-processing defect discovered via Project Zero fuzzing of the Windows kernel font stack (win32k.sys and ATMFD.DLL) affecting TrueType fonts and related SFNT tables. The Google Project Zero report outlines that incorrect handling...

CVE-2016-0170

CVE-2016-0170 affects the Windows GDI component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10). The vulnerability enables remote code execution when processing crafted documents, due to how the Graphics Component handles objects in memory. A...

CVE-2016-3252

CVE-2016-3252 is a Windows kernel-mode privilege-escalation vulnerability affecting multiple Windows versions (Vista SP2 through Windows 10 1511) where a crafted application may exploit kernel-mode drivers to gain privileges. The root cause is insufficient handling of objects in memory within ker...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2016-7247

CVE-2016-7247 describes a Secure Boot component vulnerability that could allow physically proximate attackers to bypass Secure Boot by crafting a boot policy, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (versions 1511 and 1607), and Windows Server 2016. The Op...

CVE-2017-0184

Microsoft Hyper-V remote Denial of Service vulnerability (CVE-2017-0184) arises from improper validation of input from a privileged user on a guest OS, potentially allowing a guest to crash the host. Affected component: Hyper-V on Windows Server. Consequence: denial of service impacting host avai...

CVE-2017-0190

CVE-2017-0190 affects the GDI component in multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607), and Windows Server 2016). The vulnerability allows remote attackers to obtain sensitive in...

CVE-2017-0294

CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...

CVE-2017-11788

CVE-2017-11788 affects Windows Search in multiple Windows versions (7 SP1, 8.1, 10, Server SKUs) where unauthenticated attackers can remotely send crafted messages to trigger a denial-of-service by mismanaging in-memory objects. The vulnerability is documented across NVD and CNVD entries, with Op...

CVE-2018-0968

CVE-2018-0968 is a Windows kernel information-disclosure vulnerability that could enable an attacker to bypass Kernel ASLR. It affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, and Windows Server 2019/10-family variants as listed. The connected CIRCL en...

CVE-2018-8142

CVE-2018-8142 describes a Windows local security feature bypass where Windows incorrectly validates kernel driver signatures, allowing loading of improperly signed drivers. Affected products include Windows 10 and Windows Server 2016 (and related Windows 10/server versions). The root cause is imp...

CVE-2018-8170

CVE-2018-8170 is a Windows kernel image elevation-of-privilege vulnerability affecting Windows 10 and Windows 10 Server builds. The issue arises from how the Windows kernel image handles objects in memory, enabling an attacker who can run a locally crafted application to execute code with elevate...

CVE-2019-1018

CVE-2019-1018 (DirectX Elevation of Privilege) affects Windows DirectX and involves improper handling of objects in memory, enabling a local attacker to execute code in kernel mode and potentially install programs, view/change/delete data, or create accounts with full rights. The root cause is un...

CVE-2019-1074

CVE-2019-1074 is a Windows elevation-of-privilege vulnerability involving symbolic link handling in folders with local service privileges. The available description states that exploitation could grant access to unauthorized information, and that the fix is to prevent symbolic links in these scen...

CVE-2019-1168

CVE-2019-1168 describes a local elevation-of-privilege vulnerability in the Windows p2pimsvc service. According to NVD/NVD-derived descriptions, an attacker who can log on to the system could run a crafted application to execute arbitrary code with elevated privileges, effectively taking control ...

CVE-2019-1294

CVE-2019-1294 is a Windows Secure Boot security feature bypass vulnerability that allows access to debugging functionality. The connected records corroborate that the issue enables bypass of Secure Boot protections, with the primary impact described as compromising confidentiality (C High) while ...

CVE-2019-1394

Technical details about CVE-2019-1394 are not provided in the connected documents. Monitor for updates from official advisories; the supplied EUVD entries relate to unrelated malware listings and do not illuminate this CVE.

CVE-2019-1422

Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.