CVE-2020-1235

Technical details for CVE-2020-1235 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2020-1412

CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...

CVE-2020-17097

Technical details (affected products, root cause, exploitability) for CVE-2020-17097 are not provided in the supplied documents. Monitor for updates.

CVE-2021-1642

CVE-2021-1642 affects Windows AppX Deployment Extensions and is described as an Elevation of Privilege vulnerability. CVSSv3.1 score 7.8 (HIGH) with local attack vector, low complexity, and privileges required LOW; impact to confidentiality, integrity, and availability is HIGH. Connected document...

CVE-2021-1685

CVE-2021-1685 is a Windows AppX Deployment Extensions Elevation of Privilege vulnerability. Affected component: Windows AppX Deployment Extensions. Exploitation is local with low attack complexity; privileges required are LOW and user interaction is not required per CVSS details, leading to parti...

CVE-2021-1710

Technical details for CVE-2021-1710 are not provided in the connected documents. The initial description only notes a Windows Media Foundation remote code execution vulnerability; no affected products, root cause, or remediation details are given here.

CVE-2021-27094

Technical details for CVE-2021-27094 are not publicly provided in the supplied documents; the entry only states a Windows Early Launch Antimalware Driver security feature bypass. Monitor for updates; no affected products, impacts, or fixes are specified here.

CVE-2021-28309

Technical details for CVE-2021-28309 (Windows Kernel Information Disclosure Vulnerability) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or remediations are disclosed here. Monitor sources for updates.

CVE-2021-28442

Technical details about CVE-2021-28442 are not provided in the supplied documents. No specifics on affected products, root cause, or fixes are present. Monitor for updates.

CVE-2021-36973

Technical details about CVE-2021-36973 (affected components, root cause, impact, vulnerable versions, and fixes) are not provided in the connected documents. Monitor official sources (Microsoft security guidance, NVD) for updates and remediation information.

CVE-2021-43223

CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...

CVE-2022-44679

CVE-2022-44679 is a Windows Graphics Component Information Disclosure vulnerability. Affected: Windows Graphics Component; root cause details are not provided in the supplied documents beyond the vulnerability type. CVSS 3.1 base score 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N); attack vector loca...

CVE-2023-21701

CVE-2023-21701 is described as a Microsoft PEAP Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (Network attack, no user interaction, high impact to availability). The provided documents do not include concrete exploit details, affected product versions, root cause, or a confir...

CVE-2015-2435

CVE-2015-2435 is a TrueType font parsing vulnerability impacting Microsoft Windows (multiple editions listed) and related components (e.g., Silverlight, Office) that allows remote code execution via a crafted font. The issue is documented with a CVSS v2 base score of 9.3 (high) and network attack...

CVE-2016-0170

CVE-2016-0170 affects the Windows GDI component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10). The vulnerability enables remote code execution when processing crafted documents, due to how the Graphics Component handles objects in memory. A...

CVE-2016-0171

CVE-2016-0171 is a Windows kernel‑mode elevation of privilege vulnerability affecting Win32k in several Windows releases (Vista SP2 to Windows 10 1511). The entry describes that a crafted user‑mode application can trigger a local privilege escalation via a flaw in the Win32k subsystem, with explo...

CVE-2016-7247

CVE-2016-7247 describes a Secure Boot component vulnerability that could allow physically proximate attackers to bypass Secure Boot by crafting a boot policy, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (versions 1511 and 1607), and Windows Server 2016. The Op...

CVE-2017-0296

CVE-2017-0296 affects Windows platforms (Windows 7 SP1 to Windows Server 2016) with a privilege-escalation via tdx.sys due to a missing length check when copying memory. The affected component is tdx.sys; root cause is inadequate buffer length validation. Impact per description: privilege escalat...

CVE-2018-0881

CVE-2018-0881 concerns a privilege-elevation flaw in the Microsoft Video Control component. The vulnerability stems from how objects are handled in memory, enabling an attacker who can log on and run a crafted application to execute code with elevated/system privileges on affected Windows release...

CVE-2018-8170

CVE-2018-8170 is a Windows kernel image elevation-of-privilege vulnerability affecting Windows 10 and Windows 10 Server builds. The issue arises from how the Windows kernel image handles objects in memory, enabling an attacker who can run a locally crafted application to execute code with elevate...

CVE-2019-0733

Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.

CVE-2019-0734

CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...

CVE-2019-1179

CVE-2019-1179 describes an elevation-of-privilege flaw in how unistore.dll handles objects in memory. A locally authenticated attacker could execute code with elevated permissions by running a crafted application. The vulnerability is addressed by a security update that ensures unistore.dll prope...

CVE-2019-1267

CVE-2019-1267 describes an elevation of privilege in Microsoft Compatibility Appraiser. A local attacker can exploit a vulnerable configuration file through symbolic/link attacks to gain higher privileges. Documented impact is elevation of privilege with local access required; CVSS scores indicat...

CVE-2020-0735

Technical details for CVE-2020-0735 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0779

CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...

CVE-2020-0858

CVE-2020-0858 is a Windows elevation-of-privilege vulnerability where the Public Account Pictures folder improperly handles junctions. The root cause is incorrect handling of junctions in that folder, enabling local attacker code execution with privileges as described in the CVE entry. Exploitati...

CVE-2020-0994

The CVE-2020-0994 entry describes a Remote Code Execution in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected documents corroborate a Jet Database Engine memory-corruption vulnerability that could allow arbitrary code execution when a user opens a crafte...

CVE-2020-1196

CVE-2020-1196 is described as an elevation of privilege vulnerability in Windows Print Configuration, caused by how printconfig.dll handles objects in memory. The CVE entry notes local access is required with low attack complexity, and the impact is high on confidentiality, integrity, and availab...

CVE-2020-1296

Windows Diagnostics & feedback Information Disclosure Vulnerability (CVE-2020-1296) exists in the way the Diagnostics & feedback Settings app handles memory objects. An attacker would need to log on to an affected system and interact with the app to cause diagnostic data to be sent to Microsoft. ...

CVE-2020-1314

CVE-2020-1314: A Windows TSF Elevation of Privilege vulnerability exists where the TSF server mishandles messages from TSF clients, enabling an attacker with a crafted TSF client to execute arbitrary code with local privileges by exploiting the TSF messaging flow. No patch details are provided in...

CVE-2020-1333

CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...

CVE-2020-1334

Technical details about CVE-2020-1334 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.

CVE-2020-1410

CVE-2020-1410 describes a remote code execution vulnerability in Windows Address Book (WAB) where processing of vcard files is flawed. The CNVD-2021-65603 entry corroborates a WAB-based RCE affecting Windows/Windows Server. Public descriptions state that an attacker could deliver a malicious vCar...

CVE-2020-17010

CVE-2020-17010 is a local Win32k elevation-of-privilege vulnerability in Microsoft Windows. It affects Win32k/Windows components and could allow an attacker to obtain SYSTEM-level privileges on a vulnerable host, with CVSS indicating LOCAL access, LOW attack complexity, and HIGH impact to confide...

CVE-2020-17032

Technical details about CVE-2020-17032 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources for affected products, impact, and remediation.

CVE-2021-1689

CVE-2021-1689 is a Windows Multipoint Management Elevation of Privilege vulnerability. The available data from the connected sources (NVD entry) states a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction. The impact is HIGH for Confident...

CVE-2021-26863

CVE-2021-26863 is a Windows Win32k elevation-of-privilege vulnerability in win32kfull.sys (BLTRECORD::bRotate) that can allow a local attacker to gain SYSTEM-level privileges by triggering a NULL-page-execution scenario when a mapped NULL page is accessible and HOOK_PLGBLT is set, leading to call...

CVE-2021-26864

CVE-2021-26864 is described as a Windows Virtual Registry Provider Elevation of Privilege vulnerability. Connected details outline a chain where container isolation through Windows Server/Silo mechanisms (registry overlays, object manager root directories, and silo handling) can be bypassed. A no...

CVE-2022-26797

Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.

CVE-2022-29114

Technical details about CVE-2022-29114 are not provided in the supplied documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updates from the provided references as needed.

CVE-2022-44670

CVE-2022-44670 affects Windows SSTP and allows remote code execution via a race condition in the SSTP/RAS handshake. An unauthenticated attacker could send a crafted SSTP connection request to a RAS server to achieve RCE. Public details in connected sources describe exploit path and patch context...

CVE-2022-44671

CVE-2022-44671 relates to the Windows Graphics Component Elevation of Privilege. The provided connected documents identify the affected component as the Windows Graphics Component and label the vulnerability as a local privilege escalation with a CVSS v3.1 base score of 7.8 (High) and local attac...

CVE-2023-21697

Technical details about CVE-2023-21697 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and Vulners for affected products, exploit information, and remediation.

CVE-2016-0073

CVE-2016-0073 affects Windows kernel local elevation of privilege on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). Root cause: crafted application triggers a kernel API pathway to access sensitive registry information, enabling local privilege escalation....

CVE-2016-3252

CVE-2016-3252 is a Windows kernel-mode privilege-escalation vulnerability affecting multiple Windows versions (Vista SP2 through Windows 10 1511) where a crafted application may exploit kernel-mode drivers to gain privileges. The root cause is insufficient handling of objects in memory within ker...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2016-3319

CVE-2016-3319 affects the Windows PDF Library in Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (various builds), and Edge. The vulnerability stems from how the PDF library handles memory objects in PDFs, allowing remote code execution when a crafted PDF is opened or viewed. Connected sourc...

CVE-2016-7185

CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...