CVE-2021-43216

Technical details for CVE-2021-43216 are not publicly provided in the supplied documents. Monitor for updates from the referenced sources; no public specifics on affected products, versions, or impacts are included here.

CVE-2022-29114

Technical details about CVE-2022-29114 are not provided in the supplied documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updates from the provided references as needed.

CVE-2022-37994

Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.

CVE-2022-44670

CVE-2022-44670 affects Windows SSTP and allows remote code execution via a race condition in the SSTP/RAS handshake. An unauthenticated attacker could send a crafted SSTP connection request to a RAS server to achieve RCE. Public details in connected sources describe exploit path and patch context...

CVE-2015-2435

CVE-2015-2435 is a TrueType font parsing vulnerability impacting Microsoft Windows (multiple editions listed) and related components (e.g., Silverlight, Office) that allows remote code execution via a crafted font. The issue is documented with a CVSS v2 base score of 9.3 (high) and network attack...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2016-3396

CVE-2016-3396 is a GDI+ remote code execution in Graphics Device Interface (GDI) that allows a remote attacker to execute arbitrary code via a crafted embedded font. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R...

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-8681

Technical details about CVE-2017-8681 are not publicly provided in the connected documents. No specifics on affected versions, root cause, impact, or remediation are present. Monitor for updates.

CVE-2018-0904

The CVE-2018-0904 entry concerns a Windows kernel information disclosure vulnerability affecting Windows kernel in multiple client/server OS builds (Windows 7/8.1/10, Windows Server 2008 R2/2012/2016, etc.). Root cause: memory address handling in the kernel allows partial information disclosure w...

CVE-2018-0969

The CVE-2018-0969 entry describes an information-disclosure vulnerability in the Windows kernel that could enable retrieval of information to bypass Kernel ASLR. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 and various Windows Server ed...

CVE-2018-8121

Technical details for CVE-2018-8121 are not publicly available in the provided connected documents. No specific affected products, root cause, impacts, or remediation are described here; monitor for updates.

CVE-2018-8142

CVE-2018-8142 describes a Windows local security feature bypass where Windows incorrectly validates kernel driver signatures, allowing loading of improperly signed drivers. Affected products include Windows 10 and Windows Server 2016 (and related Windows 10/server versions). The root cause is imp...

CVE-2018-8170

CVE-2018-8170 is a Windows kernel image elevation-of-privilege vulnerability affecting Windows 10 and Windows 10 Server builds. The issue arises from how the Windows kernel image handles objects in memory, enabling an attacker who can run a locally crafted application to execute code with elevate...

CVE-2018-8209

CVE-2018-8209 describes an information-disclosure vulnerability in Windows where a normal user can access the wireless LAN profile of an administrative user. Affected products include Windows Server 2016, Windows 10, and Windows 10 Servers. The vulnerability stems from improper access control aro...

CVE-2018-8462

CVE-2018-8462 is a local elevation-of-privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver. The CNVD entry states that the DXGKRNL driver’s handling of memory objects is vulnerable, enabling privilege escalation on Windows platforms (Windows Server 2016 and Windows 10 family). ...

CVE-2019-1177

CVE-2019-1177 is a Windows elevation-of-privilege vulnerability in how rpcss.dll handles objects in memory. A locally authenticated attacker could run a specially crafted application to execute code with elevated permissions. The issue stems from memory object handling within rpcss.dll, with miti...

CVE-2019-1188

CVE-2019-1188 is a remote code execution vulnerability in Microsoft Windows involving processing of .LNK shortcut references. An attacker could trick a user into opening a removable drive or remote share containing a malicious .LNK file and an associated binary; when the user opens the drive or p...

CVE-2019-1389

CVE-2019-1389 is a Windows Hyper-V remote code execution vulnerability where input from a guest OS is not properly validated on the host, allowing an authenticated guest user to run arbitrary code on the host. Affected software is Windows Hyper-V; the root cause is improper input validation. Impa...

CVE-2020-0633

Technical details about CVE-2020-0633 are not publicly available in the provided connected documents. Monitor for updates as new information becomes accessible.

CVE-2020-0709

CVE-2020-0709 / CVE-2020-0732 describe an elevation of privilege in Microsoft DirectX due to improper handling of in-memory objects. Affected component is DirectX (Windows platform); root cause cited as memory handling issues that can allow code execution with kernel-level or high-privilege conte...

CVE-2020-0802

Technical details for CVE-2020-0802 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or fixes are described here.

CVE-2020-0865

CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...

CVE-2020-0934

Technical details about CVE-2020-0934 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0987

Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.

CVE-2020-0988

CVE-2020-0988 describes a remote code execution flaw in Microsoft Windows Jet Database Engine caused by improper handling of memory objects. The connected KB4549951 document indicates a security update addressing Jet DB Engine issues as part of Windows 10 OS builds 18362.778 and 18363.778 (securi...

CVE-2020-0995

CVE-2020-0995 represents a Remote Code Execution vulnerability in Microsoft Windows Jet Database Engine. Connected sources describe the issue as stemming from improper handling of memory objects within the Jet Database Engine, enabling an attacker to execute arbitrary code on a target system, typ...

CVE-2020-1153

CVE-2020-1153 is a remote code execution vulnerability in the way Microsoft Graphics Components handles objects in memory. The connected MSKB entries reference Windows updates that include security fixes for the Microsoft Graphics Component as part of the May 2020 updates (e.g., KB4556799 and rel...

CVE-2020-1212

Technical details about CVE-2020-1212 are not publicly provided in the supplied connected documents; no vendor/product/impact specifics beyond the initial description are present. Monitor for updates.

CVE-2020-1253

Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.

CVE-2020-1314

CVE-2020-1314: A Windows TSF Elevation of Privilege vulnerability exists where the TSF server mishandles messages from TSF clients, enabling an attacker with a crafted TSF client to execute arbitrary code with local privileges by exploiting the TSF messaging flow. No patch details are provided in...

CVE-2020-1354

CVE-2020-1354 affects the Windows UPnP Device Host; root cause is improper memory handling leading to Elevation of Privilege. Exploitation requires local execution on the victim system, with impact described as elevated privileges. This CVE is related to CVE-2020-1430 and appears in NVD and CVE r...

CVE-2020-1457

CVE-2020-1457 is described across the provided documents as a remote code execution vulnerability in the Microsoft Windows Codecs Library, related to how memory objects are handled. The vulnerability is cited by multiple sources (NVD entry, CVE lists) with the same core description: memory handli...

CVE-2020-16968

CVE-2020-16968 describes a remote code execution vulnerability in the Windows Camera Codec Pack caused by improper handling of objects in memory. An attacker who can entice a user to open a specially crafted file could execute arbitrary code in the user’s context; if the user runs with administra...

CVE-2020-17099

CVE-2020-17099 corresponds to a Windows lock-screen security feature bypass. The available data indicate a physical-access vulnerability affecting Windows lock screen functionality, with a CVSSv3.1 base score of 6.8 and impact on confidentiality, integrity, and availability (C:H/I:H/A:H) when exp...

CVE-2021-24091

CVE-2021-24091 corresponds to a remote code execution in the Windows Camera Codec Pack. Connected CNVD data attributes the issue to the Windows camera codec package on Windows/Windows Server. The vulnerability is described as enabling remote code execution; no remediation details are provided in ...

CVE-2021-26863

CVE-2021-26863 is a Windows Win32k elevation-of-privilege vulnerability in win32kfull.sys (BLTRECORD::bRotate) that can allow a local attacker to gain SYSTEM-level privileges by triggering a NULL-page-execution scenario when a mapped NULL page is accessible and HOOK_PLGBLT is set, leading to call...

CVE-2021-26864

CVE-2021-26864 is described as a Windows Virtual Registry Provider Elevation of Privilege vulnerability. Connected details outline a chain where container isolation through Windows Server/Silo mechanisms (registry overlays, object manager root directories, and silo handling) can be bypassed. A no...

CVE-2021-28320

Technical details about CVE-2021-28320 (affected components, exploitability, or fixes) are not provided in the supplied documents. Monitor for updates from official advisories (MSRC/Microsoft security guides) for specifics and remediation.

CVE-2021-28326

Technical details about CVE-2021-28326 are not provided in the supplied documents. The connected items mention advisories but do not describe affected components, root cause, impact, or fixes.

CVE-2021-40468

CVE-2021-40468 corresponds to a Windows Bind Filter Driver Information Disclosure vulnerability. The connected data confirms affected component as Windows Bind Filter Driver and assigns CVSS v3.1 base metrics of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, and LOW privileges requ...

CVE-2022-44671

CVE-2022-44671 relates to the Windows Graphics Component Elevation of Privilege. The provided connected documents identify the affected component as the Windows Graphics Component and label the vulnerability as a local privilege escalation with a CVSS v3.1 base score of 7.8 (High) and local attac...

CVE-2023-21701

CVE-2023-21701 is described as a Microsoft PEAP Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (Network attack, no user interaction, high impact to availability). The provided documents do not include concrete exploit details, affected product versions, root cause, or a confir...

CVE-2016-0173

CVE-2016-0173 is a Win32k Elevation of Privilege vulnerability affecting Windows kernel‑mode drivers across Windows Vista SP2 through Windows 10 (1511). A crafted user-mode application can trigger local privilege escalation, as described in the original entry. Public exploit access exists: Exploi...

CVE-2016-3342

Technical details for CVE-2016-3342 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2018-1035

CVE-2018-1035 is a Windows security feature bypass affecting Windows 10/Windows Server (notably 1709 per related advisories). The vulnerability stems from how Windows validates User Mode Code Integrity (UMCI) policies, allowing a local attacker with access to bypass Device Guard. The issue is add...

CVE-2018-8165

CVE-2018-8165 describes a local elevation of privilege in the Windows DirectX Graphics Kernel (DXGKRNL) driver, arising from improper handling of objects in memory. The vulnerability affects Windows Server 2016 and Windows 10 family (Windows 10/Server), enabling an attacker with local access to e...

CVE-2019-0865

Technical details about CVE-2019-0865 are not present in the provided connected documents. The supplied materials are unrelated MSKB entries and a generic CVE description. Monitor for updates.

CVE-2019-1230

The CVE-2019-1230 entry describes an information-disclosure vulnerability in Microsoft Windows Hyper-V, where the Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest OS. The root cause is a flawed input-validation path within the Hyper-V network switch, e...