CVE-2018-8165

CVE-2018-8165 describes a local elevation of privilege in the Windows DirectX Graphics Kernel (DXGKRNL) driver, arising from improper handling of objects in memory. The vulnerability affects Windows Server 2016 and Windows 10 family (Windows 10/Server), enabling an attacker with local access to e...

CVE-2019-0865

Technical details about CVE-2019-0865 are not present in the provided connected documents. The supplied materials are unrelated MSKB entries and a generic CVE description. Monitor for updates.

CVE-2019-1230

The CVE-2019-1230 entry describes an information-disclosure vulnerability in Microsoft Windows Hyper-V, where the Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest OS. The root cause is a flawed input-validation path within the Hyper-V network switch, e...

CVE-2019-1250

Technical details for CVE-2019-1250 are not provided in the supplied documents. Public information here confirms it’s a Windows Jet Database Engine RCE vulnerability but no product/version, affected component, impact, or fix details are specified. Monitor for updates.

CVE-2019-1286

CVE-2019-1286 concerns a Windows GDI information disclosure vulnerability. The connected materials describe an information disclosure in the Graphics Device Interface (GDI) where memory contents may be improperly disclosed. The vulnerability is tied to the GDI component and memory handling. The s...

CVE-2019-1433

Technical details about CVE-2019-1433 are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-0753

Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).

CVE-2020-0950

CVE-2020-0950 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of memory objects, part of the Media Foundation Memory Corruption family alongside CVE-2020-0948 and CVE-2020-0949. The connected CNVD entries similarly refer to a Media Foundat...

CVE-2020-1236

CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...

CVE-2020-1255

CVE-2020-1255 refers to an elevation of privilege vulnerability in the Windows Background Intelligent Transfer Service (BITS) IIS module. Connected data (CNVD-2021-27705) states the flaw arises from the module’s failure to properly handle uploads, enabling an attacker to exploit a specially craft...

CVE-2020-1278

CVE-2020-1278 relates to an elevation of privilege in the Diagnostics Hub Standard Collector Service due to improper file operations. The vulnerability enables local privilege elevation, as the service handles files in a way that can be exploited by an authenticated attacker with access to the sy...

CVE-2020-1302

Technical details for CVE-2020-1302 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1370

Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.

CVE-2020-1428

Technical details about CVE-2020-1428 are not publicly provided in the connected documents you supplied. Please monitor for updates from official advisories.

CVE-2020-1547

CVE-2020-1547 – Windows Backup Engine memory handling vulnerability . A local-elevation-of-privilege flaw exists in Windows Backup Engine due to improper memory handling. An attacker must first gain code execution on the victim and then run a crafted application to elevate privileges. According t...

CVE-2020-16895

CVE-2020-16895 corresponds to a Windows elevation-of-privilege flaw in the Windows Error Reporting manager that occurs when handling a process crash. A local attacker who can log on and run a crafted application could delete a targeted file, achieving elevated permissions. The vulnerability is ad...

CVE-2020-17000

CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...

CVE-2020-17025

Technical details for CVE-2020-17025 are not provided in the supplied documents; affected products, impact, root cause, or remediation are not disclosed. Monitor for updates.

CVE-2020-17162

Technical details about CVE-2020-17162 are not publicly provided in the connected documents; only a general description and CVSS metrics are present. Monitor official advisories for updates.

CVE-2021-1661

Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.

CVE-2021-1688

Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2021-43248

Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.

CVE-2022-34728

CVE-2022-34728 is described as a Windows Graphics Component Information Disclosure Vulnerability. The provided metrics indicate a CVSSv3.1 base score of 5.5 (MEDIUM), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction. The confidentiality impact is...

CVE-2022-37983

CVE-2022-37983 affects the Windows DWM Core Library. The vulnerability is an elevation of privilege that arises from improper privilege assignment in the DWM Core Library, enabling a local attacker with low privileges to gain higher privileges (high impact on confidentiality, integrity, and avail...

CVE-2022-38034

CVE-2022-38034 is a Windows Workstation Service Elevation of Privilege vulnerability. Connected documents confirm the affected component is Windows Workstation Service and that the root cause is improper privilege assignment, enabling an attacker to obtain increased privileges (described as privi...

CVE-2016-7295

Technical details about CVE-2016-7295 are not publicly provided in the supplied documents. The CLFS information-disclosure vulnerability details, affected products/versions, and fixes are not elaborated here. Monitor for updates from official advisories.

CVE-2017-0074

CVE-2017-0074 is a Hyper-V denial-of-service vulnerability affecting Windows Hyper-V across multiple Windows client and server editions. Connected sources (CNVD entries) describe a Hyper-V DoS where a crafted application can crash the host, affecting Hyper-V guests; specific affected versions ali...

CVE-2017-0250

CVE-2017-0250 corresponds to a remote code execution vulnerability in the Microsoft JET Database Engine present in Windows components (e.g., older Office/Jet usage). The issue is a buffer overflow that could allow an attacker to take control of the affected system. Connected updates (KBxxxx-Oct 2...

CVE-2017-0258

CVE-2017-0258 is a Windows kernel local information-disclosure vulnerability affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012/2016, Windows 10 releases 1511–1703, RT 8.1). A specially crafted document can allow an authenticated u...

CVE-2017-11880

CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...

CVE-2017-8490

Technical details about CVE-2017-8490 are not publicly provided in the connected EUVD entries; no affected products, root cause, impact, or remediation details are disclosed here. Monitor for updates.

CVE-2017-8576

CVE-2017-8576 affects the Windows Graphics Component in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. An authenticated attacker can run arbitrary code in kernel mode by presenting a specially crafted application, enabling elevation of privilege. The issue is rooted in how the Windo...

CVE-2018-0894

Technical details about CVE-2018-0894 are not provided in the connected documents. The initial entry describes an information disclosure vulnerability in Windows kernels across multiple versions, but no affected product specifics, fixes, or exploit data are included here. Monitor for updates.

CVE-2018-0960

Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.

CVE-2019-1022

CVE-2019-1022 describes a local elevation-of-privilege in Windows Audio Service. The vulnerability arises from how the service handles certain process-related requests; a crafted, local application could enable an attacker to execute code with elevated privileges, potentially compromising the hos...

CVE-2019-1172

Technical details about CVE-2019-1172 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are listed beyond a generic description. Monitor for updates.

CVE-2019-1175

CVE-2019-1175 is a Windows elevation-of-privilege vulnerability linked to psmsrv.dll handling of in-memory objects. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. Microsoft security guidance notes the fix involves ensuring psmsrv.dll pr...

CVE-2019-1406

CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...

CVE-2019-1438

Technical details for CVE-2019-1438 are not publicly available in the provided documents. No exposed affected products, root cause, impact, or remediation are disclosed here. Monitor official advisories and NVD for updates.

CVE-2020-0628

Technical details for CVE-2020-0628 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0803

Technical details for CVE-2020-0803 are not publicly provided in the connected documents; monitor for updates.

CVE-2020-0839

CVE-2020-0839 describes an elevation of privilege in the Windows dnsrslvr.dll memory handling. An attacker with local authentication could run a crafted app to execute code with elevated permissions. The vulnerability stems from improper memory object handling in dnsrslvr.dll, and mitigations rel...

CVE-2020-0841

Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2020-0842

CVE-2020-0842 is a Windows Installer elevation-of-privilege vulnerability. It arises from how Windows Installer handles certain filesystem operations, enabling an unprivileged attacker to execute code on the victim system with local access. The entry is part of a set of CVEs linked to Windows Ins...

CVE-2020-1021

Technical details for CVE-2020-1021 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are specified here. Monitor for updates.

CVE-2020-1067

CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...

CVE-2020-1116

CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...

CVE-2020-1155

IBM MaaS360 Cloud Extender has CVE-2020-1155 and CVE-2020-1156. The IBM security bulletin notes the affected product is IBM MaaS360 Cloud Extender (2.101.x and earlier) and provides a remediation: upgrade to version 2.102.000.060 or newer. No other technical details (e.g., root cause, exploitabil...

CVE-2020-1422

Technical details about CVE-2020-1422 are not publicly provided in the supplied connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation.

CVE-2020-1571

Technical details about CVE-2020-1571 are not provided in the supplied documents. The records reference a Windows Setup elevation-of-privilege issue with no specific affected builds, root cause, exploit info, or fixes disclosed here. Monitor for updates.