CVE-2022-37965

CVE-2022-37965 concerns Windows PPTP Denial of Service. The documents describe a network-exploitable vulnerability in the Windows Point-to-Point Tunneling Protocol that impacts availability (I) with no confidentiality or integrity impact (C/I). CVSSv3.1 metrics show AV:N, AC:H, PR:N, UI:N, S:U, C...

CVE-2022-38032

Technical details for CVE-2022-38032 are not publicly provided in the supplied documents; monitor for updates from Microsoft MSRC and related references.

CVE-2015-2456

Summary from Project Zero (2016) : Windows kernel font handling (TTF/OTF) contained multiple vulnerabilities discovered via fuzzing (ATMFD.DLL, win32k.sys) with several CVEs (notably CVE-2015-2455 and CVE-2015-2456). Root cause highlighted: the IUP instruction handler in win32k!itrp_IUP failed to...

CVE-2015-6132

CVE-2015-6132 is the Windows library loading remote code execution vulnerability affecting multiple Windows versions. Root cause: mishandled library loading enabling local privilege escalation via a crafted application. The MS15-132 security update fixes this, with public exploits and a Metasploi...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

CVE-2016-7226

CVE-2016-7226 affects the Windows Virtual Hard Disk (VHD) driver on Windows 10 (Gold/1511, 1607) and Windows Server 2016. The VHDMP kernel driver fails to restrict access to certain files, enabling a local attacker to elevate privileges via a crafted application. The root cause is improper file a...

CVE-2016-7259

CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...

CVE-2017-0007

CVE-2017-0007 is a Device Guard security feature bypass in Windows 10 (Gold/1511/1607) and Windows Server 2016 where sign-checked PowerShell scripts could be modified without breaking the signature, allowing execution of unsigned/malicious code. Root cause: Device Guard’s validation of certain el...

CVE-2017-0096

CVE-2017-0096 affects Microsoft Hyper-V across Windows Vista SP2/Server 2008 SP2 R2, Windows 7 SP1, Windows 8.1, Windows Server 2012/R2, Windows 10 1511/1607, and Windows Server 2016. The vulnerability allows guest OS users to disclose sensitive information from the host memory through a crafted ...

CVE-2017-0167

CVE-2017-0167 is a Windows kernel information disclosure vulnerability affecting Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016, caused by the kernel improperly handling objects in memory. Successful exploitation could let an attacker obtain information f...

CVE-2017-11783

CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...

CVE-2017-8480

Technical details for CVE-2017-8480 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-0831

The CVE-2018-0831 entry IDs a Windows kernel elevation-of-privilege vulnerability affecting Windows 10 (versions 1607, 1703, 1709) and Windows Server 2016/1709. The flaw arises from how memory-object handling in the Windows kernel can be exploited by a locally authenticated attacker to run arbitr...

CVE-2018-8347

CVE-2018-8347 is a Windows kernel elevation of privilege vulnerability where the kernel fails to properly handle parsing of certain symbolic links. Affects Windows Server 2016 and Windows 10 (including Windows 10 Server variants). The connected sources confirm the root cause as a parsing issue in...

CVE-2019-0983

CVE-2019-0983 is a Windows Storage Service elevation-of-privilege vulnerability caused by improper handling of file operations. The vulnerability allows a local attacker who already has code execution on the victim to gain elevated privileges by running a specially crafted application. The issue ...

CVE-2019-1007

CVE-2019-1007 is a Windows Audio Service local elevation-of-privilege vulnerability. The issue arises in how the Windows Audio Service handles certain process-related requests, enabling an attacker who can run a crafted application to gain elevated privileges. The CVSS3.0/3.1 metrics show a local...

CVE-2019-1185

CVE-2019-1185 affects Windows Subsystem for Linux. It is an elevation-of-privilege flaw caused by stack corruption in WSL, exploitable by a locally authenticated attacker via a crafted application to run code with elevated privileges. Mitigation is a security update that corrects how WSL handles ...

CVE-2019-1251

Technical details for CVE-2019-1251 are not publicly provided in the connected documents. Monitor for updates. The initial description confirms DirectWrite memory disclosure but provides no product/version/impact details beyond that.

CVE-2019-1422

Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1465

CVE-2019-1465 corresponds to a Windows GDI Information Disclosure vulnerability in the GDI component. The CNVD entries describe an information leakage vector where an attacker could obtain memory contents, with exploitation via social engineering (e.g., crafted documents or untrusted pages). The ...

CVE-2020-0636

CVE-2020-0636 is a Windows Subsystem for Linux elevation-of-privilege vulnerability. The issue arises from how WSL handles files, enabling a local attacker to execute code with elevated privileges if they gain code execution on the system. Microsoft’s MSRC advisory notes the vulnerability could a...

CVE-2020-0776

CVE-2020-0776 is a Windows elevation-of-privilege vulnerability in the Windows AppX Deployment Server. The root cause is the component’s improper handling of file operations, enabling a local attacker who already has execution on the victim machine to escalate privileges. The NVD entry describes ...

CVE-2020-0781

The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...

CVE-2020-0888

CVE-2020-0888 is a DirectX elevation-of-privilege vulnerability. Description: DirectX improperly handles objects in memory, enabling local privilege escalation. It is distinct from CVE-2020-0784. The entry provides a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges, NONE user interaction, HIGH ...

CVE-2020-1001

CVE-2020-1001 affects the Windows Push Notification Service on Windows client/server platforms. The vulnerability is described as an Elevation of Privilege due to how objects are handled in memory by WNS, enabling a local attacker to gain higher privileges. CVSSv3.1 base score is 7.8 (High), with...

CVE-2020-1003

Technical details for CVE-2020-1003 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for authoritative updates from MSRC/NVD.

CVE-2020-1038

Technical details about CVE-2020-1038 are not publicly provided in the connected documents; no affected products/versions or root-cause are specified beyond the generic memory-handling issue. Monitor for authoritative updates.

CVE-2020-1051

CVE-2020-1051 concerns the Windows Jet Database Engine and is described as a remote code execution vulnerability caused by improper handling of objects in memory. The connected KB4556799 entry references Windows security updates and notes that the Jet Database Engine is among updated components, ...

CVE-2020-1094

CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...

CVE-2020-1122

CVE-2020-1122 is a Windows elevation-of-privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. An attacker could exploit it by running a specially crafted application on a victim system to execute code with elevated privileges. The vulnerabi...

CVE-2020-1125

Technical details for CVE-2020-1125 are not provided in the supplied documents. Monitor for updates from official advisories and related cybersecurity feeds.

CVE-2020-1146

CVE-2020-1146 is an elevation of privilege affecting the Microsoft Store Runtime, caused by improper memory handling. The vulnerability requires the attacker to gain code execution on the victim machine and then run a crafted application to elevate privileges. Microsoft addresses the issue via a ...

CVE-2020-1159

CVE-2020-1159 describes an elevation-of-privilege vulnerability in Windows involving the StartTileData.dll and the way it creates files in protected locations. An attacker with local, authenticated access could run a crafted application to execute code with elevated privileges. The underlying iss...

CVE-2020-1217

Windows Runtime Information Disclosure Vulnerability (CVE-2020-1217) stems from improper handling of memory objects in Windows Runtime. The CNVD entry describes an attacker being able to read freed memory and, with elevated privileges, execute arbitrary code. No patch/fix details are provided in ...

CVE-2020-1263

CVE-2020-1263 describes an information disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how memory objects are handled by WER, allowing an attacker to potentially access information they should not have. The affected component is Windows Error Reporting, and the ro...

CVE-2020-1404

CVE-2020-1404 describes a Windows Runtime elevation of privilege vulnerability where memory objects are not handled safely, enabling local privilege escalation. The provided documents do not specify affected products/versions, root cause details beyond memory-management issue, exploit information...

CVE-2020-1459

CVE-2020-1459 is a Windows ARM information-disclosure vulnerability tied to speculative-execution side-channel behavior (straight-line speculation). The issue requires local privileges to run a crafted app to exfiltrate data. The provided documents state that Microsoft’s security update bypasses ...

CVE-2020-17035

Technical details for CVE-2020-17035 are not provided in the supplied connected documents. Monitor for updates.

CVE-2021-1670

CVE-2021-1670 is a Windows vulnerability affecting the Projected File System FS Filter Driver that leads to information disclosure. The issue is characterized in public sources as a local-information-disclosure flaw in the FS filter driver, with the CVE tracked by Microsoft as CVE-2021-1670 and l...

CVE-2021-26416

Technical details about CVE-2021-26416 are not provided in the connected documents. The dataset cites Windows Hyper‑V DoS risk but does not specify affected versions, exploit vectors, or remediation beyond generic advisories; monitor for updates.

CVE-2021-27070

CVE-2021-27070 is the Windows 10 Update Assistant Elevation of Privilege vulnerability. Connected sources confirm it affects the Windows Update Assistant component and was addressed by Microsoft in KB5000802 (March 9, 2021) which lists CVE-2021-27070 among fixed issues. The CVSS information in th...

CVE-2021-28316

CVE-2021-28316 affects Windows WLAN AutoConfig, enabling a security feature bypass in that service. Reports indicate it is a local-attack surface with no public exploitation to date, and Microsoft released fixes as part of the September 2021 Patch Tuesday. The vulnerability’s impact is described ...

CVE-2021-28317

Technical details about CVE-2021-28317 are not provided in the connected documents. Available sources only reiterate the vulnerability name; monitor for updates for public details.

CVE-2021-34509

Technical details about CVE-2021-34509 (Storage Spaces Controller Information Disclosure Vulnerability) are not publicly provided in the connected documents. Monitor for updates; current sources do not disclose affected products, root cause, impact, or fixes beyond general references.

CVE-2021-43247

CVE-2021-43247 affects the Windows TCP/IP driver, enabling local elevation of privilege. It is rated HIGH (CVSSv3.1: LOCAL, LOW privileges required, NONE user interaction) withImpact/H. The vulnerability is addressed by Microsoft security updates (e.g., KB5008212/KB5008218 family; OS builds 19041...

CVE-2022-38030

Technical details about CVE-2022-38030 are not provided in the supplied documents. Public information about affected product versions, exploitation status, and fixes is not available here; monitor for updates from official advisories.

CVE-2016-0195

Summary: CVE-2016-0195 is a remote code execution vulnerability in the Windows Imaging Component (WIC) affecting multiple Windows versions (Vista to Windows 10). The issue arises from improper handling of memory/objects in the Imaging Component, enabling remote attackers to run arbitrary code via...

CVE-2016-3238

The CVE-2016-3238 vulnerability affects the Windows Print Spooler and allows remote code execution when a crafted print driver is provided during printer installation. Affected products include multiple Windows client/server editions (Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 RT/1511, Win...

CVE-2016-3272

CVE-2016-3272 is a Windows kernel information disclosure vulnerability caused by improper handling of page-fault system calls in the Windows kernel. A local attacker could disclose information from one process to another. Affected products include Windows 8.1, Windows Server 2012/2012 R2, Windows...

CVE-2016-7218

Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...