CVE-2017-8575

CVE-2017-8575 is a Windows kernel/Graphics component information disclosure vulnerability. An authenticated attacker could exploit memory handling flaws in the Windows Graphics Component to obtain information from memory via a specially crafted application. Affected products include Windows 10 (v...

CVE-2017-8727

CVE-2017-8727 is an RCE in the Windows Text Services Framework that can be triggered through memory handling in the Windows Text Services/IE edge scripting path. The connected KB entry confirms the flaw exists in Internet Explorer/Windows components and was addressed in Microsoft’s October 2017 p...

CVE-2018-0831

The CVE-2018-0831 entry IDs a Windows kernel elevation-of-privilege vulnerability affecting Windows 10 (versions 1607, 1703, 1709) and Windows Server 2016/1709. The flaw arises from how memory-object handling in the Windows kernel can be exploited by a locally authenticated attacker to run arbitr...

CVE-2018-8231

CVE-2018-8231 is a remote code execution vulnerability in Microsoft Windows HTTP.sys. The flaw occurs when Http.sys improperly handles objects in memory, allowing an attacker to gain control of the affected system by sending specially crafted requests. Affected products include Windows Server 201...

CVE-2019-1272

Connected sources confirm a Windows privilege escalation vulnerability related to ALPC in Microsoft Windows/Windows Server. The issue arises from improper handling of ALPC calls, allowing an attacker who logs on to the system to run arbitrary code in the security context of the local system (loca...

CVE-2019-1286

CVE-2019-1286 concerns a Windows GDI information disclosure vulnerability. The connected materials describe an information disclosure in the Graphics Device Interface (GDI) where memory contents may be improperly disclosed. The vulnerability is tied to the GDI component and memory handling. The s...

CVE-2019-1396

Technical details about CVE-2019-1396 are not present in the provided connected documents. The EUVD entries mention malware in 'sbrugna' but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2020-0636

CVE-2020-0636 is a Windows Subsystem for Linux elevation-of-privilege vulnerability. The issue arises from how WSL handles files, enabling a local attacker to execute code with elevated privileges if they gain code execution on the system. Microsoft’s MSRC advisory notes the vulnerability could a...

CVE-2020-0772

CVE-2020-0772 is a Windows Error Reporting memory-handling bug causing local privilege escalation. The vulnerability requires local execution and has a CVSSv3.1 base score of 7.8 (HIGH) with local attack, low attack complexity, and no user interaction. The description does not provide a patch or ...

CVE-2020-0839

CVE-2020-0839 describes an elevation of privilege in the Windows dnsrslvr.dll memory handling. An attacker with local authentication could run a crafted app to execute code with elevated permissions. The vulnerability stems from improper memory object handling in dnsrslvr.dll, and mitigations rel...

CVE-2020-0841

Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.

CVE-2020-0842

CVE-2020-0842 is a Windows Installer elevation-of-privilege vulnerability. It arises from how Windows Installer handles certain filesystem operations, enabling an unprivileged attacker to execute code on the victim system with local access. The entry is part of a set of CVEs linked to Windows Ins...

CVE-2020-0888

CVE-2020-0888 is a DirectX elevation-of-privilege vulnerability. Description: DirectX improperly handles objects in memory, enabling local privilege escalation. It is distinct from CVE-2020-0784. The entry provides a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges, NONE user interaction, HIGH ...

CVE-2020-0922

Technical details about CVE-2020-0922 are not provided in the connected documents. The Initial Description only notes a remote code execution in Microsoft COM for Windows with a fix in a security update; no product/version/root-cause/exploit details are included here. Monitor for official disclos...

CVE-2020-0958

CVE-2020-0958 is a Windows kernel-mode elevation-of-privilege vulnerability tied to the Win32k driver. The CNVD-2020-32590/32588/32589 entries describe the flaw as an issue in how the kernel-mode Win32k object memory is handled, enabling local privilege escalation. The vulnerability affects Windo...

CVE-2020-0983

CVE-2020-0983 corresponds to a local Elevation of Privilege flaw in Windows Delivery Optimization. Connected CNVD records describe an EoP in the Delivery Optimization Service caused by improper handling of in-memory objects, enabling an attacker with local access to execute arbitrary code with el...

CVE-2020-1007

CVE-2020-1007 is a Windows kernel information disclosure vulnerability. The issue arises from how the Windows kernel handles objects in memory, enabling information disclosure when exploited locally. The description, CVSS data, and references indicate a kernel-level memory handling flaw with part...

CVE-2020-1038

Technical details about CVE-2020-1038 are not publicly provided in the connected documents; no affected products/versions or root-cause are specified beyond the generic memory-handling issue. Monitor for authoritative updates.

CVE-2020-1146

CVE-2020-1146 is an elevation of privilege affecting the Microsoft Store Runtime, caused by improper memory handling. The vulnerability requires the attacker to gain code execution on the victim machine and then run a crafted application to elevate privileges. Microsoft addresses the issue via a ...

CVE-2020-1159

CVE-2020-1159 describes an elevation-of-privilege vulnerability in Windows involving the StartTileData.dll and the way it creates files in protected locations. An attacker with local, authenticated access could run a crafted application to execute code with elevated privileges. The underlying iss...

CVE-2020-1387

Technical details about CVE-2020-1387 (affected product, root cause, impact, or remediation) are not publicly provided in the supplied documents; monitor for updates.

CVE-2020-1459

CVE-2020-1459 is a Windows ARM information-disclosure vulnerability tied to speculative-execution side-channel behavior (straight-line speculation). The issue requires local privileges to run a crafted app to exfiltrate data. The provided documents state that Microsoft’s security update bypasses ...

CVE-2020-1471

CVE-2020-1471 is an elevation-of-privilege vulnerability in Windows CloudExperienceHost. The root cause, as described in the initial document, is that CloudExperienceHost fails to properly check COM objects, enabling an attacker who can log on to an affected system to run a crafted script or appl...

CVE-2020-1547

CVE-2020-1547 – Windows Backup Engine memory handling vulnerability . A local-elevation-of-privilege flaw exists in Windows Backup Engine due to improper memory handling. An attacker must first gain code execution on the victim and then run a crafted application to elevate privileges. According t...

CVE-2020-17027

Technical details about CVE-2020-17027 are not present in the provided documents; no specific affected products, root cause, impact, or remediation are disclosed. Monitor for updates.

CVE-2020-17037

Technical details are not publicly available in the provided documents for CVE-2020-17037; monitor for updates.

CVE-2020-17068

Technical details for CVE-2020-17068 are not publicly provided in the connected documents. No confirmed affected products, root cause, or fixes are present here. Monitor for updates from authoritative sources.

CVE-2021-1670

CVE-2021-1670 is a Windows vulnerability affecting the Projected File System FS Filter Driver that leads to information disclosure. The issue is characterized in public sources as a local-information-disclosure flaw in the FS filter driver, with the CVE tracked by Microsoft as CVE-2021-1670 and l...

CVE-2021-1672

CVE-2021-1672 refers to a Windows vulnerability in the Projected File System (PFS) FS Filter Driver that enables information disclosure. The connected MSRC entry and NVD record confirm the affected component is the Windows PFS FS Filter Driver, with root cause described as an information disclosu...

CVE-2021-1734

CVE-2021-1734 is described as a Windows Remote Procedure Call Information Disclosure vulnerability. The provided metrics show CVSS v3.1 base score 7.5 (HIGH) with a network attack vector, low attack complexity, no privileges required, no user interaction, and an impact of high confidentiality los...

CVE-2021-26417

CVE-2021-26417 is described as a Windows Overlay Filter Information Disclosure vulnerability with local attack vector. Connected documents corroborate this as a Microsoft Windows/Windows Server information-disclosure issue connected to the Overlay Filter. Public references show the vulnerability ...

CVE-2021-27090

CVE-2021-27090 is an Elevation of Privilege in Windows Secure Kernel Mode. Affected software area: Windows Secure Kernel Mode components. Root cause (as documented): elevation of privileges in the kernel, enabling an attacker to obtain increased privileges locally. Impact (per sources): privilege...

CVE-2021-28314

Technical details such as affected products, vulnerable components, exploit method, affected versions, and remediation specifics for CVE-2021-28314 are not provided in the connected documents; monitor for updates.

CVE-2021-28441

Technical details about CVE-2021-28441 are not provided in the connected documents. Monitor for updates from official advisories for affected products, scope, and fixes.

CVE-2021-43247

CVE-2021-43247 affects the Windows TCP/IP driver, enabling local elevation of privilege. It is rated HIGH (CVSSv3.1: LOCAL, LOW privileges required, NONE user interaction) withImpact/H. The vulnerability is addressed by Microsoft security updates (e.g., KB5008212/KB5008218 family; OS builds 19041...

CVE-2022-35760

Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.

CVE-2022-38030

Technical details about CVE-2022-38030 are not provided in the supplied documents. Public information about affected product versions, exploitation status, and fixes is not available here; monitor for updates from official advisories.

CVE-2015-2478

CVE-2015-2478 is the Windows Winsock Elevation of Privilege vulnerability. A crafted application can trigger a Winsock call referencing an invalid address, enabling local privilege escalation on multiple Windows platforms: Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windo...

CVE-2015-6107

CVE-2015-6107 concerns a remote-code-execution vulnerability in the Windows font library. The issue arises when parsing specially crafted embedded fonts, enabling arbitrary code execution on affected systems. Public references indicate this affects a broad set of Windows versions (Vista through W...

CVE-2016-0180

CVE-2016-0180 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10 variants). The root cause is how the Windows kernel mishandles symbolic links, enabling a local attacker to gain privileges via a...

CVE-2016-0195

Summary: CVE-2016-0195 is a remote code execution vulnerability in the Windows Imaging Component (WIC) affecting multiple Windows versions (Vista to Windows 10). The issue arises from improper handling of memory/objects in the Imaging Component, enabling remote attackers to run arbitrary code via...

CVE-2016-7259

CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...

CVE-2017-0074

CVE-2017-0074 is a Hyper-V denial-of-service vulnerability affecting Windows Hyper-V across multiple Windows client and server editions. Connected sources (CNVD entries) describe a Hyper-V DoS where a crafted application can crash the host, affecting Hyper-V guests; specific affected versions ali...

CVE-2017-0096

CVE-2017-0096 affects Microsoft Hyper-V across Windows Vista SP2/Server 2008 SP2 R2, Windows 7 SP1, Windows 8.1, Windows Server 2012/R2, Windows 10 1511/1607, and Windows Server 2016. The vulnerability allows guest OS users to disclose sensitive information from the host memory through a crafted ...

CVE-2017-11785

CVE-2017-11785 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory, affecting multiple Windows client and server versions (from Windows 7 SP1 to Windows 10 builds including 1511/1607/1703 and Windows Server 2008 SP2/R2 SP1, 2012, 2016). The un...

CVE-2018-0894

Technical details about CVE-2018-0894 are not provided in the connected documents. The initial entry describes an information disclosure vulnerability in Windows kernels across multiple versions, but no affected product specifics, fixes, or exploit data are included here. Monitor for updates.

CVE-2018-8222

CVE-2018-8222 affects Microsoft Device Guard (Code Integrity Policy) on Windows Server 2016 and Windows 10/Windows 10 Server. The vulnerability is a security feature bypass that could allow an attacker to inject malicious code into a Windows PowerShell session. The connected documents confirm the...

CVE-2019-0999

CVE-2019-0999 is an elevation of privilege vulnerability in DirectX where memory objects are improperly handled. The vulnerability allows local attackers to gain high integrity, with exploit characteristics noted in NVD as Local access, Low attack complexity, and no user interaction (CVSS v3.0: A...

CVE-2019-1424

CVE-2019-1424 is a Windows Netlogon security feature bypass vulnerability. Public data describe a vulnerability in how the Netlogon secure channel is handled, with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) and a NETWORK attack vector, no user interaction required. No exp...

CVE-2019-1435

Technical details for CVE-2019-1435 are not publicly available in the provided documents. Connected entries mention malware but do not reveal the affected component, root cause, impact, or remediation. Monitor for updates.