CVE-2019-1334

Technical details about CVE-2019-1334 are not publicly available in the provided connected documents. Monitor for updates; no affected products, root cause, or fixes are described here.

CVE-2019-1470

CVE-2019-1470 is described as an information-disclosure vulnerability in Windows Hyper-V where a host OS fails to properly validate input from an authenticated user on a guest OS. The linked Red Hat advisory repeats this description. The connected documents do not provide specific affected versio...

CVE-2020-0772

CVE-2020-0772 is a Windows Error Reporting memory-handling bug causing local privilege escalation. The vulnerability requires local execution and has a CVSSv3.1 base score of 7.8 (HIGH) with local attack, low attack complexity, and no user interaction. The description does not provide a patch or ...

CVE-2020-0790

Technical details about CVE-2020-0790 are not publicly provided in the connected documents. Monitor official advisories for updates; these sources mention a splwow64 Elevation of Privilege but do not provide concrete technical specifics in the supplied materials.

CVE-2020-0792

Technical details about CVE-2020-0792 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0843

CVE-2020-0843 is a local elevation-of-privilege vulnerability in Windows Installer. The issue arises from how Windows Installer handles certain filesystem operations, allowing an unprivileged attacker on the victim system to compromise the host. CVSSv3.1 base score is 7.8 (HIGH) with local exploi...

CVE-2020-0907

CVE-2020-0907 is described as a remote code execution vulnerability in how Microsoft Graphics Components handles objects in memory. The connected MS KB and vendor feeds confirm this CVE is among a set of Windows updates (KB4549951 family) addressing multiple issues, but the provided documents do ...

CVE-2020-0940

CVE-2020-0940 is a Windows Push Notification Service Elevation of Privilege vulnerability. Connected documents (CNVD-2020-25581, CNVD-2020-32584) describe an EoP arising from how memory objects are handled in Windows Push Notification Service, enabling a locally authenticated attacker to elevate ...

CVE-2020-0989

CVE-2020-0989 affects Windows Mobile Device Management Diagnostics. Root cause: improper handling of junctions, causing information disclosure. Exploitation requires local authentication: an attacker logs on and runs a crafted app to read restricted files. Impact is read access to files due to a ...

CVE-2020-1047

CVE-2020-1047 is an elevation-of-privilege vulnerability in Windows Hyper-V where memory object handling can allow an attacker to gain elevated privileges on the host OS. The flaw itself does not enable arbitrary code execution in isolation, but could be combined with other vulnerabilities (e.g.,...

CVE-2020-1053

CVE-2020-1053 affects DirectX where improper handling of objects in memory can lead to elevation of privilege, allowing an attacker to execute arbitrary code in kernel mode after logging on and running a crafted program. The vulnerability is triggered by object handling in DirectX, with impact de...

CVE-2020-1129

CVE-2020-1129 is a remote code execution vulnerability in Microsoft Windows Codecs Library. It stems from how the Codecs Library handles objects in memory, enabling an attacker to take control of an affected system by processing a specially crafted image file. The impact includes potential full s...

CVE-2020-1136

CVE-2020-1136 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The connected CVE entries (CVE-2020-1150 family) likewise reference Windows Media Foundation memory corruption and imply broad impact within Windows. The i...

CVE-2020-1199

CVE-2020-1199 is a Windows Feedback Hub Elevation of Privilege vulnerability. Connected sources confirm the flaw arises from improper handling of memory objects within the Feedback Hub, enabling an attacker who can log on to run processes with elevated privileges. The Microsoft/MSRC entry indicat...

CVE-2020-1238

CVE-2020-1238 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. It affects Windows Media Foundation components; exploitation could allow memory corruption within the affected process, with CVSS indicating high impact (exploitability...

CVE-2020-1250

Technical details about CVE-2020-1250, including affected products, root cause, impact, or patch specifics, are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-1268

CVE-2020-1268 is a Windows information-disclosure vulnerability where a Windows service improperly handles objects in memory. Exploitation requires an attacker to log on to the affected system and run a crafted application; the flaw does not in itself enable code execution or privilege escalation...

CVE-2020-1287

CVE-2020-1287 is a Windows WalletService elevation of privilege vulnerability. The WalletService stores/handles objects in memory in a way that can be exploited to elevate privileges; both CNVD entries (CNVD-2021-27713, CNVD-2021-29542) describe this WalletService memory-object handling flaw with...

CVE-2020-1351

CVE-2020-1351 is described in connected sources as an information disclosure vulnerability linked to the Windows Graphics Component. The root cause, as stated in CNVD-2021-63330, is that the Windows graphics component fails to properly handle objects in memory, enabling information disclosure on ...

CVE-2020-17007

CVE-2020-17007 is a Windows Error Reporting Elevation of Privilege vulnerability. The NVD entry assigns a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW, no user interaction. The issue is categorized as a local, post-authentication ...

CVE-2020-17029

CVE-2020-17029 is a Windows Canonical Display Driver Information Disclosure Vulnerability. Affected software: Windows Canonical Display Driver. Root cause: information disclosure vulnerability within the Canonical Display driver. Impact: confidentiality impact HIGH (per CVSS 3.1), with local atta...

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.

CVE-2020-17056

Technical details about CVE-2020-17056 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates.

CVE-2021-1687

CVE-2021-1687 affects Windows WalletService and is categorized as a Local, Elevation of Privilege vulnerability. The NVD entry notes a High impact (CVSS v3.1 base score 7.8) with Confidentiality, Integrity, and Availability labeled as High, and attack vector Local with Privileges Required Low and...

CVE-2021-24076

CVE-2021-24076 is listed in multiple open-source vulnerability feeds as a Microsoft Windows VMSwitch Information Disclosure Vulnerability. Connected sources confirm the affected component is Windows VMSwitch and classify the impact as information disclosure with a CVSS v3.1 base score of 5.5 (LOC...

CVE-2021-24082

Technical details for CVE-2021-24082 are not publicly available in the provided connected documents. The records list the vulnerability title but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2022-24486

Technical details for CVE-2022-24486 are not provided in the supplied documents. No affected product/version, root cause, or remediation is described here. Monitor for updates.

CVE-2022-34712

Technical details about CVE-2022-34712 are not publicly provided in the connected documents. Based on the supplied sources, we cannot determine affected products, root cause, or remediation. Monitor for updates from official advisories and CVE records.

CVE-2015-2478

CVE-2015-2478 is the Windows Winsock Elevation of Privilege vulnerability. A crafted application can trigger a Winsock call referencing an invalid address, enabling local privilege escalation on multiple Windows platforms: Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windo...

CVE-2015-6107

CVE-2015-6107 concerns a remote-code-execution vulnerability in the Windows font library. The issue arises when parsing specially crafted embedded fonts, enabling arbitrary code execution on affected systems. Public references indicate this affects a broad set of Windows versions (Vista through W...

CVE-2016-3219

CVE-2016-3219 affects Windows 10 (Gold/1511) kernel-mode Win32k; root cause is a privilege-escalation path via IO Manager/file creation with INPC and IFAC, combined with object-manager shadow directories. Project Zero analysis details an IO flow where INPC disables MemAC/SecAC and OFAC handling g...

CVE-2016-3287

The CVE-2016-3287 vulnerability impacts Microsoft Windows platforms (Windows 8.1, Windows Server 2012/R2, Windows RT 8.1, and Windows 10 TH/1511) where an attacker with local access and administrative privileges can bypass Secure Boot by installing a crafted policy. Root cause: insecure handling ...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-0081

CVE-2017-0081 affects Windows kernel-mode drivers in Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (Gold, 1511, 1607) and Windows Server 2016, enabling local privilege escalation via a crafted application in Win32k. Impact is described as complete confidentiality, integri...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0173

Technical details such as affected builds, vulnerable components, exploitability, and fixes are not provided in the attached documents. Monitor for updates from Microsoft/MSRC and ENISA EUVD entries for specifics.

CVE-2018-0926

Technical details are not publicly available in the provided connected documents; monitor for updates.

CVE-2018-8253

CVE-2018-8253 overview (normal): A local elevation-of-privilege in Microsoft Cortana on the lockscreen where arbitrary website browsing is allowed. Affects Windows 10 and Windows Server 2016; root cause is Cortana-enabled lockscreen browsing. Exploitation requires physical access and Cortana assi...

CVE-2018-8435

CVE-2018-8435 is a Windows Hyper-V Security Feature Bypass vulnerability where the Hyper-V BIOS loader may fail to provide a high-entropy source. The issue can allow a remote attacker to bypass security restrictions by rebooting a guest VM, impacting Windows Server 2016 and Windows 10/Windows 10 ...

CVE-2019-1398

CVE-2019-1398 is a Windows Hyper-V remote code execution vulnerability. The vulnerability arises from improper validation of input from an authenticated guest OS user, enabling an attacker to run arbitrary code on the host Hyper-V machine. The CNVD entry for Microsoft Windows Hyper-V Remote Code ...

CVE-2019-1424

CVE-2019-1424 is a Windows Netlogon security feature bypass vulnerability. Public data describe a vulnerability in how the Netlogon secure channel is handled, with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) and a NETWORK attack vector, no user interaction required. No exp...

CVE-2019-1472

CVE-2019-1472 is described in CNVD-2020-02181 as a Microsoft Windows Kernel Information Disclosure Vulnerability. It results from improper handling of memory objects in the Windows kernel; an attacker who can log on to an affected system and run a specially crafted application could disclose info...

CVE-2020-0719

Technical details about CVE-2020-0719 are not publicly provided in the connected documents. Monitor for updates; current sources only reference malware entries unrelated to the technical specifics.

CVE-2020-0722

Technical details for CVE-2020-0722 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0725

Technical details for CVE-2020-0725 are not publicly provided in the supplied documents; no concrete affected products, versions, root cause, or fixes are included. Monitor for updates from official advisories and EUVD entries.

CVE-2020-0730

CVE-2020-0730 concerns Windows User Profile Service (ProfSvc) elevation of privilege due to improper handling of symbolic links. The CNVD-2020-14305 entry describes that an attacker could delete files and folders in an elevated context by exploiting this symlink handling issue. The provided conne...

CVE-2020-0757

CVE-2020-0757 is a Windows local privilege-escalation vulnerability caused by Windows improperly handling Secure Shell (SSH) remote commands. An attacker who can log on and run a crafted SSH-related application could execute code with elevated privileges. Public docs provide CVSS:3.1 base score 7...

CVE-2020-0770

CVE-2020-0770 is an elevation of privilege vulnerability in the Windows ActiveX Installer Service caused by improper handling of memory. The CNVD entry confirms the syndrome but provides no versioned product scope or patch details. Public documents indicate that exploitation requires local execut...

CVE-2020-0921

Technical details about CVE-2020-0921 are not provided in the connected documents; the materials reference the vulnerability in general terms related to Microsoft Graphics components but do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2020-0922

Technical details about CVE-2020-0922 are not provided in the connected documents. The Initial Description only notes a remote code execution in Microsoft COM for Windows with a fix in a security update; no product/version/root-cause/exploit details are included here. Monitor for official disclos...