CVE-2021-43231

Technical details for CVE-2021-43231 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation information.

CVE-2022-35793

Technical details about CVE-2022-35793 are not provided in the connected documents. The set contains only general MSKB updates; monitor official disclosures or vendor advisories for affected products, root cause, impact, and fixes.

CVE-2022-38003

The CVE-2022-38003 issue is described in connected CNVD as a Windows Resilient File System (ReFS) Elevation of Privilege vulnerability stemming from improper privilege assignment in an application. This means local attackers could escalate privileges on affected Windows systems. The vulnerability...

CVE-2016-3218

CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...

CVE-2016-3263

CVE-2016-3263 concerns a GDI+/Graphics Device Interface information-disclosure issue across multiple Windows platforms (Vista SP2 through Windows 10 1607, Windows Server equivalents) that allows remote attackers to bypass ASLR via unspecified vectors. Affected components are GDI/GDI+ in Windows a...

CVE-2017-0021

Technical details about CVE-2017-0021 are not publicly available in the provided connected documents. Monitor for updates; no specific affected builds, root cause, or fixes are described here.

CVE-2017-0081

CVE-2017-0081 affects Windows kernel-mode drivers in Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (Gold, 1511, 1607) and Windows Server 2016, enabling local privilege escalation via a crafted application in Win32k. Impact is described as complete confidentiality, integri...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-0173

Technical details such as affected builds, vulnerable components, exploitability, and fixes are not provided in the attached documents. Monitor for updates from Microsoft/MSRC and ENISA EUVD entries for specifics.

CVE-2017-0259

CVE-2017-0259 is a Windows kernel local information-disclosure vulnerability affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. A specially crafted document can cause leakage of sensitive information via the kernel. Public e...

CVE-2017-8531

CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...

CVE-2017-8718

CVE-2017-8718 is a remote code execution vulnerability in the Microsoft JET Database Engine that affects Windows components across multiple OS versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 1511–1703, Windows Server 2016). Root caus...

CVE-2018-0828

CVE-2018-0828 is a Windows elevation-of-privilege vulnerability affecting Windows 10 (version 1607) and Windows Server 2016. The root cause is improper protection of the MultiPoint management account password, allowing a local attacker who logs in to run a specially crafted application to execute...

CVE-2018-8337

CVE-2018-8337 is a local security feature bypass in Windows Subsystem for Linux (WSL) where WSL improperly handles case sensitivity. A low-privilege local attacker could replace or delete arbitrary files by running a crafted application. Affected: Windows 10 and Windows Server 2016/1709/1803 rang...

CVE-2018-8435

CVE-2018-8435 is a Windows Hyper-V Security Feature Bypass vulnerability where the Hyper-V BIOS loader may fail to provide a high-entropy source. The issue can allow a remote attacker to bypass security restrictions by rebooting a guest VM, impacting Windows Server 2016 and Windows 10/Windows 10 ...

CVE-2019-1171

CVE-2019-1171 is an information-disclosure vulnerability in SymCrypt during OAEP decryption. The underlying issue is in OAEP decoding operations, allowing an attacker who can log on to an affected system to obtain information that could aid further compromise. The CVE does not enable code executi...

CVE-2019-1398

CVE-2019-1398 is a Windows Hyper-V remote code execution vulnerability. The vulnerability arises from improper validation of input from an authenticated guest OS user, enabling an attacker to run arbitrary code on the host Hyper-V machine. The CNVD entry for Microsoft Windows Hyper-V Remote Code ...

CVE-2020-0666

CVE-2020-0666 is described in CNVD sources as an elevation of privilege affecting Microsoft Windows and Windows Server, stemming from the Windows Search Indexer mishandling objects in memory. The vulnerability enables code execution with elevated privileges on the affected system (local context)....

CVE-2020-0757

CVE-2020-0757 is a Windows local privilege-escalation vulnerability caused by Windows improperly handling Secure Shell (SSH) remote commands. An attacker who can log on and run a crafted SSH-related application could execute code with elevated privileges. Public docs provide CVSS:3.1 base score 7...

CVE-2020-0774

CVE-2020-0774 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly handles memory objects, allowing an attacker to leak memory contents and potentially information needed for further compromise. The vulnerability can be exploited via social engineering (e.g....

CVE-2020-0790

Technical details about CVE-2020-0790 are not publicly provided in the connected documents. Monitor official advisories for updates; these sources mention a splwow64 Elevation of Privilege but do not provide concrete technical specifics in the supplied materials.

CVE-2020-0792

Technical details about CVE-2020-0792 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-0860

Technical details for CVE-2020-0860 are not publicly provided in the connected documents. Available sources mention the vulnerability in general terms; monitor for updates and additional technical disclosures.

CVE-2020-0897

Technical details about CVE-2020-0897 (affected product, root cause, impacted versions, and fixes) are not publicly provided in the connected documents; monitor for updates.

CVE-2020-1033

CVE-2020-1033 (Windows Kernel Information Disclosure) The vulnerability is an information disclosure in the Windows kernel where objects in memory are improperly handled. An authenticated attacker could exploit this by running a specially crafted application to obtain information that could help ...

CVE-2020-1199

CVE-2020-1199 is a Windows Feedback Hub Elevation of Privilege vulnerability. Connected sources confirm the flaw arises from improper handling of memory objects within the Feedback Hub, enabling an attacker who can log on to run processes with elevated privileges. The Microsoft/MSRC entry indicat...

CVE-2020-1209

CVE-2020-1209 is a local elevation-of-privilege vulnerability in the Windows Network List Service. The issue arises from improper handling of in-memory objects within this service, enabling a locally authenticated attacker to execute code with elevated privileges. Public docs within the connected...

CVE-2020-1268

CVE-2020-1268 is a Windows information-disclosure vulnerability where a Windows service improperly handles objects in memory. Exploitation requires an attacker to log on to the affected system and run a crafted application; the flaw does not in itself enable code execution or privilege escalation...

CVE-2020-1305

CVE-2020-1305 is a Windows State Repository Service elevation-of-privilege vulnerability caused by improper handling of in-memory objects. Affected component: Windows State Repository Service on Windows client/server platforms. Impact: attacker could elevate privileges locally. Remediation: patch...

CVE-2020-1344

CVE-2020-1344 is a Windows WalletService elevation-of-privilege vulnerability rooted in how WalletService handles objects in memory, potentially allowing a crafted app to execute code with elevated privileges. Related entries (CVE-2020-1362/1369) describe the same WalletService memory-handling th...

CVE-2020-1368

CVE-2020-1368 is a Windows elevation-of-privilege vulnerability in the Windows Credential Enrollment Manager Service. The CNVD entry states that the issue stems from how the Credential Enrollment Manager Service handles objects in memory, which an attacker can exploit by running a specially craft...

CVE-2020-1397

CVE-2020-1397 is an information-disclosure flaw in Windows Imaging Component (WIC) related to how WindowsCodecs handles image decoding, particularly TIFF/CCITT paths. FireEye’s analysis identifies the root cause as uninitialized memory flowing through the image decoding pipeline (TIFFReadBufferSe...

CVE-2020-1401

CVE-2020-1401 is a Remote Code Execution vulnerability in Microsoft Windows/Windows Server arising from improper handling of objects in memory by the Jet Database Engine. The connected CNVD entries describe the root cause as a failure of the Jet Database Engine to properly handle in-memory object...

CVE-2020-1409

CVE-2020-1409 is a DirectWrite Remote Code Execution vulnerability in Windows where the attacker can trigger code execution by abusing how DirectWrite handles objects in memory. The connected material confirms the affected area (DirectWrite) and the root cause (memory object handling) and notes h...

CVE-2020-1437

CVE-2020-1437 is described in CNVD as an elevation-of-privilege vulnerability in the Windows Network Location Awareness Service. The flaw stems from how the service handles objects in memory, enabling an attacker to execute code with elevated privileges by running a specially crafted application....

CVE-2020-16900

CVE-2020-16900 is a local privilege-escalation vulnerability in Windows where the Event System improperly handles objects in memory. An attacker must first gain code execution on the victim, then run a crafted application to elevate privileges. The fix is a security update that corrects how the W...

CVE-2020-17007

CVE-2020-17007 is a Windows Error Reporting Elevation of Privilege vulnerability. The NVD entry assigns a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW, no user interaction. The issue is categorized as a local, post-authentication ...

CVE-2020-17012

CVE-2020-17012 is a Windows Elevation of Privilege affecting the Bind Filter Driver. The vulnerability is rooted in the Windows Bind Filter Driver component, enabling local attackers with low privileges and no user interaction to elevate privileges (CVSSv3.1: 7.8, HIGH; CVSSv2: 4.6, MEDIUM). Affe...

CVE-2020-17034

Technical details about CVE-2020-17034 are not publicly provided in the supplied documents; monitor for updates.

CVE-2020-17046

Technical details for CVE-2020-17046 are not provided in the supplied documents. Public information is limited to basic description; monitor for updates.

CVE-2020-17075

CVE-2020-17075 corresponds to a Windows USO Core Worker elevation-of-privilege vulnerability. According to the linked NVD entry, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; no user interaction needed. Th...

CVE-2021-1687

CVE-2021-1687 affects Windows WalletService and is categorized as a Local, Elevation of Privilege vulnerability. The NVD entry notes a High impact (CVSS v3.1 base score 7.8) with Confidentiality, Integrity, and Availability labeled as High, and attack vector Local with Privileges Required Low and...

CVE-2021-24076

CVE-2021-24076 is listed in multiple open-source vulnerability feeds as a Microsoft Windows VMSwitch Information Disclosure Vulnerability. Connected sources confirm the affected component is Windows VMSwitch and classify the impact as information disclosure with a CVSS v3.1 base score of 5.5 (LOC...

CVE-2021-24082

Technical details for CVE-2021-24082 are not publicly available in the provided connected documents. The records list the vulnerability title but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2021-43237

CVE-2021-43237 is a Windows Setup Elevation of Privilege vulnerability. Affected: Windows setup components (local vector). Impact per CVSS: high confidentiality, integrity, and availability; local, low/medium complexity with low privileges required (per CVSS 3.1) and user interaction may be requi...

CVE-2016-0182

CVE-2016-0182 – Windows Journal Memory Corruption Vulnerability : A memory corruption flaw in Windows Journal can enable remote code execution when a user opens a specially crafted Journal file (.jnt). Affected: Windows Journal in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2016-3287

The CVE-2016-3287 vulnerability impacts Microsoft Windows platforms (Windows 8.1, Windows Server 2012/R2, Windows RT 8.1, and Windows 10 TH/1511) where an attacker with local access and administrative privileges can bypass Secure Boot by installing a crafted policy. Root cause: insecure handling ...

CVE-2016-3332

Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2017-0109

Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...

CVE-2017-0287

CVE-2017-0287 relates to a Windows Uniscribe information disclosure vulnerability. The connected Kaspersky advisory explicitly notes an information disclosure in Windows Uniscribe that can be exploited remotely by a crafted document to obtain sensitive information. The provided documents do not s...