2974 matches found
CVE-2020-1136
CVE-2020-1136 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The connected CVE entries (CVE-2020-1150 family) likewise reference Windows Media Foundation memory corruption and imply broad impact within Windows. The i...
CVE-2020-1238
CVE-2020-1238 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. It affects Windows Media Foundation components; exploitation could allow memory corruption within the affected process, with CVSS indicating high impact (exploitability...
CVE-2020-1261
CVE-2020-1261 is an information-disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how WER handles memory objects, allowing potential exposure of memory contents. The CVE is stated as distinct from CVE-2020-1263. Public sources in the provided documents describe the ...
CVE-2020-1344
CVE-2020-1344 is a Windows WalletService elevation-of-privilege vulnerability rooted in how WalletService handles objects in memory, potentially allowing a crafted app to execute code with elevated privileges. Related entries (CVE-2020-1362/1369) describe the same WalletService memory-handling th...
CVE-2020-1392
CVE-2020-1392 is an Elevation of Privilege vulnerability in the Windows Delivery Optimization service. It arises from improper handling of memory objects, enabling a local attacker to execute code with elevated privileges by running a specially crafted script or application. Documents also associ...
CVE-2020-16900
CVE-2020-16900 is a local privilege-escalation vulnerability in Windows where the Event System improperly handles objects in memory. An attacker must first gain code execution on the victim, then run a crafted application to elevate privileges. The fix is a security update that corrects how the W...
CVE-2021-1686
CVE-2021-1686 affects Windows WalletService and is described as a local Elevation of Privilege vulnerability. The CVSS v3.1 data in the document set lists a base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts on confidentiality, integrity, ...
CVE-2021-1693
Technical details about CVE-2021-1693 are not provided in the connected documents. The initial description remains high‑level; monitor official advisories for updates to obtain affected products, impact, and fixes.
CVE-2021-24076
CVE-2021-24076 is listed in multiple open-source vulnerability feeds as a Microsoft Windows VMSwitch Information Disclosure Vulnerability. Connected sources confirm the affected component is Windows VMSwitch and classify the impact as information disclosure with a CVSS v3.1 base score of 5.5 (LOC...
CVE-2021-24082
Technical details for CVE-2021-24082 are not publicly available in the provided connected documents. The records list the vulnerability title but do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2021-26416
Technical details about CVE-2021-26416 are not provided in the connected documents. The dataset cites Windows Hyper‑V DoS risk but does not specify affected versions, exploit vectors, or remediation beyond generic advisories; monitor for updates.
CVE-2021-26898
CVE-2021-26898 is described as a Windows Event Tracing Elevation of Privilege Vulnerability. The provided documents do not specify affected products, components, versions, root cause, exploit details, or remediation specific to this CVE. Public references confirm the vulnerability name and CVSS m...
CVE-2021-27090
CVE-2021-27090 is an Elevation of Privilege in Windows Secure Kernel Mode. Affected software area: Windows Secure Kernel Mode components. Root cause (as documented): elevation of privileges in the kernel, enabling an attacker to obtain increased privileges locally. Impact (per sources): privilege...
CVE-2021-28441
Technical details about CVE-2021-28441 are not provided in the connected documents. Monitor for updates from official advisories for affected products, scope, and fixes.
CVE-2022-38003
The CVE-2022-38003 issue is described in connected CNVD as a Windows Resilient File System (ReFS) Elevation of Privilege vulnerability stemming from improper privilege assignment in an application. This means local attackers could escalate privileges on affected Windows systems. The vulnerability...
CVE-2015-2456
Summary from Project Zero (2016) : Windows kernel font handling (TTF/OTF) contained multiple vulnerabilities discovered via fuzzing (ATMFD.DLL, win32k.sys) with several CVEs (notably CVE-2015-2455 and CVE-2015-2456). Root cause highlighted: the IUP instruction handler in win32k!itrp_IUP failed to...
CVE-2015-6174
CVE-2015-6174 concerns a local privilege-escalation in the Windows kernel affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT/8.1, and Windows 10 1511. The vulnerability description states that a crafted application can allow local ...
CVE-2016-0182
CVE-2016-0182 – Windows Journal Memory Corruption Vulnerability : A memory corruption flaw in Windows Journal can enable remote code execution when a user opens a specially crafted Journal file (.jnt). Affected: Windows Journal in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Win...
CVE-2016-0184
CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...
CVE-2016-3218
CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...
CVE-2016-3220
ATMFD.dll Elevation of Privilege vulnerability (CVE-2016-3220) affects the Adobe Type Manager Font Driver in Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/1607. Root cause: ATMFD.dll fails to properly handle objects in memory, enabling loc...
CVE-2016-3332
Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.
CVE-2017-0043
CVE-2017-0043 affects Active Directory Federation Services (ADFS) across Windows Server 2008 R2 SP1, Server 2012/2012 Gold, Server 2016, and Windows 10 1607. The vulnerability involves information disclosure due to processing XML (XML External Entity) handling in ADFS, enabling an authenticated, ...
CVE-2017-0075
CVE-2017-0075 (Hyper‑V RCE) affects Microsoft Windows Hyper‑V, with vulnerable scope including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows 10 (Gold, 1511, 1607), and Windows Server 2016. The connected sources describe a remote co...
CVE-2017-0300
Technical details for CVE-2017-0300 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-11824
The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...
CVE-2017-8463
CVE-2017-8463 is described as a remote code execution vulnerability in Windows Explorer, triggered when Explorer improperly handles executable files and shares during rename operations. The issue affects multiple Windows versions (e.g., Windows 7, 8.1, Server 2012/R2, Windows 10 variants) and cou...
CVE-2017-8531
CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...
CVE-2017-8557
CVE-2017-8557 is a information- disclosure (XXE) vulnerability in Microsoft Windows System Information Console where XML input containing an external entity reference can cause reading arbitrary files. The issue affects Windows versions listed in the CVE description. Exploitation details are not ...
CVE-2017-8694
CVE-2017-8694 is a local privilege escalation in the Windows kernel-mode driver (Win32k) caused by improper handling of memory objects. Affects Windows versions listed in the description (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 v...
CVE-2017-8717
CVE-2017-8717 affects the Microsoft JET Database Engine, with a buffer overflow in memory handling of objects that can allow remote code execution. The CPAI advisory notes a remote attacker could exploit this by enticing a user to open a specially crafted Excel file on affected Windows versions. ...
CVE-2019-1198
CVE-2019-1198 is a Microsoft Windows elevation of privilege vulnerability in SyncController.dll. An attacker who successfully exploits the flaw could run arbitrary code with elevated privileges, using a specially crafted application. The vulnerability by itself does not enable arbitrary code exec...
CVE-2019-1272
Connected sources confirm a Windows privilege escalation vulnerability related to ALPC in Microsoft Windows/Windows Server. The issue arises from improper handling of ALPC calls, allowing an attacker who logs on to the system to run arbitrary code in the security context of the local system (loca...
CVE-2019-1334
Technical details about CVE-2019-1334 are not publicly available in the provided connected documents. Monitor for updates; no affected products, root cause, or fixes are described here.
CVE-2019-1399
Technical details beyond the high-level description (affected product, root cause, vulnerable component, specific versions, fixes) are not publicly provided in the connected documents. Monitor for updates.
CVE-2019-1436
Technical details about CVE-2019-1436 are not publicly provided in the supplied documents. Monitoring for updates is recommended; the connected sources describe other vulnerabilities but do not elaborate on this CVE's affected products, root cause, or fix.
CVE-2019-1471
CVE-2019-1471 is a Windows Hyper-V remote code execution vulnerability. The issue arises when a host server’s Hyper-V component fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected product surface is Microsoft Windows H...
CVE-2019-1472
CVE-2019-1472 is described in CNVD-2020-02181 as a Microsoft Windows Kernel Information Disclosure Vulnerability. It results from improper handling of memory objects in the Windows kernel; an attacker who can log on to an affected system and run a specially crafted application could disclose info...
CVE-2020-0720
Technical details about CVE-2020-0720 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, root cause, or remediation are included here.
CVE-2020-0804
CVE-2020-0804 is an elevation-of-privilege vulnerability in the Windows Network Connections Service related to how in-memory objects are handled. The issue enables local privilege escalation with high impact (confidentiality, integrity, and availability), as evidenced by CVSS scores of 7.2 (2.0) ...
CVE-2020-0809
CVE-2020-0809 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. Affected component: Windows Media Foundation in Windows. Reported impact is high (CVE with base score 8.8/9.3) per NVD metrics, but no exploitation details or fixes are...
CVE-2020-0821
Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.
CVE-2020-0839
CVE-2020-0839 describes an elevation of privilege in the Windows dnsrslvr.dll memory handling. An attacker with local authentication could run a crafted app to execute code with elevated permissions. The vulnerability stems from improper memory object handling in dnsrslvr.dll, and mitigations rel...
CVE-2020-0912
Technical details about CVE-2020-0912 are not provided in the supplied documents. No affected product/version is specified beyond a generic memory-handling issue. Monitor official sources for updates.
CVE-2020-1028
CVE-2020-1028 describes a memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. The issue is identified across multiple CVE entries (1028, 1126, 1136, 1150) as “Media Foundation Memory Corruption Vulnerability” and is consistent in wording acro...
CVE-2020-1061
CVE-2020-1061 is a remote code execution vulnerability described as affecting the Microsoft Script Runtime, stemming from how it handles objects in memory. The available connected docs reiterate this in the CVE description and identify the component as the Microsoft Script Runtime, with no explic...
CVE-2020-1118
CVE-2020-1118 is a denial-of-service vulnerability in the Windows TLS implementation caused by improper handling of certain key exchange messages. An unauthenticated attacker could trigger a system halt or reboot by sending a specially crafted TLS message during handshake, potentially impacting T...
CVE-2020-1129
CVE-2020-1129 is a remote code execution vulnerability in Microsoft Windows Codecs Library. It stems from how the Codecs Library handles objects in memory, enabling an attacker to take control of an affected system by processing a specially crafted image file. The impact includes potential full s...
CVE-2020-1245
Technical details about CVE-2020-1245 are not provided in the supplied connected documents; public information in the initial description is high-level. Monitor for official security advisories for affected products, impact, and fixes.