CVE-2020-0720

Technical details about CVE-2020-0720 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, root cause, or remediation are included here.

CVE-2020-0804

CVE-2020-0804 is an elevation-of-privilege vulnerability in the Windows Network Connections Service related to how in-memory objects are handled. The issue enables local privilege escalation with high impact (confidentiality, integrity, and availability), as evidenced by CVSS scores of 7.2 (2.0) ...

CVE-2020-0809

CVE-2020-0809 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. Affected component: Windows Media Foundation in Windows. Reported impact is high (CVE with base score 8.8/9.3) per NVD metrics, but no exploitation details or fixes are...

CVE-2020-0821

Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.

CVE-2020-0839

CVE-2020-0839 describes an elevation of privilege in the Windows dnsrslvr.dll memory handling. An attacker with local authentication could run a crafted app to execute code with elevated permissions. The vulnerability stems from improper memory object handling in dnsrslvr.dll, and mitigations rel...

CVE-2020-0912

Technical details about CVE-2020-0912 are not provided in the supplied documents. No affected product/version is specified beyond a generic memory-handling issue. Monitor official sources for updates.

CVE-2020-1061

CVE-2020-1061 is a remote code execution vulnerability described as affecting the Microsoft Script Runtime, stemming from how it handles objects in memory. The available connected docs reiterate this in the CVE description and identify the component as the Microsoft Script Runtime, with no explic...

CVE-2020-1118

CVE-2020-1118 is a denial-of-service vulnerability in the Windows TLS implementation caused by improper handling of certain key exchange messages. An unauthenticated attacker could trigger a system halt or reboot by sending a specially crafted TLS message during handshake, potentially impacting T...

CVE-2020-1129

CVE-2020-1129 is a remote code execution vulnerability in Microsoft Windows Codecs Library. It stems from how the Codecs Library handles objects in memory, enabling an attacker to take control of an affected system by processing a specially crafted image file. The impact includes potential full s...

CVE-2020-1245

Technical details about CVE-2020-1245 are not provided in the supplied connected documents; public information in the initial description is high-level. Monitor for official security advisories for affected products, impact, and fixes.

CVE-2020-1268

CVE-2020-1268 is a Windows information-disclosure vulnerability where a Windows service improperly handles objects in memory. Exploitation requires an attacker to log on to the affected system and run a crafted application; the flaw does not in itself enable code execution or privilege escalation...

CVE-2020-1311

CVE-2020-1311 is an elevation-of-privilege vulnerability in the Component Object Model (COM). Affected: Windows COM client using special case IIDs. Root cause cited as an elevation of privilege in COM. Connected documentRH: CVE-2020-1311 confirms the same issue; no explicit product/version patche...

CVE-2020-1360

CVE-2020-1360 affects the Windows Profile Service. The vulnerability arises from improper handling of file operations within the service, enabling local elevation of privilege if an attacker can run a crafted application on a vulnerable system. The issue is mapped to Windows Profile Service (Wind...

CVE-2020-1368

CVE-2020-1368 is a Windows elevation-of-privilege vulnerability in the Windows Credential Enrollment Manager Service. The CNVD entry states that the issue stems from how the Credential Enrollment Manager Service handles objects in memory, which an attacker can exploit by running a specially craft...

CVE-2020-1374

CVE-2020-1374 affects the Windows Remote Desktop Client. The provided documents describe a remote code execution vulnerability that can be triggered when a user connects to a malicious RDP server. The AVLEONOV summary echoes that this is an RDP Client RCE affecting Windows 7 through Windows 10 (u...

CVE-2020-1404

CVE-2020-1404 describes a Windows Runtime elevation of privilege vulnerability where memory objects are not handled safely, enabling local privilege escalation. The provided documents do not specify affected products/versions, root cause details beyond memory-management issue, exploit information...

CVE-2020-1411

Technical details about CVE-2020-1411 (affected product, root cause, impact, or remediation) are not publicly provided in the connected documents. Monitor for updates.

CVE-2020-1437

CVE-2020-1437 is described in CNVD as an elevation-of-privilege vulnerability in the Windows Network Location Awareness Service. The flaw stems from how the service handles objects in memory, enabling an attacker to execute code with elevated privileges by running a specially crafted application....

CVE-2020-17046

Technical details for CVE-2020-17046 are not provided in the supplied documents. Public information is limited to basic description; monitor for updates.

CVE-2020-17056

Technical details about CVE-2020-17056 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates.

CVE-2020-17075

CVE-2020-17075 corresponds to a Windows USO Core Worker elevation-of-privilege vulnerability. According to the linked NVD entry, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; no user interaction needed. Th...

CVE-2021-24090

CVE-2021-24090 is a Windows Elevation of Privilege affecting Windows Error Reporting (WER). The connected records identify the affected component as Windows Error Reporting and classify the vulnerability as privilege escalation with impact on confidentiality, integrity, and availability (per CVSS...

CVE-2021-26873

Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2021-26890

CVE-2021-26890 is associated with Microsoft Application Virtualization (App-V). CNNVD’s entry describes a code-injection vulnerability affecting App-V across a range of Windows client/server SKUs (e.g., Windows 10 versions 1809–20H2, Windows Server 2019/2022 variants, and Server Core builds). NVD...

CVE-2022-33645

CVE-2022-33645 is a Windows TCP/IP driver denial-of-service vulnerability. Public sources (NVD/CNVD) describe it as a DoS in the Windows TCP/IP component caused by mishandling of incoming error messages, with the CVE listed as affecting Windows TCP/IP and assigned a CVSSv3 score of 7.5 (HIGH). Co...

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2016-7214

Technical details about CVE-2016-7214 are not publicly provided in the supplied documents. The connected EUVD/NVD entries do not reveal affected products or root causes here. Monitor for updates from official advisories.

CVE-2017-0021

Technical details about CVE-2017-0021 are not publicly available in the provided connected documents. Monitor for updates; no specific affected builds, root cause, or fixes are described here.

CVE-2017-11784

CVE-2017-11784 affects the Windows kernel information-disclosure pathway in multiple Windows versions (Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, 2012, Windows RT 8.1, Windows 10) where objects in memory are improperly handled. The root cause is an information-disclosure vulnerability in the Win...

CVE-2017-11817

The CVE-2017-11817 entry describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly initialized, potentially exposing sensitive memory contents. Connected updates (e.g., KB4042895 and related October 2017 MS Windows security updates) address thi...

CVE-2017-11829

CVE-2017-11829 affects Windows 10 via the Windows Update Delivery Optimization service which does not properly enforce file share permissions. The root cause is an elevation of privilege vulnerability that could allow a local attacker to overwrite files by abusing Delivery Optimization; exploitat...

CVE-2017-11831

CVE-2017-11831 is a Windows kernel information disclosure vulnerability affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 (various builds up to 1709) and Windows Server 2016. Root cause: kernel initializes memory in a way that can expose information;...

CVE-2017-11842

The CVE-2017-11842 entry concerns a Windows kernel information disclosure vulnerability that affects Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 (initial to 1709), Windows Server 2016, and Windows Server version 1709. The root cause is the Windows kernel improperly initializing a memory addres...

CVE-2017-8476

CVE-2017-8476 is a kernel information-disclosure vulnerability affecting multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 variants 1511–1703, and Windows Server 2016). The issue allows an authenticated ...

CVE-2017-8486

CVE-2017-8486 is a local information-disclosure vulnerability in Windows due to how Win32k handles objects in memory. Affected products include Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 (various builds), and Windows S...

CVE-2017-8489

Technical details for CVE-2017-8489 are not provided in the connected documents. The EUVD entries mention malware titled 'Malware in sbrugna' but do not describe affected products, root cause, impact, or remediation.

CVE-2017-8574

CVE-2017-8574 describes a local elevation-of-privilege in the Microsoft Windows Graphics Component. Affected software includes Windows 10 versions 1607 and 1703 (and Windows Server 2016) where the Graphics component fails to properly handle objects in memory, enabling a local attacker to run code...

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2018-8314

CVE-2018-8314 is an elevation-of-privilege vulnerability described as failing a check that could allow a sandbox escape. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2, and Windows 10; it i...

CVE-2018-8637

CVE-2018-8637 is a Windows kernel vulnerability (Win32k Information Disclosure) that can disclose memory addresses from kernel space, potentially bypassing KASLR. Affected: Windows kernel components (Win32k) on Windows 10/Windows Server 2019. Root cause: how the kernel handles memory addresses en...

CVE-2019-0931

Technical details about CVE-2019-0931 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present. Monitor for updates.

CVE-2019-1398

CVE-2019-1398 is a Windows Hyper-V remote code execution vulnerability. The vulnerability arises from improper validation of input from an authenticated guest OS user, enabling an attacker to run arbitrary code on the host Hyper-V machine. The CNVD entry for Microsoft Windows Hyper-V Remote Code ...

CVE-2020-0667

CVE-2020-0667 affects Microsoft Windows, specifically the Windows Search Indexer component. The connected documents confirm the root cause: the vulnerability arises from how the Windows Search Indexer handles objects in memory, enabling an elevation of privilege when exploited locally. The CNVD e...

CVE-2020-0714

CVE-2020-0714 corresponds to a DirectX Information Disclosure vulnerability in Windows. The root cause is DirectX failing to properly handle memory objects, which can lead to disclosure of information. An attacker who has authenticated access could exploit this by running a specially crafted appl...

CVE-2020-0781

The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...

CVE-2020-0806

CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...

CVE-2020-0819

CVE-2020-0819 describes an elevation of privilege vulnerability in Windows Device Setup Manager caused by improper handling of file operations. The CVE is documented across multiple sources (NVD/NVD entry) with a base CVSS v3.1 score of 7.8 (HIGH) and CVSS v2 score of 7.2 (HIGH), indicating local...

CVE-2020-0860

Technical details for CVE-2020-0860 are not publicly provided in the connected documents. Available sources mention the vulnerability in general terms; monitor for updates and additional technical disclosures.

CVE-2020-0949

CVE-2020-0949 is a Windows Media Foundation memory corruption vulnerability caused by improper handling of memory objects. The affected component is Windows Media Foundation; the CVSSv3 base score is 8.8 (HIGH) with HIGH impact on confidentiality, integrity, and availability, and exploitability n...

CVE-2020-0952

CVE-2020-0952 is a Windows GDI Information Disclosure Vulnerability. Connected sources confirm it involves the Windows GDI component disclosing memory contents, enabling information disclosure. Related entries from CNVD-2020-30654 and OpenVAS KEV listings acknowledge this CVE among Windows GDI di...