CVE-2021-26900

CVE-2021-26900 is a Windows Win32k Elevation of Privilege vulnerability. Affected component: win32k (win32kfull.sys) in Windows. Root cause described in connected sources as a NULL page memory mapping issue enabling an attacker to trigger DrvPlgBlt in a target device driver, potentially executing...

CVE-2021-28347

CVE-2021-28347 is a Windows Speech Runtime Elevation of Privilege vulnerability. It affects Windows Speech Runtime with local attack vector, low privileges required, and no user interaction, with potential HIGH impact on confidentiality, integrity, and availability per CVSS3. public sources list ...

CVE-2021-43236

Technical details for CVE-2021-43236 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2016-0036

CVE-2016-0036 (RDP Elevation of Privilege) affects the Remote Desktop Protocol in Microsoft Windows products including Windows 7 SP1, Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The flaw stems from the RDP implementation; remote authenticated users can execute arbitrary code by se...

CVE-2016-0049

CVE-2016-0049 describes a Windows Kerberos vulnerability where password changes could bypass authentication via a crafted KDC. Microsoft’s MS16-014 (KB3126041) patches this issue across affected Windows versions (Vista SP2, 2008 SP2, 2008 R2, 7 SP1, 8.1, 2012, 2012 R2, 10 RTM/1511). The advisory ...

CVE-2016-0073

CVE-2016-0073 affects Windows kernel local elevation of privilege on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). Root cause: crafted application triggers a kernel API pathway to access sensitive registry information, enabling local privilege escalation....

CVE-2016-0184

CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...

CVE-2016-3218

CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...

CVE-2016-3299

Summary: CVE-2016-3299 is a NetBIOS spoofing vulnerability in multiple Windows platforms where NetBIOS responses can be validated incorrectly, allowing remote attackers to hijack network traffic or bypass Enhanced Protected Mode/application container protections and render untrusted browser conte...

CVE-2016-3332

Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2016-7210

CVE-2016-7210 affects atmfd.dll in multiple Windows editions (Vista through Windows 10 1511/1607 and corresponding Server releases). The vulnerability allows remote attackers to disclose memory contents of a victim process by delivering a crafted OpenType font on a web site, leading to informatio...

CVE-2016-7219

CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...

CVE-2016-7246

CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...

CVE-2017-0043

CVE-2017-0043 affects Active Directory Federation Services (ADFS) across Windows Server 2008 R2 SP1, Server 2012/2012 Gold, Server 2016, and Windows 10 1607. The vulnerability involves information disclosure due to processing XML (XML External Entity) handling in ADFS, enabling an authenticated, ...

CVE-2017-0102

Technical details (affected components, root cause, exploit status, mitigations) are not publicly disclosed in the provided documents for CVE-2017-0102; monitor for updates.

CVE-2017-0270

CVE-2017-0270 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. The connected documents indicate the issue arises from improper handling of SMBv1 requests, enabling an attacker to obtain sensitive information from affected systems. Affe...

CVE-2017-0274

Technical details for CVE-2017-0274 are not publicly available in the provided connected documents. The sources reference SMBv1 information disclosure generally but do not specify affected products/versions, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2017-11842

The CVE-2017-11842 entry concerns a Windows kernel information disclosure vulnerability that affects Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 (initial to 1709), Windows Server 2016, and Windows Server version 1709. The root cause is the Windows kernel improperly initializing a memory addres...

CVE-2017-8481

Technical details about CVE-2017-8481 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected products, impact, and fixes.

CVE-2017-8557

CVE-2017-8557 is a information- disclosure (XXE) vulnerability in Microsoft Windows System Information Console where XML input containing an external entity reference can cause reading arbitrary files. The issue affects Windows versions listed in the CVE description. Exploitation details are not ...

CVE-2017-8587

CVE-2017-8587 corresponds to a Denial of Service in Windows Explorer when attempting to open a non-existent file. It affects Windows client/server platforms listed in the CVE description and is addressed by the Windows update KB4025674 (and related KBs in 2017 rollups). The CVSSv3 base score is 6...

CVE-2018-8337

CVE-2018-8337 is a local security feature bypass in Windows Subsystem for Linux (WSL) where WSL improperly handles case sensitivity. A low-privilege local attacker could replace or delete arbitrary files by running a crafted application. Affected: Windows 10 and Windows Server 2016/1709/1803 rang...

CVE-2019-1436

Technical details about CVE-2019-1436 are not publicly provided in the supplied documents. Monitoring for updates is recommended; the connected sources describe other vulnerabilities but do not elaborate on this CVE's affected products, root cause, or fix.

CVE-2019-1471

CVE-2019-1471 is a Windows Hyper-V remote code execution vulnerability. The issue arises when a host server’s Hyper-V component fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected product surface is Microsoft Windows H...

CVE-2020-0661

The CVE-2020-0661 entry describes a denial-of-service vulnerability in Microsoft Hyper-V. It occurs when Hyper-V on a host fails to properly validate input from a privileged user on a guest OS, enabling a guest-level attacker to cause a denial of service. The CVE is stated as distinct from CVE-20...

CVE-2020-0678

Technical details for CVE-2020-0678 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-0698

Technical details for CVE-2020-0698 are not provided in the connected documents; the sources list the CVE but do not specify affected products, root cause, impact, or fixes. Monitor for updates from official advisories.

CVE-2020-0762

CVE-2020-0762 is an elevation of privilege vulnerability in Windows Defender Security Center. According to the NVD entry and CNVD summaries, it arises when Defender Security Center handles certain objects in memory, enabling an attacker who can log on locally to elevate privileges. The vulnerabil...

CVE-2020-0797

CVE-2020-0797 is a Windows Privilege Mobilization vulnerability in the Windows Work Folder Service. The issue arises from the service handling file operations improperly, enabling an attacker with a specially crafted application to run processes with elevated privileges. No exploit details, patch...

CVE-2020-0799

CVE-2020-0799 is a Windows kernel elevation of privilege vulnerability. The flaw arises because the Windows kernel fails to properly handle parsing of certain symbolic links in its file-system/kernel parsing path, enabling local privilege escalation. The description and linked sources (NVD/NVD-de...

CVE-2020-0821

Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.

CVE-2020-0877

CVE-2020-0887 is a Windows Win32k Elevation of Privilege vulnerability where the Win32k component fails to properly handle objects in memory. The description (and related CVEs 2020-0788 and 2020-0877) indicate a local privilege escalation risk, with kernel-mode execution potential as stated in mu...

CVE-2020-0993

Technical details about CVE-2020-0993 are not publicly provided in the supplied connected documents. The materials reference the Windows DNS DoS vulnerability but do not specify affected products/versions, root cause, exploitation status, or fixes. Monitor for updates.

CVE-2020-1005

CVE-2020-1005 is an information-disclosure vulnerability in the Microsoft Windows Graphics Component. The connected documents identify the issue as an information-disclosure vulnerability that arises when Windows Graphics Components improperly handle objects in memory (root cause: memory handling...

CVE-2020-1029

CVE-2020-1029 affects the Windows Connected User Experiences and Telemetry Service. The vulnerability is an Elevation of Privilege caused by improper handling of file operations in this service. According to the data, it can be triggered locally (local access required) and could grant elevated/sy...

CVE-2020-1077

CVE-2020-1077 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. The entry notes local attack vector with low complexity and partial/high impact per CVSS metrics, but the connected documents do not provide concrete technical details, affect...

CVE-2020-1197

CVE-2020-1197 is an elevation-of-privilege vulnerability in Windows Error Reporting Manager caused by improper handling of a process crash. Public sources (CNVD entry) describe that an attacker who can log on and run a crafted app may delete target files and elevate privileges. NVD lists impact a...

CVE-2020-1309

Technical details for CVE-2020-1309 (affected product/version, impact, exploitability) are not publicly available in the provided documents. Monitor for updates from CVE/NVD entries and vendor advisories.

CVE-2020-1394

CVE-2020-1394 relates to an elevation-of-privilege in the Windows Geolocation Framework. Connected CNVD/EUVD entries describe the root cause as improper handling of memory objects within the Geolocation Framework, allowing a local attacker to elevate privileges and execute arbitrary code by runni...

CVE-2020-16900

CVE-2020-16900 is a local privilege-escalation vulnerability in Windows where the Event System improperly handles objects in memory. An attacker must first gain code execution on the victim, then run a crafted application to elevate privileges. The fix is a security update that corrects how the W...

CVE-2020-17024

CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...

CVE-2020-17077

CVE-2020-17077 is a Windows Update Stack Elevation of Privilege vulnerability tracked in CVE-2020-17077. The vulnerability is identified as a local, low-attack-complexity issue that requires low privileges and can yield high impact on confidentiality, integrity, and availability per NVD metrics (...

CVE-2021-24098

Technical details about CVE-2021-24098 are not provided in the connected documents. The entries only state a Windows Console Driver Denial of Service vulnerability. Monitor for updates from Microsoft and security advisories for any clarified scope and remediation.

CVE-2021-28435

Technical details about CVE-2021-28435 are not publicly provided in the connected documents you supplied. Monitor for updates from vendor advisories and security feeds to learn affected products, impact, and fixes.

CVE-2021-28436

CVE-2021-28436 is a Windows Speech Runtime elevation-of-privilege vulnerability with local attack vector and no user interaction required (CVSSv3.1: base score 7.8, HIGH). Affected component is the Speech Runtime in Windows; underlying root-cause and exact exploit details are not spelled out in t...

CVE-2021-43235

Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.

CVE-2021-43237

CVE-2021-43237 is a Windows Setup Elevation of Privilege vulnerability. Affected: Windows setup components (local vector). Impact per CVSS: high confidentiality, integrity, and availability; local, low/medium complexity with low privileges required (per CVSS 3.1) and user interaction may be requi...

CVE-2022-37993

Technical details for CVE-2022-37993 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are present here. Monitor for updates from official sources.

CVE-2015-6174

CVE-2015-6174 concerns a local privilege-escalation in the Windows kernel affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT/8.1, and Windows 10 1511. The vulnerability description states that a crafted application can allow local ...