CVE-2019-0931

Technical details about CVE-2019-0931 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present. Monitor for updates.

CVE-2019-1471

CVE-2019-1471 is a Windows Hyper-V remote code execution vulnerability. The issue arises when a host server’s Hyper-V component fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected product surface is Microsoft Windows H...

CVE-2019-1477

The CVE-2019-1477 issue affects the Windows Printer Service. Description and connected advisories indicate an elevation of privilege vulnerability caused by the Printer Service not properly validating file paths when loading printer drivers. An authenticated attacker who can log on could run a sp...

CVE-2020-0616

CVE-2020-0616 is a Windows denial-of-service flaw caused by improper handling of hard links. An attacker must log on to an affected system and run a crafted application to disrupt the target (potentially overwrite system files). Microsoft’s update fixes ACLs on system files to address this vulner...

CVE-2020-0661

The CVE-2020-0661 entry describes a denial-of-service vulnerability in Microsoft Hyper-V. It occurs when Hyper-V on a host fails to properly validate input from a privileged user on a guest OS, enabling a guest-level attacker to cause a denial of service. The CVE is stated as distinct from CVE-20...

CVE-2020-0680

CVE-2020-0680 is a Windows elevation-of-privilege vulnerability in the Windows Function Discovery Service related to how objects in memory are handled. The description states an elevation of privilege via memory handling in this service, indicating a local attack path with partial confidentiality...

CVE-2020-0751

CVE-2020-0751 describes a denial-of-service vulnerability in Microsoft Hyper-V where the host fails to validate malicious data from a guest OS. An attacker with a privileged guest account can trigger a crafted workload to cause a DoS on the host. The vulnerability affects Hyper-V’s handling of gu...

CVE-2020-0757

CVE-2020-0757 is a Windows local privilege-escalation vulnerability caused by Windows improperly handling Secure Shell (SSH) remote commands. An attacker who can log on and run a crafted SSH-related application could execute code with elevated privileges. Public docs provide CVSS:3.1 base score 7...

CVE-2020-0806

CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...

CVE-2020-0948

Summary of CVE-2020-0948 (Media Foundation memory corruption) A memory corruption vulnerability exists in Windows Media Foundation when handling objects in memory (Media Foundation Memory Corruption Vulnerability). Current sources indicate related CVEs (CVE-2020-0949, CVE-2020-0950) and groupings...

CVE-2020-1047

CVE-2020-1047 is an elevation-of-privilege vulnerability in Windows Hyper-V where memory object handling can allow an attacker to gain elevated privileges on the host OS. The flaw itself does not enable arbitrary code execution in isolation, but could be combined with other vulnerabilities (e.g.,...

CVE-2020-1068

Technical details for CVE-2020-1068 are not publicly available in the provided documents. Monitor for updates; no explicit info on affected products, root cause, impact, or remediation is included here.

CVE-2020-1114

Technical details about CVE-2020-1114 are not present in the provided Connected documents. Public details appear limited to the Initial description. Monitor for updates.

CVE-2020-1291

CVE-2020-1291 is an elevation of privilege vulnerability in the Windows Network Connections Service related to how memory objects are handled. The issue is documented for Windows Network Connections Service (no explicit affected OS versions in the provided texts). The CVSS data in the initial rec...

CVE-2020-1304

Technical details for CVE-2020-1304 are not provided in the connected documents. No affected products, root cause, impact, or fixes are present here. Monitor for updates from official advisories.

CVE-2020-1305

CVE-2020-1305 is a Windows State Repository Service elevation-of-privilege vulnerability caused by improper handling of in-memory objects. Affected component: Windows State Repository Service on Windows client/server platforms. Impact: attacker could elevate privileges locally. Remediation: patch...

CVE-2020-1360

CVE-2020-1360 affects the Windows Profile Service. The vulnerability arises from improper handling of file operations within the service, enabling local elevation of privilege if an attacker can run a crafted application on a vulnerable system. The issue is mapped to Windows Profile Service (Wind...

CVE-2020-1392

CVE-2020-1392 is an Elevation of Privilege vulnerability in the Windows Delivery Optimization service. It arises from improper handling of memory objects, enabling a local attacker to execute code with elevated privileges by running a specially crafted script or application. Documents also associ...

CVE-2020-16999

CVE-2020-16999 corresponds to a Windows WalletService Information Disclosure vulnerability. The available documents identify the affected component as WalletService on Windows and indicate a local attack vector with low complexity, requiring low privileges, and potential confidentiality impact (C...

CVE-2020-17007

CVE-2020-17007 is a Windows Error Reporting Elevation of Privilege vulnerability. The NVD entry assigns a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW, no user interaction. The issue is categorized as a local, post-authentication ...

CVE-2020-17012

CVE-2020-17012 is a Windows Elevation of Privilege affecting the Bind Filter Driver. The vulnerability is rooted in the Windows Bind Filter Driver component, enabling local attackers with low privileges and no user interaction to elevate privileges (CVSSv3.1: 7.8, HIGH; CVSSv2: 4.6, MEDIUM). Affe...

CVE-2020-17034

Technical details about CVE-2020-17034 are not publicly provided in the supplied documents; monitor for updates.

CVE-2020-17113

Technical details for CVE-2020-17113 are not provided in the connected documents. No public specifics (affected software, root cause, or mitigation) are included here. Monitor for updates from the cited sources.

CVE-2021-1681

CVE-2021-1681 notes a Windows WalletService Elevation of Privilege vulnerability. The NVD entry describes a LOCAL attack that requires LOW privileges, with no user interaction, and results in HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base metrics: AV:L, AC:L, PR:L...

CVE-2021-26873

Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2021-26882

CVE-2021-26882 is a Local Elevation of Privilege vulnerability described as a Remote Access API issue. The standard sources assign CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) and CVSS‑2.0/3.1 metrics show a medium to high impact with high confidentiality, integrity, and availability ...

CVE-2021-28436

CVE-2021-28436 is a Windows Speech Runtime elevation-of-privilege vulnerability with local attack vector and no user interaction required (CVSSv3.1: base score 7.8, HIGH). Affected component is the Speech Runtime in Windows; underlying root-cause and exact exploit details are not spelled out in t...

CVE-2015-2458

CVE-2015-2458 (ATMFD.DLL OpenType parsing) affects the Windows Adobe Type Manager Library across multiple Windows versions. The connected ExploitPack/EDB entry details an out-of-bounds read in ATMFD.DLL triggered by processing a corrupted OpenType font, leading to a potential remote code executio...

CVE-2016-0088

CVE-2016-0088 corresponds to a Hyper-V remote code execution vulnerability in Microsoft Windows Hyper-V affecting Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The root cause is that Hyper-V fails to properly validate guest OS input from an authenticated user, enabling a crafted app...

CVE-2016-0133

CVE-2016-0133 concerns a kernel-elevation vulnerability in the USB Mass Storage Class driver used by Windows variants (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10). The root cause is improper validation of objects in memory within the USB Mass Storage driver, allowing a physically...

CVE-2016-3239

The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0270

CVE-2017-0270 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. The connected documents indicate the issue arises from improper handling of SMBv1 requests, enabling an attacker to obtain sensitive information from affected systems. Affe...

CVE-2017-11849

The CVE-2017-11849 entry concerns the Windows kernel information disclosure vulnerability. Affected software includes Windows kernel on Windows 7 SP1; Windows Server 2008 SP2/R2 SP1; Windows 8.1/RT 8.1; Windows Server 2012/R2; Windows 10 versions (Gold, 1511, 1607, 1703, 1709); and Windows Server...

CVE-2017-8574

CVE-2017-8574 describes a local elevation-of-privilege in the Microsoft Windows Graphics Component. Affected software includes Windows 10 versions 1607 and 1703 (and Windows Server 2016) where the Graphics component fails to properly handle objects in memory, enabling a local attacker to run code...

CVE-2018-8637

CVE-2018-8637 is a Windows kernel vulnerability (Win32k Information Disclosure) that can disclose memory addresses from kernel space, potentially bypassing KASLR. Affected: Windows kernel components (Win32k) on Windows 10/Windows Server 2019. Root cause: how the kernel handles memory addresses en...

CVE-2019-0717

CVE-2019-0717 is a Microsoft Hyper-V Denial of Service vulnerability in the Hyper-V Network Switch (vmswitch.sys). A privileged user on a guest OS can craft input that, if exploited, crashes the host server. The underlying issue is improper input validation when guest VMs access the Hyper-V Netwo...

CVE-2019-1227

The CVE-2019-1227 entry describes an information-disclosure vulnerability in the Windows kernel where objects in memory are not handled securely. An attacker who can log on to an affected system and run a crafted application could obtain information to aid further compromise; the issue does not b...

CVE-2019-1472

CVE-2019-1472 is described in CNVD-2020-02181 as a Microsoft Windows Kernel Information Disclosure Vulnerability. It results from improper handling of memory objects in the Windows kernel; an attacker who can log on to an affected system and run a specially crafted application could disclose info...

CVE-2020-0660

CVE-2020-0660 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). According to the trusted sources, an attacker can trigger the issue by establishing an RDP connection and sending specially crafted requests, resulting in a disruption of availability. The public reco...

CVE-2020-0721

Technical details for CVE-2020-0721 are not publicly available in the provided documents . Monitor for updates in case further specifics on affected products, impact, or fixes are released.

CVE-2020-0740

CVE-2020-0740 describes an Elevation of Privilege in the Connected Devices Platform Service on Microsoft Windows and Microsoft Windows Server. The root cause is a flaw in how the service handles objects in memory, enabling a local attacker with low privileges to execute code with user/system righ...

CVE-2020-0928

CVE-2020-0928 is a Windows kernel information-disclosure vulnerability. The root cause is the Windows kernel’s improper handling of memory objects, which could allow an attacker who logs on and runs a crafted application to obtain information that could help further compromise the system. The vul...

CVE-2020-0936

CVE-2020-0936 is an Elevation of Privilege vulnerability in Windows/Windows Server caused by a Windows Scheduled Task that fails to properly handle file redirections. CNVD-2020-32583 describes the root cause as improper file redirection handling in the scheduled task, enabling an authenticated at...

CVE-2020-0993

Technical details about CVE-2020-0993 are not publicly provided in the supplied connected documents. The materials reference the Windows DNS DoS vulnerability but do not specify affected products/versions, root cause, exploitation status, or fixes. Monitor for updates.

CVE-2020-1006

CVE-2020-1006 affects the Windows Push Notification Service (WNS) in Windows. The root cause is an elevation of privilege due to how memory objects are handled by WNS, enabling a locally authenticated attacker to escalate privileges. The CVSS data indicates a LOCAL attack vector with LOW required...

CVE-2020-1014

CVE-2020-1014 is described in connected docs as an elevation of privilege in the Microsoft Windows Update Client caused by improper privilege handling. The CNVD entry attributes the flaw to the Windows Update Client, enabling privilege escalation, and the OpenVAS/MSKB references corroborate this ...

CVE-2020-1077

CVE-2020-1077 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. The entry notes local attack vector with low complexity and partial/high impact per CVSS metrics, but the connected documents do not provide concrete technical details, affect...

CVE-2020-1081

CVE-2020-1081 is an elevation-of-privilege issue in the Windows Printer Service caused by improper validation of file paths when loading printer drivers. Affected product: Windows Printer Service. Root cause details and specific vulnerable versions are not enumerated in the provided documents bey...