CVE-2020-1204

CVE-2020-1204 is an Elevation of Privilege in Windows Mobile Device Management Diagnostics caused by improper handling of junctions. The vulnerability could allow an attacker to bypass access restrictions and delete files after logging on and running a crafted app. Microsoft’s MSRC entry notes a ...

CVE-2020-1252

Technical details for CVE-2020-1252 are not publicly available in the provided Connected Documents; the sources here reference related updates (e.g., RemoteFX, CVE-2020-1036) but do not specify affected product/version/root cause/mitigation for this CVE. Monitor for updates.

CVE-2020-1283

CVE-2020-1283 is a Windows denial-of-service vulnerability where memory objects are improperly handled, causing the system to stop responding. The connected Nessus entry (KB4557957 family) lists CVE-2020-1283 among patched issues in June 2020, but the provided sources do not specify affected prod...

CVE-2020-1291

CVE-2020-1291 is an elevation of privilege vulnerability in the Windows Network Connections Service related to how memory objects are handled. The issue is documented for Windows Network Connections Service (no explicit affected OS versions in the provided texts). The CVSS data in the initial rec...

CVE-2020-1309

Technical details for CVE-2020-1309 (affected product/version, impact, exploitability) are not publicly available in the provided documents. Monitor for updates from CVE/NVD entries and vendor advisories.

CVE-2020-1336

Technical details public in the provided documents are limited; the connected items do not disclose exact affected products/versions, root cause, or fixes for CVE-2020-1336. Monitor official advisories for precise impact and remediation.

CVE-2020-1372

CVE-2020-1372 refers to an Elevation of Privilege in Windows Mobile Device Management (MDM) Diagnostics. CNVD entries state the root cause as improper handling of objects in memory, exploitable by running a specially crafted application to bypass access restrictions (and, in one CNVD entry, delet...

CVE-2020-16973

Technical details for CVE-2020-16973 are not publicly available in the provided connected documents. The initial description notes an elevation of privilege via Windows Backup Service file operations with local access. Monitor for updates.

CVE-2020-17113

Technical details for CVE-2020-17113 are not provided in the connected documents. No public specifics (affected software, root cause, or mitigation) are included here. Monitor for updates from the cited sources.

CVE-2021-1681

CVE-2021-1681 notes a Windows WalletService Elevation of Privilege vulnerability. The NVD entry describes a LOCAL attack that requires LOW privileges, with no user interaction, and results in HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base metrics: AV:L, AC:L, PR:L...

CVE-2021-1729

CVE-2021-1729 is described as a Windows Update Stack Setup Elevation of Privilege vulnerability. The connected documents confirm the issue concerns the Windows Update Stack installer and reference multiple advisories from 2021–2022, including ZDI advisory ZDI-21-284 and Microsoft MSRC/KB entries....

CVE-2021-24075

CVE-2021-24075 is a Microsoft Windows VMSwitch Denial of Service vulnerability. Affected component: VMSwitch in Windows. Underlying issue: remote Denial of Service via network vector with low attack complexity and required privileges, leading to HIGH availability impact per CVSS v3.1 (AV:N/AC:L/P...

CVE-2021-26882

CVE-2021-26882 is a Local Elevation of Privilege vulnerability described as a Remote Access API issue. The standard sources assign CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) and CVSS‑2.0/3.1 metrics show a medium to high impact with high confidentiality, integrity, and availability ...

CVE-2021-43235

Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.

CVE-2016-0088

CVE-2016-0088 corresponds to a Hyper-V remote code execution vulnerability in Microsoft Windows Hyper-V affecting Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The root cause is that Hyper-V fails to properly validate guest OS input from an authenticated user, enabling a crafted app...

CVE-2016-0184

CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...

CVE-2016-3239

The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2016-7221

CVE-2016-7221 is a Windows IME DLL-loading privilege-escalation issue. The IME loads DLLs via a registry-controlled mechanism and can be exploited by a locally authenticated user to gain higher privileges when an application initiates the IME. Public writeups (e.g., JVN/JVND) describe the exploit...

CVE-2016-7246

CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...

CVE-2017-0043

CVE-2017-0043 affects Active Directory Federation Services (ADFS) across Windows Server 2008 R2 SP1, Server 2012/2012 Gold, Server 2016, and Windows 10 1607. The vulnerability involves information disclosure due to processing XML (XML External Entity) handling in ADFS, enabling an authenticated, ...

CVE-2017-0189

Technical details about CVE-2017-0189 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-0274

Technical details for CVE-2017-0274 are not publicly available in the provided connected documents. The sources reference SMBv1 information disclosure generally but do not specify affected products/versions, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2017-11817

The CVE-2017-11817 entry describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly initialized, potentially exposing sensitive memory contents. Connected updates (e.g., KB4042895 and related October 2017 MS Windows security updates) address thi...

CVE-2017-11829

CVE-2017-11829 affects Windows 10 via the Windows Update Delivery Optimization service which does not properly enforce file share permissions. The root cause is an elevation of privilege vulnerability that could allow a local attacker to overwrite files by abusing Delivery Optimization; exploitat...

CVE-2017-8476

CVE-2017-8476 is a kernel information-disclosure vulnerability affecting multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 variants 1511–1703, and Windows Server 2016). The issue allows an authenticated ...

CVE-2017-8633

The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...

CVE-2017-8677

CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...

CVE-2018-8314

CVE-2018-8314 is an elevation-of-privilege vulnerability described as failing a check that could allow a sandbox escape. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2, and Windows 10; it i...

CVE-2019-1173

CVE-2019-1173 is an elevation-of-privilege flaw affecting the Windows component PsmServiceExtHost.dll where in-memory object handling is improper. The vulnerability allows a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Microsoft’s secu...

CVE-2019-1216

CVE-2019-1216 describes a DirectX information disclosure vulnerability arising from improper handling of memory objects in DirectX. The issue affects Microsoft Windows/Windows Server environments via DirectX components and is characterized by a memory handling flaw that allows partial confidentia...

CVE-2019-1223

The CVE-2019-1223 entry describes a denial-of-service in Remote Desktop Protocol (RDP) where an attacker can cause the RDP service to stop responding by sending specially crafted connection requests. The vulnerability arises in how RDP handles connection requests, enabling network-based DoS when ...

CVE-2019-1440

Technical details for CVE-2019-1440 are not provided in the supplied documents; no affected products, versions, impact, or fixes are specified. Monitor for updates from official sources.

CVE-2020-0741

CVE-2020-0741 is an elevation of privilege vulnerability affecting Microsoft Windows and Microsoft Windows Server via the Connected Devices Platform Service . The root cause, as described in connected CNVD records, is improper handling of objects in memory within this service, enabling an attacke...

CVE-2020-0747

Technical details about CVE-2020-0747 are not publicly provided in the attached documents. Monitor for updates from authoritative sources; current entries describe the vulnerability at a high level without specific affected products, versions, or mitigations.

CVE-2020-0751

CVE-2020-0751 describes a denial-of-service vulnerability in Microsoft Hyper-V where the host fails to validate malicious data from a guest OS. An attacker with a privileged guest account can trigger a crafted workload to cause a DoS on the host. The vulnerability affects Hyper-V’s handling of gu...

CVE-2020-0799

CVE-2020-0799 is a Windows kernel elevation of privilege vulnerability. The flaw arises because the Windows kernel fails to properly handle parsing of certain symbolic links in its file-system/kernel parsing path, enabling local privilege escalation. The description and linked sources (NVD/NVD-de...

CVE-2020-0806

CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...

CVE-2020-0857

CVE-2020-0857 is an elevation of privilege vulnerability in Windows: the Windows Search Indexer mishandles memory objects, enabling local attackers to gain elevated privileges. Affected: Windows Search Indexer process; root cause is memory handling. Impact per sources is elevation of privileges w...

CVE-2020-0863

CVE-2020-0863 affects Windows with the Connected User Experiences and Telemetry Service, where the service improperly discloses file information, enabling a local attacker to read files on the file system. Public exploits are noted in community sources. The vulnerability is addressed by Microsoft...

CVE-2020-0875

CVE-2020-0875 describes an information disclosure vulnerability in how splwow64.exe handles certain calls. An attacker who exploits this could obtain information to further compromise the user’s system (low-integrity to medium-integrity). The flaw by itself does not grant arbitrary code execution...

CVE-2020-0877

CVE-2020-0887 is a Windows Win32k Elevation of Privilege vulnerability where the Win32k component fails to properly handle objects in memory. The description (and related CVEs 2020-0788 and 2020-0877) indicate a local privilege escalation risk, with kernel-mode execution potential as stated in mu...

CVE-2020-1097

CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...

CVE-2020-1134

Technical details for CVE-2020-1134 are not provided in the connected documents. Public information in the Initial Description is limited to general vulnerability context. Monitor for updates from ENISA EUVD entries if relevant.

CVE-2020-1165

Technical details about CVE-2020-1165 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1197

CVE-2020-1197 is an elevation-of-privilege vulnerability in Windows Error Reporting Manager caused by improper handling of a process crash. Public sources (CNVD entry) describe that an attacker who can log on and run a crafted app may delete target files and elevate privileges. NVD lists impact a...

CVE-2020-1222

Technical details about CVE-2020-1222/1309 are not publicly provided in the connected documents. Available entries summarize memory handling and privilege elevation but do not specify affected products, versions, root cause, impact, or remediation beyond generic references. Monitor for updates.

CVE-2020-1294

Technical details about CVE-2020-1294 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and NVD for affected components, impacts, and fixes.

CVE-2020-1330

CVE-2020-1330 is an information-disclosure vulnerability in Windows Mobile Device Management Diagnostics. The issue arises when MDM Diagnostics improperly handles junctions, enabling an attacker who can log on to read files via a specially crafted application. Microsoft’s advisory states that the...

CVE-2020-1394

CVE-2020-1394 relates to an elevation-of-privilege in the Windows Geolocation Framework. Connected CNVD/EUVD entries describe the root cause as improper handling of memory objects within the Geolocation Framework, allowing a local attacker to elevate privileges and execute arbitrary code by runni...