2974 matches found
CVE-2020-0747
Technical details about CVE-2020-0747 are not publicly provided in the attached documents. Monitor for updates from authoritative sources; current entries describe the vulnerability at a high level without specific affected products, versions, or mitigations.
CVE-2020-0756
Technical details for CVE-2020-0756 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2020-0774
CVE-2020-0774 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly handles memory objects, allowing an attacker to leak memory contents and potentially information needed for further compromise. The vulnerability can be exploited via social engineering (e.g....
CVE-2020-0998
CVE-2020-0998 is an elevation of privilege in the Windows Graphics Component caused by improper in-memory object handling; exploitable via a crafted local application to gain elevation. Microsoft patch addresses the memory handling to prevent unintended user-mode elevation.
CVE-2020-1086
Technical details about CVE-2020-1086 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2020-1097
CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...
CVE-2020-1114
Technical details about CVE-2020-1114 are not present in the provided Connected documents. Public details appear limited to the Initial description. Monitor for updates.
CVE-2020-1126
The CVE-2020-1126 entry relates to a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The affected component is Windows Media Foundation within Windows; the root cause is object handling in memory leading to corruption. Severity metrics...
CVE-2020-1154
CVE-2020-1154 : Elevation of privilege in the Windows Common Log File System (CLFS) Driver due to improper handling of objects in memory. The vulnerability enables local privilege escalation, with a high-severity impact (CONFIDENTIALITY/INTEGRITY/AVAILABILITY listed as HIGH in CVSS 3.1, and LOCAL...
CVE-2020-1277
The CVE-2020-1277 entry relates to an elevation of privilege in Windows Installer. Connected CNVD entries describe the flaw as arising from how Windows Installer handles certain file system operations (some variants mention improper handling/cleanup of input) which can enable a local attacker to ...
CVE-2020-1324
CVE-2020-1324 is an elevation of privilege vulnerability in Windows Security Health Service that occurs when handling certain objects in memory. Per the NVD/Microsoft references, exploitation requires a logged-on attacker and could allow privilege elevation within the same user context due to in-...
CVE-2020-1352
CVE-2020-1352 is tied to a memory handling issue in Windows USO Core Worker that enables elevation of privilege when a specially crafted application runs on Windows/Windows Server. The CNVD entry describes the vulnerability as an OS component memory-management flaw in Windows USO Core Worker that...
CVE-2020-1357
CVE-2020-1357 is described as an elevation of privilege affecting the Windows System Events Broker. The漏洞 arises from the broker’s improper handling of file operations, enabling an attacker to elevate privileges by running a crafted application on the local machine. The available connected docume...
CVE-2020-1359
CVE-2020-1359 is a Windows elevation-of-privilege issue tied to the CNG Key Isolation Service. The vulnerability arises from improper memory handling in the Windows CNG Key Isolation Service, enabling local privilege escalation on affected Windows/Windows Server systems. Connected records also re...
CVE-2020-1372
CVE-2020-1372 refers to an Elevation of Privilege in Windows Mobile Device Management (MDM) Diagnostics. CNVD entries state the root cause as improper handling of objects in memory, exploitable by running a specially crafted application to bypass access restrictions (and, in one CNVD entry, delet...
CVE-2020-1385
CVE-2020-1385 affects the Windows Credential Picker. The vulnerability arises from how memory objects are handled, enabling local elevation of privilege if a crafted application runs on a vulnerable system. The CVE is tied to the Windows Credential Picker component and has a Local, Low-Complexity...
CVE-2020-1392
CVE-2020-1392 is an Elevation of Privilege vulnerability in the Windows Delivery Optimization service. It arises from improper handling of memory objects, enabling a local attacker to execute code with elevated privileges by running a specially crafted script or application. Documents also associ...
CVE-2020-1399
Technical details for CVE-2020-1399 are not present in the provided connected documents. Public EUVD entries mention malware but do not describe the vulnerability specifics. Monitor for updates.
CVE-2020-17031
Technical details about CVE-2020-17031 (Windows remote access elevation of privilege) are not provided in the connected documents; public information in the initial description is limited. Monitor for updates.
CVE-2021-1681
CVE-2021-1681 notes a Windows WalletService Elevation of Privilege vulnerability. The NVD entry describes a LOCAL attack that requires LOW privileges, with no user interaction, and results in HIGH impact on confidentiality, integrity, and availability. The CVSS v3.1 base metrics: AV:L, AC:L, PR:L...
CVE-2021-1691
CVE-2021-1691 is described in the primary CVE record as a Windows Hyper-V Denial of Service vulnerability with a CVSS v3.1 base score of 7.7 (HIGH) and network attack vector; no exploitation status is provided in the documents. A connected Kaspersky entry (KLA12045) lists this CVE among multiple ...
CVE-2021-24106
CVE-2021-24106 is a Windows DirectX information disclosure vulnerability. According to the NVD entry, the issue has a CVSS v3.1 base score of 5.5 (medium) with a local attack vector, low attack complexity, and no user interaction required. The confidentiality impact is listed as HIGH, while integ...
CVE-2021-26882
CVE-2021-26882 is a Local Elevation of Privilege vulnerability described as a Remote Access API issue. The standard sources assign CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8) and CVSS‑2.0/3.1 metrics show a medium to high impact with high confidentiality, integrity, and availability ...
CVE-2021-43239
CVE-2021-43239 is a Windows Privilege Escalation vulnerability affecting the Windows Recovery Environment (WinRE) Agent. The NVD entry describes a local, low-attack-complexity flaw with high impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). NCSC integration lists r...
CVE-2015-2423
CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...
CVE-2016-3203
CVE-2016-3203 is a Windows PDF Remote Code Execution vulnerability affecting Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (Gold and 1511) and Microsoft Edge. Connected advisories describe an out-of-bounds memory access in the Windows PDF Library/Edge PDF reader caused by improper buffer v...
CVE-2016-3213
CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...
CVE-2016-3239
The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...
CVE-2016-7223
CVE-2016-7223 describes a Local Privilege Escalation in the Microsoft Virtual Hard Disk (VHD) Driver affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (variants 1511, 1607), and Windows Server 2016. The root cause is improper access restriction to VHD-related files, allowi...
CVE-2016-7260
CVE-2016-7260 affects multiple Windows releases via a Win32k.sys/Win32k component elevation of privilege vulnerability. The kernel-mode drivers in Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10 (incl. 1511, 1607), and Server 2016 allow local users to gain privileg...
CVE-2016-7292
CVE-2016-7292 is a Windows Installer Elevation of Privilege vulnerability. The NVD description notes that the Installer in multiple Windows editions mishandles library loading, allowing a local attacker to gain higher privileges via a crafted application. Affected platforms include Windows Vista ...
CVE-2017-0178
CVE-2017-0178 affects Microsoft Hyper-V on Windows 10 (incl. 1511/1607), Windows 8.1, Windows Server 2012 R2, and Windows Server 2016. The vulnerability is a denial-of-service caused by improper validation of input from a privileged user on a guest OS, leading to host crash. Connected docs corrob...
CVE-2017-11816
CVE-2017-11816 is an information disclosure flaw in the Microsoft Windows GDI component. The connected advisory notes a WMF-file processing out-of-bounds read as the root cause, enabling a remote attacker to cause information leakage by convincing a user to open a specially crafted web page or do...
CVE-2017-11829
CVE-2017-11829 affects Windows 10 via the Windows Update Delivery Optimization service which does not properly enforce file share permissions. The root cause is an elevation of privilege vulnerability that could allow a local attacker to overwrite files by abusing Delivery Optimization; exploitat...
CVE-2017-8483
Technical details about CVE-2017-8483 are not publicly provided in the supplied documents. The connected EUVD entries reference malware but do not describe affected products, vulnerable components, exploitation or fixes. Monitor for updates.
CVE-2019-1216
CVE-2019-1216 describes a DirectX information disclosure vulnerability arising from improper handling of memory objects in DirectX. The issue affects Microsoft Windows/Windows Server environments via DirectX components and is characterized by a memory handling flaw that allows partial confidentia...
CVE-2020-0660
CVE-2020-0660 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). According to the trusted sources, an attacker can trigger the issue by establishing an RDP connection and sending specially crafted requests, resulting in a disruption of availability. The public reco...
CVE-2020-0806
CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...
CVE-2020-0845
Technical details for CVE-2020-0845 are not publicly available in the provided documents; monitor for updates.
CVE-2020-0853
CVE-2020-0853 is a Windows Imaging Component information-disclosure vulnerability rooted in uninitialized memory in Windows image decoders. FireEye’s analysis shows uninitialized memory in windowscodecs!CFormatConverter::Initialize led to leaking pixel data during TIFF/image decoding; PoC output ...
CVE-2020-0864
CVE-2020-0864 affects Windows Work Folder Service and is an elevation-of-privilege flaw caused by improper handling of file operations. Connected CNVD-2020-23447 describes a privilege-escalation vulnerability in Windows Work Folder Service that can be exploited by a crafted application to run wit...
CVE-2020-0869
CVE-2020-0869 denotes a memory corruption vulnerability in Windows Media Foundation caused by improper handling of in-memory objects. Connected sources identify Windows Media Foundation as the affected component, with generic attacker impact described (unauthorized data access or modification; po...
CVE-2020-0996
Technical details about CVE-2020-0996 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are stated here. Monitor for official advisories and updates.
CVE-2020-1140
CVE-2020-1140 (DirectX Elevation of Privilege) is a Windows DirectX vulnerability where memory objects are improperly handled, enabling an attacker with local access to escalate privileges and potentially execute arbitrary code in kernel mode. The root cause, as described in MS and NVD records, i...
CVE-2020-1290
CVE-2020-1290 is a Win32k information-disclosure vulnerability in Windows. The root cause is that the Win32k component improperly provides kernel information, enabling an attacker who can run code locally to access due to information disclosure. The CVSS metrics in the record indicate LOCAL acces...
CVE-2020-1361
CVE-2020-1361 affects Windows WalletService, described as an information-disclosure vulnerability stemming from how WalletService handles memory. The entry notes an attacker would first need code execution on a victim system, making it a local-attack scenario with information disclosure as the im...
CVE-2020-1418
CVE-2020-1418 describes a Windows Privilege Elevation vulnerability in the Windows Diagnostics Hub Execution Service. The issue arises from improper input sanitization, causing unsecure library loading and enabling local privilege escalation. Affected software is Windows Diagnostics Hub (Executio...
CVE-2020-1420
CVE-2020-1420 is tied to a Windows Error Reporting information-disclosure vulnerability. Connected CNVD-2020-40877 describes the root cause as Windows Error Reporting failing to properly handle file operations, leading to information disclosure. The CVE entry’s mitigations/patch details are not p...
CVE-2020-1424
CVE-2020-1424 affects the Windows Update Stack, described as an elevation-of-privilege in memory handling of objects. This vulnerability enables local attackers to run code with kernel-level privileges, with no user interaction required per the description. The provided documents do not specify a...