2974 matches found
CVE-2016-3368
CVE-2016-3368 affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (initial 1511/1607)). It is a remote code execution vulnerability caused by how Windows handles objects in memory. An attacker with domain cr...
CVE-2016-7260
CVE-2016-7260 affects multiple Windows releases via a Win32k.sys/Win32k component elevation of privilege vulnerability. The kernel-mode drivers in Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10 (incl. 1511, 1607), and Server 2016 allow local users to gain privileg...
CVE-2017-0189
Technical details about CVE-2017-0189 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2017-0246
CVE-2017-0246 is a local elevation of privilege in the Windows Graphics Component (kernel-mode, win32k) affecting multiple Windows versions (Windows 7 SP1 x64 and later, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows 10 1511/1607, Windows Server 2012/2016, RT 8.1). Root cause concerns the G...
CVE-2017-11762
This CVE (CVE-2017-11762) is a remote code execution vulnerability in the Microsoft Windows Graphics Component that is triggered by specially crafted embedded fonts. Affected products span Windows client and server lines listed in the CVE entry (e.g., Windows 7, 8.1, 10 variants, Server 2008/2012...
CVE-2017-11853
Technical details for CVE-2017-11853 (affected Windows kernel versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from official advisories (MSRC) and regional databases.
CVE-2017-8479
Technical details for CVE-2017-8479 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE records.
CVE-2017-8620
CVE-2017-8620 is a Windows Search Remote Code Execution vulnerability. The issue arises when Windows Search improperly handles objects in memory, allowing a remote attacker to execute code on the affected system. Multiple connected sources (Nessus/OpenVAS plugins) confirm this CVE is tied to the ...
CVE-2019-1223
The CVE-2019-1223 entry describes a denial-of-service in Remote Desktop Protocol (RDP) where an attacker can cause the RDP service to stop responding by sending specially crafted connection requests. The vulnerability arises in how RDP handles connection requests, enabling network-based DoS when ...
CVE-2020-0659
CVE-2020-0659 is a Windows elevation-of-privilege vulnerability in the Windows Data Sharing Service, arising when the service improperly handles file operations. The issue enables local attackers to escalate privileges (CVE-2020-0659 is distinct from CVE-2020-0747). The NVD entry indicates a MEDI...
CVE-2020-0676
Technical details for CVE-2020-0676 are not publicly available in the provided connected documents. The initial description offers a general summary only. Monitor for updates and rely on official advisories for affected products and fixes.
CVE-2020-0756
Technical details for CVE-2020-0756 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2020-0801
Technical details for CVE-2020-0801 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0875
CVE-2020-0875 describes an information disclosure vulnerability in how splwow64.exe handles certain calls. An attacker who exploits this could obtain information to further compromise the user’s system (low-integrity to medium-integrity). The flaw by itself does not grant arbitrary code execution...
CVE-2020-0877
CVE-2020-0887 is a Windows Win32k Elevation of Privilege vulnerability where the Win32k component fails to properly handle objects in memory. The description (and related CVEs 2020-0788 and 2020-0877) indicate a local privilege escalation risk, with kernel-mode execution potential as stated in mu...
CVE-2020-0947
CVE-2020-0947 is an information-disclosure vulnerability in Microsoft Windows Media Foundation caused by improper handling of memory objects. The issue affects Windows/Windows Server environments using Media Foundation and can expose sensitive information when a crafted file is opened. Public det...
CVE-2020-1072
CVE-2020-1072 is described as a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. The connected CNVD entry repeats this description, confirming an information-disclosure risk stemming from memory object handling in Windows kernel sp...
CVE-2020-1086
Technical details about CVE-2020-1086 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2020-1097
CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...
CVE-2020-1249
Technical details about CVE-2020-1249 are not publicly provided in the supplied documents. No affected products, exploit specifics, or remediation information are confirmed here. Monitor for official disclosures and updates.
CVE-2020-1352
CVE-2020-1352 is tied to a memory handling issue in Windows USO Core Worker that enables elevation of privilege when a specially crafted application runs on Windows/Windows Server. The CNVD entry describes the vulnerability as an OS component memory-management flaw in Windows USO Core Worker that...
CVE-2020-1406
The CVE-2020-1406 entry describes a local Elevation of Privilege in Windows Network List Service related to in-memory object handling. The provided connected documents do not include concrete technical details (no affected product versions, root-cause specifics, exploit info, or remediation guida...
CVE-2020-1419
Technical details about CVE-2020-1419 are not publicly provided in the supplied documents; no vendor, product, version, impact, or fix specifics are present. Monitor for updates.
CVE-2020-1427
CVE-2020-1427 is an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Affected product: Windows Network Connections Service (Windows). Vulnerable component: memory handling within the service, leading to code execution with ele...
CVE-2020-17024
CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...
CVE-2020-17077
CVE-2020-17077 is a Windows Update Stack Elevation of Privilege vulnerability tracked in CVE-2020-17077. The vulnerability is identified as a local, low-attack-complexity issue that requires low privileges and can yield high impact on confidentiality, integrity, and availability per NVD metrics (...
CVE-2021-26887
The CVE-2021-26887 issue is an elevation of privilege in Microsoft Windows involving Folder Redirection enabled via Group Policy. Affected scenario occurs when the folder redirection file server is co-located with a Terminal Server; an attacker could begin redirecting another user’s personal data...
CVE-2021-28347
CVE-2021-28347 is a Windows Speech Runtime Elevation of Privilege vulnerability. It affects Windows Speech Runtime with local attack vector, low privileges required, and no user interaction, with potential HIGH impact on confidentiality, integrity, and availability per CVSS3. public sources list ...
CVE-2016-0175
The CVE-2016-0175 issue is a Win32k Information Disclosure vulnerability in the Windows kernel that allows a local attacker to obtain the memory addresses of kernel objects, enabling a KASLR bypass. The vulnerability affects multiple Windows releases (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1,...
CVE-2016-7248
CVE-2016-7248 affects Microsoft Windows Video Control in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1507–1607). The vulnerability allows remote attackers to execute arbitrary code by rendering a crafted file; the issue stems from the Microsoft Video Co...
CVE-2017-0178
CVE-2017-0178 affects Microsoft Hyper-V on Windows 10 (incl. 1511/1607), Windows 8.1, Windows Server 2012 R2, and Windows Server 2016. The vulnerability is a denial-of-service caused by improper validation of input from a privileged user on a guest OS, leading to host crash. Connected docs corrob...
CVE-2017-11816
CVE-2017-11816 is an information disclosure flaw in the Microsoft Windows GDI component. The connected advisory notes a WMF-file processing out-of-bounds read as the root cause, enabling a remote attacker to cause information leakage by convincing a user to open a specially crafted web page or do...
CVE-2017-8483
Technical details about CVE-2017-8483 are not publicly provided in the supplied documents. The connected EUVD entries reference malware but do not describe affected products, vulnerable components, exploitation or fixes. Monitor for updates.
CVE-2017-8678
CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...
CVE-2019-1173
CVE-2019-1173 is an elevation-of-privilege flaw affecting the Windows component PsmServiceExtHost.dll where in-memory object handling is improper. The vulnerability allows a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Microsoft’s secu...
CVE-2019-1216
CVE-2019-1216 describes a DirectX information disclosure vulnerability arising from improper handling of memory objects in DirectX. The issue affects Microsoft Windows/Windows Server environments via DirectX components and is characterized by a memory handling flaw that allows partial confidentia...
CVE-2020-0699
CVE-2020-0699 is a Win32k Information Disclosure Vulnerability in the win32k component of Windows kernel. The issue arises when kernel information is inappropriately exposed, enabling an attacker with local access to obtain information from the affected system (information disclosure). Public dat...
CVE-2020-0745
CVE-2020-0745 is a Windows Graphics Component elevation-of-privilege vulnerability caused by improper handling of memory objects. The entry (CVE-2020-0745) indicates a local attack vector requiring low privileges and no user interaction (CVSS v3.1: Local, Low, None, Privilege Escalation with High...
CVE-2020-0798
CVE-2020-0798 is a Windows Installer elevation-of-privilege vulnerability. The issue arises when Windows Installer does not properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated system privileges. The CVE is tied to ...
CVE-2020-0863
CVE-2020-0863 affects Windows with the Connected User Experiences and Telemetry Service, where the service improperly discloses file information, enabling a local attacker to read files on the file system. Public exploits are noted in community sources. The vulnerability is addressed by Microsoft...
CVE-2020-0864
CVE-2020-0864 affects Windows Work Folder Service and is an elevation-of-privilege flaw caused by improper handling of file operations. Connected CNVD-2020-23447 describes a privilege-escalation vulnerability in Windows Work Folder Service that can be exploited by a crafted application to run wit...
CVE-2020-0869
CVE-2020-0869 denotes a memory corruption vulnerability in Windows Media Foundation caused by improper handling of in-memory objects. Connected sources identify Windows Media Foundation as the affected component, with generic attacker impact described (unauthorized data access or modification; po...
CVE-2020-1082
CVE-2020-1082 is an elevation of privilege vulnerability in Windows Error Reporting (WER) related to how WER handles and executes files. The description identifies the issue as distinct from CVE-2020-1021 and CVE-2020-1088. Public documentation in the connected sources confirms the vulnerable com...
CVE-2020-1109
CVE-2020-1109 is a Windows Update Stack elevation-of-privilege issue. The description in the CVE notes memory-object handling flaws in Windows Update Stack. Connected documents reference a Windows Update security update (KB4556799) that covers Windows Update Stack fixes among other components, in...
CVE-2020-1126
The CVE-2020-1126 entry relates to a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The affected component is Windows Media Foundation within Windows; the root cause is object handling in memory leading to corruption. Severity metrics...
CVE-2020-1191
Technical details (affected product/component, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2020-1277
The CVE-2020-1277 entry relates to an elevation of privilege in Windows Installer. Connected CNVD entries describe the flaw as arising from how Windows Installer handles certain file system operations (some variants mention improper handling/cleanup of input) which can enable a local attacker to ...
CVE-2020-1418
CVE-2020-1418 describes a Windows Privilege Elevation vulnerability in the Windows Diagnostics Hub Execution Service. The issue arises from improper input sanitization, causing unsecure library loading and enabling local privilege escalation. Affected software is Windows Diagnostics Hub (Executio...
CVE-2020-1424
CVE-2020-1424 affects the Windows Update Stack, described as an elevation-of-privilege in memory handling of objects. This vulnerability enables local attackers to run code with kernel-level privileges, with no user interaction required per the description. The provided documents do not specify a...