CVE-2020-1140

CVE-2020-1140 (DirectX Elevation of Privilege) is a Windows DirectX vulnerability where memory objects are improperly handled, enabling an attacker with local access to escalate privileges and potentially execute arbitrary code in kernel mode. The root cause, as described in MS and NVD records, i...

CVE-2020-1165

Technical details about CVE-2020-1165 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1188

Technical details about CVE-2020-1188 are not provided in the supplied documents; no affected products, versions, exploitation, or remediation details are included. Monitor for updates in connected sources.

CVE-2020-1279

CVE-2020-1279 is described as a Windows Lockscreen Elevation of Privilege vulnerability. The initial record states an elevation of privilege when Windows Lockscreen fails to properly load spotlight images from a secure location. Connected documents reference Windows Lockscreen in CVE-2020-1279 as...

CVE-2020-1283

CVE-2020-1283 is a Windows denial-of-service vulnerability where memory objects are improperly handled, causing the system to stop responding. The connected Nessus entry (KB4557957 family) lists CVE-2020-1283 among patched issues in June 2020, but the provided sources do not specify affected prod...

CVE-2020-1290

CVE-2020-1290 is a Win32k information-disclosure vulnerability in Windows. The root cause is that the Win32k component improperly provides kernel information, enabling an attacker who can run code locally to access due to information disclosure. The CVSS metrics in the record indicate LOCAL acces...

CVE-2020-1324

CVE-2020-1324 is an elevation of privilege vulnerability in Windows Security Health Service that occurs when handling certain objects in memory. Per the NVD/Microsoft references, exploitation requires a logged-on attacker and could allow privilege elevation within the same user context due to in-...

CVE-2020-1372

CVE-2020-1372 refers to an Elevation of Privilege in Windows Mobile Device Management (MDM) Diagnostics. CNVD entries state the root cause as improper handling of objects in memory, exploitable by running a specially crafted application to bypass access restrictions (and, in one CNVD entry, delet...

CVE-2020-1374

CVE-2020-1374 affects the Windows Remote Desktop Client. The provided documents describe a remote code execution vulnerability that can be triggered when a user connects to a malicious RDP server. The AVLEONOV summary echoes that this is an RDP Client RCE affecting Windows 7 through Windows 10 (u...

CVE-2020-1392

CVE-2020-1392 is an Elevation of Privilege vulnerability in the Windows Delivery Optimization service. It arises from improper handling of memory objects, enabling a local attacker to execute code with elevated privileges by running a specially crafted script or application. Documents also associ...

CVE-2020-1399

Technical details for CVE-2020-1399 are not present in the provided connected documents. Public EUVD entries mention malware but do not describe the vulnerability specifics. Monitor for updates.

CVE-2020-1424

CVE-2020-1424 affects the Windows Update Stack, described as an elevation-of-privilege in memory handling of objects. This vulnerability enables local attackers to run code with kernel-level privileges, with no user interaction required per the description. The provided documents do not specify a...

CVE-2020-1426

Technical details for CVE-2020-1426 are not publicly available in the provided documents. Monitor for updates from official advisories to confirm affected products, impact, and remediation.

CVE-2020-17031

Technical details about CVE-2020-17031 (Windows remote access elevation of privilege) are not provided in the connected documents; public information in the initial description is limited. Monitor for updates.

CVE-2020-17074

CVE-2020-17074 is a Windows Update Orchestrator Service elevation-of-privilege vulnerability. Documents show it enables local privilege escalation with low privileges, no user interaction, and affects the Update Orchestrator Service (impacting confidentiality, integrity, and availability). Exploi...

CVE-2020-17113

Technical details for CVE-2020-17113 are not provided in the connected documents. No public specifics (affected software, root cause, or mitigation) are included here. Monitor for updates from the cited sources.

CVE-2021-24106

CVE-2021-24106 is a Windows DirectX information disclosure vulnerability. According to the NVD entry, the issue has a CVSS v3.1 base score of 5.5 (medium) with a local attack vector, low attack complexity, and no user interaction required. The confidentiality impact is listed as HIGH, while integ...

CVE-2021-26873

Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2015-2423

CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...

CVE-2016-3216

CVE-2016-3216 involves GDI32.dll in the Windows Graphics Component, where memory handling flaws allow remote attackers to bypass ASLR and disclose memory contents. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT ...

CVE-2016-3368

CVE-2016-3368 affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (initial 1511/1607)). It is a remote code execution vulnerability caused by how Windows handles objects in memory. An attacker with domain cr...

CVE-2017-0079

Technical details for CVE-2017-0079 are not publicly available in the provided documents; monitor for updates.

CVE-2017-0165

CVE-2017-0165 is a local elevation of privilege vulnerability in Microsoft Windows (affecting Windows 10, 1511, 8.1, RT 8.1, and Windows Server 2012 R2) caused by improper sanitization of handles in memory. The CIRCL/CVE sighting notes an exploit in ExploitDB, indicating public exploitation exist...

CVE-2017-11765

CVE-2017-11765 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Serv...

CVE-2017-8620

CVE-2017-8620 is a Windows Search Remote Code Execution vulnerability. The issue arises when Windows Search improperly handles objects in memory, allowing a remote attacker to execute code on the affected system. Multiple connected sources (Nessus/OpenVAS plugins) confirm this CVE is tied to the ...

CVE-2018-8217

CVE-2018-8217 is a local security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected are Windows Server 2016 and Windows 10/Windows 10 Servers. The vulnerability is described acros...

CVE-2018-8441

CVE-2018-8441 is an elevation-of-privilege flaw in Windows Subsystem for Linux caused by an integer overflow. A locally authenticated attacker could exploit a crafted WSL object in memory to execute code with elevated privileges on affected Windows 10/Windows Server systems. Public advisories (MS...

CVE-2019-1310

Technical details for CVE-2019-1310 are not provided in the connected documents. Based on the initial description, no affected product/version or remediation details are available here. Monitor for updates from authoritative sources.

CVE-2020-0745

CVE-2020-0745 is a Windows Graphics Component elevation-of-privilege vulnerability caused by improper handling of memory objects. The entry (CVE-2020-0745) indicates a local attack vector requiring low privileges and no user interaction (CVSS v3.1: Local, Low, None, Privilege Escalation with High...

CVE-2020-0775

CVE-2020-0775 is an information disclosure vulnerability in Windows Error Reporting caused by improper handling of file operations. The vulnerability requires local execution to exploit. Affected component is Windows Error Reporting (Windows OS). Impact is information disclosure (confidentiality)...

CVE-2020-0798

CVE-2020-0798 is a Windows Installer elevation-of-privilege vulnerability. The issue arises when Windows Installer does not properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated system privileges. The CVE is tied to ...

CVE-2020-0801

Technical details for CVE-2020-0801 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0869

CVE-2020-0869 denotes a memory corruption vulnerability in Windows Media Foundation caused by improper handling of in-memory objects. Connected sources identify Windows Media Foundation as the affected component, with generic attacker impact described (unauthorized data access or modification; po...

CVE-2020-0937

Summary of CVE-2020-0937 context (Media Foundation): An information-disclosure vulnerability exists in Microsoft Windows Media Foundation due to improper handling of memory objects. The affected product is Microsoft Windows/Windows Server via the Media Foundation component. The root cause is memo...

CVE-2020-0939

CVE-2020-0939 is a Windows Media Foundation information-disclosure vulnerability. The issue arises from Media Foundation not handling memory objects correctly, enabling an attacker to obtain sensitive information on a affected system. Documented as a local information-disclosure issue in Microsof...

CVE-2020-1109

CVE-2020-1109 is a Windows Update Stack elevation-of-privilege issue. The description in the CVE notes memory-object handling flaws in Windows Update Stack. Connected documents reference a Windows Update security update (KB4556799) that covers Windows Update Stack fixes among other components, in...

CVE-2020-1141

Technical details for CVE-2020-1141 are not publicly available in the provided documents. No explicit affected components, root cause, or fixes are stated here. Monitor for updates from official advisories.

CVE-2020-1191

Technical details (affected product/component, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-1249

Technical details about CVE-2020-1249 are not publicly provided in the supplied documents. No affected products, exploit specifics, or remediation information are confirmed here. Monitor for official disclosures and updates.

CVE-2020-1252

Technical details for CVE-2020-1252 are not publicly available in the provided Connected Documents; the sources here reference related updates (e.g., RemoteFX, CVE-2020-1036) but do not specify affected product/version/root cause/mitigation for this CVE. Monitor for updates.

CVE-2020-1258

CVE-2020-1258 is an elevation-of-privilege vulnerability in DirectX where objects in memory are improperly handled. The impact is local privilege escalation with the potential to compromise the system if an attacker can cause the vulnerable DirectX component to execute code with higher privileges...

CVE-2020-1330

CVE-2020-1330 is an information-disclosure vulnerability in Windows Mobile Device Management Diagnostics. The issue arises when MDM Diagnostics improperly handles junctions, enabling an attacker who can log on to read files via a specially crafted application. Microsoft’s advisory states that the...

CVE-2020-1352

CVE-2020-1352 is tied to a memory handling issue in Windows USO Core Worker that enables elevation of privilege when a specially crafted application runs on Windows/Windows Server. The CNVD entry describes the vulnerability as an OS component memory-management flaw in Windows USO Core Worker that...

CVE-2020-1369

CVE-2020-1369 is a Windows WalletService elevation-of-privilege vulnerability. The issue arises from how WalletService handles objects in memory, enabling a local attacker to execute code with elevated privileges. The CVE is linked to WalletService references in the CVE-2020-1369 entry and relate...

CVE-2020-1389

Technical details about CVE-2020-1389 are not provided in the connected documents. The materials only reiterate the vulnerability name and a generic Windows kernel information disclosure. Monitor official advisories for affected products, impact, and remediation updates.

CVE-2020-1413

Technical details about CVE-2020-1413 are not publicly available in the provided Connected documents. Monitor for updates from official sources to obtain affected products, impact, and remediation information.

CVE-2020-1415

Technical details about CVE-2020-1415 are not provided in the connected documents; the initial description notes an elevation of privilege in Windows Runtime, but no concrete affected versions, exploitability, or remediation are supplied.

CVE-2020-1418

CVE-2020-1418 describes a Windows Privilege Elevation vulnerability in the Windows Diagnostics Hub Execution Service. The issue arises from improper input sanitization, causing unsecure library loading and enabling local privilege escalation. Affected software is Windows Diagnostics Hub (Executio...

CVE-2020-1419

Technical details about CVE-2020-1419 are not publicly provided in the supplied documents; no vendor, product, version, impact, or fix specifics are present. Monitor for updates.

CVE-2020-1420

CVE-2020-1420 is tied to a Windows Error Reporting information-disclosure vulnerability. Connected CNVD-2020-40877 describes the root cause as Windows Error Reporting failing to properly handle file operations, leading to information disclosure. The CVE entry’s mitigations/patch details are not p...