CVE-2020-1016

CVE-2020-1016 is described as an information disclosure vulnerability in the Windows Push Notification Service caused by improper handling of objects in memory. The connected sources identify the affected component as Windows Push Notification Service on Windows/Windows Server and frame the issue...

CVE-2020-1082

CVE-2020-1082 is an elevation of privilege vulnerability in Windows Error Reporting (WER) related to how WER handles and executes files. The description identifies the issue as distinct from CVE-2020-1021 and CVE-2020-1088. Public documentation in the connected sources confirms the vulnerable com...

CVE-2020-1154

CVE-2020-1154 : Elevation of privilege in the Windows Common Log File System (CLFS) Driver due to improper handling of objects in memory. The vulnerability enables local privilege escalation, with a high-severity impact (CONFIDENTIALITY/INTEGRITY/AVAILABILITY listed as HIGH in CVSS 3.1, and LOCAL...

CVE-2020-1191

Technical details (affected product/component, root cause, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-1249

Technical details about CVE-2020-1249 are not publicly provided in the supplied documents. No affected products, exploit specifics, or remediation information are confirmed here. Monitor for official disclosures and updates.

CVE-2020-1277

The CVE-2020-1277 entry relates to an elevation of privilege in Windows Installer. Connected CNVD entries describe the flaw as arising from how Windows Installer handles certain file system operations (some variants mention improper handling/cleanup of input) which can enable a local attacker to ...

CVE-2020-1324

CVE-2020-1324 is an elevation of privilege vulnerability in Windows Security Health Service that occurs when handling certain objects in memory. Per the NVD/Microsoft references, exploitation requires a logged-on attacker and could allow privilege elevation within the same user context due to in-...

CVE-2020-1359

CVE-2020-1359 is a Windows elevation-of-privilege issue tied to the CNG Key Isolation Service. The vulnerability arises from improper memory handling in the Windows CNG Key Isolation Service, enabling local privilege escalation on affected Windows/Windows Server systems. Connected records also re...

CVE-2020-1392

CVE-2020-1392 is an Elevation of Privilege vulnerability in the Windows Delivery Optimization service. It arises from improper handling of memory objects, enabling a local attacker to execute code with elevated privileges by running a specially crafted script or application. Documents also associ...

CVE-2020-1399

Technical details for CVE-2020-1399 are not present in the provided connected documents. Public EUVD entries mention malware but do not describe the vulnerability specifics. Monitor for updates.

CVE-2020-1415

Technical details about CVE-2020-1415 are not provided in the connected documents; the initial description notes an elevation of privilege in Windows Runtime, but no concrete affected versions, exploitability, or remediation are supplied.

CVE-2020-1418

CVE-2020-1418 describes a Windows Privilege Elevation vulnerability in the Windows Diagnostics Hub Execution Service. The issue arises from improper input sanitization, causing unsecure library loading and enabling local privilege escalation. Affected software is Windows Diagnostics Hub (Executio...

CVE-2020-16999

CVE-2020-16999 corresponds to a Windows WalletService Information Disclosure vulnerability. The available documents identify the affected component as WalletService on Windows and indicate a local attack vector with low complexity, requiring low privileges, and potential confidentiality impact (C...

CVE-2020-17024

CVE-2020-17024 is a Windows Client Side Rendering Print Provider Elevation of Privilege vulnerability. Connected sources confirm impact as HIGH (base CVSS v3.1: 7.8) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; user interaction: NONE. Confidentiality/Integrity/Av...

CVE-2020-17074

CVE-2020-17074 is a Windows Update Orchestrator Service elevation-of-privilege vulnerability. Documents show it enables local privilege escalation with low privileges, no user interaction, and affects the Update Orchestrator Service (impacting confidentiality, integrity, and availability). Exploi...

CVE-2021-26860

CVE-2021-26860 is a Windows App-V Overlay Filter Elevation of Privilege vulnerability. The issue is local in nature and can allow an attacker with LOW privileges and no user interaction to escalate privileges, impacting confidentiality, integrity, and availability as described in CVSS/metrics. Co...

CVE-2021-26862

Technical details about CVE-2021-26862 (affected product/component, root cause, impact, or patch) are not provided in the connected documents. Monitor official advisories for updates; current sources only confirm the vulnerability name/type without specifics.

CVE-2021-26873

Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2021-26874

CVE-2021-26874 is a Windows elevation-of-privilege vulnerability affecting the Windows Overlay Filter component. The description and CVSS data indicate a local, low-privilege exploit with no user interaction required, potentially allowing a total compromise of the affected system (confidentiality...

CVE-2021-26887

The CVE-2021-26887 issue is an elevation of privilege in Microsoft Windows involving Folder Redirection enabled via Group Policy. Affected scenario occurs when the folder redirection file server is co-located with a Terminal Server; an attacker could begin redirecting another user’s personal data...

CVE-2015-2462

CVE-2015-2462 is an OpenType font parsing vulnerability in Windows’ Adobe Type Manager Library (ATMFD.DLL). The weakness allows remote code execution when a crafted OpenType font is processed by affected Windows builds. The affected platforms include Windows Vista SP2, Windows Server 2008 SP2/R2,...

CVE-2016-3213

CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...

CVE-2016-3368

CVE-2016-3368 affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (initial 1511/1607)). It is a remote code execution vulnerability caused by how Windows handles objects in memory. An attacker with domain cr...

CVE-2017-11763

CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...

CVE-2017-8479

Technical details for CVE-2017-8479 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE records.

CVE-2017-8620

CVE-2017-8620 is a Windows Search Remote Code Execution vulnerability. The issue arises when Windows Search improperly handles objects in memory, allowing a remote attacker to execute code on the affected system. Multiple connected sources (Nessus/OpenVAS plugins) confirm this CVE is tied to the ...

CVE-2017-8678

CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...

CVE-2018-8436

Technical details public in the provided documents are not available beyond the CVE summary; no specifics on affected products, versions, root cause, or fixes are given here. Monitor for updates.

CVE-2019-0886

The CVE-2019-0886 entry concerns a vulnerability in Windows Hyper‑V where the host OS fails to properly validate input from a guest OS, potentially allowing information disclosure by an authenticated guest user. Public connected documents corroborate that the affected component is Windows Hyper‑V...

CVE-2019-1292

CVE-2019-1292: A Windows denial of service vulnerability from improper handling of objects in memory. Public documents consistently describe the issue as affecting Windows memory handling and causing a DoS, but do not provide concrete affected product versions, root-cause details, exploits, or of...

CVE-2019-1368

CVE-2019-1368 describes a security feature bypass where Windows Secure Boot improperly restricts access to debugging functionality, potentially enabling an attacker to access protected kernel memory. Connected documents corroborate the vulnerability name and general context but do not provide exp...

CVE-2020-0756

Technical details for CVE-2020-0756 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-0845

Technical details for CVE-2020-0845 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0939

CVE-2020-0939 is a Windows Media Foundation information-disclosure vulnerability. The issue arises from Media Foundation not handling memory objects correctly, enabling an attacker to obtain sensitive information on a affected system. Documented as a local information-disclosure issue in Microsof...

CVE-2020-0998

CVE-2020-0998 is an elevation of privilege in the Windows Graphics Component caused by improper in-memory object handling; exploitable via a crafted local application to gain elevation. Microsoft patch addresses the memory handling to prevent unintended user-mode elevation.

CVE-2020-1072

CVE-2020-1072 is described as a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. The connected CNVD entry repeats this description, confirming an information-disclosure risk stemming from memory object handling in Windows kernel sp...

CVE-2020-1126

The CVE-2020-1126 entry relates to a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The affected component is Windows Media Foundation within Windows; the root cause is object handling in memory leading to corruption. Severity metrics...

CVE-2020-1279

CVE-2020-1279 is described as a Windows Lockscreen Elevation of Privilege vulnerability. The initial record states an elevation of privilege when Windows Lockscreen fails to properly load spotlight images from a secure location. Connected documents reference Windows Lockscreen in CVE-2020-1279 as...

CVE-2020-1290

CVE-2020-1290 is a Win32k information-disclosure vulnerability in Windows. The root cause is that the Win32k component improperly provides kernel information, enabling an attacker who can run code locally to access due to information disclosure. The CVSS metrics in the record indicate LOCAL acces...

CVE-2020-1352

CVE-2020-1352 is tied to a memory handling issue in Windows USO Core Worker that enables elevation of privilege when a specially crafted application runs on Windows/Windows Server. The CNVD entry describes the vulnerability as an OS component memory-management flaw in Windows USO Core Worker that...

CVE-2021-24095

CVE-2021-24095 is an elevation-of-privilege issue affecting Microsoft DirectX. The connected datasets identify DirectX as the affected component and categorize the impact as obtaining increased entitlements. No explicit root-cause technical details (e.g., vulnerable function/file/path) or patch/v...

CVE-2021-24106

CVE-2021-24106 is a Windows DirectX information disclosure vulnerability. According to the NVD entry, the issue has a CVSS v3.1 base score of 5.5 (medium) with a local attack vector, low attack complexity, and no user interaction required. The confidentiality impact is listed as HIGH, while integ...

CVE-2021-24107

Technical details for CVE-2021-24107 are not publicly provided in the connected documents; sources mention the vulnerability name in update KBs but do not specify affected products, root cause, or fixes.

CVE-2021-26878

CVE-2021-26878 refers to a Windows Print Spooler elevation of privilege vulnerability. The connected documents confirm the affected component is the Windows Print Spooler service and that the vulnerability is locally exploitable with low attack complexity, with high impact on confidentiality, int...

CVE-2021-43227

CVE-2021-43227 is described as a Storage Spaces Controller Information Disclosure Vulnerability. The connected sources provide CVSS data: CVSS v3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with a base score of 5.5 (MEDIUM) and a LOCAL attack vector with LOW complexity, requiring LOW pr...

CVE-2015-2423

CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...

CVE-2016-3203

CVE-2016-3203 is a Windows PDF Remote Code Execution vulnerability affecting Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (Gold and 1511) and Microsoft Edge. Connected advisories describe an out-of-bounds memory access in the Windows PDF Library/Edge PDF reader caused by improper buffer v...

CVE-2016-3216

CVE-2016-3216 involves GDI32.dll in the Windows Graphics Component, where memory handling flaws allow remote attackers to bypass ASLR and disclose memory contents. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT ...

CVE-2016-3369

CVE-2016-3369 affects Windows 10 Gold and 1511 via the AHCACHE.SYS memory-handling flaw. A remote attacker can trigger a denial-of-service by sending a specially crafted Portable Executable to an affected server. The vulnerability is addressed by the MS16-110 security update (Windows update packa...

CVE-2016-7223

CVE-2016-7223 describes a Local Privilege Escalation in the Microsoft Virtual Hard Disk (VHD) Driver affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (variants 1511, 1607), and Windows Server 2016. The root cause is improper access restriction to VHD-related files, allowi...