CVE-2021-24095

CVE-2021-24095 is an elevation-of-privilege issue affecting Microsoft DirectX. The connected datasets identify DirectX as the affected component and categorize the impact as obtaining increased entitlements. No explicit root-cause technical details (e.g., vulnerable function/file/path) or patch/v...

CVE-2021-24106

CVE-2021-24106 is a Windows DirectX information disclosure vulnerability. According to the NVD entry, the issue has a CVSS v3.1 base score of 5.5 (medium) with a local attack vector, low attack complexity, and no user interaction required. The confidentiality impact is listed as HIGH, while integ...

CVE-2015-2462

CVE-2015-2462 is an OpenType font parsing vulnerability in Windows’ Adobe Type Manager Library (ATMFD.DLL). The weakness allows remote code execution when a crafted OpenType font is processed by affected Windows builds. The affected platforms include Windows Vista SP2, Windows Server 2008 SP2/R2,...

CVE-2016-3258

CVE-2016-3258 is a Windows kernel race condition that allows a local attacker to bypass Low Integrity protections and modify files by abusing object-manager features (Windows File System Security Feature Bypass). Affected software: Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and W...

CVE-2016-3320

CVE-2016-3320 describes a Secure Boot bypass in Microsoft Windows environments. Details across sources indicate that Windows 8.1, Windows Server 2012 (Gold and R2), Windows RT 8.1, and Windows 10 (Gold and 1511) are affected, allowing an attacker with administrative or physical access to install ...

CVE-2016-7215

CVE-2016-7215 is a Windows kernel-level elevation of privilege affecting multiple Windows client/server platforms. The vulnerability resides in the Win32k subsystem (kernel-mode drivers) and is exploited via a crafted application to gain SYSTEM privileges. Affected products include Windows Vista ...

CVE-2016-7224

CVE-2016-7224 concerns the Microsoft Virtual Hard Disk (VHD) Driver, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The vulnerability arises from the VHD Driver not properly restricting access to files, enabling a local ...

CVE-2017-8477

CVE-2017-8477 : A local information-disclosure vulnerability in Windows kernel objects during memory initialization (Win32k). Affected: multiple Windows versions including Windows 7 SP1, Windows 8.1, Windows 10 variants (1511, 1607, 1703) and Windows Server equivalents. Impact: potential informat...

CVE-2017-8561

CVE-2017-8561 is a Windows kernel elevation-of-privilege vulnerability described as: a local attacker can exploit through improper handling of objects in memory by the Windows kernel, allowing code execution with elevated privileges. Affected software per the initial document includes Windows 8.1...

CVE-2017-8590

CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...

CVE-2018-1004

Technical details for CVE-2018-1004 (VBScript engine remote code execution) are not provided in the connected documents. Public details (affected versions, root cause, exploitability, fixes) are not available here. Monitor for updates and consult primary sources for specifics.

CVE-2018-8436

Technical details public in the provided documents are not available beyond the CVE summary; no specifics on affected products, versions, root cause, or fixes are given here. Monitor for updates.

CVE-2018-8444

CVE-2018-8444 is an information-disclosure vulnerability in the SMBv2 server used by Windows systems (e.g., Windows 10, Windows Server 2012/2012 R2, Windows 8.1, Windows RT 8.1). The vulnerability stems from how SMBv2 handles certain requests, enabling an attacker to obtain information from the s...

CVE-2019-0550

The CVE-2019-0550 entry concerns a remote code execution in Microsoft Windows Hyper-V. Affected software/hardware: Windows Hyper-V on hosts running Windows 10, Windows Server 2019, and Windows 10 Servers. Root cause: the host fails to properly validate input from an authenticated user on a guest ...

CVE-2019-0886

The CVE-2019-0886 entry concerns a vulnerability in Windows Hyper‑V where the host OS fails to properly validate input from a guest OS, potentially allowing information disclosure by an authenticated guest user. Public connected documents corroborate that the affected component is Windows Hyper‑V...

CVE-2019-1310

Technical details for CVE-2019-1310 are not provided in the connected documents. Based on the initial description, no affected product/version or remediation details are available here. Monitor for updates from authoritative sources.

CVE-2019-1368

CVE-2019-1368 describes a security feature bypass where Windows Secure Boot improperly restricts access to debugging functionality, potentially enabling an attacker to access protected kernel memory. Connected documents corroborate the vulnerability name and general context but do not provide exp...

CVE-2019-1379

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2019-1437

Technical details about CVE-2019-1437 are not publicly available in the provided Connected documents. Monitor for updates; the material here does not specify affected products/versions, root cause, impact, or remediation.

CVE-2020-0679

Technical details about CVE-2020-0679 are not publicly provided in the connected documents. Based on the initial description, no concrete product/version/root-cause is disclosed here. Monitor for updates from official sources to obtain specifics and remediation.

CVE-2020-0685

CVE-2020-0685 is a Windows local elevation-of-privilege vulnerability due to improper handling of COM object creation in the Windows COM Server. The root cause is misuse in COM object creation, enabling an attacker who logs on locally to run a specially crafted application and gain elevated privi...

CVE-2020-0742

CVE-2020-0742 describes an elevation of privilege in the Connected Devices Platform Service. Connected documents (CNVD) corroborate: Microsoft Windows and Windows Server are affected; the issue stems from how the Connected Devices Platform Service handles objects in memory, enabling an attacker t...

CVE-2020-0748

Technical details for CVE-2020-0748 are not publicly provided in the connected documents; no affected products, versions, or fixes are specified here. Monitor for updates from official advisories.

CVE-2020-0834

CVE-2020-0834 (Windows ALPC Elevation of Privilege) is supported by the connected NVD entry, which describes a local-elevation vulnerability in Windows where improper handling of Advanced Local Procedure Call (ALPC) calls could allow an attacker to run arbitrary code in the security context of th...

CVE-2020-0939

CVE-2020-0939 is a Windows Media Foundation information-disclosure vulnerability. The issue arises from Media Foundation not handling memory objects correctly, enabling an attacker to obtain sensitive information on a affected system. Documented as a local information-disclosure issue in Microsof...

CVE-2020-0998

CVE-2020-0998 is an elevation of privilege in the Windows Graphics Component caused by improper in-memory object handling; exploitable via a crafted local application to gain elevation. Microsoft patch addresses the memory handling to prevent unintended user-mode elevation.

CVE-2020-1055

CVE-2020-1055 is a Microsoft Active Directory Federation Services Cross‑Site Scripting vulnerability. The root cause is improper sanitization of user inputs in ADFS, enabling an attacker to perform cross‑site scripting on affected servers. The MSRC advisory describes an unauthenticated attacker e...

CVE-2020-1279

CVE-2020-1279 is described as a Windows Lockscreen Elevation of Privilege vulnerability. The initial record states an elevation of privilege when Windows Lockscreen fails to properly load spotlight images from a secure location. Connected documents reference Windows Lockscreen in CVE-2020-1279 as...

CVE-2020-1357

CVE-2020-1357 is described as an elevation of privilege affecting the Windows System Events Broker. The漏洞 arises from the broker’s improper handling of file operations, enabling an attacker to elevate privileges by running a crafted application on the local machine. The available connected docume...

CVE-2020-1389

Technical details about CVE-2020-1389 are not provided in the connected documents. The materials only reiterate the vulnerability name and a generic Windows kernel information disclosure. Monitor official advisories for affected products, impact, and remediation updates.

CVE-2020-1415

Technical details about CVE-2020-1415 are not provided in the connected documents; the initial description notes an elevation of privilege in Windows Runtime, but no concrete affected versions, exploitability, or remediation are supplied.

CVE-2020-1420

CVE-2020-1420 is tied to a Windows Error Reporting information-disclosure vulnerability. Connected CNVD-2020-40877 describes the root cause as Windows Error Reporting failing to properly handle file operations, leading to information disclosure. The CVE entry’s mitigations/patch details are not p...

CVE-2021-1690

Technical details about CVE-2021-1690 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specific affected products, root cause, impact, or fixes are disclosed here.

CVE-2021-26869

CVE-2021-26869 affects Windows via the ActiveX Installer Service, described as an Information Disclosure Vulnerability. The available documentation (NVD/NVD entry) indicates a LOCAL attack vector with LOW attack complexity and no user interaction, impacting confidentiality (partial to high depend...

CVE-2015-2433

CVE-2015-2433 is described as a local kernel ASLR bypass vulnerability in Microsoft Windows (affecting Vista SP2/Server 2008 SP2 and R2, Windows 7 SP1, 8/8.1, Server 2012, RT/RT 8.1, Windows 10). Connected records confirm public exploitation activity and linkage to a separate MS15-080/graphics-fo...

CVE-2016-0090

Summary: CVE-2016-0090 is a Windows Hyper-V Information Disclosure vulnerability. It affects Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10 where a guest OS user can cause the Hyper-V host to disclose memory contents via a crafted application. Root cause: inadequate validation of ...

CVE-2016-3352

Summary: CVE-2016-3352 describes an information-disclosure vulnerability in Windows NTLM SSO validation for Microsoft Account (MSA) logins. Details across connected docs show that Windows clients (Windows 8.1, Windows RT 8.1, Windows 10 variants 1511/1607, and related builds) do not properly vali...

CVE-2016-3369

CVE-2016-3369 affects Windows 10 Gold and 1511 via the AHCACHE.SYS memory-handling flaw. A remote attacker can trigger a denial-of-service by sending a specially crafted Portable Executable to an affected server. The vulnerability is addressed by the MS16-110 security update (Windows update packa...

CVE-2017-0165

CVE-2017-0165 is a local elevation of privilege vulnerability in Microsoft Windows (affecting Windows 10, 1511, 8.1, RT 8.1, and Windows Server 2012 R2) caused by improper sanitization of handles in memory. The CIRCL/CVE sighting notes an exploit in ExploitDB, indicating public exploitation exist...

CVE-2017-0179

CVE-2017-0179 describes a Hyper-V denial-of-service vulnerability affecting Windows host systems (e.g., Windows 10/Server 2012 R2/Server 2016) where input from a privileged user on a guest OS is not properly validated. Connected sources reference related Hyper-V CVEs (e.g., CVE-2017-0184) and ind...

CVE-2017-0298

Technical details about CVE-2017-0298 are not publicly provided in the supplied documents. No specific affected products/versions or root cause are described here. Monitor official sources for updates.

CVE-2017-11765

CVE-2017-11765 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Serv...

CVE-2017-11850

CVE-2017-11850 affects the Microsoft Graphics Component in Windows variants listed in the CVE entry (Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 releases 1511, 1607, 1703, 1709, Windows Server 2016, and Windows Server 1709). Root cause is improper handling of objects in memory, le...

CVE-2017-8493

CVE-2017-8493 affects Windows 8.1/RT 8.1, Windows Server 2012 R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a Windows security feature bypass where an attacker can set variables that are read‑only or require authentication due to a failure to enforce case sensitivi...

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2017-8679

CVE-2017-8679 pertains to a Windows kernel information disclosure vulnerability. The affected platform set includes Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is impr...

CVE-2018-8216

The CVE-2018-8216 entry describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 variants; the vulnerability relates to bypass...

CVE-2018-8441

CVE-2018-8441 is an elevation-of-privilege flaw in Windows Subsystem for Linux caused by an integer overflow. A locally authenticated attacker could exploit a crafted WSL object in memory to execute code with elevated privileges on affected Windows 10/Windows Server systems. Public advisories (MS...

CVE-2019-1277

CVE-2019-1277 describes an elevation of privilege vulnerability in the Windows Audio Service triggered by processing a malformed parameter. The affected component is Windows Audio Service on Windows systems. Root cause: malformed parameter handling leading to unauthorized privilege escalation. CV...

CVE-2019-1439

CVE-2019-1439 is described as a Windows GDI information disclosure vulnerability. Connected advisories provide concrete details: a heap-based buffer overflow in the MF3216 component of Microsoft Windows, with exploitation described as remote and triggered by the user opening a specially crafted f...