CVE-2020-1427

CVE-2020-1427 is an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Affected product: Windows Network Connections Service (Windows). Vulnerable component: memory handling within the service, leading to code execution with ele...

CVE-2020-16999

CVE-2020-16999 corresponds to a Windows WalletService Information Disclosure vulnerability. The available documents identify the affected component as WalletService on Windows and indicate a local attack vector with low complexity, requiring low privileges, and potential confidentiality impact (C...

CVE-2020-17022

CVE-2020-17022 is a remote code execution vulnerability in Microsoft Windows Codecs Library that allows arbitrary code execution when a program processes a specially crafted image file. Multiple connected sources (MSRC/MS hardening guidance, Nessus plug-in, CNVD, NCSC) describe the issue as affec...

CVE-2021-26860

CVE-2021-26860 is a Windows App-V Overlay Filter Elevation of Privilege vulnerability. The issue is local in nature and can allow an attacker with LOW privileges and no user interaction to escalate privileges, impacting confidentiality, integrity, and availability as described in CVSS/metrics. Co...

CVE-2021-43239

CVE-2021-43239 is a Windows Privilege Escalation vulnerability affecting the Windows Recovery Environment (WinRE) Agent. The NVD entry describes a local, low-attack-complexity flaw with high impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). NCSC integration lists r...

CVE-2016-3258

CVE-2016-3258 is a Windows kernel race condition that allows a local attacker to bypass Low Integrity protections and modify files by abusing object-manager features (Windows File System Security Feature Bypass). Affected software: Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and W...

CVE-2016-7224

CVE-2016-7224 concerns the Microsoft Virtual Hard Disk (VHD) Driver, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The vulnerability arises from the VHD Driver not properly restricting access to files, enabling a local ...

CVE-2017-11762

This CVE (CVE-2017-11762) is a remote code execution vulnerability in the Microsoft Windows Graphics Component that is triggered by specially crafted embedded fonts. Affected products span Windows client and server lines listed in the CVE entry (e.g., Windows 7, 8.1, 10 variants, Server 2008/2012...

CVE-2017-8475

Technical details about CVE-2017-8475 are not publicly available in the provided connected documents. The EUVD entries mention malware unrelated to concrete exploit details. Monitor for updates.

CVE-2017-8492

CVE-2017-8492 affects the Windows kernel across multiple Windows versions (server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2016, RT 8.1, Windows 10 variants). The issue is a kernel information disclosure vulnerability exploitable by an authenticated user via a specially crafted applicatio...

CVE-2017-8709

The CVE-2017-8709 entry concerns a Windows kernel information disclosure vulnerability in which the Windows kernel component improperly handles objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Win...

CVE-2018-0828

CVE-2018-0828 is a Windows elevation-of-privilege vulnerability affecting Windows 10 (version 1607) and Windows Server 2016. The root cause is improper protection of the MultiPoint management account password, allowing a local attacker who logs in to run a specially crafted application to execute...

CVE-2018-8216

The CVE-2018-8216 entry describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 variants; the vulnerability relates to bypass...

CVE-2018-8314

CVE-2018-8314 is an elevation-of-privilege vulnerability described as failing a check that could allow a sandbox escape. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2, and Windows 10; it i...

CVE-2018-8444

CVE-2018-8444 is an information-disclosure vulnerability in the SMBv2 server used by Windows systems (e.g., Windows 10, Windows Server 2012/2012 R2, Windows 8.1, Windows RT 8.1). The vulnerability stems from how SMBv2 handles certain requests, enabling an attacker to obtain information from the s...

CVE-2019-1223

The CVE-2019-1223 entry describes a denial-of-service in Remote Desktop Protocol (RDP) where an attacker can cause the RDP service to stop responding by sending specially crafted connection requests. The vulnerability arises in how RDP handles connection requests, enabling network-based DoS when ...

CVE-2019-1437

Technical details about CVE-2019-1437 are not publicly available in the provided Connected documents. Monitor for updates; the material here does not specify affected products/versions, root cause, impact, or remediation.

CVE-2020-0679

Technical details about CVE-2020-0679 are not publicly provided in the connected documents. Based on the initial description, no concrete product/version/root-cause is disclosed here. Monitor for updates from official sources to obtain specifics and remediation.

CVE-2020-0861

CVE-2020-0861 is a Windows NDIS information-disclosure vulnerability. The issue arises from improper memory handling in the Windows Network Driver Interface Specification (NDIS). Exploitation requires local access with execution on the victim system (no user interaction), and the vulnerability en...

CVE-2020-0863

CVE-2020-0863 affects Windows with the Connected User Experiences and Telemetry Service, where the service improperly discloses file information, enabling a local attacker to read files on the file system. Public exploits are noted in community sources. The vulnerability is addressed by Microsoft...

CVE-2020-0942

CVE-2020-0942 is an Elevation of Privilege vulnerability in the Windows Connected User Experiences and Telemetry Service caused by improper handling of file operations. According to CNVD/NVD entries, exploitation would allow a locally authenticated attacker to execute code with elevated privilege...

CVE-2020-1016

CVE-2020-1016 is described as an information disclosure vulnerability in the Windows Push Notification Service caused by improper handling of objects in memory. The connected sources identify the affected component as Windows Push Notification Service on Windows/Windows Server and frame the issue...

CVE-2020-1131

Technical details about CVE-2020-1131 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-1132

CVE-2020-1132 is described as an Elevation of Privilege in Windows Error Reporting Manager caused by improper handling of file/folder links. The connected CNVD entry expands this to a condition where an attacker could exploit the issue by using a specially crafted application to overwrite a targe...

CVE-2020-1149

Technical details for CVE-2020-1149 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2020-1187

Technical details about CVE-2020-1187 are not publicly provided in the connected documents. No affected products, root cause, or fixes are specified here. Monitor for updates in the provided sources.

CVE-2020-1361

CVE-2020-1361 affects Windows WalletService, described as an information-disclosure vulnerability stemming from how WalletService handles memory. The entry notes an attacker would first need code execution on a victim system, making it a local-attack scenario with information disclosure as the im...

CVE-2020-1559

Technical details (affected product/version, root cause, exploitability, or patch specifics) are not provided in the connected documents. Monitor for updates.

CVE-2020-17073

CVE-2020-17073 corresponds to a Windows Update Orchestrator Service Elevation of Privilege vulnerability. The connected KLA12004 advisory explicitly lists an elevation of privilege vulnerability in Windows Update Orchestrator Service (item 34) among a broad set of Windows kernel and subsystem vul...

CVE-2021-26862

Technical details about CVE-2021-26862 (affected product/component, root cause, impact, or patch) are not provided in the connected documents. Monitor official advisories for updates; current sources only confirm the vulnerability name/type without specifics.

CVE-2021-43227

CVE-2021-43227 is described as a Storage Spaces Controller Information Disclosure Vulnerability. The connected sources provide CVSS data: CVSS v3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with a base score of 5.5 (MEDIUM) and a LOCAL attack vector with LOW complexity, requiring LOW pr...

CVE-2015-2462

CVE-2015-2462 is an OpenType font parsing vulnerability in Windows’ Adobe Type Manager Library (ATMFD.DLL). The weakness allows remote code execution when a crafted OpenType font is processed by affected Windows builds. The affected platforms include Windows Vista SP2, Windows Server 2008 SP2/R2,...

CVE-2016-3249

The CVE-2016-3249 vulnerability is a Win32k Elevation of Privilege issue affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 Gold/1511. It arises from improper handling of objects in memory by kernel-mode drivers, enabling local...

CVE-2016-3270

CVE-2016-3270 is a Win32k local privilege-escalation vulnerability in the Windows kernel graphics subsystem. The flaw arises from improper handling of objects in memory within the Win32k graphics component, allowing a local user to gain SYSTEM privileges via a crafted application. Affected produc...

CVE-2016-3369

CVE-2016-3369 affects Windows 10 Gold and 1511 via the AHCACHE.SYS memory-handling flaw. A remote attacker can trigger a denial-of-service by sending a specially crafted Portable Executable to an affected server. The vulnerability is addressed by the MS16-110 security update (Windows update packa...

CVE-2016-7215

CVE-2016-7215 is a Windows kernel-level elevation of privilege affecting multiple Windows client/server platforms. The vulnerability resides in the Win32k subsystem (kernel-mode drivers) and is exploited via a crafted application to gain SYSTEM privileges. Affected products include Windows Vista ...

CVE-2016-7217

CVE-2016-7217 : Memory corruption in Media Foundation (Windows Graphics/Media Foundation) allows remote code execution via a crafted web site. Affected: Windows 8.1; Windows Server 2012 RT/Gold and R2; Windows RT 8.1; Windows 10 (Gold, 1511, 1607); Windows Server 2016. Root cause: memory corrupti...

CVE-2016-7248

CVE-2016-7248 affects Microsoft Windows Video Control in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1507–1607). The vulnerability allows remote attackers to execute arbitrary code by rendering a crafted file; the issue stems from the Microsoft Video Co...

CVE-2017-0179

CVE-2017-0179 describes a Hyper-V denial-of-service vulnerability affecting Windows host systems (e.g., Windows 10/Server 2012 R2/Server 2016) where input from a privileged user on a guest OS is not properly validated. Connected sources reference related Hyper-V CVEs (e.g., CVE-2017-0184) and ind...

CVE-2017-0298

Technical details about CVE-2017-0298 are not publicly provided in the supplied documents. No specific affected products/versions or root cause are described here. Monitor official sources for updates.

CVE-2017-8493

CVE-2017-8493 affects Windows 8.1/RT 8.1, Windows Server 2012 R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a Windows security feature bypass where an attacker can set variables that are read‑only or require authentication due to a failure to enforce case sensitivi...

CVE-2019-1309

Technical details about CVE-2019-1309 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1439

CVE-2019-1439 is described as a Windows GDI information disclosure vulnerability. Connected advisories provide concrete details: a heap-based buffer overflow in the MF3216 component of Microsoft Windows, with exploitation described as remote and triggered by the user opening a specially crafted f...

CVE-2020-0660

CVE-2020-0660 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). According to the trusted sources, an attacker can trigger the issue by establishing an RDP connection and sending specially crafted requests, resulting in a disruption of availability. The public reco...

CVE-2020-0685

CVE-2020-0685 is a Windows local elevation-of-privilege vulnerability due to improper handling of COM object creation in the Windows COM Server. The root cause is misuse in COM object creation, enabling an attacker who logs on locally to run a specially crafted application and gain elevated privi...

CVE-2020-0715

Technical details for CVE-2020-0715 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0742

CVE-2020-0742 describes an elevation of privilege in the Connected Devices Platform Service. Connected documents (CNVD) corroborate: Microsoft Windows and Windows Server are affected; the issue stems from how the Connected Devices Platform Service handles objects in memory, enabling an attacker t...

CVE-2020-0834

CVE-2020-0834 (Windows ALPC Elevation of Privilege) is supported by the connected NVD entry, which describes a local-elevation vulnerability in Windows where improper handling of Advanced Local Procedure Call (ALPC) calls could allow an attacker to run arbitrary code in the security context of th...

CVE-2020-0857

CVE-2020-0857 is an elevation of privilege vulnerability in Windows: the Windows Search Indexer mishandles memory objects, enabling local attackers to gain elevated privileges. Affected: Windows Search Indexer process; root cause is memory handling. Impact per sources is elevation of privileges w...

CVE-2020-1151

Technical details for CVE-2020-1151 are not publicly provided in the supplied documents. No concrete exploit, affected product/version, or remediation information is present. Monitor for updates from official advisories and vendor bulletins.