2974 matches found
CVE-2020-0775
CVE-2020-0775 is an information disclosure vulnerability in Windows Error Reporting caused by improper handling of file operations. The vulnerability requires local execution to exploit. Affected component is Windows Error Reporting (Windows OS). Impact is information disclosure (confidentiality)...
CVE-2020-0861
CVE-2020-0861 is a Windows NDIS information-disclosure vulnerability. The issue arises from improper memory handling in the Windows Network Driver Interface Specification (NDIS). Exploitation requires local access with execution on the victim system (no user interaction), and the vulnerability en...
CVE-2020-0880
CVE-2020-0880 describes an information disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. The vulnerability affects Windows GDI memory handling; exploitation could allow an attacker to obtain information to further compromise the target system...
CVE-2020-0937
Summary of CVE-2020-0937 context (Media Foundation): An information-disclosure vulnerability exists in Microsoft Windows Media Foundation due to improper handling of memory objects. The affected product is Microsoft Windows/Windows Server via the Media Foundation component. The root cause is memo...
CVE-2020-0996
Technical details about CVE-2020-0996 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are stated here. Monitor for official advisories and updates.
CVE-2020-1132
CVE-2020-1132 is described as an Elevation of Privilege in Windows Error Reporting Manager caused by improper handling of file/folder links. The connected CNVD entry expands this to a condition where an attacker could exploit the issue by using a specially crafted application to overwrite a targe...
CVE-2020-1157
Technical details for CVE-2020-1157 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation information.
CVE-2020-1267
CVE-2020-1267 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. According to CNVD-2020-52913, an attacker could trigger a DoS by sending a specially crafted authentication request, potentially causing the target system to reboot. The connected docume...
CVE-2020-1347
CVE-2020-1347 is a Windows Storage Services Elevation of Privilege vulnerability caused by improper handling of file operations, enabling local privilege escalation on affected Windows systems. The entry lists a MEDIUM base CVSS v2.0 score (4.6) and HIGH base CVSS v3.1 score (7.8) with local acce...
CVE-2020-17074
CVE-2020-17074 is a Windows Update Orchestrator Service elevation-of-privilege vulnerability. Documents show it enables local privilege escalation with low privileges, no user interaction, and affects the Update Orchestrator Service (impacting confidentiality, integrity, and availability). Exploi...
CVE-2021-26866
CVE-2021-26866 is a Windows Update Service Elevation of Privilege vulnerability with local attack vector. The linked sources identify the affected component as Windows Update Service and classify impact as potential elevation of privileges, with high integrity/availability concerns in some vector...
CVE-2021-43227
CVE-2021-43227 is described as a Storage Spaces Controller Information Disclosure Vulnerability. The connected sources provide CVSS data: CVSS v3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with a base score of 5.5 (MEDIUM) and a LOCAL attack vector with LOW complexity, requiring LOW pr...
CVE-2015-2423
CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...
CVE-2015-2524
Technical details about CVE-2015-2524 are not publicly available in the provided connected documents. No specific affected product/version, root cause, impact, or remediation are disclosed here. Monitor for updates.
CVE-2015-2525
CVE-2015-2525 affects Windows Task Scheduler across multiple OS versions (Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012/2012 R2, RT/10). The vulnerability allows local privilege escalation by bypassing filesystem restrictions during task deletion via Task Scheduler (schedsvc.dll) wi...
CVE-2016-0006
CVE-2016-0006 is a local privilege-escalation vulnerability in the Windows sandbox implementation where reparse points are mishandled. A crafted application can escalate privileges on affected systems by exploiting this flaw. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2...
CVE-2017-0024
Technical details for CVE-2017-0024 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediations.
CVE-2017-11814
CVE-2017-11814 is a Windows kernel information disclosure vulnerability. It involves improper handling of objects in memory in the Windows kernel and affects multiple Windows editions (Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 v1511/1607/1...
CVE-2017-11823
CVE-2017-11823 affects Microsoft Device Guard on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a security feature bypass caused by how Device Guard handles and validates elements of a signed PowerShell script, enabling code to bypass the Code Integrity policy. The CPAI...
CVE-2017-8462
Technical details about CVE-2017-8462 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2017-8468
CVE-2017-8468 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Public exploits exist and the root cause is improper handling of objects in memory within the Windows kernel’s Win32k subsystem, enabling an attacker to run processes in an elevated context locally. Affected prod...
CVE-2017-8492
CVE-2017-8492 affects the Windows kernel across multiple Windows versions (server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2016, RT 8.1, Windows 10 variants). The issue is a kernel information disclosure vulnerability exploitable by an authenticated user via a specially crafted applicatio...
CVE-2019-1415
CVE-2019-1415 affects Windows Installer and is described as an elevation-of-privilege vulnerability arising from how Windows Installer handles certain filesystem operations. The CVE entry notes that exploitation would require unprivileged code execution on the victim system (local access) with no...
CVE-2020-0715
Technical details for CVE-2020-0715 are not publicly provided in the connected documents. Monitor for updates from official advisories.
CVE-2020-0879
CVE-2020-0879 is a Windows GDI information-disclosure vulnerability in which memory objects within the Graphics Device Interface can be leveraged to retrieve information from the target system. Public documentation describes it as an information-disclosure issue arising from how GDI handles memor...
CVE-2020-0942
CVE-2020-0942 is an Elevation of Privilege vulnerability in the Windows Connected User Experiences and Telemetry Service caused by improper handling of file operations. According to CNVD/NVD entries, exploitation would allow a locally authenticated attacker to execute code with elevated privilege...
CVE-2020-1110
CVE-2020-1110 is a Windows Update Stack Elevation of Privilege vulnerability. The issue arises from the Windows Update Stack failing to properly handle objects in memory, enabling local privilege escalation (kernel-level impact per CNVD entries) with high CVSS scores. Affected product scope is Wi...
CVE-2020-1124
CVE-2020-1124 is a Windows vulnerability affecting the Windows State Repository Service, where an elevation of privilege occurs due to improper handling of objects in memory. The issue can allow a local attacker to gain higher privileges, with CVSS-3.1 indicating a HIGH base score (local exploit,...
CVE-2020-1131
Technical details about CVE-2020-1131 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2020-1149
Technical details for CVE-2020-1149 are not publicly available in the provided documents. Monitor for updates from official sources.
CVE-2020-1187
Technical details about CVE-2020-1187 are not publicly provided in the connected documents. No affected products, root cause, or fixes are specified here. Monitor for updates in the provided sources.
CVE-2020-1559
Technical details (affected product/version, root cause, exploitability, or patch specifics) are not provided in the connected documents. Monitor for updates.
CVE-2021-26870
CVE-2021-26870 : Windows Projected File System Elevation of Privilege vulnerability. The CVE is documented as a local, low-privilege escalation with high impact on confidentiality, integrity, and availability (per CVSS v3.1: 7.8, HIGH; LOCAL, PR:L, UI:N). The Connected documents do not provide ex...
CVE-2021-26878
CVE-2021-26878 refers to a Windows Print Spooler elevation of privilege vulnerability. The connected documents confirm the affected component is the Windows Print Spooler service and that the vulnerability is locally exploitable with low attack complexity, with high impact on confidentiality, int...
CVE-2021-43246
CVE-2021-43246 is a Windows Hyper-V Denial of Service vulnerability. Public records identify it with local attack vector and availability impact, with CVSS 3.1 base score 5.6 (medium) and CVSS 2.0 base score 4.9 (medium). Affected context is Windows Hyper-V; exact vulnerable component/versions ar...
CVE-2016-7223
CVE-2016-7223 describes a Local Privilege Escalation in the Microsoft Virtual Hard Disk (VHD) Driver affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (variants 1511, 1607), and Windows Server 2016. The root cause is improper access restriction to VHD-related files, allowi...
CVE-2017-0292
CVE-2017-0292 describes a Windows PDF remote code execution vulnerability in the Windows PDF handler. A specially crafted PDF file can cause arbitrary code execution on affected Windows versions (Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 1511, 1607, 1703; Windows Server...
CVE-2017-8467
CVE-2017-8467 is a Windows graphics elevation-of-privilege vulnerability in the graphics/Win32k component. The root cause is theGraphics subsystem failing to properly handle objects in memory, enabling a local attacker to gain higher privileges. Affected platforms include Windows 7 SP1, Windows S...
CVE-2017-8474
Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.
CVE-2017-8482
Technical details about CVE-2017-8482 are not publicly provided in the connected documents. The initial description gives general info, but no concrete affected products, versions, root cause, impact, or fix is documented here. Monitor for updates.
CVE-2018-8217
CVE-2018-8217 is a local security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected are Windows Server 2016 and Windows 10/Windows 10 Servers. The vulnerability is described acros...
CVE-2019-1374
An information disclosure vulnerability exists in how Windows Error Reporting (WER) handles objects in memory. Multiple sources (NVD and Red Hat/SUSE advisories) identify it as a Windows in-memory handling issue that can expose sensitive information to an attacker with local access and user inter...
CVE-2019-1383
Technical details about CVE-2019-1383 are not publicly provided in the supplied documents. Monitor for updates in connected feeds for affected products, versions, impact, and fixes.
CVE-2019-1420
Technical details for CVE-2019-1420 are not publicly provided in the connected documents. Monitor for updates from official sources; no explicit exploit/victim/product/version data is available here.
CVE-2020-0728
CNVD-2020-10129 and related OpenVAS entries describe CVE-2020-0728 as an information disclosure vulnerability in Microsoft Windows, specifically involving the Windows Modules Installer Service. The root cause is improper disclosure of file information by the service, enabling an attacker to view ...
CVE-2020-1078
Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.
CVE-2020-1141
Technical details for CVE-2020-1141 are not publicly available in the provided documents. No explicit affected components, root cause, or fixes are stated here. Monitor for updates from official advisories.
CVE-2020-1258
CVE-2020-1258 is an elevation-of-privilege vulnerability in DirectX where objects in memory are improperly handled. The impact is local privilege escalation with the potential to compromise the system if an attacker can cause the vulnerable DirectX component to execute code with higher privileges...
CVE-2020-1284
CVE-2020-1284 is a denial-of-service vulnerability in the SMBv3 protocol (SMBv3 Client/Server) for Microsoft Windows. The issue arises from how SMBv3 handles certain requests, allowing an authenticated SMB server attacker to cause the target system to crash, and an unauthenticated attacker to cra...