CVE-2020-1157

Technical details for CVE-2020-1157 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation information.

CVE-2020-1169

CVE-2020-1169 is a Windows Runtime Elevation of Privilege vulnerability. The root cause is the Windows Runtime improperly handling objects in memory, which could allow an attacker to run arbitrary code in an elevated context by executing a specially crafted application. The vulnerability is addre...

CVE-2020-1373

Technical details (affected products, root cause, impact, fixes) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-17026

CVE-2020-17026 is documented as a Windows Remote Access Elevation of Privilege vulnerability. The available sources (NVD entry) label it with local attack vector and partial confidentiality, integrity, and availability impacts (CVSS v2 base score 4.6; CVSS v3.1 base score 7.8). Connected document...

CVE-2021-1690

Technical details about CVE-2021-1690 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specific affected products, root cause, impact, or fixes are disclosed here.

CVE-2021-26874

CVE-2021-26874 is a Windows elevation-of-privilege vulnerability affecting the Windows Overlay Filter component. The description and CVSS data indicate a local, low-privilege exploit with no user interaction required, potentially allowing a total compromise of the affected system (confidentiality...

CVE-2015-6126

CVE-2015-6126 is a local elevation-of-privilege vulnerability in the Pragmatic General Multicast (PGM) protocol implementation in Windows. The root cause is a race condition that can lead to references to memory that has already been freed (use-after-free), enabling a logged-in attacker to gain p...

CVE-2016-0088

CVE-2016-0088 corresponds to a Hyper-V remote code execution vulnerability in Microsoft Windows Hyper-V affecting Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The root cause is that Hyper-V fails to properly validate guest OS input from an authenticated user, enabling a crafted app...

CVE-2016-3370

CVE-2016-3370 corresponds to a PDF library information-disclosure vulnerability in Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 versions (1511, 1607). The issue allows remote attackers to obtain sensitive information via a crafted web site or content,...

CVE-2017-0024

Technical details for CVE-2017-0024 are not publicly available in the provided connected documents. Monitor for updates to confirm affected products, root cause, impact, and remediations.

CVE-2017-0057

CVE-2017-0057 is a Windows DNS client information-disclosure vulnerability. The DNS client in affected Windows versions (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607, Windows Server 2016) may mishandle DNS queries, enabling an attacker to obtain sensitive information....

CVE-2017-0164

CVE-2017-0164 describes a denial-of-service vulnerability in Windows 10 (1607) and Windows Server 2016 Active Directory where an authenticated attacker sending malicious search queries can cause Active Directory to become nonresponsive. The issue affects AD services by faulty handling of search q...

CVE-2017-0186

CVE-2017-0186 describes a denial-of-service vulnerability in Microsoft Hyper-V Network Switch when a privileged user on a guest OS can cause input validation to fail on supported Windows hosts (Windows 10, 8.1, Server 2012, 2012 R2, 2016). The underlying impact is host availability disruption. No...

CVE-2017-8462

Technical details about CVE-2017-8462 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2017-8468

CVE-2017-8468 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Public exploits exist and the root cause is improper handling of objects in memory within the Windows kernel’s Win32k subsystem, enabling an attacker to run processes in an elevated context locally. Affected prod...

CVE-2017-8474

Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.

CVE-2017-8478

Technical details about CVE-2017-8478 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8485

Technical details about CVE-2017-8485 are not provided in the connected documents. The available materials do not specify affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2017-8679

CVE-2017-8679 pertains to a Windows kernel information disclosure vulnerability. The affected platform set includes Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is impr...

CVE-2018-8436

Technical details public in the provided documents are not available beyond the CVE summary; no specifics on affected products, versions, root cause, or fixes are given here. Monitor for updates.

CVE-2019-1374

An information disclosure vulnerability exists in how Windows Error Reporting (WER) handles objects in memory. Multiple sources (NVD and Red Hat/SUSE advisories) identify it as a Windows in-memory handling issue that can expose sensitive information to an attacker with local access and user inter...

CVE-2019-1379

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0701

CVE-2020-0701 affects the Windows Client License Service (ClipSVC). The vulnerability arises from how the service handles in-memory objects, allowing a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Impact is elevation of privilege; expl...

CVE-2020-0732

CVE-2020-0732 is an elevation-of-privilege vulnerability affecting Microsoft DirectX, arising from improper handling of objects in memory. The CVE entry and CNVD CNVD-2020-14701 describe a memory-corruption/ misreference issue in DirectX that could enable code execution with kernel privileges if ...

CVE-2020-0808

CVE-2020-0808 describes an elevation of privilege vulnerability in the way the Provisioning Runtime validates certain file operations. The connected documents reiterate this description but do not specify affected products, versions, root cause details, impact metrics, exploit status, or availabl...

CVE-2020-0879

CVE-2020-0879 is a Windows GDI information-disclosure vulnerability in which memory objects within the Graphics Device Interface can be leveraged to retrieve information from the target system. Public documentation describes it as an information-disclosure issue arising from how GDI handles memor...

CVE-2020-1078

Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.

CVE-2020-1110

CVE-2020-1110 is a Windows Update Stack Elevation of Privilege vulnerability. The issue arises from the Windows Update Stack failing to properly handle objects in memory, enabling local privilege escalation (kernel-level impact per CNVD entries) with high CVSS scores. Affected product scope is Wi...

CVE-2020-1124

CVE-2020-1124 is a Windows vulnerability affecting the Windows State Repository Service, where an elevation of privilege occurs due to improper handling of objects in memory. The issue can allow a local attacker to gain higher privileges, with CVSS-3.1 indicating a HIGH base score (local exploit,...

CVE-2020-1184

Technical details for CVE-2020-1184 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2020-1267

CVE-2020-1267 is a Windows Local Security Authority Subsystem Service (LSASS) denial-of-service vulnerability. According to CNVD-2020-52913, an attacker could trigger a DoS by sending a specially crafted authentication request, potentially causing the target system to reboot. The connected docume...

CVE-2020-1284

CVE-2020-1284 is a denial-of-service vulnerability in the SMBv3 protocol (SMBv3 Client/Server) for Microsoft Windows. The issue arises from how SMBv3 handles certain requests, allowing an authenticated SMB server attacker to cause the target system to crash, and an unauthenticated attacker to cra...

CVE-2020-1366

CVE-2020-1366 is a Windows vulnerability in the Print Workflow Service described as an elevation of privilege where the service improperly handles objects in memory. The underlying cause is memory handling in the affected component, enabling a local attacker to escalate privileges (no user intera...

CVE-2020-1388

The CVE-2020-1388 entry describes an Elevation of Privilege vulnerability in Windows, triggered by how psmsrv.dll handles objects in memory. The CNVD-2020-43110 record confirms a Windows psmsrv.dll EoP flaw (local attacker could run a crafted app to execute code with elevated privileges). No expl...

CVE-2020-1429

CVE-2020-1429 affects Microsoft Windows Error Reporting Manager. According to CNVD-2020-52921, the vulnerability is an elevation of privilege caused by the manager failing to properly handle process crashes, which can be exploited by running a specially crafted application to delete target files ...

CVE-2020-1431

CVE-2020-1431 is the Windows AppX Deployment Extensions Elevation of Privilege vulnerability. The issue stems from improper privilege management within AppX Deployment Extensions, enabling an authenticated attacker to elevate privileges by running a specially crafted application and potentially a...

CVE-2020-1438

CVE-2020-1438 is an Elevation of Privilege vulnerability in Windows Network Connections Service. The issue arises from how in-memory objects are handled, enabling local attackers to potentially execute code with elevated privileges. Affected product: Windows Network Connections Service (per CVE-2...

CVE-2020-16879

CVE-2020-16879 is a Windows Projected Filesystem information-disclosure vulnerability. The issue arises when the Projected Filesystem improperly handles file redirections, enabling a user who is logged on to the system to run a crafted application that could disclose sensitive information and fur...

CVE-2021-26866

CVE-2021-26866 is a Windows Update Service Elevation of Privilege vulnerability with local attack vector. The linked sources identify the affected component as Windows Update Service and classify impact as potential elevation of privileges, with high integrity/availability concerns in some vector...

CVE-2021-26884

CVE-2021-26884 is described as a Windows Media Photo Codec Information Disclosure Vulnerability . The connected documents confirm the CVE is associated with Windows Media components and appear in multiple vulnerability lists (NVD, CVE List, OpenVAS). The materials do not provide a concrete root-c...

CVE-2021-27088

CVE-2021-27088 refers to Windows Event Tracing Elevation of Privilege. The NVD entry provides CVSS details (CVSS 3.1: LOCAL, LOW ATTACK COMPLEXITY, PR:L, NONE user interaction; impacts HIGH confidentiality, integrity, and availability) and labels it as a local elevation of privilege vulnerability...

CVE-2015-2514

CVE-2015-2514 pertains to Windows Journal remote code execution via a crafted .jnt file affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The connected records also reference CVE-2015-2513 and CVE-2...

CVE-2016-3262

CVE-2016-3262 and CVE-2016-3263 describe a Graphics Device Interface (GDI+/GDI) information-disclosure problem in multiple Windows versions. The description specifies that remote attackers can bypass ASLR through unspecified vectors. Affected products include Windows Vista SP2, Windows Server 200...

CVE-2016-3352

Summary: CVE-2016-3352 describes an information-disclosure vulnerability in Windows NTLM SSO validation for Microsoft Account (MSA) logins. Details across connected docs show that Windows clients (Windows 8.1, Windows RT 8.1, Windows 10 variants 1511/1607, and related builds) do not properly vali...

CVE-2017-11823

CVE-2017-11823 affects Microsoft Device Guard on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a security feature bypass caused by how Device Guard handles and validates elements of a signed PowerShell script, enabling code to bypass the Code Integrity policy. The CPAI...

CVE-2017-8531

CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...

CVE-2017-8554

CVE-2017-8554 corresponds to a Windows kernel local information disclosure affecting Win32k.sys across multiple Windows versions. The CNVD-2017-12584 entry notes a local information disclosure in Win32k.sys exploitable via a crafted application to obtain memory contents. Microsoft security update...

CVE-2017-8746

The CVE-2017-8746 issue affects Microsoft Windows Device Guard Code Integrity on Windows 10 (1607, 1703) and Windows Server 2016. The root cause is how PowerShell exposes functions and user-supplied code, enabling a security feature bypass where a local attacker could inject malicious code into a...

CVE-2018-8399

CVE-2018-8399 is a Windows Win32k elevation-of-privilege vulnerability. Connected sources confirm the flaw arises from improper handling of objects in memory within the Win32k.sys component, enabling local privilege escalation on Windows 7/10/Server variants. The EUVD and CVE-related records list...

CVE-2019-1368

CVE-2019-1368 describes a security feature bypass where Windows Secure Boot improperly restricts access to debugging functionality, potentially enabling an attacker to access protected kernel memory. Connected documents corroborate the vulnerability name and general context but do not provide exp...