2974 matches found
CVE-2017-0292
CVE-2017-0292 describes a Windows PDF remote code execution vulnerability in the Windows PDF handler. A specially crafted PDF file can cause arbitrary code execution on affected Windows versions (Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 1511, 1607, 1703; Windows Server...
CVE-2017-11772
CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...
CVE-2017-8474
Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.
CVE-2017-8475
Technical details about CVE-2017-8475 are not publicly available in the provided connected documents. The EUVD entries mention malware unrelated to concrete exploit details. Monitor for updates.
CVE-2017-8478
Technical details about CVE-2017-8478 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-8709
The CVE-2017-8709 entry concerns a Windows kernel information disclosure vulnerability in which the Windows kernel component improperly handles objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Win...
CVE-2017-8713
CVE-2017-8713 refers to a Hyper-V information disclosure vulnerability in Windows Hyper-V component. Affected products include Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (various builds: Gold, 1511, 1607, 1703), and Windows Server 2016. The issue arises when Hyper-V fails to properly ...
CVE-2019-1374
An information disclosure vulnerability exists in how Windows Error Reporting (WER) handles objects in memory. Multiple sources (NVD and Red Hat/SUSE advisories) identify it as a Windows in-memory handling issue that can expose sensitive information to an attacker with local access and user inter...
CVE-2019-1383
Technical details about CVE-2019-1383 are not publicly provided in the supplied documents. Monitor for updates in connected feeds for affected products, versions, impact, and fixes.
CVE-2019-1420
Technical details for CVE-2019-1420 are not publicly provided in the connected documents. Monitor for updates from official sources; no explicit exploit/victim/product/version data is available here.
CVE-2020-0728
CNVD-2020-10129 and related OpenVAS entries describe CVE-2020-0728 as an information disclosure vulnerability in Microsoft Windows, specifically involving the Windows Modules Installer Service. The root cause is improper disclosure of file information by the service, enabling an attacker to view ...
CVE-2020-0752
CVE-2020-0752 is a Windows privilege-escalation vulnerability in the Windows Search Indexer related to how it handles objects in memory. The issue is described as allowing an attacker with local access to potentially execute code with elevated permissions, with the CVSS provided by the primary en...
CVE-2020-1258
CVE-2020-1258 is an elevation-of-privilege vulnerability in DirectX where objects in memory are improperly handled. The impact is local privilege escalation with the potential to compromise the system if an attacker can cause the vulnerable DirectX component to execute code with higher privileges...
CVE-2020-1284
CVE-2020-1284 is a denial-of-service vulnerability in the SMBv3 protocol (SMBv3 Client/Server) for Microsoft Windows. The issue arises from how SMBv3 handles certain requests, allowing an authenticated SMB server attacker to cause the target system to crash, and an unauthenticated attacker to cra...
CVE-2020-1431
CVE-2020-1431 is the Windows AppX Deployment Extensions Elevation of Privilege vulnerability. The issue stems from improper privilege management within AppX Deployment Extensions, enabling an authenticated attacker to elevate privileges by running a specially crafted application and potentially a...
CVE-2020-1438
CVE-2020-1438 is an Elevation of Privilege vulnerability in Windows Network Connections Service. The issue arises from how in-memory objects are handled, enabling local attackers to potentially execute code with elevated privileges. Affected product: Windows Network Connections Service (per CVE-2...
CVE-2020-17070
The CVE-2020-17070 entry concerns the Windows Update Medic Service Elevation of Privilege vulnerability. The available documents identify a local, low-privilege elevation of privilege in the Windows Update Medic Service, with the NVD metrics showing local access, low attack complexity, and high i...
CVE-2015-2472
CVE-2015-2472 is a Remote Desktop Session Host Spoofing vulnerability. RDSH in RDP up to Windows 8.1/Server 2012 and related editions does not properly verify certificates, allowing a MITM attacker to spoof a TLS/SSL session with a crafted certificate that has valid Issuer and Serial Number field...
CVE-2015-2514
CVE-2015-2514 pertains to Windows Journal remote code execution via a crafted .jnt file affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The connected records also reference CVE-2015-2513 and CVE-2...
CVE-2015-2553
CVE-2015-2553 affects the Windows kernel’s handling of mountpoint creation for reparse points, enabling local privilege escalation via sandboxed environments on Windows Vista/7/8/8.1/10 and corresponding server editions. Public writeups describe bypasses of the mitigation introduced by MS15-111 (...
CVE-2016-0197
CVE-2016-0197 is a local elevation-of-privilege vulnerability in the DirectX Graphics kernel subsystem (dxgkrnl.sys) affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012, Windows RT 8.1, and Windows 10 (including 1511). Root cause: improper handling of obje...
CVE-2016-3215
CVE-2016-3215 is the Windows PDF Information Disclosure vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1511, and Edge. It allows remote attackers to read sensitive data from process memory via a crafted PDF. Connected MSKBs confirm mitigations: MS16-068/KB3163017 u...
CVE-2016-3341
CVE-2016-3341 affects Windows kernel‑mode drivers in Transaction Manager (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607) and is described as a local elevation of privilege via a crafted application. The root cause involves improper handling of memory objects in the Ker...
CVE-2017-0082
Technical details for CVE-2017-0082 are not publicly provided in the connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates in the EUVD/CIRCL references.
CVE-2017-0186
CVE-2017-0186 describes a denial-of-service vulnerability in Microsoft Hyper-V Network Switch when a privileged user on a guest OS can cause input validation to fail on supported Windows hosts (Windows 10, 8.1, Server 2012, 2012 R2, 2016). The underlying impact is host availability disruption. No...
CVE-2017-8720
CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...
CVE-2018-8399
CVE-2018-8399 is a Windows Win32k elevation-of-privilege vulnerability. Connected sources confirm the flaw arises from improper handling of objects in memory within the Win32k.sys component, enabling local privilege escalation on Windows 7/10/Server variants. The EUVD and CVE-related records list...
CVE-2019-1409
CVE-2019-1409 is an information disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime. The connected data confirms the root cause as improper initialization of objects in memory within RPC, enabling partial confidentiality impact. The CVE affects the Windows RPC component, w...
CVE-2020-0732
CVE-2020-0732 is an elevation-of-privilege vulnerability affecting Microsoft DirectX, arising from improper handling of objects in memory. The CVE entry and CNVD CNVD-2020-14701 describe a memory-corruption/ misreference issue in DirectX that could enable code execution with kernel privileges if ...
CVE-2020-0808
CVE-2020-0808 describes an elevation of privilege vulnerability in the way the Provisioning Runtime validates certain file operations. The connected documents reiterate this description but do not specify affected products, versions, root cause details, impact metrics, exploit status, or availabl...
CVE-2020-0885
CVE-2020-0885 concerns the Windows GDI component, where memory contents can be improperly disclosed (information disclosure vulnerability). The vulnerability arises from how GDI handles objects in memory, enabling potential leakage of memory contents. The public documentation consistently describ...
CVE-2020-1090
Technical details for CVE-2020-1090 are not publicly available in the provided documents. Monitor for updates from official advisories."
CVE-2020-1151
Technical details for CVE-2020-1151 are not publicly provided in the supplied documents. No concrete exploit, affected product/version, or remediation information is present. Monitor for updates from official advisories and vendor bulletins.
CVE-2020-1169
CVE-2020-1169 is a Windows Runtime Elevation of Privilege vulnerability. The root cause is the Windows Runtime improperly handling objects in memory, which could allow an attacker to run arbitrary code in an elevated context by executing a specially crafted application. The vulnerability is addre...
CVE-2020-1375
CVE-2020-1375 is an elevation of privilege vulnerability in Windows, caused by improper handling of COM object creation in the Windows COM Server. The affected component is described as Windows COM Server, with exploitation requiring local access and the ability to run a specially crafted applica...
CVE-2020-1396
CVE-2020-1396 affects Microsoft Windows ALPC Elevation of Privilege. CNVD-2020-45187 describes a vulnerability where Windows ALPC is not correctly handling calls, allowing an attacker who logs on and runs a crafted application to execute arbitrary code with local system privileges. The connected ...
CVE-2020-16879
CVE-2020-16879 is a Windows Projected Filesystem information-disclosure vulnerability. The issue arises when the Projected Filesystem improperly handles file redirections, enabling a user who is logged on to the system to run a crafted application that could disclose sensitive information and fur...
CVE-2020-17076
CVE-2020-17076 affects Windows using the Update Orchestrator Service. The connected NVD entry confirms an Elevation of Privilege vulnerability in the Update Orchestrator Service, with local attack vector, low privileges required, and high impact on confidentiality, integrity, and availability (CV...
CVE-2021-26884
CVE-2021-26884 is described as a Windows Media Photo Codec Information Disclosure Vulnerability . The connected documents confirm the CVE is associated with Windows Media components and appear in multiple vulnerability lists (NVD, CVE List, OpenVAS). The materials do not provide a concrete root-c...
CVE-2021-26889
Technical details about CVE-2021-26889 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.
CVE-2015-2459
CVE-2015-2459 concerns ATMFD.DLL in the Windows Adobe Type Manager Library across Windows Vista/7/8/10 and server editions. The connected exploitpack entry describes an out-of-bounds read in ATMFD.DLL triggered by processing a malformed OpenType font, specifically a corrupted CFF table Name INDEX...
CVE-2015-2513
CVE-2015-2513 relates to Windows Journal remote code execution via a crafted .jnt file across Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The root cause is processing of .jnt files enabling arbi...
CVE-2015-2516
CVE-2015-2516 affects Windows Journal across multiple Windows client/server editions (e.g., Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 variants). The issue is a denial-of-service via a specially crafted Journal file (.jnt), caused by improper handling that c...
CVE-2015-6095
CVE-2015-6095 is a Windows Kerberos security feature bypass vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, 7 SP1, 8, 8.1, 2012/2012 R2, RT, 10 1511). The issue arises from mishandling password changes, which can let physically proximate attackers bypass authenticat...
CVE-2016-0101
CVE-2016-0101 corresponds to a Windows Media Parsing Remote Code Execution vulnerability affecting multiple Windows platforms (Windows 7 SP1, 8.1, Server 2008 R2/2012, RT 8.1, Windows 10). The root cause is described as improper handling of media content in the Windows Media/Media library, enabli...
CVE-2016-0142
CVE-2016-0142 is the Microsoft Video Control remote code execution vulnerability documented by NVD. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The issue arises from improper handling of objects in memory within the Video Cont...
CVE-2016-3376
CVE-2016-3376 is a local privilege escalation in the Windows kernel Win32k subsystem affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7, 8.1, Server 2012, Windows RT 8.1, and Windows 10 releases 1511/1607). The flaw involves the kernel-mode drivers mishandling objects i...
CVE-2017-0164
CVE-2017-0164 describes a denial-of-service vulnerability in Windows 10 (1607) and Windows Server 2016 Active Directory where an authenticated attacker sending malicious search queries can cause Active Directory to become nonresponsive. The issue affects AD services by faulty handling of search q...
CVE-2017-8554
CVE-2017-8554 corresponds to a Windows kernel local information disclosure affecting Win32k.sys across multiple Windows versions. The CNVD-2017-12584 entry notes a local information disclosure in Win32k.sys exploitable via a crafted application to obtain memory contents. Microsoft security update...