CVE-2020-1388

The CVE-2020-1388 entry describes an Elevation of Privilege vulnerability in Windows, triggered by how psmsrv.dll handles objects in memory. The CNVD-2020-43110 record confirms a Windows psmsrv.dll EoP flaw (local attacker could run a crafted app to execute code with elevated privileges). No expl...

CVE-2020-1396

CVE-2020-1396 affects Microsoft Windows ALPC Elevation of Privilege. CNVD-2020-45187 describes a vulnerability where Windows ALPC is not correctly handling calls, allowing an attacker who logs on and runs a crafted application to execute arbitrary code with local system privileges. The connected ...

CVE-2020-16879

CVE-2020-16879 is a Windows Projected Filesystem information-disclosure vulnerability. The issue arises when the Projected Filesystem improperly handles file redirections, enabling a user who is logged on to the system to run a crafted application that could disclose sensitive information and fur...

CVE-2021-26866

CVE-2021-26866 is a Windows Update Service Elevation of Privilege vulnerability with local attack vector. The linked sources identify the affected component as Windows Update Service and classify impact as potential elevation of privileges, with high integrity/availability concerns in some vector...

CVE-2021-26872

CVE-2021-26872 is described as a Windows Event Tracing Elevation of Privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 7.8 (Local, Low attack complexity, Privileges required: Low, No user interaction) with high impact on confidentiality, integrity, and availability. Connect...

CVE-2015-2459

CVE-2015-2459 concerns ATMFD.DLL in the Windows Adobe Type Manager Library across Windows Vista/7/8/10 and server editions. The connected exploitpack entry describes an out-of-bounds read in ATMFD.DLL triggered by processing a malformed OpenType font, specifically a corrupted CFF table Name INDEX...

CVE-2015-6100

Technical details about CVE-2015-6100 are not provided in the connected documents; the initial entry describes a Windows kernel privilege escalation affecting multiple OS versions but lacks concrete technical specifics. Monitor for updates.

CVE-2016-3370

CVE-2016-3370 corresponds to a PDF library information-disclosure vulnerability in Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 versions (1511, 1607). The issue allows remote attackers to obtain sensitive information via a crafted web site or content,...

CVE-2017-0164

CVE-2017-0164 describes a denial-of-service vulnerability in Windows 10 (1607) and Windows Server 2016 Active Directory where an authenticated attacker sending malicious search queries can cause Active Directory to become nonresponsive. The issue affects AD services by faulty handling of search q...

CVE-2017-8478

Technical details about CVE-2017-8478 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8482

Technical details about CVE-2017-8482 are not publicly provided in the connected documents. The initial description gives general info, but no concrete affected products, versions, root cause, impact, or fix is documented here. Monitor for updates.

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2018-8399

CVE-2018-8399 is a Windows Win32k elevation-of-privilege vulnerability. Connected sources confirm the flaw arises from improper handling of objects in memory within the Win32k.sys component, enabling local privilege escalation on Windows 7/10/Server variants. The EUVD and CVE-related records list...

CVE-2019-1323

Technical details about CVE-2019-1323 are not publicly available in the provided documents. No affected products/versions, root cause, impact, or remediation are specified here. Monitor for updates from primary sources.

CVE-2019-1324

CVE-2019-1324 is a Windows TCP/IP stack information-disclosure vulnerability created by improper handling of IPv6 flowlabel data in packets. An attacker could send specially crafted IPv6 packets to a remote Windows host to exfiltrate information, without directly gaining code execution or privile...

CVE-2019-1409

CVE-2019-1409 is an information disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime. The connected data confirms the root cause as improper initialization of objects in memory within RPC, enabling partial confidentiality impact. The CVE affects the Windows RPC component, w...

CVE-2020-0780

CVE-2020-0780 is described as an elevation of privilege affecting the Windows Network List Service, arising from how the service handles objects in memory. The CVE entry identifies a local attack vector with low complexity and no user interaction required; the exploit could grant at least partial...

CVE-2020-0880

CVE-2020-0880 describes an information disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. The vulnerability affects Windows GDI memory handling; exploitation could allow an attacker to obtain information to further compromise the target system...

CVE-2020-0885

CVE-2020-0885 concerns the Windows GDI component, where memory contents can be improperly disclosed (information disclosure vulnerability). The vulnerability arises from how GDI handles objects in memory, enabling potential leakage of memory contents. The public documentation consistently describ...

CVE-2020-1076

Technical details (affected product/versions, root cause, exploitability or fixes) for CVE-2020-1076 are not provided in the connected documents. No public specifics are available here; monitor for updated disclosures from official sources.

CVE-2020-1078

Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.

CVE-2020-1110

CVE-2020-1110 is a Windows Update Stack Elevation of Privilege vulnerability. The issue arises from the Windows Update Stack failing to properly handle objects in memory, enabling local privilege escalation (kernel-level impact per CNVD entries) with high CVSS scores. Affected product scope is Wi...

CVE-2020-1151

Technical details for CVE-2020-1151 are not publicly provided in the supplied documents. No concrete exploit, affected product/version, or remediation information is present. Monitor for updates from official advisories and vendor bulletins.

CVE-2020-1169

CVE-2020-1169 is a Windows Runtime Elevation of Privilege vulnerability. The root cause is the Windows Runtime improperly handling objects in memory, which could allow an attacker to run arbitrary code in an elevated context by executing a specially crafted application. The vulnerability is addre...

CVE-2020-1259

CVE-2020-1259 affects Windows Host Guardian Service. The vulnerability is a security feature bypass caused by improper handling of hashes that are recorded/logged. The provided documents do not specify the affected versions, exact exploit details, impact, or a remediation/patch. Microsoft MS advi...

CVE-2020-17070

The CVE-2020-17070 entry concerns the Windows Update Medic Service Elevation of Privilege vulnerability. The available documents identify a local, low-privilege elevation of privilege in the Windows Update Medic Service, with the NVD metrics showing local access, low attack complexity, and high i...

CVE-2021-26880

Technical details (affected product/component/version/root cause/impact/fix) for CVE-2021-26880 are not provided in the connected documents. The initial description remains high‑level; monitor for updates and new disclosures.

CVE-2021-26889

Technical details about CVE-2021-26889 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.

CVE-2015-2433

CVE-2015-2433 is described as a local kernel ASLR bypass vulnerability in Microsoft Windows (affecting Vista SP2/Server 2008 SP2 and R2, Windows 7 SP1, 8/8.1, Server 2012, RT/RT 8.1, Windows 10). Connected records confirm public exploitation activity and linkage to a separate MS15-080/graphics-fo...

CVE-2015-2514

CVE-2015-2514 pertains to Windows Journal remote code execution via a crafted .jnt file affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The connected records also reference CVE-2015-2513 and CVE-2...

CVE-2015-2553

CVE-2015-2553 affects the Windows kernel’s handling of mountpoint creation for reparse points, enabling local privilege escalation via sandboxed environments on Windows Vista/7/8/8.1/10 and corresponding server editions. Public writeups describe bypasses of the mitigation introduced by MS15-111 (...

CVE-2015-6126

CVE-2015-6126 is a local elevation-of-privilege vulnerability in the Pragmatic General Multicast (PGM) protocol implementation in Windows. The root cause is a race condition that can lead to references to memory that has already been freed (use-after-free), enabling a logged-in attacker to gain p...

CVE-2016-3262

CVE-2016-3262 and CVE-2016-3263 describe a Graphics Device Interface (GDI+/GDI) information-disclosure problem in multiple Windows versions. The description specifies that remote attackers can bypass ASLR through unspecified vectors. Affected products include Windows Vista SP2, Windows Server 200...

CVE-2016-3376

CVE-2016-3376 is a local privilege escalation in the Windows kernel Win32k subsystem affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7, 8.1, Server 2012, Windows RT 8.1, and Windows 10 releases 1511/1607). The flaw involves the kernel-mode drivers mishandling objects i...

CVE-2017-0082

Technical details for CVE-2017-0082 are not publicly provided in the connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates in the EUVD/CIRCL references.

CVE-2017-8485

Technical details about CVE-2017-8485 are not provided in the connected documents. The available materials do not specify affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2017-8554

CVE-2017-8554 corresponds to a Windows kernel local information disclosure affecting Win32k.sys across multiple Windows versions. The CNVD-2017-12584 entry notes a local information disclosure in Win32k.sys exploitable via a crafted application to obtain memory contents. Microsoft security update...

CVE-2017-8709

The CVE-2017-8709 entry concerns a Windows kernel information disclosure vulnerability in which the Windows kernel component improperly handles objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Win...

CVE-2017-8720

CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...

CVE-2019-1423

CVE-2019-1423 describes an elevation of privilege in Windows related to how StartTileData.dll creates files in protected locations. The root cause is improper handling of file creation by StartTileData.dll, enabling local attackers to gain elevated privileges. The CVSS scores in the description i...

CVE-2019-1434

The CVE-2019-1434 entry describes a Windows elevation-of-privilege issue in the Win32k kernel-mode driver caused by improper handling of objects in memory. The vulnerability is local, with a LOW authentication requirement and a HIGH impact on confidentiality, integrity, and availability per CVSS ...

CVE-2020-0728

CNVD-2020-10129 and related OpenVAS entries describe CVE-2020-0728 as an information disclosure vulnerability in Microsoft Windows, specifically involving the Windows Modules Installer Service. The root cause is improper disclosure of file information by the service, enabling an attacker to view ...

CVE-2020-0732

CVE-2020-0732 is an elevation-of-privilege vulnerability affecting Microsoft DirectX, arising from improper handling of objects in memory. The CVE entry and CNVD CNVD-2020-14701 describe a memory-corruption/ misreference issue in DirectX that could enable code execution with kernel privileges if ...

CVE-2020-0752

CVE-2020-0752 is a Windows privilege-escalation vulnerability in the Windows Search Indexer related to how it handles objects in memory. The issue is described as allowing an attacker with local access to potentially execute code with elevated permissions, with the CVSS provided by the primary en...

CVE-2020-0808

CVE-2020-0808 describes an elevation of privilege vulnerability in the way the Provisioning Runtime validates certain file operations. The connected documents reiterate this description but do not specify affected products, versions, root cause details, impact metrics, exploit status, or availabl...

CVE-2020-0898

Technical details for CVE-2020-0898 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1244

Technical details about CVE-2020-1244 are not provided in the supplied documents; no affected products or exploit specifics are disclosed here. Monitor for updates from official advisories.

CVE-2020-1429

CVE-2020-1429 affects Microsoft Windows Error Reporting Manager. According to CNVD-2020-52921, the vulnerability is an elevation of privilege caused by the manager failing to properly handle process crashes, which can be exploited by running a specially crafted application to delete target files ...

CVE-2020-1434

CVE-2020-1434: Windows Sync Host Service Elevation of Privilege. CNVD-2020-52919 confirms an in-memory handling flaw in Windows Sync Host Service, enabling a local attacker to execute code with elevated privileges by running a specially crafted application. No exploit details or patch/remediation...

CVE-2020-17076

CVE-2020-17076 affects Windows using the Update Orchestrator Service. The connected NVD entry confirms an Elevation of Privilege vulnerability in the Update Orchestrator Service, with local attack vector, low privileges required, and high impact on confidentiality, integrity, and availability (CV...