CVE-2017-0185

Technical details for CVE-2017-0185 are not provided in the supplied documents. No concrete product/version/impact information is available here; monitor for updates.

CVE-2017-0219

The CVE concerns Device Guard Code Integrity Policy security feature bypass allowing injection of code into PowerShell on affected Windows versions (Win10 1607, 1511/1607, Windows Server 2016). Root cause described as a security feature bypass in Device Guard; impact includes potential code execu...

CVE-2017-11772

CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...

CVE-2017-8561

CVE-2017-8561 is a Windows kernel elevation-of-privilege vulnerability described as: a local attacker can exploit through improper handling of objects in memory by the Windows kernel, allowing code execution with elevated privileges. Affected software per the initial document includes Windows 8.1...

CVE-2017-8689

Technical details about CVE-2017-8689 (affected product, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates; the available materials confirm a Windows kernel-mode elevation vulnerability but lack concrete specifics.

CVE-2020-0699

CVE-2020-0699 is a Win32k Information Disclosure Vulnerability in the win32k component of Windows kernel. The issue arises when kernel information is inappropriately exposed, enabling an attacker with local access to obtain information from the affected system (information disclosure). Public dat...

CVE-2020-1079

Technical details for CVE-2020-1079 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1156

CVE-2020-1156 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. It affects Windows Runtime components and allows local privilege escalation with partial confidentiality, integrity, and availability impact per CVSS v2/v3 metrics. The provid...

CVE-2020-1402

CVE-2020-1402 is an elevation-of-privilege flaw in Microsoft Windows ActiveX Installer Service. The CNVD-2020-52928 entry confirms the vulnerability stems from improper handling of memory within the ActiveX Installer Service, enabling a local attacker who can execute code on the victim system to ...

CVE-2020-17070

The CVE-2020-17070 entry concerns the Windows Update Medic Service Elevation of Privilege vulnerability. The available documents identify a local, low-privilege elevation of privilege in the Windows Update Medic Service, with the NVD metrics showing local access, low attack complexity, and high i...

CVE-2021-26880

Technical details (affected product/component/version/root cause/impact/fix) for CVE-2021-26880 are not provided in the connected documents. The initial description remains high‑level; monitor for updates and new disclosures.

CVE-2021-26889

Technical details about CVE-2021-26889 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation.

CVE-2015-2472

CVE-2015-2472 is a Remote Desktop Session Host Spoofing vulnerability. RDSH in RDP up to Windows 8.1/Server 2012 and related editions does not properly verify certificates, allowing a MITM attacker to spoof a TLS/SSL session with a crafted certificate that has valid Issuer and Serial Number field...

CVE-2015-2553

CVE-2015-2553 affects the Windows kernel’s handling of mountpoint creation for reparse points, enabling local privilege escalation via sandboxed environments on Windows Vista/7/8/8.1/10 and corresponding server editions. Public writeups describe bypasses of the mitigation introduced by MS15-111 (...

CVE-2015-6101

CVE-2015-6101 is a Windows kernel local privilege escalation affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT/8.1, and Windows 10 (build 1511). The vulnerability allows a local user to gain privileges via a crafted ...

CVE-2016-0006

CVE-2016-0006 is a local privilege-escalation vulnerability in the Windows sandbox implementation where reparse points are mishandled. A crafted application can escalate privileges on affected systems by exploiting this flaw. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2...

CVE-2016-0101

CVE-2016-0101 corresponds to a Windows Media Parsing Remote Code Execution vulnerability affecting multiple Windows platforms (Windows 7 SP1, 8.1, Server 2008 R2/2012, RT 8.1, Windows 10). The root cause is described as improper handling of media content in the Windows Media/Media library, enabli...

CVE-2016-0196

CVE-2016-0196 concerns a privilege-escalation in Windows kernel-mode drivers. The initial description indicates that local users could gain privileges via a crafted application, affecting multiple Windows platforms including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8....

CVE-2016-3343

CVE-2016-3343 affects the Common Log File System (CLFS) driver in multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 variants, Server 2016). It enables local users to gain privileges via a crafted application, i.e., a local privilege escalation vulnerabi...

CVE-2017-0082

Technical details for CVE-2017-0082 are not publicly provided in the connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates in the EUVD/CIRCL references.

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2019-0547

CVE-2019-0547 describes a memory corruption vulnerability in the Windows DHCP client triggered by specially crafted DHCP responses, enabling remote code execution on affected Windows builds. The core issue is improper handling of DHCP responses, allowing an attacker to run arbitrary code on the t...

CVE-2019-1324

CVE-2019-1324 is a Windows TCP/IP stack information-disclosure vulnerability created by improper handling of IPv6 flowlabel data in packets. An attacker could send specially crafted IPv6 packets to a remote Windows host to exfiltrate information, without directly gaining code execution or privile...

CVE-2019-1420

Technical details for CVE-2019-1420 are not publicly provided in the connected documents. Monitor for updates from official sources; no explicit exploit/victim/product/version data is available here.

CVE-2019-1423

CVE-2019-1423 describes an elevation of privilege in Windows related to how StartTileData.dll creates files in protected locations. The root cause is improper handling of file creation by StartTileData.dll, enabling local attackers to gain elevated privileges. The CVSS scores in the description i...

CVE-2020-0723

Technical details for CVE-2020-0723 are not publicly provided in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2020-0749

CVE-2020-0749 describes an elevation of privilege affecting Microsoft Windows and Windows Server, caused by how the Connected Devices Platform Service handles objects in memory. CNVD entries for 2020-13560/13563/13562/13564 confirm Windows/Server as affected products and identify the root cause a...

CVE-2020-0867

CVE-2020-0867 is an elevation-of-privilege vulnerability in the Windows Update Orchestrator Service caused by improper handling of file operations. A local attacker could potentially exploit this to gain higher privileges within the system. The vulnerability is linked to CVE-2020-0867 and is dist...

CVE-2020-0870

CVE-2020-0870 is a local, elevation-of-privilege flaw in the Windows Shell infrastructure component caused by improper handling of in‑memory objects. An attacker who can log on and run a crafted application could execute code with elevated privileges. The patch fixes how the Shell infrastructure ...

CVE-2020-0918

CVE-2020-0918 corresponds to a Windows Hyper-V Elevation of Privilege vulnerability. Affected component: Hyper-V on Windows Server hosts. Root cause: vulnerability exists when the Hyper-V memory-handling of objects is faulty, allowing an attacker to elevate privileges on the host. Impact: high fo...

CVE-2020-1144

Technical details for CVE-2020-1144 are not publicly available in the provided documents; monitor for updates from trusted sources.

CVE-2020-1347

CVE-2020-1347 is a Windows Storage Services Elevation of Privilege vulnerability caused by improper handling of file operations, enabling local privilege escalation on affected Windows systems. The entry lists a MEDIUM base CVSS v2.0 score (4.6) and HIGH base CVSS v3.1 score (7.8) with local acce...

CVE-2020-1367

Technical details for CVE-2020-1367 are not publicly provided in the supplied documents; monitor for updates from official advisories and CVE databases.

CVE-2020-1391

CVE-2020-1391 is a Windows information-disclosure issue in the Windows Agent Activation Runtime (AarSvc). The vulnerability arises because AarSvc fails to properly handle objects in memory, enabling an attacker who can log on to run a crafted app that could disclose information to further comprom...

CVE-2020-1434

CVE-2020-1434: Windows Sync Host Service Elevation of Privilege. CNVD-2020-52919 confirms an in-memory handling flaw in Windows Sync Host Service, enabling a local attacker to execute code with elevated privileges by running a specially crafted application. No exploit details or patch/remediation...

CVE-2015-6095

CVE-2015-6095 is a Windows Kerberos security feature bypass vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, 7 SP1, 8, 8.1, 2012/2012 R2, RT, 10 1511). The issue arises from mishandling password changes, which can let physically proximate attackers bypass authenticat...

CVE-2016-3230

CVE-2016-3230 is a local DoS vulnerability in the Windows Search component that affects Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (1511/Gold). The root cause is the Windows Search component failing to handle certain objects in memor...

CVE-2016-3333

Technical details for CVE-2016-3333 are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-11782

CVE-2017-11782 is a Windows SMB Elevation of Privilege vulnerability affecting the SMB server configuration on Windows 10 version 1607 and Windows Server 2016. The underlying issue is the default SMB Server configuration that allows anonymous access to certain named pipes; an unauthenticated atta...

CVE-2017-8484

Technical details about CVE-2017-8484 are not publicly provided in the connected documents. No specific affected product/version, root cause, or remediation are present here. Monitor for updates from official advisories.

CVE-2017-8597

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8597, an information disclosure vulnerability caused by how Edge handles objects in memory. Exploitation could let an attacker obtain information to further compromise the system. The provided documents do not include specific expl...

CVE-2018-8329

CVE-2018-8329 is an Elevation of Privilege vulnerability in Windows Subsystem for Linux (WSL). The issue arises from improper handling of memory objects, allowing an attacker who can log on to a system to execute arbitrary code with elevated privileges and potentially take control of the affected...

CVE-2019-1323

Technical details about CVE-2019-1323 are not publicly available in the provided documents. No affected products/versions, root cause, impact, or remediation are specified here. Monitor for updates from primary sources.

CVE-2020-1088

Technical details for CVE-2020-1088 are not publicly provided in the supplied documents. No affected products, versions, exploitation status, or remediation details are present. Monitor for updates from official sources.

CVE-2015-2459

CVE-2015-2459 concerns ATMFD.DLL in the Windows Adobe Type Manager Library across Windows Vista/7/8/10 and server editions. The connected exploitpack entry describes an out-of-bounds read in ATMFD.DLL triggered by processing a malformed OpenType font, specifically a corrupted CFF table Name INDEX...

CVE-2015-2525

CVE-2015-2525 affects Windows Task Scheduler across multiple OS versions (Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012/2012 R2, RT/10). The vulnerability allows local privilege escalation by bypassing filesystem restrictions during task deletion via Task Scheduler (schedsvc.dll) wi...

CVE-2016-0090

Summary: CVE-2016-0090 is a Windows Hyper-V Information Disclosure vulnerability. It affects Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10 where a guest OS user can cause the Hyper-V host to disclose memory contents via a crafted application. Root cause: inadequate validation of ...

CVE-2016-0197

CVE-2016-0197 is a local elevation-of-privilege vulnerability in the DirectX Graphics kernel subsystem (dxgkrnl.sys) affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012, Windows RT 8.1, and Windows 10 (including 1511). Root cause: improper handling of obje...

CVE-2016-7211

Technical details for CVE-2016-7211 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0098

CVE-2017-0098 concerns a Hyper-V Denial of Service vulnerability in Microsoft Windows: affected are Windows 10 Gold, 1511, 1607 and Windows Server 2016, where guest OS users running as VMs can cause a host DoS via a crafted application. Connected documents corroborate the vulnerability’s existenc...