CVE-2021-27088

CVE-2021-27088 refers to Windows Event Tracing Elevation of Privilege. The NVD entry provides CVSS details (CVSS 3.1: LOCAL, LOW ATTACK COMPLEXITY, PR:L, NONE user interaction; impacts HIGH confidentiality, integrity, and availability) and labels it as a local elevation of privilege vulnerability...

CVE-2015-2472

CVE-2015-2472 is a Remote Desktop Session Host Spoofing vulnerability. RDSH in RDP up to Windows 8.1/Server 2012 and related editions does not properly verify certificates, allowing a MITM attacker to spoof a TLS/SSL session with a crafted certificate that has valid Issuer and Serial Number field...

CVE-2016-0142

CVE-2016-0142 is the Microsoft Video Control remote code execution vulnerability documented by NVD. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The issue arises from improper handling of objects in memory within the Video Cont...

CVE-2016-3215

CVE-2016-3215 is the Windows PDF Information Disclosure vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1511, and Edge. It allows remote attackers to read sensitive data from process memory via a crafted PDF. Connected MSKBs confirm mitigations: MS16-068/KB3163017 u...

CVE-2016-3334

Technical details for CVE-2016-3334 are not publicly available in the provided documents; monitor for updates.

CVE-2016-3374

The CVE-2016-3374 entry describes an information-disclosure vulnerability in the PDF library used by Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The underlying issue allows remote attackers to obtain sensitive information vi...

CVE-2017-0026

The CVE-2017-0026 entry describes a local elevation of privilege in Microsoft Windows 10 (Gold, 1511, 1607) and Windows Server 2016 caused by kernel-mode drivers in Win32k. An attacker with local access could gain higher privileges via a crafted application. The description does not specify exact...

CVE-2017-0219

The CVE concerns Device Guard Code Integrity Policy security feature bypass allowing injection of code into PowerShell on affected Windows versions (Win10 1607, 1511/1607, Windows Server 2016). Root cause described as a security feature bypass in Device Guard; impact includes potential code execu...

CVE-2017-8467

CVE-2017-8467 is a Windows graphics elevation-of-privilege vulnerability in the graphics/Win32k component. The root cause is theGraphics subsystem failing to properly handle objects in memory, enabling a local attacker to gain higher privileges. Affected platforms include Windows 7 SP1, Windows S...

CVE-2017-8746

The CVE-2017-8746 issue affects Microsoft Windows Device Guard Code Integrity on Windows 10 (1607, 1703) and Windows Server 2016. The root cause is how PowerShell exposes functions and user-supplied code, enabling a security feature bypass where a local attacker could inject malicious code into a...

CVE-2018-8329

CVE-2018-8329 is an Elevation of Privilege vulnerability in Windows Subsystem for Linux (WSL). The issue arises from improper handling of memory objects, allowing an attacker who can log on to a system to execute arbitrary code with elevated privileges and potentially take control of the affected...

CVE-2020-0805

CVE-2020-0805 is a security feature bypass in Windows Projected Filesystem. Root cause: improper handling of file redirections, enabling deletion of a targeted file by an authenticated user after logging in and running a crafted app. Impact: local access with ability to delete files they normally...

CVE-2020-0944

CVE-2020-0944 is an Elevation of Privilege vulnerability in the Connected User Experiences and Telemetry Service, caused by improper file-handling. The issue enables local attackers with low privileges to escalate, with high impact to confidentiality, integrity, and availability (per CVSS 3.1 met...

CVE-2020-1121

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1375

CVE-2020-1375 is an elevation of privilege vulnerability in Windows, caused by improper handling of COM object creation in the Windows COM Server. The affected component is described as Windows COM Server, with exploitation requiring local access and the ability to run a specially crafted applica...

CVE-2020-1391

CVE-2020-1391 is a Windows information-disclosure issue in the Windows Agent Activation Runtime (AarSvc). The vulnerability arises because AarSvc fails to properly handle objects in memory, enabling an attacker who can log on to run a crafted app that could disclose information to further comprom...

CVE-2020-1402

CVE-2020-1402 is an elevation-of-privilege flaw in Microsoft Windows ActiveX Installer Service. The CNVD-2020-52928 entry confirms the vulnerability stems from improper handling of memory within the ActiveX Installer Service, enabling a local attacker who can execute code on the victim system to ...

CVE-2020-16854

Technical specifics for CVE-2020-16854 (affected product, vulnerable component, exploit access, or remediation) are not provided in the connected documents. The initial description offers high-level impact, but no concrete technical details are present for public disclosure. Monitor for updates.

CVE-2015-2525

CVE-2015-2525 affects Windows Task Scheduler across multiple OS versions (Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012/2012 R2, RT/10). The vulnerability allows local privilege escalation by bypassing filesystem restrictions during task deletion via Task Scheduler (schedsvc.dll) wi...

CVE-2015-6173

CVE-2015-6173 targets the Windows kernel memory elevation vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8/8.1, 2012 Gold/R2, RT/8.1, 10 RT1/1511). It enables local privilege escalation via a crafted application, with exploitation publicized ( exploit-db entries...

CVE-2016-0101

CVE-2016-0101 corresponds to a Windows Media Parsing Remote Code Execution vulnerability affecting multiple Windows platforms (Windows 7 SP1, 8.1, Server 2008 R2/2012, RT 8.1, Windows 10). The root cause is described as improper handling of media content in the Windows Media/Media library, enabli...

CVE-2016-3230

CVE-2016-3230 is a local DoS vulnerability in the Windows Search component that affects Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (1511/Gold). The root cause is the Windows Search component failing to handle certain objects in memor...

CVE-2016-3341

CVE-2016-3341 affects Windows kernel‑mode drivers in Transaction Manager (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607) and is described as a local elevation of privilege via a crafted application. The root cause involves improper handling of memory objects in the Ker...

CVE-2016-3343

CVE-2016-3343 affects the Common Log File System (CLFS) driver in multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 variants, Server 2016). It enables local users to gain privileges via a crafted application, i.e., a local privilege escalation vulnerabi...

CVE-2017-0095

Technical details about CVE-2017-0095 are not publicly provided in the connected documents. No concrete product/version/impact data is available here; monitor for updates and additional sources.

CVE-2017-0185

Technical details for CVE-2017-0185 are not provided in the supplied documents. No concrete product/version/impact information is available here; monitor for updates.

CVE-2017-11772

CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...

CVE-2017-8471

Technical details for CVE-2017-8471 are not provided in the supplied documents. Connected sources reference Windows updates and malware notes but do not describe affected components, root cause, or remediation for this CVE.

CVE-2017-8532

CVE-2017-8532 concerns a memory disclosure in Windows graphics Uniscribe across multiple Windows releases (Windows 7/8.1/10 and corresponding Server variants). The vulnerability affects the Microsoft Windows Graphics component and Uniscribe; the root cause is improper memory disclosure within gra...

CVE-2017-8597

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8597, an information disclosure vulnerability caused by how Edge handles objects in memory. Exploitation could let an attacker obtain information to further compromise the system. The provided documents do not include specific expl...

CVE-2018-8638

CVE-2018-8638 — DirectX Information Disclosure Vulnerability affects Windows 10 and Windows Server 2019. The vulnerability arises from DirectX improperly handling objects in memory, enabling an attacker to obtain information to further compromise the user’s system. An authenticated attacker could...

CVE-2019-1381

The CVE-2019-1381 entry describes an information-disclosure flaw in the Windows Servicing Stack, where unprivileged file locations can be accessed. Affected component: Windows Servicing Stack. Root cause: information disclosure due to improper access control to certain file locations. Impact: par...

CVE-2020-0918

CVE-2020-0918 corresponds to a Windows Hyper-V Elevation of Privilege vulnerability. Affected component: Hyper-V on Windows Server hosts. Root cause: vulnerability exists when the Hyper-V memory-handling of objects is faulty, allowing an attacker to elevate privileges on the host. Impact: high fo...

CVE-2020-1079

Technical details for CVE-2020-1079 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1156

CVE-2020-1156 is a Windows Runtime elevation of privilege vulnerability caused by improper handling of objects in memory. It affects Windows Runtime components and allows local privilege escalation with partial confidentiality, integrity, and availability impact per CVSS v2/v3 metrics. The provid...

CVE-2020-1367

Technical details for CVE-2020-1367 are not publicly provided in the supplied documents; monitor for updates from official advisories and CVE databases.

CVE-2015-2465

CVE-2015-2465 affects the Windows shell and related components (Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012/2012 R2, Windows RT/RT 8.1, and Windows 10). The vulnerability arises from not properly constraining impersonation levels, enabling loca...

CVE-2015-6095

CVE-2015-6095 is a Windows Kerberos security feature bypass vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, 7 SP1, 8, 8.1, 2012/2012 R2, RT, 10 1511). The issue arises from mishandling password changes, which can let physically proximate attackers bypass authenticat...

CVE-2015-6101

CVE-2015-6101 is a Windows kernel local privilege escalation affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT/8.1, and Windows 10 (build 1511). The vulnerability allows a local user to gain privileges via a crafted ...

CVE-2016-0006

CVE-2016-0006 is a local privilege-escalation vulnerability in the Windows sandbox implementation where reparse points are mishandled. A crafted application can escalate privileges on affected systems by exploiting this flaw. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2...

CVE-2016-0018

CVE-2016-0018 affects Windows 7 SP1, Windows 8/8.1, Windows Server 2012 R2, and Windows 10 (RSA/1511 scope noted) where DLL loading is mishandled, enabling local privilege escalation via a crafted application. Connected advisories (MS16-007) indicate multiple DLL-loading and related RPC/DirectSho...

CVE-2016-0197

CVE-2016-0197 is a local elevation-of-privilege vulnerability in the DirectX Graphics kernel subsystem (dxgkrnl.sys) affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012, Windows RT 8.1, and Windows 10 (including 1511). Root cause: improper handling of obje...

CVE-2016-3333

Technical details for CVE-2016-3333 are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-0098

CVE-2017-0098 concerns a Hyper-V Denial of Service vulnerability in Microsoft Windows: affected are Windows 10 Gold, 1511, 1607 and Windows Server 2016, where guest OS users running as VMs can cause a host DoS via a crafted application. Connected documents corroborate the vulnerability’s existenc...

CVE-2017-8484

Technical details about CVE-2017-8484 are not publicly provided in the connected documents. No specific affected product/version, root cause, or remediation are present here. Monitor for updates from official advisories.

CVE-2017-8648

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8648, an information-disclosure vulnerability arising from how Edge handles objects in memory. An attacker could obtain information that may facilitate further compromise of the user’s system. The connected update (KB4038781) is ci...

CVE-2017-8683

CVE-2017-8683 is a Windows graphics remote-code-execution vulnerability tied to Win32k Graphics via specially crafted embedded fonts. Affected products include Windows client/server releases from Windows 7 SP1 to Windows 10 1703 and Windows Server 2008 SP2/R2 SP1/2012, plus Office Word Viewer+Off...

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2019-0547

CVE-2019-0547 describes a memory corruption vulnerability in the Windows DHCP client triggered by specially crafted DHCP responses, enabling remote code execution on affected Windows builds. The core issue is improper handling of DHCP responses, allowing an attacker to run arbitrary code on the t...

CVE-2020-0727

CVE-2020-0727 describes an elevation-of-privilege vulnerability in Windows’ Connected User Experiences and Telemetry Service via improper file operations. The provided connected documents (EUVD-2020-2216, CNVD-2020-14328, OSV-CVE entries, NVD) reiterate the vulnerability title and impact but do n...