CVE-2015-6101

CVE-2015-6101 is a Windows kernel local privilege escalation affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT/8.1, and Windows 10 (build 1511). The vulnerability allows a local user to gain privileges via a crafted ...

CVE-2015-6173

CVE-2015-6173 targets the Windows kernel memory elevation vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8/8.1, 2012 Gold/R2, RT/8.1, 10 RT1/1511). It enables local privilege escalation via a crafted application, with exploitation publicized ( exploit-db entries...

CVE-2016-0038

CVE-2016-0038 affects Windows Journal across multiple Windows releases (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2012 R2, Windows 10/1511). The vulnerability stems from improper handling/parsing of Journal files, enabling remote code execution when a user opens a crafted...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-3334

Technical details for CVE-2016-3334 are not publicly available in the provided documents; monitor for updates.

CVE-2017-0098

CVE-2017-0098 concerns a Hyper-V Denial of Service vulnerability in Microsoft Windows: affected are Windows 10 Gold, 1511, 1607 and Windows Server 2016, where guest OS users running as VMs can cause a host DoS via a crafted application. Connected documents corroborate the vulnerability’s existenc...

CVE-2017-11782

CVE-2017-11782 is a Windows SMB Elevation of Privilege vulnerability affecting the SMB server configuration on Windows 10 version 1607 and Windows Server 2016. The underlying issue is the default SMB Server configuration that allows anonymous access to certain named pipes; an unauthenticated atta...

CVE-2017-8532

CVE-2017-8532 concerns a memory disclosure in Windows graphics Uniscribe across multiple Windows releases (Windows 7/8.1/10 and corresponding Server variants). The vulnerability affects the Microsoft Windows Graphics component and Uniscribe; the root cause is improper memory disclosure within gra...

CVE-2017-8597

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8597, an information disclosure vulnerability caused by how Edge handles objects in memory. Exploitation could let an attacker obtain information to further compromise the system. The provided documents do not include specific expl...

CVE-2017-8683

CVE-2017-8683 is a Windows graphics remote-code-execution vulnerability tied to Win32k Graphics via specially crafted embedded fonts. Affected products include Windows client/server releases from Windows 7 SP1 to Windows 10 1703 and Windows Server 2008 SP2/R2 SP1/2012, plus Office Word Viewer+Off...

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2019-0547

CVE-2019-0547 describes a memory corruption vulnerability in the Windows DHCP client triggered by specially crafted DHCP responses, enabling remote code execution on affected Windows builds. The core issue is improper handling of DHCP responses, allowing an attacker to run arbitrary code on the t...

CVE-2020-0874

CVE-2020-0874 affects the Windows Graphics Device Interface (GDI); the issue is an information-disclosure vulnerability caused by improper handling of memory objects in GDI. Exploitation could allow an attacker to retrieve memory contents from the target system. The connected documents corroborat...

CVE-2020-1079

Technical details for CVE-2020-1079 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-1088

Technical details for CVE-2020-1088 are not publicly provided in the supplied documents. No affected products, versions, exploitation status, or remediation details are present. Monitor for updates from official sources.

CVE-2020-1120

CVE-2020-1120 is a DoS vulnerability in Windows’ Connected User Experiences and Telemetry Service caused by improper handling of file operations. Connected and published sources (NVD entry and KB4557957 reference) confirm this CVE alongside CVE-2020-1244 and note it as part of a June 2020 Windows...

CVE-2020-1137

CVE-2020-1137 is a Windows Push Notification Service Elevation of Privilege vulnerability. The issue stems from how the service handles memory objects, allowing a locally logged-on attacker to run a specially crafted application with elevated privileges, potentially installing programs or alterin...

CVE-2020-1423

CVE-2020-1423 relates to an elevation of privilege in Windows Subsystem for Linux (WSL) where files are handled insecurely. The root cause is the way WSL handles file operations, enabling an attacker who can run a crafted program on a victim system to execute code with elevated privileges. Micros...

CVE-2020-1590

Technical details about CVE-2020-1590 are not provided in the connected documents. Public information here notes an elevation of privilege via the Connected User Experiences and Telemetry Service, but no concrete affected versions, root cause, or fixes are disclosed. Monitor for updates.

CVE-2015-2528

The CVE-2015-2528 issue affects Windows 8, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10, where the local threat can gain privileges by abusing improper constraints on impersonation levels in Task Management. The root cause is not clearly constrained impersonation ...

CVE-2016-0095

A kernel-mode driver vulnerability exists in multiple versions of Microsoft Windows , including Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 Gold and 1511, and various Windows Server editions. The flaw, known as the Win32k Elevation of Privilege Vulnerability , stems from a failure t...

CVE-2016-0135

CVE-2016-0135 is a local elevation-of-privilege vulnerability in the Windows Secondary Logon Service, affecting Windows 10 Gold and 1511. The issue stems from the service failing to properly manage in-memory requests, enabling a crafted local attacker to gain administrator-level privileges. Micro...

CVE-2016-3306

CVE-2016-3306 concerns the Windows kernel mishandling of session objects, enabling local privilege escalation.affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 RTMs 1507/1511/1607. Descr...

CVE-2016-3333

Technical details for CVE-2016-3333 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-7222

CVE-2016-7222 affects Task Scheduler in Windows 10 (Gold/1511/1607) and Windows Server 2016. A locally authenticated attacker can abuse Task Scheduler by creating a task that uses a specially crafted UNC path to execute code with elevated privileges. The root cause is how Task Scheduler handles U...

CVE-2016-7225

CVE-2016-7225 affects Windows 10 (Gold, 1511, 1607) and Windows Server 2016, where the Virtual Hard Disk (VHD) driver fails to properly restrict access to certain files. The root cause is improper handling of file access by the VHD kernel driver, enabling a local attacker to elevate privileges vi...

CVE-2017-0051

CVE-2017-0051 affects Microsoft Windows 10 Version 1607 and Windows Server 2016. The description indicates a remote-denial-of-service via a crafted Office document, referred to as the Microsoft Hyper-V Network Switch Denial of Service Vulnerability. The vulnerability is described as causing an ap...

CVE-2017-0216

CVE-2017-0216 affects Microsoft Windows 10 (versions 1511, 1607) and Windows Server 2016, enabling a security feature bypass in Device Guard Code Integrity Policy that could allow an attacker to inject malicious code into a Windows PowerShell session. The underlying issue is a bypass of Code Inte...

CVE-2017-11899

CVE-2017-11899 affects Device Guard in Windows 10 (1511, 1607, 1703, 1709) and Windows Server variants; vulnerability is a security feature bypass caused by how untrusted files are handled. The CNVD entry (CNVD-2018-00778) confirms a Device Guard security bypass due to untrusted file validation. ...

CVE-2017-8484

Technical details about CVE-2017-8484 are not publicly provided in the connected documents. No specific affected product/version, root cause, or remediation are present here. Monitor for updates from official advisories.

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8648

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8648, an information-disclosure vulnerability arising from how Edge handles objects in memory. An attacker could obtain information that may facilitate further compromise of the user’s system. The connected update (KB4038781) is ci...

CVE-2017-8716

CVE-2017-8716 is a security feature bypass affecting Windows 10 Version 1703 (Creators Update). The vulnerability arises from how Windows Control Flow Guard (CFG) handles memory-resident objects, allowing a specially crafted application to bypass CFG and execute code under the context of the curr...

CVE-2019-1418

The CVE-2019-1418 entry describes an information-disclosure vulnerability in Windows where the Windows Modules Installer Service improperly discloses file information. The affected component is the Windows Modules Installer Service; the underlying issue is an information disclosure vulnerability ...

CVE-2020-0716

Technical details for CVE-2020-0716 are not publicly provided in the connected documents. Monitor for updates; current sources do not specify affected products, root cause, impact, or remediation in this corpus.

CVE-2020-0870

CVE-2020-0870 is a local, elevation-of-privilege flaw in the Windows Shell infrastructure component caused by improper handling of in‑memory objects. An attacker who can log on and run a crafted application could execute code with elevated privileges. The patch fixes how the Shell infrastructure ...

CVE-2020-1111

Technical details about CVE-2020-1111 are not publicly provided in the connected documents. Monitor for updates from the linked sources (EUVD entries and MSRC/MSNVD references) for affected products, root cause, and remediation.

CVE-2020-1144

Technical details for CVE-2020-1144 are not publicly available in the provided documents; monitor for updates from trusted sources.

CVE-2020-1395

CVE-2020-1395 is an elevation-of-privilege flaw in the Windows Speech Brokered API related to in-memory handling of objects. The issue is local, with low attack complexity and no user interaction required per the NVD metrics, yielding a CVSS v3.1 base score of 7.8 (High) and impact on confidentia...

CVE-2023-44216

The CVE-2023-44216 entry concerns PVRIC (PowerVR Image Compression) on Imagination 2018+ GPU devices. The vulnerability stems from software-transparent compression that enables cross-origin pixel-stealing attacks against SVG Filter functions like feTurbulence and feBlend (GPU.zip issue). Affected...

CVE-2016-0014

CVE-2016-0014 is a DLL-loading Elevation of Privilege vulnerability affecting multiple Windows versions (Vista through Windows 10 thresholds) where improper DLL loading allows a local attacker to gain complete control via a crafted application. Root cause: mishandling of DLL loading. Affected com...

CVE-2016-0098

CVE-2016-0098 is a remote-code-execution flaw in Microsoft Windows media handling (Windows Media parsing) affecting Windows 7 SP1, Windows 8.1, Windows Server 2008 R2 SP1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10. An attacker can trigger arbitrary code execution by convincing a...

CVE-2016-3356

CVE-2016-3356 affects Microsoft Windows 10 (Creator/1607 era) where the Graphics Device Interface (GDI) mishandles memory objects, allowing remote code execution via a crafted document or web content. The root cause involves improper handling of memory objects in GDI, enabling an attacker to run ...

CVE-2017-0191

CVE-2017-0191 affects multiple Windows platforms (Windows 7, 8.1, 10 and Windows Server 2008 R2/2012/2012 R2/2016) with a denial-of-service condition caused by how memory objects are handled. The vulnerability could allow an attacker to cause a target system to stop responding. The provided sourc...

CVE-2017-0215

CVE-2017-0215 affects Windows 10 version 1607 and Windows Server 2016, describing a security feature bypass in Device Guard Code Integrity Policy that could allow injection of code into a PowerShell session. Public exploitation exists per related advisories. The issue is addressed in June 2017 se...

CVE-2017-8688

CVE-2017-8688 is a Windows GDI+ information-disclosure issue that leaks kernel-memory addresses through GDI+ memory handling. Affected products include Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, and Windows 10 variants up to 1703/Server 2016. Connected analysis documents reveal related kernel me...

CVE-2018-8437

CVE-2018-8437 describes a denial-of-service against the Microsoft Hyper-V Network Switch when input from a privileged user on a guest OS is not properly validated. Affected: Windows 10 and Windows 10 Servers. Cause: input validation failure in the Hyper-V Network Switch on the host. Impact: avail...

CVE-2018-8445

Technical details for CVE-2018-8445 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0750

CVE-2020-0750 involves an elevation of privileges in Microsoft Windows/Windows Server related to the Connected Devices Platform Service . The root cause, as described in CNVD entries, is a flaw in how the service handles objects in memory, enabling an attacker to execute code with elevated privil...

CVE-2020-0868

CVE-2020-0868 is a local elevation-of-privilege vulnerability in the Windows Update Orchestrator Service caused by improper file operations. The affected component is the Windows Update Orchestrator Service; the root cause is mishandling of file operations. According to sources, the CVE has a hig...