CVE-2017-8689

Technical details about CVE-2017-8689 (affected product, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates; the available materials confirm a Windows kernel-mode elevation vulnerability but lack concrete specifics.

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2020-0727

CVE-2020-0727 describes an elevation-of-privilege vulnerability in Windows’ Connected User Experiences and Telemetry Service via improper file operations. The provided connected documents (EUVD-2020-2216, CNVD-2020-14328, OSV-CVE entries, NVD) reiterate the vulnerability title and impact but do n...

CVE-2020-0749

CVE-2020-0749 describes an elevation of privilege affecting Microsoft Windows and Windows Server, caused by how the Connected Devices Platform Service handles objects in memory. CNVD entries for 2020-13560/13563/13562/13564 confirm Windows/Server as affected products and identify the root cause a...

CVE-2020-0867

CVE-2020-0867 is an elevation-of-privilege vulnerability in the Windows Update Orchestrator Service caused by improper handling of file operations. A local attacker could potentially exploit this to gain higher privileges within the system. The vulnerability is linked to CVE-2020-0867 and is dist...

CVE-2020-0870

CVE-2020-0870 is a local, elevation-of-privilege flaw in the Windows Shell infrastructure component caused by improper handling of in‑memory objects. An attacker who can log on and run a crafted application could execute code with elevated privileges. The patch fixes how the Shell infrastructure ...

CVE-2020-0874

CVE-2020-0874 affects the Windows Graphics Device Interface (GDI); the issue is an information-disclosure vulnerability caused by improper handling of memory objects in GDI. Exploitation could allow an attacker to retrieve memory contents from the target system. The connected documents corroborat...

CVE-2020-1088

Technical details for CVE-2020-1088 are not publicly provided in the supplied documents. No affected products, versions, exploitation status, or remediation details are present. Monitor for updates from official sources.

CVE-2020-1090

Technical details for CVE-2020-1090 are not publicly available in the provided documents. Monitor for updates from official advisories."

CVE-2020-1111

Technical details about CVE-2020-1111 are not publicly provided in the connected documents. Monitor for updates from the linked sources (EUVD entries and MSRC/MSNVD references) for affected products, root cause, and remediation.

CVE-2020-1144

Technical details for CVE-2020-1144 are not publicly available in the provided documents; monitor for updates from trusted sources.

CVE-2020-1347

CVE-2020-1347 is a Windows Storage Services Elevation of Privilege vulnerability caused by improper handling of file operations, enabling local privilege escalation on affected Windows systems. The entry lists a MEDIUM base CVSS v2.0 score (4.6) and HIGH base CVSS v3.1 score (7.8) with local acce...

CVE-2020-1405

CVE-2020-1405 affects Windows Mobile Device Management Diagnostics. The vulnerability is an elevation of privilege caused by improper handling of junctions in MDM Diagnostics, enabling local attackers to elevate privileges. The description confirms it is distinct from CVE-2020-1372. Public detail...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-7225

CVE-2016-7225 affects Windows 10 (Gold, 1511, 1607) and Windows Server 2016, where the Virtual Hard Disk (VHD) driver fails to properly restrict access to certain files. The root cause is improper handling of file access by the VHD kernel driver, enabling a local attacker to elevate privileges vi...

CVE-2017-0051

CVE-2017-0051 affects Microsoft Windows 10 Version 1607 and Windows Server 2016. The description indicates a remote-denial-of-service via a crafted Office document, referred to as the Microsoft Hyper-V Network Switch Denial of Service Vulnerability. The vulnerability is described as causing an ap...

CVE-2017-0216

CVE-2017-0216 affects Microsoft Windows 10 (versions 1511, 1607) and Windows Server 2016, enabling a security feature bypass in Device Guard Code Integrity Policy that could allow an attacker to inject malicious code into a Windows PowerShell session. The underlying issue is a bypass of Code Inte...

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2018-8437

CVE-2018-8437 describes a denial-of-service against the Microsoft Hyper-V Network Switch when input from a privileged user on a guest OS is not properly validated. Affected: Windows 10 and Windows 10 Servers. Cause: input validation failure in the Hyper-V Network Switch on the host. Impact: avail...

CVE-2018-8445

Technical details for CVE-2018-8445 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0716

Technical details for CVE-2020-0716 are not publicly provided in the connected documents. Monitor for updates; current sources do not specify affected products, root cause, impact, or remediation in this corpus.

CVE-2020-0750

CVE-2020-0750 involves an elevation of privileges in Microsoft Windows/Windows Server related to the Connected Devices Platform Service . The root cause, as described in CNVD entries, is a flaw in how the service handles objects in memory, enabling an attacker to execute code with elevated privil...

CVE-2020-0868

CVE-2020-0868 is a local elevation-of-privilege vulnerability in the Windows Update Orchestrator Service caused by improper file operations. The affected component is the Windows Update Orchestrator Service; the root cause is mishandling of file operations. According to sources, the CVE has a hig...

CVE-2020-1120

CVE-2020-1120 is a DoS vulnerability in Windows’ Connected User Experiences and Telemetry Service caused by improper handling of file operations. Connected and published sources (NVD entry and KB4557957 reference) confirm this CVE alongside CVE-2020-1244 and note it as part of a June 2020 Windows...

CVE-2020-1137

CVE-2020-1137 is a Windows Push Notification Service Elevation of Privilege vulnerability. The issue stems from how the service handles memory objects, allowing a locally logged-on attacker to run a specially crafted application with elevated privileges, potentially installing programs or alterin...

CVE-2020-1590

Technical details about CVE-2020-1590 are not provided in the connected documents. Public information here notes an elevation of privilege via the Connected User Experiences and Telemetry Service, but no concrete affected versions, root cause, or fixes are disclosed. Monitor for updates.

CVE-2021-26892

Technical details about CVE-2021-26892 (affected product, root cause, impact, fixes) are not provided in the connected documents; no public details are included here. Monitor for updates.

CVE-2015-2516

CVE-2015-2516 affects Windows Journal across multiple Windows client/server editions (e.g., Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 variants). The issue is a denial-of-service via a specially crafted Journal file (.jnt), caused by improper handling that c...

CVE-2015-2534

CVE-2015-2534 affects Windows Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10. The issue is improper processing of ACL settings in Hyper-V, enabling a local attacker to bypass network-traffic restrictions via a crafted application (security feature bypass). Public advisories and up...

CVE-2016-0098

CVE-2016-0098 is a remote-code-execution flaw in Microsoft Windows media handling (Windows Media parsing) affecting Windows 7 SP1, Windows 8.1, Windows Server 2008 R2 SP1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10. An attacker can trigger arbitrary code execution by convincing a...

CVE-2016-0135

CVE-2016-0135 is a local elevation-of-privilege vulnerability in the Windows Secondary Logon Service, affecting Windows 10 Gold and 1511. The issue stems from the service failing to properly manage in-memory requests, enabling a crafted local attacker to gain administrator-level privileges. Micro...

CVE-2016-3356

CVE-2016-3356 affects Microsoft Windows 10 (Creator/1607 era) where the Graphics Device Interface (GDI) mishandles memory objects, allowing remote code execution via a crafted document or web content. The root cause involves improper handling of memory objects in GDI, enabling an attacker to run ...

CVE-2016-7211

Technical details for CVE-2016-7211 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0191

CVE-2017-0191 affects multiple Windows platforms (Windows 7, 8.1, 10 and Windows Server 2008 R2/2012/2012 R2/2016) with a denial-of-service condition caused by how memory objects are handled. The vulnerability could allow an attacker to cause a target system to stop responding. The provided sourc...

CVE-2017-11782

CVE-2017-11782 is a Windows SMB Elevation of Privilege vulnerability affecting the SMB server configuration on Windows 10 version 1607 and Windows Server 2016. The underlying issue is the default SMB Server configuration that allows anonymous access to certain named pipes; an unauthenticated atta...

CVE-2017-8466

CVE-2017-8466 is a Windows local elevation of privilege vulnerability described as a Windows Cursor Elevation of Privilege Vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (1511, 1607) and Windows Server 2016. The connected KLA entry corroborates Wind...

CVE-2017-8666

CVE-2017-8666 is described in the initial entry as an information disclosure in Win32k when handling objects in memory across multiple Windows versions (Windows 7/8.1/10, Server editions). Connected documents enumerate CVE-2017-8666 within Microsoft security update compilations (e.g., KB4034665/K...

CVE-2017-8688

CVE-2017-8688 is a Windows GDI+ information-disclosure issue that leaks kernel-memory addresses through GDI+ memory handling. Affected products include Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, and Windows 10 variants up to 1703/Server 2016. Connected analysis documents reveal related kernel me...

CVE-2017-8714

The CVE-2017-8714 entry affects the Windows Hyper-V component (Remote Desktop Virtual Host) on Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1607, and Windows Server 2016. The vulnerability arises because the VM Host Agent Service fails to properly validate input from an authenticated us...

CVE-2019-1418

The CVE-2019-1418 entry describes an information-disclosure vulnerability in Windows where the Windows Modules Installer Service improperly discloses file information. The affected component is the Windows Modules Installer Service; the underlying issue is an information disclosure vulnerability ...

CVE-2020-0763

CVE-2020-0763 is a Windows Defender Security Center elevation-of-privilege vulnerability. According to CNVD-2020-18167/18165, an attacker who can log on could exploit Defender Security Center by manipulating in-memory objects to elevate privileges. The initial description aligns with a memory-obj...

CVE-2020-0917

Technical details are not publicly available in the provided connected documents for CVE-2020-0917. Monitor for updates.

CVE-2020-1139

Technical details (affected products, vulnerable components, fixes) are not provided in the connected documents. Monitor for updates.

CVE-2020-1145

Technical details for CVE-2020-1145 (affected product/version, root cause, exploit information) are not publicly provided in the supplied documents. Monitor for updates and new connected documents that reveal specifics.

CVE-2020-1186

Public technical details about CVE-2020-1186 are not present in the provided documents. The connected EUVD entries mention malware named 'sbrugna' but do not describe affected products, vulnerable components, impact, or mitigations. Monitor for updates.

CVE-2020-1386

CVE-2020-1386 is an information-disclosure vulnerability in Windows Connected User Experiences and Telemetry Service where file information is disclosed improperly. The NVD data shows: Impact on confidentiality: PARTIAL ; attack vector: LOCAL ; authentication: NONE ; user interaction: NONE (CVSS2...

CVE-2020-1395

CVE-2020-1395 is an elevation-of-privilege flaw in the Windows Speech Brokered API related to in-memory handling of objects. The issue is local, with low attack complexity and no user interaction required per the NVD metrics, yielding a CVSS v3.1 base score of 7.8 (High) and impact on confidentia...

CVE-2015-2528

The CVE-2015-2528 issue affects Windows 8, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10, where the local threat can gain privileges by abusing improper constraints on impersonation levels in Task Management. The root cause is not clearly constrained impersonation ...

CVE-2016-0095

CVE-2016-0095 is a local privilege-escalation in the Windows kernel Win32k driver. The flaw affects multiple Windows platforms (Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Server 2012 Gold/R2; Windows RT 8.1; Windows 10 Gold & 1511) and is triggered by a crafted user-space applicat...

CVE-2016-7273

CVE-2016-7273 affects the Windows Graphics Component in Windows 10 (Gold/1511/1607) and Windows Server 2016. A remote code execution vulnerability arises from how the Graphics Component handles objects in memory, allowing an attacker to run arbitrary code when a user visits a crafted web site or ...