CVE-2017-0216

CVE-2017-0216 affects Microsoft Windows 10 (versions 1511, 1607) and Windows Server 2016, enabling a security feature bypass in Device Guard Code Integrity Policy that could allow an attacker to inject malicious code into a Windows PowerShell session. The underlying issue is a bypass of Code Inte...

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8683

CVE-2017-8683 is a Windows graphics remote-code-execution vulnerability tied to Win32k Graphics via specially crafted embedded fonts. Affected products include Windows client/server releases from Windows 7 SP1 to Windows 10 1703 and Windows Server 2008 SP2/R2 SP1/2012, plus Office Word Viewer+Off...

CVE-2017-8688

CVE-2017-8688 is a Windows GDI+ information-disclosure issue that leaks kernel-memory addresses through GDI+ memory handling. Affected products include Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, and Windows 10 variants up to 1703/Server 2016. Connected analysis documents reveal related kernel me...

CVE-2018-8445

Technical details for CVE-2018-8445 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8638

CVE-2018-8638 — DirectX Information Disclosure Vulnerability affects Windows 10 and Windows Server 2019. The vulnerability arises from DirectX improperly handling objects in memory, enabling an attacker to obtain information to further compromise the user’s system. An authenticated attacker could...

CVE-2020-0716

Technical details for CVE-2020-0716 are not publicly provided in the connected documents. Monitor for updates; current sources do not specify affected products, root cause, impact, or remediation in this corpus.

CVE-2020-0727

CVE-2020-0727 describes an elevation-of-privilege vulnerability in Windows’ Connected User Experiences and Telemetry Service via improper file operations. The provided connected documents (EUVD-2020-2216, CNVD-2020-14328, OSV-CVE entries, NVD) reiterate the vulnerability title and impact but do n...

CVE-2020-0868

CVE-2020-0868 is a local elevation-of-privilege vulnerability in the Windows Update Orchestrator Service caused by improper file operations. The affected component is the Windows Update Orchestrator Service; the root cause is mishandling of file operations. According to sources, the CVE has a hig...

CVE-2020-1090

Technical details for CVE-2020-1090 are not publicly available in the provided documents. Monitor for updates from official advisories."

CVE-2020-1111

Technical details about CVE-2020-1111 are not publicly provided in the connected documents. Monitor for updates from the linked sources (EUVD entries and MSRC/MSNVD references) for affected products, root cause, and remediation.

CVE-2020-1139

Technical details (affected products, vulnerable components, fixes) are not provided in the connected documents. Monitor for updates.

CVE-2020-1186

Public technical details about CVE-2020-1186 are not present in the provided documents. The connected EUVD entries mention malware named 'sbrugna' but do not describe affected products, vulnerable components, impact, or mitigations. Monitor for updates.

CVE-2020-1395

CVE-2020-1395 is an elevation-of-privilege flaw in the Windows Speech Brokered API related to in-memory handling of objects. The issue is local, with low attack complexity and no user interaction required per the NVD metrics, yielding a CVSS v3.1 base score of 7.8 (High) and impact on confidentia...

CVE-2020-1590

Technical details about CVE-2020-1590 are not provided in the connected documents. Public information here notes an elevation of privilege via the Connected User Experiences and Telemetry Service, but no concrete affected versions, root cause, or fixes are disclosed. Monitor for updates.

CVE-2021-26892

Technical details about CVE-2021-26892 (affected product, root cause, impact, fixes) are not provided in the connected documents; no public details are included here. Monitor for updates.

CVE-2015-2513

CVE-2015-2513 relates to Windows Journal remote code execution via a crafted .jnt file across Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The root cause is processing of .jnt files enabling arbi...

CVE-2015-2534

CVE-2015-2534 affects Windows Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10. The issue is improper processing of ACL settings in Hyper-V, enabling a local attacker to bypass network-traffic restrictions via a crafted application (security feature bypass). Public advisories and up...

CVE-2016-0098

CVE-2016-0098 is a remote-code-execution flaw in Microsoft Windows media handling (Windows Media parsing) affecting Windows 7 SP1, Windows 8.1, Windows Server 2008 R2 SP1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10. An attacker can trigger arbitrary code execution by convincing a...

CVE-2016-0135

CVE-2016-0135 is a local elevation-of-privilege vulnerability in the Windows Secondary Logon Service, affecting Windows 10 Gold and 1511. The issue stems from the service failing to properly manage in-memory requests, enabling a crafted local attacker to gain administrator-level privileges. Micro...

CVE-2016-7225

CVE-2016-7225 affects Windows 10 (Gold, 1511, 1607) and Windows Server 2016, where the Virtual Hard Disk (VHD) driver fails to properly restrict access to certain files. The root cause is improper handling of file access by the VHD kernel driver, enabling a local attacker to elevate privileges vi...

CVE-2017-0051

CVE-2017-0051 affects Microsoft Windows 10 Version 1607 and Windows Server 2016. The description indicates a remote-denial-of-service via a crafted Office document, referred to as the Microsoft Hyper-V Network Switch Denial of Service Vulnerability. The vulnerability is described as causing an ap...

CVE-2017-0159

CVE-2017-0159 affects Windows 10 (1607), Windows Server 2012 R2, and Windows Server 2016. Root cause: ADFS may treat Extranet requests as Intranet, bypassing account lockout protections and enabling easier brute-force access. Public exploit details are not provided in the connected documents. Rem...

CVE-2017-0191

CVE-2017-0191 affects multiple Windows platforms (Windows 7, 8.1, 10 and Windows Server 2008 R2/2012/2012 R2/2016) with a denial-of-service condition caused by how memory objects are handled. The vulnerability could allow an attacker to cause a target system to stop responding. The provided sourc...

CVE-2017-0215

CVE-2017-0215 affects Windows 10 version 1607 and Windows Server 2016, describing a security feature bypass in Device Guard Code Integrity Policy that could allow injection of code into a PowerShell session. Public exploitation exists per related advisories. The issue is addressed in June 2017 se...

CVE-2017-0293

CVE-2017-0293 : Microsoft Windows PDF Library improperly handles objects in memory, allowing remote code execution in multiple Windows versions. Root cause (as described) is memory handling that can lead to code execution in the context of the current user; attacker could gain user rights if expl...

CVE-2017-11899

CVE-2017-11899 affects Device Guard in Windows 10 (1511, 1607, 1703, 1709) and Windows Server variants; vulnerability is a security feature bypass caused by how untrusted files are handled. The CNVD entry (CNVD-2018-00778) confirms a Device Guard security bypass due to untrusted file validation. ...

CVE-2017-8648

Microsoft Edge in Windows 10 Version 1703 is affected by CVE-2017-8648, an information-disclosure vulnerability arising from how Edge handles objects in memory. An attacker could obtain information that may facilitate further compromise of the user’s system. The connected update (KB4038781) is ci...

CVE-2019-1418

The CVE-2019-1418 entry describes an information-disclosure vulnerability in Windows where the Windows Modules Installer Service improperly discloses file information. The affected component is the Windows Modules Installer Service; the underlying issue is an information disclosure vulnerability ...

CVE-2020-0750

CVE-2020-0750 involves an elevation of privileges in Microsoft Windows/Windows Server related to the Connected Devices Platform Service . The root cause, as described in CNVD entries, is a flaw in how the service handles objects in memory, enabling an attacker to execute code with elevated privil...

CVE-2020-0763

CVE-2020-0763 is a Windows Defender Security Center elevation-of-privilege vulnerability. According to CNVD-2020-18167/18165, an attacker who can log on could exploit Defender Security Center by manipulating in-memory objects to elevate privileges. The initial description aligns with a memory-obj...

CVE-2020-1120

CVE-2020-1120 is a DoS vulnerability in Windows’ Connected User Experiences and Telemetry Service caused by improper handling of file operations. Connected and published sources (NVD entry and KB4557957 reference) confirm this CVE alongside CVE-2020-1244 and note it as part of a June 2020 Windows...

CVE-2020-1137

CVE-2020-1137 is a Windows Push Notification Service Elevation of Privilege vulnerability. The issue stems from how the service handles memory objects, allowing a locally logged-on attacker to run a specially crafted application with elevated privileges, potentially installing programs or alterin...

CVE-2020-1386

CVE-2020-1386 is an information-disclosure vulnerability in Windows Connected User Experiences and Telemetry Service where file information is disclosed improperly. The NVD data shows: Impact on confidentiality: PARTIAL ; attack vector: LOCAL ; authentication: NONE ; user interaction: NONE (CVSS2...

CVE-2015-2527

CVE-2015-2527 is a local privilege-escalation vulnerability in Windows' kernel-mode driver pathway, specifically the process-initialization logic in win32k.sys. The root cause is improper constraining of impersonation levels during certain process initialization scenarios, enabling a locally auth...

CVE-2015-2528

The CVE-2015-2528 issue affects Windows 8, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10, where the local threat can gain privileges by abusing improper constraints on impersonation levels in Task Management. The root cause is not clearly constrained impersonation ...

CVE-2016-0014

CVE-2016-0014 is a DLL-loading Elevation of Privilege vulnerability affecting multiple Windows versions (Vista through Windows 10 thresholds) where improper DLL loading allows a local attacker to gain complete control via a crafted application. Root cause: mishandling of DLL loading. Affected com...

CVE-2016-0181

CVE-2016-0181 describes a local security feature bypass in Windows 10 Gold and 1511 where a crafted application could bypass Virtual Secure Mode Hypervisor Code Integrity (HVCI) and mark kernel-mode pages as RWX. Several connected sources (CNVD-2016-03091, NVD/NVD mirror, MSRC/MS16-066, and OpenV...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-3250

CVE-2016-3250 is a Windows kernel-mode elevation-of-privilege vulnerability in Win32k. The issue affects kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 (Gold/1511), where a crafted application could cause memory-object handling flaws to escalate privileges locally. The NVD en...

CVE-2016-3306

CVE-2016-3306 concerns the Windows kernel mishandling of session objects, enabling local privilege escalation.affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 RTMs 1507/1511/1607. Descr...

CVE-2016-7273

CVE-2016-7273 affects the Windows Graphics Component in Windows 10 (Gold/1511/1607) and Windows Server 2016. A remote code execution vulnerability arises from how the Graphics Component handles objects in memory, allowing an attacker to run arbitrary code when a user visits a crafted web site or ...

CVE-2017-0156

CVE-2017-0156 is an elevation-of-privilege vulnerability in the Microsoft Graphics component affecting Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2/2012/2012 R2/2016. The issue arises when the Graphics Component fails to properly handle memory objects, allowing a local attacker to gain ...

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-8580

Technical details for CVE-2017-8580 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources to confirm affected products, root cause, impact, and any available mitigations or patches.

CVE-2017-8666

CVE-2017-8666 is described in the initial entry as an information disclosure in Win32k when handling objects in memory across multiple Windows versions (Windows 7/8.1/10, Server editions). Connected documents enumerate CVE-2017-8666 within Microsoft security update compilations (e.g., KB4034665/K...

CVE-2017-8675

The CVE-2017-8675 entry describes an elevation of privilege in Windows due to a flaw in the Win32k subsystem. Affects: Windows kernel-mode drivers component on Windows versions including Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (1...

CVE-2017-8714

The CVE-2017-8714 entry affects the Windows Hyper-V component (Remote Desktop Virtual Host) on Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1607, and Windows Server 2016. The vulnerability arises because the VM Host Agent Service fails to properly validate input from an authenticated us...

CVE-2019-1383

Technical details about CVE-2019-1383 are not publicly provided in the supplied documents. Monitor for updates in connected feeds for affected products, versions, impact, and fixes.

CVE-2020-0820

CVE-2020-0820 is a Windows Media Foundation information-disclosure vulnerability, caused by improper handling of objects in memory. CVSSv3 base: 5.5 (MEDIUM), local access, low privileges required, no user interaction. Confidentiality impact is HIGH; integrity/availability unaffected per the avai...