CVE-2017-11814

CVE-2017-11814 is a Windows kernel information disclosure vulnerability. It involves improper handling of objects in memory in the Windows kernel and affects multiple Windows editions (Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 v1511/1607/1...

CVE-2017-8593

CVE-2017-8593 corresponds to an elevation-of-privilege flaw inMicrosoft Windows Win32k where objects in memory are not handled correctly. The exposed component is Win32k, and the affected OS family includes Windows 7 SP1, Windows 8.1, Windows 10 variants (including 1511, 1607, 1703), Windows Serv...

CVE-2019-1392

CVE-2019-1392 is a Windows kernel elevation of privilege vulnerability caused by improper handling of objects in memory. The linked NVD entry notes local exploitation with low attack complexity and no authentication, enabling an attacker to achieve a complete compromise of confidentiality, integr...

CVE-2020-0743

CVE-2020-0743 is an elevation of privilege in Microsoft Windows/Windows Server arising from how the Connected Devices Platform Service handles objects in memory. The root cause is a memory handling flaw in that service, enabling an attacker to execute code with elevated privileges. No specific ex...

CVE-2020-1084

CVE-2020-1084 is a Denial of Service vulnerability in the Windows Connected User Experiences and Telemetry Service. The issue arises when the service fails to validate certain function values, which could allow an attacker who can log on and run a specially crafted application to cause a DoS that...

CVE-2020-1164

Technical details for CVE-2020-1164 are not publicly available in the provided documents. Monitor official advisories for updates on affected products, impact, and remediation.

CVE-2023-44216

The CVE-2023-44216 entry concerns PVRIC (PowerVR Image Compression) on Imagination 2018+ GPU devices. The vulnerability stems from software-transparent compression that enables cross-origin pixel-stealing attacks against SVG Filter functions like feTurbulence and feBlend (GPU.zip issue). Affected...

CVE-2015-2461

The CVE-2015-2461 entry is supported by connected documentation describing an ATMFD.DLL OpenType font parsing vulnerability in the Windows Adobe Type Manager Library. The exploitable condition is an out-of-bounds read in ATMFD.DLL when handling a crafted OpenType font, specifically triggered by a...

CVE-2015-6102

CVE-2015-6102 describes a Windows kernel information-disclosure vulnerability that allows local users to bypass KASLR and discover a driver base address. Affected are Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (in...

CVE-2015-6103

CVE-2015-6103 affects the Adobe Type Manager Library in Windows Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012 (and RT) and Windows 10 1511. It allows remote code execution via a crafted embedded font. Public exploits exist (Exploit-DB entries 38714/38714), indicating observed exploi...

CVE-2015-6113

Mode C: CVE-2015-6113 is a Windows kernel security feature bypass where a local attacker could bypass filesystem permissions via FileLinkInformation hard-links in sandboxed processes. The root cause is that ZwSetInformationFile accepted a link operation with 0 desired access for the file handle, ...

CVE-2016-0094

The CVE-2016-0094 entry concerns a local elevation-of-privilege vulnerability in Windows kernel-mode Win32k driver affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (Gold and 1511). The root cause is a flaw in the kern...

CVE-2017-0295

CVE-2017-0295 affects Windows 10 (1703/1607) and Windows Server 2016. An authenticated user could modify the C:\Users\DEFAULT folder structure due to incorrect permissions on the DEFAULT folder contents (Windows Default Folder Tampering). Microsoft released security updates KB4022715 and related ...

CVE-2017-8711

CVE-2017-8711 describes an information-disclosure vulnerability in the Windows Hyper-V component affecting Windows 10 (version 1607) and Windows Server 2016. The issue occurs when Hyper-V fails to properly validate input from an authenticated user on a guest OS, enabling potential leakage of info...

CVE-2017-8715

CVE-2017-8715 is a Device Guard security feature bypass in Windows PowerShell sessions on Windows 10 (Gold 1511, 1607, 1703) and Windows Server 2016. The vulnerability could let an attacker inject code into a trusted PowerShell process to bypass Code Integrity. Remediation exists: install the Mic...

CVE-2017-8716

CVE-2017-8716 is a security feature bypass affecting Windows 10 Version 1703 (Creators Update). The vulnerability arises from how Windows Control Flow Guard (CFG) handles memory-resident objects, allowing a specially crafted application to bypass CFG and execute code under the context of the curr...

CVE-2019-1416

CVE-2019-1416 is a Windows Subsystem for Linux elevation-of-privilege vulnerability caused by a race condition. It allows a locally authenticated attacker to run code with elevated permissions by exploiting WSL memory handling. Microsoft released updates (e.g., KB4523205) to address this issue; e...

CVE-2020-0876

CVE-2020-0876 is a Windows Win32k information disclosure vulnerability. The win32k component improperly provides kernel information, enabling potential disclosure of sensitive data. Affected product: Windows (Win32k). Root cause: improper handling of kernel information in Win32k. Impact: informat...

CVE-2015-2519

CVE-2015-2519 is a Windows Journal remote code execution vulnerability caused by an integer overflow when handling Journal (.jnt) files. Affected Windows versions span Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1, and Windows 10. The issue enables arbitrary ...

CVE-2015-2530

CVE-2015-2530 affects Windows Journal across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10. The vulnerability enables remote code execution via a crafted .jnt file (Windows Journal RCE Vulnerability), a distinct issue from CVE-2015-2513 and CVE-2...

CVE-2016-0016

CVE-2016-0016 is a Windows DLL loading vulnerability that enables local privilege escalation via a crafted application. Affected products include Windows Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 families (as listed in the CVE entry). Root cause: mishandlin...

CVE-2016-0048

CVE-2016-0048 is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10, and 1511). Root cause: kernel-mode Win32k.sys memory handling bug that allows a crafted local application to gain full pr...

CVE-2017-0218

CVE-2017-0218 affects Microsoft Windows 10 (Gold/1511/1607) and Windows Server 2016, involving a Device Guard Code Integrity policy security feature bypass. The vulnerability could allow an attacker to inject malicious code into a Windows PowerShell session. The description in the initial documen...

CVE-2020-1179

Summary of CVE-2020-1179 (Windows GDI Information Disclosure Vulnerability) : The vulnerability affects the Windows Graphics Device Interface (GDI) component, where memory contents may be improperly disclosed, enabling information exposure on vulnerable systems. Related entries (CVE-2020-0963, CV...

CVE-2016-0120

CVE-2016-0120 (OpenType Font Parsing Vulnerability) and CVE-2016-0121 affect the Adobe Type Manager Library in Windows across a broad set of versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10 and 1511). The issues arise from improper handling of specially crafted OpenType fonts: 01...

CVE-2017-8556

CVE-2017-8556 affects Microsoft Windows Graphics Component. The vulnerability arises from how Graphics handles objects in memory, enabling a local attacker to elevate privileges by executing arbitrary code in kernel mode. CNVD entries corroborate kernel-mode code execution via Graphics memory han...

CVE-2017-8693

CVE-2017-8693 is an information-disclosure vulnerability in the Microsoft Windows Graphics Component. The issue affects Windows 10 versions (Gold/1511, 1607, 1703) and Windows Server 2016, arising from how the Graphics Component handles objects in memory. Multiple connected sources (NVD entry for...

CVE-2020-0786

CVE-2020-0786 affects the Windows Tile Object Service. The vulnerability arises from improper handling of hard links, enabling a logged-on attacker to run a crafted application that could cause the target system to stop responding and potentially overwrite system files. This is a local, low-compl...

CVE-2020-0854

Microsoft Windows Mobile Device Management Diagnostics Elevation of Privilege (CVE-2020-0854) is caused by improper handling of junctions in MDM Diagnostics. An attacker who can log on and run a crafted application could bypass access restrictions and delete files. The vulnerability is addressed ...

CVE-2015-2529

The CVE-2015-2529 entry describes a local Kernel ASLR bypass in Microsoft Windows kernels affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10. The vulnerability allows a local attacker to bypass Address Space Layout Randomization via a crafted application, enabling poten...

CVE-2015-6133

CVE-2015-6133 affects multiple Windows versions (Windows 8/8.1, Windows Server 2012 R2, Windows RT, Windows 10 1511) and is caused by improper handling of library loading, enabling local privilege escalation via a crafted application. Public exploitation exists: exploits reference MS15-132 and re...

CVE-2016-0091

CVE-2016-0091 is the Windows OLE Memory Remote Code Execution vulnerability affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012, RT 8.1 and later. The issue allows remote code execution via a crafted OLE-containing file and is distinct from CVE-2016-0092. Technica...

CVE-2016-3349

The CVE-2016-3349 issue is a Win32k Elevation of Privilege in Windows where the Windows kernel-mode driver (Win32k.sys) fails to handle memory objects correctly. An attacker who can log on locally and run a crafted application could execute arbitrary code in kernel mode, gaining full control and ...

CVE-2017-11818

CVE-2017-11818 is a Windows Storage security feature bypass vulnerability. The connected evidence shows that the issue occurs in the Microsoft Windows Storage component and is triggered when an integrity-level check is not properly validated. The vulnerability could allow an application at one in...

CVE-2017-8494

CVE-2017-8494 affects Microsoft Windows 10 (Gold editions including 1511, 1607, 1703) and Windows Server 2016. It is a local elevation of privilege vulnerability caused by improper handling of objects in memory by Windows Secure Kernel Mode, allowing a locally authenticated attacker to run a craf...

CVE-2017-8622

The CVE-2017-8622 entry describes an elevation-of-privilege vulnerability in Windows Subsystem for Linux (WSL) on Windows 10 version 1703, caused by improper handling of NT pipes. A locally authenticated attacker could execute code with elevated privileges by exploiting this flaw. Public referenc...

CVE-2015-2550

Summary: CVE-2015-2550 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, RT, and Windows 10). The connected sources describe local privilege escalation via a crafted application i...

CVE-2016-0046

CVE-2016-0046 is a remote code execution vulnerability in Windows Reader that affects Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. A crafted Reader file can allow an attacker to execute arbitrary code with the current user’s privileges. Public exploits exist (as noted by multiple s...

CVE-2016-3354

CVE-2016-3354 : This is the GDI information disclosure vulnerability in Windows GDI. The Graphics Device Interface in affected Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012, Windows RT 8.1, Windows 10 1511/1607) allows local users to bypass ASLR by running a cra...

CVE-2016-0058

CVE-2016-0058 is a buffer overflow in the Microsoft Windows PDF Library that allows remote code execution via a crafted PDF document. Affected products include Windows 8.1, Windows Server 2012/2012 R2, and Windows 10. Root cause: improper handling of PDF API calls leading to memory corruption. Th...

CVE-2016-0096

Technical details about CVE-2016-0096 are not publicly provided in the supplied connected documents. The available sources describe a Windows kernel-mode privilege escalation generally, but do not specify affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2016-0118

CVE-2016-0118 affects the Microsoft Windows PDF Library in Windows 10 (Gold/1511). It allows remote code execution by persuading a user to open a crafted PDF document. The vulnerability is confirmed across multiple sources and is addressed by MS16-028 (Security Update for Windows PDF Library), wi...

CVE-2016-3344

The CVE-2016-3344 issue affects the Windows Secure Kernel Mode in Windows 10 Gold and 1511. It is a local information-disclosure vulnerability caused by improper handling of objects in memory, enabling a locally authenticated attacker to read sensitive information via a crafted application. Explo...

CVE-2016-3346

CVE-2016-3346 affects Microsoft Windows 10 Gold, 1511 and 1607. The vulnerability stems from improper enforcement of permissions when loading crafted DLLs, enabling a local attacker to escalate privileges to SYSTEM/Administrator. The issue is related to Windows Permissions Enforcement Elevation o...

CVE-2017-8515

CVE-2017-8515 affects Microsoft Windows 10 versions 1511, 1607, and 1703, and Windows Server 2016. The vulnerability allows an unauthenticated, local attacker to send a specially crafted kernel-mode request to trigger a denial of service on the target system (Windows VAD Cloning Denial of Service...

CVE-2017-8584

CVE-2017-8584 affects Windows 10 version 1607 and Windows Server 2016 via remote code execution in the HoloLens Broadcom BCM43xx wireless chipset. The root cause is improper handling of memory objects by the Broadcom chipset when processing WiFi packets, allowing an unauthenticated attacker withi...

CVE-2018-6947

CVE-2018-6947 is an uninitialised stack variable vulnerability in the nxfuse component of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier. It enables local, low-privilege users to gain elevation of privileges on Windows 7 (32/64-bit) and can cause a denial of service o...

CVE-2020-1166

Technical details for CVE-2020-1166 are not publicly available in the provided documents. Monitor official advisories for updates.

CVE-2016-3355

CVE-2016-3355 affects the Windows Graphics Device Interface (GDI) across multiple Windows versions. The vulnerability arises from how GDI handles objects in memory, enabling a local attacker to gain kernel-mode privileges by executing a crafted application. The impact is privilege escalation with...

CVE-2018-8350

CVE-2018-8350 is a remote code execution vulnerability in the Microsoft Windows PDF Library, triggered by improper handling of in-memory objects. Affected products include Windows 10 (and Windows 10 Server variants) where the library is used to process PDFs. The issue’s root cause is the library’...