CVE-2017-8562

CVE-2017-8562 is an elevation-of-privilege vulnerability in Windows caused by improper handling of Advanced Local Procedure Call (ALPC) calls. The issue allows a local attacker to run arbitrary code with the security context of the local system, given successful exploitation. Affected Windows ver...

CVE-2017-8591

The connected CNVD entry for CVE-2017-8591 describes a remote code execution flaw in the Windows Input Method Editor (IME) where memory objects are mishandled. Affected products include Windows platforms listed in the CVE entry (IME component on Windows 8.1, various Windows 10/Server SKUs). The r...

CVE-2017-8624

CVE-2017-8624 corresponds to the Windows CLFS Elevation of Privilege Vulnerability in the Common Log File System. The initial description states that CLFS on multiple Windows editions handles in-memory objects in an unsafe way, enabling local privilege escalation. The CVSS data supplied indicates...

CVE-2017-8664

CVE-2017-8664 affects Windows Hyper-V remote code execution when input from a privileged user on a guest OS is not properly validated. Connected sources (e.g., CNVD-2017-28010 and OpenVAS/Nessus listings) corroborate Hyper-V input-validation as the root cause and remote-code-execution impact, but...

CVE-2019-1392

CVE-2019-1392 is a Windows kernel elevation of privilege vulnerability caused by improper handling of objects in memory. The linked NVD entry notes local exploitation with low attack complexity and no authentication, enabling an attacker to achieve a complete compromise of confidentiality, integr...

CVE-2020-1075

CVE-2020-1075 is a Windows Subsystem for Linux information-disclosure vulnerability caused by improper handling of memory-resident objects. The vulnerability could allow an attacker with local access to obtain sensitive information from memory, with CVSSv3.1 indicating local access, low attack co...

CVE-2020-1363

CVE-2020-1363 is a Windows Picker Platform elevation of privilege vulnerability. The issue arises from improper handling of memory, enabling an attacker who already has execution on the target to elevate privileges by running a crafted application. This vulnerability is documented in multiple sou...

CVE-2015-2530

CVE-2015-2530 affects Windows Journal across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10. The vulnerability enables remote code execution via a crafted .jnt file (Windows Journal RCE Vulnerability), a distinct issue from CVE-2015-2513 and CVE-2...

CVE-2016-0046

CVE-2016-0046 is a remote code execution vulnerability in Windows Reader that affects Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. A crafted Reader file can allow an attacker to execute arbitrary code with the current user’s privileges. Public exploits exist (as noted by multiple s...

CVE-2017-8465

Technical details for CVE-2017-8465 are not publicly available in the provided documents. No specifics on affected products, root cause, or fixes are present here. Monitor for updates.

CVE-2017-8593

CVE-2017-8593 corresponds to an elevation-of-privilege flaw inMicrosoft Windows Win32k where objects in memory are not handled correctly. The exposed component is Win32k, and the affected OS family includes Windows 7 SP1, Windows 8.1, Windows 10 variants (including 1511, 1607, 1703), Windows Serv...

CVE-2017-8711

CVE-2017-8711 describes an information-disclosure vulnerability in the Windows Hyper-V component affecting Windows 10 (version 1607) and Windows Server 2016. The issue occurs when Hyper-V fails to properly validate input from an authenticated user on a guest OS, enabling potential leakage of info...

CVE-2020-0871

CVE-2020-0871 is an information disclosure vulnerability in Windows Network Connections Service where objects in memory are not handled correctly, potentially exposing memory contents. The provided documents identify the vulnerability type and affected component but do not specify product version...

CVE-2020-1138

CVE-2020-1138 is a Windows Storage Service Elevation of Privilege vulnerability caused by improper handling of file operations. An attacker who gains code execution on a vulnerable system could elevate privileges by exploiting Storage Service behavior. The MSRC entry states exploitation requires ...

CVE-2021-26861

CVE-2021-26861 is a Windows Graphics Component remote code execution vulnerability. Public records identify the affected component as the Windows Graphics Component; the underlying issue is reflected in the CVSS3 metrics (base score 7.8 HIGH, LOCAL exploit, user interaction required, and high imp...

CVE-2021-26886

CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...

CVE-2015-2461

The CVE-2015-2461 entry is supported by connected documentation describing an ATMFD.DLL OpenType font parsing vulnerability in the Windows Adobe Type Manager Library. The exploitable condition is an out-of-bounds read in ATMFD.DLL when handling a crafted OpenType font, specifically triggered by a...

CVE-2015-2512

CVE-2015-2512 is a local privilege escalation in the Adobe Type Manager Library (Font Driver) on Windows. The vulnerability arises from improper handling of objects in memory within the Font Driver, allowing a crafted application to execute with elevated privileges (SYSTEM) on affected Windows ve...

CVE-2015-6133

CVE-2015-6133 affects multiple Windows versions (Windows 8/8.1, Windows Server 2012 R2, Windows RT, Windows 10 1511) and is caused by improper handling of library loading, enabling local privilege escalation via a crafted application. Public exploitation exists: exploits reference MS15-132 and re...

CVE-2016-0041

CVE-2016-0041 is a Windows DLL loading vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10, IE 10–11). The issue is described as mishandling DLL loading, enabling local privilege escalation via a crafted application. Connected advi...

CVE-2017-0295

CVE-2017-0295 affects Windows 10 (1703/1607) and Windows Server 2016. An authenticated user could modify the C:\Users\DEFAULT folder structure due to incorrect permissions on the DEFAULT folder contents (Windows Default Folder Tampering). Microsoft released security updates KB4022715 and related ...

CVE-2017-11769

CVE-2017-11769 : The Windows TRIE component on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 can be remotely exploited to achieve code execution through improper handling of DLL file loading. The vulnerability arises in how TRIE loads DLLs, allowing an attacker who can induce loading o...

CVE-2017-8715

CVE-2017-8715 is a Device Guard security feature bypass in Windows PowerShell sessions on Windows 10 (Gold 1511, 1607, 1703) and Windows Server 2016. The vulnerability could let an attacker inject code into a trusted PowerShell process to bypass Code Integrity. Remediation exists: install the Mic...

CVE-2019-1416

CVE-2019-1416 is a Windows Subsystem for Linux elevation-of-privilege vulnerability caused by a race condition. It allows a locally authenticated attacker to run code with elevated permissions by exploiting WSL memory handling. Microsoft released updates (e.g., KB4523205) to address this issue; e...

CVE-2020-1084

CVE-2020-1084 is a Denial of Service vulnerability in the Windows Connected User Experiences and Telemetry Service. The issue arises when the service fails to validate certain function values, which could allow an attacker who can log on and run a specially crafted application to cause a DoS that...

CVE-2015-2529

The CVE-2015-2529 entry describes a local Kernel ASLR bypass in Microsoft Windows kernels affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10. The vulnerability allows a local attacker to bypass Address Space Layout Randomization via a crafted application, enabling poten...

CVE-2016-0091

CVE-2016-0091 is the Windows OLE Memory Remote Code Execution vulnerability affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012, RT 8.1 and later. The issue allows remote code execution via a crafted OLE-containing file and is distinct from CVE-2016-0092. Technica...

CVE-2017-8693

CVE-2017-8693 is an information-disclosure vulnerability in the Microsoft Windows Graphics Component. The issue affects Windows 10 versions (Gold/1511, 1607, 1703) and Windows Server 2016, arising from how the Graphics Component handles objects in memory. Multiple connected sources (NVD entry for...

CVE-2020-0854

Microsoft Windows Mobile Device Management Diagnostics Elevation of Privilege (CVE-2020-0854) is caused by improper handling of junctions in MDM Diagnostics. An attacker who can log on and run a crafted application could bypass access restrictions and delete files. The vulnerability is addressed ...

CVE-2016-0120

CVE-2016-0120 (OpenType Font Parsing Vulnerability) and CVE-2016-0121 affect the Adobe Type Manager Library in Windows across a broad set of versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10 and 1511). The issues arise from improper handling of specially crafted OpenType fonts: 01...

CVE-2016-3355

CVE-2016-3355 affects the Windows Graphics Device Interface (GDI) across multiple Windows versions. The vulnerability arises from how GDI handles objects in memory, enabling a local attacker to gain kernel-mode privileges by executing a crafted application. The impact is privilege escalation with...

CVE-2017-11818

CVE-2017-11818 is a Windows Storage security feature bypass vulnerability. The connected evidence shows that the issue occurs in the Microsoft Windows Storage component and is triggered when an integrity-level check is not properly validated. The vulnerability could allow an application at one in...

CVE-2017-8556

CVE-2017-8556 affects Microsoft Windows Graphics Component. The vulnerability arises from how Graphics handles objects in memory, enabling a local attacker to elevate privileges by executing arbitrary code in kernel mode. CNVD entries corroborate kernel-mode code execution via Graphics memory han...

CVE-2015-2519

CVE-2015-2519 is a Windows Journal remote code execution vulnerability caused by an integer overflow when handling Journal (.jnt) files. Affected Windows versions span Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1, and Windows 10. The issue enables arbitrary ...

CVE-2016-0096

Technical details about CVE-2016-0096 are not publicly provided in the supplied connected documents. The available sources describe a Windows kernel-mode privilege escalation generally, but do not specify affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2017-8706

CVE-2017-8706 affects the Windows Hyper-V component on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The vulnerability is an information disclosure caused by improper validation of input from an authenticated user on a guest OS within Hyper-V. The interconnected CVE entries (8707/8712...

CVE-2020-0786

CVE-2020-0786 affects the Windows Tile Object Service. The vulnerability arises from improper handling of hard links, enabling a logged-on attacker to run a crafted application that could cause the target system to stop responding and potentially overwrite system files. This is a local, low-compl...

CVE-2020-1179

Summary of CVE-2020-1179 (Windows GDI Information Disclosure Vulnerability) : The vulnerability affects the Windows Graphics Device Interface (GDI) component, where memory contents may be improperly disclosed, enabling information exposure on vulnerable systems. Related entries (CVE-2020-0963, CV...

CVE-2016-0058

CVE-2016-0058 is a buffer overflow in the Microsoft Windows PDF Library that allows remote code execution via a crafted PDF document. Affected products include Windows 8.1, Windows Server 2012/2012 R2, and Windows 10. Root cause: improper handling of PDF API calls leading to memory corruption. Th...

CVE-2016-3251

CVE-2016-3251 is a Win32k information disclosure vulnerability in the kernel-mode GDI components of multiple Windows releases (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, 2012, RT 8.1, and Windows 10/1511). The root cause is improper handling of objects in memory within the Windows GDI/Win...

CVE-2016-3346

CVE-2016-3346 affects Microsoft Windows 10 Gold, 1511 and 1607. The vulnerability stems from improper enforcement of permissions when loading crafted DLLs, enabling a local attacker to escalate privileges to SYSTEM/Administrator. The issue is related to Windows Permissions Enforcement Elevation o...

CVE-2017-0218

CVE-2017-0218 affects Microsoft Windows 10 (Gold/1511/1607) and Windows Server 2016, involving a Device Guard Code Integrity policy security feature bypass. The vulnerability could allow an attacker to inject malicious code into a Windows PowerShell session. The description in the initial documen...

CVE-2017-8584

CVE-2017-8584 affects Windows 10 version 1607 and Windows Server 2016 via remote code execution in the HoloLens Broadcom BCM43xx wireless chipset. The root cause is improper handling of memory objects by the Broadcom chipset when processing WiFi packets, allowing an unauthenticated attacker withi...

CVE-2017-8622

The CVE-2017-8622 entry describes an elevation-of-privilege vulnerability in Windows Subsystem for Linux (WSL) on Windows 10 version 1703, caused by improper handling of NT pipes. A locally authenticated attacker could execute code with elevated privileges by exploiting this flaw. Public referenc...

CVE-2020-1158

Technical details for CVE-2020-1158 are not provided in the connected documents; the sources reference the vulnerability at a high level and mostly discuss related CVEs. Monitor for updates.

CVE-2016-0016

CVE-2016-0016 is a Windows DLL loading vulnerability that enables local privilege escalation via a crafted application. Affected products include Windows Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 families (as listed in the CVE entry). Root cause: mishandlin...

CVE-2016-3344

The CVE-2016-3344 issue affects the Windows Secure Kernel Mode in Windows 10 Gold and 1511. It is a local information-disclosure vulnerability caused by improper handling of objects in memory, enabling a locally authenticated attacker to read sensitive information via a crafted application. Explo...

CVE-2018-8350

CVE-2018-8350 is a remote code execution vulnerability in the Microsoft Windows PDF Library, triggered by improper handling of in-memory objects. Affected products include Windows 10 (and Windows 10 Server variants) where the library is used to process PDFs. The issue’s root cause is the library’...

CVE-2015-2508

CVE-2015-2508 is the Font Driver Elevation of Privilege vulnerability in the Adobe Type Manager Library within Windows 10. The issue allows a local attacker to gain higher privileges by abusing a crafted OpenType/font handling via a normal application, as described in MS15-097 and related advisor...

CVE-2016-0009

CVE-2016-0009 is a Windows Win32k remote code execution vulnerability affecting multiple Windows platforms (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 10 gold/1511). The issue allows remote attackers to execute arbitrary code via unspecified vectors. The CVSS v3.0 base score is 8.8...