CVE-2016-0118

CVE-2016-0118 affects the Microsoft Windows PDF Library in Windows 10 (Gold/1511). It allows remote code execution by persuading a user to open a crafted PDF document. The vulnerability is confirmed across multiple sources and is addressed by MS16-028 (Security Update for Windows PDF Library), wi...

CVE-2017-8515

CVE-2017-8515 affects Microsoft Windows 10 versions 1511, 1607, and 1703, and Windows Server 2016. The vulnerability allows an unauthenticated, local attacker to send a specially crafted kernel-mode request to trigger a denial of service on the target system (Windows VAD Cloning Denial of Service...

CVE-2020-1166

Technical details for CVE-2020-1166 are not publicly available in the provided documents. Monitor official advisories for updates.

CVE-2015-2550

Summary: CVE-2015-2550 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, RT, and Windows 10). The connected sources describe local privilege escalation via a crafted application i...

CVE-2016-0089

This CVE refers to CVE-2016-0089, a Windows Hyper-V Information Disclosure vulnerability. A guest OS user could exploit improper validation of guest input to cause the Hyper-V host to reveal memory information. Affected products include Hyper-V on Windows 8.1, Windows Server 2012 (Gold/R2), and W...

CVE-2016-7258

CVE-2016-7258 relates to a Windows kernel information disclosure in Windows 10 (Gold, 1511, 1607) and Windows Server 2016 where the kernel mishandles certain page-fault system calls, enabling a locally authenticated attacker to disclose information from one process to another. Affected component:...

CVE-2016-7271

The CVE-2016-7271 issue affects Microsoft Windows 10 (Gold, 1511, 1607) and Windows Server 2016, where Windows Secure Kernel Mode could be abused to bypass the Virtual Trust Level (VTL). The root cause is improper handling of memory objects in Secure Kernel Mode, allowing a locally authenticated ...

CVE-2017-8494

CVE-2017-8494 affects Microsoft Windows 10 (Gold editions including 1511, 1607, 1703) and Windows Server 2016. It is a local elevation of privilege vulnerability caused by improper handling of objects in memory by Windows Secure Kernel Mode, allowing a locally authenticated attacker to run a craf...

CVE-2017-8703

CVE-2017-8703 affects Windows Subsystem for Linux on Windows 10 version 1703. Description: a denial-of-service vulnerability caused by improper handling of memory objects in WSL. Impact: local DoS on the affected system. Affected product/component: Windows Subsystem for Linux (WSL) within Windows...

CVE-2015-6109

CVE-2015-6109 describes a local information-disclosure vulnerability in Windows kernels (Windows 8.1, Server 2012 R2, Windows RT 8.1, Windows 10 initial releases) that allows a local user to bypass KASLR and reveal a driver base address through a crafted application. The underlying issue is a ker...

CVE-2016-7188

The CVE-2016-7188 issue affects the Windows Diagnostics Hub Standard Collector Service on Windows 10 (Gold, 1511, 1607). The root cause is improper sanitization of input during library loading, leading to untrusted library loading and elevation of privileges for a local attacker who runs a crafte...

CVE-2017-8712

CVE-2017-8712 affects Windows 10 (builds 1607, 1703) and Windows Server 2016, where the Hyper-V component discloses information due to improper validation of guest-origin input. Root cause: input validation failure in Hyper‑V when processing data from a guest OS authenticated user. Impact is info...

CVE-2016-0019

CVE-2016-0019 is a Windows RDP security bypass affecting the RDP service implementation in Windows 10 (Gold and 1511). A remote attacker can bypass login restrictions and establish sessions for blank-password accounts by connecting with a modified RDP client. This is labeled as a security bypass ...

CVE-2016-7220

CVE-2016-7220 affects Windows 10 via the Virtual Secure Mode information-disclosure vulnerability. Root cause: improper handling of objects in memory within Windows Virtual Secure Mode. Impact: local information disclosure achievable by a crafted application; exploitation requires local access. P...

CVE-2017-8692

CVE-2017-8692 is a Windows Uniscribe memory-handling vulnerability that allows remote code execution when Uniscribe fails to properly manage objects in memory. Affected products include Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (Gold/1511/1607/1703), and Windows Serve...

CVE-2016-0092

CVE-2016-0092 is the Windows OLE Memory Remote Code Execution vulnerability. It affects multiple Windows OS versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 Gold/1511) and allows remote code execution via a crafted OLE file. The root...

CVE-2017-8702

CVE-2017-8702 is a Windows Elevation of Privilege vulnerability in Windows Error Reporting (WER). Affects Windows 10 Gold/1511/1607 and Windows Server 2016; caused by how WER handles and executes files, enabling a local attacker to gain higher privileges and access sensitive information and syste...

CVE-2016-0117

CVE-2016-0117 is a Windows PDF Library remote code execution vulnerability affecting multiple Windows platforms: Windows 8.1, Windows Server 2012 (and R2), Windows RT 8.1, and Windows 10 (including version 1511). The root cause is improper handling/validation within the Windows PDF library when p...

CVE-2016-0121

CVE-2016-0121 affects the Adobe Type Manager Library in multiple Windows editions (Vista SP2, Server 2008 SP2/R2, Windows 7/8.1, Server 2012/2012 R2, RT 8.1, Windows 10 versions). The root cause is improper handling of specially crafted OpenType fonts by ATMFD.DLL, allowing remote code execution ...

CVE-2017-8566

CVE-2017-8566 is a Windows IME elevation-of-privilege vulnerability in which Windows IME improperly handles parameters in a DCOM class method. A locally authenticated attacker could exploit it by running a crafted application to gain higher privileges. Affected: Windows 1607, 1703, and Windows Se...

CVE-2017-8627

CVE-2017-8627 concerns the Windows Subsystem for Linux (WSL) in Windows 10 version 1703, where DoS can be triggered by how WSL handles memory objects. The vulnerability is local and affects WSL components via memory-object handling, with CVSS v3 base score 4.7 (AV:L, AC:H, PR:L, UI:N, S:U, C:N, I...

CVE-2016-3312

CVE-2016-3312 is an information-disclosure vulnerability in Microsoft Windows where Universal Outlook/ActiveSyncProvider could leak credentials when a secure connection could not be established. Multiple connected sources confirm the issue affects Windows 10 (Gold) and 1511, enabling an attacker ...

CVE-2017-8623

CVE-2017-8623 affects Microsoft Windows Hyper-V (Windows 10 versions 1607/1703 and Windows Server 2016). The flaw is due to Hyper-V Denial of Service arising from improper validation of input by a privileged user on a guest operating system, enabling a guest VM to cause the host to crash. The pra...

CVE-2017-8673

CVE-2017-8673 affects the Windows 10 version 1703 RDP implementation, enabling an attacker to cause a Denial of Service by sending specially crafted RDP requests; impact is that the RDP service may stop responding. Public details confirm the vulnerability exists and can be triggered remotely via ...