CVE-2016-7188

The CVE-2016-7188 issue affects the Windows Diagnostics Hub Standard Collector Service on Windows 10 (Gold, 1511, 1607). The root cause is improper sanitization of input during library loading, leading to untrusted library loading and elevation of privileges for a local attacker who runs a crafte...

CVE-2016-7271

The CVE-2016-7271 issue affects Microsoft Windows 10 (Gold, 1511, 1607) and Windows Server 2016, where Windows Secure Kernel Mode could be abused to bypass the Virtual Trust Level (VTL). The root cause is improper handling of memory objects in Secure Kernel Mode, allowing a locally authenticated ...

CVE-2020-1158

Technical details for CVE-2020-1158 are not provided in the connected documents; the sources reference the vulnerability at a high level and mostly discuss related CVEs. Monitor for updates.

CVE-2015-2508

CVE-2015-2508 is the Font Driver Elevation of Privilege vulnerability in the Adobe Type Manager Library within Windows 10. The issue allows a local attacker to gain higher privileges by abusing a crafted OpenType/font handling via a normal application, as described in MS15-097 and related advisor...

CVE-2016-0009

CVE-2016-0009 is a Windows Win32k remote code execution vulnerability affecting multiple Windows platforms (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 10 gold/1511). The issue allows remote attackers to execute arbitrary code via unspecified vectors. The CVSS v3.0 base score is 8.8...

CVE-2016-3251

CVE-2016-3251 is a Win32k information disclosure vulnerability in the kernel-mode GDI components of multiple Windows releases (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, 2012, RT 8.1, and Windows 10/1511). The root cause is improper handling of objects in memory within the Windows GDI/Win...

CVE-2017-8703

CVE-2017-8703 affects Windows Subsystem for Linux on Windows 10 version 1703. Description: a denial-of-service vulnerability caused by improper handling of memory objects in WSL. Impact: local DoS on the affected system. Affected product/component: Windows Subsystem for Linux (WSL) within Windows...

CVE-2016-7258

CVE-2016-7258 relates to a Windows kernel information disclosure in Windows 10 (Gold, 1511, 1607) and Windows Server 2016 where the kernel mishandles certain page-fault system calls, enabling a locally authenticated attacker to disclose information from one process to another. Affected component:...

CVE-2017-8712

CVE-2017-8712 affects Windows 10 (builds 1607, 1703) and Windows Server 2016, where the Hyper-V component discloses information due to improper validation of guest-origin input. Root cause: input validation failure in Hyper‑V when processing data from a guest OS authenticated user. Impact is info...

CVE-2015-6109

CVE-2015-6109 describes a local information-disclosure vulnerability in Windows kernels (Windows 8.1, Server 2012 R2, Windows RT 8.1, Windows 10 initial releases) that allows a local user to bypass KASLR and reveal a driver base address through a crafted application. The underlying issue is a ker...

CVE-2016-7220

CVE-2016-7220 affects Windows 10 via the Virtual Secure Mode information-disclosure vulnerability. Root cause: improper handling of objects in memory within Windows Virtual Secure Mode. Impact: local information disclosure achievable by a crafted application; exploitation requires local access. P...

CVE-2016-0019

CVE-2016-0019 is a Windows RDP security bypass affecting the RDP service implementation in Windows 10 (Gold and 1511). A remote attacker can bypass login restrictions and establish sessions for blank-password accounts by connecting with a modified RDP client. This is labeled as a security bypass ...

CVE-2017-8566

CVE-2017-8566 is a Windows IME elevation-of-privilege vulnerability in which Windows IME improperly handles parameters in a DCOM class method. A locally authenticated attacker could exploit it by running a crafted application to gain higher privileges. Affected: Windows 1607, 1703, and Windows Se...

CVE-2017-8692

CVE-2017-8692 is a Windows Uniscribe memory-handling vulnerability that allows remote code execution when Uniscribe fails to properly manage objects in memory. Affected products include Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (Gold/1511/1607/1703), and Windows Serve...

CVE-2017-8706

CVE-2017-8706 affects the Windows Hyper-V component on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The vulnerability is an information disclosure caused by improper validation of input from an authenticated user on a guest OS within Hyper-V. The interconnected CVE entries (8707/8712...

CVE-2016-0117

CVE-2016-0117 is a Windows PDF Library remote code execution vulnerability affecting multiple Windows platforms: Windows 8.1, Windows Server 2012 (and R2), Windows RT 8.1, and Windows 10 (including version 1511). The root cause is improper handling/validation within the Windows PDF library when p...

CVE-2016-0092

CVE-2016-0092 is the Windows OLE Memory Remote Code Execution vulnerability. It affects multiple Windows OS versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 Gold/1511) and allows remote code execution via a crafted OLE file. The root...

CVE-2017-8627

CVE-2017-8627 concerns the Windows Subsystem for Linux (WSL) in Windows 10 version 1703, where DoS can be triggered by how WSL handles memory objects. The vulnerability is local and affects WSL components via memory-object handling, with CVSS v3 base score 4.7 (AV:L, AC:H, PR:L, UI:N, S:U, C:N, I...

CVE-2016-0121

CVE-2016-0121 affects the Adobe Type Manager Library in multiple Windows editions (Vista SP2, Server 2008 SP2/R2, Windows 7/8.1, Server 2012/2012 R2, RT 8.1, Windows 10 versions). The root cause is improper handling of specially crafted OpenType fonts by ATMFD.DLL, allowing remote code execution ...

CVE-2017-8702

CVE-2017-8702 is a Windows Elevation of Privilege vulnerability in Windows Error Reporting (WER). Affects Windows 10 Gold/1511/1607 and Windows Server 2016; caused by how WER handles and executes files, enabling a local attacker to gain higher privileges and access sensitive information and syste...

CVE-2016-3312

CVE-2016-3312 is an information-disclosure vulnerability in Microsoft Windows where Universal Outlook/ActiveSyncProvider could leak credentials when a secure connection could not be established. Multiple connected sources confirm the issue affects Windows 10 (Gold) and 1511, enabling an attacker ...

CVE-2017-8623

CVE-2017-8623 affects Microsoft Windows Hyper-V (Windows 10 versions 1607/1703 and Windows Server 2016). The flaw is due to Hyper-V Denial of Service arising from improper validation of input by a privileged user on a guest operating system, enabling a guest VM to cause the host to crash. The pra...

CVE-2016-0089

This CVE refers to CVE-2016-0089, a Windows Hyper-V Information Disclosure vulnerability. A guest OS user could exploit improper validation of guest input to cause the Hyper-V host to reveal memory information. Affected products include Hyper-V on Windows 8.1, Windows Server 2012 (Gold/R2), and W...

CVE-2017-8673

CVE-2017-8673 affects the Windows 10 version 1703 RDP implementation, enabling an attacker to cause a Denial of Service by sending specially crafted RDP requests; impact is that the RDP service may stop responding. Public details confirm the vulnerability exists and can be triggered remotely via ...