CVE-2016-0176

CVE-2016-0176 is a Windows privilege-escalation flaw in the DirectX Graphics Kernel Subsystem (dxgkrnl.sys). It affects multiple Windows versions (7 SP1, Server 2008 R2 SP1, 8.1, Server 2012 R2/Gold, RT 8.1, 10 variants). Root cause: improper handling of memory objects in the DirectX kernel subsy...

CVE-2019-1108

Summary: CVE-2019-1108 is a vulnerability in the Windows Remote Desktop Protocol (RDP) Client that leads to information disclosure through memory contents. The connected exploit document describes an attacker connecting remotely to an affected system and running a specially crafted application to...

CVE-2020-0755

Technical details for CVE-2020-0755 are not publicly provided in the connected documents. Monitor for updates from official advisories, as no concrete technical specifics (affected products, impact, or fixes) are present here.

CVE-2020-0822

CVE-2020-0822 is an Elevation of Privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. Evidence from security feeds (e.g., Tenable plugin for KB4541506/KB4541504) confirms the issue is addressed by Microsoft security updates that fix how th...

CVE-2020-1000

Technical details for CVE-2020-1000 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2020-1535

CVE-2020-1535 is an Elevation of Privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker would need to first gain code execution locally and then run a crafted application to elevate privileges. Microsoft’s security update addresses the issue by cor...

CVE-2020-1538

Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.

CVE-2020-1552

CVE-2020-1552 (Windows Work Folder Service Elevation of Privilege) Affects Windows Work Folders Service. The vulnerability arises because the service improperly handles file operations, allowing an attacker to run code with elevated privileges by executing a specially crafted application on the v...

CVE-2020-16972

CVE-2020-16972 describes an elevation of privilege in the Windows Backup Service caused by improper handling of file operations. An attacker who already has execution on the victim system could run a crafted application to elevate privileges. The fixed behavior is implemented via a security updat...

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2021-1665

Technical details for CVE-2021-1665 are not provided in the connected documents. The provided sources reference multiple CVEs and general vulnerability contexts but do not disclose affected products, root cause, impact, or remediation for this specific CVE. Monitor for updates.

CVE-2021-1701

Technical details for CVE-2021-1701 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, root cause, exploit, or fixes are included here.

CVE-2021-28331

CVE-2021-28331 is described in connected CNVD as a Remote Procedure Call Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server, enabling remote code execution via RPC Runtime. The provided documents do not specify affected product versions, root cause specifics, e...

CVE-2022-26792

Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.

CVE-2022-34730

Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.

CVE-2022-37977

CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2022-41097

Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.

CVE-2022-44675

Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2014-1767

CVE-2014-1767 is a local privilege-escalation vulnerability in the Windows Ancillary Function Driver (afd.sys) leveraged via a dangling/double-free condition in kernel-mode code (AFD). Public materials indicate Microsoft MS14-040 addressed this flaw, affecting multiple Windows versions from Windo...

CVE-2017-0004

The CVE-2017-0004 entry describes a remote Denial of Service affecting the Local Security Authority Subsystem Service (LSASS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. A crafted authentication request can trigger an LSASS reboot, effectively taking the target sy...

CVE-2018-0972

CVE-2018-0972 is a Windows kernel information-disclosure vulnerability that could enable an ASLR bypass. The entry covers multiple Windows versions (desktop, server, and RT). Public details in the initial record include CVSS metrics from NVD (2.1/5.5, LOW to MEDIUM overall, LOCAL access with low ...

CVE-2018-8207

The CVE-2018-8207 entry describes an information disclosure vulnerability in the Windows kernel caused by improper handling of memory objects. Affected products include Windows 7, Windows Server 2008/R2/2012/2012 R2, Windows 8.1, Windows 10 and corresponding server variants. The issue stems from ...

CVE-2018-8330

CVE-2018-8330 is a Windows kernel information-disclosure vulnerability where the kernel improperly handles objects in memory. Affected are multiple Windows client/server editions (e.g., Windows 7, 8.1, 10 and corresponding server releases such as Server 2008/2012/2016/2019). The underlying cause ...

CVE-2019-1245

CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...

CVE-2020-16889

CVE-2020-16889 describes an information disclosure vulnerability in Windows KernelStream where in-memory objects are not handled correctly. Exploitation requires an authenticated user to log on and run a crafted application; it does not directly enable code execution or privilege escalation, but ...

CVE-2021-1704

CVE-2021-1704 is documented as a Windows Hyper-V Elevation of Privilege vulnerability. The connected OpenVAS entries (KB4598** series) list CVE-2021-1704 among affected Windows vulnerabilities, indicating it is addressed across multiple Microsoft security updates. The provided documents do not in...

CVE-2021-28343

Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.

CVE-2022-35770

CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...

CVE-2012-0173

Technical details for CVE-2012-0173 are not provided in the connected documents. The materials reference CVE-2012-0002 and MS12-020 but do not disclose specifics for CVE-2012-0173. Monitor for updates.

CVE-2013-3174

CVE-2013-3174 corresponds to a remote code execution in Microsoft DirectShow via specially crafted GIF files. Affected: DirectShow in Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012. Root cause: faulty GIF image parsing leads to arbitr...

CVE-2015-6130

CVE-2015-6130 is a Windows Uniscribe (USP10.DLL) vulnerability affecting Windows 7 SP1 and Windows Server 2008 R2 SP1. A specially crafted True Type Font (TTF) embedded in documents or web content can trigger an integer underflow in Uniscribe, allowing remote code execution. Microsoft issued MS15...

CVE-2016-3225

The CVE-2016-3225 issue affects the SMB server component in multiple Windows releases (e.g., Vista/Server 2008/7/8.1/2012/RT 8.1/10). The root cause is credential-forwarding by the Windows SMB server to an unintended service, enabling a local attacker to gain elevated privileges via a crafted app...

CVE-2017-0193

CVE-2017-0193 affects Hyper-V instruction emulation in Microsoft Windows, enabling a local attacker to escalate privileges inside a guest VM due to insufficient enforcement of privilege levels in Hypervisor Code Integrity. Affected scope includes Windows Server 2008 R2/2012, Windows 7/8.1, Window...

CVE-2018-0820

CVE-2018-0820 affects the Windows kernel on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/2012 R2, Windows 10 (various builds) and Windows Server (various). The vulnerability arises from how objects are handled in memory, enabling local privilege escalation from a low-pr...

CVE-2018-8307

CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...

CVE-2018-8393

The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...

CVE-2019-1014

CVE-2019-1014 is a Windows Win32k elevation-of-privilege vulnerability. The issue arises when Win32k fails to properly handle memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode, install programs, and gain full user rights. Exploitation requires logon an...

CVE-2019-1043

The CVE-2019-1043 entry concerns a remote code execution in the Windows comctl32.dll memory handling. The issue allows an attacker to execute arbitrary code in the caller’s context, with the attacker gaining the current user’s rights; administrative context could lead to full control of the syste...

CVE-2019-1093

Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.

CVE-2019-1164

CVE-2019-1164 is a Windows kernel elevation-of-privilege vulnerability. The security flaw arises when the Windows kernel mishandles objects in memory, allowing a logged-on attacker to run arbitrary code in kernel mode and potentially install programs, view/change/delete data, or create privileged...

CVE-2019-1248

CVE-2019-1248 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The provided documents do not specify exploitation vectors, affected versions, root cause details, or remediations for this CVE.

CVE-2019-1454

CVE-2019-1454 affects the Windows User Profile Service (ProfSvc). The root cause is improper handling of symlinks, enabling elevation of privilege. Impact is local, with partial confidentiality/integrity/availability concerns stated; exploitation details are not provided in the connected document...

CVE-2020-1270

CVE-2020-1270 is documented as a Windows WLAN Service Privilege Elevation Vulnerability. The connected CNVD entry describes a privilege escalation in the way memory objects are handled by the Windows WLAN Service, enabling code execution with elevated privileges via a crafted application. Other c...

CVE-2020-1515

CVE-2020-1515 is an Elevation of Privilege vulnerability in Windows Telephony Server caused by improper memory handling. An attacker who already has code execution on the target could escalate privileges locally by running a crafted application. Microsoft’s security update fixes memory handling i...

CVE-2020-1536

CVE-2020-1536 is a Windows elevation of privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker must first gain execution on the target, then run a specially crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-1541

CVE-2020-1541 is a Windows vulnerability in the Windows Backup Engine that enables elevation of privilege by abusing memory handling. Public documentation in the connected CNVD and NVD entries confirms the root cause as improper memory handling within Windows Backup Engine, requiring prior code e...

CVE-2020-17043

Technical details for CVE-2020-17043 are not provided in the supplied documents. Public information is limited to a general vulnerability description; no product/version/root-cause/exploit details are included. Monitor for updates from official advisories.

CVE-2020-17044

CVE-2020-17044 corresponds to a Windows vulnerability described as a Remote Access Elevation of Privilege. The provided records (NVD/NVD-based sources) list it with a CVSS-3.1 base score of 7.8 (HIGH) and CVSS‑2 base score of 6.8 (MEDIUM). According to CVSS‑3.1 details, the vulnerability is local...

CVE-2021-1656

CVE-2021-1656 is a TPM device driver information disclosure vulnerability affecting Windows TPM drivers. It yields a confidentiality impact (HIGH per CVSS v3.1 and PARTIAL per CVSS v2) with LOCAL attack vector and LOW privileges required; exploitation status is not detailed in the provided docume...