CVE-2020-16972

CVE-2020-16972 describes an elevation of privilege in the Windows Backup Service caused by improper handling of file operations. An attacker who already has execution on the victim system could run a crafted application to elevate privileges. The fixed behavior is implemented via a security updat...

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2021-1665

Technical details for CVE-2021-1665 are not provided in the connected documents. The provided sources reference multiple CVEs and general vulnerability contexts but do not disclose affected products, root cause, impact, or remediation for this specific CVE. Monitor for updates.

CVE-2021-1701

Technical details for CVE-2021-1701 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, root cause, exploit, or fixes are included here.

CVE-2021-28331

CVE-2021-28331 is described in connected CNVD as a Remote Procedure Call Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server, enabling remote code execution via RPC Runtime. The provided documents do not specify affected product versions, root cause specifics, e...

CVE-2022-26792

Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.

CVE-2022-26807

Technical details for CVE-2022-26807 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-37977

CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2022-41044

CVE-2022-41044 is a Windows PPTP Remote Code Execution Vulnerability. The CVE entry describes it as affecting the Windows Point-to-Point Tunneling Protocol and documents a high-severity remote code execution risk with network attack vector. Connected sources reference Windows security updates (KB...

CVE-2022-41097

Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.

CVE-2022-44675

Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2009-3676

The CVE-2009-3676 entry concerns a Denial of Service in the kernel SMB client of Windows 7 and Windows Server 2008 R2 caused by incomplete SMB responses (SMBv1 and SMBv2). A remote attacker or a man‑in‑the‑middle could trigger an infinite loop by sending a crafted SMB response, potentially freezi...

CVE-2018-0972

CVE-2018-0972 is a Windows kernel information-disclosure vulnerability that could enable an ASLR bypass. The entry covers multiple Windows versions (desktop, server, and RT). Public details in the initial record include CVSS metrics from NVD (2.1/5.5, LOW to MEDIUM overall, LOCAL access with low ...

CVE-2018-8127

CVE-2018-8127 is a Windows kernel information-disclosure vulnerability affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and server editions). Root cause: the kernel improperly handles objects in memory, enabling information leakage. The connected records do not provide concrete expl...

CVE-2018-8207

The CVE-2018-8207 entry describes an information disclosure vulnerability in the Windows kernel caused by improper handling of memory objects. Affected products include Windows 7, Windows Server 2008/R2/2012/2012 R2, Windows 8.1, Windows 10 and corresponding server variants. The issue stems from ...

CVE-2018-8330

CVE-2018-8330 is a Windows kernel information-disclosure vulnerability where the kernel improperly handles objects in memory. Affected are multiple Windows client/server editions (e.g., Windows 7, 8.1, 10 and corresponding server releases such as Server 2008/2012/2016/2019). The underlying cause ...

CVE-2020-16889

CVE-2020-16889 describes an information disclosure vulnerability in Windows KernelStream where in-memory objects are not handled correctly. Exploitation requires an authenticated user to log on and run a crafted application; it does not directly enable code execution or privilege escalation, but ...

CVE-2021-1704

CVE-2021-1704 is documented as a Windows Hyper-V Elevation of Privilege vulnerability. The connected OpenVAS entries (KB4598** series) list CVE-2021-1704 among affected Windows vulnerabilities, indicating it is addressed across multiple Microsoft security updates. The provided documents do not in...

CVE-2021-28343

Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.

CVE-2022-34730

Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.

CVE-2013-3174

CVE-2013-3174 corresponds to a remote code execution in Microsoft DirectShow via specially crafted GIF files. Affected: DirectShow in Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012. Root cause: faulty GIF image parsing leads to arbitr...

CVE-2014-1767

CVE-2014-1767 is a local privilege-escalation vulnerability in the Windows Ancillary Function Driver (afd.sys) leveraged via a dangling/double-free condition in kernel-mode code (AFD). Public materials indicate Microsoft MS14-040 addressed this flaw, affecting multiple Windows versions from Windo...

CVE-2015-6130

CVE-2015-6130 is a Windows Uniscribe (USP10.DLL) vulnerability affecting Windows 7 SP1 and Windows Server 2008 R2 SP1. A specially crafted True Type Font (TTF) embedded in documents or web content can trigger an integer underflow in Uniscribe, allowing remote code execution. Microsoft issued MS15...

CVE-2016-0176

CVE-2016-0176 is a Windows privilege-escalation flaw in the DirectX Graphics Kernel Subsystem (dxgkrnl.sys). It affects multiple Windows versions (7 SP1, Server 2008 R2 SP1, 8.1, Server 2012 R2/Gold, RT 8.1, 10 variants). Root cause: improper handling of memory objects in the DirectX kernel subsy...

CVE-2016-3225

The CVE-2016-3225 issue affects the SMB server component in multiple Windows releases (e.g., Vista/Server 2008/7/8.1/2012/RT 8.1/10). The root cause is credential-forwarding by the Windows SMB server to an unintended service, enabling a local attacker to gain elevated privileges via a crafted app...

CVE-2017-0004

The CVE-2017-0004 entry describes a remote Denial of Service affecting the Local Security Authority Subsystem Service (LSASS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. A crafted authentication request can trigger an LSASS reboot, effectively taking the target sy...

CVE-2018-8282

CVE-2018-8282 is a Win32k Elevation of Privilege vulnerability in Windows, caused by the Windows kernel-mode driver failing to properly handle objects in memory. It affects Windows 7, Server 2012 R2, RT 8.1, Server 2008/2012, 8.1, Server 2016, Server 2008 R2, 10 and Server 10 servers. Impact is l...

CVE-2019-1014

CVE-2019-1014 is a Windows Win32k elevation-of-privilege vulnerability. The issue arises when Win32k fails to properly handle memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode, install programs, and gain full user rights. Exploitation requires logon an...

CVE-2019-1043

The CVE-2019-1043 entry concerns a remote code execution in the Windows comctl32.dll memory handling. The issue allows an attacker to execute arbitrary code in the caller’s context, with the attacker gaining the current user’s rights; administrative context could lead to full control of the syste...

CVE-2019-1164

CVE-2019-1164 is a Windows kernel elevation-of-privilege vulnerability. The security flaw arises when the Windows kernel mishandles objects in memory, allowing a logged-on attacker to run arbitrary code in kernel mode and potentially install programs, view/change/delete data, or create privileged...

CVE-2019-1245

CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...

CVE-2019-1248

CVE-2019-1248 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The provided documents do not specify exploitation vectors, affected versions, root cause details, or remediations for this CVE.

CVE-2020-0956

Technical details for CVE-2020-0956 are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-1270

CVE-2020-1270 is documented as a Windows WLAN Service Privilege Elevation Vulnerability. The connected CNVD entry describes a privilege escalation in the way memory objects are handled by the Windows WLAN Service, enabling code execution with elevated privileges via a crafted application. Other c...

CVE-2020-1515

CVE-2020-1515 is an Elevation of Privilege vulnerability in Windows Telephony Server caused by improper memory handling. An attacker who already has code execution on the target could escalate privileges locally by running a crafted application. Microsoft’s security update fixes memory handling i...

CVE-2020-1536

CVE-2020-1536 is a Windows elevation of privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker must first gain execution on the target, then run a specially crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-17043

Technical details for CVE-2020-17043 are not provided in the supplied documents. Public information is limited to a general vulnerability description; no product/version/root-cause/exploit details are included. Monitor for updates from official advisories.

CVE-2020-17044

CVE-2020-17044 corresponds to a Windows vulnerability described as a Remote Access Elevation of Privilege. The provided records (NVD/NVD-based sources) list it with a CVSS-3.1 base score of 7.8 (HIGH) and CVSS‑2 base score of 6.8 (MEDIUM). According to CVSS‑3.1 details, the vulnerability is local...

CVE-2021-1656

CVE-2021-1656 is a TPM device driver information disclosure vulnerability affecting Windows TPM drivers. It yields a confidentiality impact (HIGH per CVSS v3.1 and PARTIAL per CVSS v2) with LOCAL attack vector and LOW privileges required; exploitation status is not detailed in the provided docume...

CVE-2021-1671

CVE-2021-1671 corresponds to a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability in Microsoft Windows/Windows Server. The connected documents confirm an RPC Runtime RCE with a network attack vector and a high-severity impact profile (CVSSv3.1 base score 8.8; Confidentiality/...

CVE-2022-35770

CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...

CVE-2012-0173

Technical details for CVE-2012-0173 are not provided in the connected documents. The materials reference CVE-2012-0002 and MS12-020 but do not disclose specifics for CVE-2012-0173. Monitor for updates.

CVE-2016-0169

CVE-2016-0169 is a Windows Graphics Component Information Disclosure vulnerability in GDI across Windows Vista through Windows 10 (various editions). The issue arises from improper disclosure of memory contents via a crafted document, enabling remote information leakage. Public evidence includes ...

CVE-2017-0193

CVE-2017-0193 affects Hyper-V instruction emulation in Microsoft Windows, enabling a local attacker to escalate privileges inside a guest VM due to insufficient enforcement of privilege levels in Hypervisor Code Integrity. Affected scope includes Windows Server 2008 R2/2012, Windows 7/8.1, Window...

CVE-2018-0820

CVE-2018-0820 affects the Windows kernel on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/2012 R2, Windows 10 (various builds) and Windows Server (various). The vulnerability arises from how objects are handled in memory, enabling local privilege escalation from a low-pr...

CVE-2018-1008

CVE-2018-1008 describes a local elevation-of-privilege vulnerability in Windows Adobe Type Manager Font Driver (ATMFD.dll). The flaw stems from improper handling of objects in memory, enabling an attacker to execute arbitrary code with kernel or SYSTEM privileges on vulnerable Windows editions (W...

CVE-2018-8307

CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...

CVE-2018-8393

The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...

CVE-2018-8489

The CVE-2018-8489 entry describes a Windows Hyper-V remote code execution vulnerability. The root cause is that Hyper-V on a host server fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected platforms include multiple Wi...