CVE-2019-1286

CVE-2019-1286 concerns a Windows GDI information disclosure vulnerability. The connected materials describe an information disclosure in the Graphics Device Interface (GDI) where memory contents may be improperly disclosed. The vulnerability is tied to the GDI component and memory handling. The s...

CVE-2019-1338

CVE-2019-1338 describes a Windows NTLM Security Feature Bypass where a MITM attacker can bypass NTLMv2 protection if the client also sends LMv2 responses. The risk is that NTLM authentication could be bypassed under these conditions, enabling unauthorized access or information exposure as describ...

CVE-2019-1382

CVE-2019-1382 affects Microsoft Windows ActiveX Installer Service (AxInstSV). The root cause is an elevation of privilege where the service may access files without proper authentication, enabling local privilege escalation. Documented impact is local access with elevated privileges; no exploit d...

CVE-2019-1396

Technical details about CVE-2019-1396 are not present in the provided connected documents. The EUVD entries mention malware in 'sbrugna' but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2019-1422

Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1435

Technical details for CVE-2019-1435 are not publicly available in the provided documents. Connected entries mention malware but do not reveal the affected component, root cause, impact, or remediation. Monitor for updates.

CVE-2020-0627

Technical details for CVE-2020-0627 are not publicly available in the provided documents; no affected products or fixes are specified. Monitor for updates.

CVE-2020-0628

Technical details for CVE-2020-0628 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0842

CVE-2020-0842 is a Windows Installer elevation-of-privilege vulnerability. It arises from how Windows Installer handles certain filesystem operations, enabling an unprivileged attacker to execute code on the victim system with local access. The entry is part of a set of CVEs linked to Windows Ins...

CVE-2020-1071

Technical details about CVE-2020-1071 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally and patch notes, but do not specify affected products/versions, root cause, or remediation specifics. Monitor for updates.

CVE-2020-1271

CVE-2020-1271 corresponds to a Windows Backup Service Elevation of Privilege vulnerability. Public docs in the connected set confirm the flaw stems from improper handling of file operations in the Windows Backup Service, enabling local privilege escalation when an attacker already has code execut...

CVE-2020-1348

CVE-2020-1348 is a Microsoft Windows GDI Information Disclosure vulnerability. According to the initial description, it arises from the GDI component improperly disclosing memory contents, enabling information disclosure with partial confidentiality impact (CVSSv3 base score 6.5). OpenVAS-derived...

CVE-2020-1407

Technical details for CVE-2020-1407 are not provided in the supplied documents. The description mentions the Jet Database Engine RCE but no affected product/version specifics or remediation are included here. Monitor for updates.

CVE-2021-1708

Technical details for CVE-2021-1708 are not provided in the supplied documents. Monitor for updates; no affected products, impact, or remediation details can be confirmed from the available sources.

CVE-2021-1734

CVE-2021-1734 is described as a Windows Remote Procedure Call Information Disclosure vulnerability. The provided metrics show CVSS v3.1 base score 7.5 (HIGH) with a network attack vector, low attack complexity, no privileges required, no user interaction, and an impact of high confidentiality los...

CVE-2021-28328

Technical details for CVE-2021-28328 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official advisories and vulnerability feeds.

CVE-2022-35760

Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.

CVE-2015-2455

CVE-2015-2455 (TrueType Font Parsing Vulnerability) is a Windows font-processing defect discovered via Project Zero fuzzing of the Windows kernel font stack (win32k.sys and ATMFD.DLL) affecting TrueType fonts and related SFNT tables. The Google Project Zero report outlines that incorrect handling...

CVE-2015-2473

CVE-2015-2473 is an RDP DLL loading remote code execution vulnerability in Windows clients prior to patch MS15-082. The issue arises from untrusted DLL search path: a Trojan horse DLL placed in the user’s current working directory can be loaded when a user opens a crafted RDP file, allowing code ...

CVE-2015-2478

CVE-2015-2478 is the Windows Winsock Elevation of Privilege vulnerability. A crafted application can trigger a Winsock call referencing an invalid address, enabling local privilege escalation on multiple Windows platforms: Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windo...

CVE-2016-7259

CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...

CVE-2017-0074

CVE-2017-0074 is a Hyper-V denial-of-service vulnerability affecting Windows Hyper-V across multiple Windows client and server editions. Connected sources (CNVD entries) describe a Hyper-V DoS where a crafted application can crash the host, affecting Hyper-V guests; specific affected versions ali...

CVE-2017-0116

CVE-2017-0116 is an Uniscribe Information Disclosure vulnerability affecting Microsoft Windows with the Uniscribe component (usp10.dll) used via DrawText/UI paths. The flaw, described as a memory disclosure in Uniscribe when handling TrueType/OpenType font data from untrusted sources, is triggere...

CVE-2017-0250

CVE-2017-0250 corresponds to a remote code execution vulnerability in the Microsoft JET Database Engine present in Windows components (e.g., older Office/Jet usage). The issue is a buffer overflow that could allow an attacker to take control of the affected system. Connected updates (KBxxxx-Oct 2...

CVE-2018-0810

CVE-2018-0810 affects the Windows kernel in Windows 7 SP1, Windows Server 2008 SP2/R2, and Windows Server 2012. The vulnerability is an information-disclosure flaw caused by the way memory is initialized, enabling a local attacker to obtain information through memory handling defects. The CVSS da...

CVE-2018-0894

Technical details about CVE-2018-0894 are not provided in the connected documents. The initial entry describes an information disclosure vulnerability in Windows kernels across multiple versions, but no affected product specifics, fixes, or exploit data are included here. Monitor for updates.

CVE-2018-0975

CVE-2018-0975 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to obtain information leading to a Kernel ASLR bypass. The Initial document lists affected Windows platforms (Windows 7, Windows Server 2008/2012/2016, Windows 8.1, Windows 10 and correspo...

CVE-2019-0968

CVE-2019-0968 is an information-disclosure vulnerability in the Windows GDI component where memory contents can be exposed due to incorrect handling of objects in memory. Exploitation could occur via user action (e.g., opening a crafted document or visiting a malicious page) to leak memory and en...

CVE-2019-1116

Technical details for CVE-2019-1116 are not publicly provided in the supplied documents; connected items discuss related CVEs but do not disclose affected product/version/root cause for this CVE. Monitor for updates.

CVE-2019-1424

CVE-2019-1424 is a Windows Netlogon security feature bypass vulnerability. Public data describe a vulnerability in how the Netlogon secure channel is handled, with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) and a NETWORK attack vector, no user interaction required. No exp...

CVE-2019-1470

CVE-2019-1470 is described as an information-disclosure vulnerability in Windows Hyper-V where a host OS fails to properly validate input from an authenticated user on a guest OS. The linked Red Hat advisory repeats this description. The connected documents do not provide specific affected versio...

CVE-2020-0675

CVE-2020-0675 affects the Windows Cryptography Next Generation (CNG) service. The vulnerability arises from the service’s failure to properly handle objects in memory, enabling an information disclosure when a logged-on attacker runs a specially crafted application. The issue is addressed by a se...

CVE-2020-0772

CVE-2020-0772 is a Windows Error Reporting memory-handling bug causing local privilege escalation. The vulnerability requires local execution and has a CVSSv3.1 base score of 7.8 (HIGH) with local attack, low attack complexity, and no user interaction. The description does not provide a patch or ...

CVE-2020-0922

Technical details about CVE-2020-0922 are not provided in the connected documents. The Initial Description only notes a remote code execution in Microsoft COM for Windows with a fix in a security update; no product/version/root-cause/exploit details are included here. Monitor for official disclos...

CVE-2020-1007

CVE-2020-1007 is a Windows kernel information disclosure vulnerability. The issue arises from how the Windows kernel handles objects in memory, enabling information disclosure when exploited locally. The description, CVSS data, and references indicate a kernel-level memory handling flaw with part...

CVE-2020-1010

Technical details about CVE-2020-1010 (affected product wbengine, root cause, exploit specifics, mitigations) are not publicly available in the provided Connected documents; monitor for updates from Microsoft MSRC and NVD.

CVE-2020-1051

CVE-2020-1051 concerns the Windows Jet Database Engine and is described as a remote code execution vulnerability caused by improper handling of objects in memory. The connected KB4556799 entry references Windows security updates and notes that the Jet Database Engine is among updated components, ...

CVE-2020-1263

CVE-2020-1263 describes an information disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how memory objects are handled by WER, allowing an attacker to potentially access information they should not have. The affected component is Windows Error Reporting, and the ro...

CVE-2020-1287

CVE-2020-1287 is a Windows WalletService elevation of privilege vulnerability. The WalletService stores/handles objects in memory in a way that can be exploited to elevate privileges; both CNVD entries (CNVD-2021-27713, CNVD-2021-29542) describe this WalletService memory-object handling flaw with...

CVE-2020-1589

Technical details of CVE-2020-1589 are not publicly provided in the supplied documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2021-1679

Technical details for CVE-2021-1679 are not publicly provided in the supplied documents. Please monitor for updates; no product, impact, or remediation specifics are included here.

CVE-2021-27093

Technical details about CVE-2021-27093 are not publicly available in the provided connected documents; monitor for updates.

CVE-2013-3129

CVE-2013-3129 concerns a TrueType Font (TTF) parsing vulnerability that allows remote code execution. Affected products include Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5; Silverlight 5 prior to 5.1.20513.0; and GDI+, DirectWrite, Journal in various Windows versions (XP through Windows ...

CVE-2015-6132

CVE-2015-6132 is the Windows library loading remote code execution vulnerability affecting multiple Windows versions. Root cause: mishandled library loading enabling local privilege escalation via a crafted application. The MS15-132 security update fixes this, with public exploits and a Metasploi...

CVE-2016-0195

Summary: CVE-2016-0195 is a remote code execution vulnerability in the Windows Imaging Component (WIC) affecting multiple Windows versions (Vista to Windows 10). The issue arises from improper handling of memory/objects in the Imaging Component, enabling remote attackers to run arbitrary code via...

CVE-2016-3272

CVE-2016-3272 is a Windows kernel information disclosure vulnerability caused by improper handling of page-fault system calls in the Windows kernel. A local attacker could disclose information from one process to another. Affected products include Windows 8.1, Windows Server 2012/2012 R2, Windows...

CVE-2016-3335

CVE-2016-3335 concerns the Microsoft Windows Common Log File System (CLFS) driver elevation of privilege. The advisory notes local users can gain higher privileges via a crafted application on affected OSes: Windows Vista SP2; Windows Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Windows Server...

CVE-2016-3348

CVE-2016-3348 is a local elevation-of-privilege vulnerability in the Windows kernel-mode driver Win32k.sys. The root cause is how the kernel-mode driver handles objects in memory, which an attacker can exploit by running a crafted application after logging in to gain kernel-level privileges. Affe...

CVE-2017-0090

CVE-2017-0090 is a real Uniscribe vulnerability in USP10 (Windows Uniscribe) where an invalid memory write in the MergeLigRecords function can be triggered by rendering text with a crafted font via API calls such as DrawText, leading to remote code execution. The connected Exploit-DB entries (e.g...

CVE-2017-8488

CVE-2017-8488 is a Windows kernel information disclosure vulnerability affecting multiple Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 variants, Server 2016). The issue allows an authenticated attacker to obtain information ...