CVE-2018-8563

CVE-2018-8563 is a DirectX information-disclosure vulnerability arising from how objects are handled in memory. The NVD and CNVD entries document that it affects multiple Windows platforms (Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows 8.1, Windows Server 2008 R2...

CVE-2019-1293

Technical details for CVE-2019-1293 are not publicly provided in the connected documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates in the CVE records and advisories.

CVE-2019-1325

Technical details for CVE-2019-1325 are not provided in the connected documents; no affected product/version/root cause or fix is described beyond the initial entry. Monitor for updates.

CVE-2019-1334

Technical details about CVE-2019-1334 are not publicly available in the provided connected documents. Monitor for updates; no affected products, root cause, or fixes are described here.

CVE-2020-0691

Technical details about CVE-2020-0691 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2020-0720

Technical details about CVE-2020-0720 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, root cause, or remediation are included here.

CVE-2020-0777

CVE-2020-0777 is described in CNVD-2020-23447 as a privilege escalation vulnerability in Microsoft Windows Work Folder Service, arising from improper handling of file operations. The CNVD entry states that an attacker could exploit this with a specially crafted application to run processes with e...

CVE-2020-0955

Technical details for CVE-2020-0955 are not publicly provided in the supplied documents. Monitor official advisories for updates; current sources only describe an information-disclosure via CPU memory access without specifics.

CVE-2020-0963

The CVE-2020-0963 entry describes an information disclosure vulnerability in the Windows Graphics Device Interface (GDI) where memory contents may be exposed. The vulnerability is tied to the GDI component’s handling of objects in memory, enabling disclosure of memory contents by an attacker. The...

CVE-2020-1074

CVE-2020-1074 describes a remote code execution in the Windows Jet Database Engine caused by improper in-memory handling of objects. An attacker could trigger code execution by convincing a user to open a specially crafted file, leading to arbitrary code on the victim’s system. The vulnerability ...

CVE-2020-1311

CVE-2020-1311 is an elevation-of-privilege vulnerability in the Component Object Model (COM). Affected: Windows COM client using special case IIDs. Root cause cited as an elevation of privilege in COM. Connected documentRH: CVE-2020-1311 confirms the same issue; no explicit product/version patche...

CVE-2020-1351

CVE-2020-1351 is described in connected sources as an information disclosure vulnerability linked to the Windows Graphics Component. The root cause, as stated in CNVD-2021-63330, is that the Windows graphics component fails to properly handle objects in memory, enabling information disclosure on ...

CVE-2021-26875

CVE-2021-26875 is described as a Windows Win32k Elevation of Privilege Vulnerability. The provided connected documents do not reveal concrete technical details (affected component versions, specific root cause, exploit vectors, or explicit remediation) for this CVE; only high-level references to ...

CVE-2014-4118

CVE-2014-4118 affects Microsoft XML Core Services (MSXML) 3.0. The vulnerability arises when parsing crafted XML content, allowing remote code execution or system-state corruption on multiple Windows versions (MSXML 3.0 in Windows Server 2003 SP2; Vista SP2; Server 2008 SP2 and R2 SP1; Windows 7 ...

CVE-2015-2456

Summary from Project Zero (2016) : Windows kernel font handling (TTF/OTF) contained multiple vulnerabilities discovered via fuzzing (ATMFD.DLL, win32k.sys) with several CVEs (notably CVE-2015-2455 and CVE-2015-2456). Root cause highlighted: the IUP instruction handler in win32k!itrp_IUP failed to...

CVE-2016-3238

The CVE-2016-3238 vulnerability affects the Windows Print Spooler and allows remote code execution when a crafted print driver is provided during printer installation. Affected products include multiple Windows client/server editions (Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 RT/1511, Win...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

CVE-2017-0112

The vulnerability CVE-2017-0112 affects Uniscribe in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. It enables remote information disclosure by a crafted web site that causes Uniscribe to read process memory, exposing sensitive data. Exploitation is possible without user pr...

CVE-2017-0192

The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...

CVE-2017-0297

Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2017-8531

CVE-2017-8531 : Affected are Windows graphics components including Uniscribe across Windows client/server lines (e.g., Windows 7 SP1, 8.1, 10 variants; Windows Server 2008-2016) and Microsoft Office; root cause is an information disclosure vulnerability caused by improper memory disclosure in the...

CVE-2017-8718

CVE-2017-8718 is a remote code execution vulnerability in the Microsoft JET Database Engine that affects Windows components across multiple OS versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 1511–1703, Windows Server 2016). Root caus...

CVE-2019-0664

CVE-2019-0664 relates to an information disclosure in the Windows Graphics Device Interface (GDI). The connected advisories describe the issue as an information disclosure vulnerability due to improper handling of memory objects within GDI, allowing a remote attacker to obtain sensitive informati...

CVE-2019-1098

Technical details for CVE-2019-1098 (affected products, vulnerable component, root cause, impact, and fixes) are not publicly provided in the supplied documents. Please monitor for new information or updates.

CVE-2019-1408

Technical details for CVE-2019-1408 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-1412

CVE-2019-1412 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll). The vulnerability is an information-disclosure flaw caused by improper handling of objects in memory, leading to partial confidentiality impact. Exploitation is Local with low attack complexity; no explicit exploitation...

CVE-2019-1441

CVE-2019-1441 (Win32k Graphics Remote Code Execution) is a remote code execution vulnerability in the Windows font library that mishandles specially crafted embedded fonts. The flaw affects Windows components relying on the font/Win32k stack; an attacker could host malicious content or deliver a ...

CVE-2020-0666

CVE-2020-0666 is described in CNVD sources as an elevation of privilege affecting Microsoft Windows and Windows Server, stemming from the Windows Search Indexer mishandling objects in memory. The vulnerability enables code execution with elevated privileges on the affected system (local context)....

CVE-2020-0770

CVE-2020-0770 is an elevation of privilege vulnerability in the Windows ActiveX Installer Service caused by improper handling of memory. The CNVD entry confirms the syndrome but provides no versioned product scope or patch details. Public documents indicate that exploitation requires local execut...

CVE-2020-0774

CVE-2020-0774 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly handles memory objects, allowing an attacker to leak memory contents and potentially information needed for further compromise. The vulnerability can be exploited via social engineering (e.g....

CVE-2020-0781

The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...

CVE-2020-0790

Technical details about CVE-2020-0790 are not publicly provided in the connected documents. Monitor official advisories for updates; these sources mention a splwow64 Elevation of Privilege but do not provide concrete technical specifics in the supplied materials.

CVE-2020-0921

Technical details about CVE-2020-0921 are not provided in the connected documents; the materials reference the vulnerability in general terms related to Microsoft Graphics components but do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2020-1250

Technical details about CVE-2020-1250, including affected products, root cause, impact, or patch specifics, are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-1254

CVE-2020-1254 concerns an elevation of privilege in Windows Modules Installer Service. The vulnerability arises because the service improperly handles class object members, enabling a locally authenticated attacker to execute arbitrary code with system privileges. Affected: Windows Modules Instal...

CVE-2020-1437

CVE-2020-1437 is described in CNVD as an elevation-of-privilege vulnerability in the Windows Network Location Awareness Service. The flaw stems from how the service handles objects in memory, enabling an attacker to execute code with elevated privileges by running a specially crafted application....

CVE-2022-35793

Technical details about CVE-2022-35793 are not provided in the connected documents. The set contains only general MSKB updates; monitor official disclosures or vendor advisories for affected products, root cause, impact, and fixes.

CVE-2015-2515

CVE-2015-2515 is a remote code execution vulnerability in Windows Shell caused by a use-after-free when handling crafted toolbar objects. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012/2012 R2, Windows RT/RT 8.1, and ...

CVE-2015-6107

CVE-2015-6107 concerns a remote-code-execution vulnerability in the Windows font library. The issue arises when parsing specially crafted embedded fonts, enabling arbitrary code execution on affected systems. Public references indicate this affects a broad set of Windows versions (Vista through W...

CVE-2016-3263

CVE-2016-3263 concerns a GDI+/Graphics Device Interface information-disclosure issue across multiple Windows platforms (Vista SP2 through Windows 10 1607, Windows Server equivalents) that allows remote attackers to bypass ASLR via unspecified vectors. Affected components are GDI/GDI+ in Windows a...

CVE-2017-8470

Technical details for CVE-2017-8470 are not publicly available in the provided documents; monitor for updates from Microsoft/MSRC and security vendors.

CVE-2017-8544

CVE-2017-8544 describes a Windows Search Information Disclosure vulnerability in the Windows Search service caused by how objects are handled in memory. Affected systems span multiple Windows versions: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Wind...

CVE-2018-0926

Technical details are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-0730

CVE-2020-0730 concerns Windows User Profile Service (ProfSvc) elevation of privilege due to improper handling of symbolic links. The CNVD-2020-14305 entry describes that an attacker could delete files and folders in an elevated context by exploiting this symlink handling issue. The provided conne...

CVE-2020-0754

Technical details for CVE-2020-0754 are not provided in the connected documents; only high-level information is available.

CVE-2020-0843

CVE-2020-0843 is a local elevation-of-privilege vulnerability in Windows Installer. The issue arises from how Windows Installer handles certain filesystem operations, allowing an unprivileged attacker on the victim system to compromise the host. CVSSv3.1 base score is 7.8 (HIGH) with local exploi...

CVE-2020-0860

Technical details for CVE-2020-0860 are not publicly provided in the connected documents. Available sources mention the vulnerability in general terms; monitor for updates and additional technical disclosures.

CVE-2020-0907

CVE-2020-0907 is described as a remote code execution vulnerability in how Microsoft Graphics Components handles objects in memory. The connected MS KB and vendor feeds confirm this CVE is among a set of Windows updates (KB4549951 family) addressing multiple issues, but the provided documents do ...

CVE-2020-1061

CVE-2020-1061 is a remote code execution vulnerability described as affecting the Microsoft Script Runtime, stemming from how it handles objects in memory. The available connected docs reiterate this in the CVE description and identify the component as the Microsoft Script Runtime, with no explic...

CVE-2020-1397

CVE-2020-1397 is an information-disclosure flaw in Windows Imaging Component (WIC) related to how WindowsCodecs handles image decoding, particularly TIFF/CCITT paths. FireEye’s analysis identifies the root cause as uninitialized memory flowing through the image decoding pipeline (TIFFReadBufferSe...