CVE-2020-1437

CVE-2020-1437 is described in CNVD as an elevation-of-privilege vulnerability in the Windows Network Location Awareness Service. The flaw stems from how the service handles objects in memory, enabling an attacker to execute code with elevated privileges by running a specially crafted application....

CVE-2020-16900

CVE-2020-16900 is a local privilege-escalation vulnerability in Windows where the Event System improperly handles objects in memory. An attacker must first gain code execution on the victim, then run a crafted application to elevate privileges. The fix is a security update that corrects how the W...

CVE-2022-33645

CVE-2022-33645 is a Windows TCP/IP driver denial-of-service vulnerability. Public sources (NVD/CNVD) describe it as a DoS in the Windows TCP/IP component caused by mishandling of incoming error messages, with the CVE listed as affecting Windows TCP/IP and assigned a CVSSv3 score of 7.5 (HIGH). Co...

CVE-2010-3338

CVE-2010-3338 concerns Windows Task Scheduler not correctly determining the security context of scheduled tasks, affecting Task Scheduler 2.0 on Windows Vista SP1/SP2, Server 2008 SP2/R2, and Windows 7, enabling local privilege escalation. Several connected sources describe a concrete exploit pat...

CVE-2011-1991

CVE-2011-1991 describes multiple untrusted search path vulnerabilities in Windows components that allow local privilege elevation via Trojan horse DLLs loaded from the current working directory. Affected products include Windows XP SP2/ SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Ser...

CVE-2014-0266

CVE-2014-0266 (MS14-005) affects Microsoft XML Core Services (MSXML) 3.0 used by Internet Explorer. The root cause is an information-disclosure vulnerability in the MSXML ActiveX controls that can be triggered when a user visits a specially crafted web page, allowing remote attackers to bypass th...

CVE-2014-0316

CVE-2014-0316 affects the Local RPC (LRPC) server in multiple Windows platforms, where the root cause is improper handling of malformed RPC messages (invalid data view) that can trigger a memory leak and bypass ASLR. This is documented as a remote code capability focusing on a memory exhaustion/D...

CVE-2014-6355

CVE-2014-6355 concerns a vulnerability in the Microsoft Graphics Component where JPEG decoding in memory is mishandled, enabling information disclosure when a user visits a crafted web site. Affected products include Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, ...

CVE-2016-3218

CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0109

Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-0287

CVE-2017-0287 relates to a Windows Uniscribe information disclosure vulnerability. The connected Kaspersky advisory explicitly notes an information disclosure in Windows Uniscribe that can be exploited remotely by a crafted document to obtain sensitive information. The provided documents do not s...

CVE-2017-0300

Technical details for CVE-2017-0300 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-11815

CVE-2017-11815 is an information-disclosure vulnerability in the Windows SMB Server, caused by how SMB requests are handled. An authenticated attacker could craft a packet to trigger disclosure from the SMB server. Affected platforms include Windows SMB Server implementations referenced in the CV...

CVE-2019-1399

Technical details beyond the high-level description (affected product, root cause, vulnerable component, specific versions, fixes) are not publicly provided in the connected documents. Monitor for updates.

CVE-2020-0678

Technical details for CVE-2020-0678 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-0804

CVE-2020-0804 is an elevation-of-privilege vulnerability in the Windows Network Connections Service related to how in-memory objects are handled. The issue enables local privilege escalation with high impact (confidentiality, integrity, and availability), as evidenced by CVSS scores of 7.2 (2.0) ...

CVE-2020-0912

Technical details about CVE-2020-0912 are not provided in the supplied documents. No affected product/version is specified beyond a generic memory-handling issue. Monitor official sources for updates.

CVE-2020-1245

Technical details about CVE-2020-1245 are not provided in the supplied connected documents; public information in the initial description is high-level. Monitor for official security advisories for affected products, impact, and fixes.

CVE-2020-1360

CVE-2020-1360 affects the Windows Profile Service. The vulnerability arises from improper handling of file operations within the service, enabling local elevation of privilege if an attacker can run a crafted application on a vulnerable system. The issue is mapped to Windows Profile Service (Wind...

CVE-2020-1409

CVE-2020-1409 is a DirectWrite Remote Code Execution vulnerability in Windows where the attacker can trigger code execution by abusing how DirectWrite handles objects in memory. The connected material confirms the affected area (DirectWrite) and the root cause (memory object handling) and notes h...

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.

CVE-2021-1693

Technical details about CVE-2021-1693 are not provided in the connected documents. The initial description remains high‑level; monitor official advisories for updates to obtain affected products, impact, and fixes.

CVE-2022-37964

Technical details about CVE-2022-37964 are not publicly provided in the supplied documents. References mention Windows Kernel Elevation of Privilege vulnerability and related updates, but do not disclose affected components, root cause, or fixes.

CVE-2022-37993

Technical details for CVE-2022-37993 are not publicly provided in the supplied documents. No concrete affected products, root cause, or remediation are present here. Monitor for updates from official sources.

CVE-2015-6174

CVE-2015-6174 concerns a local privilege-escalation in the Windows kernel affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT/8.1, and Windows 10 1511. The vulnerability description states that a crafted application can allow local ...

CVE-2016-3220

ATMFD.dll Elevation of Privilege vulnerability (CVE-2016-3220) affects the Adobe Type Manager Font Driver in Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/1607. Root cause: ATMFD.dll fails to properly handle objects in memory, enabling loc...

CVE-2016-3299

Summary: CVE-2016-3299 is a NetBIOS spoofing vulnerability in multiple Windows platforms where NetBIOS responses can be validated incorrectly, allowing remote attackers to hijack network traffic or bypass Enhanced Protected Mode/application container protections and render untrusted browser conte...

CVE-2016-3332

Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-11824

The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...

CVE-2017-8564

CVE-2017-8564 is the Windows kernel information disclosure vulnerability where the kernel fails to properly initialize a memory address, potentially allowing an attacker to retrieve kernel base information and bypass KASLR. Affected products include Windows client and server families (Windows 7/8...

CVE-2018-0788

CVE-2018-0788 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll) on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012/R2. The vulnerability stems from how ATMFD.dll handles objects in memory, allowing local elevation of privilege. Impact is ele...

CVE-2019-1013

The CVE-2019-1013 entry describes an information disclosure in the Windows GDI component where memory contents could be exposed. The vulnerability arises from improper handling of objects in memory, enabling an attacker to obtain information to further compromise a system. Public sources (NVD/NVD...

CVE-2020-0725

Technical details for CVE-2020-0725 are not publicly provided in the supplied documents; no concrete affected products, versions, root cause, or fixes are included. Monitor for updates from official advisories and EUVD entries.

CVE-2020-0773

CVE-2020-0773 describes a local elevation-of-privilege vulnerability in Windows ActiveX Installer Service caused by improper memory handling. An attacker who can run code on the victim system could exploit this to gain higher privileges. The description confirms it is a local, memory-related issu...

CVE-2020-0821

Technical details about CVE-2020-0821 are not publicly provided in the supplied documents; the connected records reference a general Windows kernel information disclosure vulnerability. Monitor for updates.

CVE-2020-0952

CVE-2020-0952 is a Windows GDI Information Disclosure Vulnerability. Connected sources confirm it involves the Windows GDI component disclosing memory contents, enabling information disclosure. Related entries from CNVD-2020-30654 and OpenVAS KEV listings acknowledge this CVE among Windows GDI di...

CVE-2020-1291

CVE-2020-1291 is an elevation of privilege vulnerability in the Windows Network Connections Service related to how memory objects are handled. The issue is documented for Windows Network Connections Service (no explicit affected OS versions in the provided texts). The CVSS data in the initial rec...

CVE-2015-6131

CVE-2015-6131 affects Microsoft Windows Media Center; remote code execution via crafted .mcl files is possible in Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1. The underlying issue is parsing of MCL content that can reference themselves within the Windows Media Center IE security ...

CVE-2016-0036

CVE-2016-0036 (RDP Elevation of Privilege) affects the Remote Desktop Protocol in Microsoft Windows products including Windows 7 SP1, Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The flaw stems from the RDP implementation; remote authenticated users can execute arbitrary code by se...

CVE-2016-0184

CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2016-7219

CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...

CVE-2016-7246

CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...

CVE-2017-0075

CVE-2017-0075 (Hyper‑V RCE) affects Microsoft Windows Hyper‑V, with vulnerable scope including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows 10 (Gold, 1511, 1607), and Windows Server 2016. The connected sources describe a remote co...

CVE-2017-0083

CVE-2017-0083 involves Uniscribe (USP10.dll) in Windows Vista SP2, Server 2008 SP2/R2 SP1 and Windows 7 SP1, where a crafted web page can trigger remote code execution. Connected exploit reports tie the issue to Uniscribe font processing, notably USP10!MergeLigRecords, with heap memory corruption...

CVE-2017-0102

Technical details (affected components, root cause, exploit status, mitigations) are not publicly disclosed in the provided documents for CVE-2017-0102; monitor for updates.

CVE-2017-0274

Technical details for CVE-2017-0274 are not publicly available in the provided connected documents. The sources reference SMBv1 information disclosure generally but do not specify affected products/versions, root cause, impact, or remediation for this CVE. Monitor for updates.