CVE-2015-2458

CVE-2015-2458 (ATMFD.DLL OpenType parsing) affects the Windows Adobe Type Manager Library across multiple Windows versions. The connected ExploitPack/EDB entry details an out-of-bounds read in ATMFD.DLL triggered by processing a corrupted OpenType font, leading to a potential remote code executio...

CVE-2015-6171

CVE-2015-6171 concerns the Windows kernel vulnerability affecting Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012 Gold/R2, RT/8.1, and 10 1511, enabling local privilege elevation via a crafted application. The issue is a separate vulnerability from CVE-2015-6173 and CVE-2015-...

CVE-2016-0049

CVE-2016-0049 describes a Windows Kerberos vulnerability where password changes could bypass authentication via a crafted KDC. Microsoft’s MS16-014 (KB3126041) patches this issue across affected Windows versions (Vista SP2, 2008 SP2, 2008 R2, 7 SP1, 8.1, 2012, 2012 R2, 10 RTM/1511). The advisory ...

CVE-2016-3254

CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...

CVE-2016-7221

CVE-2016-7221 is a Windows IME DLL-loading privilege-escalation issue. The IME loads DLLs via a registry-controlled mechanism and can be exploited by a locally authenticated user to gain higher privileges when an application initiates the IME. Public writeups (e.g., JVN/JVND) describe the exploit...

CVE-2016-7260

CVE-2016-7260 affects multiple Windows releases via a Win32k.sys/Win32k component elevation of privilege vulnerability. The kernel-mode drivers in Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10 (incl. 1511, 1607), and Server 2016 allow local users to gain privileg...

CVE-2017-0091

CVE-2017-0091 is an information-disclosure vulnerability in Microsoft Windows, affecting the Uniscribe (usp10.dll) font‑handling component used by DrawText and related text-rendering paths. The root cause is memory access issues in Uniscribe’s handling of complex TrueType/OpenType typography tabl...

CVE-2017-0119

CVE-2017-0119 involves Uniscribe (usp10.dll) on Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. A crafted web page can trigger Uniscribe processing via DrawText, allowing a remote attacker to disclose memory contents from the process address space (information disclosure) du...

CVE-2017-11853

Technical details for CVE-2017-11853 (affected Windows kernel versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from official advisories (MSRC) and regional databases.

CVE-2017-8489

Technical details for CVE-2017-8489 are not provided in the connected documents. The EUVD entries mention malware titled 'Malware in sbrugna' but do not describe affected products, root cause, impact, or remediation.

CVE-2017-8581

CVE-2017-8581 is a Win32k elevation of privilege vulnerability affecting multiple Windows platforms (Windows 7/8.1/10 and corresponding Server editions) where improper handling of objects in memory could allow an attacker to run code with elevated privileges. The provided documents identify the a...

CVE-2017-8590

CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...

CVE-2019-1169

CVE-2019-1169 affects the Windows kernel via the Win32k elevation-of-privilege vulnerability. The Windows kernel-mode driver mishandles objects in memory, allowing a locally authenticated attacker to run arbitrary code in kernel mode, potentially installing programs, viewing/changing data, or cre...

CVE-2019-1216

CVE-2019-1216 describes a DirectX information disclosure vulnerability arising from improper handling of memory objects in DirectX. The issue affects Microsoft Windows/Windows Server environments via DirectX components and is characterized by a memory handling flaw that allows partial confidentia...

CVE-2020-0676

Technical details for CVE-2020-0676 are not publicly available in the provided connected documents. The initial description offers a general summary only. Monitor for updates and rely on official advisories for affected products and fixes.

CVE-2020-0682

Technical details about CVE-2020-0682 are not publicly provided in the supplied documents. No concrete affected product/version or remediation info is available here. Monitor for updates from official advisories.

CVE-2020-1005

CVE-2020-1005 is an information-disclosure vulnerability in the Microsoft Windows Graphics Component. The connected documents identify the issue as an information-disclosure vulnerability that arises when Windows Graphics Components improperly handle objects in memory (root cause: memory handling...

CVE-2020-1154

CVE-2020-1154 : Elevation of privilege in the Windows Common Log File System (CLFS) Driver due to improper handling of objects in memory. The vulnerability enables local privilege escalation, with a high-severity impact (CONFIDENTIALITY/INTEGRITY/AVAILABILITY listed as HIGH in CVSS 3.1, and LOCAL...

CVE-2020-1252

Technical details for CVE-2020-1252 are not publicly available in the provided Connected Documents; the sources here reference related updates (e.g., RemoteFX, CVE-2020-1036) but do not specify affected product/version/root cause/mitigation for this CVE. Monitor for updates.

CVE-2020-1374

CVE-2020-1374 affects the Windows Remote Desktop Client. The provided documents describe a remote code execution vulnerability that can be triggered when a user connects to a malicious RDP server. The AVLEONOV summary echoes that this is an RDP Client RCE affecting Windows 7 through Windows 10 (u...

CVE-2021-26862

Technical details about CVE-2021-26862 (affected product/component, root cause, impact, or patch) are not provided in the connected documents. Monitor official advisories for updates; current sources only confirm the vulnerability name/type without specifics.

CVE-2021-40441

Technical details about CVE-2021-40441 are not publicly provided in the supplied documents. No concrete information on affected products/versions, root cause, impact, or fixes is available here; monitor for updates from official advisories.

CVE-2023-34367

CVE-2023-34367 describes a weakness in the TCP/IP implementation that enables a full blind TCP/IP hijacking attack, affecting Windows 7 and all Windows versions up to Windows 8. The vulnerability arises from Idle scan-related behavior and is stated with a vendor-assessed low severity (CVSS v3.1: ...

CVE-2010-2552

CVE-2010-2552 is the SMB Stack Exhaustion vulnerability in the SMB Server of affected Windows platforms. It occurs when the SMBv2 compounded requests are malformed, causing a denial-of-service (system hang). Affected products per sources include Windows Vista SP1/SP2, Windows Server 2008 (Gold/SP...

CVE-2014-0296

CVE-2014-0296 affects the Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 (Gold and R2). The vulnerability stems from insufficient encryption of RDP sessions, enabling man-in-the-middle attackers to sniff data or modify sess...

CVE-2015-2368

CVE-2015-2368 is a Windows untrusted search path vulnerability that allows local privilege escalation by placing a Trojan DLL in the current working directory. Affected: Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1. Root cause: DLL hijack when a p...

CVE-2015-2552

CVE-2015-2552 concerns the Windows kernel across multiple editions (Windows 8/8.1, Server 2012, RT, Windows 10). The vulnerability enables physically proximate attackers to bypass Trusted Boot via a crafted Boot Configuration Data (BCD) setting, which can compromise code integrity and protections...

CVE-2016-3239

The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...

CVE-2016-3368

CVE-2016-3368 affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (initial 1511/1607)). It is a remote code execution vulnerability caused by how Windows handles objects in memory. An attacker with domain cr...

CVE-2016-7214

Technical details about CVE-2016-7214 are not publicly provided in the supplied documents. The connected EUVD/NVD entries do not reveal affected products or root causes here. Monitor for updates from official advisories.

CVE-2017-0089

CVE-2017-0089 affects Microsoft Windows Uniscribe (USP10) used by the Uniscribe font processing path in user32.dll. The vulnerability arises from a memory corruption in USP10!MergeLigRecords, enabling remote code execution when a user visits a crafted web page. Affected platforms listed in the in...

CVE-2017-0092

CVE-2017-0092 affects Uniscribe (usp10.dll) in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The vulnerability enables an attacker-controlled website to cause memory information disclosure from the affected process. The CVE entry lists a CVSS v3 base score of 4.3 (Medi...

CVE-2017-0286

Technical details for CVE-2017-0286 are not publicly provided in the connected documents. Monitor for updates in the provided sources; current materials do not disclose affected products, root cause, impact, or fixes.

CVE-2017-8483

Technical details about CVE-2017-8483 are not publicly provided in the supplied documents. The connected EUVD entries reference malware but do not describe affected products, vulnerable components, exploitation or fixes. Monitor for updates.

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2017-8620

CVE-2017-8620 is a Windows Search Remote Code Execution vulnerability. The issue arises when Windows Search improperly handles objects in memory, allowing a remote attacker to execute code on the affected system. Multiple connected sources (Nessus/OpenVAS plugins) confirm this CVE is tied to the ...

CVE-2017-8678

CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...

CVE-2019-1480

Technical details (affected product/component/version/root cause/impact/fix) are not publicly provided in the supplied documents; monitor for updates.

CVE-2020-0705

CVE-2020-0705 is an information-disclosure vulnerability in Windows’ Network Driver Interface Specification (NDIS) where memory handling is improper. The issue can disclose information from memory and requires prior execution on the target (local access with low attack complexity per CVSS v3.1: A...

CVE-2020-0756

Technical details for CVE-2020-0756 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-0845

Technical details for CVE-2020-0845 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0857

CVE-2020-0857 is an elevation of privilege vulnerability in Windows: the Windows Search Indexer mishandles memory objects, enabling local attackers to gain elevated privileges. Affected: Windows Search Indexer process; root cause is memory handling. Impact per sources is elevation of privileges w...

CVE-2020-1072

CVE-2020-1072 is described as a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. The connected CNVD entry repeats this description, confirming an information-disclosure risk stemming from memory object handling in Windows kernel sp...

CVE-2020-1097

CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...

CVE-2020-1359

CVE-2020-1359 is a Windows elevation-of-privilege issue tied to the CNG Key Isolation Service. The vulnerability arises from improper memory handling in the Windows CNG Key Isolation Service, enabling local privilege escalation on affected Windows/Windows Server systems. Connected records also re...

CVE-2020-1427

CVE-2020-1427 is an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Affected product: Windows Network Connections Service (Windows). Vulnerable component: memory handling within the service, leading to code execution with ele...

CVE-2021-24107

Technical details for CVE-2021-24107 are not publicly provided in the connected documents; sources mention the vulnerability name in update KBs but do not specify affected products, root cause, or fixes.

CVE-2021-43245

CVE-2021-43245 is a Windows Digital TV Tuner Elevation of Privilege vulnerability. The NVD entry lists a local attack vector with low complexity and no authentication required, yielding partial confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH; AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:...

CVE-2010-0477

CVE-2010-0477 is a remote code execution vulnerability in the Microsoft SMB client. The SMB client in Windows 7 and Windows Server 2008 R2 can be tricked by specially crafted SMB responses (affecting both SMBv1 and SMBv2), allowing an unauthenticated remote attacker to execute arbitrary code on t...

CVE-2013-3661

CVE-2013-3661 affects Windows with the EPATHOBJ::bFlatten function in win32k.sys across Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, and Windows RT. The root cause is improper checking of linked-list traversal in PATHRECORD chains,...