CVE-2011-1237

The CVE-2011-1237 issue affects Windows kernel-mode driver win32k.sys across multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, Windows 7 SP1). Root cause: use-after-free in the win32k.sys driver object management, enabling a local attacker with crafted input to...

CVE-2013-1345

CVE-2013-1345 affects the Windows kernel-mode driver component Win32k.sys across multiple Windows/Server editions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7, 8, Server 2012, Windows RT). The vulnerability arises from improper handling of objects in memory within Win32k...

CVE-2015-2365

CVE-2015-2365 affects the Windows kernel component Win32k.sys (kernel-mode driver). A local attacker can gain privileges via a crafted application, leading to privilege escalation on multiple Windows platforms (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, Server 2012/R2, R...

CVE-2015-2433

CVE-2015-2433 is described as a local kernel ASLR bypass vulnerability in Microsoft Windows (affecting Vista SP2/Server 2008 SP2 and R2, Windows 7 SP1, 8/8.1, Server 2012, RT/RT 8.1, Windows 10). Connected records confirm public exploitation activity and linkage to a separate MS15-080/graphics-fo...

CVE-2015-6100

Technical details about CVE-2015-6100 are not provided in the connected documents; the initial entry describes a Windows kernel privilege escalation affecting multiple OS versions but lacks concrete technical specifics. Monitor for updates.

CVE-2016-3262

CVE-2016-3262 and CVE-2016-3263 describe a Graphics Device Interface (GDI+/GDI) information-disclosure problem in multiple Windows versions. The description specifies that remote attackers can bypass ASLR through unspecified vectors. Affected products include Windows Vista SP2, Windows Server 200...

CVE-2017-0117

CVE-2017-0117 concerns a vulnerability in Windows Uniscribe (usp10.dll) that can disclose memory contents when rendering Unicode text via a crafted web site. Connected sources indicate exploitation in the wild (e.g., exploit-db entry 41655) and show that the issue manifests through user32/glyph r...

CVE-2017-0125

CVE-2017-0125 affects the Uniscribe component in Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. The vulnerability allows a remote attacker to obtain sensitive information from a process’s memory via a crafted web site. Connected documents corroborate Uniscribe issues and exploitati...

CVE-2017-8485

Technical details about CVE-2017-8485 are not provided in the connected documents. The available materials do not specify affected versions, root cause, impact, or fixes. Monitor for updates.

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2017-8720

CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...

CVE-2019-1420

Technical details for CVE-2019-1420 are not publicly provided in the connected documents. Monitor for updates from official sources; no explicit exploit/victim/product/version data is available here.

CVE-2020-0752

CVE-2020-0752 is a Windows privilege-escalation vulnerability in the Windows Search Indexer related to how it handles objects in memory. The issue is described as allowing an attacker with local access to potentially execute code with elevated permissions, with the CVSS provided by the primary en...

CVE-2020-0880

CVE-2020-0880 describes an information disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. The vulnerability affects Windows GDI memory handling; exploitation could allow an attacker to obtain information to further compromise the target system...

CVE-2020-0885

CVE-2020-0885 concerns the Windows GDI component, where memory contents can be improperly disclosed (information disclosure vulnerability). The vulnerability arises from how GDI handles objects in memory, enabling potential leakage of memory contents. The public documentation consistently describ...

CVE-2020-1078

Technical details about CVE-2020-1078 (Windows Installer Elevation of Privilege) are not provided in the connected documents. Monitor for updates.

CVE-2020-1396

CVE-2020-1396 affects Microsoft Windows ALPC Elevation of Privilege. CNVD-2020-45187 describes a vulnerability where Windows ALPC is not correctly handling calls, allowing an attacker who logs on and runs a crafted application to execute arbitrary code with local system privileges. The connected ...

CVE-2009-3671

CVE-2009-3671 concerns Microsoft Internet Explorer 8. The issue is a memory handling vulnerability where an object that is either not properly initialized or has been deleted is accessed, causing memory corruption and enabling remote code execution. The vulnerability is described as Uninitialized...

CVE-2014-1817

CVE-2014-1817 concerns a vulnerability in usp10.dll (Uniscribe) that affects multiple Windows versions (Server 2003 SP2, Vista, Server 2008/2008 R2, Windows 7/8/8.1, Server 2012/R2) and related Office components. The issue arises from processing a crafted EMF+ record in a font file, enabling remo...

CVE-2014-6318

CVE-2014-6318 refers to a vulnerability in the Remote Desktop Protocol (RDP) audit logon feature across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1). The issue is that failed login attempts with valid credentials are not properly logged, ...

CVE-2015-0081

CVE-2015-0081 affects Windows Text Services (WTS) and allows remote code execution when a user opens a crafted web site or file. Affected products include Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012/2012 R2, and Windows RT/8.1. Root ca...

CVE-2015-2428

CVE-2015-2428 affects Windows Object Manager interactions with object symbolic links originated in sandboxed processes, enabling local privilege escalation by failing to constrain impersonation levels. The issue arises when a sandboxed process creates an Object Manager symbolic link; the kernel a...

CVE-2015-2472

CVE-2015-2472 is a Remote Desktop Session Host Spoofing vulnerability. RDSH in RDP up to Windows 8.1/Server 2012 and related editions does not properly verify certificates, allowing a MITM attacker to spoof a TLS/SSL session with a crafted certificate that has valid Issuer and Serial Number field...

CVE-2015-2514

CVE-2015-2514 pertains to Windows Journal remote code execution via a crafted .jnt file affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1, and Windows 10. The connected records also reference CVE-2015-2513 and CVE-2...

CVE-2015-6126

CVE-2015-6126 is a local elevation-of-privilege vulnerability in the Pragmatic General Multicast (PGM) protocol implementation in Windows. The root cause is a race condition that can lead to references to memory that has already been freed (use-after-free), enabling a logged-in attacker to gain p...

CVE-2016-3334

Technical details for CVE-2016-3334 are not publicly available in the provided documents; monitor for updates.

CVE-2017-8467

CVE-2017-8467 is a Windows graphics elevation-of-privilege vulnerability in the graphics/Win32k component. The root cause is theGraphics subsystem failing to properly handle objects in memory, enabling a local attacker to gain higher privileges. Affected platforms include Windows 7 SP1, Windows S...

CVE-2017-8482

Technical details about CVE-2017-8482 are not publicly provided in the connected documents. The initial description gives general info, but no concrete affected products, versions, root cause, impact, or fix is documented here. Monitor for updates.

CVE-2017-8709

The CVE-2017-8709 entry concerns a Windows kernel information disclosure vulnerability in which the Windows kernel component improperly handles objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Win...

CVE-2019-1361

CVE-2019-1361 is a confirmed vulnerability in Microsoft Graphics Components where memory objects are not handled safely, enabling an information disclosure. An attacker could obtain sensitive information by convincing a user to open a specially crafted file. The vulnerability is addressed by Micr...

CVE-2019-1434

The CVE-2019-1434 entry describes a Windows elevation-of-privilege issue in the Win32k kernel-mode driver caused by improper handling of objects in memory. The vulnerability is local, with a LOW authentication requirement and a HIGH impact on confidentiality, integrity, and availability per CVSS ...

CVE-2020-0736

CVE-2020-0736 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. An authenticated attacker could exploit this by running a specially crafted application to obtain information that could aid further compromise. Microsoft attributes a fix to t...

CVE-2020-1402

CVE-2020-1402 is an elevation-of-privilege flaw in Microsoft Windows ActiveX Installer Service. The CNVD-2020-52928 entry confirms the vulnerability stems from improper handling of memory within the ActiveX Installer Service, enabling a local attacker who can execute code on the victim system to ...

CVE-2021-26872

CVE-2021-26872 is described as a Windows Event Tracing Elevation of Privilege vulnerability. The NVD entry provides a CVSS v3.1 base score of 7.8 (Local, Low attack complexity, Privileges required: Low, No user interaction) with high impact on confidentiality, integrity, and availability. Connect...

CVE-2010-0492

Microsoft Internet Explorer 8 contains a use-after-free in mstime.dll involving the CTimeAction object during TIME2 handling, causing memory corruption and remote code execution when a user visits a crafted page. The issue affects IE 8 and is officially addressed by Microsoft in MS10-018 (Cumulat...

CVE-2013-1300

CVE-2013-1300 maps to a Win32k memory handling vulnerability in win32k.sys affecting multiple Windows XP/Vista/7/8/2003/Server variants. The issue is a local privilege escalation via a crafted application that abuses kernel memory object handling, enabling an attacker to gain SYSTEM-level privile...

CVE-2014-0323

CVE-2014-0323 affects Microsoft Windows kernel-mode driver win32k.sys, enabling local attackers to disclose kernel memory contents or trigger a system hang via a crafted application. Affected products include Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windo...

CVE-2015-1725

CVE-2015-1725 is a local privilege-escalation vulnerability in Windows kernel-mode via a buffer overflow in Win32k.sys affecting Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 (Gold/R2) and Windows RT 8.x. Root cause: kernel-mo...

CVE-2015-2509

CVE-2015-2509 concerns Windows Media Center in Vista SP2, Win7 SP1, Win8, and Win8.1. The vulnerability arises in Windows Media Center’s handling of Media Center Link (.mcl) files, where a crafted mcl file can lead to arbitrary code execution. Exploitation described in public sources involves del...

CVE-2015-2553

CVE-2015-2553 affects the Windows kernel’s handling of mountpoint creation for reparse points, enabling local privilege escalation via sandboxed environments on Windows Vista/7/8/8.1/10 and corresponding server editions. Public writeups describe bypasses of the mitigation introduced by MS15-111 (...

CVE-2016-0142

CVE-2016-0142 is the Microsoft Video Control remote code execution vulnerability documented by NVD. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The issue arises from improper handling of objects in memory within the Video Cont...

CVE-2017-11772

CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...

CVE-2017-8471

Technical details for CVE-2017-8471 are not provided in the supplied documents. Connected sources reference Windows updates and malware notes but do not describe affected components, root cause, or remediation for this CVE.

CVE-2017-8554

CVE-2017-8554 corresponds to a Windows kernel local information disclosure affecting Win32k.sys across multiple Windows versions. The CNVD-2017-12584 entry notes a local information disclosure in Win32k.sys exploitable via a crafted application to obtain memory contents. Microsoft security update...

CVE-2018-0815

CVE-2018-0815 affects the Windows GDI subsystem in Windows Server 2008 SP2, R2 SP1, and Windows 7 SP1. The vulnerability is an elevation of privilege caused by how objects are handled in memory. The entry notes it is distinct from CVE-2018-0816 and CVE-2018-0817. The provided data includes CVSS v...

CVE-2018-0855

CVE-2018-0855 affects the Windows Embedded OpenType (EOT) font engine in Windows 7 SP1 and Windows Server 2008 R2, where embedding fonts is mishandled and information disclosure could occur. Root cause: improper handling/parsing of embedded fonts in the EOT engine. Impact (as stated): information...

CVE-2018-8346

CVE-2018-8346 is a remote code execution vulnerability in Microsoft Windows triggered when a .LNK shortcut file is processed. The affected products listed in the provided sources include Windows Server 2008, Windows 7, and Windows Server 2008 R2. The vulnerability’s impact is described as remote ...

CVE-2018-8622

CVE-2018-8622 is a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, and Windows Server 2008 R2 (per...

CVE-2019-1011

CVE-2019-1011 relates to an information disclosure in the Windows GDI component. The vulnerability occurs when GDI improperly discloses memory contents, potentially allowing an attacker to obtain sensitive information to facilitate further compromise. Exploitation paths described include convinci...

CVE-2019-1047

CVE-2019-1047 describes an information disclosure in the Windows GDI component where memory contents are improperly disclosed. The root cause is how the GDI component handles objects in memory, allowing an attacker to obtain information that could aid further compromise. Exploitation vectors incl...