CVE-2011-1985

CVE-2011-1985 affects the Windows kernel-mode driver win32k.sys. The issue arises from improper validation of user-mode input in Win32k, enabling local users to gain privileges or cause a denial of service via a crafted application, leading to a NULL pointer dereference and system crash. Affected...

CVE-2012-1870

CVE-2012-1870 describes a TLS CBC-mode vulnerability allowing plaintext data disclosure during HTTPS sessions (BEAST-like issue). Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1. The threat is that an attacker can sniff netwo...

CVE-2013-0008

CVE-2013-0008 describes a local privilege-escalation in Windows via the kernel‑mode driver win32k.sys. The vulnerability arises from improper handling of window broadcast messages, allowing a crafted local user‑mode application to elevate privileges. Affected Windows versions include Vista SP2, S...

CVE-2015-0094

CVE-2015-0094 is a Windows kernel-mode driver information-disclosure vulnerability where the affected kernel components do not properly restrict address information during a function call, enabling local attackers to bypass ASLR. Affected products include multiple Windows versions listed in sourc...

CVE-2015-1727

CVE-2015-1727 is a local privilege-escalation vulnerability in Windows kernel-mode driver Win32k.sys (buffer overflow). A crafted/local attacker can gain SYSTEM privileges via the Win32k Pool Buffer Overflow vulnerability affecting multiple Windows versions (from Windows Server 2003 SP2/R2 SP2 to...

CVE-2015-2364

CVE-2015-2364 concerns a privilege-escalation in the Windows Graphics Component caused by incorrect bitmap conversion. A local attacker can exploit this via a crafted application to gain elevated privileges. Affected products include Windows Server 2003 SP2/R2 SP2, Windows Vista SP2, Windows Serv...

CVE-2015-2549

CVE-2015-2549 is a Windows kernel memory corruption local privilege escalation vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8/8.1, 2012, RT, 10). The connected material confirms related CVEs (2549, 2550, 2552, 2553, 2554) and notes exploitation via a crafted l...

CVE-2015-6104

CVE-2015-6104 affects the Adobe Type Manager Library in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8/8.1, 2012, RT/8.1, 10 Gold/1511). The vulnerability allows remote code execution via a crafted embedded font, due to a flaw in font processing in Win32k/font handling (Windo...

CVE-2016-0007

CVE-2016-0007 is a local privilege escalation in the Windows sandbox: the sandbox implementation mishandles reparse points across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10 1511). A crafted application could exploit this to gain...

CVE-2016-0014

CVE-2016-0014 is a DLL-loading Elevation of Privilege vulnerability affecting multiple Windows versions (Vista through Windows 10 thresholds) where improper DLL loading allows a local attacker to gain complete control via a crafted application. Root cause: mishandling of DLL loading. Affected com...

CVE-2016-0093

CVE-2016-0093 is a Windows kernel Win32k elevation-of-privilege vulnerability (local). The initial description lists affected OSes (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012 Gold/R2, RT 8.1, Windows 10 Gold/1511) and notes a crafted application can gain privileges via the kernel-mode...

CVE-2018-8342

Summary (CVE-2018-8342): A local elevation-of-privilege flaw in Microsoft Windows’ Network Driver Interface Specification (NDIS) due to ndis.sys not validating the buffer length before copying memory. Affected: Windows 7 and Windows Server 2008 R2. Root cause: buffer-length check missing during m...

CVE-2019-1016

The CVE-2019-1016 entry concerns a vulnerability in the Windows GDI component where memory contents may be disclosed due to improper handling of objects. Attack vectors described include social engineering to lure users into opening crafted documents or visiting untrusted pages, leading to inform...

CVE-2019-1099

Technical details about CVE-2019-1099 are not publicly available in the provided documents. The connected items discuss related CVEs and advisories but do not specify affected products/versions/root cause/impact for this CVE. Monitor for updates.

CVE-2019-1284

CVE-2019-1284 is a DirectX elevation of privilege vulnerability. The issue arises from improper handling of objects in memory within DirectX, allowing a logged-on attacker to run arbitrary code in kernel mode via a specially crafted application, potentially enabling full control over the affected...

CVE-2010-0250

CVE-2010-0250 is a DirectShow/Quartz heap overflow vulnerability in Microsoft DirectX where the AVI/QUartz AVI parser misallocates a buffer when processing a crafted AVI file’s length field, enabling remote code execution. Affected components include DirectShow (AVI Filter) and Quartz, with impac...

CVE-2010-0487

CVE-2010-0487 describes a remote code execution vulnerability in Windows Cabinet File Viewer (cabview.dll) where the Authenticode signature verification omits certain fields from the digest for cabinet files. Affected: Cabinet File Viewer Shell Extension (cabview.dll) versions 5.1, 6.0, 6.1 on Wi...

CVE-2010-3941

Summary (CVE-2010-3941) : A local privilege-escalation in Windows is caused by a double-free in the kernel-mode driver win32k.sys. Affects multiple Windows editions: XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2, and Windows 7. The flaw enables local users to gain full privileg...

CVE-2013-1285

CVE-2013-1285 concerns Windows USB descriptor handling vulnerabilities in several Windows OS versions (XP SP2/SP3; Server 2003 SP2; Vista SP2; Server 2008 SP2/R2/R2 SP1; Windows 7; Windows 8; Server 2012). The issue arises from improper handling of objects in memory by USB kernel‑mode drivers, en...

CVE-2013-3195

The CVE-2013-3195 vulnerability affects the Windows common control library, specifically the DSA_InsertItem function in Comctl32.dll. It describes an integer/ memory allocation overflow that could allow remote code execution when a crafted value is supplied to an ASP.NET web application, affectin...

CVE-2013-3864

Technical details for CVE-2013-3864 are not publicly available in the provided connected documents. Monitor for updates from official advisories; the supplied references include NVD entries for related CVEs but no new specifics about this CVE.

CVE-2015-1696

Consolidated details from CNVD entries confirm CVE-2015-1696 concerns Microsoft Windows Journal file handling. The vulnerability arises when processing specially crafted Journal (.jnt) files, enabling a remote attacker to execute arbitrary code. Affected software scope includes Windows editions l...

CVE-2015-2507

CVE-2015-2507 is a local privilege-escalation in the Windows Adobe Type Manager Library. The vulnerability affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012 Gold/R2, RT/8.1, 10). The root cause is the Adobe Type Manager Library failing to prop...

CVE-2015-6103

CVE-2015-6103 affects the Adobe Type Manager Library in Windows Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012 (and RT) and Windows 10 1511. It allows remote code execution via a crafted embedded font. Public exploits exist (Exploit-DB entries 38714/38714), indicating observed exploi...

CVE-2016-0038

CVE-2016-0038 affects Windows Journal across multiple Windows releases (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2012 R2, Windows 10/1511). The vulnerability stems from improper handling/parsing of Journal files, enabling remote code execution when a user opens a crafted...

CVE-2016-3221

The CVE-2016-3221 entry describes a local privilege-escalation in Windows kernel-mode drivers (Win32k) across multiple OS versions (Windows Vista SP2, Server 2008 SP2/R2, Win7 SP1, Win8.1, Server 2012, Windows RT 8.1, Windows 10 Gold/1511) exploitable by a crafted application. Affected component:...

CVE-2017-8593

CVE-2017-8593 corresponds to an elevation-of-privilege flaw inMicrosoft Windows Win32k where objects in memory are not handled correctly. The exposed component is Win32k, and the affected OS family includes Windows 7 SP1, Windows 8.1, Windows 10 variants (including 1511, 1607, 1703), Windows Serv...

CVE-2017-8685

CVE-2017-8685 refers to a Windows kernel memory disclosure in win32k NtGdiEngCreatePalette. The vulnerability exposes uninitialized 1 KB of kernel stack memory when user-mode passes a palette color list, due to a missing pre-initialization step in the temporary kernel buffer and how the palette i...

CVE-2017-8691

CVE-2017-8691 affects Windows font handling, specifically when the Windows font library processes specially crafted embedded fonts. The vulnerability allows remote code execution on Windows Server 2008 SP2/R2 SP1 and Windows 7 SP1 via a crafted embedded font, with CVSSv3.0 vector AV:N/AC:L/PR:N/U...

CVE-2019-1049

CVE-2019-1049 is a Windows GDI information-disclosure vulnerability. The Windows GDI component may disclose memory contents, enabling an attacker to obtain sensitive data to further compromise a user’s system. Exploitation could occur by convincing a user to open a specially crafted document or v...

CVE-2019-1154

CVE-2019-1154 describes an information-disclosure vulnerability in the Windows GDI component where memory contents can be improperly disclosed. An attacker could exploit this by tricking a user into opening a crafted document or visiting an untrusted page to obtain information that may help furth...

CVE-2020-0844

CVE-2020-0844 is an elevation of privilege in Windows, tied to the Connected User Experiences and Telemetry Service. The underlying issue is improper handling of file operations by this service, which could allow a local attacker to run code with elevated privileges. Remediation text in connected...

CVE-2020-0871

CVE-2020-0871 is an information disclosure vulnerability in Windows Network Connections Service where objects in memory are not handled correctly, potentially exposing memory contents. The provided documents identify the vulnerability type and affected component but do not specify product version...

CVE-2009-2530

CVE-2009-2530 corresponds to an Internet Explorer memory corruption vulnerability (Uninitialized Memory Corruption) that could allow remote code execution when a user views a specially crafted Web page. Connected documents show Microsoft’s MS09-054 cumulative security update for Internet Explorer...

CVE-2010-3974

CVE-2010-3974 is a memory corruption vulnerability in the Windows Fax Cover Page Editor (fxscover.exe) that occurs when parsing crafted Fax cover pages (.cov). A remote attacker could execute arbitrary code on affected systems by convincing a user to open a malicious fax cover page file. Affected...

CVE-2011-0090

CVE-2011-0090 concerns Win32k.sys in the kernel-mode drivers of affected Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7). The vulnerability stems from improper validation of data passed from user mode to kernel mode, enabling local privilege e...

CVE-2011-1229

CVE-2011-1229 is a local privilege-escalation vulnerability in the Windows kernel identified as the Win32k NULL Pointer De-reference. It affects win32k.sys in multiple Windows platforms: XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2 and R2 SP1, and Windows 7 SP1. A crafted a...

CVE-2011-3415

CVE-2011-3415 is an open redirect vulnerability in the ASP.NET Forms Authentication component of Microsoft .NET Framework (2.0 SP2, 3.5 SP1, 3.5.1, 4.0). The issue arises during return URL validation in the login flow, allowing remote attackers to redirect victims to arbitrary sites and potential...

CVE-2012-2529

CVE-2012-2529 describes a kernel integer-overflow vulnerability in Microsoft Windows that enables local privilege escalation. The issue affects the Windows kernel on multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The root cause is improper ha...

CVE-2013-1287

The CVE-2013-1287 issue affects the USB kernel-mode drivers in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 R2 SP1, 7, 8, Server 2012). Root cause: objects in memory are not properly handled by USB descriptor processing, enabling physically proximate attackers to...

CVE-2015-0077

The CVE-2015-0077 issue affects Microsoft Windows kernel-mode drivers across multiple Windows families (Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012). The root cause is improper initialization of function buffers in kernel-mode drivers, enabling lo...

CVE-2015-1724

CVE-2015-1724 is a local privilege-escalation use-after-free in Windows kernel-object handling affecting multiple Windows versions (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1). The vulnerability lies in kernel-mode drivers and can be tr...

CVE-2015-2453

The CVE-2015-2453 CSRSS Local Elevation of Privilege vulnerability affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8, 8.1, Server 2012 Gold/R2, Windows RT Gold/8.1). A crafted application can continue running during a subsequent user login, enabling local user...

CVE-2015-6102

CVE-2015-6102 describes a Windows kernel information-disclosure vulnerability that allows local users to bypass KASLR and discover a driver base address. Affected are Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (in...

CVE-2016-0008

CVE-2016-0008 covers a Windows GDI32.dll ASLR bypass vulnerability. Affected software includes Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, and Windows RT Gold/8.1, where remote attackers could bypass ASLR via unspecified vectors. The v...

CVE-2016-0094

The CVE-2016-0094 entry concerns a local elevation-of-privilege vulnerability in Windows kernel-mode Win32k driver affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (Gold and 1511). The root cause is a flaw in the kern...

CVE-2017-0126

CVE-2017-0126 is an Uniscribe (usp10.dll) information-disclosure vulnerability affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue arises when untrusted or crafted web content triggers Uniscribe code paths via user32’s DrawText flow, enabling a remote attacke...

CVE-2017-0244

CVE-2017-0244 is a Windows kernel local privilege escalation affecting Windows Server 2008 SP2/R2 SP1 and Windows 7 SP1 (x64). The description states that locally authenticated users can gain privileges through a crafted application, with DoS possible on Windows 7 x64. The root cause involves imp...

CVE-2017-11852

CVE-2017-11852 affects the Windows GDI component in Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1. The vulnerability arises from improper disclosure of kernel memory addresses by the GDI component, enabling a logged-on attacker to execute a specially crafted application t...

CVE-2017-8473

CVE-2017-8473 affects multiple Windows platforms (Windows 7 SP1, Windows Server 2008 SP2/R2, 2012/R2, Windows 10 1511/1607, 2016). The root cause is an information-disclosure condition arising when the Windows kernel (Win32k) improperly initializes memory objects, enabling an authenticated attack...