2367 matches found
CVE-2010-1883
CVE-2010-1883 describes an integer overflow in the Microsoft Windows Embedded OpenType (EOT) Font Engine that could allow remote code execution. The vulnerability occurs when parsing certain tables in embedded fonts (notably during handling of the hdmx records) and affects multiple Windows produc...
CVE-2010-1890
CVE-2010-1890 affects the Windows kernel ACL validation on kernel objects (nt!SeObjectCreateSaclAccessBits). The root cause is improper bounds checking of ACL/ACE data, allowing a local attacker to trigger a denial-of-service reboot via a crafted application on affected platforms. Affected produc...
CVE-2010-3941
Summary (CVE-2010-3941) : A local privilege-escalation in Windows is caused by a double-free in the kernel-mode driver win32k.sys. Affects multiple Windows editions: XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2, and Windows 7. The flaw enables local users to gain full privileg...
CVE-2010-3974
CVE-2010-3974 is a memory corruption vulnerability in the Windows Fax Cover Page Editor (fxscover.exe) that occurs when parsing crafted Fax cover pages (.cov). A remote attacker could execute arbitrary code on affected systems by convincing a user to open a malicious fax cover page file. Affected...
CVE-2012-1850
CVE-2012-1850 affects the LanmanWorkstation Remote Administration Protocol (RAP) handling in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2/R2 SP1, and Windows 7 Gold/SP1). The RAP implementation mishandles RAP responses, enabling remote attackers to cause a...
CVE-2012-1865
CVE-2012-1865 affects Microsoft Windows kernel- mode drivers (notably win32k.sys) across multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The root cause, as described in the CVE entry, is that user-mode input passed to kernel mode for driver ob...
CVE-2013-0075
CVE-2013-0075 is a remote DoS in the Windows TCP/IP stack: a crafted packet terminating a TCP connection can reboot affected hosts. Affected: Windows Vista SP2; Windows Server 2008 SP2/R2/R2 SP1; Windows 7 SP1/Gold; Windows 8; Windows Server 2012; Windows RT. Root cause: improper handling of a co...
CVE-2013-1273
CVE-2013-1273 is a race condition in the win32k.sys kernel-mode driver that can allow local privilege escalation and reading arbitrary kernel memory on affected Windows platforms (XP SP2-SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP0-SP1). The vulnerability stems from timing/o...
CVE-2013-1286
Summary: CVE-2013-1286 is a Windows USB Descriptor Vulnerability. The exposed flaw lies in USB kernel-mode drivers on Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, and Server 2012, where objects in memory are not properly handled, allowing physicall...
CVE-2013-1287
The CVE-2013-1287 issue affects the USB kernel-mode drivers in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 R2 SP1, 7, 8, Server 2012). Root cause: objects in memory are not properly handled by USB descriptor processing, enabling physically proximate attackers to...
CVE-2013-1294
The CVE-2013-1294 entry describes a kernel race-condition vulnerability in the Windows family (XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, Windows RT) where improper handling of in-memory objects can be abused by a crafted local application to ...
CVE-2013-1333
CVE-2013-1333 is a vulnerability in Windows 7 SP1 where a buffer overflow in win32k.sys (kernel-mode driver) can allow local privilege escalation by manipulating memory objects. The issue is due to improper handling of objects in memory, enabling an attacker with local access to gain elevated pri...
CVE-2015-0059
CVE-2015-0059 is the Windows kernel-mode TrueType font parsing remote code execution vulnerability (win32k.sys) exposed via crafted TTF files. Affects multiple Windows versions including Windows 7, Windows 8/8.1, Windows Server 2008 R2 SP1, Windows Server 2012, and Windows RT/8.1; root cause is i...
CVE-2015-0060
CVE-2015-0060 is a Windows kernel-mode font handling vulnerability affecting the font mapper in win32k.sys across multiple Windows versions (Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, 7, 8, 8.1, Server 2012/2012 R2, RT). The root cause is improper font scaling in the font mapper, which allow...
CVE-2015-0073
CVE-2015-0073 concerns the Windows Registry Virtualization feature. The Windows kernel’s registry virtualization mechanism does not properly restrict changes to virtual stores, enabling a local attacker to elevate privileges via a crafted application. The vulnerability affects multiple Windows ve...
CVE-2015-1697
CVE-2015-1697 relates to a Windows Journal remote code execution vulnerability. Current sources confirm affected platforms include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, and Windows RT Gold/8.1, where processing a crafted ...
CVE-2015-2461
The CVE-2015-2461 entry is supported by connected documentation describing an ATMFD.DLL OpenType font parsing vulnerability in the Windows Adobe Type Manager Library. The exploitable condition is an out-of-bounds read in ATMFD.DLL when handling a crafted OpenType font, specifically triggered by a...
CVE-2016-0041
CVE-2016-0041 is a Windows DLL loading vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10, IE 10–11). The issue is described as mishandling DLL loading, enabling local privilege escalation via a crafted application. Connected advi...
CVE-2016-0094
The CVE-2016-0094 entry concerns a local elevation-of-privilege vulnerability in Windows kernel-mode Win32k driver affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (Gold and 1511). The root cause is a flaw in the kern...
CVE-2017-11852
CVE-2017-11852 affects the Windows GDI component in Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1. The vulnerability arises from improper disclosure of kernel memory addresses by the GDI component, enabling a logged-on attacker to execute a specially crafted application t...
CVE-2021-26861
CVE-2021-26861 is a Windows Graphics Component remote code execution vulnerability. Public records identify the affected component as the Windows Graphics Component; the underlying issue is reflected in the CVSS3 metrics (base score 7.8 HIGH, LOCAL exploit, user interaction required, and high imp...
CVE-2009-2530
CVE-2009-2530 corresponds to an Internet Explorer memory corruption vulnerability (Uninitialized Memory Corruption) that could allow remote code execution when a user views a specially crafted Web page. Connected documents show Microsoft’s MS09-054 cumulative security update for Internet Explorer...
CVE-2010-0819
CVE-2010-0819: Elevation of privilege in the Windows OpenType Compact Font Format (CFF) Driver due to improper validation when copying data from user mode to kernel mode. Affected: Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, and Windows 7. Local attacker with...
CVE-2011-1885
The CVE-2011-1885 issue affects Win32k.sys in multiple Windows OS versions (Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2/R2 SP1, Windows 7 Gold/SP1). It is a local privilege escalation caused by a NULL pointer dereference in kernel‑mode drivers, allowing a crafted a...
CVE-2011-1894
The CVE-2011-1894 issue affects the MHTML protocol handler used by Microsoft Windows components (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/R2, Windows 7 SP1). The vulnerability arises from improper handling of a MIME format in requests for embedded content within an HTML docume...
CVE-2013-3198
CVE-2013-3198 affects the NTVDM subsystem in the Windows kernel on 32-bit Windows XP SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2, Windows 7 SP1, and Windows 8. It relies on improper validation of kernel-memory addresses, enabling local privilege escalation or memory corruption (DoS) via a cr...
CVE-2014-0262
The CVE-2014-0262 issue affects Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1, specifically the Win32k.sys kernel-mode driver. The vulnerability arises during the processing of window handles, where thread-owned objects are not properly considered, enabling local privilege escalation via...
CVE-2015-1696
Consolidated details from CNVD entries confirm CVE-2015-1696 concerns Microsoft Windows Journal file handling. The vulnerability arises when processing specially crafted Journal (.jnt) files, enabling a remote attacker to execute arbitrary code. Affected software scope includes Windows editions l...
CVE-2015-1720
CVE-2015-1720 is a local privilege-escalation vulnerability in Windows kernel-mode drivers caused by a use-after-free in kernel objects. A crafted application can exploit this to gain elevated privileges (kernel mode). Affected products include Windows Server 2003 SP2/R2 SP2, Windows Vista SP2, S...
CVE-2015-1721
CVE-2015-1721 is the Windows kernel-mode driver null-pointer dereference in Win32k.sys that can allow local privilege escalation or denial of service. Affected products span Windows Server 2003/2008/2012 families, Windows Vista/7/8/8.1, and Windows RT/Server variants (Win32k.sys). Root cause: NUL...
CVE-2015-1726
CVE-2015-1726 is a local privilege-escalation use-after-free vulnerability in Windows kernel-mode drivers (the kernel brush object) affecting Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (including R2) and RT 8.1. The underlying issu...
CVE-2015-2512
CVE-2015-2512 is a local privilege escalation in the Adobe Type Manager Library (Font Driver) on Windows. The vulnerability arises from improper handling of objects in memory within the Font Driver, allowing a crafted application to execute with elevated privileges (SYSTEM) on affected Windows ve...
CVE-2015-2530
CVE-2015-2530 affects Windows Journal across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10. The vulnerability enables remote code execution via a crafted .jnt file (Windows Journal RCE Vulnerability), a distinct issue from CVE-2015-2513 and CVE-2...
CVE-2010-3943
CVE-2010-3943 affects Windows kernel-mode Win32k.sys, where driver objects are not properly linked, enabling local privilege escalation through linked-list corruption. Affected products include Windows XP (SP2/SP3), Windows Server 2003 (SP2), Windows Vista (SP1/SP2), Windows Server 2008 (Gold, SP...
CVE-2013-3200
CVE-2013-3200 concerns a local-privilege-escalation in Windows USB handling. The vulnerability exists in kernel-mode USB drivers across multiple Windows releases (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT). A crafted USB devi...
CVE-2014-1807
The CVE-2014-1807 issue is a Windows Shell privilege-escalation vulnerability tied to the ShellExecute path/file-association handling in Windows Shell. A local attacker could exploit this by delivering a crafted application, taking advantage of improper file-association processing to execute code...
CVE-2014-6317
CVE-2014-6317 is a denial-of-service vulnerability in Windows kernel-mode driver code (win32k.sys) caused by an array index error when loading TrueType font files. The issue affects multiple Windows client and server SKUs (e.g., Windows 7, 8/8.1, Vista, Windows Server 2003/2008/2012 and RT varian...
CVE-2014-6322
CVE-2014-6322 is a Windows Audio Service elevation-of-privilege vulnerability (MS14-071). Affects Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Server 2012/2012 R2, and Windows RT. Root cause involves the Windows Audio service components (audiosrv.dll, audioses.dll, audioks...
CVE-2016-0016
CVE-2016-0016 is a Windows DLL loading vulnerability that enables local privilege escalation via a crafted application. Affected products include Windows Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 families (as listed in the CVE entry). Root cause: mishandlin...
CVE-2016-0048
CVE-2016-0048 is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10, and 1511). Root cause: kernel-mode Win32k.sys memory handling bug that allows a crafted local application to gain full pr...
CVE-2017-0128
CVE-2017-0128 pertains to a Microsoft Uniscribe information-disclosure vulnerability in Windows fonts handling. The Windows user-mode Uniscribe component (usp10.dll) can be reached via GDI font rendering paths (DrawText) or Language Pack workflows (lpk.dll through user32), allowing an attacker-co...
CVE-2020-1179
Summary of CVE-2020-1179 (Windows GDI Information Disclosure Vulnerability) : The vulnerability affects the Windows Graphics Device Interface (GDI) component, where memory contents may be improperly disclosed, enabling information exposure on vulnerable systems. Related entries (CVE-2020-0963, CV...
CVE-2010-0494
CVE-2010-0494 is the HTML Element Cross-Domain Vulnerability in Internet Explorer (IE6/6 SP1/7/8) that allows information disclosure when a user drags one IE window across another. The issue affects IE’s handling of cross-domain scripting context and is addressed by Microsoft Security Bulletin MS...
CVE-2011-1267
CVE-2011-1267 affects the SMB server in Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold, SP1). The vulnerability allows remote attackers to cause a denial of service (system hang) by sending crafted SMB requests (SMBv1 or SMBv2). Multiple connected sources ...
CVE-2011-2013
The CVE-2011-2013 issue is a remote code execution vulnerability in the Windows TCP/IP stack caused by an integer overflow while processing UDP packets sent to a closed port. Affected products include Windows Vista SP2, Windows Server 2008 SP2, R2 and R2 SP1, and Windows 7 (Gold and SP1). Exploit...
CVE-2012-0174
CVE-2012-0174 affects Windows through tcpip.sys where outbound broadcast traffic is not properly filtered by the Windows Firewall, enabling a local attacker to observe broadcast traffic and potentially bypass firewall rules on affected systems (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1). Root ...
CVE-2012-5362
CVE-2012-5362 describes a DoS in the IPv6 stack of Microsoft Windows 7 and earlier caused by a flood of ICMPv6 Neighbor Solicitation messages. The CVE is tied to the Windows IPv6 ND implementation and allows remote attackers to exhaust CPU/resources, leading to potential system unavailability. Th...
CVE-2013-1341
CVE-2013-1341 affects the Windows kernel component win32k.sys (kernel-mode drivers) and allows local privilege escalation via a crafted application on several Windows families. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8. Root cause: ...