CVE-2018-0788

CVE-2018-0788 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll) on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012/R2. The vulnerability stems from how ATMFD.dll handles objects in memory, allowing local elevation of privilege. Impact is ele...

CVE-2013-3129

CVE-2013-3129 concerns a TrueType Font (TTF) parsing vulnerability that allows remote code execution. Affected products include Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5; Silverlight 5 prior to 5.1.20513.0; and GDI+, DirectWrite, Journal in various Windows versions (XP through Windows ...

CVE-2016-3335

CVE-2016-3335 concerns the Microsoft Windows Common Log File System (CLFS) driver elevation of privilege. The advisory notes local users can gain higher privileges via a crafted application on affected OSes: Windows Vista SP2; Windows Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Windows Server...

CVE-2016-3348

CVE-2016-3348 is a local elevation-of-privilege vulnerability in the Windows kernel-mode driver Win32k.sys. The root cause is how the kernel-mode driver handles objects in memory, which an attacker can exploit by running a crafted application after logging in to gain kernel-level privileges. Affe...

CVE-2016-7218

Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...

CVE-2017-0119

CVE-2017-0119 involves Uniscribe (usp10.dll) on Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. A crafted web page can trigger Uniscribe processing via DrawText, allowing a remote attacker to disclose memory contents from the process address space (information disclosure) du...

CVE-2016-0195

Summary: CVE-2016-0195 is a remote code execution vulnerability in the Windows Imaging Component (WIC) affecting multiple Windows versions (Vista to Windows 10). The issue arises from improper handling of memory/objects in the Imaging Component, enabling remote attackers to run arbitrary code via...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-0083

CVE-2017-0083 involves Uniscribe (USP10.dll) in Windows Vista SP2, Server 2008 SP2/R2 SP1 and Windows 7 SP1, where a crafted web page can trigger remote code execution. Connected exploit reports tie the issue to Uniscribe font processing, notably USP10!MergeLigRecords, with heap memory corruption...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0111

CVE-2017-0111 covers Uniscribe memory disclosure in Microsoft Windows (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1). Connected docs show that Uniscribe’s usp10.dll code path can be reached via DrawText/Unicode text rendering, enabling an attacker-controlled font to read process memory and po...

CVE-2017-0250

CVE-2017-0250 corresponds to a remote code execution vulnerability in the Microsoft JET Database Engine present in Windows components (e.g., older Office/Jet usage). The issue is a buffer overflow that could allow an attacker to take control of the affected system. Connected updates (KBxxxx-Oct 2...

CVE-2017-8587

CVE-2017-8587 corresponds to a Denial of Service in Windows Explorer when attempting to open a non-existent file. It affects Windows client/server platforms listed in the CVE description and is addressed by the Windows update KB4025674 (and related KBs in 2017 rollups). The CVSSv3 base score is 6...

CVE-2017-8718

CVE-2017-8718 is a remote code execution vulnerability in the Microsoft JET Database Engine that affects Windows components across multiple OS versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 1511–1703, Windows Server 2016). Root caus...

CVE-2016-3272

CVE-2016-3272 is a Windows kernel information disclosure vulnerability caused by improper handling of page-fault system calls in the Windows kernel. A local attacker could disclose information from one process to another. Affected products include Windows 8.1, Windows Server 2012/2012 R2, Windows...

CVE-2016-3299

Summary: CVE-2016-3299 is a NetBIOS spoofing vulnerability in multiple Windows platforms where NetBIOS responses can be validated incorrectly, allowing remote attackers to hijack network traffic or bypass Enhanced Protected Mode/application container protections and render untrusted browser conte...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

CVE-2017-0089

CVE-2017-0089 affects Microsoft Windows Uniscribe (USP10) used by the Uniscribe font processing path in user32.dll. The vulnerability arises from a memory corruption in USP10!MergeLigRecords, enabling remote code execution when a user visits a crafted web page. Affected platforms listed in the in...

CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2016-3220

ATMFD.dll Elevation of Privilege vulnerability (CVE-2016-3220) affects the Adobe Type Manager Font Driver in Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/1607. Root cause: ATMFD.dll fails to properly handle objects in memory, enabling loc...

CVE-2016-3342

Technical details for CVE-2016-3342 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2017-0092

CVE-2017-0092 affects Uniscribe (usp10.dll) in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The vulnerability enables an attacker-controlled website to cause memory information disclosure from the affected process. The CVE entry lists a CVSS v3 base score of 4.3 (Medi...

CVE-2017-0109

Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...

CVE-2017-0113

CVE-2017-0113 concerns Uniscribe in Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. The connected documents confirm it as an information-disclosure vulnerability in the Uniscribe component accessed via APIs like DrawText, enabling an attacker-controlled web resource to potentially r...

CVE-2017-11824

The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...

CVE-2010-0269

CVE-2010-0269 is a remote code execution vulnerability in the Microsoft SMB client. The issue arises from improper memory allocation when parsing specially crafted SMB responses, enabling an unauthenticated attacker to execute arbitrary code on a vulnerable system by sending a crafted SMB respons...

CVE-2015-2373

CVE-2015-2373 is the RDP remote code execution vulnerability affecting Windows 7 SP1, Windows 8, and Windows Server 2012, caused by improper handling of crafted RDP packets in the RDP server. It can allow remote attackers to execute arbitrary code without authentication; public exploits exist. Mi...

CVE-2016-0182

CVE-2016-0182 – Windows Journal Memory Corruption Vulnerability : A memory corruption flaw in Windows Journal can enable remote code execution when a user opens a specially crafted Journal file (.jnt). Affected: Windows Journal in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2016-3218

CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...

CVE-2016-3332

Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2017-0091

CVE-2017-0091 is an information-disclosure vulnerability in Microsoft Windows, affecting the Uniscribe (usp10.dll) font‑handling component used by DrawText and related text-rendering paths. The root cause is memory access issues in Uniscribe’s handling of complex TrueType/OpenType typography tabl...

CVE-2017-11851

The CVE-2017-11851 affects the Windows kernel information disclosure vulnerability: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 (versions 1511, 1607, 1703, 1709), Windows Server 2016, and Server 1709. It arises from improper handling of objects in...

CVE-2017-11853

Technical details for CVE-2017-11853 (affected Windows kernel versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from official advisories (MSRC) and regional databases.

CVE-2017-8463

CVE-2017-8463 is described as a remote code execution vulnerability in Windows Explorer, triggered when Explorer improperly handles executable files and shares during rename operations. The issue affects multiple Windows versions (e.g., Windows 7, 8.1, Server 2012/R2, Windows 10 variants) and cou...

CVE-2016-0049

CVE-2016-0049 describes a Windows Kerberos vulnerability where password changes could bypass authentication via a crafted KDC. Microsoft’s MS16-014 (KB3126041) patches this issue across affected Windows versions (Vista SP2, 2008 SP2, 2008 R2, 7 SP1, 8.1, 2012, 2012 R2, 10 RTM/1511). The advisory ...

CVE-2016-0133

CVE-2016-0133 concerns a kernel-elevation vulnerability in the USB Mass Storage Class driver used by Windows variants (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10). The root cause is improper validation of objects in memory within the USB Mass Storage driver, allowing a physically...

CVE-2016-0184

CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...

CVE-2016-3254

CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...

CVE-2016-7210

CVE-2016-7210 affects atmfd.dll in multiple Windows editions (Vista through Windows 10 1511/1607 and corresponding Server releases). The vulnerability allows remote attackers to disclose memory contents of a victim process by delivering a crafted OpenType font on a web site, leading to informatio...

CVE-2017-0246

CVE-2017-0246 is a local elevation of privilege in the Windows Graphics Component (kernel-mode, win32k) affecting multiple Windows versions (Windows 7 SP1 x64 and later, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows 10 1511/1607, Windows Server 2012/2016, RT 8.1). Root cause concerns the G...

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2017-8633

The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...

CVE-2010-0477

CVE-2010-0477 is a remote code execution vulnerability in the Microsoft SMB client. The SMB client in Windows 7 and Windows Server 2008 R2 can be tricked by specially crafted SMB responses (affecting both SMBv1 and SMBv2), allowing an unauthenticated remote attacker to execute arbitrary code on t...

CVE-2016-7219

CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...

CVE-2017-0075

CVE-2017-0075 (Hyper‑V RCE) affects Microsoft Windows Hyper‑V, with vulnerable scope including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows 10 (Gold, 1511, 1607), and Windows Server 2016. The connected sources describe a remote co...

CVE-2017-8581

CVE-2017-8581 is a Win32k elevation of privilege vulnerability affecting multiple Windows platforms (Windows 7/8.1/10 and corresponding Server editions) where improper handling of objects in memory could allow an attacker to run code with elevated privileges. The provided documents identify the a...

CVE-2017-8590

CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...

CVE-2017-8677

CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...

CVE-2017-8678

CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...