CVE-2016-0195

Summary: CVE-2016-0195 is a remote code execution vulnerability in the Windows Imaging Component (WIC) affecting multiple Windows versions (Vista to Windows 10). The issue arises from improper handling of memory/objects in the Imaging Component, enabling remote attackers to run arbitrary code via...

CVE-2016-3238

The CVE-2016-3238 vulnerability affects the Windows Print Spooler and allows remote code execution when a crafted print driver is provided during printer installation. Affected products include multiple Windows client/server editions (Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 RT/1511, Win...

CVE-2016-3335

CVE-2016-3335 concerns the Microsoft Windows Common Log File System (CLFS) driver elevation of privilege. The advisory notes local users can gain higher privileges via a crafted application on affected OSes: Windows Vista SP2; Windows Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Windows Server...

CVE-2016-3375

The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...

CVE-2017-0109

Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...

CVE-2017-8727

CVE-2017-8727 is an RCE in the Windows Text Services Framework that can be triggered through memory handling in the Windows Text Services/IE edge scripting path. The connected KB entry confirms the flaw exists in Internet Explorer/Windows components and was addressed in Microsoft’s October 2017 p...

CVE-2013-3129

CVE-2013-3129 concerns a TrueType Font (TTF) parsing vulnerability that allows remote code execution. Affected products include Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5; Silverlight 5 prior to 5.1.20513.0; and GDI+, DirectWrite, Journal in various Windows versions (XP through Windows ...

CVE-2017-0090

CVE-2017-0090 is a real Uniscribe vulnerability in USP10 (Windows Uniscribe) where an invalid memory write in the MergeLigRecords function can be triggered by rendering text with a crafted font via API calls such as DrawText, leading to remote code execution. The connected Exploit-DB entries (e.g...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-0112

The vulnerability CVE-2017-0112 affects Uniscribe in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. It enables remote information disclosure by a crafted web site that causes Uniscribe to read process memory, exposing sensitive data. Exploitation is possible without user pr...

CVE-2017-0192

The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...

CVE-2017-8544

CVE-2017-8544 describes a Windows Search Information Disclosure vulnerability in the Windows Search service caused by how objects are handled in memory. Affected systems span multiple Windows versions: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Wind...

CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2017-0075

CVE-2017-0075 (Hyper‑V RCE) affects Microsoft Windows Hyper‑V, with vulnerable scope including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows 10 (Gold, 1511, 1607), and Windows Server 2016. The connected sources describe a remote co...

CVE-2017-0083

CVE-2017-0083 involves Uniscribe (USP10.dll) in Windows Vista SP2, Server 2008 SP2/R2 SP1 and Windows 7 SP1, where a crafted web page can trigger remote code execution. Connected exploit reports tie the issue to Uniscribe font processing, notably USP10!MergeLigRecords, with heap memory corruption...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-11824

The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...

CVE-2016-0184

CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...

CVE-2016-3218

CVE-2016-3218 corresponds to a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012, RT 8.1, 10) where kernel-mode drivers fail to handle objects in memory, enabling local privilege escalation via a crafted application. The i...

CVE-2016-3220

ATMFD.dll Elevation of Privilege vulnerability (CVE-2016-3220) affects the Adobe Type Manager Font Driver in Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/1607. Root cause: ATMFD.dll fails to properly handle objects in memory, enabling loc...

CVE-2016-3332

Technical details for CVE-2016-3332 are not publicly available in the provided connected documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2016-7184

The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...

CVE-2016-7210

CVE-2016-7210 affects atmfd.dll in multiple Windows editions (Vista through Windows 10 1511/1607 and corresponding Server releases). The vulnerability allows remote attackers to disclose memory contents of a victim process by delivering a crafted OpenType font on a web site, leading to informatio...

CVE-2017-11849

The CVE-2017-11849 entry concerns the Windows kernel information disclosure vulnerability. Affected software includes Windows kernel on Windows 7 SP1; Windows Server 2008 SP2/R2 SP1; Windows 8.1/RT 8.1; Windows Server 2012/R2; Windows 10 versions (Gold, 1511, 1607, 1703, 1709); and Windows Server...

CVE-2018-0788

CVE-2018-0788 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll) on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012/R2. The vulnerability stems from how ATMFD.dll handles objects in memory, allowing local elevation of privilege. Impact is ele...

CVE-2010-0269

CVE-2010-0269 is a remote code execution vulnerability in the Microsoft SMB client. The issue arises from improper memory allocation when parsing specially crafted SMB responses, enabling an unauthenticated attacker to execute arbitrary code on a vulnerable system by sending a crafted SMB respons...

CVE-2015-2373

CVE-2015-2373 is the RDP remote code execution vulnerability affecting Windows 7 SP1, Windows 8, and Windows Server 2012, caused by improper handling of crafted RDP packets in the RDP server. It can allow remote attackers to execute arbitrary code without authentication; public exploits exist. Mi...

CVE-2016-0049

CVE-2016-0049 describes a Windows Kerberos vulnerability where password changes could bypass authentication via a crafted KDC. Microsoft’s MS16-014 (KB3126041) patches this issue across affected Windows versions (Vista SP2, 2008 SP2, 2008 R2, 7 SP1, 8.1, 2012, 2012 R2, 10 RTM/1511). The advisory ...

CVE-2016-3299

Summary: CVE-2016-3299 is a NetBIOS spoofing vulnerability in multiple Windows platforms where NetBIOS responses can be validated incorrectly, allowing remote attackers to hijack network traffic or bypass Enhanced Protected Mode/application container protections and render untrusted browser conte...

CVE-2016-7246

CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...

CVE-2017-0111

CVE-2017-0111 covers Uniscribe memory disclosure in Microsoft Windows (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1). Connected docs show that Uniscribe’s usp10.dll code path can be reached via DrawText/Unicode text rendering, enabling an attacker-controlled font to read process memory and po...

CVE-2017-0119

CVE-2017-0119 involves Uniscribe (usp10.dll) on Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. A crafted web page can trigger Uniscribe processing via DrawText, allowing a remote attacker to disclose memory contents from the process address space (information disclosure) du...

CVE-2017-11853

Technical details for CVE-2017-11853 (affected Windows kernel versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from official advisories (MSRC) and regional databases.

CVE-2017-8587

CVE-2017-8587 corresponds to a Denial of Service in Windows Explorer when attempting to open a non-existent file. It affects Windows client/server platforms listed in the CVE description and is addressed by the Windows update KB4025674 (and related KBs in 2017 rollups). The CVSSv3 base score is 6...

CVE-2017-8633

The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...

CVE-2017-8694

CVE-2017-8694 is a local privilege escalation in the Windows kernel-mode driver (Win32k) caused by improper handling of memory objects. Affects Windows versions listed in the description (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 v...

CVE-2016-0182

CVE-2016-0182 – Windows Journal Memory Corruption Vulnerability : A memory corruption flaw in Windows Journal can enable remote code execution when a user opens a specially crafted Journal file (.jnt). Affected: Windows Journal in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2016-3254

CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...

CVE-2016-3286

CVE-2016-3286 affects Windows kernel-mode drivers (Win32k) across multiple OS versions (Vista through Windows 10 1511). The vulnerability arises in the Windows kernel-mode driver due to improper handling of memory objects, enabling a local attacker to gain elevated privileges via a crafted applic...

CVE-2016-7214

Technical details about CVE-2016-7214 are not publicly provided in the supplied documents. The connected EUVD/NVD entries do not reveal affected products or root causes here. Monitor for updates from official advisories.

CVE-2016-7219

CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...

CVE-2017-0089

CVE-2017-0089 affects Microsoft Windows Uniscribe (USP10) used by the Uniscribe font processing path in user32.dll. The vulnerability arises from a memory corruption in USP10!MergeLigRecords, enabling remote code execution when a user visits a crafted web page. Affected platforms listed in the in...

CVE-2017-8463

CVE-2017-8463 is described as a remote code execution vulnerability in Windows Explorer, triggered when Explorer improperly handles executable files and shares during rename operations. The issue affects multiple Windows versions (e.g., Windows 7, 8.1, Server 2012/R2, Windows 10 variants) and cou...

CVE-2017-8486

CVE-2017-8486 is a local information-disclosure vulnerability in Windows due to how Win32k handles objects in memory. Affected products include Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 (various builds), and Windows S...

CVE-2016-7221

CVE-2016-7221 is a Windows IME DLL-loading privilege-escalation issue. The IME loads DLLs via a registry-controlled mechanism and can be exploited by a locally authenticated user to gain higher privileges when an application initiates the IME. Public writeups (e.g., JVN/JVND) describe the exploit...

CVE-2017-0092

CVE-2017-0092 affects Uniscribe (usp10.dll) in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The vulnerability enables an attacker-controlled website to cause memory information disclosure from the affected process. The CVE entry lists a CVSS v3 base score of 4.3 (Medi...

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2017-8677

CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...

CVE-2017-8717

CVE-2017-8717 affects the Microsoft JET Database Engine, with a buffer overflow in memory handling of objects that can allow remote code execution. The CPAI advisory notes a remote attacker could exploit this by enticing a user to open a specially crafted Excel file on affected Windows versions. ...