CVE-2015-2373

CVE-2015-2373 is the RDP remote code execution vulnerability affecting Windows 7 SP1, Windows 8, and Windows Server 2012, caused by improper handling of crafted RDP packets in the RDP server. It can allow remote attackers to execute arbitrary code without authentication; public exploits exist. Mi...

CVE-2016-0182

CVE-2016-0182 – Windows Journal Memory Corruption Vulnerability : A memory corruption flaw in Windows Journal can enable remote code execution when a user opens a specially crafted Journal file (.jnt). Affected: Windows Journal in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-0091

CVE-2017-0091 is an information-disclosure vulnerability in Microsoft Windows, affecting the Uniscribe (usp10.dll) font‑handling component used by DrawText and related text-rendering paths. The root cause is memory access issues in Uniscribe’s handling of complex TrueType/OpenType typography tabl...

CVE-2017-0113

CVE-2017-0113 concerns Uniscribe in Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. The connected documents confirm it as an information-disclosure vulnerability in the Uniscribe component accessed via APIs like DrawText, enabling an attacker-controlled web resource to potentially r...

CVE-2016-0049

CVE-2016-0049 describes a Windows Kerberos vulnerability where password changes could bypass authentication via a crafted KDC. Microsoft’s MS16-014 (KB3126041) patches this issue across affected Windows versions (Vista SP2, 2008 SP2, 2008 R2, 7 SP1, 8.1, 2012, 2012 R2, 10 RTM/1511). The advisory ...

CVE-2016-3216

CVE-2016-3216 involves GDI32.dll in the Windows Graphics Component, where memory handling flaws allow remote attackers to bypass ASLR and disclose memory contents. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT ...

CVE-2016-3239

The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...

CVE-2016-7260

CVE-2016-7260 affects multiple Windows releases via a Win32k.sys/Win32k component elevation of privilege vulnerability. The kernel-mode drivers in Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10 (incl. 1511, 1607), and Server 2016 allow local users to gain privileg...

CVE-2017-0089

CVE-2017-0089 affects Microsoft Windows Uniscribe (USP10) used by the Uniscribe font processing path in user32.dll. The vulnerability arises from a memory corruption in USP10!MergeLigRecords, enabling remote code execution when a user visits a crafted web page. Affected platforms listed in the in...

CVE-2017-0092

CVE-2017-0092 affects Uniscribe (usp10.dll) in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The vulnerability enables an attacker-controlled website to cause memory information disclosure from the affected process. The CVE entry lists a CVSS v3 base score of 4.3 (Medi...

CVE-2017-0246

CVE-2017-0246 is a local elevation of privilege in the Windows Graphics Component (kernel-mode, win32k) affecting multiple Windows versions (Windows 7 SP1 x64 and later, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows 10 1511/1607, Windows Server 2012/2016, RT 8.1). Root cause concerns the G...

CVE-2017-11763

CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...

CVE-2017-11853

Technical details for CVE-2017-11853 (affected Windows kernel versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from official advisories (MSRC) and regional databases.

CVE-2017-8633

The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...

CVE-2017-8678

CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...

CVE-2010-2552

CVE-2010-2552 is the SMB Stack Exhaustion vulnerability in the SMB Server of affected Windows platforms. It occurs when the SMBv2 compounded requests are malformed, causing a denial-of-service (system hang). Affected products per sources include Windows Vista SP1/SP2, Windows Server 2008 (Gold/SP...

CVE-2016-0133

CVE-2016-0133 concerns a kernel-elevation vulnerability in the USB Mass Storage Class driver used by Windows variants (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10). The root cause is improper validation of objects in memory within the USB Mass Storage driver, allowing a physically...

CVE-2016-3254

CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...

CVE-2016-3368

CVE-2016-3368 affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (initial 1511/1607)). It is a remote code execution vulnerability caused by how Windows handles objects in memory. An attacker with domain cr...

CVE-2017-11762

This CVE (CVE-2017-11762) is a remote code execution vulnerability in the Microsoft Windows Graphics Component that is triggered by specially crafted embedded fonts. Affected products span Windows client and server lines listed in the CVE entry (e.g., Windows 7, 8.1, 10 variants, Server 2008/2012...

CVE-2017-8561

CVE-2017-8561 is a Windows kernel elevation-of-privilege vulnerability described as: a local attacker can exploit through improper handling of objects in memory by the Windows kernel, allowing code execution with elevated privileges. Affected software per the initial document includes Windows 8.1...

CVE-2017-8590

CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...

CVE-2013-1278

CVE-2013-1278 describes a kernel race condition in Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. The vulnerability allows local privilege elevation via crafted objects in memory, as part o...

CVE-2016-3213

CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...

CVE-2017-0115

CVE-2017-0115 is an Uniscribe information-disclosure vulnerability affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue allows a remote attacker to read sensitive data from a process’s memory when a user visits a crafted web site, via the Uniscribe/usp10 path ...

CVE-2013-1292

A race condition vulnerability exists in the win32k.sys kernel-mode driver affecting multiple versions of Microsoft Windows , including Windows Vista SP2, Windows 7, Windows 8, Windows Server 2008, and Windows Server 2012. The flaw stems from the improper handling of objects in memory , which all...

CVE-2016-0175

The CVE-2016-0175 issue is a Win32k Information Disclosure vulnerability in the Windows kernel that allows a local attacker to obtain the memory addresses of kernel objects, enabling a KASLR bypass. The vulnerability affects multiple Windows releases (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1,...

CVE-2016-3286

CVE-2016-3286 affects Windows kernel-mode drivers (Win32k) across multiple OS versions (Vista through Windows 10 1511). The vulnerability arises in the Windows kernel-mode driver due to improper handling of memory objects, enabling a local attacker to gain elevated privileges via a crafted applic...

CVE-2016-7248

CVE-2016-7248 affects Microsoft Windows Video Control in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1507–1607). The vulnerability allows remote attackers to execute arbitrary code by rendering a crafted file; the issue stems from the Microsoft Video Co...

CVE-2017-11765

CVE-2017-11765 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Serv...

CVE-2017-11814

CVE-2017-11814 is a Windows kernel information disclosure vulnerability. It involves improper handling of objects in memory in the Windows kernel and affects multiple Windows editions (Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 v1511/1607/1...

CVE-2010-2744

The CVE-2010-2744 flaw is a Win32k kernel-mode privilege-escalation issue in multiple Windows versions. A window-class handling bug lets local attackers gain privileges by creating a window and abusing SetWindowLongPtr to modify the popup menu structure or by abusing SwitchWndProc invoked via WM_...

CVE-2012-0178

CVE-2012-0178 affects Windows Partition Manager (partmgr.sys) and stems from a race condition in handling device-relations requests. A crafted application that issues multiple simultaneous Plug and Play (PnP) Configuration Manager calls could allow local users to gain kernel-mode privileges on Wi...

CVE-2016-3249

The CVE-2016-3249 vulnerability is a Win32k Elevation of Privilege issue affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 Gold/1511. It arises from improper handling of objects in memory by kernel-mode drivers, enabling local...

CVE-2016-7215

CVE-2016-7215 is a Windows kernel-level elevation of privilege affecting multiple Windows client/server platforms. The vulnerability resides in the Win32k subsystem (kernel-mode drivers) and is exploited via a crafted application to gain SYSTEM privileges. Affected products include Windows Vista ...

CVE-2017-0086

CVE-2017-0086 affects the Uniscribe component (usp10.dll) used by Windows GDI drawing paths. The connected details identify the vulnerability as a heap memory corruption in USP10!MergeLigRecords, triggered during font processing (font tables like BASE/GSUB/GPOS/etc.). The Windows products listed ...

CVE-2014-1824

CVE-2014-1824 affects Windows Journal remote code execution via a crafted .JNT journal file. Concrete details show impact on multiple Windows client/server platforms (Windows Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8/8.1; Windows Server 2012/2012 R2; Windows RT/RT 8.1). Root cause i...

CVE-2017-0088

CVE-2017-0088 is an Uniscribe (usp10.dll) remote-code-execution candidate affecting Windows Vista/7-era fonts rendering. Google Project Zero’s Uniscribe fuzzing found a crash path reported under CVE-2017-0088 in the chain leading to unsigned 2-byte write faults inside usp10!ttoGetTableData, origi...

CVE-2017-0117

CVE-2017-0117 concerns a vulnerability in Windows Uniscribe (usp10.dll) that can disclose memory contents when rendering Unicode text via a crafted web site. Connected sources indicate exploitation in the wild (e.g., exploit-db entry 41655) and show that the issue manifests through user32/glyph r...

CVE-2017-0122

Technical details for CVE-2017-0122 are not provided in the initial or connected documents; only references to MSRC advisories and related Uniscribe CVEs are present. Monitor for updates.

CVE-2017-0155

CVE-2017-0155 is a Windows Win32k kernel graphics component elevation of privilege vulnerability. The issue arises when the Win32k component fails to properly handle objects in memory, enabling a locally authenticated attacker with a crafted application to run arbitrary code in kernel mode and ga...

CVE-2017-8467

CVE-2017-8467 is a Windows graphics elevation-of-privilege vulnerability in the graphics/Win32k component. The root cause is theGraphics subsystem failing to properly handle objects in memory, enabling a local attacker to gain higher privileges. Affected platforms include Windows 7 SP1, Windows S...

CVE-2010-2739

The CVE-2010-2739 issue is a buffer overflow in the Windows win32k.sys CreateDIBPalette() function. A crafted bitmap with a very large color palette, used via GetClipboardData, can crash the system and may allow arbitrary code execution locally on affected Windows versions: XP SP3, Server 2003 R2...

CVE-2013-1345

CVE-2013-1345 affects the Windows kernel-mode driver component Win32k.sys across multiple Windows/Server editions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7, 8, Server 2012, Windows RT). The vulnerability arises from improper handling of objects in memory within Win32k...

CVE-2017-0120

CVE-2017-0120 describes an Uniscribe information-disclosure vulnerability in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue allows remote attackers to obtain sensitive data from process memory via a crafted web site. A CIRCL sighting confirms exploitation activity...

CVE-2017-0125

CVE-2017-0125 affects the Uniscribe component in Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. The vulnerability allows a remote attacker to obtain sensitive information from a process’s memory via a crafted web site. Connected documents corroborate Uniscribe issues and exploitati...

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2010-3147

CVE-2010-3147 describes an untrusted search path vulnerability in Windows Address Book (wab.exe) where a Trojan horse wab32res.dll loaded from the current working directory can execute code. Affected: WAB/Windows Contacts components on Windows XP SP2/XP SP3, Server 2003 SP2, Vista SP1/SP2, Server...

CVE-2016-3270

CVE-2016-3270 is a Win32k local privilege-escalation vulnerability in the Windows kernel graphics subsystem. The flaw arises from improper handling of objects in memory within the Win32k graphics component, allowing a local user to gain SYSTEM privileges via a crafted application. Affected produc...