CVE-2017-8691

CVE-2017-8691 affects Windows font handling, specifically when the Windows font library processes specially crafted embedded fonts. The vulnerability allows remote code execution on Windows Server 2008 SP2/R2 SP1 and Windows 7 SP1 via a crafted embedded font, with CVSSv3.0 vector AV:N/AC:L/PR:N/U...

CVE-2011-0090

CVE-2011-0090 concerns Win32k.sys in the kernel-mode drivers of affected Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7). The vulnerability stems from improper validation of data passed from user mode to kernel mode, enabling local privilege e...

CVE-2012-1850

CVE-2012-1850 affects the LanmanWorkstation Remote Administration Protocol (RAP) handling in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2/R2 SP1, and Windows 7 Gold/SP1). The RAP implementation mishandles RAP responses, enabling remote attackers to cause a...

CVE-2012-1865

CVE-2012-1865 affects Microsoft Windows kernel- mode drivers (notably win32k.sys) across multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The root cause, as described in the CVE entry, is that user-mode input passed to kernel mode for driver ob...

CVE-2012-2529

CVE-2012-2529 describes a kernel integer-overflow vulnerability in Microsoft Windows that enables local privilege escalation. The issue affects the Windows kernel on multiple OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The root cause is improper ha...

CVE-2013-1294

A race condition vulnerability exists in the Microsoft Windows kernel due to the improper handling of objects in memory. This flaw allows local users to achieve privilege escalation and potentially read arbitrary kernel memory by running a crafted application. Affected versions include Windows XP...

CVE-2013-3864

Technical details for CVE-2013-3864 are not publicly available in the provided connected documents. Monitor for updates from official advisories; the supplied references include NVD entries for related CVEs but no new specifics about this CVE.

CVE-2014-0262

The CVE-2014-0262 issue affects Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1, specifically the Win32k.sys kernel-mode driver. The vulnerability arises during the processing of window handles, where thread-owned objects are not properly considered, enabling local privilege escalation via...

CVE-2016-0041

CVE-2016-0041 is a Windows DLL loading vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10, IE 10–11). The issue is described as mishandling DLL loading, enabling local privilege escalation via a crafted application. Connected advi...

CVE-2016-3221

The CVE-2016-3221 entry describes a local privilege-escalation in Windows kernel-mode drivers (Win32k) across multiple OS versions (Windows Vista SP2, Server 2008 SP2/R2, Win7 SP1, Win8.1, Server 2012, Windows RT 8.1, Windows 10 Gold/1511) exploitable by a crafted application. Affected component:...

CVE-2018-6947

CVE-2018-6947 is an uninitialised stack variable vulnerability in the nxfuse component of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier. It enables local, low-privilege users to gain elevation of privileges on Windows 7 (32/64-bit) and can cause a denial of service o...

CVE-2010-1890

CVE-2010-1890 affects the Windows kernel ACL validation on kernel objects (nt!SeObjectCreateSaclAccessBits). The root cause is improper bounds checking of ACL/ACE data, allowing a local attacker to trigger a denial-of-service reboot via a crafted application on affected platforms. Affected produc...

CVE-2012-0174

CVE-2012-0174 affects Windows through tcpip.sys where outbound broadcast traffic is not properly filtered by the Windows Firewall, enabling a local attacker to observe broadcast traffic and potentially bypass firewall rules on affected systems (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1). Root ...

CVE-2017-0128

CVE-2017-0128 pertains to a Microsoft Uniscribe information-disclosure vulnerability in Windows fonts handling. The Windows user-mode Uniscribe component (usp10.dll) can be reached via GDI font rendering paths (DrawText) or Language Pack workflows (lpk.dll through user32), allowing an attacker-co...

CVE-2010-3943

CVE-2010-3943 affects Windows kernel-mode Win32k.sys, where driver objects are not properly linked, enabling local privilege escalation through linked-list corruption. Affected products include Windows XP (SP2/SP3), Windows Server 2003 (SP2), Windows Vista (SP1/SP2), Windows Server 2008 (Gold, SP...

CVE-2012-1864

CVE-2012-1864/1865 affect Windows kernel-mode, specifically win32k.sys, across multiple XP/2003/Vista/2008/7 builds. The root cause is improper handling of user-mode input passed to kernel-mode driver objects, enabling local privilege escalation. The linked documents confirm two CVEs (1864/1865) ...

CVE-2016-3354

CVE-2016-3354 : This is the GDI information disclosure vulnerability in Windows GDI. The Graphics Device Interface in affected Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012, Windows RT 8.1, Windows 10 1511/1607) allows local users to bypass ASLR by running a cra...

CVE-2013-0075

CVE-2013-0075 is a remote DoS in the Windows TCP/IP stack: a crafted packet terminating a TCP connection can reboot affected hosts. Affected: Windows Vista SP2; Windows Server 2008 SP2/R2/R2 SP1; Windows 7 SP1/Gold; Windows 8; Windows Server 2012; Windows RT. Root cause: improper handling of a co...

CVE-2013-1273

CVE-2013-1273 is a race condition in the win32k.sys kernel-mode driver that can allow local privilege escalation and reading arbitrary kernel memory on affected Windows platforms (XP SP2-SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP0-SP1). The vulnerability stems from timing/o...

CVE-2013-3200

CVE-2013-3200 concerns a local-privilege-escalation in Windows USB handling. The vulnerability exists in kernel-mode USB drivers across multiple Windows releases (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT). A crafted USB devi...

CVE-2016-0087

CVE-2016-0087 is a local elevation-of-privilege vulnerability in Microsoft Windows where an attacker can gain SYSTEM privileges by abusing a flaw in handle validation in memory. Affected products include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The root cause is i...

CVE-2017-8556

CVE-2017-8556 affects Microsoft Windows Graphics Component. The vulnerability arises from how Graphics handles objects in memory, enabling a local attacker to elevate privileges by executing arbitrary code in kernel mode. CNVD entries corroborate kernel-mode code execution via Graphics memory han...

CVE-2010-0482

CVE-2010-0482 is the Windows Kernel Malformed Image Vulnerability affecting the Windows kernel in Windows 7 and Windows Server 2008 R2. The issue arises from improper validation of the relocation section of crafted image files, enabling a local attacker to trigger a denial of service (system rebo...

CVE-2010-1897

CVE-2010-1897 affects Windows kernel-mode drivers in win32k.sys across Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 SP2/R2, and Windows 7. The vulnerability arises from improper validation of pseudo-handle values passed in callback parameters during Crea...

CVE-2010-4562

CVE-2010-4562 affects Microsoft Windows platforms when using IPv6. It allows remote attackers to infer if a host is sniffing the network by sending an ICMPv6 Echo Request to a multicast address and observing an Echo Reply (as demonstrated by thcping). The entry notes a typographical collision: so...

CVE-2012-0157

CVE-2012-0157 affects Windows kernel Win32k.sys, where local users can elevate privileges by crafting inputs to PostMessage. Public sources (MS12-018) and multiple vulnerability feeds confirm a kernel-mode privilege-escalation flaw exploitable via PostMessage handling in win32k.sys on affected Wi...

CVE-2012-0179

CVE-2012-0179 is a local privilege-escalation vulnerability in the Windows TCP/IP stack (tcpip.sys) affecting Windows 7, Windows Server 2008 R2 and R2 SP1, and related builds. The issue arises from a double-free/ improper handling when binding an IPv6 address to a local interface, allowing a craf...

CVE-2013-3173

CVE-2013-3173 corresponds to the Win32k.sys kernel-mode driver buffer overflow vulnerability (Win32k Buffer Overwrite Vulnerability) that allows local privilege escalation on affected Windows versions. Documents reference Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008/R2 SP1, 7 SP1, ...

CVE-2016-0048

CVE-2016-0048 is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10, and 1511). Root cause: kernel-mode Win32k.sys memory handling bug that allows a crafted local application to gain full pr...

CVE-2013-0011

The CVE-2013-0011 issue affects the Windows Print Spooler service and allows remote code execution or memory corruption via a specially crafted print job. Documented targets include Windows 7 (Gold/SP1) and Windows Server 2008 R2 (RTM/SP1), where the Print Spooler components (notably Win32spl.dll...

CVE-2013-1252

CVE-2013-1252 describes a race condition in the Windows kernel-mode driver win32k.sys that lets local attackers gain privileges and read arbitrary kernel memory on affected Windows families (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1). Root cause: race condition in ...

CVE-2013-1334

CVE-2013-1334 concerns a local privilege-escalation in Windows via the Win32k.sys kernel-mode driver. The exposed issue is that Win32k window/object handling can be abused to gain kernel-level privileges through a crafted application, enabling arbitrary code execution with high impact. Affected p...

CVE-2013-1341

CVE-2013-1341 affects the Windows kernel component win32k.sys (kernel-mode drivers) and allows local privilege escalation via a crafted application on several Windows families. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8. Root cause: ...

CVE-2013-3894

Kernel-mode drivers in multiple Microsoft Windows versions (including XP SP2/SP3, Windows 7 SP1, Windows 8, and Windows Server 2008/2012) are vulnerable to remote code execution via a crafted CMAP table in a TrueType font (TTF) file. A successful exploit allows an attacker to execute arbitrary co...

CVE-2015-1645

CVE-2015-1645 is a remote code execution vulnerability affecting Windows NT-based clients/servers (Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1). It stems from a flaw in EMF processing in GDI32.dll (MRSETDIBITSTODEVICE::bPlay), enabling remote attackers to execute arb...

CVE-2017-8668

CVE-2017-8668 is a Windows kernel information-disclosure vulnerability affecting the Volume Manager Extension Driver. Affected products include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012/2012 R2. The underlying issue is in the Volume Manage...

CVE-2018-0755

CVE-2018-0755 is a Windows EOT Font Engine Information Disclosure vulnerability. Affected: Windows 7 SP1 and Windows Server 2008 R2 (Windows Embedded OpenType font engine). Root cause: improper handling/parsing of embedded fonts in the EOT engine, enabling information disclosure. Impact: partial ...

CVE-2010-1893

CVE-2010-1893 corresponds to an Integer Overflow in the Windows TCP/IP stack that affects Windows Vista SP1, Windows Server 2008 (Gold/R2), and Windows 7. The vulnerability arises when user-mode data is copied to kernel memory, leading to a pool/heap overflow in the IppSortDestinationAddresses/Ip...

CVE-2010-3940

CVE-2010-3940 is a Windows kernel-mode driver (win32k.sys) vulnerability described as a double-free in the Win32k PFE pointer handling that could allow local privilege elevation. Affected platforms include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 (Go...

CVE-2010-3959

CVE-2010-3959 affects the Microsoft OpenType Font (OTF) driver. A crafted CMAP table in an OpenType font can cause local privilege escalation on Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/SP2/R2, and Windows 7. Root cause: incorrect handling/parsi...

CVE-2013-1255

The CVE-2013-1255 entry describes a race condition in the win32k.sys kernel-mode driver that allows local privilege elevation and reading of arbitrary kernel memory. Affected are: Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 Gold/SP...

CVE-2013-1279

CVE-2013-1279 is described as a kernel race condition in Microsoft Windows platforms, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. The vulnerability arises from race conditions ...

CVE-2013-1344

CVE-2013-1344 affects win32k.sys in multiple Windows kernel-mode drivers. A memory handling flaw in Win32k allows local privilege escalation via a crafted application on affected OSes (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows R...

CVE-2016-3355

CVE-2016-3355 affects the Windows Graphics Device Interface (GDI) across multiple Windows versions. The vulnerability arises from how GDI handles objects in memory, enabling a local attacker to gain kernel-mode privileges by executing a crafted application. The impact is privilege escalation with...

CVE-2010-0486

CVE-2010-0486 describes a remote code execution vulnerability in Windows Authenticode Signature Verification (WinVerifyTrust) affecting PE and cabinet (.CAB) handling. The flaw arises from improper use of certain file digest fields during signing/verifying, enabling a modified signed file to exec...

CVE-2013-1340

CVE-2013-1340 is a Windows kernel local privilege-escalation vulnerability in the Win32k.sys component (Win32k Dereference Vulnerability). The flaw occurs in memory object handling within the Win32k kernel-mode driver and affects multiple Windows platforms including XP SP2/SP3, Server 2003 SP2, V...

CVE-2013-3879

Win32k Use After Free Vulnerability (CVE-2013-3879): a local privilege-escalation in the win32k.sys kernel-mode driver affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012, and RT. Root cause: use-after-free in memory object handling within the W...

CVE-2016-3251

CVE-2016-3251 is a Win32k information disclosure vulnerability in the kernel-mode GDI components of multiple Windows releases (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, 2012, RT 8.1, and Windows 10/1511). The root cause is improper handling of objects in memory within the Windows GDI/Win...

CVE-2010-3227

CVE-2010-3227 describes a remote code execution vulnerability in the Microsoft Foundation Class (MFC) library: a stack-based buffer overflow in UpdateFrameTitleForDocument() within CFrameWnd of mfc42.dll (and affected MFC components across Windows XP SP3, Server 2003, Vista, Server 2008, and Wind...

CVE-2010-3229

CVE-2010-3229 is a TLSv1/SSL denial-of-service flaw in Microsoft Windows’ SChannel when IIS 7.x hosts SSL websites. The vulnerability arises from SChannel failing to check a condition before processing client certificates during SSL/TLS handshakes, allowing a remote attacker to cause LSASS to sto...