CVE-2017-11781

CVE-2017-11781 is a denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1) where an authenticated attacker can send specially crafted SMB requests to crash the server. Affected products include Windows SMB Server implementations as described in the CVE entry (server role comp...

CVE-2018-0844

The CVE-2018-0844 entry describes an elevation-of-privilege vulnerability in the Windows Common Log File System (CLFS) driver, affecting multiple Windows versions (Windows 7 SP1, Windows 8.1/RT 8.1, Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709). The root cause is how objects in memory are hand...

CVE-2018-8116

The provided connected documents confirm CVE-2018-8116 is a DoS vulnerability in the Windows Graphics Component, arising from how the component handles objects in memory and affecting multiple Windows versions (e.g., Windows 7, Windows 10, server editions). Concrete details include the affected p...

CVE-2022-35751

Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.

CVE-2016-7218

Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...

CVE-2017-8589

CVE-2017-8589 is a Windows Search Remote Code Execution vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (gold and 1511–1703) and Windows Server 2016. The root cause is the way Windows Search handles objects in memory, e...

CVE-2018-0887

CVE-2018-0887 describes an information-disclosure in the Windows kernel caused by improper initialization of a memory address. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 family and corresponding Server variants). The vulnerability exposes partial confi...

CVE-2018-8484

CVE-2018-8484 is an elevation of privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver where objects in memory are improperly handled. Affected products/versions (as per documents): Windows 10 and Windows Server editions listed (Windows 8.1, Windows 10, Windows 10 Servers, Windo...

CVE-2018-8486

CVE-2018-8486 is an information disclosure in DirectX caused by DirectX's improper handling of memory objects. Affected are Windows 7, Windows 8.1, Windows 10 and multiple Windows Server editions (e.g., 2008/R2, 2012, 2016, 2019). Root cause: memory objects not handled safely by DirectX. Impact: ...

CVE-2022-35758

Technical details about CVE-2022-35758 (affected product/component, root cause, impact, or remediation) are not publicly provided in the supplied connected documents. Monitor for updates from official sources.

CVE-2016-0178

The CVE refers to CVE-2016-0178, describing a remote code execution flaw in the RPC Network Data Representation (NDR) Engine. The root cause is improper freeing of memory in the RPC NDR Engine, exploited via malformed RPC requests to remote hosts. Affected products include Windows Vista SP2, Wind...

CVE-2016-0179

CVE-2016-0179 describes a remote code execution vulnerability in Windows Shell across Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (Gold/1511). The root cause is improper handling of objects in memory within Windows Shell, enabling an attacker to trigger arbitrary code exec...

CVE-2016-3373

CVE-2016-3373 is a Windows kernel local elevation-of-privilege vulnerability. The Windows Kernel API improperly restricts access to registry information, enabling a locally authenticated attacker to obtain sensitive user account data via a crafted application. Affected products include Windows Vi...

CVE-2017-0058

CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...

CVE-2017-0278

CVE-2017-0278 corresponds to a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The issue is triggered by how the SMBv1 server handles certain requests, affecting multiple Windows editions (e.g., Windows 7, Windows 8.1, Windows Server 2008/2012/2016, and related .NET env...

CVE-2017-11783

CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...

CVE-2017-8687

CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...

CVE-2017-0276

Technical details for CVE-2017-0276 are not publicly available in the provided documents. Monitor for updates; current sources in the set do not describe affected products/versions, root cause, or remediation specific to this CVE.

CVE-2017-0299

The CVE-2017-0299 entry describes a Windows kernel information disclosure vulnerability in the NT kernel affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2012/2016, Windows 10 various builds, and more). The issue allows an authenticated attacker to obtain informatio...

CVE-2017-8495

CVE-2017-8495 is a Kerberos security feature bypass in which Extended Protection for Authentication can be circumvented by tampering with the SNAME field during ticket exchange (Orpheus’ Lyre). Affected Windows family includes Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1, Windows RT 8.1...

CVE-2017-8708

CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...

CVE-2018-0960

Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.

CVE-2018-1003

CVE-2018-1003 is a buffer overflow vulnerability in the Microsoft JET Database Engine that could enable remote code execution on affected Windows systems (e.g., Windows 7, Windows 10, Windows Server variants). The connected OSV entry confirms the same description; no concrete exploit details or s...

CVE-2016-3319

CVE-2016-3319 affects the Windows PDF Library in Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (various builds), and Edge. The vulnerability stems from how the PDF library handles memory objects in PDFs, allowing remote code execution when a crafted PDF is opened or viewed. Connected sourc...

CVE-2018-8134

CVE-2018-8134 is an elevation of privilege vulnerability in the Windows Kernel API that affects Windows 8.1, Windows 10 (including Windows Server variants) and related OSes. The faulty enforcement of permissions is the root cause. The connected CIRCL entry indicates a public exploit is available ...

CVE-2017-0042

CVE-2017-0042 is a Windows DirectShow information disclosure vulnerability affecting Windows Media Player and related Windows versions (Windows 7/8.x/Server variants). The underlying issue is improper handling of objects in memory during media processing, which allows an unauthenticated, remote a...

CVE-2017-0056

Technical details for CVE-2017-0056 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2016-0075

CVE-2016-0075 affects the Windows kernel on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). It enables a local attacker to gain privileges by a crafted application that calls a kernel API to read sensitive information from the registry. Exploit PoCs exist (...

CVE-2017-0184

Microsoft Hyper-V remote Denial of Service vulnerability (CVE-2017-0184) arises from improper validation of input from a privileged user on a guest OS, potentially allowing a guest to crash the host. Affected component: Hyper-V on Windows Server. Consequence: denial of service impacting host avai...

CVE-2017-0190

CVE-2017-0190 affects the GDI component in multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607), and Windows Server 2016). The vulnerability allows remote attackers to obtain sensitive in...

CVE-2017-0273

CVE-2017-0273 is a Windows SMBv1 vulnerability described as a denial-of-service issue in the SMBv1 server. The affected component is the Microsoft Windows Server Message Block 1.0 (SMBv1) server; the root cause is improper handling of crafted SMB requests that can cause the server to stop respond...

CVE-2017-0294

CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...

CVE-2018-0968

CVE-2018-0968 is a Windows kernel information-disclosure vulnerability that could enable an attacker to bypass Kernel ASLR. It affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2016, Windows 8.1, Windows 10, and Windows Server 2019/10-family variants as listed. The connected CIRCL en...

CVE-2018-0973

Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.

CVE-2016-0170

CVE-2016-0170 affects the Windows GDI component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10). The vulnerability enables remote code execution when processing crafted documents, due to how the Graphics Component handles objects in memory. A...

CVE-2016-0171

CVE-2016-0171 is a Windows kernel‑mode elevation of privilege vulnerability affecting Win32k in several Windows releases (Vista SP2 to Windows 10 1511). The entry describes that a crafted user‑mode application can trigger a local privilege escalation via a flaw in the Win32k subsystem, with explo...

CVE-2016-7247

CVE-2016-7247 describes a Secure Boot component vulnerability that could allow physically proximate attackers to bypass Secure Boot by crafting a boot policy, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (versions 1511 and 1607), and Windows Server 2016. The Op...

CVE-2017-0296

CVE-2017-0296 affects Windows platforms (Windows 7 SP1 to Windows Server 2016) with a privilege-escalation via tdx.sys due to a missing length check when copying memory. The affected component is tdx.sys; root cause is inadequate buffer length validation. Impact per description: privilege escalat...

CVE-2016-0073

CVE-2016-0073 affects Windows kernel local elevation of privilege on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). Root cause: crafted application triggers a kernel API pathway to access sensitive registry information, enabling local privilege escalation....

CVE-2016-3252

CVE-2016-3252 is a Windows kernel-mode privilege-escalation vulnerability affecting multiple Windows versions (Vista SP2 through Windows 10 1511) where a crafted application may exploit kernel-mode drivers to gain privileges. The root cause is insufficient handling of objects in memory within ker...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2016-7185

CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...

CVE-2017-0076

Summary of CVE-2017-0076 and related entries : The vulnerability affects Hyper-V in multiple Windows platforms (Vista SP2; Server 2008 SP2/2008 R2; Windows 7 SP1; Windows 8.1; Server 2012/2012 R2; Windows 10 versions 1511/1607; and Windows Server 2016). The issue allows a guest OS user running in...

CVE-2017-11788

CVE-2017-11788 affects Windows Search in multiple Windows versions (7 SP1, 8.1, 10, Server SKUs) where unauthenticated attackers can remotely send crafted messages to trigger a denial-of-service by mismanaging in-memory objects. The vulnerability is documented across NVD and CNVD entries, with Op...

CVE-2016-3396

CVE-2016-3396 is a GDI+ remote code execution in Graphics Device Interface (GDI) that allows a remote attacker to execute arbitrary code via a crafted embedded font. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-8699

CVE-2017-8699 affects Windows Shell in Windows 7 SP1, Windows Server 2008/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. Description: an attacker can run arbitrary code in the context of the current user due to how Windows Shell va...

CVE-2022-35753

Technical details (affected products/versions, impact, root cause, or fixes) for CVE-2022-35753 are not provided in the connected documents. Monitor official sources (MSRC/NVD) for concrete details and remediation guidance.

CVE-2016-0173

CVE-2016-0173 is a Win32k Elevation of Privilege vulnerability affecting Windows kernel‑mode drivers across Windows Vista SP2 through Windows 10 (1511). A crafted user-mode application can trigger local privilege escalation, as described in the original entry. Public exploit access exists: Exploi...