376 matches found
CVE-2017-8581
CVE-2017-8581 is a Win32k elevation of privilege vulnerability affecting multiple Windows platforms (Windows 7/8.1/10 and corresponding Server editions) where improper handling of objects in memory could allow an attacker to run code with elevated privileges. The provided documents identify the a...
CVE-2017-8588
CVE-2017-8588 is a WordPad remote code execution vulnerability in Windows where parsing specially crafted WordPad files can execute code. Connected sources identify WordPad vulnerability (KB4026061) affecting WordPad across affected Windows versions and indicate the CVE entry is linked to a mitig...
CVE-2017-8694
CVE-2017-8694 is a local privilege escalation in the Windows kernel-mode driver (Win32k) caused by improper handling of memory objects. Affects Windows versions listed in the description (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 v...
CVE-2017-8717
CVE-2017-8717 affects the Microsoft JET Database Engine, with a buffer overflow in memory handling of objects that can allow remote code execution. The CPAI advisory notes a remote attacker could exploit this by enticing a user to open a specially crafted Excel file on affected Windows versions. ...
CVE-2016-0088
CVE-2016-0088 corresponds to a Hyper-V remote code execution vulnerability in Microsoft Windows Hyper-V affecting Windows 8.1, Windows Server 2012 (Gold/R2), and Windows 10. The root cause is that Hyper-V fails to properly validate guest OS input from an authenticated user, enabling a crafted app...
CVE-2016-7219
CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...
CVE-2017-0102
Technical details (affected components, root cause, exploit status, mitigations) are not publicly disclosed in the provided documents for CVE-2017-0102; monitor for updates.
CVE-2017-0270
CVE-2017-0270 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server handling of certain requests. The connected documents indicate the issue arises from improper handling of SMBv1 requests, enabling an attacker to obtain sensitive information from affected systems. Affe...
CVE-2017-11784
CVE-2017-11784 affects the Windows kernel information-disclosure pathway in multiple Windows versions (Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, 2012, Windows RT 8.1, Windows 10) where objects in memory are improperly handled. The root cause is an information-disclosure vulnerability in the Win...
CVE-2017-11824
The CVE-2017-11824 entry describes an Elevation of Privilege in the Windows Graphics Component due to improper handling of objects in memory, allowing code execution with elevated privileges. The Connected documents (KB/MS updates) indicate this vulnerability is among a broader set addressed by c...
CVE-2017-11849
The CVE-2017-11849 entry concerns the Windows kernel information disclosure vulnerability. Affected software includes Windows kernel on Windows 7 SP1; Windows Server 2008 SP2/R2 SP1; Windows 8.1/RT 8.1; Windows Server 2012/R2; Windows 10 versions (Gold, 1511, 1607, 1703, 1709); and Windows Server...
CVE-2017-8587
CVE-2017-8587 corresponds to a Denial of Service in Windows Explorer when attempting to open a non-existent file. It affects Windows client/server platforms listed in the CVE description and is addressed by the Windows update KB4025674 (and related KBs in 2017 rollups). The CVSSv3 base score is 6...
CVE-2017-8592
CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...
CVE-2016-0184
CVE-2016-0184 is a use-after-free vulnerability in the Windows GDI/Direct3D path. The issue arises from improper handling of in-memory objects during parsing, enabling remote code execution when a crafted document or web content is processed. Affected products span Windows Vista SP2, Server 2008 ...
CVE-2016-3239
The CVE-2016-3239 issue is a local privilege-escalation vulnerability in the Windows Print Spooler component. Affected systems include Windows Vista/7/8.1/10 and corresponding Server SKUs where the Print Spooler can write to the filesystem, enabling local attackers to gain elevated privileges. Mi...
CVE-2016-7184
The CVE-2016-7184 issue affects the Common Log File System (CLFS) driver in Windows operating systems ranging from Windows Vista SP2 to Windows Server 2016 (including Windows 10 versions 1511 and 1607). The vulnerability enables local users to achieve privilege escalation via a crafted applicatio...
CVE-2016-7221
CVE-2016-7221 is a Windows IME DLL-loading privilege-escalation issue. The IME loads DLLs via a registry-controlled mechanism and can be exploited by a locally authenticated user to gain higher privileges when an application initiates the IME. Public writeups (e.g., JVN/JVND) describe the exploit...
CVE-2016-7246
CVE-2016-7246 affects Windows kernel-mode drivers and is described as a local privilege-escalation vulnerability in Win32k. Public sources indicate the flaw resides in kernel-space handling accessed by user-mode apps, enabling a crafted application to gain elevated privileges. The initial documen...
CVE-2017-0274
Technical details for CVE-2017-0274 are not publicly available in the provided connected documents. The sources reference SMBv1 information disclosure generally but do not specify affected products/versions, root cause, impact, or remediation for this CVE. Monitor for updates.
CVE-2017-8476
CVE-2017-8476 is a kernel information-disclosure vulnerability affecting multiple Windows platforms (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 variants 1511–1703, and Windows Server 2016). The issue allows an authenticated ...
CVE-2017-8633
The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...
CVE-2017-8677
CVE-2017-8677 is a Win32k/GDI+-related information-disclosure vulnerability in Windows that exposes kernel memory addresses when handling GDI+ objects. Affected products include Windows kernel/UI components on Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows 10 (various builds)...
CVE-2016-0049
CVE-2016-0049 describes a Windows Kerberos vulnerability where password changes could bypass authentication via a crafted KDC. Microsoft’s MS16-014 (KB3126041) patches this issue across affected Windows versions (Vista SP2, 2008 SP2, 2008 R2, 7 SP1, 8.1, 2012, 2012 R2, 10 RTM/1511). The advisory ...
CVE-2016-0133
CVE-2016-0133 concerns a kernel-elevation vulnerability in the USB Mass Storage Class driver used by Windows variants (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10). The root cause is improper validation of objects in memory within the USB Mass Storage driver, allowing a physically...
CVE-2016-3254
CVE-2016-3254 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows releases (Vista to Windows 10) where a crafted user-mode application can cause a kernel-mode elevation via Windows kernel drivers. The description specifies local privileges escalation but the documents do n...
CVE-2016-7210
CVE-2016-7210 affects atmfd.dll in multiple Windows editions (Vista through Windows 10 1511/1607 and corresponding Server releases). The vulnerability allows remote attackers to disclose memory contents of a victim process by delivering a crafted OpenType font on a web site, leading to informatio...
CVE-2016-7260
CVE-2016-7260 affects multiple Windows releases via a Win32k.sys/Win32k component elevation of privilege vulnerability. The kernel-mode drivers in Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 2012/2012 R2, RT 8.1, 10 (incl. 1511, 1607), and Server 2016 allow local users to gain privileg...
CVE-2017-0183
CVE-2017-0184 is a Hyper-V Denial of Service vulnerability caused by improper validation of input from a privileged user on a guest OS. Exploitation could crash the host Hyper-V service. A known remediation is the security update KB3217841 (April 2017).
CVE-2017-0246
CVE-2017-0246 is a local elevation of privilege in the Windows Graphics Component (kernel-mode, win32k) affecting multiple Windows versions (Windows 7 SP1 x64 and later, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows 10 1511/1607, Windows Server 2012/2016, RT 8.1). Root cause concerns the G...
CVE-2017-11851
The CVE-2017-11851 affects the Windows kernel information disclosure vulnerability: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 (versions 1511, 1607, 1703, 1709), Windows Server 2016, and Server 1709. It arises from improper handling of objects in...
CVE-2016-3213
CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...
CVE-2016-3216
CVE-2016-3216 involves GDI32.dll in the Windows Graphics Component, where memory handling flaws allow remote attackers to bypass ASLR and disclose memory contents. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT ...
CVE-2016-3286
CVE-2016-3286 affects Windows kernel-mode drivers (Win32k) across multiple OS versions (Vista through Windows 10 1511). The vulnerability arises in the Windows kernel-mode driver due to improper handling of memory objects, enabling a local attacker to gain elevated privileges via a crafted applic...
CVE-2017-0178
CVE-2017-0178 affects Microsoft Hyper-V on Windows 10 (incl. 1511/1607), Windows 8.1, Windows Server 2012 R2, and Windows Server 2016. The vulnerability is a denial-of-service caused by improper validation of input from a privileged user on a guest OS, leading to host crash. Connected docs corrob...
CVE-2017-11853
Technical details for CVE-2017-11853 (affected Windows kernel versions, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from official advisories (MSRC) and regional databases.
CVE-2017-8590
CVE-2017-8590 is the Windows CLFS Elevation of Privilege vulnerability where the Common Log File System driver mishandles objects in memory, enabling local privilege elevation on affected Windows versions (Win7 SP1, Server 2008 SP2/R2 SP1, Win8.1/RT8.1, Server 2012/R2, Win10 1511/1607/1703, Serve...
CVE-2016-3203
CVE-2016-3203 is a Windows PDF Remote Code Execution vulnerability affecting Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (Gold and 1511) and Microsoft Edge. Connected advisories describe an out-of-bounds memory access in the Windows PDF Library/Edge PDF reader caused by improper buffer v...
CVE-2016-3258
CVE-2016-3258 is a Windows kernel race condition that allows a local attacker to bypass Low Integrity protections and modify files by abusing object-manager features (Windows File System Security Feature Bypass). Affected software: Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and W...
CVE-2016-3368
CVE-2016-3368 affects multiple Windows editions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 (initial 1511/1607)). It is a remote code execution vulnerability caused by how Windows handles objects in memory. An attacker with domain cr...
CVE-2016-7224
CVE-2016-7224 concerns the Microsoft Virtual Hard Disk (VHD) Driver, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The vulnerability arises from the VHD Driver not properly restricting access to files, enabling a local ...
CVE-2016-7292
CVE-2016-7292 is a Windows Installer Elevation of Privilege vulnerability. The NVD description notes that the Installer in multiple Windows editions mishandles library loading, allowing a local attacker to gain higher privileges via a crafted application. Affected platforms include Windows Vista ...
CVE-2017-0179
CVE-2017-0179 describes a Hyper-V denial-of-service vulnerability affecting Windows host systems (e.g., Windows 10/Server 2012 R2/Server 2016) where input from a privileged user on a guest OS is not properly validated. Connected sources reference related Hyper-V CVEs (e.g., CVE-2017-0184) and ind...
CVE-2017-11762
This CVE (CVE-2017-11762) is a remote code execution vulnerability in the Microsoft Windows Graphics Component that is triggered by specially crafted embedded fonts. Affected products span Windows client and server lines listed in the CVE entry (e.g., Windows 7, 8.1, 10 variants, Server 2008/2012...
CVE-2017-11763
CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...
CVE-2017-8678
CVE-2017-8678 is a Win32k information-disclosure vulnerability in the Windows kernel. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008/R2 SP1, Windows Server 2012, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is improper handling of...
CVE-2016-0175
The CVE-2016-0175 issue is a Win32k Information Disclosure vulnerability in the Windows kernel that allows a local attacker to obtain the memory addresses of kernel objects, enabling a KASLR bypass. The vulnerability affects multiple Windows releases (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1,...
CVE-2016-7215
CVE-2016-7215 is a Windows kernel-level elevation of privilege affecting multiple Windows client/server platforms. The vulnerability resides in the Win32k subsystem (kernel-mode drivers) and is exploited via a crafted application to gain SYSTEM privileges. Affected products include Windows Vista ...
CVE-2016-7223
CVE-2016-7223 describes a Local Privilege Escalation in the Microsoft Virtual Hard Disk (VHD) Driver affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (variants 1511, 1607), and Windows Server 2016. The root cause is improper access restriction to VHD-related files, allowi...
CVE-2016-7248
CVE-2016-7248 affects Microsoft Windows Video Control in Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1507–1607). The vulnerability allows remote attackers to execute arbitrary code by rendering a crafted file; the issue stems from the Microsoft Video Co...