CVE-2017-0298

Technical details about CVE-2017-0298 are not publicly provided in the supplied documents. No specific affected products/versions or root cause are described here. Monitor official sources for updates.

CVE-2017-11814

CVE-2017-11814 is a Windows kernel information disclosure vulnerability. It involves improper handling of objects in memory in the Windows kernel and affects multiple Windows editions (Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 v1511/1607/1...

CVE-2017-8561

CVE-2017-8561 is a Windows kernel elevation-of-privilege vulnerability described as: a local attacker can exploit through improper handling of objects in memory by the Windows kernel, allowing code execution with elevated privileges. Affected software per the initial document includes Windows 8.1...

CVE-2016-3249

The CVE-2016-3249 vulnerability is a Win32k Elevation of Privilege issue affecting Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 Gold/1511. It arises from improper handling of objects in memory by kernel-mode drivers, enabling local...

CVE-2016-3352

Summary: CVE-2016-3352 describes an information-disclosure vulnerability in Windows NTLM SSO validation for Microsoft Account (MSA) logins. Details across connected docs show that Windows clients (Windows 8.1, Windows RT 8.1, Windows 10 variants 1511/1607, and related builds) do not properly vali...

CVE-2017-0165

CVE-2017-0165 is a local elevation of privilege vulnerability in Microsoft Windows (affecting Windows 10, 1511, 8.1, RT 8.1, and Windows Server 2012 R2) caused by improper sanitization of handles in memory. The CIRCL/CVE sighting notes an exploit in ExploitDB, indicating public exploitation exist...

CVE-2017-11765

CVE-2017-11765 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Serv...

CVE-2017-8468

CVE-2017-8468 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Public exploits exist and the root cause is improper handling of objects in memory within the Windows kernel’s Win32k subsystem, enabling an attacker to run processes in an elevated context locally. Affected prod...

CVE-2017-8713

CVE-2017-8713 refers to a Hyper-V information disclosure vulnerability in Windows Hyper-V component. Affected products include Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (various builds: Gold, 1511, 1607, 1703), and Windows Server 2016. The issue arises when Hyper-V fails to properly ...

CVE-2016-0090

Summary: CVE-2016-0090 is a Windows Hyper-V Information Disclosure vulnerability. It affects Hyper-V on Windows 8.1, Windows Server 2012 R2, and Windows 10 where a guest OS user can cause the Hyper-V host to disclose memory contents via a crafted application. Root cause: inadequate validation of ...

CVE-2016-7217

CVE-2016-7217 : Memory corruption in Media Foundation (Windows Graphics/Media Foundation) allows remote code execution via a crafted web site. Affected: Windows 8.1; Windows Server 2012 RT/Gold and R2; Windows RT 8.1; Windows 10 (Gold, 1511, 1607); Windows Server 2016. Root cause: memory corrupti...

CVE-2017-0057

CVE-2017-0057 is a Windows DNS client information-disclosure vulnerability. The DNS client in affected Windows versions (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607, Windows Server 2016) may mishandle DNS queries, enabling an attacker to obtain sensitive information....

CVE-2017-0169

CVE-2017-0169 affects Windows Hyper-V Information Disclosure Vulnerability on Windows 8.1, Windows Server 2012/2012 R2. The issue arises from improper validation of input from a guest OS by the Hyper-V Network Switch, enabling a guest-authenticated attacker to disclose host information. Connected...

CVE-2017-0186

CVE-2017-0186 describes a denial-of-service vulnerability in Microsoft Hyper-V Network Switch when a privileged user on a guest OS can cause input validation to fail on supported Windows hosts (Windows 10, 8.1, Server 2012, 2012 R2, 2016). The underlying impact is host availability disruption. No...

CVE-2017-0292

CVE-2017-0292 describes a Windows PDF remote code execution vulnerability in the Windows PDF handler. A specially crafted PDF file can cause arbitrary code execution on affected Windows versions (Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 1511, 1607, 1703; Windows Server...

CVE-2017-8474

Technical details about CVE-2017-8474 are not publicly provided in the supplied connected documents. Monitor EUVD entries for updates; no concrete affected products, root cause, impact, or remediation are stated in the available sources.

CVE-2014-1824

CVE-2014-1824 affects Windows Journal remote code execution via a crafted .JNT journal file. Concrete details show impact on multiple Windows client/server platforms (Windows Vista SP2; Server 2008 SP2/R2; Windows 7 SP1; Windows 8/8.1; Windows Server 2012/2012 R2; Windows RT/RT 8.1). Root cause i...

CVE-2016-0190

CVE-2016-0190 : Information disclosure vulnerability in Microsoft Windows where the Volume Manager Driver (volmgr.sys) does not correctly tie a USB disk mounted via RemoteFX over RDP to the mounting user session, allowing local access to file/directory information on the mounted USB disk. Affecte...

CVE-2016-3270

CVE-2016-3270 is a Win32k local privilege-escalation vulnerability in the Windows kernel graphics subsystem. The flaw arises from improper handling of objects in memory within the Win32k graphics component, allowing a local user to gain SYSTEM privileges via a crafted application. Affected produc...

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2017-8679

CVE-2017-8679 pertains to a Windows kernel information disclosure vulnerability. The affected platform set includes Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds), and Windows Server 2016. The root cause is impr...

CVE-2017-8720

CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...

CVE-2016-3262

CVE-2016-3262 and CVE-2016-3263 describe a Graphics Device Interface (GDI+/GDI) information-disclosure problem in multiple Windows versions. The description specifies that remote attackers can bypass ASLR through unspecified vectors. Affected products include Windows Vista SP2, Windows Server 200...

CVE-2016-3370

CVE-2016-3370 corresponds to a PDF library information-disclosure vulnerability in Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 versions (1511, 1607). The issue allows remote attackers to obtain sensitive information via a crafted web site or content,...

CVE-2017-8467

CVE-2017-8467 is a Windows graphics elevation-of-privilege vulnerability in the graphics/Win32k component. The root cause is theGraphics subsystem failing to properly handle objects in memory, enabling a local attacker to gain higher privileges. Affected platforms include Windows 7 SP1, Windows S...

CVE-2016-3230

CVE-2016-3230 is a local DoS vulnerability in the Windows Search component that affects Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (1511/Gold). The root cause is the Windows Search component failing to handle certain objects in memor...

CVE-2016-3341

CVE-2016-3341 affects Windows kernel‑mode drivers in Transaction Manager (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607) and is described as a local elevation of privilege via a crafted application. The root cause involves improper handling of memory objects in the Ker...

CVE-2017-8554

CVE-2017-8554 corresponds to a Windows kernel local information disclosure affecting Win32k.sys across multiple Windows versions. The CNVD-2017-12584 entry notes a local information disclosure in Win32k.sys exploitable via a crafted application to obtain memory contents. Microsoft security update...

CVE-2017-8709

The CVE-2017-8709 entry concerns a Windows kernel information disclosure vulnerability in which the Windows kernel component improperly handles objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Win...

CVE-2016-0142

CVE-2016-0142 is the Microsoft Video Control remote code execution vulnerability documented by NVD. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The issue arises from improper handling of objects in memory within the Video Cont...

CVE-2016-0196

CVE-2016-0196 concerns a privilege-escalation in Windows kernel-mode drivers. The initial description indicates that local users could gain privileges via a crafted application, affecting multiple Windows platforms including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8....

CVE-2016-3334

Technical details for CVE-2016-3334 are not publicly available in the provided documents; monitor for updates.

CVE-2016-3374

The CVE-2016-3374 entry describes an information-disclosure vulnerability in the PDF library used by Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The underlying issue allows remote attackers to obtain sensitive information vi...

CVE-2017-11772

CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...

CVE-2017-8689

Technical details about CVE-2017-8689 (affected product, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates; the available materials confirm a Windows kernel-mode elevation vulnerability but lack concrete specifics.

CVE-2016-0153

CVE-2016-0153 is a Windows OLE remote code execution vulnerability in Ole32/OLE handling. The issue arises when Windows OLE fails to properly validate user input, allowing a crafted file or webpage/email to execute arbitrary code with the caller’s privileges. Affected platforms include Windows Vi...

CVE-2016-3343

CVE-2016-3343 affects the Common Log File System (CLFS) driver in multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 variants, Server 2016). It enables local users to gain privileges via a crafted application, i.e., a local privilege escalation vulnerabi...

CVE-2017-0185

Technical details for CVE-2017-0185 are not provided in the supplied documents. No concrete product/version/impact information is available here; monitor for updates.

CVE-2017-8728

CVE-2017-8728 is a Windows PDF Library remote code execution vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 (1511–1703) and Windows Server 2016. The issue stems from the Windows PDF Library handling objects in memory, enabling arbitrary code execution in the c...

CVE-2018-8622

CVE-2018-8622 is a Windows kernel information disclosure vulnerability caused by the kernel’s improper handling of objects in memory. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, and Windows Server 2008 R2 (per...

CVE-2016-0197

CVE-2016-0197 is a local elevation-of-privilege vulnerability in the DirectX Graphics kernel subsystem (dxgkrnl.sys) affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012, Windows RT 8.1, and Windows 10 (including 1511). Root cause: improper handling of obje...

CVE-2016-3333

Technical details for CVE-2016-3333 are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-7211

Technical details for CVE-2016-7211 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0191

CVE-2017-0191 affects multiple Windows platforms (Windows 7, 8.1, 10 and Windows Server 2008 R2/2012/2012 R2/2016) with a denial-of-service condition caused by how memory objects are handled. The vulnerability could allow an attacker to cause a target system to stop responding. The provided sourc...

CVE-2017-8580

Technical details for CVE-2017-8580 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources to confirm affected products, root cause, impact, and any available mitigations or patches.

CVE-2017-8666

CVE-2017-8666 is described in the initial entry as an information disclosure in Win32k when handling objects in memory across multiple Windows versions (Windows 7/8.1/10, Server editions). Connected documents enumerate CVE-2017-8666 within Microsoft security update compilations (e.g., KB4034665/K...

CVE-2017-8688

CVE-2017-8688 is a Windows GDI+ information-disclosure issue that leaks kernel-memory addresses through GDI+ memory handling. Affected products include Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, and Windows 10 variants up to 1703/Server 2016. Connected analysis documents reveal related kernel me...