CVE-2017-0057

CVE-2017-0057 is a Windows DNS client information-disclosure vulnerability. The DNS client in affected Windows versions (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607, Windows Server 2016) may mishandle DNS queries, enabling an attacker to obtain sensitive information....

CVE-2017-0292

CVE-2017-0292 describes a Windows PDF remote code execution vulnerability in the Windows PDF handler. A specially crafted PDF file can cause arbitrary code execution on affected Windows versions (Windows 8.1; Windows Server 2012 Gold/R2; Windows RT 8.1; Windows 10 1511, 1607, 1703; Windows Server...

CVE-2016-0190

CVE-2016-0190 : Information disclosure vulnerability in Microsoft Windows where the Volume Manager Driver (volmgr.sys) does not correctly tie a USB disk mounted via RemoteFX over RDP to the mounting user session, allowing local access to file/directory information on the mounted USB disk. Affecte...

CVE-2016-3270

CVE-2016-3270 is a Win32k local privilege-escalation vulnerability in the Windows kernel graphics subsystem. The flaw arises from improper handling of objects in memory within the Win32k graphics component, allowing a local user to gain SYSTEM privileges via a crafted application. Affected produc...

CVE-2017-8573

CVE-2017-8573 is the Microsoft Windows Graphics Component elevation-of-privilege vulnerability. Public details in CNVD-2017-16000 describe that the Graphics component fails to properly handle in-memory objects, allowing a local attacker to execute code in kernel mode with elevated privileges. The...

CVE-2017-8720

CVE-2017-8720 is a local elevation-of-privilege flaw in the Windows graphics stack tied to the Win32k component. The vulnerability arises when Win32k fails to properly handle memory objects, allowing an attacker who can run code on a system to execute with kernel or higher privileges. Affected pr...

CVE-2016-3370

CVE-2016-3370 corresponds to a PDF library information-disclosure vulnerability in Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 versions (1511, 1607). The issue allows remote attackers to obtain sensitive information via a crafted web site or content,...

CVE-2016-3230

CVE-2016-3230 is a local DoS vulnerability in the Windows Search component that affects Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (1511/Gold). The root cause is the Windows Search component failing to handle certain objects in memor...

CVE-2017-8467

CVE-2017-8467 is a Windows graphics elevation-of-privilege vulnerability in the graphics/Win32k component. The root cause is theGraphics subsystem failing to properly handle objects in memory, enabling a local attacker to gain higher privileges. Affected platforms include Windows 7 SP1, Windows S...

CVE-2017-8554

CVE-2017-8554 corresponds to a Windows kernel local information disclosure affecting Win32k.sys across multiple Windows versions. The CNVD-2017-12584 entry notes a local information disclosure in Win32k.sys exploitable via a crafted application to obtain memory contents. Microsoft security update...

CVE-2017-8709

The CVE-2017-8709 entry concerns a Windows kernel information disclosure vulnerability in which the Windows kernel component improperly handles objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Win...

CVE-2016-0142

CVE-2016-0142 is the Microsoft Video Control remote code execution vulnerability documented by NVD. It affects Windows Vista SP2, Windows 7 SP1, Windows 8.1, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The issue arises from improper handling of objects in memory within the Video Cont...

CVE-2016-3334

Technical details for CVE-2016-3334 are not publicly available in the provided documents; monitor for updates.

CVE-2016-3341

CVE-2016-3341 affects Windows kernel‑mode drivers in Transaction Manager (Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 1511/1607) and is described as a local elevation of privilege via a crafted application. The root cause involves improper handling of memory objects in the Ker...

CVE-2016-3374

The CVE-2016-3374 entry describes an information-disclosure vulnerability in the PDF library used by Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The underlying issue allows remote attackers to obtain sensitive information vi...

CVE-2017-11772

CVE-2017-11772 describes an information-disclosure vulnerability in the Microsoft Windows Search component where memory-handling flaws could allow an attacker to obtain sensitive data. The CVE applies to multiple Windows versions (including Windows client and server SKUs listed in the entry). Con...

CVE-2016-0196

CVE-2016-0196 concerns a privilege-escalation in Windows kernel-mode drivers. The initial description indicates that local users could gain privileges via a crafted application, affecting multiple Windows platforms including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8....

CVE-2016-3343

CVE-2016-3343 affects the Common Log File System (CLFS) driver in multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 variants, Server 2016). It enables local users to gain privileges via a crafted application, i.e., a local privilege escalation vulnerabi...

CVE-2017-8689

Technical details about CVE-2017-8689 (affected product, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates; the available materials confirm a Windows kernel-mode elevation vulnerability but lack concrete specifics.

CVE-2017-8728

CVE-2017-8728 is a Windows PDF Library remote code execution vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 (1511–1703) and Windows Server 2016. The issue stems from the Windows PDF Library handling objects in memory, enabling arbitrary code execution in the c...

CVE-2016-0197

CVE-2016-0197 is a local elevation-of-privilege vulnerability in the DirectX Graphics kernel subsystem (dxgkrnl.sys) affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012, Windows RT 8.1, and Windows 10 (including 1511). Root cause: improper handling of obje...

CVE-2016-3333

Technical details for CVE-2016-3333 are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2017-0191

CVE-2017-0191 affects multiple Windows platforms (Windows 7, 8.1, 10 and Windows Server 2008 R2/2012/2012 R2/2016) with a denial-of-service condition caused by how memory objects are handled. The vulnerability could allow an attacker to cause a target system to stop responding. The provided sourc...

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8666

CVE-2017-8666 is described in the initial entry as an information disclosure in Win32k when handling objects in memory across multiple Windows versions (Windows 7/8.1/10, Server editions). Connected documents enumerate CVE-2017-8666 within Microsoft security update compilations (e.g., KB4034665/K...

CVE-2016-7211

Technical details for CVE-2016-7211 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0156

CVE-2017-0156 is an elevation-of-privilege vulnerability in the Microsoft Graphics component affecting Windows 7, 8.1, RT 8.1, 10, and Windows Server 2008 R2/2012/2012 R2/2016. The issue arises when the Graphics Component fails to properly handle memory objects, allowing a local attacker to gain ...

CVE-2017-0291

CVE-2017-0291 is a Windows PDF remote-code-execution vulnerability tied to the JPEG2000 parsing path in the Microsoft Windows PDF library. The KLA/Kaspersky entry explicitly lists a Windows PDF remote-code-execution vulnerability with CVE-2017-0291 and describes exploitation via specially crafted...

CVE-2017-0293

CVE-2017-0293 : Microsoft Windows PDF Library improperly handles objects in memory, allowing remote code execution in multiple Windows versions. Root cause (as described) is memory handling that can lead to code execution in the context of the current user; attacker could gain user rights if expl...

CVE-2017-8580

Technical details for CVE-2017-8580 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources to confirm affected products, root cause, impact, and any available mitigations or patches.

CVE-2017-8675

The CVE-2017-8675 entry describes an elevation of privilege in Windows due to a flaw in the Win32k subsystem. Affects: Windows kernel-mode drivers component on Windows versions including Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (1...

CVE-2016-3221

The CVE-2016-3221 entry describes a local privilege-escalation in Windows kernel-mode drivers (Win32k) across multiple OS versions (Windows Vista SP2, Server 2008 SP2/R2, Win7 SP1, Win8.1, Server 2012, Windows RT 8.1, Windows 10 Gold/1511) exploitable by a crafted application. Affected component:...

CVE-2017-8593

CVE-2017-8593 corresponds to an elevation-of-privilege flaw inMicrosoft Windows Win32k where objects in memory are not handled correctly. The exposed component is Win32k, and the affected OS family includes Windows 7 SP1, Windows 8.1, Windows 10 variants (including 1511, 1607, 1703), Windows Serv...

CVE-2017-8562

CVE-2017-8562 is an elevation-of-privilege vulnerability in Windows caused by improper handling of Advanced Local Procedure Call (ALPC) calls. The issue allows a local attacker to run arbitrary code with the security context of the local system, given successful exploitation. Affected Windows ver...

CVE-2017-8591

The connected CNVD entry for CVE-2017-8591 describes a remote code execution flaw in the Windows Input Method Editor (IME) where memory objects are mishandled. Affected products include Windows platforms listed in the CVE entry (IME component on Windows 8.1, various Windows 10/Server SKUs). The r...

CVE-2017-8624

CVE-2017-8624 corresponds to the Windows CLFS Elevation of Privilege Vulnerability in the Common Log File System. The initial description states that CLFS on multiple Windows editions handles in-memory objects in an unsafe way, enabling local privilege escalation. The CVSS data supplied indicates...

CVE-2016-0041

CVE-2016-0041 is a Windows DLL loading vulnerability affecting multiple Windows releases (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10, IE 10–11). The issue is described as mishandling DLL loading, enabling local privilege escalation via a crafted application. Connected advi...

CVE-2016-0048

CVE-2016-0048 is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10, and 1511). Root cause: kernel-mode Win32k.sys memory handling bug that allows a crafted local application to gain full pr...

CVE-2016-3354

CVE-2016-3354 : This is the GDI information disclosure vulnerability in Windows GDI. The Graphics Device Interface in affected Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012, Windows RT 8.1, Windows 10 1511/1607) allows local users to bypass ASLR by running a cra...

CVE-2016-3349

The CVE-2016-3349 issue is a Win32k Elevation of Privilege in Windows where the Windows kernel-mode driver (Win32k.sys) fails to handle memory objects correctly. An attacker who can log on locally and run a crafted application could execute arbitrary code in kernel mode, gaining full control and ...

CVE-2017-8556

CVE-2017-8556 affects Microsoft Windows Graphics Component. The vulnerability arises from how Graphics handles objects in memory, enabling a local attacker to elevate privileges by executing arbitrary code in kernel mode. CNVD entries corroborate kernel-mode code execution via Graphics memory han...

CVE-2016-3355

CVE-2016-3355 affects the Windows Graphics Device Interface (GDI) across multiple Windows versions. The vulnerability arises from how GDI handles objects in memory, enabling a local attacker to gain kernel-mode privileges by executing a crafted application. The impact is privilege escalation with...

CVE-2017-8668

CVE-2017-8668 is a Windows kernel information-disclosure vulnerability affecting the Volume Manager Extension Driver. Affected products include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, and Windows Server 2012/2012 R2. The underlying issue is in the Volume Manage...

CVE-2016-0117

CVE-2016-0117 is a Windows PDF Library remote code execution vulnerability affecting multiple Windows platforms: Windows 8.1, Windows Server 2012 (and R2), Windows RT 8.1, and Windows 10 (including version 1511). The root cause is improper handling/validation within the Windows PDF library when p...