CVE-2015-6113

Mode C: CVE-2015-6113 is a Windows kernel security feature bypass where a local attacker could bypass filesystem permissions via FileLinkInformation hard-links in sandboxed processes. The root cause is that ZwSetInformationFile accepted a link operation with 0 desired access for the file handle, ...

CVE-2016-0008

CVE-2016-0008 covers a Windows GDI32.dll ASLR bypass vulnerability. Affected software includes Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, and Windows RT Gold/8.1, where remote attackers could bypass ASLR via unspecified vectors. The v...

CVE-2013-0075

CVE-2013-0075 is a remote DoS in the Windows TCP/IP stack: a crafted packet terminating a TCP connection can reboot affected hosts. Affected: Windows Vista SP2; Windows Server 2008 SP2/R2/R2 SP1; Windows 7 SP1/Gold; Windows 8; Windows Server 2012; Windows RT. Root cause: improper handling of a co...

CVE-2013-1294

The CVE-2013-1294 entry describes a kernel race-condition vulnerability in the Windows family (XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, Windows RT) where improper handling of in-memory objects can be abused by a crafted local application to ...

CVE-2015-0059

CVE-2015-0059 is the Windows kernel-mode TrueType font parsing remote code execution vulnerability (win32k.sys) exposed via crafted TTF files. Affects multiple Windows versions including Windows 7, Windows 8/8.1, Windows Server 2008 R2 SP1, Windows Server 2012, and Windows RT/8.1; root cause is i...

CVE-2015-0060

CVE-2015-0060 is a Windows kernel-mode font handling vulnerability affecting the font mapper in win32k.sys across multiple Windows versions (Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, 7, 8, 8.1, Server 2012/2012 R2, RT). The root cause is improper font scaling in the font mapper, which allow...

CVE-2015-0073

CVE-2015-0073 concerns the Windows Registry Virtualization feature. The Windows kernel’s registry virtualization mechanism does not properly restrict changes to virtual stores, enabling a local attacker to elevate privileges via a crafted application. The vulnerability affects multiple Windows ve...

CVE-2015-1675

The connected CNVD entries corroborate CVE-2015-1675 family: Microsoft Windows Journal file handling vulnerabilities allow remote code execution via specially crafted Journal files (.jnt). Affected products/versions from the CVE scope include Windows Vista through Windows 8.1/Server editions, wit...

CVE-2015-1697

CVE-2015-1697 relates to a Windows Journal remote code execution vulnerability. Current sources confirm affected platforms include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, and Windows RT Gold/8.1, where processing a crafted ...

CVE-2015-2461

The CVE-2015-2461 entry is supported by connected documentation describing an ATMFD.DLL OpenType font parsing vulnerability in the Windows Adobe Type Manager Library. The exploitable condition is an out-of-bounds read in ATMFD.DLL when handling a crafted OpenType font, specifically triggered by a...

CVE-2016-0007

CVE-2016-0007 is a local privilege escalation in the Windows sandbox: the sandbox implementation mishandles reparse points across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10 1511). A crafted application could exploit this to gain...

CVE-2015-1720

CVE-2015-1720 is a local privilege-escalation vulnerability in Windows kernel-mode drivers caused by a use-after-free in kernel objects. A crafted application can exploit this to gain elevated privileges (kernel mode). Affected products include Windows Server 2003 SP2/R2 SP2, Windows Vista SP2, S...

CVE-2015-1721

CVE-2015-1721 is the Windows kernel-mode driver null-pointer dereference in Win32k.sys that can allow local privilege escalation or denial of service. Affected products span Windows Server 2003/2008/2012 families, Windows Vista/7/8/8.1, and Windows RT/Server variants (Win32k.sys). Root cause: NUL...

CVE-2015-1726

CVE-2015-1726 is a local privilege-escalation use-after-free vulnerability in Windows kernel-mode drivers (the kernel brush object) affecting Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (including R2) and RT 8.1. The underlying issu...

CVE-2015-2512

CVE-2015-2512 is a local privilege escalation in the Adobe Type Manager Library (Font Driver) on Windows. The vulnerability arises from improper handling of objects in memory within the Font Driver, allowing a crafted application to execute with elevated privileges (SYSTEM) on affected Windows ve...

CVE-2015-2530

CVE-2015-2530 affects Windows Journal across Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012, RT, and Windows 10. The vulnerability enables remote code execution via a crafted .jnt file (Windows Journal RCE Vulnerability), a distinct issue from CVE-2015-2513 and CVE-2...

CVE-2013-3200

CVE-2013-3200 concerns a local-privilege-escalation in Windows USB handling. The vulnerability exists in kernel-mode USB drivers across multiple Windows releases (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT). A crafted USB devi...

CVE-2014-0254

The CVE-2014-0254 issue affects Microsoft Windows 8, Windows Server 2012, and Windows RT, where the IPv6 TCP/IP stack does not properly validate ICMPv6 Router Advertisement packets, allowing remote denial-of-service that can cause a system hang. Affected component: IPv6 implementation in Windows ...

CVE-2014-6317

CVE-2014-6317 is a denial-of-service vulnerability in Windows kernel-mode driver code (win32k.sys) caused by an array index error when loading TrueType font files. The issue affects multiple Windows client and server SKUs (e.g., Windows 7, 8/8.1, Vista, Windows Server 2003/2008/2012 and RT varian...

CVE-2014-6322

CVE-2014-6322 is a Windows Audio Service elevation-of-privilege vulnerability (MS14-071). Affects Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Server 2012/2012 R2, and Windows RT. Root cause involves the Windows Audio service components (audiosrv.dll, audioses.dll, audioks...

CVE-2015-1696

Consolidated details from CNVD entries confirm CVE-2015-1696 concerns Microsoft Windows Journal file handling. The vulnerability arises when processing specially crafted Journal (.jnt) files, enabling a remote attacker to execute arbitrary code. Affected software scope includes Windows editions l...

CVE-2016-0016

CVE-2016-0016 is a Windows DLL loading vulnerability that enables local privilege escalation via a crafted application. Affected products include Windows Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows 10, and Windows Server 2008/2012 families (as listed in the CVE entry). Root cause: mishandlin...

CVE-2014-1807

The CVE-2014-1807 issue is a Windows Shell privilege-escalation vulnerability tied to the ShellExecute path/file-association handling in Windows Shell. A local attacker could exploit this by delivering a crafted application, taking advantage of improper file-association processing to execute code...

CVE-2015-1677

Technical details about CVE-2015-1677 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-1680

Technical details about CVE-2015-1680 are not publicly available in the provided connected documents; monitor for updates.

CVE-2015-2519

CVE-2015-2519 is a Windows Journal remote code execution vulnerability caused by an integer overflow when handling Journal (.jnt) files. Affected Windows versions span Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, RT/RT 8.1, and Windows 10. The issue enables arbitrary ...

CVE-2013-1334

CVE-2013-1334 concerns a local privilege-escalation in Windows via the Win32k.sys kernel-mode driver. The exposed issue is that Win32k window/object handling can be abused to gain kernel-level privileges through a crafted application, enabling arbitrary code execution with high impact. Affected p...

CVE-2013-1339

Summary (CVE-2013-1339): The Windows Print Spooler component has a memory management flaw during deletion of printer connections across affected Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT). This allows remote authenticated users to execu...

CVE-2013-3173

CVE-2013-3173 corresponds to the Win32k.sys kernel-mode driver buffer overflow vulnerability (Win32k Buffer Overwrite Vulnerability) that allows local privilege escalation on affected Windows versions. Documents reference Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008/R2 SP1, 7 SP1, ...

CVE-2015-1702

CVE-2015-1702 affects the Service Control Manager (SCM) in multiple Windows client and server editions (e.g., Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8/8.1, 2012/2012 R2, RT/RT 8.1). The root cause is that SCM does not properly constrain impersonation levels, allowing a...

CVE-2015-2382

CVE-2015-2382 describes an information disclosure in Microsoft Windows where win32k.sys, the kernel-mode portion of Windows, can leak kernel memory contents to local users via a crafted application. Affected products include Windows 8, Windows 8.1, Windows Server 2012 (Gold and R2), and Windows R...

CVE-2015-6133

CVE-2015-6133 affects multiple Windows versions (Windows 8/8.1, Windows Server 2012 R2, Windows RT, Windows 10 1511) and is caused by improper handling of library loading, enabling local privilege escalation via a crafted application. Public exploitation exists: exploits reference MS15-132 and re...

CVE-2013-1283

CVE-2013-1283 affects Windows kernel-mode drivers, specifically Win32k.sys, with a local privilege-escalation due to race conditions from improper handling of memory objects. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2, Wind...

CVE-2013-1332

CVE-2013-1332 is a local privilege-escalation vulnerability in the DirectX Graphics Kernel Subsystem (dxgkrnl.sys) used by Windows. The issue arises from how objects in memory are handled by the kernel-mode driver, allowing a crafted local user to elevate privileges ("DirectX Graphics Kernel Subs...

CVE-2013-3879

Win32k Use After Free Vulnerability (CVE-2013-3879): a local privilege-escalation in the win32k.sys kernel-mode driver affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012, and RT. Root cause: use-after-free in memory object handling within the W...

CVE-2015-0062

CVE-2015-0062 is a local privilege escalation in multiple Windows platforms (Windows 7 SP1, Windows 8/8.1, Windows Server 2008 R2 SP1, Server 2012/2012 R2, etc.) caused by incorrect impersonation handling in a process that uses SeAssignPrimaryTokenPrivilege, allowing a crafted local attacker to g...

CVE-2015-0074

CVE-2015-0074 is tied to the Adobe Font Driver in Windows (ATMFD.DLL) and related font engines. The vulnerability arises from improper memory allocation in the driver, enabling remote denial-of-service via crafted fonts loaded from a website or file. Connected sources (MS15-021 and related adviso...

CVE-2015-0095

CVE-2015-0095 affects Microsoft Windows kernel-mode drivers across multiple OS versions (e.g., Windows Server 2003 SP2, Windows Vista SP2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012). Root cause: a kernel-mode driver vulnerability enabling local attackers to cause a denial-of-service via N...

CVE-2015-1679

Technical details about CVE-2015-1679 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-1723

CVE-2015-1723 is a local privilege-escalation in Windows kernel-mode drivers (use-after-free) affecting Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Server 2012 (Gold/R2) and Windows RT 8.x. A crafted application can exploit the use-after-free i...

CVE-2015-2417

CVE-2015-2417 describes an OLE-based elevation-of-privilege vulnerability in multiple Windows platforms (Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT Gold/8.1). The root cause is an input validation flaw in OLE t...

CVE-2013-1340

CVE-2013-1340 is a Windows kernel local privilege-escalation vulnerability in the Win32k.sys component (Win32k Dereference Vulnerability). The flaw occurs in memory object handling within the Win32k kernel-mode driver and affects multiple Windows platforms including XP SP2/SP3, Server 2003 SP2, V...

CVE-2013-1344

CVE-2013-1344 affects win32k.sys in multiple Windows kernel-mode drivers. A memory handling flaw in Win32k allows local privilege escalation via a crafted application on affected OSes (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows R...

CVE-2013-3894

CVE-2013-3894 affects Windows kernel-mode drivers and is triggered by a crafted CMAP table in a TrueType font, enabling remote code execution. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Server 2012, Windows RT. Impact per sources: r...

CVE-2015-0091

CVE-2015-0091 corresponds to a buffer overflow in the Adobe Font Driver (ATMFD.DLL) within Windows’ font rendering stack. The connected materials describe it as a “buffer overflow in a constant-sized allocation” related to font processing, part of a set of ATMFD vulnerabilities (alongside CVE-201...

CVE-2015-0061

CVE-2015-0061 corresponds to a TIFF parsing information-disclosure vulnerability in Microsoft Windows graphics components. The issue arises from improper initialization of memory when processing TIFF images, allowing a remote attacker to extract sensitive information from process memory. Affected...

CVE-2015-0093

CVE-2015-0093 (BLEND vulnerability) is described in Google Project Zero material as a shared-charstring flaw that enables arbitrary PostScript operations with fully reliable control, affecting both the Adobe Reader/ CoolType path and the Windows ATMFD.DLL kernel driver. The root cause is a negati...

CVE-2015-1699

Affected software: Microsoft Windows with Journal handling (Journal files, .jnt). The vulnerability allows remote code execution via a crafted Journal file, as described across CVE-2015-1699 and CNVD entries, with root cause in how Journal files are parsed. No exploitation details are provided in...

CVE-2015-2550

Summary: CVE-2015-2550 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, RT, and Windows 10). The connected sources describe local privilege escalation via a crafted application i...

CVE-2015-2416

CVE-2015-2416 is a Windows OLE privilege-elevation vulnerability affecting multiple editions (Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012). The root cause, as cited across connected sources, is an input-validation flaw in OLE that allows remote at...