CVE-2013-3903

CVE-2013-3903 is a local-privilege/DoS issue in Windows kernel‑mode: an array index error in win32k.sys allows a crafted TrueType font to reboot the system on Windows 8, Windows Server 2012 (Gold/R2), Windows RT, and Windows 8.1. The vulnerability stems from the font parsing pathway in the TrueTy...

CVE-2015-0061

CVE-2015-0061 corresponds to a TIFF parsing information-disclosure vulnerability in Microsoft Windows graphics components. The issue arises from improper initialization of memory when processing TIFF images, allowing a remote attacker to extract sensitive information from process memory. Affected...

CVE-2013-1342

Technical details for CVE-2013-1342 are not publicly available in the provided Connected documents. The initial description contains general vulnerability information only. Monitor for updates from official advisories and vendor advisories to obtain affected products, impact, and remediation spec...

CVE-2015-1719

CVE-2015-1719 is a local information-disclosure vulnerability in Microsoft Windows kernel-mode drivers across multiple OS versions (Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012, RT/RT 8.1). The root issue is information being readable from k...

CVE-2015-1681

CVE-2015-1681 affects multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, 7 SP1, 8/8.1, 2012 Gold/R2, RT/8.1) and is triggered by handling a crafted .msc file in Microsoft Management Console File Format. The underlying issue is a vulnerability in the MMC icon/destination-buffer handling that c...

CVE-2015-1695

CVE-2015-1695 concerns Windows Journal Remote Code Execution via crafted Journal files. Connected CNVD records describe vulnerability in Windows Journal handling of Journal (.jnt) files that allows remote attackers to craft files parsed by a user to execute arbitrary code, aligning with the CVE f...

CVE-2015-0087

CVE-2015-0087 is a memory-disclosure vulnerability in the Adobe Font Driver stack (notably ATMFD.DLL) and related font engines. Exploitation would leak uninitialized memory from the host process or kernel, potentially aiding KASLR bypass and information disclosure. Google Project Zero detailed a ...

CVE-2015-1698

CVE-2015-1698 affects Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012 Gold/R2, RT Gold/8.1). The vulnerability arises from handling of specially crafted Journal (.journal/.jnt) files, allowing remote code execution when parsed by an application. Connected CNVD ...

CVE-2013-3865

Win32k Multiple Fetch Vulnerability (CVE-2013-3865) affects multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012, Windows RT). It allows local privilege escalation through a crafted application affecting win32k.sys in kernel-mode drivers...

CVE-2013-3866

CVE-2013-3866 is a Windows kernel‑mode driver privilege escalation in Win32k.sys affecting multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8, Server 2012, Windows RT). The root cause is a crafted application that allows local users to gain...

CVE-2015-0089

Memory-disclosure under CVE-2015-0089 exists in the DLLs/libraries used for PostScript/OpenType font handling (ATMFD.DLL in Windows kernel, Adobe Reader CoolType, DirectWrite, and WPF). The root cause is uninitialized transient memory (32 dwords) read by Charstring interpreters, enabling leakage ...

CVE-2015-1678

Technical details about CVE-2015-1678 are not provided in the connected documents. The initial entry notes a kernel memory disclosure via Win32k.sys, but lacks specific vulnerable components, affected products, or fixes in the supplied sources. Monitor for updates.

CVE-2013-1343

Technical details for CVE-2013-1343 are not publicly available in the provided documents; affected components, impact, and remediation are not specified here. Monitor for updates from NVD and EUVD sources.

CVE-2015-0084

CVE-2015-0084 affects Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8/8.1, Windows Server 2012 (Gold/R2) and Windows RT (Gold/8.1). The Task Scheduler fails to properly constrain impersonation levels, enabling local privilege escalation by launching executables via a crafted task. Public exp...

CVE-2013-1305

CVE-2013-1305 affects Microsoft Windows HTTP.sys in Windows 8, Windows Server 2012, and Windows RT. The flaw arises when HTTP.sys handles a crafted HTTP header, allowing a remote attacker to trigger an infinite loop in the HTTP header parser and cause a denial-of-service condition on vulnerable s...

CVE-2013-3907

CVE-2013-3907 affects portcls.sys, the audio port-class driver in Windows kernel-mode, across multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, Windows RT). The issue is a local privilege-escalation vulnerability described as the Port-Class Driv...