CVE-2016-3213

CVE-2016-3213 covers WPAD Elevation of Privilege in Windows where WPAD proxy discovery falls back to a NetBIOS name response, enabling privilege escalation via spoofed NetBIOS WPAD responses. Exploitation hinges on NetBIOS name queries for WPAD; attacker can respond to NetBIOS requests to influen...

CVE-2016-3286

CVE-2016-3286 affects Windows kernel-mode drivers (Win32k) across multiple OS versions (Vista through Windows 10 1511). The vulnerability arises in the Windows kernel-mode driver due to improper handling of memory objects, enabling a local attacker to gain elevated privileges via a crafted applic...

CVE-2016-7292

CVE-2016-7292 is a Windows Installer Elevation of Privilege vulnerability. The NVD description notes that the Installer in multiple Windows editions mishandles library loading, allowing a local attacker to gain higher privileges via a crafted application. Affected platforms include Windows Vista ...

CVE-2017-0113

CVE-2017-0113 concerns Uniscribe in Windows Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. The connected documents confirm it as an information-disclosure vulnerability in the Uniscribe component accessed via APIs like DrawText, enabling an attacker-controlled web resource to potentially r...

CVE-2017-0115

CVE-2017-0115 is an Uniscribe information-disclosure vulnerability affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue allows a remote attacker to read sensitive data from a process’s memory when a user visits a crafted web site, via the Uniscribe/usp10 path ...

CVE-2017-0246

CVE-2017-0246 is a local elevation of privilege in the Windows Graphics Component (kernel-mode, win32k) affecting multiple Windows versions (Windows 7 SP1 x64 and later, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows 10 1511/1607, Windows Server 2012/2016, RT 8.1). Root cause concerns the G...

CVE-2017-11763

CVE-2017-11763 is a remote code execution vulnerability in the Microsoft Graphics Component exploited via specially crafted embedded fonts. Affected products include multiple Windows versions listed in the CVE description. Remediation is provided by security updates in the October 2017 rollups (e...

CVE-2017-11851

The CVE-2017-11851 affects the Windows kernel information disclosure vulnerability: Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Server 2012/R2, Windows 10 (versions 1511, 1607, 1703, 1709), Windows Server 2016, and Server 1709. It arises from improper handling of objects in...

CVE-2017-8477

CVE-2017-8477 : A local information-disclosure vulnerability in Windows kernel objects during memory initialization (Win32k). Affected: multiple Windows versions including Windows 7 SP1, Windows 8.1, Windows 10 variants (1511, 1607, 1703) and Windows Server equivalents. Impact: potential informat...

CVE-2017-8479

Technical details for CVE-2017-8479 are not publicly available in the provided documents. Monitor for updates from official advisories and CVE records.

CVE-2017-8561

CVE-2017-8561 is a Windows kernel elevation-of-privilege vulnerability described as: a local attacker can exploit through improper handling of objects in memory by the Windows kernel, allowing code execution with elevated privileges. Affected software per the initial document includes Windows 8.1...

CVE-2017-8620

CVE-2017-8620 is a Windows Search Remote Code Execution vulnerability. The issue arises when Windows Search improperly handles objects in memory, allowing a remote attacker to execute code on the affected system. Multiple connected sources (Nessus/OpenVAS plugins) confirm this CVE is tied to the ...

CVE-2018-8314

CVE-2018-8314 is an elevation-of-privilege vulnerability described as failing a check that could allow a sandbox escape. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2008 R2, and Windows 10; it i...

CVE-2019-0683

Technical details about CVE-2019-0683 (affected component, root cause, impact, or fixes) are not provided in the connected documents. See references to broader Active Directory delegation changes and updates, but no CVE-specific technical data. Monitor for updates.

CVE-2020-1389

Technical details about CVE-2020-1389 are not provided in the connected documents. The materials only reiterate the vulnerability name and a generic Windows kernel information disclosure. Monitor official advisories for affected products, impact, and remediation updates.

CVE-2020-1419

Technical details about CVE-2020-1419 are not publicly provided in the supplied documents; no vendor, product, version, impact, or fix specifics are present. Monitor for updates.

CVE-2020-1427

CVE-2020-1427 is an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Affected product: Windows Network Connections Service (Windows). Vulnerable component: memory handling within the service, leading to code execution with ele...

CVE-2020-1559

Technical details (affected product/version, root cause, exploitability, or patch specifics) are not provided in the connected documents. Monitor for updates.

CVE-2021-24107

Technical details for CVE-2021-24107 are not publicly provided in the connected documents; sources mention the vulnerability name in update KBs but do not specify affected products, root cause, or fixes.

CVE-2021-26873

Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2021-26878

CVE-2021-26878 refers to a Windows Print Spooler elevation of privilege vulnerability. The connected documents confirm the affected component is the Windows Print Spooler service and that the vulnerability is locally exploitable with low attack complexity, with high impact on confidentiality, int...

CVE-2021-26887

The CVE-2021-26887 issue is an elevation of privilege in Microsoft Windows involving Folder Redirection enabled via Group Policy. Affected scenario occurs when the folder redirection file server is co-located with a Terminal Server; an attacker could begin redirecting another user’s personal data...

CVE-2024-38249

CVE-2024-38249 is a Windows Graphics Component elevation-of-privilege vulnerability. The connected sources confirm this CVE affects Windows Graphics Component and carries a CVSS v3.1 base score of 7.8 (HIGH), with local attack vector, low attack complexity, and privileges required: LOW; impact to...

CVE-2009-2499

The CVE-2009-2499 issue affects Microsoft Windows components: Windows Media Format Runtime versions 9.0, 9.5, and 11, and Windows Media Foundation on Windows Vista (Gold, SP1, SP2) and Server 2008. The vulnerability arises when processing MP3 files with crafted metadata, triggering memory corrupt...

CVE-2012-2556

CVE-2012-2556 : OpenType Font (OTF) parsing vulnerability in Windows kernel‑mode drivers allows remote code execution via a crafted font file. Affected: Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, Windows RT. Root cause: improper hand...

CVE-2012-2897

CVE-2012-2897 is a Windows kernel‑mode driver vulnerability known as the TrueType Font Parsing vulnerability. It affects multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, Windows RT) and is triggered by processing a craf...

CVE-2013-5058

CVE-2013-5058 is a Windows kernel win32k.sys integer overflow (RFONTOBJ::bTextExtent) vulnerability that can crash the kernel and may enable local privilege escalation. It affects multiple OS versions up to Windows Server 2012 R2; CoreLabs/Core advisory details describe a signed division overflow...

CVE-2014-0318

CVE-2014-0318 affects Windows kernel-mode driver code (win32k.sys) and enables local privilege escalation by abusing thread-owned object access. The vulnerability impacts multiple Windows client/server platforms listed in the initial description (e.g., Windows Server 2003 SP2, Vista SP2, Server 2...

CVE-2014-2781

CVE-2014-2781 describes a local privilege-escalation in Windows On-Screen Keyboard (OSK). A low-integrity process could interact with OSK to load a crafted program, bypassing integrity checks and achieving elevation. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Win...

CVE-2015-0003

CVE-2015-0003 affects Win32k.sys in multiple Windows versions (SERVER 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8, 8.1, Server 2012, RT/RT 8.1). The flaw allows local privilege escalation or denial of service via a crafted application, caused by a NULL pointer dereference in the...

CVE-2015-2423

CVE-2015-2423 is an “Unsafe Command Line Parameter Passing” vulnerability affecting a broad set of Windows OS versions (Vista through Windows 10) and Office apps (2007–2013) where a crafted command-line parameter to an Office app or Notepad can elevate from Low to Medium Integrity and disclose se...

CVE-2016-3216

CVE-2016-3216 involves GDI32.dll in the Windows Graphics Component, where memory handling flaws allow remote attackers to bypass ASLR and disclose memory contents. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT ...

CVE-2017-0086

CVE-2017-0086 affects the Uniscribe component (usp10.dll) used by Windows GDI drawing paths. The connected details identify the vulnerability as a heap memory corruption in USP10!MergeLigRecords, triggered during font processing (font tables like BASE/GSUB/GPOS/etc.). The Windows products listed ...

CVE-2017-11762

This CVE (CVE-2017-11762) is a remote code execution vulnerability in the Microsoft Windows Graphics Component that is triggered by specially crafted embedded fonts. Affected products span Windows client and server lines listed in the CVE entry (e.g., Windows 7, 8.1, 10 variants, Server 2008/2012...

CVE-2017-11765

CVE-2017-11765 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Serv...

CVE-2017-11814

CVE-2017-11814 is a Windows kernel information disclosure vulnerability. It involves improper handling of objects in memory in the Windows kernel and affects multiple Windows editions (Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows RT 8.1, Windows 10 v1511/1607/1...

CVE-2017-11816

CVE-2017-11816 is an information disclosure flaw in the Microsoft Windows GDI component. The connected advisory notes a WMF-file processing out-of-bounds read as the root cause, enabling a remote attacker to cause information leakage by convincing a user to open a specially crafted web page or do...

CVE-2017-8492

CVE-2017-8492 affects the Windows kernel across multiple Windows versions (server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, Server 2012/2016, RT 8.1, Windows 10 variants). The issue is a kernel information disclosure vulnerability exploitable by an authenticated user via a specially crafted applicatio...

CVE-2019-1009

CVE-2019-1009 describes an information disclosure in the Windows GDI component where memory contents are improperly disclosed. The vulnerability can be exploited by convincing a user to open a specially crafted document or visit a crafted webpage, enabling an attacker to obtain sensitive informat...

CVE-2019-1015

CVE-2019-1015 is a Windows GDI information-disclosure flaw where memory contents can be exposed. Attackers could mislead users to open a crafted document or visit a malicious page to trigger disclosure. Microsoft security update fixes how GDI handles in-memory objects. Affected component: Windows...

CVE-2020-0745

CVE-2020-0745 is a Windows Graphics Component elevation-of-privilege vulnerability caused by improper handling of memory objects. The entry (CVE-2020-0745) indicates a local attack vector requiring low privileges and no user interaction (CVSS v3.1: Local, Low, None, Privilege Escalation with High...

CVE-2020-0748

Technical details for CVE-2020-0748 are not publicly provided in the connected documents; no affected products, versions, or fixes are specified here. Monitor for updates from official advisories.

CVE-2020-1373

Technical details (affected products, root cause, impact, fixes) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2024-43570

CVE-2024-43570 is a Windows Kernel Elevation of Privilege vulnerability. Connected sources confirm affected software as Windows kernel components and indicate fixes released in October 2024 through MSRC advisories and OS updates (KB5044280/KB5044281/KB5044285) covering multiple Windows builds, wi...

CVE-2024-43620

CVE-2024-43620 corresponds to a Windows Telephony Service remote code execution vulnerability with a high impact (base CVSS 8.8; network access; user interaction required). In the connected documents, it is listed under Windows Telephony Service with an impact described as Execute arbitrary code ...

CVE-2025-24072

CVE-2025-24072 is a use-after-free vulnerability in Microsoft Local Security Authority Server (lsasrv) that can allow an authorized attacker to locally elevate privileges. The affected component is lsasrv; impact is elevated privileges (local). Connected sources (including NCSC/KB advisories) con...

CVE-2025-29969

Technical details about CVE-2025-29969 (affected product/version, root cause, exploitability, and remediation) are not provided in the supplied documents; monitor for updates.

CVE-2026-20820

CVE-2026-20820 is a local privilege-escalation vulnerability caused by a heap-based buffer overflow in the Windows Common Log File System Driver. An authenticated, locally-adjacent attacker could trigger the overflow to obtain higher privileges on the host. The CVE is corroborated by multiple fee...

CVE-2007-3091

CVE-2007-3091 is the Internet Explorer cross-domain document switching race-condition vulnerability. The issue occurs in Internet Explorer (notably IE6 SP1 and IE7 on multiple Windows versions) where a page transition can inadvertently reveal or execute content across origins due to a race betwee...

CVE-2010-2744

The CVE-2010-2744 flaw is a Win32k kernel-mode privilege-escalation issue in multiple Windows versions. A window-class handling bug lets local attackers gain privileges by creating a window and abusing SetWindowLongPtr to modify the popup menu structure or by abusing SwitchWndProc invoked via WM_...