CVE-2011-0034

The CVE-2011-0034 issue is a stack overflow in the OpenType Compact Font Format (CFF) driver (ATMFD.dll) in Microsoft Windows. It can be triggered by crafted OpenType fonts and allows remote attackers to execute arbitrary code on affected systems. Affected Windows versions include Windows XP SP2/...

CVE-2011-0096

The CVE describes a vulnerability in the MHTML protocol handler where improper processing of MIME-formatted requests for content blocks can allow a remote attacker to trigger client-side effects in Internet Explorer. Connected advisories (MS11-026 and related OpenVAS/Nessus listings) frame this a...

CVE-2013-1277

AFFECTED: Microsoft Windows family (XP SP2/SP3; Server 2003 SP2; Vista SP2; Server 2008 SP2/R2/R2 SP1; Windows 7 Gold/SP1) – vulnerability in the kernel-mode driver win32k.sys. WHAT: A race condition in win32k.sys that allows local users to gain privileges and read arbitrary kernel memory when a ...

CVE-2015-2465

CVE-2015-2465 affects the Windows shell and related components (Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012/2012 R2, Windows RT/RT 8.1, and Windows 10). The vulnerability arises from not properly constraining impersonation levels, enabling loca...

CVE-2015-6095

CVE-2015-6095 is a Windows Kerberos security feature bypass vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2 SP1, 7 SP1, 8, 8.1, 2012/2012 R2, RT, 10 1511). The issue arises from mishandling password changes, which can let physically proximate attackers bypass authenticat...

CVE-2016-0101

CVE-2016-0101 corresponds to a Windows Media Parsing Remote Code Execution vulnerability affecting multiple Windows platforms (Windows 7 SP1, 8.1, Server 2008 R2/2012, RT 8.1, Windows 10). The root cause is described as improper handling of media content in the Windows Media/Media library, enabli...

CVE-2016-0153

CVE-2016-0153 is a Windows OLE remote code execution vulnerability in Ole32/OLE handling. The issue arises when Windows OLE fails to properly validate user input, allowing a crafted file or webpage/email to execute arbitrary code with the caller’s privileges. Affected platforms include Windows Vi...

CVE-2016-3333

Technical details for CVE-2016-3333 are not publicly provided in the supplied documents; monitor for updates.

CVE-2016-3343

CVE-2016-3343 affects the Common Log File System (CLFS) driver in multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 variants, Server 2016). It enables local users to gain privileges via a crafted application, i.e., a local privilege escalation vulnerabi...

CVE-2016-3376

CVE-2016-3376 is a local privilege escalation in the Windows kernel Win32k subsystem affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7, 8.1, Server 2012, Windows RT 8.1, and Windows 10 releases 1511/1607). The flaw involves the kernel-mode drivers mishandling objects i...

CVE-2017-0120

CVE-2017-0120 describes an Uniscribe information-disclosure vulnerability in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue allows remote attackers to obtain sensitive data from process memory via a crafted web site. A CIRCL sighting confirms exploitation activity...

CVE-2017-8484

Technical details about CVE-2017-8484 are not publicly provided in the connected documents. No specific affected product/version, root cause, or remediation are present here. Monitor for updates from official advisories.

CVE-2017-8532

CVE-2017-8532 concerns a memory disclosure in Windows graphics Uniscribe across multiple Windows releases (Windows 7/8.1/10 and corresponding Server variants). The vulnerability affects the Microsoft Windows Graphics component and Uniscribe; the root cause is improper memory disclosure within gra...

CVE-2017-8680

CVE-2017-8680 is a Windows kernel/Win32k information-disclosure vulnerability. The available documents describe memory-object handling flaws in Win32k that could disclose kernel data to user mode. Exploitation details are not fully provided in the initial description, but related sources note pub...

CVE-2017-8683

CVE-2017-8683 is a Windows graphics remote-code-execution vulnerability tied to Win32k Graphics via specially crafted embedded fonts. Affected products include Windows client/server releases from Windows 7 SP1 to Windows 10 1703 and Windows Server 2008 SP2/R2 SP1/2012, plus Office Word Viewer+Off...

CVE-2017-8728

CVE-2017-8728 is a Windows PDF Library remote code execution vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 (1511–1703) and Windows Server 2016. The issue stems from the Windows PDF Library handling objects in memory, enabling arbitrary code execution in the c...

CVE-2019-1363

CVE-2019-1363 is a Windows GDI information-disclosure vulnerability. The Windows GDI component can leak memory-resident data when handling objects, enabling an attacker to retrieve targeted-system information after logging in and running a crafted app. The entry is supported by multiple advisorie...

CVE-2024-38247

CVE-2024-38247 is a Windows Graphics Component local elevation of privilege vulnerability. The CVSSv3.1 vector shows Attack Vector: Local, Privileges Required: Low, User Interaction: None, with all of Confidentiality/Integrity/Availability impacts: High. Public documents confirm a Windows patch r...

CVE-2010-0240

CVE-2010-0240 concerns a remote code execution vulnerability in the Windows TCP/IP stack. Affected products from the provided documents include Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold, SP2). The issue arises when a custom network driver is used: the TCP/IP implementation does...

CVE-2011-0029

The CVE-2011-0029 issue affects the Microsoft Remote Desktop Connection client (versions 5.2, 6.0, 6.1, 7.0). It is a local privilege-escalation vulnerability caused by an untrusted search path: a Trojan DLL loaded from the current working directory when a directory contains a .rdp file. Impact i...

CVE-2013-3876

CVE-2013-3876 concerns DirectAccess in Windows platforms where the client/server DirectAccess component fails to properly verify server X.509 certificates. This enables a man-in-the-middle to impersonate a legitimate server and potentially read encrypted domain credentials when a crafted certific...

CVE-2015-0006

The CVE-2015-0006 issue is a vulnerability in Microsoft Windows’ Network Location Awareness (NLA) service. The root cause is that NLA does not perform mutual authentication to verify domain connections, enabling a remote attacker to spoof DNS/LDAP responses on a local network and trigger an unint...

CVE-2015-2367

CVE-2015-2367 affects Windows kernel-mode driver Win32k.sys across multiple Windows versions (Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, 8/8.1, Server 2012/2012 R2, Windows RT 8.1). Root cause is an information-disclosure in uninitialized kernel memory via a crafted...

CVE-2015-2459

CVE-2015-2459 concerns ATMFD.DLL in the Windows Adobe Type Manager Library across Windows Vista/7/8/10 and server editions. The connected exploitpack entry describes an out-of-bounds read in ATMFD.DLL triggered by processing a malformed OpenType font, specifically a corrupted CFF table Name INDEX...

CVE-2015-2525

CVE-2015-2525 affects Windows Task Scheduler across multiple OS versions (Vista SP2, Server 2008 SP2/R2, Windows 7/8/8.1, Server 2012/2012 R2, RT/10). The vulnerability allows local privilege escalation by bypassing filesystem restrictions during task deletion via Task Scheduler (schedsvc.dll) wi...

CVE-2015-6101

CVE-2015-6101 is a Windows kernel local privilege escalation affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT/8.1, and Windows 10 (build 1511). The vulnerability allows a local user to gain privileges via a crafted ...

CVE-2015-6173

CVE-2015-6173 targets the Windows kernel memory elevation vulnerability affecting multiple Windows versions (Vista SP2, 2008 SP2/R2, 7 SP1, 8/8.1, 2012 Gold/R2, RT/8.1, 10 RT1/1511). It enables local privilege escalation via a crafted application, with exploitation publicized ( exploit-db entries...

CVE-2016-0006

CVE-2016-0006 is a local privilege-escalation vulnerability in the Windows sandbox implementation where reparse points are mishandled. A crafted application can escalate privileges on affected systems by exploiting this flaw. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2...

CVE-2016-0196

CVE-2016-0196 concerns a privilege-escalation in Windows kernel-mode drivers. The initial description indicates that local users could gain privileges via a crafted application, affecting multiple Windows platforms including Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8....

CVE-2016-0197

CVE-2016-0197 is a local elevation-of-privilege vulnerability in the DirectX Graphics kernel subsystem (dxgkrnl.sys) affecting Windows Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Server 2012, Windows RT 8.1, and Windows 10 (including 1511). Root cause: improper handling of obje...

CVE-2016-3230

CVE-2016-3230 is a local DoS vulnerability in the Windows Search component that affects Windows 7, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (1511/Gold). The root cause is the Windows Search component failing to handle certain objects in memor...

CVE-2017-8689

Technical details about CVE-2017-8689 (affected product, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates; the available materials confirm a Windows kernel-mode elevation vulnerability but lack concrete specifics.

CVE-2017-8719

CVE-2017-8719 is a Windows Kernel information-disclosure vulnerability triggered by improper handling of objects in memory. Affected products include Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703), and W...

CVE-2019-1432

CVE-2019-1432 is an information-disclosure vulnerability in DirectWrite, where memory contents may be improperly disclosed. The Red Hat CVE entries and the NVD record describe this as a memory disclosure issue unique from CVE-2019-1411. The available documents do not provide specifics on affected...

CVE-2025-29954

Technical details for CVE-2025-29954 are not publicly provided in the supplied documents. Monitor for official updates from Microsoft (MSRC) and vulnerability feeds as the connected sources are not detailed here.

CVE-2025-29962

Technical details about CVE-2025-29962 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.

CVE-2025-29968

Technical details (affected product/versions, root cause, impact, exploit info, and fixes) are not provided in the connected documents. Based on the supplied sources, only the basic description and CVSS metrics are available. Monitor for updates.

CVE-2010-0489

The CVE-2010-0489 entry corresponds to a Race Condition Memory Corruption vulnerability in Microsoft Internet Explorer (affecting IE 5.01 SP4, 6, 6 SP1, and 7). The connected sources confirm a remote code execution scenario triggered by specially crafted HTML/Web content, with exploitation possib...

CVE-2010-3944

CVE-2010-3944 corresponds to a Win32k memory corruption/pointer-dereference vulnerability in Windows 7 and Windows Server 2008 R2 kernel-mode drivers. A crafted input may allow a local attacker to cause a bugcheck or possibly execute arbitrary code via CSRSS.EXE, as demonstrated by public PoCs an...

CVE-2015-1643

CVE-2015-1643 affects multiple Windows versions (Vista to Server 2012/R2, RT/RT 8.1, etc.). The root cause is NtCreateTransactionManager type confusion that fails to properly constrain impersonation levels, enabling a local unprivileged user to escalate to higher privileges via a crafted applicat...

CVE-2016-0098

CVE-2016-0098 is a remote-code-execution flaw in Microsoft Windows media handling (Windows Media parsing) affecting Windows 7 SP1, Windows 8.1, Windows Server 2008 R2 SP1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10. An attacker can trigger arbitrary code execution by convincing a...

CVE-2016-7211

Technical details for CVE-2016-7211 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-7257

CVE-2016-7257 concerns the GDI component in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1) and Office for Mac/Office 2016 for Mac. The vulnerability enables a remote attacker to disclose sensitive information from a process’s memory by prompting a user to visit a cr...

CVE-2017-8578

CVE-2017-8578 is a Win32k elevation of privilege vulnerability in Windows where Win32k fails to properly handle objects in memory. Affected products include Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 (various builds 1511...

CVE-2017-8666

CVE-2017-8666 is described in the initial entry as an information disclosure in Win32k when handling objects in memory across multiple Windows versions (Windows 7/8.1/10, Server editions). Connected documents enumerate CVE-2017-8666 within Microsoft security update compilations (e.g., KB4034665/K...

CVE-2017-8688

CVE-2017-8688 is a Windows GDI+ information-disclosure issue that leaks kernel-memory addresses through GDI+ memory handling. Affected products include Windows 7 SP1, 8.1, Server 2008 SP2/R2 SP1, and Windows 10 variants up to 1703/Server 2016. Connected analysis documents reveal related kernel me...

CVE-2017-8710

The CVE-2017-8710 entry concerns an XXE-based information disclosure in the Microsoft Common Console Document (.msc). Affected products include Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1, where the MSC parser improperly handles external entity references in XML input, ...

CVE-2018-8621

CVE-2018-8621 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory. Affected products listed in the provided materials include Windows Server 2012, Windows 7, and Windows Server 2008 R2. The vulnerability results in partial confidentiality impa...

CVE-2019-0977

CVE-2019-0977 concerns a memory disclosure in the Windows GDI component. The flaw allows an attacker to obtain memory contents to aid system compromise, with exploitation commonly via social engineering (convincing a user to open a crafted document or visit an untrusted webpage). The fixes are de...

CVE-2019-1228

CVE-2019-1228 is a Windows kernel information disclosure vulnerability. It stems from the kernel mismanaging memory objects, enabling a local attacker who can log on and run a crafted app to disclose information that could aid further compromise. The vulnerability does not by itself allow code ex...