CVE-2013-3887

CVE-2013-3887 describes a local information-disclosure flaw in the Ancillary Function Driver (afd.sys) across multiple Windows kernels (XP SP2, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8, Server 2012). The root cause is improper copy operations in afd.sys that allow a local atta...

CVE-2010-0810

CVE-2010-0810 corresponds to the Windows kernel exception handler vulnerability. Affected products per connected data: Windows Vista (Gold), SP1 and SP2, and Windows Server 2008 (Gold and SP2). Root cause: improper handling of certain exceptions in the Windows kernel, leading to a denial-of-servi...

CVE-2011-0660

The CVE-2011-0660 issue is a remote code execution vulnerability in the SMB client of several Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7 SP1). Root cause: the SMB client incorrectly validates crafted SMB responses (SMBv1 or SMBv2), enablin...

CVE-2011-1227

CVE-2011-1227 affects the Windows kernel’s win32k.sys (kernel-mode drivers). The vulnerability is a NULL pointer de-reference in the Win32k subsystem that enables local attackers to gain privileges on multiple Windows versions, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista ...

CVE-2011-1235

CVE-2011-1235 is a Windows kernel–mode driver use‑after‑free vulnerability in the Win32k subsystem (win32k.sys). Documents confirm a local privilege‑escalation vector via crafted applications that exploit incorrect driver object management, affecting multiple XP/Server 2003/Vista/Server 2008/Wind...

CVE-2012-0148

CVE-2012-0148 affects the Windows Ancillary Function Driver (afd.sys). The vulnerability stems from improper validation of user-mode input before crossing to kernel mode, enabling local privilege escalation. Affected on 64-bit Windows platforms: XP SP2, Server 2003 SP2, Vista SP2, Server 2008 SP2...

CVE-2013-1263

CVE-2013-1263 involves a race condition in the Windows kernel‑mode driver win32k.sys that permits local privilege escalation and reading of arbitrary kernel memory. Affected products (per sources) include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 S...

CVE-2013-1266

CVE-2013-1266 is a race-condition vulnerability in the Windows kernel-mode driver win32k.sys that allows local privilege escalation and potential kernel memory disclosure. It affects multiple Windows editions listed in MS13-016 (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows ...

CVE-2013-1271

CVE-2013-1271 is a race condition in the Windows kernel-mode driver win32k.sys that allows local users to gain privileges and read arbitrary kernel memory. Affected products/versions include Windows XP SP2-SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Win...

CVE-2013-3197

The CVE-2013-3197 issue affects the NTVDM subsystem in the Windows kernel on 32‑bit Windows XP SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, and Windows 8. It arises from improper validation of kernel-memory addresses, enabling local privilege escalation...

CVE-2011-1226

The CVE-2011-1226 issue is a local privilege-escalation vulnerability in Windows kernel-mode driver code (win32k.sys) caused by a NULL pointer de-reference. A crafted local application can trigger this in multiple supported OS versions, including Windows XP (SP2–SP3), Windows Server 2003 (SP2), W...

CVE-2011-1228

CVE-2011-1228 affects Microsoft Windows kernel-mode driver component win32k.sys. A NULL pointer de-reference in win32k allowed local attackers to gain kernel-level privileges on affected OS versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, Windows 7 Gold/SP1). The issue is...

CVE-2011-1873

The CVE-2011-1873 entry documents a remote code execution flaw in win32k.sys, affecting 64-bit Windows systems (XP SP2, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7 SP1) where OpenType font parsing allows crafted OTF files to execute code in kernel mode. Root cause: impr...

CVE-2011-1879

CVE-2011-1879 is a local privilege-escalation in Win32k.sys (kernel-mode driver) caused by incorrect driver object management leading to a use-after-free. Affects Windows XP (SP2, SP3), Server 2003 (SP2), Vista (SP1, SP2), Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold, SP1). Successful...

CVE-2013-6999

The impact is tied to Microsoft Windows Server 2008 SP2: the win32k.sys IsHandleEntrySecure function does not properly validate the tagPROCESSINFO pW32Job field, allowing local users to trigger a denial of service via crafted NtUserValidateHandleSecure calls, causing a NULL pointer dereference an...

CVE-2010-0026

CVE-2010-0026 describes a denial-of-service vulnerability in Hyper-V on Windows Server 2008 and Windows Server 2008 R2. The issue arises because Hyper-V fails to properly validate encoding of specific machine instructions executed inside guest VMs, which could cause the Hyper-V host to stop respo...

CVE-2013-1258

CVE-2013-1258 is a race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The vulnerability allows local users to gain privileges and read arbitrary kernel memory via a crafted application. Mul...

CVE-2013-1269

The CVE-2013-1269 entry tracks a race condition in the Windows kernel-mode driver win32k.sys that enables local privilege escalation and arbitrary kernel memory disclosure. Affected products include Microsoft Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 200...

CVE-2013-1276

CVE-2013-1276 : A race condition in the Windows kernel-mode driver win32k.sys (affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1) enables a local user to gain privileges and read arbitrary kernel memory via a crafted application. Multiple connected so...

CVE-2013-3172

CVE-2013-3172 is a Windows kernel-mode driver vulnerability in win32k.sys causing a local denial of service (system hang) via a buffer overflow. Affected products include Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2 SP1, and Windows 7 SP1. Remediation is via MS13-053 patches...

CVE-2013-3862

CVE-2013-3862 is a local privilege-escalation flaw in the Windows Service Control Manager (SCM) on Windows 7 and Windows Server 2008 R2 SP1. The root cause is a double-free in handling service descriptions within services.exe, allowing an attacker with local access to execute arbitrary code and g...

CVE-2008-2251

CVE-2008-2251 describes a kernel double-free vulnerability in Windows that allows local privilege escalation when a crafted multi-threaded system-call flow mishandles user-supplied data. Affected products include Windows 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Windows Vista (Gold/SP1), and Win...

CVE-2011-0675

CVE-2011-0675 is a local privilege-escalation in Windows caused by a use-after-free in win32k.sys (kernel-mode drivers). Affected are Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 (Gold, SP2, R2, R2 SP1), and Windows 7 (Gold/SP1). The root cause is incorrect management of kernel...

CVE-2011-1232

CVE-2011-1232 affects Windows kernel-Mode drivers (win32k.sys) across XP SP2-SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2/SP1, and Windows 7 Gold/SP1. Root cause: NULL pointer dereference in Win32k subsystem allows a crafted application to escalate privileges from local user to ke...

CVE-2012-0156

CVE-2012-0156 relates to a denial-of-service in Windows DirectWrite. The issue is triggered when processing specially crafted Unicode characters, causing applications using DirectWrite to hang. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 (and R2 SP1), and Windows 7 SP1...

CVE-2013-1268

CVE-2013-1268 is a race-condition flaw in the Windows kernel-mode driver win32k.sys that enables local privilege escalation. A crafted user-space application can trigger the vulnerability to gain privileges and read arbitrary kernel memory. Affected Windows versions include XP SP2/SP3, Server 200...

CVE-2016-0100

CVE-2016-0100 is a local-privilege-escalation vulnerability in Microsoft Windows (Vista SP2 and Server 2008 SP2) caused by mishandling library loading. A crafted application could leverage improper input validation during library loading to gain elevated privileges. The issue is fixed by MS16-025...

CVE-2012-2549

CVE-2012-2549 affects the Windows IP-HTTPS component. The IP-HTTPS server in Windows Server 2008 R2, R2 SP1, and Server 2012 does not properly validate certificates, enabling a remote attacker to bypass access restrictions by presenting a revoked certificate. The CVSS base score is 5.8 (Network, ...

CVE-2009-1216

CVE-2009-1216 concerns multiple unspecified vulnerabilities in the gzip library components unlzh.c and unpack.c. Affected products/labels in the provided documents include Microsoft Windows Server 2008, Windows Services for UNIX 3.0 and 3.5, and the Subsystem for UNIX-based Applications (SUA), wi...

CVE-2010-3957

A double free vulnerability exists in the OpenType Font (OTF) driver in several legacy Microsoft Windows versions, including Windows XP SP2/SP3 , Windows Server 2003 SP2 , Windows Vista SP1/SP2 , Windows Server 2008 Gold/SP2/R2 , and Windows 7 . The root cause is the driver's failure to properly ...

CVE-2013-1261

CVE-2013-1261 describes a race condition in the win32k.sys kernel‑mode driver that can enable local privilege escalation and allow an attacker to read arbitrary kernel memory. Affected products include various Windows versions listed in the initial document (XP SP2/SP3, Server 2003 SP2, Vista SP2...

CVE-2013-1265

A race condition exists in the win32k.sys kernel-mode driver across multiple Microsoft Windows versions, including Windows XP (SP2-SP3) , Windows Server 2003 SP2 , Windows Vista SP2 , Windows Server 2008 (SP2 through R2 SP1) , and Windows 7 (Gold through SP1) . A local attacker can use a crafted ...

CVE-2012-1194

The CVE-2012-1194 issue affects Microsoft Windows Server 2008 DNS Server: the resolver overwrites cached NS names and TTLs while handling A record responses, enabling a ghost domain names attack that can keep revoked domains resolvable. Affected product/version is Windows Server 2008 (before R2) ...

CVE-2012-1866

CVE-2012-1866 concerns a local privilege escalation in the Windows kernel-mode drivers, specifically the win32k.sys component. The issue arises from improper handling of user-mode input passed to kernel-mode driver objects, enabling a local attacker to gain elevated privileges via a crafted appli...

CVE-2010-0818

The CVE-2010-0818 issue affects the MPEG-4 codec in Windows Media codecs on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 Gold/SP2. Root cause: a buffer/handling flaw in the MPEG-4 codec when processing specially crafted media content with MPEG-4 video encoding, allowing rem...

CVE-2013-1270

CVE-2013-1270 is a race condition in the Windows kernel-mode driver win32k.sys that enables local privilege escalation and the reading of arbitrary kernel memory. Affected products include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 2008 (SP2–R2 SP1), and ...