CVE-2017-0294

CVE-2017-0294 is a Windows remote code execution vulnerability caused by improper handling of cabinet (.cab) files. The affected platforms include Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012/R2, Windows 10 (various builds), and Windows Server 20...

CVE-2017-11781

CVE-2017-11781 is a denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1) where an authenticated attacker can send specially crafted SMB requests to crash the server. Affected products include Windows SMB Server implementations as described in the CVE entry (server role comp...

CVE-2017-11788

CVE-2017-11788 affects Windows Search in multiple Windows versions (7 SP1, 8.1, 10, Server SKUs) where unauthenticated attackers can remotely send crafted messages to trigger a denial-of-service by mismanaging in-memory objects. The vulnerability is documented across NVD and CNVD entries, with Op...

CVE-2010-2551

CVE-2010-2551 – SMB Variable Validation Vulnerability (Mode C) Affected software: SMB Server on Windows Vista SP1/SP2, Windows Server 2008 (Gold, SP2), and Windows 7. The issue arises in the SMB server’s handling of specially crafted SMB packets where internal fields are not properly validated in...

CVE-2011-3417

The CVE-2011-3417 entry concerns the ASP.NET Forms Authentication feature in Microsoft .NET Framework (1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, 4.0). When sliding expiry is enabled, cached content is not handled properly, allowing remote attackers to access arbitrary user accounts via a crafted URL (For...

CVE-2016-3252

CVE-2016-3252 is a Windows kernel-mode privilege-escalation vulnerability affecting multiple Windows versions (Vista SP2 through Windows 10 1511) where a crafted application may exploit kernel-mode drivers to gain privileges. The root cause is insufficient handling of objects in memory within ker...

CVE-2016-7185

CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...

CVE-2017-0039

CVE-2017-0039 is a local privilege escalation in Windows where loading of DLLs is mishandled, allowing a crafted application to gain elevated privileges on Windows Vista SP2 and Windows Server 2008 SP2 (as described by the CVE entry and corroborated by MSRC/MSKB/MS17-012 references). The vulnerab...

CVE-2015-6128

CVE-2015-6128 describes a Windows privilege-escalation flaw where local users can gain privileges by abusing how Windows loads libraries. Affected products include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The root cause is mishandling of library loading, enabling ...

CVE-2016-0171

CVE-2016-0171 is a Windows kernel‑mode elevation of privilege vulnerability affecting Win32k in several Windows releases (Vista SP2 to Windows 10 1511). The entry describes that a crafted user‑mode application can trigger a local privilege escalation via a flaw in the Win32k subsystem, with explo...

CVE-2017-0058

CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...

CVE-2016-3266

Technical details for CVE-2016-3266 are not publicly available in the provided documents. Monitor for updates from authoritative sources to determine affected products, root cause specifics, and remediation guidance.

CVE-2017-0076

Summary of CVE-2017-0076 and related entries : The vulnerability affects Hyper-V in multiple Windows platforms (Vista SP2; Server 2008 SP2/2008 R2; Windows 7 SP1; Windows 8.1; Server 2012/2012 R2; Windows 10 versions 1511/1607; and Windows Server 2016). The issue allows a guest OS user running in...

CVE-2012-0003

CVE-2012-0003 is a remote-code-execution issue in Windows Multimedia Library (winmm.dll) used by Windows Media Player. A specially crafted MIDI file can trigger the vulnerability, leading to arbitrary code execution with the user’s context. Affected products include Windows XP SP2/SP3, Windows Se...

CVE-2016-0152

CVE-2016-0152 is the Windows DLL Loading Remote Code Execution vulnerability affecting Internet Information Services (IIS) on Windows Vista SP2 and Windows Server 2008 SP2. It arises from improper handling of DLL loading, enabling local attackers to gain privileges by executing a crafted applicat...

CVE-2016-0180

CVE-2016-0180 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10 variants). The root cause is how the Windows kernel mishandles symbolic links, enabling a local attacker to gain privileges via a...

CVE-2017-0121

CVE-2017-0121 is an information disclosure vulnerability in Microsoft Windows Uniscribe. The vulnerability allows a remote attacker to obtain sensitive information from the memory of a process by luring a user to a crafted web site. Affected are Windows Vista SP2, Windows Server 2008 SP2 and R2 S...

CVE-2017-8681

Technical details about CVE-2017-8681 are not publicly provided in the connected documents. No specifics on affected versions, root cause, impact, or remediation are present. Monitor for updates.

CVE-2017-8699

CVE-2017-8699 affects Windows Shell in Windows 7 SP1, Windows Server 2008/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. Description: an attacker can run arbitrary code in the context of the current user due to how Windows Shell va...

CVE-2009-2504

CVE-2009-2504 corresponds to MS09-062: multiple remote code execution vulnerabilities in Windows GDI+ exposed via GDI+ APIs used by .NET Framework and Office components. The issue stems from integer overflows/buffer handling in GDI+, enabling remote code execution when rendering crafted images in...

CVE-2016-0173

CVE-2016-0173 is a Win32k Elevation of Privilege vulnerability affecting Windows kernel‑mode drivers across Windows Vista SP2 through Windows 10 (1511). A crafted user-mode application can trigger local privilege escalation, as described in the original entry. Public exploit access exists: Exploi...

CVE-2016-7259

CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...

CVE-2017-0090

CVE-2017-0090 is a real Uniscribe vulnerability in USP10 (Windows Uniscribe) where an invalid memory write in the MergeLigRecords function can be triggered by rendering text with a crafted font via API calls such as DrawText, leading to remote code execution. The connected Exploit-DB entries (e.g...

CVE-2017-0163

CVE-2017-0163 affects Windows Server Hyper-V Network Switch, allowing remote code execution when input from a guest OS is not properly validated. The underlying issue is improper validation of guest-supplied input, enabling an attacker with guest access to execute arbitrary code on the host. Publ...

CVE-2017-0074

CVE-2017-0074 is a Hyper-V denial-of-service vulnerability affecting Windows Hyper-V across multiple Windows client and server editions. Connected sources (CNVD entries) describe a Hyper-V DoS where a crafted application can crash the host, affecting Hyper-V guests; specific affected versions ali...

CVE-2017-8727

CVE-2017-8727 is an RCE in the Windows Text Services Framework that can be triggered through memory handling in the Windows Text Services/IE edge scripting path. The connected KB entry confirms the flaw exists in Internet Explorer/Windows components and was addressed in Microsoft’s October 2017 p...

CVE-2009-2503

CVE-2009-2503 is a GDI+ memory corruption vulnerability in Microsoft components that can be triggered by a crafted TIFF image file, enabling remote code execution. The weakness resides in how GDI+ allocates memory when processing TIFFs, affecting a wide range of Windows and Office products listed...

CVE-2014-6355

CVE-2014-6355 concerns a vulnerability in the Microsoft Graphics Component where JPEG decoding in memory is mishandled, enabling information disclosure when a user visits a crafted web site. Affected products include Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, ...

CVE-2016-3238

The CVE-2016-3238 vulnerability affects the Windows Print Spooler and allows remote code execution when a crafted print driver is provided during printer installation. Affected products include multiple Windows client/server editions (Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 RT/1511, Win...

CVE-2016-7238

CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...

CVE-2017-0096

CVE-2017-0096 affects Microsoft Hyper-V across Windows Vista SP2/Server 2008 SP2 R2, Windows 7 SP1, Windows 8.1, Windows Server 2012/R2, Windows 10 1511/1607, and Windows Server 2016. The vulnerability allows guest OS users to disclose sensitive information from the host memory through a crafted ...

CVE-2017-0112

The vulnerability CVE-2017-0112 affects Uniscribe in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. It enables remote information disclosure by a crafted web site that causes Uniscribe to read process memory, exposing sensitive data. Exploitation is possible without user pr...

CVE-2017-0118

CVE-2017-0118 is an information-disclosure vulnerability in Microsoft Windows Uniscribe (usp10.dll) that can be triggered by a crafted web site, allowing an attacker to read sensitive data from a target process’s memory. The issue affects a range of Windows versions listed in the description and ...

CVE-2017-0192

The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...

CVE-2013-3129

CVE-2013-3129 concerns a TrueType Font (TTF) parsing vulnerability that allows remote code execution. Affected products include Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5; Silverlight 5 prior to 5.1.20513.0; and GDI+, DirectWrite, Journal in various Windows versions (XP through Windows ...

CVE-2016-3335

CVE-2016-3335 concerns the Microsoft Windows Common Log File System (CLFS) driver elevation of privilege. The advisory notes local users can gain higher privileges via a crafted application on affected OSes: Windows Vista SP2; Windows Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Windows Server...

CVE-2016-3348

CVE-2016-3348 is a local elevation-of-privilege vulnerability in the Windows kernel-mode driver Win32k.sys. The root cause is how the kernel-mode driver handles objects in memory, which an attacker can exploit by running a crafted application after logging in to gain kernel-level privileges. Affe...

CVE-2016-7218

Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...

CVE-2017-0119

CVE-2017-0119 involves Uniscribe (usp10.dll) on Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. A crafted web page can trigger Uniscribe processing via DrawText, allowing a remote attacker to disclose memory contents from the process address space (information disclosure) du...

CVE-2017-0168

CVE-2017-0168 is a vulnerability in the Windows Hyper-V Network Switch where input from a guest OS is not properly validated on hosts running Windows 8.1, Windows Server 2008/2008 R2/2012/2012 R2. The underlying issue is improper input validation in the Hyper-V Network Switch, leading to informat...

CVE-2018-0788

CVE-2018-0788 affects the Windows Adobe Type Manager Font Driver (ATMFD.dll) on Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012/R2. The vulnerability stems from how ATMFD.dll handles objects in memory, allowing local elevation of privilege. Impact is ele...

CVE-2010-3338

CVE-2010-3338 concerns Windows Task Scheduler not correctly determining the security context of scheduled tasks, affecting Task Scheduler 2.0 on Windows Vista SP1/SP2, Server 2008 SP2/R2, and Windows 7, enabling local privilege escalation. Several connected sources describe a concrete exploit pat...

CVE-2014-0317

CVE-2014-0317 is the SAMR Security Feature Bypass vulnerability in Microsoft Windows, affecting Windows XP SP2-SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows Server 2012 (Gold/R2). The issue stems from the Security Account Manager Remote (SAMR) protoc...

CVE-2016-0195

Summary: CVE-2016-0195 is a remote code execution vulnerability in the Windows Imaging Component (WIC) affecting multiple Windows versions (Vista to Windows 10). The issue arises from improper handling of memory/objects in the Imaging Component, enabling remote attackers to run arbitrary code via...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-0083

CVE-2017-0083 involves Uniscribe (USP10.dll) in Windows Vista SP2, Server 2008 SP2/R2 SP1 and Windows 7 SP1, where a crafted web page can trigger remote code execution. Connected exploit reports tie the issue to Uniscribe font processing, notably USP10!MergeLigRecords, with heap memory corruption...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0111

CVE-2017-0111 covers Uniscribe memory disclosure in Microsoft Windows (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1). Connected docs show that Uniscribe’s usp10.dll code path can be reached via DrawText/Unicode text rendering, enabling an attacker-controlled font to read process memory and po...

CVE-2017-0300

Technical details for CVE-2017-0300 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-8718

CVE-2017-8718 is a remote code execution vulnerability in the Microsoft JET Database Engine that affects Windows components across multiple OS versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 1511–1703, Windows Server 2016). Root caus...