CVE-2017-8574

CVE-2017-8574 describes a local elevation-of-privilege in the Microsoft Windows Graphics Component. Affected software includes Windows 10 versions 1607 and 1703 (and Windows Server 2016) where the Graphics component fails to properly handle objects in memory, enabling a local attacker to run code...

CVE-2017-8592

CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...

CVE-2018-8637

CVE-2018-8637 is a Windows kernel vulnerability (Win32k Information Disclosure) that can disclose memory addresses from kernel space, potentially bypassing KASLR. Affected: Windows kernel components (Win32k) on Windows 10/Windows Server 2019. Root cause: how the kernel handles memory addresses en...

CVE-2019-0931

Technical details about CVE-2019-0931 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present. Monitor for updates.

CVE-2019-1398

CVE-2019-1398 is a Windows Hyper-V remote code execution vulnerability. The vulnerability arises from improper validation of input from an authenticated guest OS user, enabling an attacker to run arbitrary code on the host Hyper-V machine. The CNVD entry for Microsoft Windows Hyper-V Remote Code ...

CVE-2020-0667

CVE-2020-0667 affects Microsoft Windows, specifically the Windows Search Indexer component. The connected documents confirm the root cause: the vulnerability arises from how the Windows Search Indexer handles objects in memory, enabling an elevation of privilege when exploited locally. The CNVD e...

CVE-2020-0714

CVE-2020-0714 corresponds to a DirectX Information Disclosure vulnerability in Windows. The root cause is DirectX failing to properly handle memory objects, which can lead to disclosure of information. An attacker who has authenticated access could exploit this by running a specially crafted appl...

CVE-2020-0781

The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...

CVE-2020-0806

CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...

CVE-2020-0819

CVE-2020-0819 describes an elevation of privilege vulnerability in Windows Device Setup Manager caused by improper handling of file operations. The CVE is documented across multiple sources (NVD/NVD entry) with a base CVSS v3.1 score of 7.8 (HIGH) and CVSS v2 score of 7.2 (HIGH), indicating local...

CVE-2020-0860

Technical details for CVE-2020-0860 are not publicly provided in the connected documents. Available sources mention the vulnerability in general terms; monitor for updates and additional technical disclosures.

CVE-2020-0949

CVE-2020-0949 is a Windows Media Foundation memory corruption vulnerability caused by improper handling of memory objects. The affected component is Windows Media Foundation; the CVSSv3 base score is 8.8 (HIGH) with HIGH impact on confidentiality, integrity, and availability, and exploitability n...

CVE-2020-0952

CVE-2020-0952 is a Windows GDI Information Disclosure Vulnerability. Connected sources confirm it involves the Windows GDI component disclosing memory contents, enabling information disclosure. Related entries from CNVD-2020-30654 and OpenVAS KEV listings acknowledge this CVE among Windows GDI di...

CVE-2020-1053

CVE-2020-1053 affects DirectX where improper handling of objects in memory can lead to elevation of privilege, allowing an attacker to execute arbitrary code in kernel mode after logging on and running a crafted program. The vulnerability is triggered by object handling in DirectX, with impact de...

CVE-2020-1068

Technical details for CVE-2020-1068 are not publicly available in the provided documents. Monitor for updates; no explicit info on affected products, root cause, impact, or remediation is included here.

CVE-2020-1254

CVE-2020-1254 concerns an elevation of privilege in Windows Modules Installer Service. The vulnerability arises because the service improperly handles class object members, enabling a locally authenticated attacker to execute arbitrary code with system privileges. Affected: Windows Modules Instal...

CVE-2020-1283

CVE-2020-1283 is a Windows denial-of-service vulnerability where memory objects are improperly handled, causing the system to stop responding. The connected Nessus entry (KB4557957 family) lists CVE-2020-1283 among patched issues in June 2020, but the provided sources do not specify affected prod...

CVE-2020-1304

Technical details for CVE-2020-1304 are not provided in the connected documents. No affected products, root cause, impact, or fixes are present here. Monitor for updates from official advisories.

CVE-2020-1397

CVE-2020-1397 is an information-disclosure flaw in Windows Imaging Component (WIC) related to how WindowsCodecs handles image decoding, particularly TIFF/CCITT paths. FireEye’s analysis identifies the root cause as uninitialized memory flowing through the image decoding pipeline (TIFFReadBufferSe...

CVE-2020-17012

CVE-2020-17012 is a Windows Elevation of Privilege affecting the Bind Filter Driver. The vulnerability is rooted in the Windows Bind Filter Driver component, enabling local attackers with low privileges and no user interaction to elevate privileges (CVSSv3.1: 7.8, HIGH; CVSSv2: 4.6, MEDIUM). Affe...

CVE-2020-17045

Technical details for CVE-2020-17045 are not publicly provided in the supplied documents. No affected product/version/exploit information is included here. Monitor for updates from authoritative sources to obtain concrete details and remediation guidance.

CVE-2021-26862

Technical details about CVE-2021-26862 (affected product/component, root cause, impact, or patch) are not provided in the connected documents. Monitor official advisories for updates; current sources only confirm the vulnerability name/type without specifics.

CVE-2021-28311

CVE-2021-28311 is a Windows Application Compatibility Cache Denial of Service vulnerability. The connected documents confirm a Windows OS-level issue affecting the Application Compatibility Cache, with mitigation via March/April 2021 Windows security updates (e.g., KB5001330/KB5001337 and related...

CVE-2023-33168

CVE-2023-33168 is a Remote Procedure Call Runtime Denial of Service vulnerability. The connected documents provide only a generic description and CVSS metrics; they do not reveal affected product/vendor/component/versions, root cause, exploit details, or a fix. OpenVAS entries reference the CVE b...

CVE-2023-35316

Technical details about CVE-2023-35316 (affected products, root cause, impact, or fixes) are not provided in the connected documents. The initial description lacks public details. Monitor for updates and any forthcoming technical information.

CVE-2023-35341

Technical details for CVE-2023-35341 are not publicly available in the provided documents. Monitor for updates from official sources (e.g., vendor advisories, CVE records) to obtain affected products, impact, and remediation information.

CVE-2023-35643

CVE-2023-35643 affects Windows DHCP Server and is classified as a network-based information disclosure with CVSSv3.1 score 7.5 (C:H/I:N/A:N). The vulnerability resides in the DHCP Server Service and is capable of exposing sensitive data. Public sources in the connected set confirm the DHCP Server...

CVE-2024-38102

Technical details for CVE-2024-38102 are not provided in the Connected documents. Monitor for updates.

CVE-2024-38238

CVE-2024-38238 is listed in the Windows Streaming Service category as a local elevation-of-privileges vulnerability affecting the Windows kernel streaming service. The connected documents corroborate an elevated-privilege risk for this CVE within Windows components, without providing full exploit...

CVE-2025-21252

Technical details about CVE-2025-21252 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation.

CVE-2025-21266

CVE-2025-21266 is a Windows Telephony Service remote code execution vulnerability. The linked data shows a network-exposed impact with CVSS v3.1 base score 8.8 (HIGH), requiring user interaction for exploitation and affecting confidentiality, integrity, and availability. Affected component is the...

CVE-2025-21282

Technical details about CVE-2025-21282 are not publicly provided in the supplied documents. No affected product/version or exploit information is disclosed here. Monitor for updates from official advisories and CVE/NVD entries.

CVE-2025-21336

Technical details about CVE-2025-21336 are not publicly provided in the supplied documents. The materials reference a Windows cryptographic information disclosure vulnerability but do not specify affected products/versions or fixes.

CVE-2026-32202

CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...

CVE-2026-50419

CVE-2026-50419 is a Windows Kernel information-disclosure vulnerability that could allow an authorized local attacker to disclose sensitive data. The CVSS v3.1 base score is 3.3 (LOW) with LOCAL access and low complexity; no exploitation details are provided in the connected documents. Microsoft ...

CVE-2026-59136

CVE-2026-59136 affects Microsoft COM for Windows due to use of an uninitialized resource, enabling a locally authorized attacker to disclose information. The vulnerability impact is information disclosure with a CVSS v3.1 base score of 5.5 (Medium); attack requires local access, low privileges, a...

CVE-2026-65678

CVE-2026-65678: A use-after-free in Windows Win32K enables an in-local privilege elevation by an authorized attacker. Affected software is Windows with Win32K component; the vulnerability arises from improper lifecycle handling leading to use-after-free conditions. The CVSS score is 7.0 (High) wi...

CVE-2016-7210

CVE-2016-7210 affects atmfd.dll in multiple Windows editions (Vista through Windows 10 1511/1607 and corresponding Server releases). The vulnerability allows remote attackers to disclose memory contents of a victim process by delivering a crafted OpenType font on a web site, leading to informatio...

CVE-2016-7219

CVE-2016-7219 affects the Windows Crypto driver (kernel-mode) across multiple Windows releases (Vista/Server 2008 through Windows 10/Server 2016). The impact is information disclosure via a crafted application, caused by improper handling of objects in memory within the Crypto driver. The vulnera...

CVE-2017-0063

CVE-2017-0063 concerns the Color Management Module (ICM32.dll) in Windows, where memory handling in ICM32.dll across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012/RT 8.1, 10 versions, 2016 Server) can be leveraged by a crafted website to bypass ASLR and execute code w...

CVE-2017-0097

CVE-2017-0097 affects Hyper-V in multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, Server 2012/R2, Windows 10 up to 1607 and Server 2016). The vulnerability allows a guest OS user, running as a VM, to cause a denial of service on the host via a crafted application. Th...

CVE-2017-0102

Technical details (affected components, root cause, exploit status, mitigations) are not publicly disclosed in the provided documents for CVE-2017-0102; monitor for updates.

CVE-2017-0259

CVE-2017-0259 is a Windows kernel local information-disclosure vulnerability affecting Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. A specially crafted document can cause leakage of sensitive information via the kernel. Public e...

CVE-2017-0274

Technical details for CVE-2017-0274 are not publicly available in the provided connected documents. The sources reference SMBv1 information disclosure generally but do not specify affected products/versions, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2017-8481

Technical details about CVE-2017-8481 are not publicly available in the provided connected documents. Monitor for updates from official advisories to obtain affected products, impact, and fixes.

CVE-2017-8633

The CVE-2017-8633 vulnerability is an elevation of privilege in Windows Error Reporting (WER). The issue arises when WER handles and executes files, allowing an attacker to escalate privileges on affected Windows versions (Windows 7/8.1/10 and corresponding server SKUs). The linked OpenVAS/KB dat...

CVE-2019-0712

Technical details (affected products, components, root cause, fix) are not provided in the connected documents. The initial CVE description notes a Hyper-V Denial of Service vulnerability, but no public technical specifics are supplied here. Monitor for updates.

CVE-2020-0616

CVE-2020-0616 is a Windows denial-of-service flaw caused by improper handling of hard links. An attacker must log on to an affected system and run a crafted application to disrupt the target (potentially overwrite system files). Microsoft’s update fixes ACLs on system files to address this vulner...

CVE-2020-0661

The CVE-2020-0661 entry describes a denial-of-service vulnerability in Microsoft Hyper-V. It occurs when Hyper-V on a host fails to properly validate input from a privileged user on a guest OS, enabling a guest-level attacker to cause a denial of service. The CVE is stated as distinct from CVE-20...

CVE-2020-0680

CVE-2020-0680 is a Windows elevation-of-privilege vulnerability in the Windows Function Discovery Service related to how objects in memory are handled. The description states an elevation of privilege via memory handling in this service, indicating a local attack path with partial confidentiality...