CVE-2018-3639

CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...

CVE-2018-5391

CVE-2018-5391 affects the Linux kernel (3.9+) via FragmentSmack: IP fragment reassembly can be exploited to exhaust CPU and cause DoS. Citrix/Arista/CentOS advisories describe affected products and kernel updates; CentOS/RH advisories list patched versions and note the vulnerability stems from fr...

CVE-2018-0886

CVE-2018-0886 denotes a CredSSP remote code execution vulnerability in Windows authentication flows (Credential Security Support Provider protocol). The core issue is how CredSSP validates requests during authentication, enabling potential code execution via an RDP-related interaction. Public adv...

CVE-2019-0836

CVE-2019-0836 is a Windows local privilege-escalation vulnerability tied to the LUAFV driver (luafv.sys). CIRCL sightings confirm in-the-wild exploitation, with exploits documented (e.g., exploit-db entries 46718). The CVE entry identifies an elevation-of-privilege flaw when Windows improperly ha...

CVE-2018-8641

CVE-2018-8641 is a Windows Win32k kernel-mode privilege-escalation vulnerability. The Win32k component fails to properly handle objects in memory, enabling local privilege escalation. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 and corresponding Server ...

CVE-2018-8164

CVE-2018-8164 is a Win32k privilege-escalation vulnerability in Windows where the Win32k component fails to properly handle objects in memory. Affected are multiple Windows releases (server and client SKUs listed in the CVE entry). The connected documents corroborate a kernel-mode elevation of pr...

CVE-2018-0952

CVE-2018-0952 is a local Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector (used by Windows Diagnostics Hub and Visual Studio components). The root cause, as documented, is the ability to create arbitrary files due to lack of proper client impersonation in DiagnosticsHub....

CVE-2019-0685

CVE-2019-0685 is a Windows Win32k Elevation of Privilege vulnerability. The Win32k component fails to properly handle objects in memory, enabling a local attacker to escalate to kernel mode and execute code with high impact. Documented alongside related CVEs (CVE-2019-0803, CVE-2019-0859) and ref...

CVE-2018-8124

CVE-2018-8124 is a Win32k privilege-escalation vulnerability in Windows where the Win32k component fails to properly handle objects in memory. Affected: Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 and corresponding Server editions listed in the description; root cause is impro...

CVE-2018-8166

The CVE-2018-8166 entry is supported by connected documents describing a Win32k privilege-escalation vulnerability in Windows where the Win32k component mishandles objects in memory, allowing local kernel-mode code execution if exploited. Affected products span multiple Windows versions (e.g., Wi...

CVE-2019-0796

Technical details for CVE-2019-0796 are not publicly provided in the supplied documents; no affected product/version or exploit specifics are confirmed here. Monitor for updates.

CVE-2019-0633

CVE-2019-0633 describes a remote code-execution vulnerability in the Microsoft Windows SMBv2 server. The SMBv2 service can be triggered by handling certain requests, enabling an attacker to execute arbitrary code on the target system. The CVE is distinct from CVE-2019-0630. Severity is high (NVD ...

CVE-2019-0730

CVE-2019-0730 is a Windows local privilege escalation affecting the LUAFV driver (luafv.sys). The vulnerability arises from how LUAFV handles certain calls, enabling an attacker to obtain elevated privileges. Public exploitation exists per CIRCL/CVE-2019-0730 sightings, including Exploit-DB entry...

CVE-2019-0805

Technical details for CVE-2019-0805 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0821

CVE-2019-0821, CVE-2019-0703 and CVE-2019-0704 describe an information disclosure vulnerability in the Windows SMB Server related to how it handles certain requests. The connected documents consistently identify the SMB Server information-disclosure flaw as the core issue across these CVEs, affec...

CVE-2019-0731

Technical details (affected product/version, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from CIRCL/CIRSA sources and exploit-db references for CVE-2019-0731.

CVE-2018-8401

CVE-2018-8401 describes a local privilege escalation in the DirectX Graphics Kernel driver (DXGKRNL) for Windows. The root cause is improper handling of objects in memory within DXGKRNL, allowing an attacker with local access to elevate privileges. Affected products include Windows Server 2016, W...

CVE-2019-0704

CVE-2019-0703 is an information-disclosure vulnerability in Windows SMB Server handling of certain requests. Connected sources confirm the issue as a Windows SMB Information Disclosure vulnerability distinct from CVE-2019-0704 and CVE-2019-0821. FireEye Mandiant Threat Intelligence notes that CVE...

CVE-2018-8400

CVE-2018-8400/8405/8406 describe privilege-escalation flaws in the DirectX Graphics Kernel (DXGKRNL) driver causing elevation of privilege by improper handling of objects in memory. Affected software scope includes Windows Server and Windows 10 variants (per the CVE records). The root cause, as s...

CVE-2019-0630

CVE-2019-0630 is a remote code-execution flaw in the Windows SMBv2 server as described by connected sources. The vulnerability arises in how the SMBv2 server handles certain requests, enabling an attacker to execute arbitrary code on a affected system. The linked 0day page notes no mitigations or...

CVE-2019-0584

CVE-2019-0584 refers to a remote code execution vulnerability in the Windows Jet Database Engine, arising from improper handling of objects in memory. The issue affects multiple Windows platforms (as listed in the initial entry). The connected Nessus/Office-related documents corroborate a broader...

CVE-2019-0538

CVE-2019-0538 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. A successful exploit could allow an attacker to execute arbitrary code on a vulnerable system by convincing a user to open a specially crafted file. Affected...

CVE-2018-8256

CVE-2018-8256 is a remote code execution vulnerability in PowerShell triggered by processing specially crafted files. Affected are Windows PowerShell/PowerShell Core and several Windows OS versions (e.g., Windows 7/8.1/10, Windows Server 2008R2/2012/2016/2019, etc.). The root cause is improper ha...

CVE-2018-0746

CVE-2018-0746 is a Windows kernel local information disclosure vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions (Gold, 1511, 1607, 1703, 1709), Windows Server 2016 and Windows Server 1709. The root cause is described as improper handling of memory addre...

CVE-2018-0878

CVE-2018-0878 is a Windows Remote Assistance information-disclosure vulnerability caused by how XML External Entities (XXE) are processed. The CVE applies to multiple Windows client/server SKUs (Windows 7 SP1, 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 versions 1511–1709, and...

CVE-2018-8251

CVE-2018-8251 describes a memory corruption vulnerability in Windows Media Foundation when it improperly handles objects in memory. Affected: Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (Server 2008 R2, 2012, 2012 R2, 2016; Windows RT 8.1). CVSSv3 base 7.5 (NETWORK, HIGH ...

CVE-2018-8413

CVE-2018-8413 affects the Windows Theme API and specifically the ThemePack (CAB-based) file parser used by Windows theme files. The connected exploit entries describe a vulnerability in the ThemePack parser that allows attackers to create arbitrary files at arbitrary locations, enabling remote co...

CVE-2019-0626

The CVE-2019-0626 entry describes a memory corruption vulnerability in the Windows Server DHCP Service caused by improper processing of DHCP messages, enabling remote code execution when an attacker sends specially crafted DHCP packets. Connected advisories corroborate code execution on Microsoft...

CVE-2018-8566

Technical details on CVE-2018-8566 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2018-1016

CVE-2018-1016 is a Windows font library remote code execution vulnerability. The issue arises from the Windows font library improperly handling specially crafted embedded fonts, enabling code execution on a vulnerable system. Affected products include multiple Windows versions (Windows 7, Windows...

CVE-2018-8407

CVE-2018-8407 is an information disclosure vulnerability in the Kernel Remote Procedure Call Provider driver that occurs when objects are not properly initialized in memory. The vulnerability affects multiple Windows releases, including Windows 7, Windows 8.1, Windows 10 and various Windows Serve...

CVE-2019-0595

Technical details about CVE-2019-0595 are not publicly available in the provided documents. The Connected CVEs repeat the same general description without specifics on affected components, versions, exploitability, or fixes. Monitor for updates.

CVE-2018-0742

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates from trusted sources.

CVE-2018-1010

Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.

CVE-2018-8544

CVE-2018-8544 is a remote code execution vulnerability in the Windows VBScript engine that corrupts memory when handling objects in VBScript. It affects multiple Windows versions (e.g., Windows 7, Windows 10, various Server editions) and is triggered by memory manipulation of VBScript objects, al...

CVE-2018-8626

CVE-2018-8626 is a remote code execution vulnerability in Windows DNS servers caused by improper handling of requests, leading to a heap overflow. Affected products include Windows Server variants and Windows 10/Server deployments configured as DNS servers. The root cause centers on the Windows D...

CVE-2019-0570

The CVE-2019-0570 issue is a Windows Runtime Elevation of Privilege vulnerability stemming from improper in-memory handling of objects in Windows Runtime. Affected products listed include Windows 10 (and Windows 10 Servers), Windows 8.1, Windows Server 2012/2012 R2, Windows Server 2016/2019, and ...

CVE-2018-0749

CVE-2018-0749 is an elevation-of-privilege issue in the Windows SMB Server (affecting Windows 7 SP1, 8.1, 10 variants, Server 2008/2012/2016, etc.). The root cause centers on how the SMB server and NT Object Manager handle Extended Attributes and process IDs when opening named pipes, which could ...

CVE-2018-0743

Summary (CVE-2018-0743): Elevation of privilege in Windows Subsystem for Linux (WSL) on Windows 10 (versions 1703 and 1709) and Windows Server 1709 due to improper handling of memory objects. The vulnerability allows a local attacker to run code with elevated privileges by exploiting how WSL mana...

CVE-2018-0744

CVE-2018-0744 is a Windows kernel elevation-of-privilege vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds up to 1709), and Windows Server 2016/1709. The issue arises from how the kernel handles objects in memory, enabling local privilege escalation. E...

CVE-2019-0555

The CVE-2019-0555 entry corresponds to an elevation of privilege in Microsoft XmlDocument that can escape AppContainer sandbox via cross-boundary remoting. Connected analysis explains an IDispatch/type library abuse path: malicious clients query for the old IXMLDOMDocument interface, then marshal...

CVE-2018-8210

Technical details such as affected product versions, root cause, exploitability, and patch guidance are not provided in the connected documents; monitor for updates.

CVE-2019-0601

Technical details for CVE-2019-0601 are not publicly available in the provided documents; monitor for updates.

CVE-2019-0582

CVE-2019-0582 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of objects in memory. The vulnerability affects multiple Windows versions and can be triggered when a user opens a specially crafted file, enabling arbitrary code execution with the attack...

CVE-2018-8344

CVE-2018-8344 is a Windows remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts. Affected platforms include Windows 7, Windows 8.1, Windows 10 (and corresponding server SKUs: 2008, 2008 R2, 2012, 2012 R2, 2016, 2019-era equivalents, and Win...

CVE-2018-8634

CVE-2018-8634 describes a remote code execution vulnerability in Windows caused by improper handling of objects in memory by Microsoft text-to-speech. The issue affects Windows clients/servers listed in the description (e.g., Windows Server 2016, Windows 10, Windows Server 2019). The root cause i...

CVE-2019-0802

CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...

CVE-2018-0747

Technical details for CVE-2018-0747 are not publicly provided in the supplied documents; no concrete affected products, root cause, or patch information are present. Monitor for updates.

CVE-2018-0817

Technical details about CVE-2018-0817 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are specified here.

CVE-2018-8550

CVE-2018-8550 is a local elevation-of-privilege flaw in Windows COM Aggregate Marshaler. The vulnerability allows an attacker with local access to run code with elevated privileges on affected Windows versions (Windows 7, Windows 8.1/10 family, and corresponding Server SKUs). Public references (e...