An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1407 CVE-2019-1433 CVE-2019-1435 CVE-2019-1438.


An elevation of privilege vulnerability exists in Microsoft SharePoint aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1329.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'.


An elevation of privilege exists in Windows Audio Service aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1007 CVE-2019-1021 CVE-2019-1026 CVE-2019-1027 CVE-2019-1028.


An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations aka 'Task Scheduler Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1173 CVE-2019-1174 CVE-2019-1175 CVE-2019-1178 CVE-2019-1179 CVE-2019-1180 CVE-2019-1184 CVE-2019-1186.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1393 CVE-2019-1394 CVE-2019-1395 CVE-2019-1408 CVE-2019-1434.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1407 CVE-2019-1435 CVE-2019-1437 CVE-2019-1438.


An elevation of privilege vulnerability exists when Windows improperly handles COM object creation aka 'Windows COM Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1173 CVE-2019-1174 CVE-2019-1175 CVE-2019-1177 CVE-2019-1178 CVE-2019-1179 CVE-2019-1180 CVE-2019-1184.


An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.


An elevation of privilege exists in Windows Audio Service aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1007 CVE-2019-1021 CVE-2019-1022 CVE-2019-1026 CVE-2019-1028.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1330.


An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1364.


An elevation of privilege vulnerability exists in the way that the Windows Network File System (NFS) handles objects in memory aka 'Windows Network File System Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1394 CVE-2019-1395 CVE-2019-1396 CVE-2019-1408 CVE-2019-1434.


An elevation of privilege vulnerability exists in Microsoft Windows where certain folders with local service privilege are vulnerable to symbolic link attack. An attacker who successfully exploited this vulnerability could potentially access unauthorized information. The update addresses this vulnerability by not allowing symbolic links in these scenarios. aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1082.


An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1433 CVE-2019-1435 CVE-2019-1437 CVE-2019-1438.


An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215 CVE-2019-1253 CVE-2019-1303.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions aka 'Windows Update Delivery Optimization Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1065.


An elevation of privilege vulnerability exists in Microsoft SharePoint aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system aka 'Windows ALPC Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1256.


An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.


An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1315 CVE-2019-1342.


An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files aka 'Windows Error Reporting Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links aka 'Windows Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379 CVE-2019-1417.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1379 CVE-2019-1383.


Multiple vulnerabilities in the smart tunnel functionality of Cisco Adaptive Security Appliance (ASA) could allow an authenticated local attacker to elevate privileges to the root user or load a malicious library file while the tunnel is being established. For more information about these vulnerabilities see the Details section of this security advisory.


An elevation of privilege vulnerability exists when Windows CloudStore improperly handles file Discretionary Access Control List (DACL) aka 'Microsoft Windows CloudStore Elevation of Privilege Vulnerability'.


An elevation of privilege exists when Winlogon does not properly handle file path information aka 'Winlogon Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the Windows redirected drive buffering system (rdbss.sys) when the operating system improperly handles specific local calls within Windows 7 for 32-bit systems aka 'Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests. aka 'Windows RPCSS Elevation of Privilege Vulnerability'.


A vulnerability in the user group configuration of the Cisco SD-WAN Solution could allow an authenticated local attacker to gain elevated privileges on an affected device. The vulnerability is due to a failure to properly validate certain parameters included within the group configuration. An attacker could exploit this vulnerability by writing a crafted file to the directory where the user group configuration is located in the underlying operating system. A successful exploit could allow the attacker to gain root-level privileges and take full control of the device.


An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the way that the iphlpsvc.dll handles file creation allowing for a file overwrite aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1420 CVE-2019-1423.


An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0734.


An elevation of privilege exists in Windows COM Desktop Broker aka \Windows COM Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) Server when an attacker with valid credentials attempts to open a specially crafted file over the SMB protocol on the same machine aka 'SMB Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests aka \Skype for Android Elevation of Privilege Vulnerability.\ This affects Skype 8.35.


An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys) aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730 CVE-2019-0731 CVE-2019-0796 CVE-2019-0836 CVE-2019-0841.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka \Windows Data Sharing Service Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers. This CVE ID is unique from CVE-2019-0571 CVE-2019-0572 CVE-2019-0574.


An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682 CVE-2019-0689 CVE-2019-0692 CVE-2019-0693.


An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos allowing an attacker to be validated as an Administrator.The update addresses this vulnerability by changing how these requests are validated. aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0936.


An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys) aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730 CVE-2019-0731 CVE-2019-0805 CVE-2019-0836 CVE-2019-0841.


An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations aka 'Windows Storage Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0983.


An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys) aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730 CVE-2019-0796 CVE-2019-0805 CVE-2019-0836 CVE-2019-0841.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0797.


An elevation of privilege vulnerability exists when Windows improperly handles authentication requests aka \Microsoft Windows Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2019 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An Elevation of Privilege vulnerability exists in the way Azure IoT Java SDK generates symmetric keys for encryption allowing an attacker to predict the randomness of the key aka 'Azure IoT Java SDK Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka \Windows Data Sharing Service Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers. This CVE ID is unique from CVE-2019-0571 CVE-2019-0573 CVE-2019-0574.


An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682 CVE-2019-0692 CVE-2019-0693 CVE-2019-0694.


An elevation of privilege vulnerability exists in Windows AppX Deployment Server that allows file creation in arbitrary locations. To exploit the vulnerability an attacker would first have to log on to the system aka 'Microsoft Windows Elevation of Privilege Vulnerability'.


A vulnerability exists in Microsoft Chakra JIT server aka 'Scripting Engine Elevation of Privileged Vulnerability'.


An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object aka \Microsoft Edge Elevation of Privilege Vulnerability.\ This affects Microsoft Edge.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730 CVE-2019-0731 CVE-2019-0796 CVE-2019-0805 CVE-2019-0836.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685 CVE-2019-0803.


An elevation of privilege vulnerability exists when the Windows Kernel improperly handles key enumeration aka 'Windows Kernel Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations aka 'Windows Storage Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0998.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka \Windows Data Sharing Service Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers. This CVE ID is unique from CVE-2019-0571 CVE-2019-0572 CVE-2019-0573.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system aka 'Windows ALPC Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682 CVE-2019-0689 CVE-2019-0692 CVE-2019-0694.


An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability an attacker would first have to log on to the system aka 'Diagnostic Hub Standard Collector Visual Studio Standard Collector Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations aka 'Windows Storage Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest aka 'Active Directory Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser aka \Microsoft XmlDocument Elevation of Privilege Vulnerability.\ This affects Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows Server 2019 Windows Server 2016 Windows 8.1 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in Azure Automation \RunAs account\ runbooks for users with contributor role aka 'Azure Automation Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0685 CVE-2019-0859.


An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0689 CVE-2019-0692 CVE-2019-0693 CVE-2019-0694.


An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver (luafv.sys) aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730 CVE-2019-0731 CVE-2019-0796 CVE-2019-0805 CVE-2019-0841.


An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks aka 'Windows User Profile Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations aka 'Windows Admin Center Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations aka \Windows Data Sharing Service Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows Server 2019 Windows 10 Servers. This CVE ID is unique from CVE-2019-0572 CVE-2019-0573 CVE-2019-0574.


A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability in a local attack scenario an attacker could run a specially crafted application to elevate the attacker's privilege level aka 'Windows NDIS Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when Azure DevOps Server 2019 does not properly enforce project permissions aka 'Azure DevOps Server Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the Unified Write Filter (UWF) feature for Windows 10 when it improperly restricts access to the registry aka 'Unified Write Filter Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0682 CVE-2019-0689 CVE-2019-0693 CVE-2019-0694.


An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser aka 'Microsoft Edge Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges aka 'Windows Installer Elevation of Privilege Vulnerability'.


Microsoft Internet Explorer 7 through 11 allows local users to bypass the Protected Mode protection mechanism and consequently gain privileges by leveraging the ability to execute sandboxed code aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism and consequently gain privileges by leveraging the ability to execute sandboxed code aka \Internet Explorer Elevation of Privilege Vulnerability.\


The App Container feature in the kernel-mode drivers in Microsoft Windows 8 Windows Server 2012 and Windows RT allows remote attackers to bypass intended access restrictions and obtain sensitive information from a different container via a Trojan horse application aka \App Container Elevation of Privilege Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows Server 2012 and Windows RT allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Open Management Infrastructure Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38648 CVE-2021-38649.


Open Management Infrastructure Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38645 CVE-2021-38648.


Open Management Infrastructure Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38645 CVE-2021-38649.


Microsoft Windows Update Client Elevation of Privilege Vulnerability


Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38638.


Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38628.


Windows Speech Runtime Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28347 CVE-2021-28351.


Windows Speech Runtime Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28351 CVE-2021-28436.


Windows Hyper-V Elevation of Privilege Vulnerability


Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability


Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability


Windows Speech Runtime Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28347 CVE-2021-28436.


Microsoft SharePoint Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1719.


Windows InstallService Elevation of Privilege Vulnerability


Sysinternals PsExec Elevation of Privilege Vulnerability


Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability


Windows LUAFV Elevation of Privilege Vulnerability


Windows Event Logging Service Elevation of Privilege Vulnerability


Windows WLAN Service Elevation of Privilege Vulnerability


Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1685.


System Center Operations Manager Elevation of Privilege Vulnerability


Windows Update Stack Elevation of Privilege Vulnerability


Microsoft SharePoint Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1712.


Microsoft SQL Elevation of Privilege Vulnerability


Microsoft splwow64 Elevation of Privilege Vulnerability


Windows Runtime C++ Template Library Elevation of Privilege Vulnerability


Windows AppX Deployment Extensions Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1642.


Windows Update Stack Setup Elevation of Privilege Vulnerability


Active Template Library Elevation of Privilege Vulnerability


Windows Hyper-V Elevation of Privilege Vulnerability


Windows Multipoint Management Elevation of Privilege Vulnerability


Microsoft Exchange Server Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33768 CVE-2021-34523.


Windows AppContainer Elevation Of Privilege Vulnerability


Windows File History Service Elevation of Privilege Vulnerability


Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability


Windows Console Driver Elevation of Privilege Vulnerability


Windows User Profile Service Elevation of Privilege Vulnerability


Windows GDI Elevation of Privilege Vulnerability


Microsoft Windows Defender Elevation of Privilege Vulnerability


Visual Studio Code .NET Runtime Elevation of Privilege Vulnerability


Microsoft Exchange Server Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33768 CVE-2021-34470.


Windows AppX Deployment Extensions Elevation of Privilege Vulnerability


Windows Bluetooth Driver Elevation of Privilege Vulnerability


Windows Partition Management Driver Elevation of Privilege Vulnerability


Windows SMB Elevation of Privilege Vulnerability


Windows 10 Update Assistant Elevation of Privilege Vulnerability


Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability


Windows DNS Elevation of Privilege Vulnerability


Windows Bind Filter Driver Elevation of Privilege Vulnerability


Windows Update Medic Service Elevation of Privilege Vulnerability


Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability


Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability


Windows Subsystem for Linux Elevation of Privilege Vulnerability


Windows Desktop Bridge Elevation of Privilege Vulnerability


Azure CycleCloud Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33762.


An elevation of privilege vulnerability in the message broker of BlackBerry Protect for Windows version(s) versions 1574 and earlier could allow an attacker to potentially execute code in the context of a BlackBerry Cylance service that has admin rights on the system.


An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0 QNX Momentics all 6.3.x versions QNX OS for Safety versions 1.0.0 to 1.0.2 QNX OS for Safety versions 2.0.0 to 2.0.1 QNX for Medical versions 1.0.0 to 1.1.1 and QNX OS for Medical version 2.0.0 could allow an attacker to potentially access data modify behavior or permanently crash the system.


Visual Studio Elevation of Privilege Vulnerability


Windows Feedback Hub Elevation of Privilege Vulnerability


Azure RTOS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42302 CVE-2021-42303.


Microsoft Defender for IOT Elevation of Privilege Vulnerability


Microsoft Jet Red Database Engine and Access Connectivity Engine Elevation of Privilege Vulnerability


Azure RTOS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42303 CVE-2021-42304.


Windows 10 Update Assistant Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-43211.


Azure RTOS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42302 CVE-2021-42304.


Visual Studio Code Elevation of Privilege Vulnerability


Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability


Windows PKU2U Elevation of Privilege Vulnerability


Windows Error Reporting Elevation of Privilege Vulnerability


Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability


Microsoft Defender Elevation of Privilege Vulnerability


Azure IoT CLI extension Elevation of Privilege Vulnerability


NTFS Set Short Name Elevation of Privilege Vulnerability


Microsoft SharePoint Elevation of Privilege Vulnerability.


Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability


Windows Digital Media Receiver Elevation of Privilege Vulnerability


Windows Setup Elevation of Privilege Vulnerability


Windows Digital TV Tuner Elevation of Privilege Vulnerability


ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability


Windows NTFS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-43230 CVE-2021-43231.


Windows NTFS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-43229 CVE-2021-43230.


Windows Mobile Device Management Elevation of Privilege Vulnerability


Windows Recovery Environment Agent Elevation of Privilege Vulnerability


Windows 10 Update Assistant Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-42297.


Windows NTFS Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-43229 CVE-2021-43231.


Azure CycleCloud Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36943.


Open Enclave SDK Elevation of Privilege Vulnerability


Windows Desktop Bridge Elevation of Privilege Vulnerability


Microsoft Exchange Server Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-34470 CVE-2021-34523.


Windows AppX Deployment Service Elevation of Privilege Vulnerability


Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability


Windows Fast FAT File System Driver Elevation of Privilege Vulnerability


Microsoft Exchange Server Elevation of Privilege Vulnerability


Windows Container Manager Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31165 CVE-2021-31167 CVE-2021-31168 CVE-2021-31208.


Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31199.


Windows Filter Manager Elevation of Privilege Vulnerability


Windows Graphics Component Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31170.


Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability


Windows Container Manager Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31167 CVE-2021-31168 CVE-2021-31169 CVE-2021-31208.


Windows Container Manager Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31165 CVE-2021-31167 CVE-2021-31168 CVE-2021-31169.


Windows GPSVC Elevation of Privilege Vulnerability


Microsoft VsCode Kubernetes Tools Extension Elevation of Privilege Vulnerability


Microsoft Enhanced Cryptographic Provider Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31201.


Windows Graphics Component Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31188.


Windows Container Manager Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31165 CVE-2021-31167 CVE-2021-31169 CVE-2021-31208.


Windows NTFS Elevation of Privilege Vulnerability


Windows Kernel-Mode Driver Elevation of Privilege Vulnerability


Windows SSDP Service Elevation of Privilege Vulnerability


Windows NTLM Elevation of Privilege Vulnerability


Windows InstallService Elevation of Privilege Vulnerability


Windows Container Manager Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31165 CVE-2021-31168 CVE-2021-31169 CVE-2021-31208.


Remote Access API Elevation of Privilege Vulnerability


Windows User Account Profile Picture Elevation of Privilege Vulnerability


Windows User Profile Service Elevation of Privilege Vulnerability


Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability


Windows Update Service Elevation of Privilege Vulnerability


Windows Graphics Component Elevation of Privilege Vulnerability


Windows UPnP Device Host Elevation of Privilege Vulnerability


Windows Overlay Filter Elevation of Privilege Vulnerability


Windows Container Execution Agent Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26865.


Windows App-V Overlay Filter Elevation of Privilege Vulnerability


Windows Update Stack Elevation of Privilege Vulnerability


Windows Recovery Environment Agent Elevation of Privilege Vulnerability


Windows Virtual Registry Provider Elevation of Privilege Vulnerability


Visual Studio Elevation of Privilege Vulnerability


Windows Container Execution Agent Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26891.


Windows HTTP.sys Elevation of Privilege Vulnerability


Windows Services and Controller App Elevation of Privilege Vulnerability


Visual Studio Installer Elevation of Privilege Vulnerability


RPC Endpoint Mapper Service Elevation of Privilege Vulnerability


Windows 10 Update Assistant Elevation of Privilege Vulnerability


Windows Secure Kernel Mode Elevation of Privilege Vulnerability


Windows Nearby Sharing Elevation of Privilege Vulnerability


Windows Media Center Elevation of Privilege Vulnerability


DirectX Graphics Kernel Elevation of Privilege Vulnerability


Windows AppContainer Elevation Of Privilege Vulnerability


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 do not properly restrict the exchange of keyboard and mouse data between programs at different integrity levels which allows attackers to bypass intended access restrictions by leveraging control over a low-integrity process to launch the On-Screen Keyboard (OSK) and then upload a crafted application aka \On-Screen Keyboard Elevation of Privilege Vulnerability.\


DirectShow in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 and Windows Server 2012 Gold and R2 allows local users to gain privileges by leveraging control over a low-integrity process to execute a crafted application aka \DirectShow Elevation of Privilege Vulnerability.\


Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application aka \Ancillary Function Driver Elevation of Privilege Vulnerability.\


The Group Policy implementation in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords which allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share as exploited in the wild in May 2014 aka \Group Policy Preferences Password Elevation of Privilege Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not properly control access to thread-owned objects which allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation which allows remote attackers to bypass the Mandatory Integrity Control protection mechanism via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft .NET Framework 2.0 SP2 3.5 3.5.1 4 4.5 4.5.1 and 4.5.2 processes unverified data during interaction with the ClickOnce installer which allows remote attackers to gain privileges via vectors involving Internet Explorer aka \.NET ClickOnce Elevation of Privilege Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application as exploited in the wild in October 2014 aka \Win32k.sys Elevation of Privilege Vulnerability.\


Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 and Office 2007 SP3 when IMJPDCT.EXE (aka IME for Japanese) is installed allow remote attackers to bypass a sandbox protection mechanism via a crafted PDF document aka \Microsoft IME (Japanese) Elevation of Privilege Vulnerability \ as exploited in the wild in 2014.


Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ as exploited in the wild in October 2014 a different vulnerability than CVE-2014-4124.


Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys aka \TCP/IP Elevation of Privilege Vulnerability.\


The Client/Server Runtime Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 when a Chinese Japanese or Korean locale is enabled does not properly allocate memory for transactions which allows local users to gain privileges via a crafted application aka \CSRSS Local Elevation of Privilege Vulnerability.\


Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability.


Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability.


Windows Digital Media Receiver Elevation of Privilege Vulnerability.


Windows Clustered Shared Volume Elevation of Privilege Vulnerability.


Windows Push Notifications Apps Elevation of Privilege Vulnerability.


Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24506 CVE-2022-24515 CVE-2022-24518 CVE-2022-24519.


Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24469 CVE-2022-24506 CVE-2022-24518 CVE-2022-24519.


Connected User Experiences and Telemetry Elevation of Privilege Vulnerability.


Windows Desktop Bridge Elevation of Privilege Vulnerability.


Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24469 CVE-2022-24506 CVE-2022-24515 CVE-2022-24518.


Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability.


Windows Security Support Provider Interface Elevation of Privilege Vulnerability.


Cluster Client Failover (CCF) Elevation of Privilege Vulnerability.


Tablet Windows User Interface Application Elevation of Privilege Vulnerability.


Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24469 CVE-2022-24506 CVE-2022-24515 CVE-2022-24519.


Windows CD-ROM Driver Elevation of Privilege Vulnerability.


Windows Fax and Scan Service Elevation of Privilege Vulnerability.


Windows Update Stack Elevation of Privilege Vulnerability.


Azure Site Recovery Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24469 CVE-2022-24515 CVE-2022-24518 CVE-2022-24519.


Windows AppX Package Manager Elevation of Privilege Vulnerability.


Windows Endpoint Configuration Manager Elevation of Privilege Vulnerability.


Windows Kerberos Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24486.


Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE could potentially exploit this vulnerability leading to elevation of privilege. This could potentially allow users to circumvent PowerScale Compliance Mode guarantees.


Windows Kerberos Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24544.


Visual Studio Elevation of Privilege Vulnerability.


Local Security Authority (LSA) Elevation of Privilege Vulnerability.


Windows Telephony Server Elevation of Privilege Vulnerability.


Windows

Print

Spooler

Elevation

of

Privilege

Vulnerability.

This

CVE

ID

is

unique

from


Visual Studio Code Elevation of Privilege Vulnerability.


Windows File Server Resource Management Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26810.


Storage Spaces Direct Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26932 CVE-2022-26938.


Windows User Profile Service Elevation of Privilege Vulnerability.


Windows Kerberos Elevation of Privilege Vulnerability.


Windows Work Folder Service Elevation of Privilege Vulnerability.


Storage Spaces Direct Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26932 CVE-2022-26939.


Windows Bluetooth Driver Elevation of Privilege Vulnerability.


Storage Spaces Direct Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26938 CVE-2022-26939.


Windows File Explorer Elevation of Privilege Vulnerability.


Windows File Server Resource Management Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-26827.


Windows PlayToManager Elevation of Privilege Vulnerability.


Named Pipe File System Elevation of Privilege Vulnerability.


Microsoft Dynamics GP Elevation Of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23272 CVE-2022-23273.


Windows NT OS Kernel Elevation of Privilege Vulnerability.


Windows Inking COM Elevation of Privilege Vulnerability.


Windows PDEV Elevation of Privilege Vulnerability.


Windows Fast FAT File System Driver Elevation of Privilege Vulnerability.


Microsoft Dynamics GP Elevation Of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23271 CVE-2022-23273.


SQL Server for Linux Containers Elevation of Privilege Vulnerability.


Microsoft Dynamics GP Elevation Of Privilege Vulnerability. This CVE ID is unique from CVE-2022-23271 CVE-2022-23272.


Windows StateRepository API Server file Elevation of Privilege Vulnerability.


Windows User-mode Driver Framework Reflector Driver Elevation of Privilege Vulnerability.


Windows Push Notifications Apps Elevation Of Privilege Vulnerability.


Windows GDI Elevation of Privilege Vulnerability.


Tile Data Repository Elevation of Privilege Vulnerability.


Windows Cleanup Manager Elevation of Privilege Vulnerability.


Windows Application Model Core API Elevation of Privilege Vulnerability.


Microsoft Cryptographic Services Elevation of Privilege Vulnerability.


Windows System Launcher Elevation of Privilege Vulnerability.


Microsoft Exchange Server Elevation of Privilege Vulnerability.


Windows Accounts Control Elevation of Privilege Vulnerability.


Windows Devices Human Interface Elevation of Privilege Vulnerability.


Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability.


Microsoft Cluster Port Driver Elevation of Privilege Vulnerability.


Virtual Machine IDE Drive Elevation of Privilege Vulnerability.


Windows AppContracts API Server Elevation of Privilege Vulnerability.


Windows User Profile Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21919.


Windows UI Immersive Server API Elevation of Privilege Vulnerability.


Xbox Live Auth Manager for Windows Elevation of Privilege Vulnerability.


Task Flow Data Engine Elevation of Privilege Vulnerability.


Windows User Profile Service Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21895.


Connected Devices Platform Service Elevation of Privilege Vulnerability.


Windows Hyper-V Elevation of Privilege Vulnerability.


Windows Bind Filter Driver Elevation of Privilege Vulnerability.


Clipboard User Service Elevation of Privilege Vulnerability.


Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability.


Local Security Authority Subsystem Service Elevation of Privilege Vulnerability.


Windows Storage Elevation of Privilege Vulnerability.


Windows Kerberos Elevation of Privilege Vulnerability.


The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Windows Elevation of Privilege Vulnerability.\


An elevation of privilege vulnerability in Bluetooth could enable a proximate attacker to manage access to documents on the device. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability in the Bluetooth stack. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32612586.


A DCOM object in Helppane.exe in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 when configured to run as the interactive user allows an authenticated attacker to run arbitrary code in another user's session aka \Windows COM Session Elevation of Privilege Vulnerability.\


Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation privilege vulnerability when an attacker runs a specially crafted application aka \Windows COM Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-0214.


An elevation of privilege vulnerability exists in Windows 7 Windows 8.1 Windows RT 8.1 Windows 10 Windows Server 2008 R2 Windows Server 2012 Windows Server 2012 R2 and Windows Server 2016 when the Microsoft Graphics Component fails to properly handle objects in memory aka \Windows Graphics Component Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0024 CVE-2017-0026 CVE-2017-0056 CVE-2017-0078 CVE-2017-0080 CVE-2017-0081 and CVE-2017-0082.


The kernel-mode drivers in Microsoft Windows 10 Gold 1511 and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0024 CVE-2017-0056 CVE-2017-0078 CVE-2017-0079 CVE-2017-0080 CVE-2017-0081 and CVE-2017-0082.


An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to obtain access to custom permissions. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34114230.


An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-35385327.


An elevation of privilege vulnerability in Package Manager could enable a local malicious application to prevent users from uninstalling applications or removing permissions from applications. This issue is rated as Moderate because it is a local bypass of user interaction requirements. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32553261.


An elevation of privilege vulnerability in Location Manager could enable a local malicious application to bypass operating system protections for location data. This issue is rated as Moderate because it could be used to generate inaccurate data. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-33091107.


The kernel-mode drivers in Microsoft Windows 10 Gold 1511 and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0024 CVE-2017-0026 CVE-2017-0056 CVE-2017-0078 CVE-2017-0079 CVE-2017-0081 and CVE-2017-0082.


Microsoft SharePoint Foundation 2013 SP1 allows an elevation of privilege vulnerability when it does not properly sanitize a specially crafted web request aka \Microsoft SharePoint XSS Vulnerability\.


An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in the context of a privileged process. This issue is rated as High because it is a general bypass for a kernel level defense in depth or exploit mitigation technology. Product: Android. Versions: Kernel-3.18. Android ID: A-33351919.


An elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to delete user data. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-33178389.


The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0024 CVE-2017-0026 CVE-2017-0056 CVE-2017-0078 CVE-2017-0079 CVE-2017-0080 CVE-2017-0082.


A DCOM object in Helppane.exe in Microsoft Windows 7 SP1; Windows Server 2008 R2; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows HelpPane Elevation of Privilege Vulnerability.\


Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows Hyper-V instruction emulation fails to properly enforce privilege levels aka \Hypervisor Code Integrity Elevation of Privilege Vulnerability\.


An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of the Internet Zone aka \Microsoft Edge Elevation of Privilege Vulnerability.\ This CVE ID is unique from CVE-2017-0233.


An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller aka \LDAP Elevation of Privilege Vulnerability.\


Windows Hyper-V allows an elevation of privilege vulnerability when Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 fail to properly validate vSMB packet data aka \Windows Hyper-V vSMB Elevation of Privilege Vulnerability\.


The kernel-mode drivers in Microsoft Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0024 CVE-2017-0026 CVE-2017-0056 CVE-2017-0079 CVE-2017-0080 CVE-2017-0081 CVE-2017-0082.


The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application aka \Windows GDI Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0001 CVE-2017-0005 and CVE-2017-0025.


The kernel-mode drivers in Microsoft Windows Vista; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0001 CVE-2017-0005 and CVE-2017-0047.


An elevation of privilege vulnerability in the System UI could enable a local malicious application to create a UI overlay covering the entire screen. This issue is rated as Moderate because it is a local bypass of user interaction requirements that would normally require either user initiation or user permission. Product: Android. Versions: 7.1.1. Android ID: A-30150688.


An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-33815946.


An elevation of privilege vulnerability in Contacts could enable a local malicious application to silently create contact information. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission). Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-32219099.


Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1; Windows 10 Gold 1511 and 1607; and Windows Server 2016 let attackers with access to targets systems gain privileges when Windows fails to properly validate buffer lengths aka \Windows Elevation of Privilege Vulnerability.\


Windows COM in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation privilege vulnerability when Windows fails to properly validate input before loading type libraries aka \Windows COM Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-0213.


An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode aka \Win32k Elevation of Privilege Vulnerability.\ This CVE ID is unique from CVE-2017-0188.


An Elevation of Privilege vulnerability in Bluetooth could potentially enable a local malicious application to accept harmful files shared via bluetooth without user permission. This issue is rated as Moderate due to local bypass of user interaction requirements. Product: Android. Versions: 7.0 7.1.1 7.1.2. Android ID: A-35258579.


The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local users to gain privileges via a crafted application aka \Windows Graphics Elevation of Privilege Vulnerability.\


An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies which could allow an attacker to access information from one domain and inject it into another domain aka \Internet Explorer Elevation of Privilege Vulnerability.\


The kernel API in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 and Windows Server 2012 mishandles registry objects in memory which allows local users to gain privileges via a crafted application aka \Windows Registry Elevation of Privilege Vulnerability.\


The

kernel-mode

drivers

in

Microsoft

Windows

Vista

Windows

Server

and

Windows

Windows

Windows

Server

Gold

and

Windows

RT

Windows

Gold

and

and

Windows

Server

allow

local

users

to

gain

privileges

via

a

crafted

application

aka

Elevation

of

Privilege

Vulnerability.\

This

vulnerability

is

different

from

those

described

in


The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application aka \Windows GDI Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0001 CVE-2017-0025 and CVE-2017-0047.


The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application aka \Windows GDI Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0005 CVE-2017-0025 and CVE-2017-0047.


An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10 Windows 10 1511 Windows 8.1 Windows RT 8.1 and Windows Server 2012 R2 fails to properly sanitize handles in memory aka \Windows Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 11 on Windows 10 1511 and 1606 and Windows Server 2016 does not enforce cross-domain policies allowing attackers to access information from one domain and inject it into another via a crafted application aka \Internet Explorer Elevation of Privilege Vulnerability.\


An elevation of privilege vulnerability exists in Windows 10 Windows 8.1 Windows RT 8.1 Windows Server 2012 Windows Server 2012 R2 and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check aka \Windows OLE Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows 10 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0026 CVE-2017-0056 CVE-2017-0078 CVE-2017-0079 CVE-2017-0080 CVE-2017-0081 and CVE-2017-0082.


An elevation of privilege vulnerability in the External Storage Provider could enable a local secondary user to read data from an external storage SD card inserted by the primary user. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other applications. Product: Android. Versions: 6.0 6.0.1 7.0 7.1. Android ID: A-32523490.


Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow an attacker to elevate privilege when tdx.sys fails to check the length of a buffer prior to copying memory to it aka \Windows TDX Elevation of Privilege Vulnerability\.


The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ This vulnerability is different from those described in CVE-2017-0024 CVE-2017-0026 CVE-2017-0056 CVE-2017-0078 CVE-2017-0079 CVE-2017-0080 and CVE-2017-0081.


The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles objects in memory aka \Windows Graphics Component Elevation of Privilege Vulnerability\.


Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere due to how Skype for Business handles authentication requests aka \Skype for Business Elevation of Privilege Vulnerability.\


Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to the way web requests are handled aka \Microsoft SharePoint Elevation of Privilege Vulnerability\.


The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016 allows an elevation of privilege vulnerability when an attacker sends specially crafted requests to the server aka \Windows SMB Elevation of Privilege Vulnerability\.


Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce file share permissions.


Microsoft Windows 8.1 Windows Server 2012 R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability in the way it handles calls to Advanced Local Procedure Call (ALPC) aka \Windows Elevation of Privilege Vulnerability\.


Windows kernel in Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and RT1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and 1709 Windows Server 2016 and Windows Server version 1709 allows an attacker to run arbitrary code in kernel mode install programs view change or delete data and create new accounts with full user rights due to improperly handing objects in memory aka \Windows Kernel Elevation of Privilege Vulnerability\.


Microsoft Project Server and Microsoft SharePoint Enterprise Server 2016 allow an attacker to use cross-site forgery to read content that they are not authorized to read use the victim's identity to take actions on the web application on behalf of the victim such as change permissions and delete content and inject malicious content in the browser of the victim aka \Microsoft Project Server Elevation of Privilege Vulnerability\.


ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka \ASP.NET Core Elevation Of Privilege Vulnerability\.


In BlackBerry QNX Software Development Platform (SDP) 6.6.0 an elevation of privilege vulnerability in the default configuration of the QNX SDP with QNet enabled on networks comprising two or more QNet nodes could allow an attacker to access local and remote files or take ownership of files on other QNX nodes regardless of permissions by executing commands targeting arbitrary nodes from a secondary QNX 6.6.0 QNet node.


An elevation of Privilege vulnerability exists in the Thermal Driver where a missing bounds checks in the thermal throttle driver can cause an out-of-bounds write in the kernel. This issue is rated as moderate. Product: Pixel. Version: N/A. Android ID: A-34705801. References: N-CVE-2017-6274.


NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-65023166. Reference: N-CVE-2017-6279.


NVIDIA libnvmmlite_audio.so contains an elevation of privilege vulnerability when running in media server which may cause an out of bounds write and could lead to local code execution in a privileged process. This issue is rated as high. Product: Android. Version: N/A. Android: A-38027496. Reference: N-CVE-2017-6258.


Microsoft Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows improperly handling calls to Advanced Local Procedure Call (ALPC) aka \Windows ALPC Elevation of Privilege Vulnerability\.


Microsoft Win32k in Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\.


Microsoft Windows 1607 1703 and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor (IME) improperly handling parameters in a method of a DCOM class aka \Windows IME Elevation of Privilege Vulnerability\.


Windows Error Reporting (WER) in Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an elevation of privilege vulnerability aka \Windows Error Reporting Elevation of Privilege Vulnerability\.


The graphics component in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application aka \Microsoft Graphics Component Elevation of Privilege Vulnerability.\


The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8694.


Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Microsoft Graphics Component Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8574 and CVE-2017-8556.


The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8689.


The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root aka \Xamarin.iOS Elevation Of Privilege Vulnerability.\


Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8578 CVE-2017-8580 CVE-2017-8581 and CVE-2017-8467.


Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an elevation of privilege vulnerability due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol aka \Windows Elevation of Privilege Vulnerability\.


Microsoft Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Windows Secure Kernel Mode fails to properly handle objects in memory aka \Windows Elevation of Privilege Vulnerability\.


A kernel-mode driver in Microsoft Windows XP SP3 Windows XP x64 XP2 Windows Server 2003 SP2 Windows Vista Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 and Windows 8 allows an elevation of privilege when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE is unique from CVE-2017-0263.


The Windows Kernel-Mode Drivers component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\.. This CVE ID is unique from CVE-2017-8720.


The Microsoft Windows graphics component on Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8675.


Azure AD Connect Password writeback if misconfigured during enablement allows an attacker to reset passwords and gain unauthorized access to arbitrary on-premises AD privileged user accounts aka \Azure AD Connect Elevation of Privilege Vulnerability.\


Graphics in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Microsoft Graphics Component Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8573 and CVE-2017-8574.


Windows Subsystem for Linux in Windows 10 1703 allows an elevation of privilege vulnerability when it fails to properly handle handles NT pipes aka \Windows Subsystem for Linux Elevation of Privilege Vulnerability\.


Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8577 CVE-2017-8578 CVE-2017-8581 and CVE-2017-8467.


Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server aka \SharePoint Server XSS Vulnerability\.


CLFS in Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory aka \Windows CLFS Elevation of Privilege Vulnerability\.


Windows kernel in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory aka \Windows Kernel Elevation of Privilege Vulnerability\.


The DirectX component in Microsoft Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an authenticated attacker to run arbitrary code in kernel mode via a specially crafted application aka \DirectX Elevation of Privilege Vulnerability.\


Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an elevation of privilege vulnerability due to the way that the Windows Common Log File System (CLFS) driver handles objects in memory aka \Windows CLFS Elevation of Privilege Vulnerability\.


Graphics in Microsoft Windows 7 SP1 Windows Server 2008 SP2 and R2 SP1 Windows 8.1 and Windows RT 8.1 Windows Server 2012 and R2 Windows 10 Gold 1511 1607 1703 and Windows Server 2016 allows an elevation of privilege vulnerability due to the way it handles objects in memory aka \Win32k Elevation of Privilege Vulnerability\.


Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to elevate privileges due to the way that Microsoft Edge validates JavaScript under specific conditions aka \Microsoft Edge Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8503.


Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8577 CVE-2017-8580 CVE-2017-8581 and CVE-2017-8467.


Windows Cursor in Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and Windows Server 2016 allows improper elevation of privilege aka \Windows Cursor Elevation of Privilege Vulnerability\.


An elevation of privilege vulnerability exists in Microsoft SharePoint Foundation 2013 Service Pack 1 when it does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Cross Site Scripting Vulnerability\.


Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 1607 and 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8578 CVE-2017-8580 CVE-2017-8577 and CVE-2017-8467.


Windows Error Reporting (WER) in Microsoft Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows an attacker to gain greater access to sensitive information and system functionality due to the way that WER handles and executes files aka \Windows Elevation of Privilege Vulnerability\.


Graphics in Microsoft Windows 10 1607 1703 and Windows Server 2016 allows an elevation of privilege vulnerability when it fails to properly handle objects in memory aka \Microsoft Graphics Component Elevation of Privilege Vulnerability\. This CVE ID is unique from CVE-2017-8573 and CVE-2017-8556.


Microsoft SharePoint Server 2013 Service Pack 1 allows an elevation of privilege vulnerability when it fails to properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint XSS Vulnerability\.


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-6100.


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-6171 and CVE-2015-6174.


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-6101.


The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the AppContainer protection mechanism and gain privileges via a DelegateExecute launch of an arbitrary application as demonstrated by a transition from Low Integrity to Medium Integrity aka \Internet Explorer Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-6171 and CVE-2015-6173.


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-6173 and CVE-2015-6174.


win32k.sys in the kernel-mode drivers in Microsoft Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not properly validate the token of a calling thread which allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The AhcVerifyAdminContext function in ahcache.sys in the Application Compatibility component in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not verify that an impersonation token is associated with an administrative account which allows local users to gain privileges by running AppCompatCache.exe with a crafted DLL file aka MSRC ID 20544 or \Microsoft Application Compatibility Infrastructure Elevation of Privilege Vulnerability.\


Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users which allows local users to obtain server and virtual-machine administrative privileges by establishing a server session with Active Directory credentials aka \Virtual Machine Manager Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 does not properly constrain impersonation levels which allows local users to gain privileges via a crafted application aka \Impersonation Level Check Elevation of Privilege Vulnerability.\


Task Scheduler in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows local users to gain privileges by triggering application execution by an invalid task aka \Task Scheduler Elevation of Privilege Vulnerability.\


The Windows Registry Virtualization feature in the kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not properly restrict changes to virtual stores which allows local users to gain privileges via a crafted application aka \Registry Virtualization Elevation of Privilege Vulnerability.\


mrxdav.sys (aka the WebDAV driver) in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to bypass an impersonation protection mechanism and obtain privileges for redirection of WebDAV requests via a crafted application aka \WebDAV Elevation of Privilege Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The User Profile Service (aka ProfSvc) in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges by conducting a junction attack to load another user's UsrClass.dat registry hive aka MSRC ID 20674 or \Microsoft User Profile Service Elevation of Privilege Vulnerability.\


Microsoft Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow local users to gain privileges via a crafted application that leverages incorrect impersonation handling in a process that uses the SeAssignPrimaryTokenPrivilege privilege aka \Windows Create Process Elevation of Privilege Vulnerability.\


Microsoft SQL Server 2008 SP3 and SP4 2008 R2 SP2 and SP3 2012 SP1 and SP2 and 2014 uses an incorrect class during casts of unspecified pointers which allows remote authenticated users to gain privileges by leveraging certain write access aka \SQL Server Elevation of Privilege Vulnerability.\


The Service Control Manager (SCM) in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not properly constrain impersonation levels which allows local users to gain privileges via a crafted application aka \Service Control Manager Elevation of Privilege Vulnerability.\


Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 Vista SP2 and Server 2008 SP2 allows local users to gain privileges via a crafted application as exploited in the wild in April 2015 aka \Win32k Elevation of Privilege Vulnerability.\


OLE in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to gain privileges via crafted input as demonstrated by a transition from Low Integrity to Medium Integrity aka \OLE Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-2417.


The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via a crafted application aka \Font Driver Elevation of Privilege Vulnerability.\


Task Scheduler in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows local users to bypass intended filesystem restrictions and delete arbitrary files via unspecified vectors aka \Windows Task File Deletion Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 mishandles junctions during mountpoint creation which makes it easier for local users to gain privileges by leveraging certain sandbox access aka \Windows Mount Point Elevation of Privilege Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 and Windows RT allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application that triggers a Winsock call referencing an invalid address aka \Winsock Elevation of Privilege Vulnerability.\


Microsoft Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 do not properly constrain impersonation levels which allows local users to gain privileges via a crafted application aka \Windows Task Management Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-2524.


win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


OLE in Microsoft Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows remote attackers to gain privileges via crafted input as demonstrated by a transition from Low Integrity to Medium Integrity aka \OLE Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-2416.


Microsoft Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 do not properly constrain impersonation levels which allows local users to gain privileges via a crafted application aka \Windows Task Management Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-2528.


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows local users to gain privileges via a crafted application aka \Windows Elevation of Privilege Vulnerability.\


Microsoft

Access

Excel

InfoPath

OneNote

PowerPoint

Project

Publisher

Visio

Word

Office

IME

(Japanese)

Access

Excel

InfoPath

OneNote

PowerPoint

Project

Publisher

Visio

Word

Pinyin

IME

Access

Excel

InfoPath

OneNote

PowerPoint

Project

Publisher

Visio

Word

Excel

RT

OneNote

RT

PowerPoint

RT

Word

RT

Access

Excel

OneNote

PowerPoint

Project

Publisher

Visio

Word

Skype

for

Business

and

Lync

allow

remote

attackers

to

bypass

a

sandbox

protection

mechanism

and

gain

privileges

via

a

crafted

web

site

that

is

accessed

with

Internet

Explorer

as

demonstrated

by

a

transition

from

Low

Integrity

to

Medium

Integrity

aka

\Microsoft

Office

Elevation

of

Privilege

Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow attackers to bypass an application sandbox protection mechanism and perform unspecified filesystem actions via a crafted application aka \Windows Filesystem Elevation of Privilege Vulnerability.\


The Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows local users to gain privileges via a crafted application aka \Font Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-2512.


Object Manager in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not properly constrain impersonation levels during interaction with object symbolic links that originated in a sandboxed process which allows local users to gain privileges via a crafted application aka \Windows Object Manager Elevation of Privilege Vulnerability.\


The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 does not prevent DCE/RPC connection reflection which allows local users to gain privileges via a crafted application aka \Windows RPC Elevation of Privilege Vulnerability.\


The Netlogon service in Microsoft Windows Server 2003 SP2 and R2 SP2 Windows Server 2008 SP2 and R2 SP1 and Windows Server 2012 Gold and R2 does not properly implement domain-controller communication which allows remote attackers to discover credentials by leveraging certain PDC access and spoofing the BDC role in a PDC communication channel aka \Elevation of Privilege Vulnerability in Netlogon.\


The Adobe Type Manager Library in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows local users to gain privileges via a crafted application aka \Font Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-2507.


The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 does not properly constrain impersonation levels which allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allow attackers to bypass an application sandbox protection mechanism and perform unspecified registry actions via a crafted application aka \Windows Registry Elevation of Privilege Vulnerability.\


The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to obtain sensitive information via a crafted application that continues to execute during a subsequent user's login session aka \Windows CSRSS Elevation of Privilege Vulnerability.\


win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4 when SafeDllSearchMode is disabled allows local users to gain privileges via a malicious DLL in the UserProfile directory aka \User Profile Elevation of Privilege Vulnerability.\


The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via \invalid application window sizes\ in layered application windows aka the \GDI Invalid Window Size Elevation of Privilege Vulnerability.\


afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 Windows Server 2003 SP2 Windows Vista SP2 Windows Server 2008 SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 on 64-bit platforms does not properly validate user-mode input passed to kernel mode which allows local users to gain privileges via a crafted application aka \AfdPoll Elevation of Privilege Vulnerability.\


The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 Server 2003 SP2 Vista SP2 and Server 2008 SP2 when a Chinese Japanese or Korean system locale is used can access uninitialized memory during the processing of Unicode characters which allows local users to gain privileges via a crafted application aka \CSRSS Elevation of Privilege Vulnerability.\


afd.sys in the Ancillary Function Driver in Microsoft Windows Server 2003 SP2 does not properly validate user-mode input passed to kernel mode which allows local users to gain privileges via a crafted application aka \Ancillary Function Driver Elevation of Privilege Vulnerability.\


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka \Windows Kernel Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it aka \Windows NDIS Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8342.


An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior aka \Windows Installer Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC) aka \Windows ALPC Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links aka \Windows Kernel Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 10 Servers.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8480 CVE-2018-8488 CVE-2018-8518.


An elevation of privilege vulnerability exists in the way that the Microsoft RemoteFX Virtual GPU miniport driver handles objects in memory aka \Microsoft RemoteFX Virtual GPU miniport driver Elevation of Privilege Vulnerability.\ This affects Windows Server 2016 Windows 10 Windows 8.1 Windows 7 Windows Server 2019.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka \Win32k Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2016 Windows Server 2008 R2 Windows 10 Windows 10 Servers. This CVE ID is unique from CVE-2018-8120 CVE-2018-8124 CVE-2018-8164.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8323.


An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser aka \Microsoft Edge Elevation of Privilege Vulnerability.\ This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8463.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8488 CVE-2018-8498 CVE-2018-8518.


An elevation of privilege vulnerability exists when Windows fails a check allowing a sandbox escape aka \Windows Elevation of Privilege Vulnerability.\ This affects Windows 7 Windows Server 2012 R2 Windows RT 8.1 Windows Server 2008 Windows Server 2012 Windows 8.1 Windows Server 2008 R2 Windows 10. This CVE ID is unique from CVE-2018-8313.


An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level aka \.NET Framework Elevation of Privilege Vulnerability.\ This affects Microsoft .NET Framework 2.0 Microsoft .NET Framework 3.0 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.7.1/4.7.2 Microsoft .NET Framework 3.5 Microsoft .NET Framework 3.5.1 Microsoft .NET Framework 4.6/4.6.1/4.6.2 Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2 Microsoft .NET Framework 4.7.2.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint. This CVE ID is unique from CVE-2018-8480 CVE-2018-8498 CVE-2018-8518.


An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies which could allow an attacker to access information from one domain and inject it into another domain aka \Microsoft Edge Elevation of Privilege Vulnerability.\ This affects Microsoft Edge.