An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1222.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1269 CVE-2020-1273 CVE-2020-1274 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory aka 'Windows Network Connections Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1373 CVE-2020-1390 CVE-2020-1428 CVE-2020-1438.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1547 CVE-2020-1551.


An elevation of privilege vulnerability exists when the Windows Work Folders Service improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Work Folders Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1484 CVE-2020-1516.


An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986 CVE-2020-1237 CVE-2020-1246 CVE-2020-1262 CVE-2020-1264 CVE-2020-1266 CVE-2020-1273 CVE-2020-1274 CVE-2020-1275 CVE-2020-1276 CVE-2020-1307 CVE-2020-1316.


An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Microsoft Store Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1309.


An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Service Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when the Windows Backup Engine improperly handles memory.To exploit this vulnerability an attacker would first have to gain execution on the victim system aka 'Windows Backup Engine Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1535 CVE-2020-1536 CVE-2020-1539 CVE-2020-1540 CVE-2020-1541 CVE-2020-1542 CVE-2020-1543 CVE-2020-1544 CVE-2020-1545 CVE-2020-1546 CVE-2020-1551.


An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in memory.To exploit the vulnerability an attacker would first have to log on to the system aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1162.


Virtual Hard Disk Driver in Windows 10 Gold 1511 and 1607 and Windows Server 2016 does not properly restrict access to files which allows local users to gain privileges via a crafted application aka \VHD Driver Elevation of Privilege Vulnerability.\


Task Scheduler in Microsoft Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted UNC pathname in a task aka \Task Scheduler Elevation of Privilege Vulnerability.\


The Secure Kernel Mode implementation in Microsoft Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level (VTL) protection mechanism via a crafted application aka \Secure Kernel Mode Elevation of Privilege Vulnerability.\


Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer which allows remote authenticated users to gain privileges via unknown vectors aka \SQL RDBMS Engine Elevation of Privilege Vulnerability.\


Microsoft SQL Server 2014 SP1 2014 SP2 and 2016 does not properly perform a cast of an unspecified pointer which allows remote authenticated users to gain privileges via unknown vectors aka \SQL RDBMS Engine Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer which allows remote authenticated users to gain privileges via unknown vectors aka \SQL RDBMS Engine Elevation of Privilege Vulnerability.\


The kernel API in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 mishandles permissions which allows local users to gain privileges via a crafted application aka \Windows Kernel Elevation of Privilege Vulnerability.\


Virtual Hard Disk Driver in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 does not properly restrict access to files which allows local users to gain privileges via a crafted application aka \VHD Driver Elevation of Privilege Vulnerability.\


The Graphics Component in the kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ a different vulnerability than CVE-2016-3266 CVE-2016-3376 and CVE-2016-7211.


The agent in Microsoft SQL Server 2012 SP2 2012 SP3 2014 SP1 2014 SP2 and 2016 does not properly check the atxcore.dll ACL which allows remote authenticated users to gain privileges via unspecified vectors aka \SQL Server Agent Elevation of Privilege Vulnerability.\


Input Method Editor (IME) in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 mishandles DLL loading which allows local users to gain privileges via unspecified vectors aka \Windows IME Elevation of Privilege Vulnerability.\


The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold 1511 and 1607 mishandles library loading which allows local users to gain privileges via a crafted application aka \Windows Diagnostics Hub Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ a different vulnerability than CVE-2016-3266 CVE-2016-3376 and CVE-2016-7185.


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 mishandle caching for NTLM password-change requests which allows local users to gain privileges via a crafted application aka \Windows NTLM Elevation of Privilege Vulnerability.\


The Installer in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 mishandles library loading which allows local users to gain privileges via a crafted application aka \Windows Installer Elevation of Privilege Vulnerability.\


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3333 CVE-2016-3334 CVE-2016-3335 CVE-2016-3338 CVE-2016-3340 CVE-2016-3342 and CVE-2016-3343.


An elevation of privilege vulnerability in the Account Manager Service in Android 7.0 before 2016-11-01 could enable a local malicious application to retrieve sensitive information without user interaction. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission.) Android ID: A-30455516.


An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 6.x before 2016-11-01 and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission.) Android ID: A-29833954.


An elevation of privilege vulnerability in the Bluetooth component in Android 4.x before 4.4.4 5.0.x before 5.0.2 5.1.x before 5.1.1 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to pair with any Bluetooth device without user consent. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission.) Android ID: A-29043989.


An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0 6.0.1 7.0. Android ID: A-31566390.


An elevation of privilege vulnerability in Smart Lock could enable a local malicious user to access Smart Lock settings without a PIN. This issue is rated as Moderate because it first requires physical access to an unlocked device where Smart Lock was the last settings pane accessed by the user. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1. Android ID: A-29055171.


An elevation of privilege vulnerability in the AOSP Launcher in Android 7.0 before 2016-11-01 could allow a local malicious application to create shortcuts that have elevated privileges without the user's consent. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission). Android ID: A-30778130.


An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0. Android ID: A-30202228.


The kernel-mode driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0093 CVE-2016-0094 and CVE-2016-0095.


The kernel-mode driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0143 and CVE-2016-0167.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0173 CVE-2016-0174 and CVE-2016-0196.


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 mishandles symbolic links which allows local users to gain privileges via a crafted application aka \Windows Kernel Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry aka \Windows Kernel Local Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0075.


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 mishandle DLL loading which allows local users to gain privileges via a crafted application aka \DLL Loading Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0171 CVE-2016-0173 and CVE-2016-0196.


The kernel-mode driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0094 CVE-2016-0095 and CVE-2016-0096.


The kernel-mode driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0165 and CVE-2016-0167.


dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows 7 SP1 Windows Server 2008 R2 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry aka \Windows Kernel Local Elevation of Privilege Vulnerability.\


The Secondary Logon Service in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 does not properly process request handles which allows local users to gain privileges via a crafted application aka \Secondary Logon Elevation of Privilege Vulnerability.\


The kernel-mode driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0093 CVE-2016-0094 and CVE-2016-0096.


The sandbox implementation in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 mishandles reparse points which allows local users to gain privileges via a crafted application aka \Windows Mount Point Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0007.


The WebDAV client in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \WebDAV Elevation of Privilege Vulnerability.\


The Secondary Logon Service in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Secondary Logon Elevation of Privilege Vulnerability.\


dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability.\


The kernel-mode driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0093 CVE-2016-0095 and CVE-2016-0096.


The sandbox implementation in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 Gold and 1511 mishandles reparse points which allows local users to gain privileges via a crafted application aka \Windows Mount Point Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0006.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The kernel-mode driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0143 and CVE-2016-0165.


The kernel in Microsoft Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry aka \Windows Kernel Local Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0171 CVE-2016-0173 and CVE-2016-0174.


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3332 CVE-2016-3333 CVE-2016-3334 CVE-2016-3335 CVE-2016-3338 CVE-2016-3340 CVE-2016-3342 CVE-2016-3343 and CVE-2016-7184.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0171 CVE-2016-0174 and CVE-2016-0196.


The kernel in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application that makes an API call to access sensitive information in the registry aka \Windows Kernel Local Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0073.


The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces which allows remote attackers to gain privileges via unspecified vectors aka \Microsoft Browser Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3388.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\ a different vulnerability than CVE-2016-3266 CVE-2016-7185 and CVE-2016-7211.


The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3308 CVE-2016-3309 and CVE-2016-3311.


The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3309 CVE-2016-3310 and CVE-2016-3311.


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3333 CVE-2016-3334 CVE-2016-3335 CVE-2016-3338 CVE-2016-3340 CVE-2016-3342 and CVE-2016-7184.


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3333 CVE-2016-3334 CVE-2016-3338 CVE-2016-3340 CVE-2016-3342 CVE-2016-3343 and CVE-2016-7184.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3252 CVE-2016-3254 and CVE-2016-3286.


The Netlogon service in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 and Windows RT 8.1 improperly establishes secure communications channels which allows local users to gain privileges by leveraging access to a domain-joined machine aka \Netlogon Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 mishandles session objects which allows local users to hijack sessions and consequently gain privileges via a crafted application aka \Windows Session Object Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3306.


The kernel-mode drivers in Microsoft Windows Server 2012 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3333 CVE-2016-3335 CVE-2016-3338 CVE-2016-3340 CVE-2016-3342 CVE-2016-3343 and CVE-2016-7184.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3249 CVE-2016-3252 and CVE-2016-3286.


The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 mishandles proxy discovery which allows remote attackers to redirect network traffic via unspecified vectors aka \Windows WPAD Proxy Discovery Elevation of Privilege Vulnerability.\


The Web Proxy Auto Discovery (WPAD) protocol implementation in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold and 1511 and Internet Explorer 9 through 11 has an improper fallback mechanism which allows remote attackers to gain privileges via NetBIOS name responses aka \WPAD Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3308 CVE-2016-3309 and CVE-2016-3310.


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3333 CVE-2016-3334 CVE-2016-3335 CVE-2016-3340 CVE-2016-3342 CVE-2016-3343 and CVE-2016-7184.


The kernel API in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 does not properly implement registry access control which allows local users to obtain sensitive account information via a crafted application aka \Windows Kernel Elevation of Privilege Vulnerability.\


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3333 CVE-2016-3334 CVE-2016-3335 CVE-2016-3338 CVE-2016-3340 CVE-2016-3343 and CVE-2016-7184.


The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3308 CVE-2016-3310 and CVE-2016-3311.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3249 CVE-2016-3254 and CVE-2016-3286.


The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3333 CVE-2016-3334 CVE-2016-3335 CVE-2016-3338 CVE-2016-3340 CVE-2016-3342 CVE-2016-3343 and CVE-2016-7184.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces which allows remote attackers to gain privileges via unspecified vectors aka \Microsoft Browser Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3387.


atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application aka \ATMFD.dll Elevation of Privilege Vulnerability.\


The kernel API in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 does not properly enforce permissions which allows local users to obtain sensitive information via a crafted application aka \Windows Kernel Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3249 CVE-2016-3252 and CVE-2016-3254.


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3333 CVE-2016-3334 CVE-2016-3335 CVE-2016-3338 CVE-2016-3342 CVE-2016-3343 and CVE-2016-7184.


The Print Spooler service in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via vectors involving filesystem write operations aka \Windows Print Spooler Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3218.


The SMB server component in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application that forwards an authentication request to an unintended service aka \Windows SMB Server Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Windows Transaction Manager Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 mishandles session objects which allows local users to hijack sessions and consequently gain privileges via a crafted application aka \Windows Session Object Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3305.


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3221.


The Standard Collector service in Windows Diagnostics Hub mishandles library loading which allows local users to gain privileges via a crafted application aka \Windows Diagnostics Hub Elevation of Privilege Vulnerability.\


The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allows local users to gain privileges via a crafted application aka \GDI Elevation of Privilege Vulnerability.\


The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 Windows 10 Gold 1511 and 1607 and Windows Server 2016 allows local users to gain privileges via a crafted application aka \Windows Common Log File System Driver Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0026 CVE-2016-3332 CVE-2016-3334 CVE-2016-3335 CVE-2016-3338 CVE-2016-3340 CVE-2016-3342 CVE-2016-3343 and CVE-2016-7184.


The kernel-mode drivers in Microsoft Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold and 1511 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability.\


The kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT 8.1 and Windows 10 Gold 1511 and 1607 allow local users to gain privileges via a crafted application aka \Win32k Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-3376 CVE-2016-7185 and CVE-2016-7211.


afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode which allows local users to gain privileges via a crafted application aka \Ancillary Function Driver Elevation of Privilege Vulnerability.\


NDISTAPI.sys in the NDISTAPI driver in Remote Access Service (RAS) in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly validate user-mode input which allows local users to gain privileges via a crafted application aka \NDISTAPI Elevation of Privilege Vulnerability.\


The Ancillary Function Driver (AFD) in afd.sys in Microsoft Windows XP SP2 and SP3 Windows Server 2003 SP2 Windows Vista SP1 and SP2 Windows Server 2008 Gold SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly validate user-mode input which allows local users to gain privileges via a crafted application aka \Ancillary Function Driver Elevation of Privilege Vulnerability.\


The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user aka \CSRSS Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2010-0023.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36964.


Windows Event Tracing Elevation of Privilege Vulnerability


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26425 CVE-2021-34487.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26425 CVE-2021-34486.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38630.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-24102.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-24103.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26898 CVE-2021-26901.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-34486 CVE-2021-34487.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26872 CVE-2021-26898.


Windows Event Tracing Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26872 CVE-2021-26901.


Windows Event Tracing Elevation of Privilege Vulnerability.


Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28313 CVE-2021-28322.


Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28313 CVE-2021-28321.


Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28321 CVE-2021-28322.


Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1651.


Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1680.


Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability


WINS in Microsoft Windows Server 2003 SP2 and Server 2008 SP2 R2 and R2 SP1 allows local users to gain privileges by sending crafted packets over the loopback interface aka \WINS Local Elevation of Privilege Vulnerability.\


Windows Installer Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26415.


Windows Installer Elevation of Privilege Vulnerability


Windows Installer Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28440.


Windows Installer Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24499.


Windows Installer Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24530.


Windows Installer Elevation of Privilege Vulnerability.


Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2014-6350.


Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2014-6349.


Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site as demonstrated by a transition from Low Integrity to Medium Integrity aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 10 and 11 mishandles integrity settings and zone settings which allows remote attackers to bypass a sandbox protection mechanism via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site as demonstrated by a transition from Low Integrity to Medium Integrity aka \Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types which allows remote attackers to execute arbitrary web script in a privileged context via a crafted web site aka \Microsoft Browser Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-1704.


Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-1703.


Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2014-4123.


Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-1743.


Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2015-1748.


Microsoft Internet Explorer 8 allows remote attackers to gain privileges via a crafted web site as demonstrated by a transition from Low Integrity to Medium Integrity aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2014-1778.


Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2014-2777.


Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors aka \Internet Explorer Elevation of Privilege Vulnerability.\


Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0069.


Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors aka \Internet Explorer Elevation of Privilege Vulnerability \ a different vulnerability than CVE-2016-0068.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-36975.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-27072.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-34516.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-34449.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38639.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40449 CVE-2021-40450.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-28310.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40449 CVE-2021-41357.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40450 CVE-2021-41357.


Win32k Elevation of Privilege Vulnerability.


Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21887.


Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21882.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17038.


Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17010.


Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38625.


Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38626.


Windows Kernel Elevation of Privilege Vulnerability


Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31979 CVE-2021-33771.


Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-31979 CVE-2021-34514.


Windows Kernel Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33771 CVE-2021-34514.


Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-29142.


Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-29133.


Windows Kernel Elevation of Privilege Vulnerability.


Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21879.


Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21881.


The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application aka \Windows Kernel Memory Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows 8 Windows 8.1 Windows Server 2012 Gold and R2 Windows RT Gold and 8.1 and Windows 10 allows local users to gain privileges via a crafted application aka \Windows Object Reference Elevation of Privilege Vulnerability.\


The kernel in Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 allows local users to gain privileges via a crafted application aka \Windows Elevation of Privilege Vulnerability.\


Windows Print Spooler Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-38667 CVE-2021-40447.


Windows Projected File System Elevation of Privilege Vulnerability


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33761 CVE-2021-33773 CVE-2021-34456.


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33761 CVE-2021-33773 CVE-2021-34445.


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33761 CVE-2021-34445 CVE-2021-34456.


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33773 CVE-2021-34445 CVE-2021-34456.


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability.


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21885.


Windows Remote Access Connection Manager Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21914.


Windows Remote Access Elevation of Privilege Vulnerability


Windows

Remote

Access

Elevation

of

Privilege

Vulnerability

This

CVE

ID

is

unique

from


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33751 CVE-2021-34460 CVE-2021-34512 CVE-2021-34513.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33751 CVE-2021-34510 CVE-2021-34512 CVE-2021-34513.


Storage Spaces Controller Elevation of Privilege Vulnerability


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33751 CVE-2021-34460 CVE-2021-34510 CVE-2021-34512.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-33751 CVE-2021-34460 CVE-2021-34510 CVE-2021-34513.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-34460 CVE-2021-34510 CVE-2021-34512 CVE-2021-34513.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441 CVE-2021-40478 CVE-2021-40488 CVE-2021-40489.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-40478 CVE-2021-40488 CVE-2021-40489 CVE-2021-41345.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441 CVE-2021-40478 CVE-2021-40489 CVE-2021-41345.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441 CVE-2021-40488 CVE-2021-40489 CVE-2021-41345.


Storage Spaces Controller Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26441 CVE-2021-40478 CVE-2021-40488 CVE-2021-41345.


Azure Sphere Elevation of Privilege Vulnerability


Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981 CVE-2020-16988 CVE-2020-16989 CVE-2020-16993.


Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981 CVE-2020-16988 CVE-2020-16989 CVE-2020-16992.


Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16988 CVE-2020-16989 CVE-2020-16992 CVE-2020-16993.


Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981 CVE-2020-16988 CVE-2020-16992 CVE-2020-16993.


Azure Sphere Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-16981 CVE-2020-16989 CVE-2020-16992 CVE-2020-16993.


Windows TCP/IP Driver Elevation of Privilege Vulnerability


Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1681 CVE-2021-1686 CVE-2021-1690.


Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1681 CVE-2021-1687 CVE-2021-1690.


Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1681 CVE-2021-1686 CVE-2021-1687.


Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1686 CVE-2021-1687 CVE-2021-1690.


Windows WalletService Elevation of Privilege Vulnerability


Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26871.


Windows WalletService Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26885.


Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1698.


Windows Win32k Elevation of Privilege Vulnerability


Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-1732.


Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26875 CVE-2021-26900 CVE-2021-27077.


Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26863 CVE-2021-26875 CVE-2021-27077.


Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26863 CVE-2021-26900 CVE-2021-27077.


Windows Win32k Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2021-26863 CVE-2021-26875 CVE-2021-26900.


Windows Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24474.


Windows Win32k Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-24542.


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 mishandle DLL loading which allows local users to gain privileges via a crafted application aka \MAPI DLL Loading Elevation of Privilege Vulnerability.\


Microsoft Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 and Windows 7 SP1 do not properly validate handles which allows local users to gain privileges via a crafted application aka \Windows Elevation of Privilege Vulnerability.\


An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0959.

elevated privilege vulnerability
improper memory handle


An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory aka 'Windows Common Log File System Driver Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0984.


An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem (CSRSS) fails to properly handle objects in memory aka 'Windows CSRSS Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0808.


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'.


An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory aka 'DirectX Elevation of Privilege Vulnerability'.

elevated privilege vulnerability
improper memory object handle


An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1014 CVE-2019-1017.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0957.

elevated privilege vulnerability
improper web request sanitization


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka \Microsoft SharePoint Elevation of Privilege Vulnerability.\ This affects Microsoft SharePoint Server Microsoft SharePoint.


An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0958.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31746399. References: B-RB#26710.

elevated privilege vulnerability
arbitrary code execution


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31676542. References: B-RB#26684.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32886609.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-34198931. References: B-RB#112597.


An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-34088848. References: QC-CR#1116015.


An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33940449.


An elevation of privilege vulnerability in the kernel file system could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-31495866.


An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability specific details which limit the impact of the issue. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32068683. References: QC-CR#1103788.


An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33057977. References: N-CVE-2017-0338.


An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32919951. References: QC-CR#1097709.


An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32769717.


An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32402555.


An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and because of vulnerability specific details which limit the impact of the issue. Product: Android. Versions: N/A. Android ID: A-34468195. References: M-ALPS03162283.


An elevation of privilege vulnerability in NFC could enable a proximate attacker to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-33434992.


An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 7.0 7.1.1. Android ID: A-33039926.


An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-33544431. References: QC-CR#1103089.


An elevation of privilege vulnerability in the libnl library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-32255299.


An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-33139056. References: QC-CR#1097714.


An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32872662. References: QC-CR#1095009.


An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30202425. References: M-ALPS02898189.


An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of the Wi-Fi service. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32342065. NOTE: this issue also exists in the upstream libnl before 3.3.0 library.


An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32402310. References: QC-CR#1092497.


An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32370896. References: QC-CR#1086530.


An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34470286. References: M-ALPS03149160.


An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32940193. References: QC-CR#1102593.


An elevation of privilege vulnerability in MediaTek components including the M4U driver sound driver touchscreen driver GPU driver and Command Queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28429685. References: M-ALPS02710006.


An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913571.


An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34389303. References: QC-CR#1061845.


An elevation of privilege vulnerability in the HTC bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32512358.


An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28470975. References: M-ALPS02696367.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10. Android ID: A-31707909. References: B-RB#32094.


An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-31252965. References: QC-CR#1098801.


An elevation of privilege vulnerability in MediaTek components including the M4U driver sound driver touchscreen driver GPU driver and Command Queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-30074628. References: M-ALPS02829371.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34749571.


An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel 3.10. Android ID: A-34113000. References: N-CVE-2017-0331.


An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32089409.


An elevation of privilege vulnerability in the Qualcomm fingerprint sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32372915. References: QC-CR#1086530.


An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32624661. References: QC-CR#1078000.


An elevation of privilege vulnerability in the MediaTek video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34471002. References: M-ALPS03149173.


An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-33353700. References: QC-CR#1104067.


An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application to execute arbitrary code within the context of the boot and power management processor. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.18. Android ID:A-34115304. References: N-CVE-2017-0329.


An elevation of privilege vulnerability in the Qualcomm ADSPRPC driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-34112914. References: QC-CR#1110747.


An elevation of privilege vulnerability in MediaTek components including the M4U driver sound driver touchscreen driver GPU driver and Command Queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28430015. References: M-ALPS02708983.


An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-28332719.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32707507.


An elevation of privilege vulnerability in the Qualcomm Secure Execution Environment Communicator driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-35400457. References: QC-CR#1086140.


An elevation of privilege vulnerability in the Goodix touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32749036. References: QC-CR#1098602.


An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33043375. References: N-CVE-2017-0335.


An elevation of privilege vulnerability in the kernel performance subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32402548.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32125310. References: B-RB#112575.


An elevation of privilege vulnerability in MediaTek components including the M4U driver sound driver touchscreen driver GPU driver and Command Queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-31822282. References: M-ALPS02992041.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it is mitigated by current platform configurations. Product: Android. Versions: N/A. Android ID: A-32917432.


An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-34749392.


An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 7.0 7.1. Android ID: A-31677614.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32705438.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-34469904. References: B-RB#91539.


An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-35310230. References: M-ALPS03162263.


An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-35400551. References: QC-CR#1085928.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-32124445. References: B-RB#110688.


An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-27930566. References: N-CVE-2017-0339.


An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context of the sensor hub. This issue is rated as Moderate because it first requires exploitation of separate vulnerabilities. Product: Android. Versions: Kernel-3.10. Android ID: A-33178836.


An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-31750232. References: QC-CR#1082636.


An elevation of privilege vulnerability in the Realtek sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32705232.


An elevation of privilege vulnerability in the recovery verifier could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-31914369.


An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-36101220.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32705429.


An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32628763.


An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-32660278.


An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33842951.


An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32588962. References: QC-CR#1089433.


An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10 and Kernel 3.18. Android ID: A-33040280. References: N-CVE-2017-0325.


An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-33002026.


An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-33252788. References: QC-CR#1095770.


An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-33899363. References: N-CVE-2017-0333.


An elevation of privilege vulnerability in the MediaTek power driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-34259126. References: M-ALPS03150278.


An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-33001936.


An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-34125463. References: QC-CR#1115406.


An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-33106520. References: QC-CR#1099598.


An elevation of privilege vulnerability in MediaTek components including the M4U driver sound driver touchscreen driver GPU driver and Command Queue driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: N/A. Android ID: A-28449045. References: M-ALPS02710075.


An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-34132950. References: N-CVE-2017-0306.


An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-35393841. References: QC-CR#1084210.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32838767. References: B-RB#107459.


An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-28175904. References: M-ALPS02696516.


An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-31992762. References: N-CVE-2017-0337.


An elevation of privilege vulnerability in the Qualcomm Secure Channel Manager driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-35401052. References: QC-CR#1081711.


An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32401526. References: N-CVE-2017-0428.


An elevation of privilege vulnerability in the Qualcomm networking driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-33277611. References: QC-CR#1101792.


An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-31992382.


An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-35399801. References: QC-CR#1090482.


An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2. Android ID: A-34617444.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-32220769.


An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 6.0 6.0.1 7.0 7.1.1. Android ID: A-32706020.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-34203305. References: B-RB#111541.


An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process. Product: Android. Versions: N/A. Android ID: A-32916158. References: M-ALPS03032516.


An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32917445.


An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-34198729. References: B-RB#110666.


An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34325986.


An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. This issue is rated as High because it is a local arbitrary code execution in a privileged process. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1. Android ID: A-31992879.


An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel 3.10. Android ID: A-33893669. References: N-CVE-2017-0327.


An elevation of privilege vulnerability in the Framework APIs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 7.0 7.1.1. Android ID: A-33042690.


An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32658595. References: QC-CR#1103099.


An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1. Android ID: A-32585400.


An elevation of privilege vulnerability in the Qualcomm pin controller driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-35401152. References: QC-CR#826566.


An elevation of privilege vulnerability in the MediaTek hardware sensor driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32372051. References: M-ALPS02973195.


An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10 Kernel-3.18. Android ID: A-32402604. References: QC-CR#1092497.


An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33897738.