Win32k Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients.

NTFS Elevation of Privilege Vulnerability

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

Windows Hyper-V Elevation of Privilege Vulnerability

Win32k Elevation of Privilege Vulnerability

RPC Endpoint Mapper Service Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability

Windows Media Video Decoder Remote Code Execution Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

Windows Speech Runtime Elevation of Privilege Vulnerability

Windows GDI+ Remote Code Execution Vulnerability

Visual Studio Installer Elevation of Privilege Vulnerability

Windows Services and Controller App Elevation of Privilege Vulnerability

Windows Speech Runtime Elevation of Privilege Vulnerability

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.

SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affected.

Windows Installer Elevation of Privilege Vulnerability

Windows HTTP.sys Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows WalletService Elevation of Privilege Vulnerability

Windows Print Spooler Elevation of Privilege Vulnerability

Azure Sphere Elevation of Privilege Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass permissions by opening a directory with LIST (READ) access and using ReadDirectoryChangesW to monitor changes of files that do not have LIST permissions, which can be leveraged to determine filenames, access times, and other sensitive information.

Storage Spaces Controller Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1249, CVE-2020-1353, CVE-2020-1370, CVE-2020-1399, CVE-2020-1404, CVE-2020-1413, CVE-2020-1415, CVE-2020-1422.

Windows App-V Overlay Filter Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

Windows UPnP Device Host Elevation of Privilege Vulnerability

Remote Access API Elevation of Privilege Vulnerability

Windows Update Stack Elevation of Privilege Vulnerability

Windows Event Tracing Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.</p> <p>To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.</p> <p>This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the <strong>FAQ</strong> section of this CVE for configuration guidance.</p>