| |
ID ▼ |
Type ▼ |
Status ▼ |
Priority ▼ |
Milestone ▼ |
Owner ▼ |
Summary + Labels ▼ |
... |
|
|
118 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: Elevation of Privilege in ahcache.sys/NtApphelpCacheControl
CCProjectZeroMembers
|
|
|
|
127 |
----
|
WontFix
|
----
|
----
|
forshaw@google.com
|
Windows 7: Admin Check Bypass in NtPowerInformation
CCProjectZeroMembers
|
|
|
|
128 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: Impersonation Check Bypass With CryptProtectMemory and CRYPTPROTECTMEMORY_SAME_LOGON flag
CCProjectZeroMembers
|
|
|
|
137 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: Impersonation Check Bypass with MRXDAV
CCProjectZeroMembers
|
|
|
|
138 |
----
|
WontFix
|
----
|
----
|
forshaw@google.com
|
Windows: SMBv2 Symlink to Local File Vulnerability
CCProjectZeroMembers
|
|
|
|
198 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: CreateProcessAsUser Impersonation Token Bypass
CCProjectZeroMembers
|
|
|
|
206 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: Limited Bypass of Traverse Permissions in Kernel Object Manager
CCProjectZeroMembers
|
|
|
|
213 |
----
|
WontFix
|
----
|
----
|
forshaw@google.com
|
Windows: Console Driver Job Object Process Limit Bypass
CCProjectZeroMembers
|
|
|
|
215 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: Registry Virtualization TOCTOU User Check
CCProjectZeroMembers
|
|
|
|
219 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: NtUserGetClipboardAccessToken Token Leak
CCProjectZeroMembers
|
|
|
|
240 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: DosDevices Impersonation Elevation of Privilege
CCProjectZeroMembers
|
|
|
|
245 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: NtCreateTransactionManager Type Confusion Elevation of Privilege
CCProjectZeroMembers
|
|
|
|
293 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: use-after-free in bitmap handling
CCProjectZeroMembers
|
|
|
|
294 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: NULL pointer dereference with window station and clipboard
CCProjectZeroMembers
|
|
|
|
295 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: use-after-free in WindowStation
CCProjectZeroMembers
|
|
|
|
304 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: Brush object Use-after-free vulnerability
CCProjectZeroMembers
|
|
|
|
311 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Window kernel: use-after-free in bitmap handling #2
CCProjectZeroMembers
|
|
|
|
312 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: possible NULL pointer dereference of a SURFOBJ
CCProjectZeroMembers
|
|
|
|
313 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: buffer overflow in win32k!vSolidFillRect
CCProjectZeroMembers
|
|
|
|
320 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: use-after-free in HmgAllocateObjectAttr
CCProjectZeroMembers
|
|
|
|
321 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: pool buffer overflow drawing caption bar
CCProjectZeroMembers
|
|
|
|
335 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: use-after-free with UserCommitDesktopMemory
CCProjectZeroMembers
|
|
|
|
339 |
----
|
Fixed
|
----
|
----
|
cevans@google.com
|
Windows kernel: DeferWindowPos use-after-free
CCProjectZeroMembers
|
|
|
|
390 |
----
|
Fixed
|
----
|
----
|
matttait@google.com
|
Kernel ASLR leak in win32k!zzzHideCursorNoCapture (via NtUserCallNoParam)
CCProjectZeroMembers
|
|
|
|
415 |
----
|
Fixed
|
----
|
----
|
hawkes@google.com
|
Windows kernel: pool buffer overflows in NtGdiStretchBlt
CCProjectZeroMembers
|
|
|
|
433 |
----
|
Fixed
|
----
|
----
|
hawkes@google.com
|
Windows kernel: use-after-free with printer device contexts
CCProjectZeroMembers
|
|
|
|
457 |
----
|
Fixed
|
----
|
----
|
hawkes@google.com
|
Windows kernel: use-after-free with cursor object
CCProjectZeroMembers
|
|
|
|
458 |
----
|
Fixed
|
----
|
----
|
hawkes@google.com
|
Windows kernel: use-after-free in bGetRealizedBrush
CCProjectZeroMembers
|
|
|
|
459 |
----
|
Invalid
|
----
|
----
|
forshaw@google.com
|
Windows: Silo Object Object Root Directory Elevation of Privilege
CCProjectZeroMembers
|
|
|
|
474 |
----
|
Fixed
|
----
|
----
|
hawkes@google.com
|
Windows kernel: buffer overflow in NtGdiBitBlt
CCProjectZeroMembers
|
|
|
|
475 |
----
|
Fixed
|
----
|
----
|
hawkes@google.com
|
Windows kernel: FlashWindowEx​ memory corruption
CCProjectZeroMembers
|
|
|
|
852 |
----
|
WontFix
|
----
|
----
|
forshaw@google.com
|
Windows: NtCreateProcessEx NULL Pointer Dereference
CCProjectZeroMembers
|
|
|
|
872 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: DeviceApi CMApi PiCMOpenDeviceKey Arbitrary Registry Key Write EoP
CCProjectZeroMembers
|
|
|
|
875 |
----
|
Fixed
|
----
|
----
|
forshaw@google.com
|
Windows: DeviceApi CMApi User Hive Impersonation EoP
CCProjectZeroMembers
|
|