2974 matches found
CVE-2019-0574
CVE-2019-0574 describes an elevation of privilege in Windows Data Sharing Service affecting Windows 10, Windows Server 2016/2019 and related builds. Connected sources state a local attacker can gain elevated privileges via this service, but do not provide concrete root-cause details or patch/vers...
CVE-2019-0847
Technical details for CVE-2019-0847 are not publicly available in the provided documents; no affected product/version, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2019-1225
A vulnerability exists in the Windows RDP server due to errors in memory object handling , where the server improperly discloses contents of its memory. An attacker capable of connecting remotely to an affected system can run a specially crafted application to disclose sensitive information, whic...
CVE-2019-1241
Technical details for CVE-2019-1241 are not provided in the connected documents; only related Jet Database Engine vulnerabilities (e.g., CVE-2019-1246) are described. Monitor for updates.
CVE-2020-1509
CVE-2020-1509 is an elevation-of-privilege vulnerability in the Local Security Authority Subsystem Service (LSASS) on Windows. An authenticated attacker could exploit a specially crafted authentication request to elevate privileges on the target system. The issue is addressed by a security update...
CVE-2021-26885
The WalletService service on Windows operating systems is susceptible to an Elevation of Privilege vulnerability due to insecure management of privileges . An attacker exploiting this flaw can successfully enhance their privileges on the affected system. While specific exploit details are not pro...
CVE-2022-21906
Technical details are not publicly available in the provided documents. Monitor for official disclosures and updates.
CVE-2022-41048
Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.
CVE-2022-41118
Technical details about CVE-2022-41118 are not provided in the supplied documents. No product/vendor/version or exploit information is available here. Monitor for updates from official sources; further details and remediation would require vendor advisories.
CVE-2023-21803
CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...
CVE-2019-0755
CVE-2019-0755 is a Windows kernel information-disclosure vulnerability. The connected sources describe an issue where the Windows kernel improperly handles or initializes objects in memory, enabling local access-based information disclosure with high confidentiality impact (per CVSS3 vector: loca...
CVE-2020-1015
CVE-2020-1015 is a Windows elevation-of-privilege vulnerability affecting the User-Mode Power Service (UMPS). Connected CNVD entries corroborate an EoP issue stemming from improper handling of memory objects in Windows components (UMPS and related services such as WpcDesktopMonSvc); they describe...
CVE-2021-26433
Technical details (affected product/version, root cause, impact, or exploit information) are not provided in the connected documents for CVE-2021-26433. Monitor for updates.
CVE-2022-21863
CVE-2022-21863 is a Windows elevation-of-privilege vulnerability in the StateRepository API Server. The NVD entry confirms the issue and indicates a local attacker could obtain elevated privileges. Related OpenVAS entries show affected Windows platforms and list KB updates (KB5009543/KB5009545 an...
CVE-2022-30206
CVE-2022-30206 is a Windows Print Spooler Elevation of Privilege vulnerability. The connected exploit PoC demonstrates local EoP by abusing the Print Spooler to delete an arbitrary TargetFile via a spooler-related file operation (creating a printer, setting SpoolDirectory, triggering an oplock on...
CVE-2022-30225
Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.
CVE-2022-34696
Technical details for CVE-2022-34696 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation are included. Monitor for updates.
CVE-2017-11885
CVE-2017-11885 is a Windows RRAS (Routing and Remote Access) remote code execution vulnerability affecting multiple Windows versions. The vulnerability arises from how RRAS handles requests, enabling remote execution without user interaction. Public exploitation exists (e.g., Exploit-DB entry lin...
CVE-2019-0576
Public details for CVE-2019-0576 are not present in the connected documents. The initial description lists affected Windows versions but provides no concrete exploit, root cause, affected components, or remediation specifics in the supplied data.
CVE-2019-0879
Technical details about CVE-2019-0879 are not publicly provided in the supplied documents. The connected EUVD/CNVD entries reference the Jet Database Engine remote code execution but do not include affected versions, exploit info, or fixes. Monitor for updates.
CVE-2019-0986
CVE-2019-0986 affects the Windows User Profile Service (ProfSvc) and concerns improper handling of symlinks. The vulnerability enables elevation of privilege, allowing an attacker who can log on to run a crafted application that could delete files or folders in an elevated context. The impact is ...
CVE-2019-1184
CVE-2019-1184 is a Windows elevation-of-privilege issue in the Windows Core Shell COM Server Registrar that arises from improperly handling COM calls. Exploitation requires a logged-on user who runs a specially crafted application, enabling higher-privilege execution on an affected system. Affect...
CVE-2020-0607
CVE-2020-0607 is an information disclosure vulnerability in Microsoft Windows Graphics Components related to how memory objects are handled. The issue could allow partial disclosure of information (CVSS2: Confidentiality Partial; AV:N/AC:M/Au:N/I:N/A:N) with a local-style potential exploit (CVSS3...
CVE-2020-0625
Technical details for CVE-2020-0625 are not publicly available in the provided documents. Monitor for updates from primary sources.
CVE-2020-17136
CVE-2020-17136 concerns the Windows Cloud Files Mini Filter Driver (cldflt.sys) and its Cloud Filter/mini-filter stack. The issue stems from the HsmpOpCreatePlaceholders path where FltCreateFileEx() is called without IO_FORCE_ACCESS_CHECK/OBJ_FORCE_ACCESS_CHECK flags, allowing user-controlled inp...
CVE-2021-34455
CVE-2021-34455 is a Windows/File History Service elevation-of-privilege issue. Connected CNVD-2021-66071 describes an elevation-of-privilege vulnerability in the File History Service of Microsoft Windows/Windows Server. The CVE entry lists local access, low attack complexity, no authentication re...
CVE-2021-34534
CVE-2021-34534 is a Windows MSHTML Platform Remote Code Execution vulnerability. Affects the Windows MSHTML Platform component; CVSSv3.1 base score 7.5 (HIGH) with network access required and user interaction required. Exploitation vectors, root cause, and exact affected versions are not detailed...
CVE-2022-38046
CVE-2022-38046 is a real vulnerability in Windows Web Account Manager that could lead to information disclosure. The affected component is part of Windows, and the risk is described as HIGH (CVSSv3.1 7.5). Public exploits exist per a Kaspersky vulnerability outline, and Microsoft has released sec...
CVE-2022-38047
CVE-2022-38047 is a Windows Point‑to‑Point Tunneling Protocol (PPTP) remote code execution vulnerability. The CVE affects the PPTP component in Windows, with a network‑level attack surface, high impact (C/H/I/A all high) and no user interaction required per CVSS v3.1. Connected sources corroborat...
CVE-2022-41052
CVE-2022-41052 is a Windows Graphics Component remote code execution vulnerability. The CVSS 3.1 base score is 7.8 (HIGH) with an attack vector of LOCAL, requiring user interaction, and impact on confidentiality, integrity, and availability (all HIGH). Affected details (product, component, root c...
CVE-2023-21765
Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.
CVE-2023-21802
Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.
CVE-2017-0161
CVE-2017-0161 is a Windows NetBT Session Services vulnerability described as a race condition when NetBT fails to maintain certain sequencing requirements, enabling a remote code execution in affected Windows releases. The CVE is present in Windows 7/8.1/10 and server SKUs listed in the initial d...
CVE-2017-8527
Technical details for CVE-2017-8527 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, root cause, exploits, or fixes are included here. Monitor for updates from official advisories.
CVE-2019-0795
Technical details for CVE-2019-0795 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are stated. Monitor for updates from connected sources.
CVE-2019-0877
CVE-2019-0877 is associated with Microsoft Windows Jet Database Engine remote code execution. The vulnerability arises from the Jet Engine failing to properly handle objects in memory, allowing an attacker to trigger arbitrary code execution by convincing a user to open a specially crafted file. ...
CVE-2020-1112
Technical details for CVE-2020-1112 are not publicly available in the provided documents. No confirmed affected products, root cause, or fixes are documented here. Monitor official CVE sources and vendor updates for concrete details.
CVE-2020-16910
CVE-2020-16910 is a Windows security feature bypass in which Windows may fail to enforce file creation permissions, enabling an attacker to create files in a protected UEFI location. Exploitation would involve running a specially crafted application to bypass UEFI variable security in Windows. Mi...
CVE-2021-42283
CVE-2021-42283 is an NTFS Elevation of Privilege vulnerability with documented CVSS 3.1 base score 7.8 (HIGH) and local attack vector with low complexity, no authentication, and user interaction not required. The entry also lists CVSS 2.0 data (MEDIUM) and a CNA score. There are no connected docu...
CVE-2018-0751
CVE-2018-0751 is a Windows Kernel API elevation-of-privilege vulnerability affecting Windows family (kernel API permission handling). The connected records reference the CVE as a Windows kernel issue and show related exploitation listings (e.g., exploit-db entries linked in CIRCL). No explicit pr...
CVE-2019-0579
Technical details for CVE-2019-0579 (affected software, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates.
CVE-2019-0583
Technical details for CVE-2019-0583 are not provided in the supplied documents; the public records here do not specify affected products/root cause/remediation. Monitor for updates.
CVE-2019-0621
Technical details about CVE-2019-0621 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.
CVE-2019-0736
CVE-2019-0736 is a memory corruption vulnerability in the Windows DHCP client triggered by specially crafted DHCP responses. If exploited, it could allow remote code execution on the affected Windows client. The issue arises from how the DHCP client handles certain responses (root cause: memory c...
CVE-2019-1183
CVE-2019-1183 is described as fully mitigated by security updates for CVE-2019-1194; no separate update is required. Connected documents show CVE-2019-1194 as a remote code execution vulnerability in Internet Explorer’s scripting engine (memory corruption risk via VBScript/IE scripting paths). Th...
CVE-2019-1271
CVE-2019-1271 is described in connected CNVD-2019-31848 as a privilege escalation vulnerability in hdAudio.sys affecting Microsoft Windows and Windows Server. The entry notes that an attacker who logs on to the system and runs a specially crafted application can exploit this vulnerability to comp...
CVE-2019-1287
The CVE-2019-1287 entry describes an elevation-of-privilege vulnerability in the Windows Network Connectivity Assistant, caused by how the component handles objects in memory. Affected: Windows OS component Windows Network Connectivity Assistant. Consequence: local privilege elevation with high i...
CVE-2020-1467
CVE-2020-1467 is a Windows elevation-of-privilege flaw arising from improper handling of hard links. An attacker who can log on to the system could run a crafted program to overwrite a targeted file, gaining elevated privileges. Microsoft addressed the issue via security updates that correct Wind...
CVE-2021-31951
CVE-2021-31951 is a Windows Kernel Elevation of Privilege vulnerability (affected software: Windows Kernel components). The initial description provides the vulnerability type and name, while connected documents enumerate CVE-2021-31951 among Windows vulnerability references but do not supply exp...