2974 matches found
CVE-2020-1574
CVE-2020-1574 is a remote code execution vulnerability in the Microsoft Windows Codecs Library. The vulnerability arises from how the Codecs Library handles objects in memory, enabling arbitrary code execution when a program processes a specially crafted image file. Public documentation confirms ...
CVE-2020-17140
CVE-2020-17140 corresponds to a Windows SMB information-disclosure vulnerability. Public documents (NVD entry and OpenVAS feeds) describe network-exposed impact with confidentiality and, in some sources, availability concerns, while the vulnerability’s root cause is not detailed beyond “SMB infor...
CVE-2021-31182
CVE-2021-31182 concerns Microsoft Bluetooth Driver Spoofing vulnerability. CVSS‑3.1 score 7.1 (AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N). Affected component: Microsoft Bluetooth Driver. Root cause/impact: spoofing could compromise confidentiality (low) and integrity (high) with no availability impact ...
CVE-2021-31191
CVE-2021-31191 refers to a Windows Projected File System FS Filter Driver information disclosure vulnerability. The available sources identify the affected component as the FS Filter Driver in Windows and indicate a potential confidentiality impact. CVSS metrics from NVD/Microsoft show: CVSS v3.1...
CVE-2021-33784
CVE-2021-33784 affects the Windows Cloud Files Mini Filter Driver, with elevation of privilege as the underlying issue. The vulnerability is described in the CVE as a Windows Mini Filter Driver privilege escalation and has a CVSS3.1 base score of 7.8 (LOCAL, LOW complexity, Privileges Required: L...
CVE-2021-36957
CVE-2021-36957 is a Windows Desktop Bridge elevation of privilege vulnerability. Public details in the initial document are limited to the CVE title and scoring; concrete technical specifics (affected product versions, root cause, exploitability) are not elaborated there. Connected Microsoft advi...
CVE-2022-21992
Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...
CVE-2022-38026
CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...
CVE-2022-41074
Technical details for CVE-2022-41074 are not publicly provided in the supplied documents. Monitor updates from Microsoft/NVD for affected component, impact, and remediation.
CVE-2017-11780
CVE-2017-11780 is a remote code execution vulnerability in the Microsoft Windows Server Message Block 1.0 (SMBv1) server. The issue occurs when SMBv1 fails to handle certain requests, allowing an unauthenticated attacker to execute code on the target server over the network. Affected products inc...
CVE-2018-0811
Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.
CVE-2018-0965
CVE-2018-0965 describes a remote code execution vulnerability in Windows Hyper‑V, triggered when a host server fails to properly validate input from an authenticated user on a guest OS. Affected products include Windows Server 2016 and Windows 10/Windows 10 servers. The root cause is improper inp...
CVE-2019-0623
CVE-2019-0623 affects Windows due to a Win32k memory handling issue that enables local privilege escalation. The vulnerability arises when the Win32k component fails to properly handle objects in memory, enabling an attacker with local access to elevate privileges. The provided documents describe...
CVE-2019-0732
CVE-2019-0732 affects Windows by bypassing Device Guard due to improper handling of calls to the LUAFV driver (luafv.sys). The issue enables local, low-privilege attackers to achieve partial confidentiality, integrity, and availability impacts as described in the CVE context. Exploitation is docu...
CVE-2019-0791
CVE-2019-0791 is a remote code execution vulnerability in the Microsoft XML Core Services (MSXML) parser when it processes user input. The issue enables network-based exploitation with user interaction required, and is rated HIGH (CVSS v3.0: 8.8). The initial document does not specify a fixed pat...
CVE-2019-0948
CVE-2019-0948 is an information-disclosure vulnerability in Windows Event Viewer (eventvwr.msc) where XML input containing an external entity reference is improperly parsed. An authenticated user can be persuaded to import a crafted XML file, allowing an attacker to read arbitrary files via an XM...
CVE-2019-1039
The CVE-2019-1039 entry describes an information disclosure vulnerability in the Windows kernel where objects are improperly initialized in memory. A locally authenticated attacker could run a crafted application to obtain information that could be used to further compromise the system. Root caus...
CVE-2019-1235
CVE-2019-1235 describes an elevation of privilege in Windows Text Service Framework (TSF) where the TSF server does not validate the source of input or commands it receives. Local, low-attack-surface vector with high impact (C/H/I/A). The vulnerability is tracked with Microsoft advisories and upd...
CVE-2020-1518
Technical details about CVE-2020-1518 (affected component, root cause, impact, exploitability or patch specifics) are not publicly provided in the connected documents; monitor for updates from official sources for concrete information.
CVE-2021-31968
CVE-2021-31968 is a Windows Remote Desktop Services Denial of Service vulnerability. The vulnerability affects Microsoft Windows systems exposing Remote Desktop Services and can impact availability (per CVSS v3.1: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/A:H). Connected sources confirm it as a remotely trig...
CVE-2021-34454
CVE-2021-34454 is described as a Windows Information Disclosure vulnerability in the Remote Access Connection Manager. The included data indicates a local, low-complexity attack with no authentication required, resulting in partial confidentiality loss (per CVSS v3.1: 5.5 MEDIUM). The NVD entry a...
CVE-2021-34511
Technical details about CVE-2021-34511 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit, impact, or remediation details are present in the connected content.
CVE-2021-36975
CVE-2021-36975 is a Win32k Elevation of Privilege vulnerability in Windows. Affected component: Win32k (kernel/user-interface layer); root cause involves privilege escalation via Win32k. CVSS 3.1 base score 7.8 (HIGH); attack vector LOCAL, attack complexity LOW, privileges required LOW, user inte...
CVE-2022-21850
CVE-2022-21850 is described in the provided materials as a Remote Desktop Client Remote Code Execution vulnerability. The connected documents confirm the vulnerability relates to the Windows Remote Desktop Client but do not provide concrete technical specifics (e.g., root cause, affected versions...
CVE-2022-21881
Technical details about CVE-2022-21881 are not provided in the supplied documents. The entries reference Windows kernel elevation issues and related updates, but do not disclose affected products/versions or root cause specifics. Monitor for updates.
CVE-2022-22710
CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...
CVE-2022-24487
CVE-2022-24487 concerns Windows LSASS remote code execution. Connected documents show multiple Microsoft security updates (KB5012599, KB5012592, KB5012604, KB5012591, KB5012647, KB5012592, etc.) and MSRC entries that address Windows security issues and servicing stack updates across Windows Serve...
CVE-2022-30142
CVE-2022-30142 is a Windows File History Remote Code Execution vulnerability reported with CVSS v3.1 base score 7.5 (HIGH) and network attack vector, requiring user interaction. The vulnerability affects Windows File History and involves a high-impact compromise of confidentiality, integrity, and...
CVE-2022-34719
Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.
CVE-2022-44666
CVE-2022-44666 is a Windows Contacts RCE affecting the Windows Contacts components (VCF/Contact handling) where an href/link attribute processing flow could reach SafeExecute and execute arbitrary code. Affected context centers on wab32.dll/wab.exe usage within Windows Contacts; PoCs and public w...
CVE-2019-0628
Technical details for CVE-2019-0628 are not provided in the connected documents. Public details appear limited to generic references; monitor official advisories for updates.
CVE-2019-0784
Technical details for CVE-2019-0784 are not publicly available in the provided documents; no confirmed affected products, versions, or fixes are listed. Monitor for updates from official sources as additional information may be published.
CVE-2019-0848
CVE-2019-0848 is an information disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The issue is distinct from CVE-2019-0814. Public data indicates local access and potential partial confidentiality impact, with CVSS metrics showing a low to m...
CVE-2019-0906
CVE-2019-0906: Jet Database Engine remote code execution in Windows. In memory handling flaw could allow arbitrary code execution when a victim opens a specially crafted file. Update from Microsoft fixes the memory handling of objects in the Jet engine to address the vulnerability; exploit detail...
CVE-2019-1021
CVE-2019-1021 affects Windows Audio Service, causing an elevation of privilege by incorrect handling of process requests. An attacker with local access could run a specially crafted app to obtain elevated code execution; however, the vulnerability alone does not guarantee arbitrary code execution...
CVE-2019-1273
CVE-2019-1273 is an XSS vulnerability in Active Directory Federation Services (ADFS) where error messages are not properly sanitized. The connected documents consistently describe a cross-site scripting issue tied to ADFS error handling, but do not provide specifics on affected product versions, ...
CVE-2020-1303
CVE-2020-1303 is a Windows Runtime elevation of privilege vulnerability. It arises from improper handling of objects in memory, enabling an attacker who runs a specially crafted application to execute arbitrary code in an elevated context. The vulnerability is tied to Windows Runtime memory handl...
CVE-2020-17001
CVE-2020-17001 is a Windows Print Spooler Elevation of Privilege vulnerability. Affected software is Windows Print Spooler. The CVSS context from NVD (base CVSSv3.1 score 7.8, HIGH) indicates local, low complexity, no user interaction required, with HIGH impacts on confidentiality, integrity, and...
CVE-2021-31165
CVE-2021-31165 is a Windows Container Manager Service elevation-of-privilege vulnerability. The CVE entry notes an attack requires local access with low complexity and no authentication, with potential impact to confidentiality, integrity, and availability (C:H/I:H/A:H in CVSS 3.1; base score 7.8...
CVE-2021-33752
CVE-2021-33752 is described as a Windows DNS Snap-in Remote Code Execution vulnerability. Connected sources corroborate a DNS Snap-in RCE in Microsoft Windows/Windows Server, indicating an elevated risk with a network attacker, high impact (CVE-3.1: HIGH) and no authentication required, with user...
CVE-2021-36926
Technical details about CVE-2021-36926 are not publicly provided in the supplied documents; monitor for updates from Microsoft and NVD.
CVE-2021-36932
CVE-2021-36932 affects Windows Services for NFS ONCRPC XDR Driver. The available information indicates an information-disclosure vulnerability with network access (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base 7.5). The description confirms the issue but does not provide detailed root-cause...
CVE-2021-36970
Technical details for CVE-2021-36970 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or remediation are present here; monitor for updates from official sources.
CVE-2022-21865
CVE-2022-21865 is described by the NVD as a Connected Devices Platform Service Elevation of Privilege vulnerability in Microsoft Windows. The OpenVAS entry for KB5009545 lists CVE-2022-21865 under Windows vulnerabilities with the impact “Obtain increased privileges,” and notes this vulnerability ...
CVE-2022-26786
Technical details for CVE-2022-26786 are not publicly available within the provided documents. No concrete affected products, versions, or fixes are stated here. Monitor for updates from official sources to obtain remediation and impact information.
CVE-2018-0826
CVE-2018-0826 affects Windows Storage Services in Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by improper handling of objects in memory, enabling local elevation of privilege. Affected component: Windows Storage Services; root cause: memory object handling le...
CVE-2018-8495
The CVE-2018-8495 issue is a Windows Shell Remote Code Execution vulnerability where Windows Shell mishandles URIs. An attacker could host a specially crafted website and entice a user to view it, triggering code execution with the current user’s rights and potentially full control if admin right...
CVE-2018-8547
CVE-2018-8547 is a cross-site scripting (XSS) vulnerability in an open-source customization for Microsoft Active Directory Federation Services (AD FS). Affected components are AD FS servers on Windows platforms (e.g., Windows Server 2012 R2, 2016, 2019, etc.). The issue arises because the customi...
CVE-2019-0614
The connected advisories confirm an information disclosure vulnerability in Microsoft Windows GDI. The Graphics Device Interface component is affected by improper handling of in-memory objects, exposing memory contents. CPAI-2019-1525 notes remote attackers could exploit this to access sensitive ...