2974 matches found
CVE-2019-1273
CVE-2019-1273 is an XSS vulnerability in Active Directory Federation Services (ADFS) where error messages are not properly sanitized. The connected documents consistently describe a cross-site scripting issue tied to ADFS error handling, but do not provide specifics on affected product versions, ...
CVE-2018-0811
Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.
CVE-2018-0897
CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...
CVE-2019-0765
CVE-2019-0765: remote code execution in comctl32.dll due to how the library handles objects in memory, termed the Comctl32 Remote Code Execution Vulnerability. Affected software is Windows’ comctl32.dll component; exact versions and vulnerable configurations are not specified in the provided docu...
CVE-2019-0844
Technical details about CVE-2019-0844 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected products, impact, and remediation.
CVE-2019-0906
CVE-2019-0906: Jet Database Engine remote code execution in Windows. In memory handling flaw could allow arbitrary code execution when a victim opens a specially crafted file. Update from Microsoft fixes the memory handling of objects in the Jet engine to address the vulnerability; exploit detail...
CVE-2019-1021
CVE-2019-1021 affects Windows Audio Service, causing an elevation of privilege by incorrect handling of process requests. An attacker with local access could run a specially crafted app to obtain elevated code execution; however, the vulnerability alone does not guarantee arbitrary code execution...
CVE-2019-1144
CVE-2019-1144 is a remote code execution vulnerability in the Windows font library (fontsub.dll) triggered by specially crafted embedded fonts. The impact, per NVD/NVD-derived sources, is full system compromise: attacker can install programs, view/modify/delete data, and create accounts with full...
CVE-2019-1232
CVE-2019-1232 is a local elevation-of-privilege flaw in the Diagnostics Hub Standard Collector Service. Affected: Diagnostics Hub Standard Collector Service; root cause: improper impersonation of certain file operations. Impact per sources: confidentiality, integrity, and availability are rated p...
CVE-2019-1235
CVE-2019-1235 describes an elevation of privilege in Windows Text Service Framework (TSF) where the TSF server does not validate the source of input or commands it receives. Local, low-attack-surface vector with high impact (C/H/I/A). The vulnerability is tracked with Microsoft advisories and upd...
CVE-2020-1574
CVE-2020-1574 is a remote code execution vulnerability in the Microsoft Windows Codecs Library. The vulnerability arises from how the Codecs Library handles objects in memory, enabling arbitrary code execution when a program processes a specially crafted image file. Public documentation confirms ...
CVE-2021-36926
Technical details about CVE-2021-36926 are not publicly provided in the supplied documents; monitor for updates from Microsoft and NVD.
CVE-2021-36975
CVE-2021-36975 is a Win32k Elevation of Privilege vulnerability in Windows. Affected component: Win32k (kernel/user-interface layer); root cause involves privilege escalation via Win32k. CVSS 3.1 base score 7.8 (HIGH); attack vector LOCAL, attack complexity LOW, privileges required LOW, user inte...
CVE-2022-21873
Technical details for CVE-2022-21873 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are stated here; monitor for updates.
CVE-2022-24487
CVE-2022-24487 concerns Windows LSASS remote code execution. Connected documents show multiple Microsoft security updates (KB5012599, KB5012592, KB5012604, KB5012591, KB5012647, KB5012592, etc.) and MSRC entries that address Windows security issues and servicing stack updates across Windows Serve...
CVE-2022-24488
CVE-2022-24488 is a Windows Desktop Bridge elevation of privilege vulnerability. Connected sources (NCSC advisory) assign CVSSv3.1 7.8, impact: Obtaining Increased Entitlements, within Windows App Store/Windows Desktop Bridge context; no public exploit details or remediation steps are provided in...
CVE-2022-30142
CVE-2022-30142 is a Windows File History Remote Code Execution vulnerability reported with CVSS v3.1 base score 7.5 (HIGH) and network attack vector, requiring user interaction. The vulnerability affects Windows File History and involves a high-impact compromise of confidentiality, integrity, and...
CVE-2022-30164
Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.
CVE-2022-41121
CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...
CVE-2018-0826
CVE-2018-0826 affects Windows Storage Services in Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by improper handling of objects in memory, enabling local elevation of privilege. Affected component: Windows Storage Services; root cause: memory object handling le...
CVE-2018-8468
CVE-2018-8468 is a Windows elevation-of-privilege vulnerability described as a sandbox escape. Affected products include Windows 7, Windows 8.1, Windows 10 family and corresponding Server editions (Server 2008/2012/2016, RT 8.1, etc.). Connected sources indicate exploitation activity (Exploit-DB ...
CVE-2018-8495
The CVE-2018-8495 issue is a Windows Shell Remote Code Execution vulnerability where Windows Shell mishandles URIs. An attacker could host a specially crafted website and entice a user to view it, triggering code execution with the current user’s rights and potentially full control if admin right...
CVE-2018-8547
CVE-2018-8547 is a cross-site scripting (XSS) vulnerability in an open-source customization for Microsoft Active Directory Federation Services (AD FS). Affected components are AD FS servers on Windows platforms (e.g., Windows Server 2012 R2, 2016, 2019, etc.). The issue arises because the customi...
CVE-2019-0597
Technical details about CVE-2019-0597 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2019-0599
CVE-2019-0599 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is shared among multiple CVEs in the same family (CVE-2019-0595, -0596, -0597, -0598, -0625). The available documents identify the affected ...
CVE-2019-0614
The connected advisories confirm an information disclosure vulnerability in Microsoft Windows GDI. The Graphics Device Interface component is affected by improper handling of in-memory objects, exposing memory contents. CPAI-2019-1525 notes remote attackers could exploit this to access sensitive ...
CVE-2019-0623
An elevation of privilege vulnerability exists in the Windows operating system within the Win32k component. The flaw is caused by an operation that goes beyond buffer boundaries in memory, which can allow an attacker to execute arbitrary code in kernel mode using a specially crafted application. ...
CVE-2019-0702
Technical details about CVE-2019-0702 are not publicly available in the provided documents. No explicit exploitation, affected products, versions, or remediation are stated here. Monitor for updates from authoritative sources.
CVE-2019-0709
CVE-2019-0709 describes a remote code execution vulnerability in Microsoft Windows Hyper-V. The issue arises when Hyper-V on a host server fails to properly validate input received from an authenticated user on a guest OS, allowing a specially crafted guest app to cause the Hyper-V host to run ar...
CVE-2019-0713
Technical details about CVE-2019-0713 are not publicly provided in the connected documents. The initial description summarizes a Hyper-V denial-of-service vulnerability. Monitor for updates from official sources.
CVE-2019-0784
A remote code execution vulnerability exists in Microsoft Windows due to an integer overflow in the msado15.dll module. This flaw occurs when the ActiveX Data objects (ADO) handle objects in memory, specifically during buffer allocation. A remote attacker can exploit this by providing crafted dat...
CVE-2019-0848
CVE-2019-0848 is an information disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The issue is distinct from CVE-2019-0814. Public data indicates local access and potential partial confidentiality impact, with CVSS metrics showing a low to m...
CVE-2019-1082
Technical details such as affected products, root cause, and remediation for CVE-2019-1082 are not provided in the supplied documents; connected EUVD entries discuss malware but do not add specifics for this CVE. Monitor for updates.
CVE-2019-1145
CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...
CVE-2019-1256
CVE-2019-1256 is a Windows Win32k Elevation of Privilege vulnerability caused by the Win32k component failing to properly handle objects in memory, enabling local privilege escalation. The CVE is distinct from CVE-2019-1285, and is corroborated by multiple records (NVD/CVE list, CNVD, EUVD mentio...
CVE-2020-0746
Technical details about CVE-2020-0746 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-1243
CVE-2020-1243 affects Microsoft Hyper-V. The vulnerability arises when Hyper-V on a host does not properly validate certain malicious data from a guest VM, enabling a locally authenticated attacker with a guest-VM privilege to trigger a denial-of-service by running a specially crafted application...
CVE-2020-1303
CVE-2020-1303 is a Windows Runtime elevation of privilege vulnerability. It arises from improper handling of objects in memory, enabling an attacker who runs a specially crafted application to execute arbitrary code in an elevated context. The vulnerability is tied to Windows Runtime memory handl...
CVE-2021-31968
CVE-2021-31968 is a Windows Remote Desktop Services Denial of Service vulnerability. The vulnerability affects Microsoft Windows systems exposing Remote Desktop Services and can impact availability (per CVSS v3.1: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/A:H). Connected sources confirm it as a remotely trig...
CVE-2022-21900
Technical details for CVE-2022-21900 are not provided in the connected documents. The initial description is general; monitor for updates from official advisories (no exploit specifics or affected products confirmed here).
CVE-2022-21901
Technical details for CVE-2022-21901 are not publicly available in the provided documents. No explicit affected components, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2022-21960
CVE-2022-21960 affects Windows Resilient File System (ReFS) and is described as a remote code execution vulnerability. The provided documents only state the vulnerability title and CVSS metrics from NVD (CVSSv3.1 base score 6.8, vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and MSRC refere...
CVE-2022-26920
The CVE-2022-26920 entry refers to a Windows Graphics Components information-disclosure vulnerability. Connected sources confirm the flaw resides in Microsoft Windows Graphics Components (a graphics driver component) and arises from configuration errors during operation, enabling information disc...
CVE-2022-34719
Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.
CVE-2022-37979
CVE-2022-37979 is a Windows Hyper-V elevation-of-privilege vulnerability. Public sources describe it as a local privilege escalation stemming from improper privilege assignment within the Hyper-V component. The CVE affects Windows Hyper-V with a CVSS v3.1 vector of Local, High severity (7.8). Rem...
CVE-2018-0832
CVE-2018-0832 affects the Windows kernel and relates to how memory objects are handled, causing an information disclosure vulnerability. Affected products/versions include Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 versions 1511, ...
CVE-2018-8349
CVE-2018-8349 is a remote code execution vulnerability in Microsoft COM for Windows caused by improper handling of serialized objects. The vulnerability affects multiple Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server editions such as Server 2008/2012/2016 and R2 varian...
CVE-2018-8408
CVE-2018-8408 is an information-disclosure vulnerability in the Windows kernel caused by improper initialization of memory objects. The Nessus plugin entry confirms this CVE is associated with Windows kernel information disclosure and lists it among affected products, including Windows 7, Windows...