2974 matches found
CVE-2022-44689
CVE-2022-44689 affects Windows Subsystem for Linux (WSL2) kernel, enabling local elevation of privilege. The NVD entry lists a local attack vector with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. Connected sources corrobora...
CVE-2023-21818
Technical details for CVE-2023-21818 are not publicly provided in the supplied documents. The available sources reference the CVE within larger Windows vulnerability lists but do not disclose affected products, root cause, impact, or fixes.
CVE-2017-0038
The connected material describes a Windows IO Manager bug class (two-step: kernel-mode Initiator sets INPC and IFAC without OFAC; Receiver uses RequestorMode) that can bypass security checks and enable privilege escalation. It clarifies that INPC disables MemAC and SecAC, while OFAC can re-enable...
CVE-2017-0073
Technical details for CVE-2017-0073 are not publicly available in the provided connected documents. The records summarize the vulnerability, but no product/version specifics or exploit information are shown. Monitor for updates from official sources.
CVE-2018-0842
CVE-2018-0842 : Windows kernel elevation-of-privilege vulnerability affecting multiple Windows client and server editions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, 1703–1709 and 1709 variants, Windows 10 releases). The issue arises from how memory objects ...
CVE-2018-0961
CVE-2018-0961 describes a remote code execution in Microsoft Windows Hyper-V due to improper validation of vSMB packet data. Affected are Windows Server 2016 and Windows 10/Windows 10 Server variants, where the vulnerability stems from the Hyper-V vSMB implementation failing to validate packet da...
CVE-2018-8442
Technical details about CVE-2018-8442 are not publicly available in the provided connected documents; monitor for updates from official advisories.
CVE-2018-8446
CVE-2018-8446 is an information disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 (and Windows Server 2016/Servers). The issue is described as a lo...
CVE-2018-8494
CVE-2018-8494 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser when processing untrusted input. Affected products include Windows 7; Windows Server 2008, 2012, 2012 R2, 2016, 2019; Windows 8.1; Windows 10 (and Windows RT 8.1); Windows Server 2008 R2; Window...
CVE-2019-0580
The CVE-2019-0580 entry describes a remote code execution flaw in the Windows Jet Database Engine caused by improper memory-object handling. It affects Windows client/server platforms (Windows 7, 8.1, 10 and various Server editions) and is exploitable when a user opens a specially crafted file th...
CVE-2019-0597
Technical details about CVE-2019-0597 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2019-0619
The connected advisories corroborate CVE-2019-0619 as a Windows Graphic Device Interface (GDI) information disclosure vulnerability. It arises from improper handling of objects in memory in the Graphics Device Interface component, enabling remote attackers to obtain sensitive information. The adv...
CVE-2019-0714
CVE-2019-0714 affects Microsoft Hyper-V Network Switch. A privileged guest OS user can trigger a denial-of-service that crashes the host by running a crafted application; the vulnerability arises from improper validation of input by the Hyper-V Network Switch. The fix involves changes to how virt...
CVE-2019-0721
Technical details about CVE-2019-0721 are not publicly available in the provided connected documents; none supply affected product/version, root cause, or remediation for this CVE. Monitor for updates.
CVE-2019-0722
The CVE-2019-0722 issue affects Microsoft Windows Hyper-V. A remote code execution vulnerability exists when Hyper-V on a host fails to properly validate input from an authenticated guest OS user, allowing a crafted guest app to cause the host to run arbitrary code. Exploitation could grant the a...
CVE-2019-0793
Technical details about CVE-2019-0793 are not publicly available in the provided connected documents; monitor for updates.
CVE-2019-0839
Technical details about CVE-2019-0839 are not publicly provided in the connected documents. Monitor for updates and new public disclosures before drawing conclusions on affected components, root cause, or remediation.
CVE-2019-0889
CVE-2019-0889 : Connected CNVD entries describe a buffer/heap overflow vulnerability in the Windows Jet Database Engine. The issue arises when memory operations do not properly validate data boundaries, enabling overflow conditions. The CNVDs indicate a network-origin misuse could trigger in-memo...
CVE-2019-1026
The CVE-2019-1026 entry describes a local elevation-of-privilege vulnerability in Windows Audio Service. Affected component: Windows Audio Service on Windows operating systems. Root cause per NVD: how the service handles processing requests, enabling an attacker who runs a specially crafted appli...
CVE-2019-1476
CVE-2019-1476 affects Windows AppX Deployment Service (AppXSVC). It is an elevation-of-privilege vulnerability arising from improper handling of file hard links (and related junctions) by AppXSVC, enabling a low-privileged user to overwrite arbitrary files and escalate privileges. Public exploit ...
CVE-2020-0626
Technical details for CVE-2020-0626 are not provided in the connected documents. The Initial Description offers only high-level info. Monitor official advisories for updates on affected products/versions and any remediations or mitigations.
CVE-2020-1477
CVE-2020-1477 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage, potentially allowing the attacker to install prog...
CVE-2020-1564
CVE-2020-1564 : A remote code execution vulnerability exists in the Windows Jet Database Engine due to improper handling of objects in memory. An attacker could persuade a user to open a specially crafted file to execute arbitrary code. Impact is described as high/severe (per NVD metrics), with a...
CVE-2020-16935
The CVE-2020-16935 entry describes a Windows elevation-of-privilege flaw caused by improper handling of COM object creation. The vulnerability could allow an attacker who has logged on to run arbitrary code with elevated privileges by executing a specially crafted application, with exploitation e...
CVE-2020-17098
CVE-2020-17098 maps to a Windows GDI+ Information Disclosure vulnerability. Connected documents reference this ID across multiple OpenVAS entries and NVD/NVD-derived records, with CVSS details indicating local access and varying impact on confidentiality (high in CVSS 3.1 vectors, partial in some...
CVE-2021-1657
Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.
CVE-2021-28434
Technical details for CVE-2021-28434 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.
CVE-2021-31192
CVE-2021-31192 is a Windows Media Foundation Core remote code execution vulnerability. Public advisories identify the affected component as Windows Media Foundation Core and assign a high impact (remote code execution with local/remote exploitation context depending on source). Microsoft lifecycl...
CVE-2021-34498
Technical details about CVE-2021-34498 are not publicly provided in the connected documents. The available sources (NVD/NCSC/CNVD, etc.) mention the vulnerability at a high level without specifics on affected products, versions, impact, or fixes. Monitor for updates.
CVE-2018-0877
CVE-2018-0877 affects the WCIFS (Windows Desktop Bridge VFS) driver. The root cause is improper handling of file paths in privileged Windows directories, allowing a reparse to a user-controlled location during a file-create path when the requested file did not exist in a trusted directory. This c...
CVE-2018-0896
CVE-2018-0896 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows 10 versions 1511–1709, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709) where memory address handling allows an information disclosure vulnerability. Root ca...
CVE-2018-8398
The connected CPAI-2019-0228 advisory describes a related information-disclosure vulnerability in the Microsoft Graphics Component due to improper in-memory handling of JPEG decoding. While CVE-2018-8398 (Windows GDI Information Disclosure) is the primary CVE here, the document confirms a memory-...
CVE-2018-8423
CVE-2018-8423 : A remote code execution vulnerability exists in the Microsoft JET Database Engine. The issue affects Windows client/server family (Windows 7, 8.1, 10; Windows Server 2008/2012/2016/2019 and R2 variants). The root cause is within the JET Database Engine component; exploitation requ...
CVE-2019-0656
Technical details for CVE-2019-0656 are not publicly provided in the supplied connected documents. No explicit affected products, root cause, or remediation are stated here; monitor for updates from official sources.
CVE-2019-0662
CVE-2019-0662 is a remote code execution vulnerability in Microsoft Windows GDI/GDI+. The issue arises from how GDI handles objects in memory, enabling a remote attacker to execute arbitrary code on affected systems. Connected advisories corroborate a GDI-based RCE family (distinct from CVE-2019-...
CVE-2019-0772
Technical details for CVE-2019-0772 are not publicly available in the provided documents. Monitor for updates; connected data does not include affected products, versions, impact, or remediation specifics.
CVE-2019-9510
CVE-2019-9510 affects Windows 10 (1803+) and Windows Server 2019+ where, after a temporary network disruption, an RDP client automatically reconnects to a remote session in an unlocked state, bypassing the lock screen and potentially bypassing MFA prompts that rely on the Windows logon screen. Th...
CVE-2020-0655
CVE-2020-0655 corresponds to a Remote Desktop Services vulnerability where an authenticated attacker can trigger remote code execution via clipboard redirection. The connected KB entries confirm the CVE is among multiple Microsoft Windows vulnerabilities and highlight the affected component as Re...
CVE-2020-0669
Technical details for CVE-2020-0669 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2020-0726
Technical details for CVE-2020-0726 are not publicly available in the provided documents. No confirmed affected products or remediation are described here. Monitor for updates as more information becomes available.
CVE-2020-1233
IBM Security Bulletin E10F8688... describes CVE-2020-1233 as a vulnerability in the Node.js URI.js module used by IBM App Connect Enterprise Certified Container Designer flows, enabling possible phishing via URL confusion (remote/URL-based). Affected: App Connect Enterprise Certified Container wi...
CVE-2020-1247
Technical details about CVE-2020-1247 are not provided in the connected documents. Public details (affected product/versions, root cause, impact, fix) are not disclosed here. Monitor official advisories and CVE databases for updates.
CVE-2020-1285
Technical details about CVE-2020-1285 are not provided in the connected documents. The sources reference other CVEs and Windows updates; monitor for updates on CVE-2020-1285.
CVE-2020-1383
CVE-2020-1383 is an information disclosure vulnerability in Windows RRAS: when Routing and Remote Access is enabled, an attacker can exploit a flaw in RPC handling to obtain information that could aid compromise. Exploitation requires a crafted application against an RPC server with RRAS enabled ...
CVE-2020-1516
The CVE-2020-1516 entry describes an Elevation of Privilege in the Windows Work Folders Service caused by improper handling of memory. Exploitation would require the attacker to first gain execution on the target, then run a crafted application to raise privileges. Microsoft’s security update fix...
CVE-2021-28345
Technical details about CVE-2021-28345 are not provided in the supplied documents. The entries reference multiple Windows vulnerabilities but do not specify affected components, impact, or fixes for this CVE. Monitor for updates.
CVE-2021-31977
CVE-2021-31977 is a Windows Hyper-V Denial of Service vulnerability. Affected: Windows Hyper-V; Impact: Denial of Service with HIGH availability impact. CVSSv3.1 base score 8.6 (NETWORK, LOW complexity, NONE privileges, NONE user interaction, S C). The exploit would be remote over the network and...
CVE-2021-34496
Technical details about CVE-2021-34496 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability, but no affected product/version specifics, exploit info, or remediation are included here. Monitor for updates.
CVE-2021-38638
CVE-2021-38638 corresponds to a Windows Elevation of Privilege vulnerability in the Windows Ancillary Function Driver for WinSock. According to the NVD entry, the issue has a CVSS v3.1 base score of 7.8 (High) with LOCAL attack vector, LOW attack complexity, and privileges required set to LOW; co...