2974 matches found
CVE-2021-41342
Technical details for CVE-2021-41342 are not publicly available in the provided documents; the materials reference the vulnerability name but do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2021-41356
CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...
CVE-2022-21905
CVE-2022-21905 technical details are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updated disclosures.
CVE-2022-21912
CVE-2022-21912 is a DirectX Graphics Kernel vulnerability affecting Windows DirectX components. The entry notes DirectX Graphics Kernel Remote Code Execution Vulnerability with patch guidance from Microsoft (KB5009543, KB5009545, KB5009557, KB5009543 family). Vulnerable component: DirectX Graphic...
CVE-2022-30144
Technical details for CVE-2022-30144 (affected component, root cause, impact, and remediation) are not provided in the connected documents. Monitor Microsoft/NVD updates for confirmed exploit information and patch guidance.
CVE-2022-30155
Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.
CVE-2022-30200
Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2022-41096
Technical details about CVE-2022-41096 are not publicly provided in the supplied documents. No affected products/versions or impact are explicitly described here. Monitor the connected sources for updates from Microsoft and NVD when more information becomes available.
CVE-2022-41100
CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...
CVE-2018-0816
Technical details about CVE-2018-0816 are not publicly provided in the connected documents; the initial description summarizes the vulnerability but does not specify affected products, versions, impact, or fixes.
CVE-2018-1015
CVE-2018-1015 is a Windows font library remote code execution vulnerability triggered by specially crafted embedded fonts. The NVD entries describe the issue as affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows 10 and corresponding Server ...
CVE-2018-8345
CVE-2018-8345 and CVE-2018-8346 are described as LNK remote code execution vulnerabilities in Microsoft Windows, caused by how the system processes shortcut files with the “.lnk” extension. The connected documents confirm the issue affects multiple Windows versions (e.g., Windows 7, Windows Serve...
CVE-2018-8446
CVE-2018-8446 is an information disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 (and Windows Server 2016/Servers). The issue is described as a lo...
CVE-2019-0631
Technical details of CVE-2019-0631 are not publicly available in the provided documents; no affected products, exploit specifics, or remediation are specified. Monitor official advisories for updates.
CVE-2019-0637
Technical details about CVE-2019-0637 (Windows Defender Firewall security feature bypass) are not publicly provided in the connected documents; monitor for updates to learn of affected products, impact, and fixes.
CVE-2019-0660
Technical details for CVE-2019-0660 are not publicly available in the provided connected documents. Monitor for updates from advisories and CVE records to obtain affected products, impact, and remediation guidance.
CVE-2019-0714
CVE-2019-0714 affects Microsoft Hyper-V Network Switch. A privileged guest OS user can trigger a denial-of-service that crashes the host by running a crafted application; the vulnerability arises from improper validation of input by the Hyper-V Network Switch. The fix involves changes to how virt...
CVE-2019-0782
Technical details for CVE-2019-0782 are not publicly available in the provided documents. Monitor for updates from NVD/MSRC and ENISA EUVD databases.
CVE-2019-0814
CVE-2019-0814 affects Microsoft Windows Win32k: information disclosure due to win32k improperly providing kernel information. The vulnerability is the same family as CVE-2019-0848 and is described across NVD/CNVD records and related CVE entries. Affected software is Windows Windows Win32k subsyst...
CVE-2020-0655
CVE-2020-0655 corresponds to a Remote Desktop Services vulnerability where an authenticated attacker can trigger remote code execution via clipboard redirection. The connected KB entries confirm the CVE is among multiple Microsoft Windows vulnerabilities and highlight the affected component as Re...
CVE-2020-0665
CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...
CVE-2020-1239
CVE-2020-1239 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The CVSS v3.1 base score is 8.8 (HIGH): network attack vector, no privileges required, UI required, and the impact is high on confidentiality, integrity, and availabili...
CVE-2020-1564
CVE-2020-1564 : A remote code execution vulnerability exists in the Windows Jet Database Engine due to improper handling of objects in memory. An attacker could persuade a user to open a specially crafted file to execute arbitrary code. Impact is described as high/severe (per NVD metrics), with a...
CVE-2021-24096
CVE-2021-24096 is a Windows Kernel Elevation of Privilege vulnerability that was exploited via a registry symbolic-link bypass related to server silos. The accompanying analysis with CVE context (MSRC) notes that Microsoft fixed this issue in 2021 by removing the PsIsCurrentThreadInServerSilo che...
CVE-2021-28329
Technical details for CVE-2021-28329 are not provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and remediation.
CVE-2021-31977
CVE-2021-31977 is a Windows Hyper-V Denial of Service vulnerability. Affected: Windows Hyper-V; Impact: Denial of Service with HIGH availability impact. CVSSv3.1 base score 8.6 (NETWORK, LOW complexity, NONE privileges, NONE user interaction, S C). The exploit would be remote over the network and...
CVE-2021-36960
CVE-2021-36960 is a Windows SMB information-disclosure vulnerability with a CVSS v3.1 base score of 7.5 (HIGH). It is exploitable over a network, requires no privileges and no user interaction, and impacts confidentiality only (I: HIGH; C: HIGH; A: NONE). The initial description labels it as a Wi...
CVE-2021-40460
Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-41370
Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2021-42275
Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.
CVE-2022-24485
Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.
CVE-2022-34689
CVE-2022-34689 is a Windows CryptoAPI spoofing vulnerability in which the certificate cache index key (MD5-based) can be exploited to masquerade as a legitimate entity. A PoC was released (HIVEPRO PoC report) detailing the attack, underscoring public proof-of-concept availability. The advisory co...
CVE-2023-21558
Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2023-21804
Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.
CVE-2017-0060
The CVE-2017-0060/0062 issue affects the Graphics Device Interface (GDI) in multiple Windows releases (Vista through Windows 10 variants listed in the initial entry). The vulnerability enables a remote attacker to obtain sensitive information from process memory by visiting a crafted web site, i....
CVE-2017-11927
Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.
CVE-2018-1013
CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...
CVE-2018-8304
CVE-2018-8304 is a Windows DNSAPI.dll denial-of-service vulnerability arising from improper handling of DNS responses. Affected: Windows 7, Server 2008/2012/2012 R2, Server 2008 R2, 2016; Windows 8.1/10/10 Servers; DNSAPI denial of service could impact availability. Connected documents confirm th...
CVE-2018-8455
Technical details about CVE-2018-8455 are not publicly provided in the supplied documents; monitor for updates on affected products, root cause, and remediation.
CVE-2019-0598
Technical details for CVE-2019-0598 are not publicly available in the provided documents; monitor for updates.
CVE-2019-0659
Technical details about CVE-2019-0659 are not provided in the connected documents; no explicit affected products, versions, or remediation are available here. Monitor for updates in case new details are published.
CVE-2019-0709
CVE-2019-0709 describes a remote code execution vulnerability in Microsoft Windows Hyper-V. The issue arises when Hyper-V on a host server fails to properly validate input received from an authenticated user on a guest OS, allowing a specially crafted guest app to cause the Hyper-V host to run ar...
CVE-2019-0767
CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...
CVE-2019-0849
The connected advisory confirms this is a Windows Graphics Device Interface (GDI) information disclosure issue. Specifically, CVE-2019-0802 (related to Windows GDI) is caused by improper handling of objects in memory, enabling information disclosure. For CVE-2019-0849, the primary document descri...
CVE-2019-1057
CVE-2019-1057 applies to the Microsoft XML Core Services MSXML parser. A remote code execution vulnerability occurs when the MSXML parser processes untrusted user input; an attacker could entice a user to visit a crafted website, triggering remote code execution and potentially take control of th...
CVE-2019-9510
CVE-2019-9510 affects Windows 10 (1803+) and Windows Server 2019+ where, after a temporary network disruption, an RDP client automatically reconnects to a remote session in an unlocked state, bypassing the lock screen and potentially bypassing MFA prompts that rely on the Windows logon screen. Th...
CVE-2020-0634
CVE-2020-0634 affects the Windows Common Log File System (CLFS) Driver. Connected CNVD-2020-08133 describes a privilege-lifting vulnerability in the CLFS Driver caused by improper handling of memory objects, enabling privilege escalation by an authenticated user who logs on and runs a crafted app...
CVE-2020-1039
Technical details for CVE-2020-1039 (Jet Database Engine RCE) are not provided in the Connected Documents. Please monitor official advisories (MSRC/NVD) for affected products, exact root cause, impact scope, and available fixes.
CVE-2020-1233
IBM Security Bulletin E10F8688... describes CVE-2020-1233 as a vulnerability in the Node.js URI.js module used by IBM App Connect Enterprise Certified Container Designer flows, enabling possible phishing via URL confusion (remote/URL-based). Affected: App Connect Enterprise Certified Container wi...
CVE-2020-1247
Technical details about CVE-2020-1247 are not provided in the connected documents. Public details (affected product/versions, root cause, impact, fix) are not disclosed here. Monitor official advisories and CVE databases for updates.