2974 matches found
CVE-2020-1383
CVE-2020-1383 is an information disclosure vulnerability in Windows RRAS: when Routing and Remote Access is enabled, an attacker can exploit a flaw in RPC handling to obtain information that could aid compromise. Exploitation requires a crafted application against an RPC server with RRAS enabled ...
CVE-2020-1425
Summary: CVE-2020-1425 and CVE-2020-1457 describe remote code execution vulnerabilities in Microsoft Windows Codecs Library due to memory-object handling. The CVE-2020-1425 entry reports a network-exploitable issue with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H and CVSS v2 base score...
CVE-2020-1467
CVE-2020-1467 is a Windows elevation-of-privilege flaw arising from improper handling of hard links. An attacker who can log on to the system could run a crafted program to overwrite a targeted file, gaining elevated privileges. Microsoft addressed the issue via security updates that correct Wind...
CVE-2020-16897
CVE-2020-16897 is an information-disclosure vulnerability in NetBIOS over TCP (NetBT) where objects in memory are improperly handled. An attacker who runs a crafted application could obtain information to help further compromise the system, but cannot directly execute code or elevate rights. The ...
CVE-2021-28332
Technical details for CVE-2021-28332 are not provided in the connected documents. The entries reference RPC Runtime RCE in general but do not specify affected product/version/root cause or fixes. Monitor for updates.
CVE-2021-28340
Technical details for CVE-2021-28340 are not publicly available in the provided documents. No affected product/version, impact, or remediation is specified here. Monitor for updates.
CVE-2021-28341
Technical details for CVE-2021-28341 are not publicly provided in the supplied documents. Related OpenVAS/Nessus plugins reference the CVE list but do not describe affected products, root causes, or fixes. Monitor for updates.
CVE-2021-31952
CVE-2021-31952 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability. Affected product area is the Windows kernel-mode driver; the root cause is an elevation of privilege in the kernel-mode driver that could allow an attacker with local access to gain higher privileges. The CVSS me...
CVE-2021-34512
Technical details about CVE-2021-34512 are not publicly available in the provided connected documents. Monitor for updates from NVD, Microsoft, CNVD, and other official advisories for concrete information.
CVE-2021-40462
Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.
CVE-2021-41367
CVE-2021-41367 is described as an NTFS Elevation of Privilege Vulnerability. The Connected NVD entry lists CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and UI: NONE. Impact per CVSS3.1 indicates high confidentiality, integrity, and ava...
CVE-2022-21858
Technical details (affected components, root cause, versions, exploitability, or fixes) are not publicly provided in the supplied documents. Monitor official MSRC/NVD entries and OpenVAS feeds for updates.
CVE-2022-21880
CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...
CVE-2022-30166
Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.
CVE-2022-37956
CVE-2022-37956 is a Windows kernel elevation-of-privilege vulnerability involving local, memory-corruption in the registry hive path. The CVE is described as a Windows Kernel Elevation of Privilege Vulnerability with a CVSSv3.1 base score of 7.8 (HIGH); attack vector LOCAL, complexity LOW, privil...
CVE-2022-41045
Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.
CVE-2022-41109
Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.
CVE-2018-0826
CVE-2018-0826 affects Windows Storage Services in Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by improper handling of objects in memory, enabling local elevation of privilege. Affected component: Windows Storage Services; root cause: memory object handling le...
CVE-2018-0832
CVE-2018-0832 affects the Windows kernel and relates to how memory objects are handled, causing an information disclosure vulnerability. Affected products/versions include Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 versions 1511, ...
CVE-2018-8450
CVE-2018-8450 is a Windows Remote Code Execution vulnerability affecting Windows Search where an attacker can exploit memory handling of objects to take control of the system. The issue is addressed by Microsoft security updates KB4467702 (Windows 10 v1803/Server 1803) and related KBs for Windows...
CVE-2018-8549
CVE-2018-8549 is a Windows kernel driver signature validation bypass vulnerability. It affects Windows clients/servers listed (Windows 8.1, 10, 2012/2016/2019, etc.). The underlying issue is incorrect validation of kernel driver signatures, enabling bypass of security features. Public data in con...
CVE-2019-0616
Microsoft Windows GDI (Graphics Device Interface) contains an information disclosure vulnerability. The Graphics Device Interface component is affected due to improper handling of objects in memory, enabling a remote attacker to obtain sensitive information. The linked advisories corroborate the ...
CVE-2019-0617
CVE-2019-0617 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is characterized by a high-severity impact (CVSS v3.0: 7.8) with a local attack vector, requiring user interaction, and resulting in high confident...
CVE-2019-0759
Technical details about CVE-2019-0759 are not publicly available in the provided documents. Monitor for updates and additional authoritative disclosures.
CVE-2019-1337
The CVE-2019-1337 entry describes an information disclosure vulnerability in the Windows Update Client where memory objects are mishandled. Affected component: Windows Update Client. Root cause: improper handling of in-memory objects leading to potential memory contents disclosure. Exploitation d...
CVE-2020-1083
The CVE-2020-1083 vulnerability is a local information-disclosure issue in the Windows Graphics Component caused by improper handling of objects in memory. An attacker must log on to the affected system and run a crafted application to exploit it. The update fixes the issue by correcting how the ...
CVE-2020-1133
Technical details about CVE-2020-1133 are not publicly provided in the connected documents. Available sources mention Diagnostics Hub Standard Collector and the fix, but no affected versions, exploit specifics, or mitigation steps are given. Monitor for updates.
CVE-2020-1378
CVE-2020-1378 is a Kernel Transaction Manager (KTM) / registry KTM log recovery vulnerability reported by James Forshaw (2019–2020) alongside CVE-2019-0959 and CVE-2020-1377. The connected material links it to KTM log processing and recovery of registry state, noting that KTM transaction handling...
CVE-2020-1474
CVE-2020-1474 concerns the Windows Image Acquisition (WIA) Service, where memory contents can be disclosed by an attacker who authenticates and connects an imaging device (camera, scanner, phone) to a vulnerable system and runs a crafted application. The vulnerability arises from how the WIA Serv...
CVE-2020-16922
CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...
CVE-2021-1666
Technical details about CVE-2021-1666 are not provided in the supplied documents; none of the connected items reveal affected products, versions, root cause, impact, or remediation. Monitor for updates.
CVE-2021-28330
Technical details for CVE-2021-28330 are not publicly provided in the supplied documents. The sources reference the vulnerability by ID and a generic description; monitor for updates.
CVE-2021-28338
Technical details for CVE-2021-28338 are not provided in the supplied documents. Monitor for official disclosures and remediation guidance as more information becomes available.
CVE-2021-28342
Technical details about CVE-2021-28342 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.
CVE-2021-28344
Technical details for CVE-2021-28344 are not publicly available in the provided documents; monitor for updates.
CVE-2021-28355
Technical details for CVE-2021-28355 are not publicly available in the provided documents; monitor for updates.
CVE-2021-31168
CVE-2021-31168 affects the Windows Container Manager Service in Windows/Windows Server and is an elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH), with local attacker access and no user interaction. Public exploit activity is indicated in related advisories/plugins; ex...
CVE-2021-31170
CVE-2021-31170 affects the Windows Graphics Component (graphics driver) and is described as an elevation of privilege vulnerability. Multiple connected sources identify a local threat requiring no user interaction, with root cause framed as a resource management error in the Microsoft Graphics Co...
CVE-2021-31976
CVE-2021-31976 is described as a Server for NFS Information Disclosure Vulnerability. The provided documents do not specify affected products, vendor, component, or vulnerable versions. CVSS metrics are available: CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, n...
CVE-2022-21867
Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21964
CVE-2022-21964 corresponds to a vulnerability in the Remote Desktop Licensing Diagnoser that enables information disclosure. The available documents identify the affected area as Windows Remote Desktop Licensing Diagnoser, with the vulnerability categorized as information disclosure. The CVSS met...
CVE-2022-26802
CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...
CVE-2018-0811
Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.
CVE-2018-0959
CVE-2018-0959 is a remote code execution vulnerability in Windows Hyper-V where a host server fails to validate input from an authenticated user on a guest OS. Affected products include Windows clients and server editions listed in the description (e.g., Windows 7, 8.1; Windows Server 2008-2016; ...
CVE-2018-8410
CVE-2018-8410 is a Windows Kernel API elevation-of-privilege vulnerability caused by improper handling of registry objects in memory. The Windows kernel vulnerability affects multiple OS versions (Windows 7, Server 2012/2012 R2, RT 8.1, 8.1, 10, 2016/2008 R2 etc.) as listed in the initial descrip...
CVE-2018-8411
CVE-2018-8411 is a local NTFS elevation-of-privilege vulnerability in Windows due to NTFS failing to properly check access rights. A local attacker could exploit this to gain elevated privileges on affected Windows editions (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016/2019 a...
CVE-2018-8514
CVE-2018-8514 is an information-disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime caused by improper initialization of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10 (various editions), Windows Server 2008/2012/2012 R2/2016/2019, and Windows...
CVE-2019-0615
Technical details (affected products/versions, root cause specifics, impact scope) for CVE-2019-0615 are not publicly available in the provided documents. Monitor for updates in connected advisories (CPAI series) and official disclosures.
CVE-2019-0840
The connected documents identify CVE-2019-0840 as a Windows kernel information disclosure vulnerability. The disclosed details describe an issue in the Microsoft Windows kernel where information can be exposed due to improper handling of objects in memory, leading to unauthorized access to sensit...