2974 matches found
CVE-2019-1117
Technical details (affected products, versions, root cause, impact, fixes) for CVE-2019-1117 are not present in the provided connected documents. Monitor for updates; no public details are included here.
CVE-2019-1148
CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...
CVE-2019-1468
The connected CNVD entry corroborates CVE-2019-1468 as a Win32k/Windows font library RCE: improper handling of specially crafted embedded fonts enables remote code execution. Affected: Windows clients/servers with Win32k font handling vulnerability. Root cause: inadequate validation when processi...
CVE-2020-0632
Technical details about CVE-2020-0632 are not publicly provided in the connected records; no affected products, root cause, impact, or fix information is disclosed here. Monitor for updates from vendors/security advisories.
CVE-2020-1312
Technical details (affected versions, root cause, exploit/mitigation specifics) for CVE-2020-1312 are not publicly provided in the connected documents. Monitor for updates from official advisories and vulnerability feeds.
CVE-2020-1339
CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...
CVE-2021-28335
CVE-2021-28335 corresponds to a remote code execution vulnerability in the Windows RPC Runtime. Affected product scope is Microsoft Windows/Windows Server; root cause is a vulnerability in RPC Runtime that enables remote code execution with network access. CVSSv3.1 base score is 8.8 (HIGH), with ...
CVE-2021-31969
CVE-2021-31969 is a privilege-escalation vulnerability in Windows Cloud Files Mini Filter Driver (clfs.sys). The issue arises in the cloud file processing path inside HsmFltProcessHSMControl/HsmFltProcessUpdatePlaceholder, where Cloud Reparse Tag data is only partially validated and a misinterpre...
CVE-2021-34489
CVE-2021-34489 is a DirectWrite remote code execution vulnerability in Microsoft Windows/Windows Server. The issue affects the DirectWrite component and is described as enabling arbitrary code execution with a HIGH impact, requiring user interaction (UI:R) and a local vector (AV:L/AC:L on CVSS3) ...
CVE-2021-40477
Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.
CVE-2022-24550
Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.
CVE-2022-37984
CVE-2022-37984 is a Windows WLAN Service privilege elevation vulnerability. Public sources describe it as an improper privilege assignment in the Windows WLAN Service that allows a local attacker to elevate to higher privileges (impact: increased entitlements). The CNVD/ENISA entries corroborate ...
CVE-2022-41050
Technical details about CVE-2022-41050 are not publicly available in the provided documents. No product/version/root-cause/exploit information is given here. Monitor for updates from official advisories and vulnerability databases.
CVE-2023-21759
CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...
CVE-2023-21816
No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.
CVE-2023-36908
CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.
CVE-2016-0015
DirectShow Heap Corruption Remote Code Execution (CVE-2016-0015) affects Windows components listed in the CVE, with the vulnerability arising from improper validation in DirectShow. An attacker could trigger arbitrary-code execution by convincing a user to open a crafted file, potentially gaining...
CVE-2018-0971
CVE-2018-0971 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to bypass Kernel ASLR. The Initial description lists affected Windows versions (multiple client/server editions). Connected documents show exploitation references: CIRCL entries for CVE-20...
CVE-2018-8226
The CVE-2018-8226 entry describes a denial-of-service in the HTTP/2 protocol stack (HTTP.sys) for Windows. Affected components include HTTP.sys on Windows Server 2016 and Windows 10/Windows 10 Servers, with the root cause being improper parsing of specially crafted HTTP/2 requests, leading to sys...
CVE-2018-8348
CVE-2018-8348 is a Windows kernel information disclosure vulnerability caused by improper handling of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016 and related Server variants. Impact is information disclosure (confidentiality) with lo...
CVE-2018-8394
CVE-2018-8394 is an information disclosure vulnerability in the Windows GDI component. The provided documents state that the GDI memory contents can be improperly disclosed, affecting multiple Windows versions (e.g., Windows 7, Windows 10, various Windows Server editions). The Connected documents...
CVE-2018-8432
CVE-2018-8432 is a remote code execution in Microsoft Graphics Components. It affects Windows and Office components (e.g., Office, Word Viewer, Excel Viewer, PowerPoint Viewer) across multiple Windows and Office versions; the underlying issue is how Graphics Components handle objects in memory. E...
CVE-2019-0572
CVE-2019-0572 concerns a Windows Data Sharing Service elevation of privileges vulnerability. Connected sources indicate the issue affects Microsoft Windows Data Sharing Service components in Windows 10 and related OS families, enabling a local attacker to obtain elevated privileges by abusing imp...
CVE-2019-0694
CVE-2019-0694 : A local elevation-of-privilege vulnerability due to an integer overflow in the Windows Subsystem for Linux. Affects the WSL component; root cause is the integer overflow, enabling a local attacker to escalate privileges. The provided documents do not specify affected versions, exp...
CVE-2019-0856
Technical details about CVE-2019-0856 (affected products, root cause, impact, and fixes) are not present in the provided documents. Monitor official Microsoft advisories and Vulners updates for new information.
CVE-2019-0928
CVE-2019-0928 affects Microsoft Hyper-V: a denial-of-service vulnerability arises when the host fails to properly validate input from a privileged user on a guest operating system, allowing a crafted guest app to crash the host computer. The connected CNVD entry confirms Hyper-V Denial of Service...
CVE-2019-1187
CVE-2019-1187 is a denial-of-service vulnerability in the XmlLite runtime (XmlLite.dll) where improper XML input parsing can cause a crash. According to the NVD/NIST entry, exploitation is possible by a remote, unauthenticated attacker issuing specially crafted XML requests to an XML application,...
CVE-2019-1224
The CVE-2019-1224 entry describes an information disclosure in the Windows RDP server where memory contents could be exposed to an attacker. The vulnerability requires remote authentication-free access: an attacker must connect to an affected system and run a specially crafted application to expl...
CVE-2019-1290
Technical details about CVE-2019-1290 are not publicly provided in the connected documents; the materials describe the vulnerability in general terms and reference other CVEs. Monitor for updates.
CVE-2019-1380
CVE-2019-1380 is a local elevation-of-privilege issue in Windows where splwow64.exe mishandles certain calls (aka Microsoft splwow64 Elevation of Privilege Vulnerability). Affected software is Windows system component splwow64.exe; root cause centers on how certain calls are processed. Documented...
CVE-2019-1467
CVE-2019-1467 corresponds to a Windows GDI Information Disclosure vulnerability. The connected CNVD entries describe an information leakage in the Windows GDI component, where memory contents may be disclosed by an attacker who tricks a user into opening content or visiting a page. These sources ...
CVE-2020-0941
CVE-2020-0941 is a Win32k Information Disclosure vulnerability in Windows. The root cause is improper handling of objects in memory within the win32k component, leading to kernel information disclosure. Exploitation requires local access: either an attacker must log on locally or persuade a local...
CVE-2020-1070
Technical details for CVE-2020-1070 are not provided in the supplied documents; only a high-level description is available. Monitor for updates.
CVE-2020-1130
CVE-2020-1130 affects the Diagnostics Hub Standard Collector. The issue is an elevation of privilege in the collector’s data handling, enabling a crafted local application to run processes in an elevated context. The vulnerability is addressed by updating how the Diagnostics Hub Standard Collecto...
CVE-2020-1554
CVE-2020-1554 affects Windows Media Foundation memory handling. The vulnerability is a memory corruption issue in Windows Media Foundation when it improperly handles objects in memory, potentially allowing an attacker to install programs, view/change/delete data, or create accounts with full righ...
CVE-2021-28336
The provided documents reference CVE-2021-28336 as a Windows RPC Runtime Remote Code Execution vulnerability. The CNVD entry describes a remote code execution flaw in the RPC Runtime affecting Microsoft Windows/Windows Server. Nessus/OpenVAS plugins in the connected set list CVE-2021-28336 among ...
CVE-2021-28346
Technical details about CVE-2021-28346 are not provided in the supplied documents. Monitor for updates from official advisories; no affected product/version/root-cause/mitigation details are present here.
CVE-2021-28352
Technical details for CVE-2021-28352 are not provided in the supplied documents. No affected products, impact, or remediation information are disclosed here. Monitor for updates from official advisories and vendor advisories to obtain concrete details.
CVE-2021-31208
CVE-2021-31208 is a Windows Container Manager Service elevation-of-privilege vulnerability affecting Windows/Windows Server. Connected sources confirm the issue and assign a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Required: LOW, no user interaction). Public exploits exist. Microsoft issued...
CVE-2021-33783
CVE-2021-33783 is a Windows SMB Information Disclosure Vulnerability affecting Microsoft Windows/Windows Server SMB behavior. The primary sources classify it as a network-exposed SMB issue with information disclosure impact (confidentiality high per CVSS 3.1, I:N, A:N) and partial information exp...
CVE-2021-40489
Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.
CVE-2022-21835
CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...
CVE-2022-29131
CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...
CVE-2022-30148
CVE-2022-30148 is a Windows DSC information disclosure vulnerability affecting the Windows Desired State Configuration component. The connected sources confirm the issue is described as a DSC information disclosure vulnerability and indicate remediation is through Microsoft security updates relea...
CVE-2022-35764
CVE-2022-35764 refers to a Storage Spaces Direct Elevation of Privilege vulnerability. The CVSS v3.1 metrics indicate a LOCAL, low-attack-complexity vector with Privileges Required: LOW and UI: NONE, Confidentiality/Integrity/Availability impacts: HIGH, base score 7.8 (HIGH). Exploitation status ...
CVE-2022-38033
CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...
CVE-2023-21694
Technical details about CVE-2023-21694 are not publicly provided in the supplied documents. The connected records do not specify affected products, root cause, remediation, or exploit status. Monitor for official disclosures and updates.
CVE-2023-21695
Technical details about CVE-2023-21695 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit/vector/impact details are provided here.
CVE-2023-21760
Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.