2974 matches found
CVE-2021-40460
Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-40477
Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.
CVE-2022-21964
CVE-2022-21964 corresponds to a vulnerability in the Remote Desktop Licensing Diagnoser that enables information disclosure. The available documents identify the affected area as Windows Remote Desktop Licensing Diagnoser, with the vulnerability categorized as information disclosure. The CVSS met...
CVE-2022-23296
Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.
CVE-2022-26802
CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...
CVE-2022-30166
Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.
CVE-2022-30196
CVE-2022-30196 affects Windows Secure Channel (Schannel) and is categorized as a network-exploitable vulnerability with no user interaction. The base CVSSv3.1 score is 8.2 (High) with impact limited to confidentiality (Low) and availability (High); integrity is not affected. The issue is addresse...
CVE-2022-38033
CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...
CVE-2022-41050
Technical details about CVE-2022-41050 are not publicly available in the provided documents. No product/version/root-cause/exploit information is given here. Monitor for updates from official advisories and vulnerability databases.
CVE-2022-41100
CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...
CVE-2023-36908
CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.
CVE-2018-8549
CVE-2018-8549 is a Windows kernel driver signature validation bypass vulnerability. It affects Windows clients/servers listed (Windows 8.1, 10, 2012/2016/2019, etc.). The underlying issue is incorrect validation of kernel driver signatures, enabling bypass of security features. Public data in con...
CVE-2019-0617
CVE-2019-0617 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is characterized by a high-severity impact (CVSS v3.0: 7.8) with a local attack vector, requiring user interaction, and resulting in high confident...
CVE-2019-0659
Technical details about CVE-2019-0659 are not provided in the connected documents; no explicit affected products, versions, or remediation are available here. Monitor for updates in case new details are published.
CVE-2019-0759
Technical details about CVE-2019-0759 are not publicly available in the provided documents. Monitor for updates and additional authoritative disclosures.
CVE-2019-0782
Technical details for CVE-2019-0782 are not publicly available in the provided documents. Monitor for updates from NVD/MSRC and ENISA EUVD databases.
CVE-2019-0814
CVE-2019-0814 affects Microsoft Windows Win32k: information disclosure due to win32k improperly providing kernel information. The vulnerability is the same family as CVE-2019-0848 and is described across NVD/CNVD records and related CVE entries. Affected software is Windows Windows Win32k subsyst...
CVE-2019-0840
The connected documents identify CVE-2019-0840 as a Windows kernel information disclosure vulnerability. The disclosed details describe an issue in the Microsoft Windows kernel where information can be exposed due to improper handling of objects in memory, leading to unauthorized access to sensit...
CVE-2019-0928
CVE-2019-0928 affects Microsoft Hyper-V: a denial-of-service vulnerability arises when the host fails to properly validate input from a privileged user on a guest operating system, allowing a crafted guest app to crash the host computer. The connected CNVD entry confirms Hyper-V Denial of Service...
CVE-2019-1148
CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...
CVE-2020-0634
CVE-2020-0634 affects the Windows Common Log File System (CLFS) Driver. Connected CNVD-2020-08133 describes a privilege-lifting vulnerability in the CLFS Driver caused by improper handling of memory objects, enabling privilege escalation by an authenticated user who logs on and runs a crafted app...
CVE-2020-1133
Technical details about CVE-2020-1133 are not publicly provided in the connected documents. Available sources mention Diagnostics Hub Standard Collector and the fix, but no affected versions, exploit specifics, or mitigation steps are given. Monitor for updates.
CVE-2020-1474
CVE-2020-1474 concerns the Windows Image Acquisition (WIA) Service, where memory contents can be disclosed by an attacker who authenticates and connects an imaging device (camera, scanner, phone) to a vulnerable system and runs a crafted application. The vulnerability arises from how the WIA Serv...
CVE-2020-1531
CVE-2020-1531 is an elevation-of-privilege flaw in Windows Accounts Control caused by improper memory handling. An attacker must already have code execution on the target host and can then run a crafted program to elevate privileges. The vulnerability’s fix is delivered via a security update that...
CVE-2020-16922
CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...
CVE-2021-31969
CVE-2021-31969 is a privilege-escalation vulnerability in Windows Cloud Files Mini Filter Driver (clfs.sys). The issue arises in the cloud file processing path inside HsmFltProcessHSMControl/HsmFltProcessUpdatePlaceholder, where Cloud Reparse Tag data is only partially validated and a misinterpre...
CVE-2021-31976
CVE-2021-31976 is described as a Server for NFS Information Disclosure Vulnerability. The provided documents do not specify affected products, vendor, component, or vulnerable versions. CVSS metrics are available: CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, n...
CVE-2021-36962
Technical details for CVE-2021-36962 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2021-40489
Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.
CVE-2021-41370
Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2022-26790
Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2022-35761
Technical details about CVE-2022-35761 (affected products, root cause, impact, and fixes) are not provided in the connected and initial documents. Monitor for updates and additional disclosures.
CVE-2022-41098
Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.
CVE-2016-0015
DirectShow Heap Corruption Remote Code Execution (CVE-2016-0015) affects Windows components listed in the CVE, with the vulnerability arising from improper validation in DirectShow. An attacker could trigger arbitrary-code execution by convincing a user to open a crafted file, potentially gaining...
CVE-2018-0971
CVE-2018-0971 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to bypass Kernel ASLR. The Initial description lists affected Windows versions (multiple client/server editions). Connected documents show exploitation references: CIRCL entries for CVE-20...
CVE-2018-8432
CVE-2018-8432 is a remote code execution in Microsoft Graphics Components. It affects Windows and Office components (e.g., Office, Word Viewer, Excel Viewer, PowerPoint Viewer) across multiple Windows and Office versions; the underlying issue is how Graphics Components handle objects in memory. E...
CVE-2018-8454
CVE-2018-8454 is a Windows information-disclosure vulnerability in the Windows Audio Service where memory objects may be mishandled. Affected products listed in the CVE entry include Windows 10, Windows 10 Servers, and Windows Server 2019. In the Nessus/OpenVAS content, this vulnerability is incl...
CVE-2018-8514
CVE-2018-8514 is an information-disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime caused by improper initialization of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10 (various editions), Windows Server 2008/2012/2012 R2/2016/2019, and Windows...
CVE-2018-8595
CVE-2018-8595 concerns an information-disclosure flaw in the Windows Graphics Device Interface (GDI) where memory contents are improperly disclosed. Affected are multiple Windows versions listed in the CVE (e.g., Windows 7, Windows 8.1, Windows 10 and corresponding server releases). The root caus...
CVE-2019-0572
CVE-2019-0572 concerns a Windows Data Sharing Service elevation of privileges vulnerability. Connected sources indicate the issue affects Microsoft Windows Data Sharing Service components in Windows 10 and related OS families, enabling a local attacker to obtain elevated privileges by abusing imp...
CVE-2019-0616
Microsoft Windows GDI (Graphics Device Interface) contains an information disclosure vulnerability. The Graphics Device Interface component is affected due to improper handling of objects in memory, enabling a remote attacker to obtain sensitive information. The linked advisories corroborate the ...
CVE-2020-1070
Technical details for CVE-2020-1070 are not provided in the supplied documents; only a high-level description is available. Monitor for updates.
CVE-2020-1083
The CVE-2020-1083 vulnerability is a local information-disclosure issue in the Windows Graphics Component caused by improper handling of objects in memory. An attacker must log on to the affected system and run a crafted application to exploit it. The update fixes the issue by correcting how the ...
CVE-2020-1130
CVE-2020-1130 affects the Diagnostics Hub Standard Collector. The issue is an elevation of privilege in the collector’s data handling, enabling a crafted local application to run processes in an elevated context. The vulnerability is addressed by updating how the Diagnostics Hub Standard Collecto...
CVE-2020-1414
CVE-2020-1414 affects Windows Runtime by an elevation of privilege due to improper handling of objects in memory. The description identifies Windows Runtime Elevation of Privilege Vulnerability but provides no public details on affected versions, specific vulnerable components, exploit availabili...
CVE-2020-1529
CVE-2020-1529 is a Windows GDI elevation-of-privilege vulnerability where improper handling of in-memory GDI objects could allow a local attacker to run code in kernel mode. The initial description notes kernel-mode code execution and privilege elevation after logging on and running a crafted app...
CVE-2021-1663
CVE-2021-1663 affects the Windows Projected File System FS Filter Driver and is categorized as an Information Disclosure vulnerability. Public details in connected documents identify the vulnerable component as the Windows FS Filter Driver and indicate partial/high confidentiality impact (CVSS 3....
CVE-2021-1666
Technical details about CVE-2021-1666 are not provided in the supplied documents; none of the connected items reveal affected products, versions, root cause, impact, or remediation. Monitor for updates.
CVE-2021-28352
Technical details for CVE-2021-28352 are not provided in the supplied documents. No affected products, impact, or remediation information are disclosed here. Monitor for updates from official advisories and vendor advisories to obtain concrete details.