2974 matches found
CVE-2018-8599
CVE-2018-8599 is the Diagnostics Hub Standard Collector Service Elevation of Privilege vulnerability. The NVD entry states a local attacker could exploit improper impersonation of certain file operations to gain privileges on affected Microsoft software, including Visual Studio, Windows Server 20...
CVE-2023-21816
No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.
CVE-2018-0971
CVE-2018-0971 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to bypass Kernel ASLR. The Initial description lists affected Windows versions (multiple client/server editions). Connected documents show exploitation references: CIRCL entries for CVE-20...
CVE-2018-8348
CVE-2018-8348 is a Windows kernel information disclosure vulnerability caused by improper handling of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016 and related Server variants. Impact is information disclosure (confidentiality) with lo...
CVE-2018-8450
CVE-2018-8450 is a Windows Remote Code Execution vulnerability affecting Windows Search where an attacker can exploit memory handling of objects to take control of the system. The issue is addressed by Microsoft security updates KB4467702 (Windows 10 v1803/Server 1803) and related KBs for Windows...
CVE-2018-8549
CVE-2018-8549 is a Windows kernel driver signature validation bypass vulnerability. It affects Windows clients/servers listed (Windows 8.1, 10, 2012/2016/2019, etc.). The underlying issue is incorrect validation of kernel driver signatures, enabling bypass of security features. Public data in con...
CVE-2019-0659
Technical details about CVE-2019-0659 are not provided in the connected documents; no explicit affected products, versions, or remediation are available here. Monitor for updates in case new details are published.
CVE-2019-0694
CVE-2019-0694 : A local elevation-of-privilege vulnerability due to an integer overflow in the Windows Subsystem for Linux. Affects the WSL component; root cause is the integer overflow, enabling a local attacker to escalate privileges. The provided documents do not specify affected versions, exp...
CVE-2019-0840
The connected documents identify CVE-2019-0840 as a Windows kernel information disclosure vulnerability. The disclosed details describe an issue in the Microsoft Windows kernel where information can be exposed due to improper handling of objects in memory, leading to unauthorized access to sensit...
CVE-2019-1187
CVE-2019-1187 is a denial-of-service vulnerability in the XmlLite runtime (XmlLite.dll) where improper XML input parsing can cause a crash. According to the NVD/NIST entry, exploitation is possible by a remote, unauthenticated attacker issuing specially crafted XML requests to an XML application,...
CVE-2020-1070
Technical details for CVE-2020-1070 are not provided in the supplied documents; only a high-level description is available. Monitor for updates.
CVE-2020-1133
Technical details about CVE-2020-1133 are not publicly provided in the connected documents. Available sources mention Diagnostics Hub Standard Collector and the fix, but no affected versions, exploit specifics, or mitigation steps are given. Monitor for updates.
CVE-2020-1474
CVE-2020-1474 concerns the Windows Image Acquisition (WIA) Service, where memory contents can be disclosed by an attacker who authenticates and connects an imaging device (camera, scanner, phone) to a vulnerable system and runs a crafted application. The vulnerability arises from how the WIA Serv...
CVE-2020-16922
CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...
CVE-2021-26413
CVE-2021-26413 is the Windows Installer Spoofing Vulnerability. Microsoft and CVE records confirm a local-attack surface in the Windows Installer component that can impact integrity (as per CVSS) without user interaction. Public exploit details are not provided in the connected documents; however...
CVE-2021-31168
CVE-2021-31168 affects the Windows Container Manager Service in Windows/Windows Server and is an elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH), with local attacker access and no user interaction. Public exploit activity is indicated in related advisories/plugins; ex...
CVE-2021-38629
CVE-2021-38629 relates to the Windows Ancillary Function Driver for WinSock Information Disclosure. Affected: Windows kernel/network stack component (AFD/WinSock). Underlying cause: information disclosure with network attack surface. CVSS3.1 base score 6.5 (medium), vector NETWORK, low attack com...
CVE-2021-41370
Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2021-41377
Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2022-21835
CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...
CVE-2022-23296
Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.
CVE-2022-35761
Technical details about CVE-2022-35761 (affected products, root cause, impact, and fixes) are not provided in the connected and initial documents. Monitor for updates and additional disclosures.
CVE-2023-36908
CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.
CVE-2016-3301
CVE-2016-3301 affects the Windows Graphics Component in the Windows font library, enabling remote code execution via a crafted embedded font. Affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; W...
CVE-2018-0753
CVE-2018-0753 describes a denial-of-service vulnerability in Windows IPSec where the system may stop responding due to how objects are handled in memory. Affected products explicitly include Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions 1511/1607/1703/1709, Windows Server 2...
CVE-2018-1040
The CVE-2018-1040 issue is a Denial of Service vulnerability in Windows’ Code Integrity Module hashing. Affected products include Windows 7, Windows 8.1/Server variants, Windows 10, and newer Server editions. The underlying cause is in the hashing routine of the Code Integrity Module, leading to ...
CVE-2018-8226
The CVE-2018-8226 entry describes a denial-of-service in the HTTP/2 protocol stack (HTTP.sys) for Windows. Affected components include HTTP.sys on Windows Server 2016 and Windows 10/Windows 10 Servers, with the root cause being improper parsing of specially crafted HTTP/2 requests, leading to sys...
CVE-2018-8417
CVE-2018-8417 is a security feature bypass in Microsoft JScript that could allow bypass of Device Guard. Affected products/versions identified in the provided data include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The vulnerability is described as a loc...
CVE-2018-8454
CVE-2018-8454 is a Windows information-disclosure vulnerability in the Windows Audio Service where memory objects may be mishandled. Affected products listed in the CVE entry include Windows 10, Windows 10 Servers, and Windows Server 2019. In the Nessus/OpenVAS content, this vulnerability is incl...
CVE-2018-8553
CVE-2018-8553 is a remote code execution vulnerability in how Microsoft Graphics Components handle memory objects. The flaw, affecting multiple Windows versions (Windows 7, Windows Server 2008/2012 family, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2016/2012 R2), stems from memor...
CVE-2019-0616
Microsoft Windows GDI (Graphics Device Interface) contains an information disclosure vulnerability. The Graphics Device Interface component is affected due to improper handling of objects in memory, enabling a remote attacker to obtain sensitive information. The linked advisories corroborate the ...
CVE-2019-0632
Technical details about CVE-2019-0632 are not publicly available in the provided documents. Monitor for updates.
CVE-2019-0774
Technical details for CVE-2019-0774 are not provided in the connected documents. The sources describe a Windows GDI information disclosure vulnerability related to these CVEs but do not specify affected products, versions, or a fix for 0774. Monitor for updates.
CVE-2019-1117
Technical details (affected products, versions, root cause, impact, fixes) for CVE-2019-1117 are not present in the provided connected documents. Monitor for updates; no public details are included here.
CVE-2020-0632
Technical details about CVE-2020-0632 are not publicly provided in the connected records; no affected products, root cause, impact, or fix information is disclosed here. Monitor for updates from vendors/security advisories.
CVE-2020-0731
Technical details for CVE-2020-0731 are not publicly provided in the connected documents; affected products, root cause, and remediation cannot be specified from current sources. Monitor ENISA EUVD entries and the MSRC advisory for updates.
CVE-2020-1083
The CVE-2020-1083 vulnerability is a local information-disclosure issue in the Windows Graphics Component caused by improper handling of objects in memory. An attacker must log on to the affected system and run a crafted application to exploit it. The update fixes the issue by correcting how the ...
CVE-2020-1130
CVE-2020-1130 affects the Diagnostics Hub Standard Collector. The issue is an elevation of privilege in the collector’s data handling, enabling a crafted local application to run processes in an elevated context. The vulnerability is addressed by updating how the Diagnostics Hub Standard Collecto...
CVE-2020-1355
The CVE-2020-1355 entry maps to a Windows Font Driver Host memory-handling bug that can lead to remote code execution. Public sources describe the issue as memory mismanagement in the Font Driver Host, enabling an attacker to gain code execution on a vulnerable system. Microsoft’s advisory notes ...
CVE-2020-1376
CVE-2020-1376 describes an elevation-of-privilege in Windows components, specifically fdSSDP.dll handling of memory and the fix addressing memory object handling in ssdpsrv.dll. The exploit requires a locally authenticated attacker to run a crafted application to achieve code execution with eleva...
CVE-2020-1557
CVE-2020-1557: A remote code execution vulnerability in the Windows Jet Database Engine occurs due to improper handling of objects in memory. An attacker could trigger code execution by persuading a user to open a specially crafted file. The update fixes the issue by correcting how the Jet Engine...
CVE-2021-1640
CVE-2021-1640 is a Windows Print Spooler Elevation of Privilege vulnerability affecting the Print Spooler service, caused by handling of print jobs submitted to FILE: ports. The vulnerability can lead to local privilege escalation with impacts across confidentiality, integrity, and availability (...
CVE-2021-28356
Public technical details for CVE-2021-28356 are not provided in the connected documents; sources reference the vulnerability name but do not specify affected products, root cause, impact, or fixes.
CVE-2021-31169
Technical details (affected components, root cause, exact impact, and fixes) are not publicly provided in the supplied documents. Monitor for official advisories and vendor updates.
CVE-2021-31208
CVE-2021-31208 is a Windows Container Manager Service elevation-of-privilege vulnerability affecting Windows/Windows Server. Connected sources confirm the issue and assign a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Required: LOW, no user interaction). Public exploits exist. Microsoft issued...
CVE-2021-31969
The Windows Cloud Files Mini Filter Driver contains a pool overflow vulnerability in the clfs.sys driver. The root cause is insufficient validation of data originating from NTFS reparse points ; specifically, the HsmFltProcessHSMControl function fails to properly check records exceeding a limit o...
CVE-2021-31976
CVE-2021-31976 is described as a Server for NFS Information Disclosure Vulnerability. The provided documents do not specify affected products, vendor, component, or vulnerable versions. CVSS metrics are available: CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, n...
CVE-2021-40477
Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.
CVE-2021-41331
CVE-2021-41331 corresponds to a Windows Media Audio Decoder Remote Code Execution Vulnerability. Public documents (NVD/NVD-derived entries) describe impact as remote code execution with high-severity ratings: CVSS 3.1 base score 7.8 (LOCAL ATTACK VECTOR, PRIVILEGES NONE, UI REQUIRED; CONF/I/H = H...