2974 matches found
CVE-2018-0745
CVE-2018-0745 is a Windows kernel information-disclosure vulnerability affecting Windows 10 v1703, v1709 and Windows Server 2016/2019 lineage as described in the CVE entry. The root cause involves the way objects are handled in memory, enabling information disclosure. Concrete details present in ...
CVE-2018-0823
The CVE-2018-0823 occurrence is a concrete, NPFS-related elevation-of-privilege flaw in Windows 10 version 1709 and Windows Server 1709, caused by how Named Pipe File System handles objects. Local attacker with logon can exploit to execute processes with elevated privileges. Public exploits exist...
CVE-2018-0897
CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...
CVE-2018-8167
CVE-2018-8167 is a Windows CLFS driver elevation of privilege vulnerability. The issue arises when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. Affected products/versions include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10...
CVE-2018-8309
CVE-2018-8309 is a Windows Denial of Service vulnerability where the root cause is the improper handling of objects in memory. Affected products include multiple Windows releases such as Windows 7, Windows 8.1, Windows 10, Windows Server 2008/R2, 2012/R2, 2016 and related server editions. The vul...
CVE-2018-8417
CVE-2018-8417 is a security feature bypass in Microsoft JScript that could allow bypass of Device Guard. Affected products/versions identified in the provided data include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The vulnerability is described as a loc...
CVE-2018-8481
CVE-2018-8481 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products listed include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions). The connected documents (EUVD/CNVD/NVD) describe th...
CVE-2019-0627
Technical details for CVE-2019-0627 are not publicly provided in the supplied documents. Monitor for updates; no product/version/impact information is available from the connected sources.
CVE-2019-0695
CVE-2019-0695 describes a denial-of-service vulnerability in Microsoft Hyper-V where a host server fails to properly validate input from a privileged user on a guest operating system. The issue is tied to Hyper-V on the host and is characterized as a DoS with the impact described by the CVE entry...
CVE-2019-0774
Technical details for CVE-2019-0774 are not provided in the connected documents. The sources describe a Windows GDI information disclosure vulnerability related to these CVEs but do not specify affected products, versions, or a fix for 0774. Monitor for updates.
CVE-2019-1095
Technical details for CVE-2019-1095 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability but lacks product/version/impact specifics beyond memory disclosure. Monitor for updates from Microsoft and risk assessments when details eme...
CVE-2019-1333
Technical details about CVE-2019-1333 (affected components, root cause, impact, or fixes) are not provided in the connected documents. The initial description references a Windows Remote Desktop Client RCE, but no public details are included here; monitor for updates.
CVE-2019-1347
Technical details about CVE-2019-1347 are not provided in the connected documents. Public details (affected products, root cause, impact, or fixes) are not disclosed here. Monitor for updates and refer to the initial CVE entry for any forthcoming specifics.
CVE-2019-1419
CVE-2019-1419 is a remote code execution vulnerability in Microsoft Windows affecting the Windows Adobe Type Manager Library, caused by improper handling of specially crafted OpenType fonts. The issue is described consistently across the NVD entry and Red Hat CVE records (RH:CVE-2019-1419/CVE-201...
CVE-2020-1377
The connected materials describe CVE-2020-1377 within a broader Windows Registry/hive memory‑corruption research stream. They detail how hive memory corruption can be exploited locally via controlled regf data, use‑after‑free in security descriptors, and out‑of‑bounds cell indexes to pivot into k...
CVE-2020-1529
CVE-2020-1529 is a Windows GDI elevation-of-privilege vulnerability where improper handling of in-memory GDI objects could allow a local attacker to run code in kernel mode. The initial description notes kernel-mode code execution and privilege elevation after logging on and running a crafted app...
CVE-2020-1531
CVE-2020-1531 is an elevation-of-privilege flaw in Windows Accounts Control caused by improper memory handling. An attacker must already have code execution on the target host and can then run a crafted program to elevate privileges. The vulnerability’s fix is delivered via a security update that...
CVE-2020-1562
Microsoft Graphics Components remote code execution vulnerability CVE-2020-1562 exists due to how objects are handled in memory. An attacker could execute arbitrary code if a user opens a specially crafted file. The vulnerability is addressed by a security update that fixes the memory handling of...
CVE-2021-1657
Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.
CVE-2021-33765
Technical details about CVE-2021-33765 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2021-34493
CVE-2021-34493 is a Windows Partition Management Driver Elevation of Privilege vulnerability. The connected documents describe a local, privilege-escalation flaw in the Partition Management Driver that can affect Windows client/server platforms. CVSS data included with the NVD entry shows CVSS‑3....
CVE-2021-34503
CVE-2021-34503 is a Windows Media Foundation remote code execution vulnerability described in multiple sources as an issue in the Media Foundation component of Microsoft Windows that can lead to remote code execution. Connected documents corroborate that the vulnerability affects Windows Media Fo...
CVE-2021-38634
CVE-2021-38634 is a Microsoft Windows Update Client Elevation of Privilege vulnerability. Public data (NVD) lists it as a local, low-privilege, no-user-interaction EoP affecting the Windows Update Client, with CVSS v3.1 base score 7.8 (HIGH) and CVSSv2 base score 7.2. The CNA entry also shows a r...
CVE-2022-21866
Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.
CVE-2022-24504
Technical details for CVE-2022-24504 are not publicly provided in the supplied documents. Monitor for updates in the connected sources for affected products, impact specifics, and remediation information.
CVE-2022-26798
Technical details about CVE-2022-26798 are not publicly available in the provided connected documents. The initial description notes a Windows Print Spooler Elevation of Privilege vulnerability, but there are no specific vendor/product/version/root-cause/fix details in the supplied materials. Mon...
CVE-2022-30145
The CVE is Windows Encrypting File System (EFS) Remote Code Execution (CVE-2022-30145). Public records in the connected documents confirm this as a Windows OS vulnerability affecting EFS functionality, with multiple Microsoft security updates released in June 2022 (e.g., KB5014699, KB5014678, KB5...
CVE-2022-30213
Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.
CVE-2022-41098
Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.
CVE-2016-7237
CVE-2016-7237 affects Local Security Authority Subsystem Service (LSASS) in Windows between Vista SP2 and Windows Server 2016. The vulnerability allows remote authenticated users to cause a denial of service (system hang) by sending a crafted request, via the LSASS handling path (notably connecte...
CVE-2017-0269
CVE-2017-0269 is a Windows SMBv1 denial-of-service vulnerability: the SMBv1 server may stop responding when it receives specially crafted requests. The issue is tied to handling of SMBv1 traffic (no explicit exploit details in the provided docs). Affected context is Windows SMBv1 processing; pote...
CVE-2018-0753
CVE-2018-0753 describes a denial-of-service vulnerability in Windows IPSec where the system may stop responding due to how objects are handled in memory. Affected products explicitly include Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions 1511/1607/1703/1709, Windows Server 2...
CVE-2018-1040
The CVE-2018-1040 issue is a Denial of Service vulnerability in Windows’ Code Integrity Module hashing. Affected products include Windows 7, Windows 8.1/Server variants, Windows 10, and newer Server editions. The underlying cause is in the hashing routine of the Code Integrity Module, leading to ...
CVE-2018-8599
CVE-2018-8599 is the Diagnostics Hub Standard Collector Service Elevation of Privilege vulnerability. The NVD entry states a local attacker could exploit improper impersonation of certain file operations to gain privileges on affected Microsoft software, including Visual Studio, Windows Server 20...
CVE-2019-0663
CVE-2019-0663 concerns a Windows kernel information-disclosure vulnerability. The Windows kernel improperly initializes objects in memory, enabling an authenticated, local attacker to obtain sensitive information by running a specially crafted application. Affects the Windows kernel (memory-objec...
CVE-2019-0892
CVE-2019-0892 describes a Windows Win32k privilege-elevation vulnerability. The Win32k memory-handling of objects can be exploited to execute arbitrary code in kernel mode, enabling an attacker who can log on to run a crafted app that elevates privileges, potentially installing programs, modifyin...
CVE-2020-0644
Technical details for CVE-2020-0644 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2020-0681
CVE-2020-0681 is a remote code execution vulnerability in the Windows Remote Desktop Client. The issue occurs when a user connects to a malicious Remote Desktop server, allowing an attacker to execute arbitrary code on the client machine. The vulnerability is associated with the Remote Desktop Cl...
CVE-2020-1286
CVE-2020-1286 is a Windows Shell remote code execution vulnerability caused by improper validation of file paths. Exploitation could allow code execution in the context of the current user. The connected documents corroborate the CVE and list it among multiple Windows vulnerabilities addressed in...
CVE-2020-1376
CVE-2020-1376 describes an elevation-of-privilege in Windows components, specifically fdSSDP.dll handling of memory and the fix addressing memory object handling in ssdpsrv.dll. The exploit requires a locally authenticated attacker to run a crafted application to achieve code execution with eleva...
CVE-2020-1414
CVE-2020-1414 affects Windows Runtime by an elevation of privilege due to improper handling of objects in memory. The description identifies Windows Runtime Elevation of Privilege Vulnerability but provides no public details on affected versions, specific vulnerable components, exploit availabili...
CVE-2020-1587
CVE-2020-1587 : Elevation of privilege in the Windows Ancillary Function Driver for WinSock caused by improper memory handling. Exploitation requires an initial execution on the victim, followed by running a crafted app to elevate privileges. Microsoft’s security update fixes the memory handling ...
CVE-2020-1596
Technical details for CVE-2020-1596 are not provided in the connected documents. The initial description lacks product/version/root-cause specifics; monitor for updates.
CVE-2021-28327
Technical details for CVE-2021-28327 are not publicly available in the provided documents. No affected products, root cause, or fixes are specified here. Monitor for updates.
CVE-2021-31169
Technical details (affected components, root cause, exact impact, and fixes) are not publicly provided in the supplied documents. Monitor for official advisories and vendor updates.
CVE-2021-33763
CVE-2021-33763 affects Windows Remote Access Connection Manager (RasMan) and is an information disclosure vulnerability in the Windows Remote Access Connection Manager service for Windows/Windows Server. It allows a local attacker to disclose information (confidentiality impact high per CVSS), wi...
CVE-2021-34507
Technical details, affected products, vulnerable components, and remediation are not provided in the connected documents. Monitor for updates from official sources to obtain concrete technical information about CVE-2021-34507.
CVE-2021-38663
CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...