2974 matches found
CVE-2020-1408
Technical details for CVE-2020-1408 are not publicly provided in the connected documents. The Fedora/OpenVAS/Nessus entries reference this CVE only in passing or within list contexts. Monitor for updates from official advisories.
CVE-2020-1510
CVE-2020-1510 is a Windows win32k information-disclosure vulnerability. The root cause is improper handling of objects in memory by win32k, enabling an attacker who logs on and runs a crafted app to access kernel information and potentially leverage it for further compromise. Impact is described ...
CVE-2020-16936
CVE-2020-16936 describes an elevation of privilege vulnerability in Windows Backup Service caused by improper handling of file operations. An attacker must first achieve code execution on the target system and could then run a crafted application to elevate privileges. The vulnerability is mitiga...
CVE-2021-1726
CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...
CVE-2021-28356
Public technical details for CVE-2021-28356 are not provided in the connected documents; sources reference the vulnerability name but do not specify affected products, root cause, impact, or fixes.
CVE-2021-31188
CVE-2021-31188 is a Windows Graphics Component Elevation of Privilege vulnerability. The connected documents corroborate that this CVE is addressed by May 2021 Windows security updates (e.g., KB5003173, KB5003208, KB5003203 and related servicing patches) as part of updates to Windows App Platform...
CVE-2021-34476
CVE-2021-34476 : Bowser.sys Denial of Service vulnerability. Connected data provide CVSS v3.1 metrics: NETWORK exploit, LOW attack complexity, NONE privileges, NONE user interaction, and HIGH availability impact (base score 7.5). No explicit remediation or patch details are provided in the suppli...
CVE-2021-40488
CVE-2021-40488 corresponds to a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSS details show a LOCAL attack with LOW attack complexity and NO authentication required, potentially impacting confidentiality, integrity, and availability (C/C/I/A = HIGH). The vulnerability is...
CVE-2022-35761
Technical details about CVE-2022-35761 (affected products, root cause, impact, and fixes) are not provided in the connected and initial documents. Monitor for updates and additional disclosures.
CVE-2016-3301
CVE-2016-3301 affects the Windows Graphics Component in the Windows font library, enabling remote code execution via a crafted embedded font. Affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; W...
CVE-2017-0078
Technical details for CVE-2017-0078 are not provided in the connected documents. Monitor for updates from official advisories; no exploit, impact, or remediation specifics are included here.
CVE-2017-0181
CVE-2017-0181 affects the Windows Hyper-V Network Switch on Windows 10/Windows Server 2016 hosts. The vulnerability is a remote code execution caused by improper validation of input from the guest OS, requiring an authenticated user on the guest. Connected sources confirm Hyper-V input validation...
CVE-2018-8553
CVE-2018-8553 is a remote code execution vulnerability in how Microsoft Graphics Components handle memory objects. The flaw, affecting multiple Windows versions (Windows 7, Windows Server 2008/2012 family, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2016/2012 R2), stems from memor...
CVE-2019-0899
The CVE-2019-0899 entry concerns a remote code execution vulnerability in the Windows Jet Database Engine. Connected CNVD records describe a buffer overflow/heap overflow in the Jet DB Engine when memory boundaries are not properly validated, enabling exploitation through in-memory operations. Th...
CVE-2019-1087
Technical details about CVE-2019-1087 are not provided in the supplied documents. Monitor official advisories for updates on affected products, root cause, impact, and remediation.
CVE-2019-1147
CVE-2019-1147 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of objects in memory. An attacker could trigger code execution by enticing a user to open a specially crafted file; impact is high (arbitrary code execution). The available documents ind...
CVE-2020-0788
Technical details for CVE-2020-0788 are not publicly available in the provided connected documents; no root cause, impact, or patch specifics are included. Monitor for updates.
CVE-2020-1085
CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...
CVE-2020-1319
CVE-2020-1319 affects Microsoft Windows Codecs Library. The root cause is memory handling in the Codecs Library, with public details noting an uninitialized pointer leading to remote code execution when processing a specially crafted image file. Impact per sources: attacker could take control of ...
CVE-2020-16908
CVE-2020-16908 is a Windows Setup elevation-of-privilege vulnerability. A locally authenticated attacker can exploit improper handling of directories in Windows Setup to run arbitrary code with elevated system privileges, enabling installation of programs, viewing/changing/deleting data, or creat...
CVE-2020-16909
CVE-2020-16909 describes a local privilege-escalation flaw in Windows Error Reporting (WER) that arises when WER handles and executes files. An attacker could exploit a crafted application to gain higher privileges and access sensitive information and system functionality. The NVD entry notes a s...
CVE-2021-1640
CVE-2021-1640 is a Windows Print Spooler Elevation of Privilege vulnerability affecting the Print Spooler service, caused by handling of print jobs submitted to FILE: ports. The vulnerability can lead to local privilege escalation with impacts across confidentiality, integrity, and availability (...
CVE-2021-1649
Technical details for CVE-2021-1649 are not publicly provided in the supplied documents. Monitor for updates from the connected sources for affected products, impact, and fixes.
CVE-2021-24080
CVE-2021-24080 is a Windows vulnerability described as a Denial of Service in the Windows Trust Verification API. The connected documents confirm this CVE is active and listed in multiple sources. Affected component: Windows Trust Verification API (Windows). Underlying impact stated in the availa...
CVE-2021-34488
CVE-2021-34488 affects the Windows Console Driver (Windows/Windows Server). The vulnerability is an Elevation of Privilege issue in the Console Driver, with local access required and low exploit complexity. Microsoft/MSRC entries (KB5004237, KB5004244, KB5004245) indicate security updates to addr...
CVE-2021-38629
CVE-2021-38629 relates to the Windows Ancillary Function Driver for WinSock Information Disclosure. Affected: Windows kernel/network stack component (AFD/WinSock). Underlying cause: information disclosure with network attack surface. CVSS3.1 base score 6.5 (medium), vector NETWORK, low attack com...
CVE-2021-38636
The CVE-2021-38636 entry refers to a Windows Redirected Drive Buffering SubSystem Driver Information Disclosure vulnerability. Affected software is Windows; the vulnerability affects the Redirected Drive Buffering SubSystem Driver (component/driver) and enables partial confidentiality impact via ...
CVE-2022-21870
Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2022-22043
CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...
CVE-2022-23296
Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.
CVE-2022-26915
CVE-2022-26915 is described as a Windows Secure Channel Denial of Service vulnerability. The CNVD entry notes the issue stems from Microsoft Windows’ handling of incoming error messages, enabling a DoS condition. Related entries (NVD/NVD-linked pages and Microsoft KBs) confirm the vulnerability a...
CVE-2022-30196
CVE-2022-30196 affects Windows Secure Channel (Schannel) and is categorized as a network-exploitable vulnerability with no user interaction. The base CVSSv3.1 score is 8.2 (High) with impact limited to confidentiality (Low) and availability (High); integrity is not affected. The issue is addresse...
CVE-2022-38015
Technical details about CVE-2022-38015 (Windows Hyper-V DoS) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD and related advisories.
CVE-2022-41054
Technical details about CVE-2022-41054 (affected product, root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from Microsoft or security advisories.
CVE-2022-41056
Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.
CVE-2022-41088
Technical details for CVE-2022-41088 are not provided in the connected documents. No affected product/component/version, root-cause, impact, or remediation details are given here; monitor official sources for updates.
CVE-2022-41093
Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.
CVE-2023-21820
Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2018-8308
CVE-2018-8308 is a Windows kernel elevation of privilege vulnerability caused by improper handling of memory objects. The issue enables a local attacker to escalate privileges by exploiting kernel memory handling weaknesses. Affected platforms include Windows 7, Windows Server 2008/2012 (and R2),...
CVE-2018-8449
CVE-2018-8449 is a Device Guard security feature bypass affecting Windows 10/Server 2016 where untrusted files bypass validation. Connected material details a complex attack chain targeting Protected Process Light (PPL) to achieve arbitrary code execution without admin privileges. The Google Proj...
CVE-2018-8554
CVE-2018-8554 is an elevation of privilege vulnerability in which DirectX mismanages memory objects. The initial CVE description indicates impact on Windows 10 (client) and Windows Server 2019/Windows 10 Server variants, with a local attack vector and low complexity. The connected sources (e.g., ...
CVE-2019-0551
CVE-2019-0551 is a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from an authenticated user on a guest OS, enabling code execution on the host. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and...
CVE-2019-0571
CVE-2019-0571 is a Windows Data Sharing Service elevation of privilege vulnerability affecting Windows 10, Windows Server 2016/2019, and related builds. The issue arises from improper handling of file operations within the Data Sharing Service, enabling a local attacker to gain elevated privilege...
CVE-2019-1157
The CVE-2019-1157 entry describes a remote code execution in the Windows Jet Database Engine due to improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to exploit this, enabling arbitrary code execution on a affected system. The vulnerability aff...
CVE-2020-0887
CVE-2020-0887 is a Windows Win32k elevation-of-privilege vulnerability in which the Win32k component fails to properly handle objects in memory. This can allow local code execution with kernel-level privileges if exploited. The description states it is distinct from CVE-2020-0788 and CVE-2020-087...
CVE-2020-0914
CVE-2020-0914 affects the Windows State Repository Service. The vulnerability is an Information Disclosure in which objects in memory are mishandled, potentially allowing a local attacker who runs a specially crafted application to obtain sensitive information and further compromise the system. M...
CVE-2020-1355
The CVE-2020-1355 entry maps to a Windows Font Driver Host memory-handling bug that can lead to remote code execution. Public sources describe the issue as memory mismanagement in the Font Driver Host, enabling an attacker to gain code execution on a vulnerable system. Microsoft’s advisory notes ...
CVE-2020-16902
CVE-2020-16902 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer fails to properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated privileges and gain full control (install/modify data, ...