2974 matches found
CVE-2021-38629
CVE-2021-38629 relates to the Windows Ancillary Function Driver for WinSock Information Disclosure. Affected: Windows kernel/network stack component (AFD/WinSock). Underlying cause: information disclosure with network attack surface. CVSS3.1 base score 6.5 (medium), vector NETWORK, low attack com...
CVE-2019-1147
CVE-2019-1147 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of objects in memory. An attacker could trigger code execution by enticing a user to open a specially crafted file; impact is high (arbitrary code execution). The available documents ind...
CVE-2019-1159
CVE-2019-1159 is a Windows kernel elevation-of-privilege vulnerability caused by improper handling of objects in memory. An attacker who can log on could execute a crafted app to run code in kernel mode, potentially installing programs, viewing/changing/deleting data, or creating accounts with fu...
CVE-2020-0657
CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...
CVE-2020-0953
CVE-2020-0953 is described as a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of memory objects. It affects Microsoft Windows/Windows Server Jet Database Engine components and, per CNVD entries, could be triggered by a user opening a specially ...
CVE-2020-16902
CVE-2020-16902 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer fails to properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated privileges and gain full control (install/modify data, ...
CVE-2020-16959
CVE-2020-16959 is a Windows Back- up Engine elevation-of-privilege vulnerability. The connected records confirm the affected component as the Windows Backup Engine and describe a local elevation of privilege with low attack complexity and no user interaction required, yielding high impact to conf...
CVE-2021-24077
CVE-2021-24077 is a Windows Fax Service Remote Code Execution vulnerability. The NVD entry lists it with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5, indicating a NETWORK attack vector, no authentication, and no user interaction required; impact is high on Confidentiality, Integr...
CVE-2021-33763
CVE-2021-33763 affects Windows Remote Access Connection Manager (RasMan) and is an information disclosure vulnerability in the Windows Remote Access Connection Manager service for Windows/Windows Server. It allows a local attacker to disclose information (confidentiality impact high per CVSS), wi...
CVE-2021-40455
Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.
CVE-2021-42280
CVE-2021-42280 is tied to the Windows Feedback Hub Elevation of Privilege vulnerability. Affected software is Windows Feedback Hub (Windows OS). The provided documents describe the vulnerability as local, with low attack complexity and high impact on confidentiality, integrity, and availability (...
CVE-2022-21961
CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...
CVE-2022-22043
CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...
CVE-2022-38015
Technical details about CVE-2022-38015 (Windows Hyper-V DoS) are not publicly provided in the supplied documents. Monitor for updates from Microsoft/NVD and related advisories.
CVE-2022-38021
CVE-2022-38021 corresponds to a local privilege escalation vulnerability in Microsoft Windows Connected User Experiences and Telemetry. The connected documents identify the affected surface as the Windows component “Connected User Experiences and Telemetry” and classify the impact as obtaining in...
CVE-2022-41056
Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.
CVE-2022-41090
Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.
CVE-2022-44680
CVE-2022-44680 is a Windows Graphics Component Elevation of Privilege vulnerability. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local, low-complexity exploit requiring low privileges with no user interaction, capable of compromising confidentiality, integrity, and avail...
CVE-2023-36912
Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-0077
CVE-2017-0077 is a Windows kernel vulnerability described as the Win32k Information Disclosure Vulnerability. It affects multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows 10 releases up to 1703 and Windows Server 2016, among others) and is exploitable by a local, authenticated attack...
CVE-2018-0822
CVE-2018-0822 is an elevation-of-privilege vulnerability in NTFS on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by how NTFS handles objects (Global Reparse Point). Impact: local privilege escalation with high severity (per CVSS v3). Public exploit exists (exploi...
CVE-2018-0970
Technical details for CVE-2018-0970 are not provided in the supplied documents. Public disclosure, affected products, and remediation remain unclear; monitor for updates.
CVE-2018-8136
CVE-2018-8136 is described as a remote code execution vulnerability in how Windows handles objects in memory, affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 and Windows 10 servers. The con...
CVE-2018-8140
CVE-2018-8140 (Cortana Elevation of Privilege) affects Windows 10 and Windows Server (server 1709/1803) where Cortana retrieves data from user input services without considering status, enabling local privilege escalation. Root cause: Cortana’s data handling allows execution of commands with elev...
CVE-2018-8443
Technical details about CVE-2018-8443 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are described. Monitor for updates from official sources.
CVE-2018-8553
CVE-2018-8553 is a remote code execution vulnerability in how Microsoft Graphics Components handle memory objects. The flaw, affecting multiple Windows versions (Windows 7, Windows Server 2008/2012 family, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2016/2012 R2), stems from memor...
CVE-2019-0551
CVE-2019-0551 is a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from an authenticated user on a guest OS, enabling code execution on the host. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and...
CVE-2019-0905
CVE-2019-0905 describes a remote code execution vulnerability in the Windows Jet Database Engine, triggered when the engine improperly handles objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution on ...
CVE-2019-0907
The CVE-2019-0907 issue concerns the Windows Jet Database Engine and a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could entice a user to open a specially crafted file to trigger arbitrary code execution on the victim’s system. Microsoft’s upd...
CVE-2019-1010
Technical details about CVE-2019-1010 are not publicly available in the provided connected documents. Monitor for updates; current sources only reference Windows GDI information disclosure and MS patching without affected versions or exploit specifics.
CVE-2020-0643
The CVE-2020-0643 entry concerns a information-disclosure vulnerability in Windows GDI+ where memory objects are mishandled. Connected CNVD-2020-04849 describes a Microsoft Windows Graphics Device Interface Plus information disclosure vulnerability with the same affected component; it states that...
CVE-2020-0913
CVE-2020-0913 is a Windows kernel elevation-of-privilege vulnerability. The initial description states an attacker could exploit improper handling of memory-resident objects to gain higher privileges. Connected sources corroborate a Windows kernel EoP class issue tied to memory object handling, w...
CVE-2020-0914
CVE-2020-0914 affects the Windows State Repository Service. The vulnerability is an Information Disclosure in which objects in memory are mishandled, potentially allowing a local attacker who runs a specially crafted application to obtain sensitive information and further compromise the system. M...
CVE-2020-1031
Technical details for CVE-2020-1031 are not publicly provided in the Connected Documents. The materials reference Windows DHCP and patches in general but do not specify affected products/versions, exploit details, or remediation for this CVE. Monitor for updates.
CVE-2020-1085
CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...
CVE-2020-1251
CVE-2020-1251 corresponds to a Windows Win32k elevation of privilege vulnerability. The connected sources confirm the flaw resides in the Windows kernel-mode driver’s handling of memory objects, enabling local privilege escalation. Affected component: Win32k (kernel-mode driver) in Windows; root ...
CVE-2020-17095
CVE-2020-17095 is a Windows Hyper-V remote code execution vulnerability. Microsoft documentation ties it to Hyper-V RCE and lists patches across multiple Windows builds (e.g., KB4592438, KB4592440, KB4592449). CVSS/metrics show high/critical severity; exploitation in the wild is not indicated in ...
CVE-2021-1726
CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...
CVE-2021-24088
CVE-2021-24088 is a Windows Local Spooler RCE vulnerability. The issue stems from a bug in EnumJobsInLocalQueue where an integer overflow allows a crafted buffer to overwrite metadata and adjacent heap allocations; this can enable arbitrary data writes and potential code execution. Affected compo...
CVE-2021-31185
Technical details about CVE-2021-31185 are not publicly available in the provided connected documents. No specific affected components, root cause, or remediation details are disclosed here. Monitor for updates from official advisories.
CVE-2021-31205
CVE-2021-31205 is a Windows SMB Client security feature bypass vulnerability. Affects Windows SMB Client components on Windows 10 (various 2004/20H2 builds) and related Windows targets; root cause is a security feature bypass in the SMB client that can allow bypassing security restrictions when t...
CVE-2021-31974
Technical details for CVE-2021-31974 are not publicly provided in the supplied documents. Monitor official advisories and vulnerability feeds for updates.
CVE-2021-33788
Technical details about CVE-2021-33788 are not provided in the supplied documents. Monitor for updated disclosures and CVE metadata.
CVE-2021-36969
Technical details for CVE-2021-36969 are not publicly available in the provided documents. Connected sources reference the CVE and vulnerability class but do not specify affected product versions, root cause, exploitability, or fixes. Monitor for updates.
CVE-2021-38635
CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...
CVE-2021-41343
Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.
CVE-2022-21870
Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.
CVE-2022-24544
Technical details for CVE-2022-24544 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-38051
CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...