2974 matches found
CVE-2018-0900
Technical details are not publicly available in the provided connected documents; monitor for updates.
CVE-2018-8140
CVE-2018-8140 (Cortana Elevation of Privilege) affects Windows 10 and Windows Server (server 1709/1803) where Cortana retrieves data from user input services without considering status, enabling local privilege escalation. Root cause: Cortana’s data handling allows execution of commands with elev...
CVE-2018-8339
Technical details about CVE-2018-8339 are not publicly provided in the connected documents. Available sources reiterate the elevated-privilege issue in Windows Installer but do not disclose affected versions, specific vulnerable components, exploit vectors, or remediation steps beyond general gui...
CVE-2019-0776
CVE-2019-0776 is a Windows win32k information disclosure vulnerability: the win32k component improperly provides kernel information, enabling local attackers with low privileges and no user interaction to potentially access confidential data. Affected software is Windows OS via the win32k subsyst...
CVE-2019-0905
CVE-2019-0905 describes a remote code execution vulnerability in the Windows Jet Database Engine, triggered when the engine improperly handles objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution on ...
CVE-2019-1454
CVE-2019-1454 affects the Windows User Profile Service (ProfSvc). The root cause is improper handling of symlinks, enabling elevation of privilege. Impact is local, with partial confidentiality/integrity/availability concerns stated; exploitation details are not provided in the connected document...
CVE-2020-0623
Technical details (affected products, versions, root cause, impact or fixes) for CVE-2020-0623 are not publicly provided in the connected documents. Monitor for updates from official advisories.
CVE-2020-0788
Technical details for CVE-2020-0788 are not publicly available in the provided connected documents; no root cause, impact, or patch specifics are included. Monitor for updates.
CVE-2020-1031
Technical details for CVE-2020-1031 are not publicly provided in the Connected Documents. The materials reference Windows DHCP and patches in general but do not specify affected products/versions, exploit details, or remediation for this CVE. Monitor for updates.
CVE-2020-1085
CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...
CVE-2020-1549
CVE-2020-1549 is the Windows CDP User Components Elevation of Privilege vulnerability. It stems from improper memory handling in Windows CDP User Components, enabling an attacker who already has code execution on the system to run a crafted application to elevate privileges. The issue is addresse...
CVE-2020-16959
CVE-2020-16959 is a Windows Back- up Engine elevation-of-privilege vulnerability. The connected records confirm the affected component as the Windows Backup Engine and describe a local elevation of privilege with low attack complexity and no user interaction required, yielding high impact to conf...
CVE-2021-1668
CVE-2021-1668 : Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2021-26891
CVE-2021-26891 is a Windows Container Execution Agent Elevation of Privilege vulnerability affecting Windows Server Containers. Project Zero analysis details multiple silo/registry/object-manager weaknesses that can be chained to escape a container from a non‑administrator. Core issues include: (...
CVE-2021-28321
CVE-2021-28321 is a elevation-of-privilege issue in the Diagnostics Hub Standard Collector Service. The NVD entry lists a local, low-attack‑complexity vector with no authentication, achieving high impact on confidentiality, integrity, and availability (CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:...
CVE-2021-34493
CVE-2021-34493 is a Windows Partition Management Driver Elevation of Privilege vulnerability. The connected documents describe a local, privilege-escalation flaw in the Partition Management Driver that can affect Windows client/server platforms. CVSS data included with the NVD entry shows CVSS‑3....
CVE-2021-36966
Technical details about CVE-2021-36966 (affected components, root cause, impact, or remediation) are not provided in the connected documents. Monitor Microsoft/MSRC advisories and NVD/NVD-linked references for concrete remediation information.
CVE-2021-36969
Technical details for CVE-2021-36969 are not publicly available in the provided documents. Connected sources reference the CVE and vulnerability class but do not specify affected product versions, root cause, exploitability, or fixes. Monitor for updates.
CVE-2021-40488
CVE-2021-40488 corresponds to a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSS details show a LOCAL attack with LOW attack complexity and NO authentication required, potentially impacting confidentiality, integrity, and availability (C/C/I/A = HIGH). The vulnerability is...
CVE-2022-21862
Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2022-22031
Technical details about CVE-2022-22031 (Windows Credential Guard domain-joined public key privilege elevation) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or fixes are specified here; monitor for updates from the cited sources.
CVE-2022-22043
CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...
CVE-2022-37992
Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.
CVE-2022-41056
Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.
CVE-2022-41102
Technical details for CVE-2022-41102 are not provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor official sources for updates.
CVE-2016-0174
CVE-2016-0174 describes a local privilege escalation in Windows kernel-mode drivers (Win32k) affecting multiple Windows family versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/Gold). The vulnerability allows a locally authenticated attacker to gain hig...
CVE-2016-3237
CVE-2016-3237 is a Kerberos authentication bypass in multiple Windows versions where domain password changes may fall back to NTLM, enabling MITM style bypass of authentication. Affected: Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold/R...
CVE-2017-0181
CVE-2017-0181 affects the Windows Hyper-V Network Switch on Windows 10/Windows Server 2016 hosts. The vulnerability is a remote code execution caused by improper validation of input from the guest OS, requiring an authenticated user on the guest. Connected sources confirm Hyper-V input validation...
CVE-2018-0813
Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2018-0895
Technical details for CVE-2018-0895 are not provided in the connected documents. Public information in this dataset does not specify affected products/versions/impact. Monitor for updates.
CVE-2018-0956
CVE-2018-0956 is a DoS vulnerability in Windows HTTP.sys’s HTTP/2 stack caused by improper parsing of crafted HTTP/2 requests. The affected product surface is Windows Server 2016 and Windows 10/Windows Server 2016-era builds that include HTTP.sys. The impact is denial of service (availability) wi...
CVE-2018-8343
CVE-2018-8343 describes a local elevation-of-privilege flaw in the Windows Network Driver Interface Specification (NDIS). The vulnerability arises when ndis.sys does not validate the length of a destination buffer before copying memory, enabling privilege escalation on affected Windows versions (...
CVE-2018-8443
Technical details about CVE-2018-8443 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are described. Monitor for updates from official sources.
CVE-2019-0603
CVE-2019-0603 impacts Windows Deployment Services TFTP Server. The vulnerability stems from improper handling of objects in memory within WDSTFTP, allowing a remote attacker to craft a request that executes arbitrary code with elevated privileges. The available connected documents confirm this re...
CVE-2019-0718
Microsoft Hyper-V Denial of Service vulnerability CVE-2019-0718 arises when the Hyper-V Network Switch fails to validate input from a privileged user inside a guest VM, allowing a crafted application running on the guest to crash the host server. The vulnerability affects the Hyper-V Network Swit...
CVE-2019-0899
The CVE-2019-0899 entry concerns a remote code execution vulnerability in the Windows Jet Database Engine. Connected CNVD records describe a buffer overflow/heap overflow in the Jet DB Engine when memory boundaries are not properly validated, enabling exploitation through in-memory operations. Th...
CVE-2019-1128
Technical details about CVE-2019-1128 (affected component, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2019-1157
The CVE-2019-1157 entry describes a remote code execution in the Windows Jet Database Engine due to improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to exploit this, enabling arbitrary code execution on a affected system. The vulnerability aff...
CVE-2020-0620
Technical details for CVE-2020-0620 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0643
The CVE-2020-0643 entry concerns a information-disclosure vulnerability in Windows GDI+ where memory objects are mishandled. Connected CNVD-2020-04849 describes a Microsoft Windows Graphics Device Interface Plus information disclosure vulnerability with the same affected component; it states that...
CVE-2020-0657
CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...
CVE-2020-0913
CVE-2020-0913 is a Windows kernel elevation-of-privilege vulnerability. The initial description states an attacker could exploit improper handling of memory-resident objects to gain higher privileges. Connected sources corroborate a Windows kernel EoP class issue tied to memory object handling, w...
CVE-2020-1520
CNVD-2020-49363 and CVE-2020-1520 describe a Windows Remote Code Execution flaw in the Windows Font Driver Host caused by improper memory handling. Affected: Windows Font Driver Host on Windows/Windows Server. Impact: remote code execution with attacker gaining code execution on the victim. Remed...
CVE-2020-1522
CVE-2020-1522 is a Windows Elevation of Privilege vulnerability in the Windows Speech Runtime caused by improper memory handling. The human-authored description states that an attacker who already has code execution on the victim machine could run a crafted application to elevate privileges. Micr...
CVE-2020-16909
CVE-2020-16909 describes a local privilege-escalation flaw in Windows Error Reporting (WER) that arises when WER handles and executes files. An attacker could exploit a crafted application to gain higher privileges and access sensitive information and system functionality. The NVD entry notes a s...
CVE-2020-17095
CVE-2020-17095 is a Windows Hyper-V remote code execution vulnerability. Microsoft documentation ties it to Hyper-V RCE and lists patches across multiple Windows builds (e.g., KB4592438, KB4592440, KB4592449). CVSS/metrics show high/critical severity; exploitation in the wild is not indicated in ...
CVE-2021-1646
CVE-2021-1646 is a Windows WLAN Service Elevation of Privilege vulnerability. Connected sources identify it as affecting the Windows WLAN Service component and root cause-related access issues enabling local elevation of privileges (CVSS 3.1/2.0). Exploitation status is not detailed in the provid...
CVE-2021-24088
CVE-2021-24088 is a Windows Local Spooler RCE vulnerability. The issue stems from a bug in EnumJobsInLocalQueue where an integer overflow allows a crafted buffer to overwrite metadata and adjacent heap allocations; this can enable arbitrary data writes and potential code execution. Affected compo...