2974 matches found
CVE-2020-0782
Technical details for CVE-2020-0782 are not publicly available in the provided documents. The initial description gives a high-level remediation but no product/version/root-cause or exploit specifics. Monitor for updates from official advisories.
CVE-2020-0956
Technical details for CVE-2020-0956 are not publicly available in the provided connected documents; monitor for updates.
CVE-2020-1201
CVE-2020-1201 is an elevation-of-privilege vulnerability in Windows Now Playing Session Manager where memory objects are mishandled. Exploitation requires local access (authenticated user) and could allow the attacker to run code with elevated privileges by logging onto the system and executing a...
CVE-2020-1384
CVE-2020-1384 is an elevation-of-privilege issue in the Windows Cryptography Next Generation (CNG) Key Isolation Service where memory is not handled correctly. The vulnerability enables local attackers to elevate privileges by exploiting the memory handling defect. This CVE is related to CVE-2020...
CVE-2020-1507
Technical details such as affected products, versions, root cause, and fixes are not provided in the supplied documents. Monitor for public updates from official advisories to obtain concrete vulnerability specifics.
CVE-2020-1517
CVE-2020-1517 is an Elevation of Privilege vulnerability in Windows File Server Resource Management Service caused by improper memory handling. An attacker who can execute code on a target system may leverage this to elevate privileges locally. The NVD description states exploitation requires ini...
CVE-2020-1552
CVE-2020-1552 (Windows Work Folder Service Elevation of Privilege) Affects Windows Work Folders Service. The vulnerability arises because the service improperly handles file operations, allowing an attacker to run code with elevated privileges by executing a specially crafted application on the v...
CVE-2020-1560
CVE-2020-1560 is a remote code execution in Microsoft Windows Codecs Library. It arises from how the Windows Codecs Library handles objects in memory, allowing an unauthenticated attacker to craft an image file that, when processed, could execute arbitrary code on the affected system. Public sour...
CVE-2020-1565
CVE-2020-1565 is a Windows elevation-of-privilege flaw: when the Public Account Pictures folder incorrectly handles junctions, an attacker who already has code execution on the target could exploit a crafted application to gain higher privileges. The core issue, per connected sources, is how Wind...
CVE-2020-1579
CVE-2020-1579 affects the Windows Function Discovery SSDP Provider. Root cause: improper memory handling leading to privilege elevation. Exploitation requires local code execution to run a crafted app and elevate rights. The security update fixes memory handling in the provider; no further exploi...
CVE-2020-16963
CVE-2020-16963 is a Windows Backup Engine elevation-of-privilege vulnerability with a CVSSv3 base score of 7.8 (LOCAL, LOW attack complexity, Privileges Required: LOW, NONE user interaction). The provided documents do not include explicit technical details on the root cause or affected components...
CVE-2020-17088
CVE-2020-17088 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The connected CNVD entry explicitly attributes an EoP issue to the CLFS component in Microsoft Windows/Windows Server, indicating a local attacker could exploit it to compromise confident...
CVE-2020-17134
CVE-2020-17134 concerns the Windows Cloud Files Mini Filter Driver (cldflt) and was discussed in Project Zero material describing file-system filter drivers. The connected sources confirm this as a Windows mini-filter elevation of privilege issue affecting cloud/file-system filter drivers and not...
CVE-2021-26867
CVE-2021-26867 is a Windows Hyper-V remote code execution vulnerability. Public sources indicate the issue affects Hyper-V components under Windows Server/Windows client environments and is described with high/critical impact. The NCSC dossier explicitly notes that exploitation is possible for Hy...
CVE-2021-28343
Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.
CVE-2021-28357
CVE-2021-28357 is a Windows RPC Runtime Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.8 (network, low privileges required, no user interaction) with HIGH impact to confidentiality, integrity, and availability. The vulnerability affects the Windows RPC Runtime and is addressed ...
CVE-2021-41340
Technical details for CVE-2021-41340 are not publicly provided in the connected documents. Monitor for updates as only high-level description is available from initial and related sources.
CVE-2021-41378
CVE-2021-41378 corresponds to a Windows NTFS remote code execution vulnerability. The CNVD entry describes a Windows NTFS RCE vulnerability, and NVD echoes a Windows NTFS RCE description for this CVE. Public details in connected sources do not specify the affected product version(s) or root cause...
CVE-2022-21834
Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.
CVE-2022-21924
CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...
CVE-2022-21959
Technical details about CVE-2022-21959 are not publicly provided in the supplied documents. Monitor for updates from NVD and vendor advisories.
CVE-2022-34730
Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.
CVE-2023-21700
Technical details for CVE-2023-21700 are not publicly available in the provided documents. No concrete affected products, root cause, or remediation are confirmed here. Monitor official sources for updates and published fixes.
CVE-2023-36905
CVE-2023-36905 affects Windows Wireless Wide Area Network Service (WwanSvc). The NVD entry shows a High-severity information disclosure (CVSS 3.1 base 7.5) with network attack vector and no user interaction; confidentiality impact is High. Connected docs reference Microsoft MSRC/KB guidance but d...
CVE-2018-0880
CVE-2018-0880 affects Windows Desktop Bridge by improper handling of the virtual registry, enabling Privilege Escalation on Windows 10 v1607/v1703/v1709 and corresponding Server SKUs. Connected sources document public PoCs and indicate the fix (MSRC case 42755) did not cover all variants, with re...
CVE-2018-8208
The CVE-2018-8208 entry describes an elevation-of-privilege vulnerability in Windows Desktop Bridge where the virtual registry is not managed correctly. Affected products include Windows Server 2016 and Windows 10 variants. The root cause is related to Desktop Bridge’s handling of the virtual reg...
CVE-2018-8333
CVE-2018-8333 is a local Elevation of Privilege in Windows Filter Manager caused by improper handling of memory objects. Affected: Windows 7, Windows 8.1, Windows 10 and various Windows Server editions listed in the CVE entry. Root cause is mismanagement of in-memory objects within Filter Manager...
CVE-2019-0573
CVE-2019-0573 describes a local elevation-of-privilege vulnerability in the Windows Data Sharing Service. Connected sources indicate affected OS family includes Windows 10/Server 2016/2019, with a local attacker able to exploit and gain elevated privileges. The CVE entry links to exploit-db explo...
CVE-2019-0894
CVE-2019-0894 concerns the Windows Jet Database Engine remote code execution caused by improper in-memory handling (memory boundaries) in Jet DB. Connected CNVD entries describe a related class of vulnerabilities in the Windows Jet Database Engine: buffer overflow/heap overflow arising when memor...
CVE-2019-0909
CVE-2019-0909 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to execute arbitrary code with the user’s privileges. Impact is reported as high (C/H/I/A). Remediation...
CVE-2019-1245
CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...
CVE-2019-1318
CVE-2019-1318 corresponds to a TLS spoofing issue affecting Windows where TLS sessions without Extended Master Secret (EMS) can be exploited via man‑in‑the‑middle scenarios. Connected sources describe the vulnerability as a spoofing vulnerability in TLS when EMS is not used, with impact on confid...
CVE-2020-0707
CVE-2020-0707 is a Windows IME privilege-elevation vulnerability arising from improper memory handling in Windows IME. The issue enables local privilege escalation when an attacker gains execution on the target system and runs a specially crafted application. Connected sources corroborate the Win...
CVE-2020-0814
CVE-2020-0814 describes an elevation of privilege in Windows Installer caused by how Windows Installer handles certain filesystem operations. An attacker would need unprivileged code execution on the victim to exploit this local vulnerability. The CVSS data (3.1) reports a HIGH base score of 7.8 ...
CVE-2020-0959
CVE-2020-0959 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects in the Jet DB Engine. The issue can be triggered by processing crafted files that lead to arbitrary code execution with the attacker’s context. Public sources (CNVD fam...
CVE-2020-1484
CVE-2020-1484 is an elevation-of-privilege vulnerability in the Windows Work Folders Service caused by improper handling of memory. An attacker would need to gain execution on the victim system, then run a crafted application to elevate privileges. The vulnerability is addressed by a security upd...
CVE-2020-1539
CVE-2020-1539 is an Elevation of Privilege vulnerability in Windows Backup Engine caused by incorrect memory handling. An attacker who can execute code locally could exploit this by running a crafted program to elevate privileges. Microsoft’s security update addresses the issue by correcting how ...
CVE-2020-1540
CVE-2020-1540 is an elevation-of-privilege issue in Windows Backup Engine caused by improper memory handling. The CNVD entry explicitly notes a memory-handling root cause and that exploitation would require prior execution on the target. Both the NVD entry and Microsoft advisories indicate that a...
CVE-2020-16972
CVE-2020-16972 describes an elevation of privilege in the Windows Backup Service caused by improper handling of file operations. An attacker who already has execution on the victim system could run a crafted application to elevate privileges. The fixed behavior is implemented via a security updat...
CVE-2021-1706
Technical details for CVE-2021-1706 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from authoritative sources.
CVE-2021-1709
Technical details (affected component, root cause, impact, or fixes) for CVE-2021-1709 are not provided in the supplied documents. Monitor for further updates from official advisories and vendors.
CVE-2021-27095
Technical details about CVE-2021-27095 are not publicly provided in the connected documents. The materials reference the vulnerability only as Windows Media Video Decoder Remote Code Execution without specific affected products, versions, or fixes.
CVE-2021-28313
Technical details about CVE-2021-28313 are not publicly provided in the supplied documents. Monitor for updates from NVD, MSRC, and vendor advisories for affected components and fixes.
CVE-2021-28358
Technical details for CVE-2021-28358 are not provided in the given documents. Monitoring updates is recommended as no affected products, root cause, impact, or remediation are stated here.
CVE-2021-31954
CVE-2021-31954 is a Windows CLFS driver elevation-of-privilege vulnerability. The affected component is the Windows Common Log File System Driver, and the CVSS vectors indicate LOCAL attack vector with LOW attack complexity and privileges required (LOW), no user interaction, and total impact on c...
CVE-2021-33743
Technical details about CVE-2021-33743 are not publicly provided in the supplied documents; no concrete affected versions, root cause, or fixes are present. Monitor for updates.
CVE-2021-34513
CVE-2021-34513 corresponds to a Microsoft Windows Storage Spaces Controller elevation of privilege vulnerability. Connected sources confirm the issue resides in the Storage Spaces Controller component and can yield total/confidentiality/privilege impact as described by CVSS metrics (LOCAL, LOW at...
CVE-2021-40443
Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.