2974 matches found
CVE-2022-26807
Technical details for CVE-2022-26807 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2022-29103
Technical details for CVE-2022-29103 are not publicly provided in the supplied documents. The connected items discuss Windows update KB entries and security issues, but none specify affected products/versions or remediation for this CVE.
CVE-2022-34711
Technical details about CVE-2022-34711 are not publicly available in the provided connected documents. No explicit affected product/component/versions or remediation are stated here. Monitor for updates from official sources.
CVE-2022-37957
Technical details about CVE-2022-37957 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally as a Windows Kernel Elevation of Privilege issue but do not include affected product versions, root cause, CVSS specifics beyond the CVSS score in ...
CVE-2022-44675
Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.
CVE-2023-21699
Technical details for CVE-2023-21699 are not provided in the connected documents. The initial description only notes an iSNS information disclosure vulnerability. Monitor for updates as more details become available.
CVE-2016-0176
CVE-2016-0176 is a Windows privilege-escalation flaw in the DirectX Graphics Kernel Subsystem (dxgkrnl.sys). It affects multiple Windows versions (7 SP1, Server 2008 R2 SP1, 8.1, Server 2012 R2/Gold, RT 8.1, 10 variants). Root cause: improper handling of memory objects in the DirectX kernel subsy...
CVE-2017-0099
CVE-2017-0099 pertains to Hyper-V in Microsoft Windows (lists affected: Windows Vista SP2, Server 2008 SP2/2008 R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows 10 Gold, 1511, 1607, Server 2016). The issue allows guest OS users, running as VMs, to cause a denial-of-service via a craft...
CVE-2018-0827
CVE-2018-0827 affects Windows Scripting Host (WSH) on Windows 10 versions 1703/1709 and Windows Server 1709. The vulnerability is a Device Guard/UMCI security feature bypass caused by how objects are handled in memory, enabling a local attacker who has access to run a malicious program to bypass ...
CVE-2018-0843
Technical details for CVE-2018-0843 are not publicly available in the provided documents; monitor for updates.
CVE-2019-1108
Summary: CVE-2019-1108 is a vulnerability in the Windows Remote Desktop Protocol (RDP) Client that leads to information disclosure through memory contents. The connected exploit document describes an attacker connecting remotely to an affected system and running a specially crafted application to...
CVE-2019-1245
CVE-2019-1245 is a DirectWrite information disclosure vulnerability. The provided documents confirm a memory disclosure issue in DirectWrite, but do not specify affected product versions, root cause details beyond a memory disclosure, or concrete remediation steps. A CIRCL sighting notes exploita...
CVE-2020-0810
CVE-2020-0810 affects the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector on Windows. The root cause is an elevation of privilege vulnerability allowing file creation in arbitrary locations, exploitable by a logged-on attacker who runs a crafted application; this could...
CVE-2020-0814
CVE-2020-0814 describes an elevation of privilege in Windows Installer caused by how Windows Installer handles certain filesystem operations. An attacker would need unprivileged code execution on the victim to exploit this local vulnerability. The CVSS data (3.1) reports a HIGH base score of 7.8 ...
CVE-2020-0822
CVE-2020-0822 is an Elevation of Privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. Evidence from security feeds (e.g., Tenable plugin for KB4541506/KB4541504) confirms the issue is addressed by Microsoft security updates that fix how th...
CVE-2020-0956
Technical details for CVE-2020-0956 are not publicly available in the provided connected documents; monitor for updates.
CVE-2020-1175
CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...
CVE-2020-1384
CVE-2020-1384 is an elevation-of-privilege issue in the Windows Cryptography Next Generation (CNG) Key Isolation Service where memory is not handled correctly. The vulnerability enables local attackers to elevate privileges by exploiting the memory handling defect. This CVE is related to CVE-2020...
CVE-2020-1473
CVE-2020-1473 : A remote code execution vulnerability in the Windows Jet Database Engine arises from improper handling of objects in memory. An attacker could trigger arbitrary code execution by enticing a user to open a specially crafted file. Mitigation is provided by the update that fixes the ...
CVE-2020-1517
CVE-2020-1517 is an Elevation of Privilege vulnerability in Windows File Server Resource Management Service caused by improper memory handling. An attacker who can execute code on a target system may leverage this to elevate privileges locally. The NVD description states exploitation requires ini...
CVE-2020-1528
CVE-2020-1528 concerns an elevation of privilege in Windows related to the Windows Radio Manager API improperly handling memory. The vulnerability requires an attacker to gain code execution on the victim and then run a crafted application to elevate privileges; Microsoft’s security update fixes ...
CVE-2020-16972
CVE-2020-16972 describes an elevation of privilege in the Windows Backup Service caused by improper handling of file operations. An attacker who already has execution on the victim system could run a crafted application to elevate privileges. The fixed behavior is implemented via a security updat...
CVE-2021-1665
Technical details for CVE-2021-1665 are not provided in the connected documents. The provided sources reference multiple CVEs and general vulnerability contexts but do not disclose affected products, root cause, impact, or remediation for this specific CVE. Monitor for updates.
CVE-2021-26867
CVE-2021-26867 is a Windows Hyper-V remote code execution vulnerability. Public sources indicate the issue affects Hyper-V components under Windows Server/Windows client environments and is described with high/critical impact. The NCSC dossier explicitly notes that exploitation is possible for Hy...
CVE-2021-27092
CVE-2021-27092: Azure AD Web Sign-in Security Feature Bypass Vulnerability. The connected data confirms a concrete vulnerability in Azure Active Directory web sign-in, enabling arbitrary browsing via federated endpoints. CVSS metrics show a high to critical impact (CVSSv3.1: 9.8, NETWORK, LOW exp...
CVE-2021-31975
No technical details (affected products, root cause, or fixes) for CVE-2021-31975 are provided in the supplied documents. Monitor for updates from official advisories and vendor advisories.
CVE-2021-33782
Technical details for CVE-2021-33782 are not publicly available in the provided documents. No confirmed impact or remediation are described here; monitor connected sources for updates.
CVE-2021-38662
Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-41339
Technical details about CVE-2021-41339 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2022-21892
CVE-2022-21892 concerns Windows Resilient File System (ReFS). The initial entry identifies a Remote Code Execution Vulnerability in ReFS, with CVSS metrics showing a base score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) per NVD and a Microsoft 3.1 vector (CVSS:3.1) indicating physical access, low attack...
CVE-2022-21904
Technical details for CVE-2022-21904 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2022-26794
Technical details for CVE-2022-26794 are not publicly provided in the supplied documents. No specifics on affected components, root cause, impact, or fixes are present here. Monitor for updates in connected sources.
CVE-2022-34725
Technical details about CVE-2022-34725 are not publicly provided in the supplied documents. No affected products, vulnerable components, exploit information, or remediation specifics are present. Monitor for official disclosures or updates from vendors.
CVE-2022-41097
Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.
CVE-2018-0957
Technical details about CVE-2018-0957 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, impact, and remediation.
CVE-2018-8127
CVE-2018-8127 is a Windows kernel information-disclosure vulnerability affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and server editions). Root cause: the kernel improperly handles objects in memory, enabling information leakage. The connected records do not provide concrete expl...
CVE-2018-8129
Technical details about CVE-2018-8129 are not publicly available in the provided documents; no affected products, impact, or remediation are described beyond the general description. Monitor for updates.
CVE-2018-8307
CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...
CVE-2018-8320
Technical details (affected components, root cause, fixes) for CVE-2018-8320 are not provided in the connected documents. Initial description notes a Windows DNS Global Blocklist feature bypass but lacks version-specific impact or remediation information.
CVE-2018-8419
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2018-8471
CVE-2018-8471 describes a local elevation-of-privilege vulnerability in the Microsoft RemoteFX Virtual GPU miniport driver. The issue arises from how the driver handles objects in memory, enabling an attacker with local access to execute code with elevated privileges on affected Windows versions ...
CVE-2019-0692
CVE-2019-0692 describes an elevation-of-privilege vulnerability in Windows Subsystem for Linux caused by an integer overflow. The issue enables local attackers to potentially escalate privileges within affected Windows environments. The initial entry notes the vulnerability and distinguishes it f...
CVE-2019-0696
CVE-2019-0696 is a Windows kernel local elevation-of-privilege vulnerability. Affected: Windows kernel; root cause described as improper handling of objects in memory. Impact: attacker gains kernel-level privileges locally (no user interaction required per CVSS). Exploitation status and exact pat...
CVE-2019-0711
The CVE-2019-0711 vulnerability affects Microsoft Hyper-V and involves denial-of-service when a host server fails to properly validate input from a privileged guest OS user. An attacker with a privileged guest account can run a crafted application inside a VM to crash the host. The vulnerability ...
CVE-2019-0898
Affected software: Windows Jet Database Engine (in Microsoft Windows and Windows Server). Vulnerability type & cause: Multiple connected CNVD entries describe a buffer overflow in the Jet Database Engine, occurring when memory operations do not properly validate data boundaries, leading to incorr...
CVE-2019-1067
CVE-2019-1067 is described as a Windows kernel elevation of privilege vulnerability where the kernel fails to properly handle objects in memory. The provided connected documents do not specify a product/vendor/version, root cause details beyond the general memory handling issue, or a concrete fix...
CVE-2020-0755
Technical details for CVE-2020-0755 are not publicly provided in the connected documents. Monitor for updates from official advisories, as no concrete technical specifics (affected products, impact, or fixes) are present here.
CVE-2020-1000
Technical details for CVE-2020-1000 are not publicly provided in the connected documents you supplied. Monitor for updates.
CVE-2020-1393
Summary: CVE-2020-1393 is an elevation of privilege in Windows Diagnostics Hub related to the Standard Collector Service failing to sanitize input, causing insecure library loading. The root cause is input validation/sanitization weaknesses leading to loading of untrusted libraries. This CVE is r...