2974 matches found
CVE-2021-28343
Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.
CVE-2021-33774
CVE-2021-33774 is a Windows Event Tracing elevation-of-privilege vulnerability in Microsoft Windows/Windows Server. Connected sources confirm the flaw resides in Event Tracing and can yield increased privileges, with local attack prerequisites (no user interaction) per CVSS vectors cited in publi...
CVE-2022-21860
CVE-2022-21860 is a Windows vulnerability described as a Windows AppContracts API Server Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH impact on confidentiality, integrity, and availability, and requires LOW privileges and no user ...
CVE-2022-21876
Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.
CVE-2022-22712
CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...
CVE-2022-29125
Technical details (affected product/version, root cause, exploit info, or patch specifics) are not provided in the connected documents for CVE-2022-29125. Monitor for updates.
CVE-2022-35770
CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...
CVE-2022-35831
CVE-2022-35831 affects the Windows Remote Access Connection Manager and is described as an Information Disclosure vulnerability. The connected data provides technical details: affected component is the Remote Access Connection Manager; root cause is an information disclosure fault; impact is Conf...
CVE-2022-37954
CVE-2022-37954 is a Elevation of Privilege vulnerability in the DirectX Graphics Kernel component of Windows. The initial CVSSv3.1 data indicates Local exploitability with Low attack complexity and Low privileges required, yielding a high base score of 7.8 (C:H, I:H, A:H). The vulnerability affec...
CVE-2022-41055
Technical details about CVE-2022-41055 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from the vendor and vulnerability feeds.
CVE-2023-36913
Technical details about CVE-2023-36913 are not publicly provided in the supplied documents. No specific affected products, root cause, or remediation are described here. Monitor for updates as new information may be released.
CVE-2016-0169
CVE-2016-0169 is a Windows Graphics Component Information Disclosure vulnerability in GDI across Windows Vista through Windows 10 (various editions). The issue arises from improper disclosure of memory contents via a crafted document, enabling remote information leakage. Public evidence includes ...
CVE-2016-3302
CVE-2016-3302 is a Windows lock screen elevation-of-privilege vulnerability. Affected products include Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (Gold, 1511, 1607). The issue arises when the Windows lock screen improperly loads web content, enabling a physically proximat...
CVE-2017-0193
CVE-2017-0193 affects Hyper-V instruction emulation in Microsoft Windows, enabling a local attacker to escalate privileges inside a guest VM due to insufficient enforcement of privilege levels in Hypervisor Code Integrity. Affected scope includes Windows Server 2008 R2/2012, Windows 7/8.1, Window...
CVE-2017-11779
CVE-2017-11779 concerns a vulnerability in the Windows DNSAPI.dll within the DNSAPI component of Microsoft Windows. A heap-based buffer overflow in the handling/validation of NSEC3 records (triggered by malicious DNS responses) could allow a remote attacker to execute arbitrary code in the contex...
CVE-2018-0821
CVE-2018-0821 is a local elevation-of-privilege vulnerability in Windows AppContainer affecting Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server (2016 and 1709) where constrained impersonations are mishandled. The root cause is how AppContainer constrains impersonations, enabling a lo...
CVE-2018-0958
CVE-2018-0958 is a Windows security feature bypass vulnerability that could enable bypass of Device Guard on affected Windows platforms (Windows 10, Windows Server 2016). The connected documents corroborate that this is a Windows feature-bypass issue; however, they do not provide concrete technic...
CVE-2018-8393
The connected advisory CPAI-2018-0959 confirms CVE-2018-8393: a remote code execution vulnerability in the Microsoft JET Database Engine (Jet) caused by a buffer overflow. An attacker could trigger it by convincing a user to open a specially crafted Excel file, enabling arbitrary code execution o...
CVE-2019-0553
CVE-2019-0553 is a Windows Subsystem for Linux information disclosure vulnerability caused by improper in-memory handling in WSL. Affected products include Windows 10 (client) and Windows Server 2019. The databases concur on the vulnerability description and impact (information disclosure; no int...
CVE-2019-0723
Summary: CVE-2019-0723 is a denial-of-service vulnerability affecting Microsoft Hyper-V, specifically the Hyper-V Network Switch on a host server. The issue arises when input from a privileged user inside a guest OS is not properly validated, enabling an attacker who already has a privileged gues...
CVE-2019-0758
Technical details about CVE-2019-0758 are not publicly available in the provided documents. The connected advisories cover related CVEs but do not provide specifics for this entry. Monitor for updates.
CVE-2019-0896
The Connected CNVD entries describe a Microsoft Windows Jet Database Engine vulnerability: a buffer overflow occurring when the engine executes memory operations without proper data-boundary validation, potentially enabling read/write corruption (buffer/heap overflow). This aligns with a Jet DB E...
CVE-2019-1093
Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.
CVE-2019-1248
CVE-2019-1248 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The provided documents do not specify exploitation vectors, affected versions, root cause details, or remediations for this CVE.
CVE-2019-1469
CVE-2019-1469 is a Windows win32k information-disclosure vulnerability. The gained CVE details indicate the flaw resides in the win32k component exposing kernel information due to incorrect handling, enabling local attackers with logon rights to disclose information. Connected documents describe ...
CVE-2020-0648
CVE-2020-0648 : Elevation of privilege in the Windows RSoP Service Application occurs due to improper memory handling. Attack requires initial code execution on the target, after which an attacker could run a crafted application to elevate privileges. The update addresses the vulnerability by cor...
CVE-2020-0744
Technical details for CVE-2020-0744 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2020-0981
CVE-2020-0981 is a Windows security feature bypass vulnerability stemming from how token relationships are handled. The Windows patch fixes the token relationship handling to prevent sandbox escapes. A detailed exploit chain is described in a Project Zero–style writeup: an attacker could obtain a...
CVE-2020-0992
CVE-2020-0992 corresponds to a remote code execution in the Windows Jet Database Engine caused by improper handling of memory objects. The connected CNVD entries describe a Microsoft Windows Jet Database Engine RCE vulnerability with the same root cause (memory object handling) and the impact bei...
CVE-2020-1011
CVE-2020-1011: Elevation of Privilege in Windows System Assessment Tool due to improper handling of file operations. Affected: Windows System Assessment Tool; root cause: file handling flaw enabling local privilege escalation. CVSS v3.1 shows HIGH impact (base 7.8) with Local attack vector, Privi...
CVE-2020-1306
Technical details about CVE-2020-1306 are not provided in the connected documents. The entry notes a Windows Runtime elevation of privilege issue but does not specify affected products/versions or fixes. Monitor for updates.
CVE-2020-1308
CVE-2020-1308 is a DirectX Elevation of Privilege vulnerability caused by improper handling of memory objects. It requires the attacker to log on locally and to run a crafted application, potentially allowing kernel-mode code execution, data modification, or creation of privileged accounts. The v...
CVE-2020-1362
CVE-2020-1362 affects the Windows WalletService, an elevation-of-privilege vulnerability caused by how WalletService handles objects in memory. Multiple connected sources (CNVD entries) confirm the root cause is improper in‑memory handling leading to privilege escalation. No specific exploit vect...
CVE-2020-1468
CVE-2020-1468: Information disclosure in Windows GDI. The Windows GDI component improperly discloses memory contents, enabling partial confidentiality impact. Connected CNVD entry corroborates Windows/Windows Server information disclosure presence; no vendor/product patch details are provided in ...
CVE-2020-1515
CVE-2020-1515 is an Elevation of Privilege vulnerability in Windows Telephony Server caused by improper memory handling. An attacker who already has code execution on the target could escalate privileges locally by running a crafted application. Microsoft’s security update fixes memory handling i...
CVE-2020-1532
CVE-2020-1532 is a Windows elevation-of-privilege vulnerability in the InstallService caused by improper memory handling. The flaw allows a locally authenticated attacker who already has execution on the victim to run a crafted application to elevate privileges. Microsoft’s security update fixes ...
CVE-2020-1536
CVE-2020-1536 is a Windows elevation of privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker must first gain execution on the target, then run a specially crafted application to elevate privileges. The vulnerability is addressed by a security upd...
CVE-2020-16894
CVE-2020-16894 is a Windows NAT denial-of-service vulnerability: a privileged guest-VM user can craft input that forces the host to crash due to improper NAT validation. Remediation is to apply the Microsoft update that modifies how Windows NAT accesses the host.
CVE-2020-17044
CVE-2020-17044 corresponds to a Windows vulnerability described as a Remote Access Elevation of Privilege. The provided records (NVD/NVD-based sources) list it with a CVSS-3.1 base score of 7.8 (HIGH) and CVSS‑2 base score of 6.8 (MEDIUM). According to CVSS‑3.1 details, the vulnerability is local...
CVE-2020-17137
CVE-2020-17137 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. Affects Microsoft Windows systems via the DirectX Graphics Kernel component (DXGK); the root cause is an Elevation of Privilege flaw with local attack vector, requiring low privileges and no user interaction (CVSSv3...
CVE-2021-1656
CVE-2021-1656 is a TPM device driver information disclosure vulnerability affecting Windows TPM drivers. It yields a confidentiality impact (HIGH per CVSS v3.1 and PARTIAL per CVSS v2) with LOCAL attack vector and LOW privileges required; exploitation status is not detailed in the provided docume...
CVE-2021-1667
Technical details (affected product/version, exploit information, or remediation) are not publicly provided in the connected documents. Monitor updates from official advisories for CVE-2021-1667.
CVE-2021-1700
Technical details about CVE-2021-1700 are not provided in the given documents. No vendor/product/version specifics, root cause, impact, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2021-1727
CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...
CVE-2021-40475
CVE-2021-40475 refers to the Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability. Available sources identify the affected component as the Windows Cloud Files Mini Filter Driver and classify the issue as an information disclosure vulnerability with local attack potential. ...
CVE-2022-21872
Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.
CVE-2022-34732
CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....
CVE-2022-35832
CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...