2974 matches found
CVE-2020-0684
CVE-2020-0684 is a Windows remote code execution vulnerability triggered when a .LNK file is processed. The connected docs confirm that an attacker could execute code with the current user’s privileges, affecting Windows/Windows Server platforms via .LNK handling, and that patches were released i...
CVE-2020-0744
Technical details for CVE-2020-0744 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2020-0956
Technical details for CVE-2020-0956 are not publicly available in the provided connected documents; monitor for updates.
CVE-2020-0981
CVE-2020-0981 is a Windows security feature bypass vulnerability stemming from how token relationships are handled. The Windows patch fixes the token relationship handling to prevent sandbox escapes. A detailed exploit chain is described in a Project Zero–style writeup: an attacker could obtain a...
CVE-2020-1480
CVE-2020-1480 is a Windows GDI Elevation of Privilege vulnerability. It describes a state where the Graphics Device Interface may mishandle objects in memory, allowing a local attacker who can log on to run code in kernel mode and potentially install programs, access data, or create accounts with...
CVE-2020-1515
CVE-2020-1515 is an Elevation of Privilege vulnerability in Windows Telephony Server caused by improper memory handling. An attacker who already has code execution on the target could escalate privileges locally by running a crafted application. Microsoft’s security update fixes memory handling i...
CVE-2020-1527
CVE-2020-1527 – Windows Custom Protocol Engine Elevation of Privilege Root cause: The vulnerability stems from the Windows Custom Protocol Engine improperly handling memory, enabling an attacker who already has code execution on the victim system to run a crafted application and gain higher privi...
CVE-2020-1532
CVE-2020-1532 is a Windows elevation-of-privilege vulnerability in the InstallService caused by improper memory handling. The flaw allows a locally authenticated attacker who already has execution on the victim to run a crafted application to elevate privileges. Microsoft’s security update fixes ...
CVE-2020-1536
CVE-2020-1536 is a Windows elevation of privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker must first gain execution on the target, then run a specially crafted application to elevate privileges. The vulnerability is addressed by a security upd...
CVE-2021-1667
Technical details (affected product/version, exploit information, or remediation) are not publicly provided in the connected documents. Monitor updates from official advisories for CVE-2021-1667.
CVE-2021-1704
CVE-2021-1704 is documented as a Windows Hyper-V Elevation of Privilege vulnerability. The connected OpenVAS entries (KB4598** series) list CVE-2021-1704 among affected Windows vulnerabilities, indicating it is addressed across multiple Microsoft security updates. The provided documents do not in...
CVE-2021-25195
CVE-2021-25195 is described as a Windows PKU2U Elevation of Privilege vulnerability. The provided data include CVSSv3.1 metrics indicating a LOCAL attack with LOW privileges required, NO user interaction, and HIGH impact on confidentiality, integrity and availability (base score 7.8). The initial...
CVE-2021-26876
CVE-2021-26876 is an OpenType Font Parsing Remote Code Execution vulnerability. Connected sources indicate it affects Windows components (notably the Windows Graphics Component) with a high impact (CVSSv3.1 8.8) and network attack vector. The vulnerability enables remote code execution and is add...
CVE-2021-28318
Technical details about CVE-2021-28318 are not provided in the initial document or any connected items. No affected products, vulnerable components, impact, or remediation are specified. Monitor official advisories for updates.
CVE-2021-38635
CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...
CVE-2021-40475
CVE-2021-40475 refers to the Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability. Available sources identify the affected component as the Windows Cloud Files Mini Filter Driver and classify the issue as an information disclosure vulnerability with local attack potential. ...
CVE-2021-40478
CVE-2021-40478 is described in the connected NVD entry as a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSSv3.1 base score is 7.8 (HIGH), with attack vector LOCAL, attack complexity LOW, privileges required LOW, and no user interaction. The impact is listed as high confid...
CVE-2021-41347
Technical details about CVE-2021-41347 are not publicly provided in the connected documents. The affected software/impact specifics are not disclosed here. Monitor for official advisories from Microsoft and CVE listings for updated exploit information and remediation.
CVE-2022-21904
Technical details for CVE-2022-21904 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2022-37957
Technical details about CVE-2022-37957 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally as a Windows Kernel Elevation of Privilege issue but do not include affected product versions, root cause, CVSS specifics beyond the CVSS score in ...
CVE-2022-37977
CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...
CVE-2022-37982
CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...
CVE-2016-0070
Technical details of CVE-2016-0070 are not publicly provided in the Connected Documents. Monitor for updates.
CVE-2017-11847
CVE-2017-11847 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1; Windows 8.1/RT; Windows 10 1511–1709; Windows Server 2008/2012/2016, etc.). The root cause is improper handling of objects in memory, enabling a local attacker to escalate privileges and run a...
CVE-2018-8214
CVE-2018-8214 is a Windows Desktop Bridge Elevation of Privilege vulnerability where Desktop Bridge fails to properly manage the virtual registry. Exploitation is referenced in CIRCL entries with exploits listed (e.g., exploit-db 44915 for CVE-2018-8214), indicating local privilege escalation on ...
CVE-2018-8282
CVE-2018-8282 is a Win32k Elevation of Privilege vulnerability in Windows, caused by the Windows kernel-mode driver failing to properly handle objects in memory. It affects Windows 7, Server 2012 R2, RT 8.1, Server 2008/2012, 8.1, Server 2016, Server 2008 R2, 10 and Server 10 servers. Impact is l...
CVE-2018-8333
CVE-2018-8333 is a local Elevation of Privilege in Windows Filter Manager caused by improper handling of memory objects. Affected: Windows 7, Windows 8.1, Windows 10 and various Windows Server editions listed in the CVE entry. Root cause is mismanagement of in-memory objects within Filter Manager...
CVE-2018-8489
The CVE-2018-8489 entry describes a Windows Hyper-V remote code execution vulnerability. The root cause is that Hyper-V on a host server fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected platforms include multiple Wi...
CVE-2019-0758
Technical details about CVE-2019-0758 are not publicly available in the provided documents. The connected advisories cover related CVEs but do not provide specifics for this entry. Monitor for updates.
CVE-2019-0787
CVE-2019-0787 is described as a remote code execution vulnerability in the Windows Remote Desktop Client when a user connects to a malicious server. Connected documents confirm this CVE refers to the RDP client and note it alongside other remote‑network bugs Microsoft has addressed (e.g., CVE-201...
CVE-2019-1119
Technical details about CVE-2019-1119 are not publicly provided in the connected documents. The KB entries reference OS/Update context but do not specify affected products/versions, impact, or fixes for this CVE. Monitor for updates.
CVE-2019-1170
CVE-2019-1170 is a Windows NTFS sandbox-elevation-of-privilege vulnerability. It arises when sandboxed processes create reparse points, enabling a sandbox escape and privilege escalation on the affected system. Public exploit activity exists (e.g., exploit-db). The issue is rooted in the NTFS san...
CVE-2019-1180
The CVE-2019-1180 entry describes an elevation-of-privilege vulnerability in how wcmsvc.dll handles objects in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. The vulnerability is addressed by a security update that ensures wcmsv...
CVE-2019-1252
CVE-2019-1252 is a Windows GDI information disclosure vulnerability. The Graphical Device Interface component can improperly disclose memory contents due to how objects are handled in memory. A remote attacker could exploit this by enticing a user to open a specially crafted web page or document,...
CVE-2019-1346
Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.
CVE-2020-0985
CVE-2020-0985 is a Windows vulnerability described as an Elevation of Privilege in the Windows Update Stack, caused by improper handling of objects in memory. The entry confirms it is a distinct CVE from CVE-2020-0996 and assigns a Local, Low-Privilege, No-Interaction attack model with high impac...
CVE-2020-1463
Technical details for CVE-2020-1463 are not provided in the connected documents; public specifics (affected products/versions, root cause, or fixes) are not available here. Monitor for updates.
CVE-2020-1553
CVE-2020-1553 is a Windows Runtime elevation-of-privilege vulnerability. The flaw occurs when Windows Runtime improperly handles objects in memory, allowing a locally authenticated attacker to run arbitrary code with elevated privileges by executing a crafted application. The public description s...
CVE-2020-1593
Technical details about CVE-2020-1593 are not provided in the connected documents; no product/version/impact specifics are disclosed here. Monitor for updates as additional details may be published.
CVE-2021-33744
Technical details for CVE-2021-33744 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2021-40476
CVE-2021-40476 is a Windows AppContainer Elevation of Privilege vulnerability. The provided documents identify the impacted component as Windows AppContainer, with CVSS v3.1 base score 7.8 (LOCAL, LOW ATTACK COMPLEXITY, NO PRIVILEGES REQUIRED, UI REQUIRED, HIGH impact to C/I/A) and CVSS2 metrics ...
CVE-2021-41339
Technical details about CVE-2021-41339 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2022-21872
Technical details about CVE-2022-21872 are not provided in connected documents. Public input only labels it as Windows Event Tracing Elevation of Privilege Vulnerability; monitor for updates.
CVE-2022-29105
No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.
CVE-2022-35770
CVE-2022-35770 is a Windows NTLM spoofing vulnerability. The connected records classify it under Windows NTLM with an impact described as “Pretend to be another user” and a CVSS v3.1 base score of 6.5 (Network attack, Low attack complexity, No privileges required, User interaction required; Confi...
CVE-2022-35837
Technical details about CVE-2022-35837 are not publicly provided in the supplied documents. Monitor for updates from official sources; current materials only confirm the vulnerability name and CVE ID without specifics.
CVE-2022-37995
CVE-2022-37995 is a Windows Kernel elevation-of-privilege vulnerability. The initial entry notes a local attacker could achieve a high-severity (CVSS 7.8) impact with low attack complexity and no user interaction required. Connected documents list this CVE under Windows Kernel and enumerate fixes...
CVE-2023-21811
Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.
CVE-2016-3236
CVE-2016-3236 affects the WPAD proxy discovery implementation in multiple Windows editions (Vista through Windows 10). The weakness arises when WPAD proxy discovery is mishandled, which could allow a remote attacker to redirect network traffic via unspecified vectors, effectively an elevation of ...