CVE-2020-1306

Technical details about CVE-2020-1306 are not provided in the connected documents. The entry notes a Windows Runtime elevation of privilege issue but does not specify affected products/versions or fixes. Monitor for updates.

CVE-2018-8175

CVE-2018-8175 describes a denial-of-service in Windows WebDAV Minirdr when querying a WebDAV directory. The vulnerability can be triggered by a user visiting a attacker-controlled site or link, leading to the victim’s system stopping to respond. Affected products include Windows 10 and Windows Se...

CVE-2018-8506

The CVE-2018-8506 entry affects Microsoft Windows Codecs Library. Root cause: improper handling of objects in memory, leading to information disclosure. An attacker could exploit this by persuading a user to open a specially crafted image file, potentially exposing sensitive information. The vuln...

CVE-2019-0719

CVE-2019-0719 describes a remote code execution vulnerability in the Windows Hyper-V Network Switch. The issue occurs when a host server fails to properly validate input from an authenticated user on a guest OS, enabling potential arbitrary code execution on the host. Affected component is the Hy...

CVE-2019-0723

Summary: CVE-2019-0723 is a denial-of-service vulnerability affecting Microsoft Hyper-V, specifically the Hyper-V Network Switch on a host server. The issue arises when input from a privileged user inside a guest OS is not properly validated, enabling an attacker who already has a privileged gues...

CVE-2019-0901

CVE-2019-0901 maps to a Windows Jet Database Engine vulnerability. Connected CNVD entries describe a buffer overflow/heap overflow in Windows Jet Database Engine when memory boundaries are not validated, potentially allowing memory corruption on affected Windows/Windows Server systems. The CNVD d...

CVE-2019-0973

CVE-2019-0973 affects the Windows Installer. The issue stems from improper input sanitization that enables insecure library loading, leading to elevation of privilege. A locally authenticated attacker could execute arbitrary code with elevated system privileges, potentially installing programs, v...

CVE-2019-1017

CVE-2019-1017 is a Windows Win32k elevation-of-privilege vulnerability. The Win32k component mishandles in-memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode after logging on and executing a crafted application. This could enable installation of program...

CVE-2019-1124

Technical details for CVE-2019-1124 are not publicly provided in the supplied documents; no affected products, versions, exploit information, or fixes are specified. Monitor for updates in connected sources.

CVE-2019-1397

Technical details about CVE-2019-1397 are not publicly available in the provided documents; no affected products, versions, or fixes are described. Monitor for updates.

CVE-2020-0613

Technical details about CVE-2020-0613 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1000

Technical details for CVE-2020-1000 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2020-1152

Technical details about CVE-2020-1152 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The entry’s description is present, but no concrete technical details are supplied. Monitor for updates.

CVE-2020-1234

CVE-2020-1234 is described in the CNVD-2021-31216 entry as a Windows Error Reporting elevation of privilege vulnerability that arises from improper handling of memory objects, enabling an attacker to gain elevated privileges by running a specially crafted application. The initial document also no...

CVE-2020-1293

CVE-2020-1293 is an Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector Service where file operations are mishandled. The connected AVLeonarov item places CVE-2020-1293 under Diagnostics Hub Standard Collector EOP and lists it alongside CVE-2020-1257 and CVE-2020-1278, but ...

CVE-2020-1508

CVE-2020-1508 affects Windows Media Audio Decoder and is described as a remote code execution vulnerability. The connected document (AVLEONOV article) lists Windows Media Audio Decoder as vulnerable under the September 2020 Patch Tuesday with multiple CVEs, including CVE-2020-1508, indicating an ...

CVE-2020-1511

CVE-2020-1511 : A privilege-elevation vulnerability in the Connected User Experiences and Telemetry Service arises from improper handling of file operations. An attacker could run a specially crafted application on the victim’s system to execute code in an elevated context. The threat is mitigate...

CVE-2020-1542

CVE-2020-1542 is a Windows Backup Engine elevation-of-privilege vulnerability caused by improper memory handling. An attacker must first gain execution on the victim and then run a crafted application to elevate privileges. Windows updates fix the issue by correcting how the Backup Engine handles...

CVE-2021-1650

Technical details for CVE-2021-1650 are not publicly provided in the connected documents. Monitor for updates from official advisories; no specific affected product/version, root cause, impact, or remediation is included here.

CVE-2021-1653

CVE-2021-1653 details are not publicly provided in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2021-1654

Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.

CVE-2021-1673

CVE-2021-1673 is described as a Remote Procedure Call (RPC) Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server. The CVE entry lists a high-severity CVSS score (3.1) of 8.8 with network access, low attack complexity, and no user interaction, implying reliable RC...

CVE-2021-1680

Technical details about CVE-2021-1680 are not publicly available in the provided connected documents. Monitor for updates for affected product, root cause, impact, and remediation information.

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

CVE-2021-24102

CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...

CVE-2021-28322

Technical details about CVE-2021-28322 are not publicly provided in the supplied documents. No affected products, exploit information, or fixes are described here. Monitor for updates from the referenced advisories and vulnerability feeds.

CVE-2021-28325

Technical details for CVE-2021-28325 are not publicly available in the provided connected documents. The materials reference the SMB information disclosure vulnerability and related entries, but no concrete specifics (affected products/versions/fixes) are provided here. Monitor for updates.

CVE-2021-33772

CVE-2021-33772 is a Windows TCP/IP Driver Denial of Service vulnerability. Connected KB data indicate the issue is addressed by the July 2021 security update KB5004237 for Windows 10 versions 2004/20H2/21H1, affecting the Windows TCP/IP driver. No further technical specifics (root cause details, ...

CVE-2021-40470

CVE-2021-40470 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. The initial record indicates a LOCAL, low-logging, no-interaction attack with HIGH impact via CVSSv3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (base 7.8). The connected documents reference Microsoft advi...

CVE-2021-42276

Technical details about CVE-2021-42276 are not provided in the supplied connected documents. Please monitor for updates in the sources list to learn affected products, root cause, impact, and remediation.

CVE-2022-24544

Technical details for CVE-2022-24544 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-26933

Technical details about CVE-2022-26933 (NTFS Information Disclosure) are not provided in the connected documents. Monitor for updates; no affected products, root cause, impact, or fixes are disclosed here.

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

CVE-2022-44681

Technical details about CVE-2022-44681 are not publicly provided in the connected documents. Monitoring for updates is recommended.

CVE-2017-0084

CVE-2017-0084 concerns a remote code execution in Microsoft Windows Uniscribe (USP10) via font processing. The vulnerability is triggered by a crafted font during text rendering, leading to an invalid memory operation in USP10 which can be exploited to execute arbitrary code. Exploit details in p...

CVE-2017-0280

CVE-2017-0280 is a remote-denial-of-service vulnerability in the Microsoft Windows SMB Server (SMBv1). The issue occurs when the SMBv1 server processes crafted SMB requests, allowing an unauthenticated attacker to trigger a DoS condition on the target system. Documents reference the vulnerability...

CVE-2017-8589

CVE-2017-8589 is a Windows Search Remote Code Execution vulnerability affecting Windows 7 SP1, Windows Server 2008 SP2/R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (gold and 1511–1703) and Windows Server 2016. The root cause is the way Windows Search handles objects in memory, e...

CVE-2018-0844

The CVE-2018-0844 entry describes an elevation-of-privilege vulnerability in the Windows Common Log File System (CLFS) driver, affecting multiple Windows versions (Windows 7 SP1, Windows 8.1/RT 8.1, Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709). The root cause is how objects in memory are hand...

CVE-2018-0983

CVE-2018-0983 is a Windows Storage Services elevation-of-privilege vulnerability in Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by improper handling of objects in memory. Exploitation would allow local attackers to run processes with elevated privileges. The ...

CVE-2018-17612

Summary of CVE-2018-17612 : Sennheiser HeadSetup (and HeadSetup Pro) improperly published the private signing key in the public distribution and installed CA/root certificates into the local Trusted Root CA store. The root cause is the inclusion of the private key in the SennComCCKey.pem file, en...

CVE-2018-8116

The provided connected documents confirm CVE-2018-8116 is a DoS vulnerability in the Windows Graphics Component, arising from how the component handles objects in memory and affecting multiple Windows versions (e.g., Windows 7, Windows 10, server editions). Concrete details include the affected p...

CVE-2018-8169

CVE-2018-8169 is a local elevation-of-privilege vulnerability in the HIDParser driver used by Windows HID parsing. The root cause, per CNVD-2018-11571, is that HIDParser fails to properly handle objects in memory, enabling a local attacker to execute code with higher privileges by running a craft...

CVE-2018-8497

CVE-2018-8497 is a Windows kernel elevation-of-privilege issue described as occurring in how the kernel handles objects in memory. Affected products listed in the CVE entry include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server variants. The connected records confirm ...

CVE-2019-0682

The CVE-2019-0682 entry describes an elevation of privilege vulnerability in Windows Subsystem for Linux (WSL) caused by an integer overflow. The connected NVD record CVE-2019-0692 reiterates the same family of issue (WSL elevation of privilege) with no additional technical details in the provide...

CVE-2019-0698

Summary: CVE-2019-0698 is a memory corruption vulnerability in the Windows DHCP client that can allow remote code execution when an attacker sends specially crafted DHCP responses. The connected advisories confirm related CVEs (CVE-2019-0697 and CVE-2019-0726) describe the same class of issue aff...

CVE-2019-0893

The connected CNVD entries describe Microsoft Windows Jet Database Engine Buffer Overflow vulnerabilities in Windows and Windows Server. The flaw arises when the engine performs memory operations without proper data-boundary validation, leading to buffer/heap overflows. Concrete exploit details, ...

CVE-2019-0961

The CVE-2019-0961 entry concerns Microsoft Windows GDI (Graphics Device Interface). The vulnerability arises from improper handling of memory objects, leading to information disclosure of memory contents in GDI. Affected component: Windows GDI in Microsoft Windows. Impact, as stated, is informati...

CVE-2019-1028

Technical details (affected products, versions, root cause, exploit vectors, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1078

CVE-2019-1078 is a Windows Graphics Component information-disclosure vulnerability. It stems from the component improperly handling memory objects, allowing an attacker to obtain information that could help compromise the system. An authenticated attacker could exploit this by running a specially...

CVE-2019-1097

Technical details about CVE-2019-1097 are not publicly provided in the connected documents. The initial entry notes a DirectWrite information disclosure but lacks vendor/affected products, versions, impact, or remediation in the supplied materials. Monitor for updates.