2974 matches found
CVE-2022-26933
Technical details about CVE-2022-26933 (NTFS Information Disclosure) are not provided in the connected documents. Monitor for updates; no affected products, root cause, impact, or fixes are disclosed here.
CVE-2022-35767
Technical details are not provided in the supplied connected documents for CVE-2022-35767. Public disclosure, affected products, exploit status, and fixes are not specified here; monitor for updates.
CVE-2022-37997
CVE-2022-37997 is a local-elevation-of-privilege vulnerability in the Windows Graphics Component. It is documented as affecting the Microsoft Windows Graphics Component with a CVSS v3.1 base score of 7.8 (High) and an attack vector of LOCAL with LOW attack complexity, requiring LOW privileges and...
CVE-2022-44669
Technical details about CVE-2022-44669 are not provided in the connected documents. The sources mention Windows Error Reporting elevation of privilege but do not disclose affected components, versions, or fixes. Monitor for updates.
CVE-2022-44674
CVE-2022-44674 is a Windows Bluetooth Driver information disclosure vulnerability. The CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and an unchanged scope; confidentiality impact is High. Exploitation would ...
CVE-2016-0075
CVE-2016-0075 affects the Windows kernel on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). It enables a local attacker to gain privileges by a crafted application that calls a kernel API to read sensitive information from the registry. Exploit PoCs exist (...
CVE-2016-7274
CVE-2016-7274 concerns the Windows Uniscribe component (usp10.dll). The issue stems from an integer/heap-related vulnerability in the LoadUvsTable() function that could enable remote code execution when processing untrusted font data via a crafted web site. Public analyses (e.g., Google Project Z...
CVE-2017-0285
CVSS context : CVE-2017-0285 is an information-disclosure vulnerability in Windows Uniscribe. The connected document KLA11039 lists an information-disclosure vulnerability in Windows Uniscribe that can be exploited remotely via specially crafted documents to obtain sensitive information. What is ...
CVE-2017-8687
CVE-2017-8687 is a Windows kernel information-disclosure vulnerability in the Win32k subsystem where improper handling of memory objects allows leakage of kernel memory to user mode. Affected products include Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012, Windows...
CVE-2017-8708
CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...
CVE-2018-0966
CVE-2018-0966 is a Device Guard Security Feature Bypass in Microsoft Windows. The vulnerability arises when Device Guard inadequately validates an untrusted file, enabling a security feature bypass on affected platforms. Affected products include Windows 10 and Windows Server 2016/Windows Server ...
CVE-2018-8121
Technical details for CVE-2018-8121 are not publicly available in the provided connected documents. No specific affected products, root cause, impacts, or remediation are described here; monitor for updates.
CVE-2018-8490
CVE-2018-8490 is a remote code execution vulnerability in Windows Hyper-V where a host fails to properly validate input from a guest OS user. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server variants. Root cause (as described): improper input validation in Hyper-V...
CVE-2018-8506
The CVE-2018-8506 entry affects Microsoft Windows Codecs Library. Root cause: improper handling of objects in memory, leading to information disclosure. An attacker could exploit this by persuading a user to open a specially crafted image file, potentially exposing sensitive information. The vuln...
CVE-2019-1078
CVE-2019-1078 is a Windows Graphics Component information-disclosure vulnerability. It stems from the component improperly handling memory objects, allowing an attacker to obtain information that could help compromise the system. An authenticated attacker could exploit this by running a specially...
CVE-2019-1212
CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...
CVE-2020-0641
CVE-2020-0641 affects Windows Media Service and enables elevation of privilege by allowing a logged-on attacker to create a file in an arbitrary location. The vulnerability is referenced in NVD with local, low-attack complexity conditions and high impact (confidentiality, integrity, availability)...
CVE-2020-0785
CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...
CVE-2020-0793
CVE-2020-0793 is an elevation-of-privilege vulnerability affecting the Diagnostics Hub Standard Collector Service, where improper handling of file operations enables local attacker exploitation. The CVSSv3.1 vector indicates LOCAL access, LOW attack complexity, LOW privileges required, and NONE u...
CVE-2020-0865
CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...
CVE-2020-1030
Technical details about CVE-2020-1030 are not publicly provided in the connected documents. The initial entry describes a local elevation of privilege via the Windows Print Spooler but lacks explicit product/version/root cause specifics beyond that. Monitor for updates.
CVE-2020-1115
The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...
CVE-2020-1234
CVE-2020-1234 is described in the CNVD-2021-31216 entry as a Windows Error Reporting elevation of privilege vulnerability that arises from improper handling of memory objects, enabling an attacker to gain elevated privileges by running a specially crafted application. The initial document also no...
CVE-2020-1486
The CVE-2020-1486 entry describes a Windows kernel Elevation of Privilege vulnerability caused by the kernel’s improper handling of objects in memory. An attacker who can log on could run arbitrary code in kernel mode, potentially installing programs, stealing data, or creating accounts with full...
CVE-2020-1545
CVE-2020-1545 describes an Elevation of Privilege in the Windows Backup Engine caused by improper handling of memory. The vulnerability requires an attacker to gain execution on the target before applying a crafted command to elevate privileges. Microsoft-reported fix mitigates by correcting how ...
CVE-2020-17090
Technical details about CVE-2020-17090, including affected product versions, root cause, and fix, are not publicly available in the provided documents. Monitor for updates from NVD, OSV, and vendor advisories.
CVE-2021-1642
CVE-2021-1642 affects Windows AppX Deployment Extensions and is described as an Elevation of Privilege vulnerability. CVSSv3.1 score 7.8 (HIGH) with local attack vector, low complexity, and privileges required LOW; impact to confidentiality, integrity, and availability is HIGH. Connected document...
CVE-2021-1676
Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2021-43233
CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...
CVE-2022-21998
CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...
CVE-2022-22000
Technical details about CVE-2022-22000 are not provided in the connected documents. The available sources confirm the vulnerability label but do not document affected products, root cause, or fixes here. Monitor for updates.
CVE-2022-22711
Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.
CVE-2022-35833
Technical details about CVE-2022-35833 are not publicly available in the provided documents. The sources mention a Windows Secure Channel Denial of Service vulnerability, but no specifics on affected products, versions, impact, or fixes are included.
CVE-2022-37973
CVE-2022-37973 is a Windows Local Session Manager (LSM) Denial of Service vulnerability with a CVSS v3.1 base score of 7.7 (HIGH). The initial documents indicate a network-based DoS risk affecting Windows LSM, but do not provide exploit specifics, affected versions, or concrete remediation steps ...
CVE-2022-44673
CVE-2022-44673 affects Windows CSRSS (Windows Client Server Run-time Subsystem) with Elevation of Privilege. The provided data lists a CVSSv3.1 base score of 7.0 (HIGH) with LOCAL attack vector, HIGH confidentiality, integrity, and availability impact, and LOW privileges required with no user int...
CVE-2023-21701
CVE-2023-21701 is described as a Microsoft PEAP Denial of Service vulnerability with a CVSS v3.1 base score of 7.5 (Network attack, no user interaction, high impact to availability). The provided documents do not include concrete exploit details, affected product versions, root cause, or a confir...
CVE-2016-7218
Bowser.sys Information Disclosure Vulnerability (CVE-2016-7218) affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, 2016, RT 8.1, 1511/1607; kernel-mode driver Bowser.sys). A local attacker could exploit a crafted executable to obtain sensitive information via Bows...
CVE-2017-0058
CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...
CVE-2017-0278
CVE-2017-0278 corresponds to a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The issue is triggered by how the SMBv1 server handles certain requests, affecting multiple Windows editions (e.g., Windows 7, Windows 8.1, Windows Server 2008/2012/2016, and related .NET env...
CVE-2017-0282
CVE-2017-0282 is an information disclosure vulnerability in the Windows Uniscribe component. It affects Windows and Office products listed in the initial entry, with memory contents disclosure possible via specially crafted documents. Public sources in the connected materials confirm an informati...
CVE-2017-11783
CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...
CVE-2017-11830
CVE-2017-11830 is a Windows Device Guard security feature bypass. Connected sources describe a TOCTOU race in the WDAC cache signing path (CiSetFileCache) that can allow an unsigned file to appear signed. The issue was addressed previously via NtSetCachedSigningLevel, but public reports (Exploit-...
CVE-2018-0890
Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.
CVE-2018-0902
CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...
CVE-2018-8116
The provided connected documents confirm CVE-2018-8116 is a DoS vulnerability in the Windows Graphics Component, arising from how the component handles objects in memory and affecting multiple Windows versions (e.g., Windows 7, Windows 10, server editions). Concrete details include the affected p...
CVE-2019-1046
CVE-2019-1046 affects the Windows GDI component, where improper handling of memory allows information to be disclosed to an attacker. This vulnerability can be triggered by user actions such as opening a specially crafted document or visiting an untrusted webpage, leading to potential further com...
CVE-2019-1186
CVE-2019-1186 affects Windows via wcmsvc.dll, where improper handling of memory objects enables local privilege escalation. A locally authenticated attacker can run a crafted application to execute code with elevated privileges. A security update patches wcmsvc.dll to correctly handle memory obje...
CVE-2019-1358
CVE-2019-1358 is a Windows Jet Database Engine Remote Code Execution vulnerability. The issue arises from improper handling of objects in memory within the JET Database Engine, enabling a remote attacker to potentially execute code. Connected Microsoft KB updates (e.g., KB4519990, KB4519998, KB45...
CVE-2019-1456
The CVE-2019-1456 entry describes a remote code execution vulnerability in Microsoft Windows where the Windows Adobe Type Manager Library fails to properly handle specially crafted OpenType fonts. Affected component: Windows Adobe Type Manager Library; root cause: improper handling of OpenType fo...