2974 matches found
CVE-2018-0814
Technical details for CVE-2018-0814 are not publicly available in the provided Connected documents. No explicit affected products, versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2018-0960
Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.
CVE-2018-8134
CVE-2018-8134 is an elevation of privilege vulnerability in the Windows Kernel API that affects Windows 8.1, Windows 10 (including Windows Server variants) and related OSes. The faulty enforcement of permissions is the root cause. The connected CIRCL entry indicates a public exploit is available ...
CVE-2018-8201
CVE-2018-8201 describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10 (including Windows 10 servers). The vulnerability stems from bypas...
CVE-2019-0942
CVE-2019-0942 concerns Windows 10 Unified Write Filter (UWF). The connected sources describe an elevation of privilege resulting from improper restriction of access to the registry within UWF. Affected component: UWF on Windows 10; root cause cited as registry access restriction flaw. Documented ...
CVE-2019-1018
CVE-2019-1018 (DirectX Elevation of Privilege) affects Windows DirectX and involves improper handling of objects in memory, enabling a local attacker to execute code in kernel mode and potentially install programs, view/change/delete data, or create accounts with full rights. The root cause is un...
CVE-2019-1074
CVE-2019-1074 is a Windows elevation-of-privilege vulnerability involving symbolic link handling in folders with local service privileges. The available description states that exploitation could grant access to unauthorized information, and that the fix is to prevent symbolic links in these scen...
CVE-2019-1190
CVE-2019-1190 is a Windows kernel image elevation of privilege vulnerability. The issue arises from how the kernel image handles objects in memory, allowing a locally authenticated attacker to run code with elevated privileges via a crafted application. Public exploits exist for this vulnerabilit...
CVE-2019-1212
CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...
CVE-2019-1311
IBM Security Bulletin: CVE-2019-1311 is acknowledged within IBM Spectrum Symphony 7.3.1, with an interim fix that upgrades third‑party libraries to address the vulnerability. The bulletin confirms affected product version 7.3.1 and lists a remediation build: sym-7.3.1-build600124. The described C...
CVE-2019-1384
Technical details about CVE-2019-1384 are not publicly available in the provided documents. The materials mention a NETLOGON security feature bypass but do not specify affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2020-0622
CVE-2020-0622 : Information disclosure in the Microsoft Windows Graphics Component caused by improper handling of memory objects. Documented as a local vulnerability with partial/high impact to confidentiality (CVSS v3.1: MEDIUM, base score 5.5) and low base score in CVSS v2 (2.1). Affected produ...
CVE-2020-0807
Technical details for CVE-2020-0807 are not provided in the supplied documents. Monitor for updates.
CVE-2020-0904
CVE-2020-0904 is a denial-of-service vulnerability affecting Microsoft Hyper-V. The issue arises when Hyper-V fails to properly validate specific malicious data originating from a user on a guest OS, potentially allowing an authenticated attacker inside a VM (with privileged guest access) to trig...
CVE-2020-0911
CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...
CVE-2020-0965
CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...
CVE-2020-0997
CVE-2020-0997 is a Windows Camera Codec Pack remote code execution vulnerability caused by improper handling of objects in memory. An attacker could execute arbitrary code in the context of the current user, potentially taking control if the user has admin rights. Exploitation requires the user t...
CVE-2020-0999
Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.
CVE-2020-1115
The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...
CVE-2020-1310
CVE-2020-1310 is a Windows Win32k elevation of privilege vulnerability where the Windows kernel-mode driver fails to properly handle objects in memory. The description identifies it as a local-privilege escalation (LOCAL vector, high privileges required) with a kernel-mode trust boundary issue in...
CVE-2020-1435
The CVE-2020-1435 entry refers to a remote code execution in the Windows Graphics Device Interface (GDI), via how GDI/GDI+ handles objects in memory. The connected CNVD-2021-67491 description confirms the root cause as a memory-handling problem in the Windows GDI that can be exploited to execute ...
CVE-2020-1543
CVE-2020-1543 is an Elevation of Privilege in Windows Backup Engine caused by improper memory handling. An attacker who already has code execution on the victim system could run a crafted application to gain higher privileges. Microsoft’s security update fixes the vulnerability by correcting how ...
CVE-2020-1598
Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.
CVE-2020-16876
CVE-2020-16876 refers to an elevation of privilege in the Windows Application Compatibility Client Library due to improper handling of registry operations. The vulnerability requires code execution on the victim system and the attacker must subsequently run a specially crafted application to gain...
CVE-2020-17040
Technical details for CVE-2020-17040 are not publicly provided in the Connected documents. The NVD entry summarizes a Windows Hyper-V security feature bypass but does not disclose affected products, root cause, exploit vectors, or remediation here. Monitor for updates.
CVE-2021-1702
Technical details for CVE-2021-1702 are not publicly available in the provided documents. Please monitor for updates.
CVE-2021-24083
Technical details about CVE-2021-24083 are not provided in the connected documents. Public details are limited to the Windows Address Book RCE label; monitor for updates.
CVE-2021-28349
Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.
CVE-2021-28438
Technical details (affected component, root cause, impacted versions, or exploit info) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2021-28443
Technical details about CVE-2021-28443 (affected Windows Console Driver DoS) are not provided in the connected documents. No product/version/root-cause/exploit or remediation details are disclosed here; monitor for official updates.
CVE-2021-43233
CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...
CVE-2023-21702
CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...
CVE-2015-2506
The CVE-2015-2506 issue is a remote DoS in the Windows Adobe Type Manager Library (atmfd.dll) triggered by specially crafted OpenType fonts. The vulnerable component is the Adobe Type Manager Library integrated in Windows (atmfd.dll). Underlying cause is improper parsing/handling of OpenType font...
CVE-2017-0042
CVE-2017-0042 is a Windows DirectShow information disclosure vulnerability affecting Windows Media Player and related Windows versions (Windows 7/8.x/Server variants). The underlying issue is improper handling of objects in memory during media processing, which allows an unauthenticated, remote a...
CVE-2017-0056
Technical details for CVE-2017-0056 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2017-0285
CVSS context : CVE-2017-0285 is an information-disclosure vulnerability in Windows Uniscribe. The connected document KLA11039 lists an information-disclosure vulnerability in Windows Uniscribe that can be exploited remotely via specially crafted documents to obtain sensitive information. What is ...
CVE-2017-0299
The CVE-2017-0299 entry describes a Windows kernel information disclosure vulnerability in the NT kernel affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2012/2016, Windows 10 various builds, and more). The issue allows an authenticated attacker to obtain informatio...
CVE-2018-0899
Technical details for CVE-2018-0899 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2018-0902
CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...
CVE-2018-0964
CVE-2018-0964 describes an information-disclosure vulnerability in Windows Hyper-V where input from a guest OS is not properly validated by a host, enabling potential data exposure on Windows 10 and Windows Server 201X where Hyper-V is involved. Connected records reiterate the vulnerable componen...
CVE-2018-0982
CVE-2018-0982 is a local-elevation-of-privilege flaw in the Windows Kernel API permission enforcement. Affected products per documents include Windows Server 2016, Windows 10, and Windows 10 Server. CVSS3 vector shows LOCAL attack, HIGH impact on confidentiality, integrity, and availability, with...
CVE-2018-8132
Technical details about CVE-2018-8132 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2018-8200
CVE-2018-8200 is a local security bypass in Windows Device Guard, enabling an attacker to inject malicious code into a PowerShell session by bypassing the Code Integrity Policy. Affected: Windows Server 2016, Windows 10 (and variants). Root cause: Device Guard Code Integrity Policy bypass vulnera...
CVE-2018-8215
CVE-2018-8215 (and related CVEs) is described in CNVD-2018-12041 as a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows Server 2016 and Windows 10 variants. The CNVD entry confirms the vulne...
CVE-2019-0965
The CVE-2019-0965 issue affects Microsoft Windows Hyper-V on a host server, where the host fails to properly validate input from a guest OS. According to connected records, a specially crafted application running on a guest could trigger Hyper-V to execute arbitrary code on the host. The vulnerab...
CVE-2019-1168
CVE-2019-1168 describes a local elevation-of-privilege vulnerability in the Windows p2pimsvc service. According to NVD/NVD-derived descriptions, an attacker who can log on to the system could run a crafted application to execute arbitrary code with elevated privileges, effectively taking control ...
CVE-2019-1326
CVE-2019-1326 describes a denial of service vulnerability affecting Windows Remote Desktop Protocol (RDP). The Red Hat entry repeats the DoS description (attacker connects via RDP and sends specially crafted requests) but provides no further technical details, affected software versions, root cau...
CVE-2019-1341
Technical details about CVE-2019-1341 are not provided in the connected documents. The current set does not reveal affected products, root cause, or fixes beyond the initial description. Monitor for updates.
CVE-2019-1359
CVE-2019-1359 is a remote code-execution issue in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected updates state that security fixes in October 2019 (KB4519990/4519998/4519985/4519338 and related MSKBs) include Microsoft JET Database Engine remediation a...