2974 matches found
CVE-2020-17014
CVE-2020-17014 is a Windows Print Spooler elevation of privilege vulnerability. The NVD record lists a local, low-complexity attack with LOW privileges required and no user interaction, yielding HIGH integrity and availability impact (CVSS v3.1 base score 7.1; v2 base score 6.6). The provided doc...
CVE-2021-1659
No public technical details for CVE-2021-1659 are provided in the supplied documents. Monitor for updates.
CVE-2021-28349
Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.
CVE-2021-28445
Technical details for CVE-2021-28445 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories to obtain affected products, impact, and remediation.
CVE-2021-31960
CVE-2021-31960 affects the Windows Bind Filter Driver and is an information-disclosure vulnerability that can be exploited locally (attack vector: local) to obtain sensitive data. Reported details show low privileges required (PR:L) with no user interaction, confidentiality impact high. Public ex...
CVE-2021-42276
Technical details about CVE-2021-42276 are not provided in the supplied connected documents. Please monitor for updates in the sources list to learn affected products, root cause, impact, and remediation.
CVE-2021-43223
CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...
CVE-2021-43238
CVE-2021-43238 is a Windows local elevation-of-privilege vulnerability. The NVD entry shows LOCAL vector, LOW attack complexity, and no authentication required (CVSS2: AV:L/AC:L/Au:N/C:P/I:P/A:P; CVSS3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). However, the connected documents do not provi...
CVE-2022-26916
CVE-2022-26916 describes a remote code execution vulnerability in the Windows Fax Compose Form. The entry lists a CVSSv3.1 base score of 7.8 (HIGH) with a LOCAL exploit vector, meaning exploitation requires local access, and the vector indicates user interaction is required. The risk and scope ar...
CVE-2022-35795
Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.
CVE-2022-37996
CVE-2022-37996 is documented as a Windows kernel memory information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (LOCAL attack vector, LOW attack complexity, LOW privileges required, HIGH confidentiality impact). The linked NCSC advisory lists CVE-2022-37996 under Windows NTFS with ...
CVE-2022-44683
Technical details for CVE-2022-44683 are not provided in the connected documents. No product, version, root cause, impact, or fix details are present. Monitor for updates.
CVE-2015-2435
CVE-2015-2435 is a TrueType font parsing vulnerability impacting Microsoft Windows (multiple editions listed) and related components (e.g., Silverlight, Office) that allows remote code execution via a crafted font. The issue is documented with a CVSS v2 base score of 9.3 (high) and network attack...
CVE-2015-2506
The CVE-2015-2506 issue is a remote DoS in the Windows Adobe Type Manager Library (atmfd.dll) triggered by specially crafted OpenType fonts. The vulnerable component is the Adobe Type Manager Library integrated in Windows (atmfd.dll). Underlying cause is improper parsing/handling of OpenType font...
CVE-2016-0173
CVE-2016-0173 is a Win32k Elevation of Privilege vulnerability affecting Windows kernel‑mode drivers across Windows Vista SP2 through Windows 10 (1511). A crafted user-mode application can trigger local privilege escalation, as described in the original entry. Public exploit access exists: Exploi...
CVE-2016-7185
CVE-2016-7185 is a Windows kernel‑mode driver elevation of privilege vulnerability (Win32k) affecting multiple Windows versions (Vista to Windows 10 1607). Root cause: improper handling of objects in memory by kernel‑mode drivers, enabling local users to execute code with HIGH/Kernel privileges v...
CVE-2017-0023
CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...
CVE-2017-0276
Technical details for CVE-2017-0276 are not publicly available in the provided documents. Monitor for updates; current sources in the set do not describe affected products/versions, root cause, or remediation specific to this CVE.
CVE-2017-8682
CVE-2017-8682 is a Win32k Graphics Remote Code Execution issue where remote code could be executed by mis-handling embedded fonts. Affected products include multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1, 10 1511/1607/1703, Server 2012/2016) and Office Word Viewer/Office 20...
CVE-2018-0814
Technical details for CVE-2018-0814 are not publicly available in the provided Connected documents. No explicit affected products, versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2018-0973
Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.
CVE-2018-0977
CVE-2018-0977: Elevation of privilege in the Windows kernel mode driver (Win32k) due to improper handling of objects in memory. Affected: Windows 10 releases Gold, 1511, 1607, 1703, 1709; Windows Server 2016 and Windows Server 1709. Impact is local privilege escalation with full compromise of con...
CVE-2018-8209
CVE-2018-8209 describes an information-disclosure vulnerability in Windows where a normal user can access the wireless LAN profile of an administrative user. Affected products include Windows Server 2016, Windows 10, and Windows 10 Servers. The vulnerability stems from improper access control aro...
CVE-2018-8335
Technical details about CVE-2018-8335 are not publicly provided in the connected documents. Monitor for updates.
CVE-2019-0734
CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...
CVE-2019-1027
The CVE-2019-1027 entry concerns a local elevation of privilege in Windows Audio Service. Affected component is the Windows Audio Service, with root cause described as improper handling of requests by the service that can be exploited to execute code with elevated privileges. Impact is local priv...
CVE-2019-1050
CVE-2019-1050 affects the Windows GDI component and is an information-disclosure vulnerability where memory objects may be improperly disclosed. An attacker could exploit this by convincing a user to open a specially crafted document or visit an untrusted webpage, potentially enabling access to m...
CVE-2019-1249
CVE-2019-1249 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could trigger arbitrary code execution by convincing a user to open a specially crafted file, with the impact described as remote code exe...
CVE-2019-1321
CVE-2019-1321 : An elevation-of-privilege flaw in Windows CloudStore occurs when a Discretionary Access Control List (DACL) is mishandled. Technical description across connected documents confirms the issue is a local-elevation vulnerability in Windows CloudStore. The NVD entry lists CVSS results...
CVE-2019-1384
Technical details about CVE-2019-1384 are not publicly available in the provided documents. The materials mention a NETLOGON security feature bypass but do not specify affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2019-1474
Technical details for CVE-2019-1474 are not publicly provided in the connected documents. The CVE entry lacks explicit product/version/impact/fix mapping in the supplied materials; monitor for updates.
CVE-2020-0622
CVE-2020-0622 : Information disclosure in the Microsoft Windows Graphics Component caused by improper handling of memory objects. Documented as a local vulnerability with partial/high impact to confidentiality (CVSS v3.1: MEDIUM, base score 5.5) and low base score in CVSS v2 (2.1). Affected produ...
CVE-2020-0722
Technical details for CVE-2020-0722 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2020-0734
CVE-2020-0734 affects the Windows Remote Desktop Client. The connected Nessus entries describe a remote code execution vulnerability when a user connects to a malicious RDP server, enabling arbitrary code on the client. The issue is addressed by February 2020 Windows security updates (KB4537820 /...
CVE-2020-0735
Technical details for CVE-2020-0735 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0794
CVE-2020-0794 is a Windows denial-of-service vulnerability caused by improper handling of memory objects. The CVE entry indicates local attack vector with low complexity and no authentication, resulting in availability impact (DoS). Public records in the connected documents reference Windows secu...
CVE-2020-0840
This CVE (CVE-2020-0840) describes an elevation of privilege in Windows arising from improper handling of hard links (Windows Hard Link Elevation of Privilege Vulnerability). The description notes a local attack resulting in a higher-privilege impact, with the CVSS v3.1 vector indicating Local ac...
CVE-2020-0909
CVE-2020-0909 affects Microsoft Windows Hyper-V on Windows Server. The vulnerability arises when Hyper-V fails to properly handle specially crafted network packets, which could allow a denial-of-service condition. The connected documents confirm Hyper-V as the affected component and describe the ...
CVE-2020-0999
Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.
CVE-2020-1004
Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.
CVE-2020-1052
Technical details for CVE-2020-1052 (ssdpsrv.dll memory handling vulnerability) are not provided in the connected documents. Monitor for updates; no public exploit specifics, affected versions, root cause, or remediation details are given here.
CVE-2020-1098
CVE-2020-1098 is a Windows privilege-escalation in the Shell infrastructure component where memory object handling could be improperly managed. An attacker must log on and run a crafted application to elevate, gaining control of the system in an elevated context. The issue is addressed by Microso...
CVE-2020-1155
IBM MaaS360 Cloud Extender has CVE-2020-1155 and CVE-2020-1156. The IBM security bulletin notes the affected product is IBM MaaS360 Cloud Extender (2.101.x and earlier) and provides a remediation: upgrade to version 2.102.000.060 or newer. No other technical details (e.g., root cause, exploitabil...
CVE-2020-1412
CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...
CVE-2020-1543
CVE-2020-1543 is an Elevation of Privilege in Windows Backup Engine caused by improper memory handling. An attacker who already has code execution on the victim system could run a crafted application to gain higher privileges. Microsoft’s security update fixes the vulnerability by correcting how ...
CVE-2020-16997
Technical details about CVE-2020-16997 are not provided in the connected documents. The Initial Description is generic; no affected products, root cause, impact, or remediation are present. Monitor for updates.
CVE-2020-16998
Technical details about CVE-2020-16998 are not publicly provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, root causes, and remediation guidance.
CVE-2020-17055
Technical details about CVE-2020-17055 are not provided in the connected documents; public specifics (affected products, root cause, exploitability) are not disclosed here. Monitor for updates.
CVE-2020-17057
CVE-2020-17057 affects Windows Win32k via elevation of privilege. A PoC/exploit exists in a connected document, and Microsoft issued a patch on 2020-11-10 to fix the issue. The exact affected product/version details and vulnerability root cause are not fully enumerated in the provided sources, bu...