2974 matches found
CVE-2019-1394
Technical details about CVE-2019-1394 are not provided in the connected documents. Monitor for updates from official advisories; the supplied EUVD entries relate to unrelated malware listings and do not illuminate this CVE.
CVE-2019-1422
Technical details for CVE-2019-1422 are not provided in the connected documents. The sources mention Windows elevation-of-privilege context but do not specify affected components, versions, root cause, or fixes. Monitor for updates.
CVE-2020-0783
CVE-2020-0783 is an elevation-of-privilege vulnerability in the Windows Universal Plug and Play (UPnP) service. The root cause, as described in provided documents, is improper handling of objects in memory within the UPnP service, enabling a local attacker to execute code with elevated system pri...
CVE-2020-0837
CVE-2020-0837 affects Active Directory Federation Services (ADFS) and is an Elevation of Privilege vulnerability arising from improper handling of multi-factor authentication requests. The initial description states that an attacker could bypass some MFA factors by sending a specially crafted aut...
CVE-2020-0858
CVE-2020-0858 is a Windows elevation-of-privilege vulnerability where the Public Account Pictures folder improperly handles junctions. The root cause is incorrect handling of junctions in that folder, enabling local attacker code execution with privileges as described in the CVE entry. Exploitati...
CVE-2020-0946
CVE-2020-0946 is a Media Foundation Information Disclosure vulnerability in Microsoft Windows where improper handling of memory objects can allow an information disclosure. The initial entry identifies Media Foundation as the affected component and describes the flaw as memory-object handling lea...
CVE-2020-1091
Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.
CVE-2020-1162
CVE-2020-1162 and CVE-2020-1324 are elevation-of-privilege flaws in Windows Security Health Service. They arise from how memory objects are handled, enabling local attackers who can log on to execute code with elevated privileges and potentially compromise memory, depending on the specific CVE. T...
CVE-2020-1212
Technical details about CVE-2020-1212 are not publicly provided in the supplied connected documents; no vendor/product/impact specifics beyond the initial description are present. Monitor for updates.
CVE-2020-1236
CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...
CVE-2020-1255
CVE-2020-1255 refers to an elevation of privilege vulnerability in the Windows Background Intelligent Transfer Service (BITS) IIS module. Connected data (CNVD-2021-27705) states the flaw arises from the module’s failure to properly handle uploads, enabling an attacker to exploit a specially craft...
CVE-2020-1333
CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...
CVE-2020-16895
CVE-2020-16895 corresponds to a Windows elevation-of-privilege flaw in the Windows Error Reporting manager that occurs when handling a process crash. A local attacker who can log on and run a crafted application could delete a targeted file, achieving elevated permissions. The vulnerability is ad...
CVE-2020-17011
CVE-2020-17011 is a Windows Port Class Library elevation of privilege vulnerability. The NVD entry lists a local, low-complexity vector with no authentication required and a high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 7.8). Connected documents identify the is...
CVE-2021-1689
CVE-2021-1689 is a Windows Multipoint Management Elevation of Privilege vulnerability. The available data from the connected sources (NVD entry) states a base CVSS v3.1 score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, and no user interaction. The impact is HIGH for Confident...
CVE-2021-26863
CVE-2021-26863 is a Windows Win32k elevation-of-privilege vulnerability in win32kfull.sys (BLTRECORD::bRotate) that can allow a local attacker to gain SYSTEM-level privileges by triggering a NULL-page-execution scenario when a mapped NULL page is accessible and HOOK_PLGBLT is set, leading to call...
CVE-2021-26901
CVE-2021-26901 is a Windows Event Tracing Elevation of Privilege vulnerability. The entry is active with a local, low-attack-complexity vector and high impact (confidentiality, integrity, and availability) per CVSS v3.1 and CVSS v2.0 metrics. Connected docs show Windows updates (e.g., KB5000802/K...
CVE-2021-28312
CVE-2021-28312 is a Windows NTFS Denial of Service vulnerability. Connected materials confirm the issue resides in NTFS and provide a PoC/description showing how it can be exploited (reproduction via NTFS $i30:$bitmap reference and a remote exploitation scenario). Exploitation details are documen...
CVE-2021-28438
Technical details (affected component, root cause, impacted versions, or exploit info) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2021-43216
Technical details for CVE-2021-43216 are not publicly provided in the supplied documents. Monitor for updates from the referenced sources; no public specifics on affected products, versions, or impacts are included here.
CVE-2022-26797
Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.
CVE-2022-29114
Technical details about CVE-2022-29114 are not provided in the supplied documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updates from the provided references as needed.
CVE-2016-3396
CVE-2016-3396 is a GDI+ remote code execution in Graphics Device Interface (GDI) that allows a remote attacker to execute arbitrary code via a crafted embedded font. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R...
CVE-2017-8490
Technical details about CVE-2017-8490 are not publicly provided in the connected EUVD entries; no affected products, root cause, impact, or remediation details are disclosed here. Monitor for updates.
CVE-2018-0894
Technical details about CVE-2018-0894 are not provided in the connected documents. The initial entry describes an information disclosure vulnerability in Windows kernels across multiple versions, but no affected product specifics, fixes, or exploit data are included here. Monitor for updates.
CVE-2018-1035
CVE-2018-1035 is a Windows security feature bypass affecting Windows 10/Windows Server (notably 1709 per related advisories). The vulnerability stems from how Windows validates User Mode Code Integrity (UMCI) policies, allowing a local attacker with access to bypass Device Guard. The issue is add...
CVE-2018-8592
CVE-2018-8592 is an elevation-of-privilege vulnerability in Windows 10 version 1809 (and Windows Server 2019) that can be triggered when the OS is installed from physical media (USB/DVD) with the “keep nothing” option selected. Successful exploitation could grant local, elevated access to an atta...
CVE-2019-0965
The CVE-2019-0965 issue affects Microsoft Windows Hyper-V on a host server, where the host fails to properly validate input from a guest OS. According to connected records, a specially crafted application running on a guest could trigger Hyper-V to execute arbitrary code on the host. The vulnerab...
CVE-2019-1177
CVE-2019-1177 is a Windows elevation-of-privilege vulnerability in how rpcss.dll handles objects in memory. A locally authenticated attacker could run a specially crafted application to execute code with elevated permissions. The issue stems from memory object handling within rpcss.dll, with miti...
CVE-2019-1185
CVE-2019-1185 affects Windows Subsystem for Linux. It is an elevation-of-privilege flaw caused by stack corruption in WSL, exploitable by a locally authenticated attacker via a crafted application to run code with elevated privileges. Mitigation is a security update that corrects how WSL handles ...
CVE-2019-1433
Technical details about CVE-2019-1433 are not publicly available in the provided connected documents; monitor for updates.
CVE-2019-1470
CVE-2019-1470 is described as an information-disclosure vulnerability in Windows Hyper-V where a host OS fails to properly validate input from an authenticated user on a guest OS. The linked Red Hat advisory repeats this description. The connected documents do not provide specific affected versio...
CVE-2020-0633
Technical details about CVE-2020-0633 are not publicly available in the provided connected documents. Monitor for updates as new information becomes accessible.
CVE-2020-0708
CVE-2020-0708 is a Windows Imaging Library remote code execution vulnerability caused by improper memory handling. An attacker must coerce a victim to open a specially crafted file, leading to arbitrary code execution with the user’s privileges. Microsoft released a security update to fix the mem...
CVE-2020-0838
CVE-2020-0838 describes an elevation-of-privilege vulnerability in Windows NTFS where access checks are insufficiently performed. An attacker who can log on locally and run a specially crafted application could execute code in an elevated context, potentially gaining full control of the affected ...
CVE-2020-1094
CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...
CVE-2020-1116
CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...
CVE-2020-1174
Technical details about CVE-2020-1174/1175/1176 are not provided in the connected documents. Public details are not included in the supplied material. Monitor for updates from Microsoft and CVE feeds.
CVE-2020-1194
Technical details about CVE-2020-1194 are not publicly provided in the connected documents. The material confirms a Windows Registry DoS vulnerability but lacks product/version context or fixes. Monitor for official updates from Microsoft/NVD to obtain concrete details.
CVE-2020-1250
Technical details about CVE-2020-1250, including affected products, root cause, impact, or patch specifics, are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2020-1314
CVE-2020-1314: A Windows TSF Elevation of Privilege vulnerability exists where the TSF server mishandles messages from TSF clients, enabling an attacker with a crafted TSF client to execute arbitrary code with local privileges by exploiting the TSF messaging flow. No patch details are provided in...
CVE-2020-1371
Technical details about CVE-2020-1371 are not publicly provided in the connected documents. Please monitor for updates from official sources for affected products, impact, and remediation.
CVE-2020-1410
CVE-2020-1410 describes a remote code execution vulnerability in Windows Address Book (WAB) where processing of vcard files is flawed. The CNVD-2021-65603 entry corroborates a WAB-based RCE affecting Windows/Windows Server. Public descriptions state that an attacker could deliver a malicious vCar...
CVE-2020-1430
Technical details about CVE-2020-1430 are not publicly provided in the connected documents. Please monitor for official advisories or vendor advisories for affected products, exposure, and fixes.
CVE-2020-1491
Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-1592
CVE-2020-1592 : Windows kernel information disclosure vulnerability. The kernel improperly initializes objects in memory; an authenticated attacker can run a crafted application to glean information to facilitate further compromise. The update fixes how memory is initialized by the kernel. Source...
CVE-2020-16961
CVE-2020-16961 is reported as a Windows Backup Engine Elevation of Privilege vulnerability. The entry lists affected software as Windows Backup Engine with a CVSS v3.1 base score of 7.8 (LOCAL access, LOW privileges required, no user interaction, Privileges required: LOW; confidentiality, integri...
CVE-2020-17036
CVE-2020-17036 corresponds to a Windows Function Discovery SSDP Provider Information Disclosure Vulnerability. The vulnerability affects Windows Function Discovery SSDP Provider and is described as an information disclosure issue. The provided documents do not include concrete technical details s...