2974 matches found
CVE-2019-1250
Technical details for CVE-2019-1250 are not provided in the supplied documents. Public information here confirms it’s a Windows Jet Database Engine RCE vulnerability but no product/version, affected component, impact, or fix details are specified. Monitor for updates.
CVE-2020-0753
Technical details for CVE-2020-0753 are not provided in the connected documents. The Initial Description only notes an Elevation of Privilege in Windows Error Reporting. Monitor for updates from Microsoft/MSRC for full specifics (affected products, root cause, and remediation).
CVE-2020-0950
CVE-2020-0950 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of memory objects, part of the Media Foundation Memory Corruption family alongside CVE-2020-0948 and CVE-2020-0949. The connected CNVD entries similarly refer to a Media Foundat...
CVE-2020-1236
CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...
CVE-2020-1255
CVE-2020-1255 refers to an elevation of privilege vulnerability in the Windows Background Intelligent Transfer Service (BITS) IIS module. Connected data (CNVD-2021-27705) states the flaw arises from the module’s failure to properly handle uploads, enabling an attacker to exploit a specially craft...
CVE-2020-1278
CVE-2020-1278 relates to an elevation of privilege in the Diagnostics Hub Standard Collector Service due to improper file operations. The vulnerability enables local privilege elevation, as the service handles files in a way that can be exploited by an authenticated attacker with access to the sy...
CVE-2020-1296
Windows Diagnostics & feedback Information Disclosure Vulnerability (CVE-2020-1296) exists in the way the Diagnostics & feedback Settings app handles memory objects. An attacker would need to log on to an affected system and interact with the app to cause diagnostic data to be sent to Microsoft. ...
CVE-2020-1302
Technical details for CVE-2020-1302 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-1370
Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.
CVE-2020-1428
Technical details about CVE-2020-1428 are not publicly provided in the connected documents you supplied. Please monitor for updates from official advisories.
CVE-2020-1547
CVE-2020-1547 – Windows Backup Engine memory handling vulnerability . A local-elevation-of-privilege flaw exists in Windows Backup Engine due to improper memory handling. An attacker must first gain code execution on the victim and then run a crafted application to elevate privileges. According t...
CVE-2020-16895
CVE-2020-16895 corresponds to a Windows elevation-of-privilege flaw in the Windows Error Reporting manager that occurs when handling a process crash. A local attacker who can log on and run a crafted application could delete a targeted file, achieving elevated permissions. The vulnerability is ad...
CVE-2020-17000
CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...
CVE-2020-17025
Technical details for CVE-2020-17025 are not provided in the supplied documents; affected products, impact, root cause, or remediation are not disclosed. Monitor for updates.
CVE-2020-17162
Technical details about CVE-2020-17162 are not publicly provided in the connected documents; only a general description and CVSS metrics are present. Monitor official advisories for updates.
CVE-2021-1661
Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.
CVE-2021-1688
Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2021-43248
Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.
CVE-2022-34728
CVE-2022-34728 is described as a Windows Graphics Component Information Disclosure Vulnerability. The provided metrics indicate a CVSSv3.1 base score of 5.5 (MEDIUM), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction. The confidentiality impact is...
CVE-2022-37983
CVE-2022-37983 affects the Windows DWM Core Library. The vulnerability is an elevation of privilege that arises from improper privilege assignment in the DWM Core Library, enabling a local attacker with low privileges to gain higher privileges (high impact on confidentiality, integrity, and avail...
CVE-2022-38034
CVE-2022-38034 is a Windows Workstation Service Elevation of Privilege vulnerability. Connected documents confirm the affected component is Windows Workstation Service and that the root cause is improper privilege assignment, enabling an attacker to obtain increased privileges (described as privi...
CVE-2016-0180
CVE-2016-0180 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10 variants). The root cause is how the Windows kernel mishandles symbolic links, enabling a local attacker to gain privileges via a...
CVE-2016-7295
Technical details about CVE-2016-7295 are not publicly provided in the supplied documents. The CLFS information-disclosure vulnerability details, affected products/versions, and fixes are not elaborated here. Monitor for updates from official advisories.
CVE-2017-0074
CVE-2017-0074 is a Hyper-V denial-of-service vulnerability affecting Windows Hyper-V across multiple Windows client and server editions. Connected sources (CNVD entries) describe a Hyper-V DoS where a crafted application can crash the host, affecting Hyper-V guests; specific affected versions ali...
CVE-2017-0250
CVE-2017-0250 corresponds to a remote code execution vulnerability in the Microsoft JET Database Engine present in Windows components (e.g., older Office/Jet usage). The issue is a buffer overflow that could allow an attacker to take control of the affected system. Connected updates (KBxxxx-Oct 2...
CVE-2017-0258
CVE-2017-0258 is a Windows kernel local information-disclosure vulnerability affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2008 SP2/R2 SP1, Windows Server 2012/2016, Windows 10 releases 1511–1703, RT 8.1). A specially crafted document can allow an authenticated u...
CVE-2017-11880
CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...
CVE-2017-8490
Technical details about CVE-2017-8490 are not publicly provided in the connected EUVD entries; no affected products, root cause, impact, or remediation details are disclosed here. Monitor for updates.
CVE-2017-8576
CVE-2017-8576 affects the Windows Graphics Component in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. An authenticated attacker can run arbitrary code in kernel mode by presenting a specially crafted application, enabling elevation of privilege. The issue is rooted in how the Windo...
CVE-2018-0894
Technical details about CVE-2018-0894 are not provided in the connected documents. The initial entry describes an information disclosure vulnerability in Windows kernels across multiple versions, but no affected product specifics, fixes, or exploit data are included here. Monitor for updates.
CVE-2018-0960
Technical details for CVE-2018-0960 are not publicly available in the provided documents. No product/version-specific impact or remediation is stated here; monitor for updates from official advisories.
CVE-2019-1022
CVE-2019-1022 describes a local elevation-of-privilege in Windows Audio Service. The vulnerability arises from how the service handles certain process-related requests; a crafted, local application could enable an attacker to execute code with elevated privileges, potentially compromising the hos...
CVE-2019-1172
Technical details about CVE-2019-1172 are not publicly provided in the supplied documents; no concrete affected products, root cause, or remediation are listed beyond a generic description. Monitor for updates.
CVE-2019-1175
CVE-2019-1175 is a Windows elevation-of-privilege vulnerability linked to psmsrv.dll handling of in-memory objects. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. Microsoft security guidance notes the fix involves ensuring psmsrv.dll pr...
CVE-2019-1286
CVE-2019-1286 concerns a Windows GDI information disclosure vulnerability. The connected materials describe an information disclosure in the Graphics Device Interface (GDI) where memory contents may be improperly disclosed. The vulnerability is tied to the GDI component and memory handling. The s...
CVE-2019-1406
CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...
CVE-2019-1433
Technical details about CVE-2019-1433 are not publicly available in the provided connected documents; monitor for updates.
CVE-2019-1438
Technical details for CVE-2019-1438 are not publicly available in the provided documents. No exposed affected products, root cause, impact, or remediation are disclosed here. Monitor official advisories and NVD for updates.
CVE-2020-0628
Technical details for CVE-2020-0628 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0803
Technical details for CVE-2020-0803 are not publicly provided in the connected documents; monitor for updates.
CVE-2020-0839
CVE-2020-0839 describes an elevation of privilege in the Windows dnsrslvr.dll memory handling. An attacker with local authentication could run a crafted app to execute code with elevated permissions. The vulnerability stems from improper memory object handling in dnsrslvr.dll, and mitigations rel...
CVE-2020-0841
Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.
CVE-2020-0842
CVE-2020-0842 is a Windows Installer elevation-of-privilege vulnerability. It arises from how Windows Installer handles certain filesystem operations, enabling an unprivileged attacker to execute code on the victim system with local access. The entry is part of a set of CVEs linked to Windows Ins...
CVE-2020-0859
CVE-2020-0859 is described as an information disclosure vulnerability in Windows Modules Installer Service where file information could be disclosed. The primary details available: affected component is Windows Modules Installer Service; root cause and exact exploitation path are not elaborated i...
CVE-2020-1021
Technical details for CVE-2020-1021 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are specified here. Monitor for updates.
CVE-2020-1067
CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...
CVE-2020-1155
IBM MaaS360 Cloud Extender has CVE-2020-1155 and CVE-2020-1156. The IBM security bulletin notes the affected product is IBM MaaS360 Cloud Extender (2.101.x and earlier) and provides a remediation: upgrade to version 2.102.000.060 or newer. No other technical details (e.g., root cause, exploitabil...
CVE-2020-1422
Technical details about CVE-2020-1422 are not publicly provided in the supplied connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation.
CVE-2020-1571
Technical details about CVE-2020-1571 are not provided in the supplied documents. The records reference a Windows Setup elevation-of-privilege issue with no specific affected builds, root cause, exploit info, or fixes disclosed here. Monitor for updates.