2974 matches found
CVE-2020-1430
Technical details about CVE-2020-1430 are not publicly provided in the connected documents. Please monitor for official advisories or vendor advisories for affected products, exposure, and fixes.
CVE-2020-1491
Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-16961
CVE-2020-16961 is reported as a Windows Backup Engine Elevation of Privilege vulnerability. The entry lists affected software as Windows Backup Engine with a CVSS v3.1 base score of 7.8 (LOCAL access, LOW privileges required, no user interaction, Privileges required: LOW; confidentiality, integri...
CVE-2020-17036
CVE-2020-17036 corresponds to a Windows Function Discovery SSDP Provider Information Disclosure Vulnerability. The vulnerability affects Windows Function Discovery SSDP Provider and is described as an information disclosure issue. The provided documents do not include concrete technical details s...
CVE-2020-17097
Technical details (affected products, root cause, exploitability) for CVE-2020-17097 are not provided in the supplied documents. Monitor for updates.
CVE-2021-28309
Technical details for CVE-2021-28309 (Windows Kernel Information Disclosure Vulnerability) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or remediations are disclosed here. Monitor sources for updates.
CVE-2021-28316
CVE-2021-28316 affects Windows WLAN AutoConfig, enabling a security feature bypass in that service. Reports indicate it is a local-attack surface with no public exploitation to date, and Microsoft released fixes as part of the September 2021 Patch Tuesday. The vulnerability’s impact is described ...
CVE-2021-43232
CVE-2021-43232 corresponds to a Windows Event Tracing (ETW) remote code execution vulnerability. The CNVD entry explicitly identifies ETW as the affected component and states the vulnerability enables remote code execution on Windows. The CVE record itself notes Windows Event Tracing RCE with a m...
CVE-2021-43234
CVE-2021-43234 is a Windows Fax Service Remote Code Execution Vulnerability. Connected CNVD entry explicitly states a remote code execution vulnerability exists in Microsoft Windows Fax Service, enabling an attacker to run arbitrary code on the target host. NVD entries corroborate the CVE and ass...
CVE-2021-43248
Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.
CVE-2015-2478
CVE-2015-2478 is the Windows Winsock Elevation of Privilege vulnerability. A crafted application can trigger a Winsock call referencing an invalid address, enabling local privilege escalation on multiple Windows platforms: Windows Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windo...
CVE-2015-6107
CVE-2015-6107 concerns a remote-code-execution vulnerability in the Windows font library. The issue arises when parsing specially crafted embedded fonts, enabling arbitrary code execution on affected systems. Public references indicate this affects a broad set of Windows versions (Vista through W...
CVE-2015-6132
CVE-2015-6132 is the Windows library loading remote code execution vulnerability affecting multiple Windows versions. Root cause: mishandled library loading enabling local privilege escalation via a crafted application. The MS15-132 security update fixes this, with public exploits and a Metasploi...
CVE-2016-0073
CVE-2016-0073 affects Windows kernel local elevation of privilege on Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, and Windows 10 (1511/1607). Root cause: crafted application triggers a kernel API pathway to access sensitive registry information, enabling local privilege escalation....
CVE-2017-0076
Summary of CVE-2017-0076 and related entries : The vulnerability affects Hyper-V in multiple Windows platforms (Vista SP2; Server 2008 SP2/2008 R2; Windows 7 SP1; Windows 8.1; Server 2012/2012 R2; Windows 10 versions 1511/1607; and Windows Server 2016). The issue allows a guest OS user running in...
CVE-2017-0250
CVE-2017-0250 corresponds to a remote code execution vulnerability in the Microsoft JET Database Engine present in Windows components (e.g., older Office/Jet usage). The issue is a buffer overflow that could allow an attacker to take control of the affected system. Connected updates (KBxxxx-Oct 2...
CVE-2017-11880
CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...
CVE-2018-0904
The CVE-2018-0904 entry concerns a Windows kernel information disclosure vulnerability affecting Windows kernel in multiple client/server OS builds (Windows 7/8.1/10, Windows Server 2008 R2/2012/2016, etc.). Root cause: memory address handling in the kernel allows partial information disclosure w...
CVE-2018-8219
CVE-2018-8219 is a privilege-escalation flaw in Windows Hyper-V Code Integrity. The vulnerability arises when Hyper-V instruction emulation fails to properly enforce privilege levels, enabling elevation of privileges. Affected products include Windows Server 2016 and Windows 10 (including Windows...
CVE-2018-8462
CVE-2018-8462 is a local elevation-of-privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver. The CNVD entry states that the DXGKRNL driver’s handling of memory objects is vulnerable, enabling privilege escalation on Windows platforms (Windows Server 2016 and Windows 10 family). ...
CVE-2019-0733
Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.
CVE-2019-1424
CVE-2019-1424 is a Windows Netlogon security feature bypass vulnerability. Public data describe a vulnerability in how the Netlogon secure channel is handled, with a CVSS v3.1 base score of 8.1 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) and a NETWORK attack vector, no user interaction required. No exp...
CVE-2019-1438
Technical details for CVE-2019-1438 are not publicly available in the provided documents. No exposed affected products, root cause, impact, or remediation are disclosed here. Monitor official advisories and NVD for updates.
CVE-2019-1465
CVE-2019-1465 corresponds to a Windows GDI Information Disclosure vulnerability in the GDI component. The CNVD entries describe an information leakage vector where an attacker could obtain memory contents, with exploitation via social engineering (e.g., crafted documents or untrusted pages). The ...
CVE-2020-0614
Technical details about CVE-2020-0614 are not provided in the connected documents; no specifics on affected products, root cause, or remediation are available here. Monitor for updates.
CVE-2020-0621
CVE-2020-0621 is a Windows 10 security feature bypass vulnerability where third‑party filters invoked during a password update can bypass protections. Affected product: Windows 10 (password update path with third‑party filters). Root cause: bypass of security feature during password change, enabl...
CVE-2020-0678
Technical details for CVE-2020-0678 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2020-0772
CVE-2020-0772 is a Windows Error Reporting memory-handling bug causing local privilege escalation. The vulnerability requires local execution and has a CVSSv3.1 base score of 7.8 (HIGH) with local attack, low attack complexity, and no user interaction. The description does not provide a patch or ...
CVE-2020-0779
CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...
CVE-2020-0784
CVE-2020-0784 is described as a DirectX Elevation of Privilege vulnerability where DirectX improperly handles memory objects. Affected component: DirectX in Windows graphics stack. Root cause stated: memory object handling issues in DirectX. Impact: local privilege escalation (high/complete confi...
CVE-2020-0803
Technical details for CVE-2020-0803 are not publicly provided in the connected documents; monitor for updates.
CVE-2020-0842
CVE-2020-0842 is a Windows Installer elevation-of-privilege vulnerability. It arises from how Windows Installer handles certain filesystem operations, enabling an unprivileged attacker to execute code on the victim system with local access. The entry is part of a set of CVEs linked to Windows Ins...
CVE-2020-0934
Technical details about CVE-2020-0934 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-0950
CVE-2020-0950 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of memory objects, part of the Media Foundation Memory Corruption family alongside CVE-2020-0948 and CVE-2020-0949. The connected CNVD entries similarly refer to a Media Foundat...
CVE-2020-0987
Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.
CVE-2020-1232
CVE-2020-1232 is an information-disclosure vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The core component is Windows Media Foundation; affected behavior is the disclosure of memory contents, as described in the CVE entry and corroborated by related ...
CVE-2020-1235
Technical details for CVE-2020-1235 are not publicly available in the provided documents. Monitoring for updates is recommended.
CVE-2020-1256
Technical details, affected components, and fixes for CVE-2020-1256 are not provided in the connected documents. Public details unavailable here; monitor the Security Update Guide and KB notes for updates.
CVE-2020-1282
Technical details for CVE-2020-1282 are not provided in the connected documents. Based on the initial entry, no explicit exploit vectors, impacted products, or remediation are disclosed here; monitor for official updates.
CVE-2020-1287
CVE-2020-1287 is a Windows WalletService elevation of privilege vulnerability. The WalletService stores/handles objects in memory in a way that can be exploited to elevate privileges; both CNVD entries (CNVD-2021-27713, CNVD-2021-29542) describe this WalletService memory-object handling flaw with...
CVE-2020-1334
Technical details about CVE-2020-1334 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.
CVE-2020-17004
According to CNVD-2021-63301, CVE-2020-17004 is a Windows/Windows Server graphics component information-disclosure vulnerability. It allows an attacker to read kernel memory contents from a user-mode process. The affected product is Microsoft Windows/Windows Server; the exact root cause, vulnerab...
CVE-2020-17029
CVE-2020-17029 is a Windows Canonical Display Driver Information Disclosure Vulnerability. Affected software: Windows Canonical Display Driver. Root cause: information disclosure vulnerability within the Canonical Display driver. Impact: confidentiality impact HIGH (per CVSS 3.1), with local atta...
CVE-2020-17032
Technical details about CVE-2020-17032 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources for affected products, impact, and remediation.
CVE-2020-17099
CVE-2020-17099 corresponds to a Windows lock-screen security feature bypass. The available data indicate a physical-access vulnerability affecting Windows lock screen functionality, with a CVSSv3.1 base score of 6.8 and impact on confidentiality, integrity, and availability (C:H/I:H/A:H) when exp...
CVE-2021-1688
Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2021-26864
CVE-2021-26864 is described as a Windows Virtual Registry Provider Elevation of Privilege vulnerability. Connected details outline a chain where container isolation through Windows Server/Silo mechanisms (registry overlays, object manager root directories, and silo handling) can be bypassed. A no...
CVE-2021-26881
Technical details about CVE-2021-26881 are not provided in the connected documents. The initial entry only states a Windows Media Foundation Remote Code Execution vulnerability. Monitor for updates and additional public details.
CVE-2021-28442
A TCP/IP information disclosure vulnerability exists in the Microsoft Windows operating system. This flaw stems from insufficient protection of operational data within the TCP/IP protocol stack implementation. An attacker acting remotely can exploit this vulnerability to gain unauthorized access ...