2974 matches found
CVE-2020-1353
Technical details about CVE-2020-1353 are not publicly available in the provided connected documents; the materials only reference the CVE title and MS advisories. Monitor for updates.
CVE-2020-1370
Technical details about CVE-2020-1370 are not publicly available in the provided documents. Monitor for updates from official advisories (e.g., MSRC, ENISA EUVD) for affected products, impact, and fixes.
CVE-2020-1407
Technical details for CVE-2020-1407 are not provided in the supplied documents. The description mentions the Jet Database Engine RCE but no affected product/version specifics or remediation are included here. Monitor for updates.
CVE-2020-1422
Technical details about CVE-2020-1422 are not publicly provided in the supplied connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation.
CVE-2020-1471
CVE-2020-1471 is an elevation-of-privilege vulnerability in Windows CloudExperienceHost. The root cause, as described in the initial document, is that CloudExperienceHost fails to properly check COM objects, enabling an attacker who can log on to an affected system to run a crafted script or appl...
CVE-2020-1571
Technical details about CVE-2020-1571 are not provided in the supplied documents. The records reference a Windows Setup elevation-of-privilege issue with no specific affected builds, root cause, exploit info, or fixes disclosed here. Monitor for updates.
CVE-2020-1589
Technical details of CVE-2020-1589 are not publicly provided in the supplied documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2020-17010
CVE-2020-17010 is a local Win32k elevation-of-privilege vulnerability in Microsoft Windows. It affects Win32k/Windows components and could allow an attacker to obtain SYSTEM-level privileges on a vulnerable host, with CVSS indicating LOCAL access, LOW attack complexity, and HIGH impact to confide...
CVE-2020-17026
CVE-2020-17026 is documented as a Windows Remote Access Elevation of Privilege vulnerability. The available sources (NVD entry) label it with local attack vector and partial confidentiality, integrity, and availability impacts (CVSS v2 base score 4.6; CVSS v3.1 base score 7.8). Connected document...
CVE-2020-17037
Technical details are not publicly available in the provided documents for CVE-2020-17037; monitor for updates.
CVE-2020-17041
CVE-2020-17041 technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2020-17099
CVE-2020-17099 corresponds to a Windows lock-screen security feature bypass. The available data indicate a physical-access vulnerability affecting Windows lock screen functionality, with a CVSSv3.1 base score of 6.8 and impact on confidentiality, integrity, and availability (C:H/I:H/A:H) when exp...
CVE-2020-17162
Technical details about CVE-2020-17162 are not publicly provided in the connected documents; only a general description and CVSS metrics are present. Monitor official advisories for updates.
CVE-2021-1672
CVE-2021-1672 refers to a Windows vulnerability in the Projected File System (PFS) FS Filter Driver that enables information disclosure. The connected MSRC entry and NVD record confirm the affected component is the Windows PFS FS Filter Driver, with root cause described as an information disclosu...
CVE-2021-1679
Technical details for CVE-2021-1679 are not publicly provided in the supplied documents. Please monitor for updates; no product, impact, or remediation specifics are included here.
CVE-2021-24091
CVE-2021-24091 corresponds to a remote code execution in the Windows Camera Codec Pack. Connected CNVD data attributes the issue to the Windows camera codec package on Windows/Windows Server. The vulnerability is described as enabling remote code execution; no remediation details are provided in ...
CVE-2021-26417
CVE-2021-26417 is described as a Windows Overlay Filter Information Disclosure vulnerability with local attack vector. Connected documents corroborate this as a Microsoft Windows/Windows Server information-disclosure issue connected to the Overlay Filter. Public references show the vulnerability ...
CVE-2021-26875
CVE-2021-26875 is described as a Windows Win32k Elevation of Privilege Vulnerability. The provided connected documents do not reveal concrete technical details (affected component versions, specific root cause, exploit vectors, or explicit remediation) for this CVE; only high-level references to ...
CVE-2021-27070
CVE-2021-27070 is the Windows 10 Update Assistant Elevation of Privilege vulnerability. Connected sources confirm it affects the Windows Update Assistant component and was addressed by Microsoft in KB5000802 (March 9, 2021) which lists CVE-2021-27070 among fixed issues. The CVSS information in th...
CVE-2021-27079
Technical details about CVE-2021-27079 are not publicly available in the provided documents; no affected versions, root cause, or fixes are disclosed here. Monitor for updates.
CVE-2021-28317
Technical details about CVE-2021-28317 are not provided in the connected documents. Available sources only reiterate the vulnerability name; monitor for updates for public details.
CVE-2021-40468
CVE-2021-40468 corresponds to a Windows Bind Filter Driver Information Disclosure vulnerability. The connected data confirms affected component as Windows Bind Filter Driver and assigns CVSS v3.1 base metrics of 5.5 (Medium) with LOCAL attack vector, LOW attack complexity, and LOW privileges requ...
CVE-2022-35760
Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.
CVE-2022-35793
Technical details about CVE-2022-35793 are not provided in the connected documents. The set contains only general MSKB updates; monitor official disclosures or vendor advisories for affected products, root cause, impact, and fixes.
CVE-2022-37983
CVE-2022-37983 affects the Windows DWM Core Library. The vulnerability is an elevation of privilege that arises from improper privilege assignment in the DWM Core Library, enabling a local attacker with low privileges to gain higher privileges (high impact on confidentiality, integrity, and avail...
CVE-2016-3342
Technical details for CVE-2016-3342 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2016-7226
CVE-2016-7226 affects the Windows Virtual Hard Disk (VHD) driver on Windows 10 (Gold/1511, 1607) and Windows Server 2016. The VHDMP kernel driver fails to restrict access to certain files, enabling a local attacker to elevate privileges via a crafted application. The root cause is improper file a...
CVE-2016-7259
CVE-2016-7259 affects the Windows Graphics Component in kernel-mode drivers (Win32k) across multiple Windows platforms, allowing local privilege escalation via a crafted application. The root cause is improper handling of memory objects by the Graphics component, enabling privilege elevation (loc...
CVE-2017-0163
CVE-2017-0163 affects Windows Server Hyper-V Network Switch, allowing remote code execution when input from a guest OS is not properly validated. The underlying issue is improper validation of guest-supplied input, enabling an attacker with guest access to execute arbitrary code on the host. Publ...
CVE-2017-0297
Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2017-11785
CVE-2017-11785 is a Windows kernel information-disclosure vulnerability caused by improper handling of objects in memory, affecting multiple Windows client and server versions (from Windows 7 SP1 to Windows 10 builds including 1511/1607/1703 and Windows Server 2008 SP2/R2 SP1, 2012, 2016). The un...
CVE-2018-8165
CVE-2018-8165 describes a local elevation of privilege in the Windows DirectX Graphics Kernel (DXGKRNL) driver, arising from improper handling of objects in memory. The vulnerability affects Windows Server 2016 and Windows 10 family (Windows 10/Server), enabling an attacker with local access to e...
CVE-2019-0998
CVE-2019-0998 affects Windows Storage Service, where improper handling of file operations allows an attacker who can execute code on a victim system to obtain elevated privileges. The root cause is an elevation-of-privilege flaw in the Storage Service’s file operation handling. Exploitation requi...
CVE-2019-1022
CVE-2019-1022 describes a local elevation-of-privilege in Windows Audio Service. The vulnerability arises from how the service handles certain process-related requests; a crafted, local application could enable an attacker to execute code with elevated privileges, potentially compromising the hos...
CVE-2019-1406
CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...
CVE-2019-1408
Technical details for CVE-2019-1408 are not publicly available in the provided documents. Monitor for updates.
CVE-2019-1435
Technical details for CVE-2019-1435 are not publicly available in the provided documents. Connected entries mention malware but do not reveal the affected component, root cause, impact, or remediation. Monitor for updates.
CVE-2020-0666
CVE-2020-0666 is described in CNVD sources as an elevation of privilege affecting Microsoft Windows and Windows Server, stemming from the Windows Search Indexer mishandling objects in memory. The vulnerability enables code execution with elevated privileges on the affected system (local context)....
CVE-2020-0754
Technical details for CVE-2020-0754 are not provided in the connected documents; only high-level information is available.
CVE-2020-0766
CVE-2020-0766 is an elevation-of-privilege vulnerability in the Microsoft Store Runtime caused by improper memory handling. An attacker would need remote execution on the target to run a crafted program that could escalate privileges locally; the issue is mitigated by a security update that corre...
CVE-2020-0841
Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.
CVE-2020-0866
The CVE-2020-0866 entry maps to a Windows Work Folder Service elevation of privilege vulnerability. Connected CNVD-2020-23447 describes a privilege escalation via the service’s improper handling of file operations, enabling a specially crafted application to execute processes with elevated privil...
CVE-2020-0888
CVE-2020-0888 is a DirectX elevation-of-privilege vulnerability. Description: DirectX improperly handles objects in memory, enabling local privilege escalation. It is distinct from CVE-2020-0784. The entry provides a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges, NONE user interaction, HIGH ...
CVE-2020-0989
CVE-2020-0989 affects Windows Mobile Device Management Diagnostics. Root cause: improper handling of junctions, causing information disclosure. Exploitation requires local authentication: an attacker logs on and runs a crafted app to read restricted files. Impact is read access to files due to a ...
CVE-2020-1007
CVE-2020-1007 is a Windows kernel information disclosure vulnerability. The issue arises from how the Windows kernel handles objects in memory, enabling information disclosure when exploited locally. The description, CVSS data, and references indicate a kernel-level memory handling flaw with part...
CVE-2020-1017
CVE-2020-1017 concerns an Elevation of Privilege in Windows Push Notification Service. The vulnerability arises from how in-memory objects are handled by the Windows Push Notification Service, enabling a local attacker to escalate privileges. The CVE entry notes this issue is distinct from CVE-20...
CVE-2020-1033
CVE-2020-1033 (Windows Kernel Information Disclosure) The vulnerability is an information disclosure in the Windows kernel where objects in memory are improperly handled. An authenticated attacker could exploit this by running a specially crafted application to obtain information that could help ...
CVE-2020-1125
Technical details for CVE-2020-1125 are not provided in the supplied documents. Monitor for updates from official advisories and related cybersecurity feeds.
CVE-2020-1146
CVE-2020-1146 is an elevation of privilege affecting the Microsoft Store Runtime, caused by improper memory handling. The vulnerability requires the attacker to gain code execution on the victim machine and then run a crafted application to elevate privileges. Microsoft addresses the issue via a ...