2974 matches found
CVE-2020-0781
The CVE-2020-0781 issue is an elevation of privilege in Windows by the Universal Plug and Play (UPnP) service, caused by improper handling of in-memory objects. Affected component: Windows UPnP service. Root cause: memory handling flaw in UPnP. Impact: attacker could gain elevated system privileg...
CVE-2020-1125
Technical details for CVE-2020-1125 are not provided in the supplied documents. Monitor for updates from official advisories and related cybersecurity feeds.
CVE-2017-8718
CVE-2017-8718 is a remote code execution vulnerability in the Microsoft JET Database Engine that affects Windows components across multiple OS versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 1511–1703, Windows Server 2016). Root caus...
CVE-2018-1009
CVE-2018-1009 is a local privilege-escalation vulnerability in the Windows DirectX Graphics Kernel Subsystem. It arises when Windows improperly handles objects in memory and incorrectly maps kernel memory, allowing an attacker with local access to elevate privileges on affected systems. Affected ...
CVE-2019-1090
CVE-2019-1090 is a Windows elevation-of-privilege vulnerability in dnsrslvr.dll caused by how objects are handled in memory. Attack remains local with no user interaction required per the CVSS vectors, and the impact is described as complete confidentiality, integrity, and availability loss if ex...
CVE-2019-1198
CVE-2019-1198 is a Microsoft Windows elevation of privilege vulnerability in SyncController.dll. An attacker who successfully exploits the flaw could run arbitrary code with elevated privileges, using a specially crafted application. The vulnerability by itself does not enable arbitrary code exec...
CVE-2019-1272
Connected sources confirm a Windows privilege escalation vulnerability related to ALPC in Microsoft Windows/Windows Server. The issue arises from improper handling of ALPC calls, allowing an attacker who logs on to the system to run arbitrary code in the security context of the local system (loca...
CVE-2019-1325
Technical details for CVE-2019-1325 are not provided in the connected documents; no affected product/version/root cause or fix is described beyond the initial entry. Monitor for updates.
CVE-2019-1408
Technical details for CVE-2019-1408 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0666
CVE-2020-0666 is described in CNVD sources as an elevation of privilege affecting Microsoft Windows and Windows Server, stemming from the Windows Search Indexer mishandling objects in memory. The vulnerability enables code execution with elevated privileges on the affected system (local context)....
CVE-2020-0675
CVE-2020-0675 affects the Windows Cryptography Next Generation (CNG) service. The vulnerability arises from the service’s failure to properly handle objects in memory, enabling an information disclosure when a logged-on attacker runs a specially crafted application. The issue is addressed by a se...
CVE-2020-0720
Technical details about CVE-2020-0720 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, root cause, or remediation are included here.
CVE-2020-0777
CVE-2020-0777 is described in CNVD-2020-23447 as a privilege escalation vulnerability in Microsoft Windows Work Folder Service, arising from improper handling of file operations. The CNVD entry states that an attacker could exploit this with a specially crafted application to run processes with e...
CVE-2020-0809
CVE-2020-0809 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. Affected component: Windows Media Foundation in Windows. Reported impact is high (CVE with base score 8.8/9.3) per NVD metrics, but no exploitation details or fixes are...
CVE-2020-0908
CVE-2020-0908 is a remote code execution vulnerability in the Windows Text Service Module. The issue arises from improper memory handling within TSM, enabling an attacker to execute code on a target system, typically by convincing a user to visit a specially crafted webpage or open content. Explo...
CVE-2020-0946
CVE-2020-0946 is a Media Foundation Information Disclosure vulnerability in Microsoft Windows where improper handling of memory objects can allow an information disclosure. The initial entry identifies Media Foundation as the affected component and describes the flaw as memory-object handling lea...
CVE-2020-0955
Technical details for CVE-2020-0955 are not publicly provided in the supplied documents. Monitor official advisories for updates; current sources only describe an information-disclosure via CPU memory access without specifics.
CVE-2020-1028
CVE-2020-1028 describes a memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. The issue is identified across multiple CVE entries (1028, 1126, 1136, 1150) as “Media Foundation Memory Corruption Vulnerability” and is consistent in wording acro...
CVE-2020-1074
CVE-2020-1074 describes a remote code execution in the Windows Jet Database Engine caused by improper in-memory handling of objects. An attacker could trigger code execution by convincing a user to open a specially crafted file, leading to arbitrary code on the victim’s system. The vulnerability ...
CVE-2020-1087
CVE-2020-1087 describes an elevation-of-privilege vulnerability in the Windows kernel, arising from how the kernel handles objects in memory. Affected component: Windows Kernel. Underlying cause: memory object handling leading to improper privilege checks, enabling local privilege escalation with...
CVE-2020-1261
CVE-2020-1261 is an information-disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how WER handles memory objects, allowing potential exposure of memory contents. The CVE is stated as distinct from CVE-2020-1263. Public sources in the provided documents describe the ...
CVE-2020-1311
CVE-2020-1311 is an elevation-of-privilege vulnerability in the Component Object Model (COM). Affected: Windows COM client using special case IIDs. Root cause cited as an elevation of privilege in COM. Connected documentRH: CVE-2020-1311 confirms the same issue; no explicit product/version patche...
CVE-2020-1353
Technical details about CVE-2020-1353 are not publicly available in the provided connected documents; the materials only reference the CVE title and MS advisories. Monitor for updates.
CVE-2020-1491
Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-1589
Technical details of CVE-2020-1589 are not publicly provided in the supplied documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2020-16915
CVE-2020-16915 - Windows Media Foundation memory corruption vulnerability : Affected software is Microsoft Windows, specifically the Windows Media Foundation component. The root cause is memory corruption due to improper handling of objects in memory. Exploitation could allow an attacker to insta...
CVE-2020-17030
Technical details for CVE-2020-17030 are not publicly available in the provided documents. Monitor for updates from the connected feeds for affected products, components, and remediation guidance.
CVE-2020-17034
Technical details about CVE-2020-17034 are not publicly provided in the supplied documents; monitor for updates.
CVE-2020-17037
Technical details are not publicly available in the provided documents for CVE-2020-17037; monitor for updates.
CVE-2020-17046
Technical details for CVE-2020-17046 are not provided in the supplied documents. Public information is limited to basic description; monitor for updates.
CVE-2021-1679
Technical details for CVE-2021-1679 are not publicly provided in the supplied documents. Please monitor for updates; no product, impact, or remediation specifics are included here.
CVE-2021-26417
CVE-2021-26417 is described as a Windows Overlay Filter Information Disclosure vulnerability with local attack vector. Connected documents corroborate this as a Microsoft Windows/Windows Server information-disclosure issue connected to the Overlay Filter. Public references show the vulnerability ...
CVE-2021-26875
CVE-2021-26875 is described as a Windows Win32k Elevation of Privilege Vulnerability. The provided connected documents do not reveal concrete technical details (affected component versions, specific root cause, exploit vectors, or explicit remediation) for this CVE; only high-level references to ...
CVE-2021-27093
Technical details about CVE-2021-27093 are not publicly available in the provided connected documents; monitor for updates.
CVE-2021-41334
CVE-2021-41334 is a Windows Desktop Bridge elevation of privilege vulnerability. The vulnerability affects Windows Desktop Bridge components and has the impact of obtaining increased privileges (CVE-2021-41334 listed with high impact in the ENISA/NCSC and Microsoft advisories). CVSS data from NVD...
CVE-2021-43231
Technical details for CVE-2021-43231 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation information.
CVE-2021-43238
CVE-2021-43238 is a Windows local elevation-of-privilege vulnerability. The NVD entry shows LOCAL vector, LOW attack complexity, and no authentication required (CVSS2: AV:L/AC:L/Au:N/C:P/I:P/A:P; CVSS3.1: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). However, the connected documents do not provi...
CVE-2021-43244
CVE-2021-43244 refers to a Windows Kernel information disclosure vulnerability. The connected documents confirm a Windows kernel information disclosure issue publicly addressed by December 2021 security updates across multiple Windows 10/Server builds. Patches are delivered via KB5008223, KB50082...
CVE-2016-3335
CVE-2016-3335 concerns the Microsoft Windows Common Log File System (CLFS) driver elevation of privilege. The advisory notes local users can gain higher privileges via a crafted application on affected OSes: Windows Vista SP2; Windows Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Windows Server...
CVE-2017-0109
Hyper-V Remote Code Execution Vulnerability (CVE-2017-0109) affects Microsoft Windows with Hyper-V across multiple OS versions (from Windows Vista SP2 up to Windows Server 2016). The issue allows guest OS users to execute arbitrary code on the host OS via a crafted application, representing a pow...
CVE-2017-0192
The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...
CVE-2017-0297
Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2017-0300
Technical details for CVE-2017-0300 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-8470
Technical details for CVE-2017-8470 are not publicly available in the provided documents; monitor for updates from Microsoft/MSRC and security vendors.
CVE-2019-1293
Technical details for CVE-2019-1293 are not publicly provided in the connected documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates in the CVE records and advisories.
CVE-2019-1317
CVE-2019-1317 is a Windows DoS vulnerability caused by improper handling of hard links, as described in the initial entry and corroborated by Red Hat and NVD records. The connected documents confirm the issue and its Windows context but do not provide concrete details on affected versions, root-c...
CVE-2019-1470
CVE-2019-1470 is described as an information-disclosure vulnerability in Windows Hyper-V where a host OS fails to properly validate input from an authenticated user on a guest OS. The linked Red Hat advisory repeats this description. The connected documents do not provide specific affected versio...
CVE-2020-0772
CVE-2020-0772 is a Windows Error Reporting memory-handling bug causing local privilege escalation. The vulnerability requires local execution and has a CVSSv3.1 base score of 7.8 (HIGH) with local attack, low attack complexity, and no user interaction. The description does not provide a patch or ...
CVE-2020-0790
Technical details about CVE-2020-0790 are not publicly provided in the connected documents. Monitor official advisories for updates; these sources mention a splwow64 Elevation of Privilege but do not provide concrete technical specifics in the supplied materials.