2974 matches found
CVE-2020-0627
Technical details for CVE-2020-0627 are not publicly available in the provided documents; no affected products or fixes are specified. Monitor for updates.
CVE-2020-0628
Technical details for CVE-2020-0628 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0672
Technical details about CVE-2020-0672 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and mitigations.
CVE-2020-1003
Technical details for CVE-2020-1003 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for authoritative updates from MSRC/NVD.
CVE-2020-1010
Technical details about CVE-2020-1010 (affected product wbengine, root cause, exploit specifics, mitigations) are not publicly available in the provided Connected documents; monitor for updates from Microsoft MSRC and NVD.
CVE-2020-1017
CVE-2020-1017 concerns an Elevation of Privilege in Windows Push Notification Service. The vulnerability arises from how in-memory objects are handled by the Windows Push Notification Service, enabling a local attacker to escalate privileges. The CVE entry notes this issue is distinct from CVE-20...
CVE-2020-1051
CVE-2020-1051 concerns the Windows Jet Database Engine and is described as a remote code execution vulnerability caused by improper handling of objects in memory. The connected KB4556799 entry references Windows security updates and notes that the Jet Database Engine is among updated components, ...
CVE-2020-1071
Technical details about CVE-2020-1071 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally and patch notes, but do not specify affected products/versions, root cause, or remediation specifics. Monitor for updates.
CVE-2020-1074
CVE-2020-1074 describes a remote code execution in the Windows Jet Database Engine caused by improper in-memory handling of objects. An attacker could trigger code execution by convincing a user to open a specially crafted file, leading to arbitrary code on the victim’s system. The vulnerability ...
CVE-2020-1122
CVE-2020-1122 is a Windows elevation-of-privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. An attacker could exploit it by running a specially crafted application on a victim system to execute code with elevated privileges. The vulnerabi...
CVE-2020-1217
Windows Runtime Information Disclosure Vulnerability (CVE-2020-1217) stems from improper handling of memory objects in Windows Runtime. The CNVD entry describes an attacker being able to read freed memory and, with elevated privileges, execute arbitrary code. No patch/fix details are provided in ...
CVE-2020-1238
CVE-2020-1238 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. It affects Windows Media Foundation components; exploitation could allow memory corruption within the affected process, with CVSS indicating high impact (exploitability...
CVE-2020-1263
CVE-2020-1263 describes an information disclosure vulnerability in Windows Error Reporting (WER). The issue arises from how memory objects are handled by WER, allowing an attacker to potentially access information they should not have. The affected component is Windows Error Reporting, and the ro...
CVE-2020-1348
CVE-2020-1348 is a Microsoft Windows GDI Information Disclosure vulnerability. According to the initial description, it arises from the GDI component improperly disclosing memory contents, enabling information disclosure with partial confidentiality impact (CVSSv3 base score 6.5). OpenVAS-derived...
CVE-2020-1353
Technical details about CVE-2020-1353 are not publicly available in the provided connected documents; the materials only reference the CVE title and MS advisories. Monitor for updates.
CVE-2020-1589
Technical details of CVE-2020-1589 are not publicly provided in the supplied documents. No affected products, versions, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2020-17033
Technical details for CVE-2020-17033 are not publicly provided in the supplied documents; monitor for updates.
CVE-2020-17035
Technical details for CVE-2020-17035 are not provided in the supplied connected documents. Monitor for updates.
CVE-2020-17041
CVE-2020-17041 technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2021-1708
Technical details for CVE-2021-1708 are not provided in the supplied documents. Monitor for updates; no affected products, impact, or remediation details can be confirmed from the available sources.
CVE-2021-27093
Technical details about CVE-2021-27093 are not publicly available in the provided connected documents; monitor for updates.
CVE-2021-28328
Technical details for CVE-2021-28328 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official advisories and vulnerability feeds.
CVE-2021-41334
CVE-2021-41334 is a Windows Desktop Bridge elevation of privilege vulnerability. The vulnerability affects Windows Desktop Bridge components and has the impact of obtaining increased privileges (CVE-2021-41334 listed with high impact in the ENISA/NCSC and Microsoft advisories). CVSS data from NVD...
CVE-2021-43244
CVE-2021-43244 refers to a Windows Kernel information disclosure vulnerability. The connected documents confirm a Windows kernel information disclosure issue publicly addressed by December 2021 security updates across multiple Windows 10/Server builds. Patches are delivered via KB5008223, KB50082...
CVE-2022-24486
Technical details for CVE-2022-24486 are not provided in the supplied documents. No affected product/version, root cause, or remediation is described here. Monitor for updates.
CVE-2015-2527
CVE-2015-2527 is a local privilege-escalation vulnerability in Windows' kernel-mode driver pathway, specifically the process-initialization logic in win32k.sys. The root cause is improper constraining of impersonation levels during certain process initialization scenarios, enabling a locally auth...
CVE-2015-6132
CVE-2015-6132 is the Windows library loading remote code execution vulnerability affecting multiple Windows versions. Root cause: mishandled library loading enabling local privilege escalation via a crafted application. The MS15-132 security update fixes this, with public exploits and a Metasploi...
CVE-2016-3238
The CVE-2016-3238 vulnerability affects the Windows Print Spooler and allows remote code execution when a crafted print driver is provided during printer installation. Affected products include multiple Windows client/server editions (Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 RT/1511, Win...
CVE-2016-3335
CVE-2016-3335 concerns the Microsoft Windows Common Log File System (CLFS) driver elevation of privilege. The advisory notes local users can gain higher privileges via a crafted application on affected OSes: Windows Vista SP2; Windows Server 2008 SP2/R2; Windows 7 SP1; Windows 8.1; Windows Server...
CVE-2016-3348
CVE-2016-3348 is a local elevation-of-privilege vulnerability in the Windows kernel-mode driver Win32k.sys. The root cause is how the kernel-mode driver handles objects in memory, which an attacker can exploit by running a crafted application after logging in to gain kernel-level privileges. Affe...
CVE-2016-3375
The CVE-2016-3375 entry describes a memory-corruption vulnerability in the Microsoft OLE Automation mechanism and VBScript Scripting Engine used by Internet Explorer. A remote attacker can craft a website to trigger memory corruption, potentially executing arbitrary code in the context of the log...
CVE-2017-0188
CVE-2017-0188 concerns a Win32k information-disclosure vulnerability in Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10, and Windows Server 2016. The win32k component improperly provides kernel information, enabling an attacker who can exploit the issue to obtain information that coul...
CVE-2017-8564
CVE-2017-8564 is the Windows kernel information disclosure vulnerability where the kernel fails to properly initialize a memory address, potentially allowing an attacker to retrieve kernel base information and bypass KASLR. Affected products include Windows client and server families (Windows 7/8...
CVE-2018-0975
CVE-2018-0975 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to obtain information leading to a Kernel ASLR bypass. The Initial document lists affected Windows platforms (Windows 7, Windows Server 2008/2012/2016, Windows 8.1, Windows 10 and correspo...
CVE-2019-1090
CVE-2019-1090 is a Windows elevation-of-privilege vulnerability in dnsrslvr.dll caused by how objects are handled in memory. Attack remains local with no user interaction required per the CVSS vectors, and the impact is described as complete confidentiality, integrity, and availability loss if ex...
CVE-2019-1198
CVE-2019-1198 is a Microsoft Windows elevation of privilege vulnerability in SyncController.dll. An attacker who successfully exploits the flaw could run arbitrary code with elevated privileges, using a specially crafted application. The vulnerability by itself does not enable arbitrary code exec...
CVE-2019-1317
CVE-2019-1317 is a Windows DoS vulnerability caused by improper handling of hard links, as described in the initial entry and corroborated by Red Hat and NVD records. The connected documents confirm the issue and its Windows context but do not provide concrete details on affected versions, root-c...
CVE-2019-1325
Technical details for CVE-2019-1325 are not provided in the connected documents; no affected product/version/root cause or fix is described beyond the initial entry. Monitor for updates.
CVE-2019-1334
Technical details about CVE-2019-1334 are not publicly available in the provided connected documents. Monitor for updates; no affected products, root cause, or fixes are described here.
CVE-2020-0675
CVE-2020-0675 affects the Windows Cryptography Next Generation (CNG) service. The vulnerability arises from the service’s failure to properly handle objects in memory, enabling an information disclosure when a logged-on attacker runs a specially crafted application. The issue is addressed by a se...
CVE-2020-0691
Technical details about CVE-2020-0691 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2020-0720
Technical details about CVE-2020-0720 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, root cause, or remediation are included here.
CVE-2020-0770
CVE-2020-0770 is an elevation of privilege vulnerability in the Windows ActiveX Installer Service caused by improper handling of memory. The CNVD entry confirms the syndrome but provides no versioned product scope or patch details. Public documents indicate that exploitation requires local execut...
CVE-2020-0777
CVE-2020-0777 is described in CNVD-2020-23447 as a privilege escalation vulnerability in Microsoft Windows Work Folder Service, arising from improper handling of file operations. The CNVD entry states that an attacker could exploit this with a specially crafted application to run processes with e...
CVE-2020-0908
CVE-2020-0908 is a remote code execution vulnerability in the Windows Text Service Module. The issue arises from improper memory handling within TSM, enabling an attacker to execute code on a target system, typically by convincing a user to visit a specially crafted webpage or open content. Explo...
CVE-2020-0963
The CVE-2020-0963 entry describes an information disclosure vulnerability in the Windows Graphics Device Interface (GDI) where memory contents may be exposed. The vulnerability is tied to the GDI component’s handling of objects in memory, enabling disclosure of memory contents by an attacker. The...
CVE-2020-1028
CVE-2020-1028 describes a memory corruption vulnerability in Windows Media Foundation due to improper handling of objects in memory. The issue is identified across multiple CVE entries (1028, 1126, 1136, 1150) as “Media Foundation Memory Corruption Vulnerability” and is consistent in wording acro...
CVE-2020-1053
CVE-2020-1053 affects DirectX where improper handling of objects in memory can lead to elevation of privilege, allowing an attacker to execute arbitrary code in kernel mode after logging on and running a crafted program. The vulnerability is triggered by object handling in DirectX, with impact de...
CVE-2020-1087
CVE-2020-1087 describes an elevation-of-privilege vulnerability in the Windows kernel, arising from how the kernel handles objects in memory. Affected component: Windows Kernel. Underlying cause: memory object handling leading to improper privilege checks, enabling local privilege escalation with...