2974 matches found
CVE-2021-42277
Technical details about CVE-2021-42277 are not provided in the connected documents; only generic vulnerability labels and references are available. Monitor for official advisories or CVE records for affected products, fixes, and mitigations.
CVE-2022-24499
Technical details about CVE-2022-24499 are not provided in the connected documents; public specifics (affected products, root cause, exploit info, or remediation) are not available here. Monitor for updates.
CVE-2022-30132
Technical details for CVE-2022-30132 are not provided in the connected documents. Public details (product, impact, fix) are not present here. Monitor for updates from authoritative sources.
CVE-2022-38029
Summary : CVE-2022-38029 is a Windows ALPC elevation-of-privilege vulnerability. It is a local issue that can grant high-impact privileges to an attacker with low privileges and no user interaction, as indicated by the CVSS vector in the Initial document (CVSS v3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=...
CVE-2019-1086
CVE-2019-1086 is an elevation-of-privilege vulnerability in Microsoft Windows Audio Service. The connected materials confirm a local-privilege-escalation risk that could permit arbitrary code execution on affected systems; the CVE is part of a trio (CVE-2019-1086/1087/1088). No explicit root-caus...
CVE-2021-31183
CVE-2021-31183 is a Windows TCP/IP Driver Denial of Service vulnerability. Multiple connected sources (NVD/NVD CNVD entries) describe it as a DoS issue affecting the Windows TCP/IP driver in Windows/Windows Server with network-based attack potential. The CVSS metrics indicate a network, low-attac...
CVE-2021-34446
Technical details (affected product/version, root cause, impact, or exploit information) for CVE-2021-34446 are not provided in the supplied documents. Monitor for updates.
CVE-2023-21776
Technical details for CVE-2023-21776 are not publicly provided in the connected documents. Based on the supplied sources, we cannot specify affected product versions, root cause, impact, or fixes. Monitor for updates from Microsoft and vulnerability feeds.
CVE-2019-1037
Technical details (affected products, vulnerable component, versions, impact, or exploit information) for CVE-2019-1037 are not publicly provided in the connected documents. Please monitor for updates as more information becomes available.
CVE-2020-17042
CVE-2020-17042 is a Windows Print Spooler remote code execution vulnerability. The CVE entry identifies the affected component as the Windows Print Spooler and indicates a network-based attack with high impact (base score 8.8/3.1 CVSS) and user interaction required. The connected documents provid...
CVE-2021-24074
Technical details about CVE-2021-24074 are not provided in the supplied documents. Public information in the initial entry is high-level and lacks affected products, root cause, vulnerability specifics, or remediation within the provided data set.
CVE-2022-21859
Technical details for CVE-2022-21859 are not publicly available in the provided documents. Monitor for updates from NVD, CVE records, and vendor advisories.
CVE-2022-22023
CVE-2022-22023 corresponds to a Windows vulnerability described as a Windows Portable Device Enumerator Service Security Feature Bypass. The NVD entry provides CVSS scores: CVSS v2 base 6.9 (LOCAL, MEDIUM) and CVSS v3.1 base 6.6 (PHYSICAL access, LOW complexity, LOW privileges). Impact indicators...
CVE-2022-22027
Technical details for CVE-2022-22027 are not publicly provided in the supplied documents. Monitor for updates and availability of affected product/version, root cause, impact, or fixes.
CVE-2022-30220
Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.
CVE-2022-37987
CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...
CVE-2022-21878
CVE-2022-21878 is a Windows Geolocation Service Remote Code Execution Vulnerability. Affected software: Windows Geolocation Service component; root cause and exact exploit path are not detailed in the provided documents. CVSS2 score is 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C); CVSS3.1 score is 7.8 (AV:L/...
CVE-2022-30146
Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2016-0051
CVE-2016-0051 is a local privilege-escalation vulnerability in the Windows WebDAV client. The issue stems from the WebDAV client’s handling of crafted input, allowing a local attacker to gain SYSTEM-level privileges on affected Vista/7/8.1/2012/RT/10 variants with the WebDAV component (WebDAV cli...
CVE-2019-0966
CVE-2019-0966 describes a denial-of-service vulnerability in Microsoft Hyper-V where a host server fails to properly validate input from a privileged user on a guest OS. The issue can impact availability (CVSS3 base score 6.8, with HIGH availability impact) and is categorized as an authentication...
CVE-2021-34447
CVE-2021-34447 is tied to Windows MSHTML/Internet Explorer, with public details indicating an IE11 remote-code-execution vulnerability. Connected KB entry KB5005563 describes a cumulative security update for Internet Explorer (Sept 14, 2021) that resolves IE/MSHTML vulnerabilities and lists affec...
CVE-2022-34707
CVE-2022-34707 is a Windows Kernel elevation-of-privilege vulnerability discussed in the connected material. It relies on a registry hive memory corruption path: a refcount/overflows in a security descriptor cell can trigger a use-after-free, enabling overflow of hive cells and enabling an attack...
CVE-2022-37958
CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...
CVE-2017-0267
CVE-2017-0267 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server 1.0. The issue arises from improper handling of certain SMBv1 requests, allowing a remote attacker to obtain sensitive information by sending specially crafted data to affected servers across multiple W...
CVE-2018-0746
CVE-2018-0746 is a Windows kernel local information disclosure vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions (Gold, 1511, 1607, 1703, 1709), Windows Server 2016 and Windows Server 1709. The root cause is described as improper handling of memory addre...
CVE-2019-1091
Technical details about CVE-2019-1091 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2019-1155
CVE-2019-1155 is a Jet Database Engine remote code execution vulnerability in Windows. It arises from improper handling of in-memory objects, enabling an attacker to run arbitrary code on a victim system by enticing the user to open a specially crafted file. The update fixes how the Jet Database ...
CVE-2021-43893
Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.
CVE-2022-22037
CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...
CVE-2022-23279
Technical details about CVE-2022-23279 (affected product/component/versions/root cause) are not provided in the supplied documents. Publicly available information within the connected items is limited to generic vulnerability summaries and update notes. Monitor for updates.
CVE-2022-26803
Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.
CVE-2022-30189
CVE-2022-30189 is a Windows Autopilot Device Management and Enrollment Client spoofing vulnerability. Connected sources describe this as a spoofing flaw that could allow an attacker to masquerade as another user via the Autopilot client, with remote exploitation potential. Public mappings in the ...
CVE-2022-41113
CVE-2022-41113 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability. Connected docs corroborate exploitation in the Win32 Kernel area (item: Win32 Kernel Subsystem). Public exploits exist per Attackerkb listing. Microsoft advisories point to security updates addressing Windows...
CVE-2021-34466
Technical details for CVE-2021-34466 are not publicly available in the provided connected documents. No specifics on affected products, root cause, or remediation are included. Monitor for updates from official sources.
CVE-2022-21868
Technical details about CVE-2022-21868 are not publicly provided in the supplied documents. Monitor for updates from official sources.
CVE-2022-29128
Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.
CVE-2022-30151
CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.
CVE-2018-8566
Technical details on CVE-2018-8566 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2020-0635
CVE-2020-0635 is described in CNVD entries as an elevation of privilege in Microsoft Windows/Windows Server caused by improper handling of certain symbolic links. The CNVD text specifies that exploiting this flaw allows an attacker to gain system-level privileges by running a crafted application ...
CVE-2020-16896
CVE-2020-16896 describes an information-disclosure vulnerability in Microsoft Windows Remote Desktop Protocol (RDP). According to the linked sources, the issue arises when an attacker connects to a target system via RDP and sends specially crafted requests, potentially allowing the attacker to ob...
CVE-2022-22026
CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...
CVE-2022-22035
Technical details for CVE-2022-22035 are not publicly available in the provided documents. Monitor for vendor advisories and updates. The connected sources mention the CVE in KEV lists and risk context but do not disclose affected components, root causes, or fixes.
CVE-2022-34710
Technical details about CVE-2022-34710 are not provided in the connected documents. No affected product/version/root-cause/fix is specified. Monitor for updates from these sources for concrete details.
CVE-2019-1246
CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...
CVE-2020-0764
CVE-2020-0764 is an elevation-of-privilege vulnerability in Windows Storage Services where improper handling of file operations could let an attacker gain elevated privileges after achieving code execution on a victim system and running a crafted application. The issue is mitigated by a security ...
CVE-2022-23283
CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...
CVE-2022-29112
Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.
CVE-2022-30152
CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...
CVE-2022-30161
Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.