2974 matches found
CVE-2022-26803
Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.
CVE-2022-29141
Technical details about CVE-2022-29141 (Windows LDAP RCE) are not provided in the connected documents. OpenVAS references KB updates but does not specify affected products/versions, root cause, exploit info, or remediation beyond generic patching; monitor for future updates.
CVE-2022-35762
Technical details about CVE-2022-35762 are not publicly provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and fixes.
CVE-2018-8407
CVE-2018-8407 is an information disclosure vulnerability in the Kernel Remote Procedure Call Provider driver that occurs when objects are not properly initialized in memory. The vulnerability affects multiple Windows releases, including Windows 7, Windows 8.1, Windows 10 and various Windows Serve...
CVE-2021-34449
Technical details about CVE-2021-34449 are not publicly provided in the connected documents. The materials mention Win32k elevation of privilege at a high level. Monitor for updated advisories from Microsoft and CVE databases.
CVE-2022-22036
Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-24493
Technical details about CVE-2022-24493 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2022-24496
Technical details about CVE-2022-24496 are not publicly available in the provided documents. Monitoring for updates is advised.
CVE-2022-30202
Technical details (affected component, root cause, specific versions, and remediation) for CVE-2022-30202 are not provided in the supplied documents; monitor for updates.
CVE-2023-21758
Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.
CVE-2018-8544
CVE-2018-8544 is a remote code execution vulnerability in the Windows VBScript engine that corrupts memory when handling objects in VBScript. It affects multiple Windows versions (e.g., Windows 7, Windows 10, various Server editions) and is triggered by memory manipulation of VBScript objects, al...
CVE-2021-31183
CVE-2021-31183 is a Windows TCP/IP Driver Denial of Service vulnerability. Multiple connected sources (NVD/NVD CNVD entries) describe it as a DoS issue affecting the Windows TCP/IP driver in Windows/Windows Server with network-based attack potential. The CVSS metrics indicate a network, low-attac...
CVE-2022-26926
Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.
CVE-2022-30152
CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...
CVE-2022-30162
CVE-2022-30162 is a Windows kernel information disclosure vulnerability. Public records cite CVSSv3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with base score 5.5 (MEDIUM) and local access required; confidentiality impact is HIGH while integrity/availability are none. CVSSv2/2.0 shows a lower base sco...
CVE-2022-41113
CVE-2022-41113 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability. Connected docs corroborate exploitation in the Win32 Kernel area (item: Win32 Kernel Subsystem). Public exploits exist per Attackerkb listing. Microsoft advisories point to security updates addressing Windows...
CVE-2021-31186
CVE-2021-31186 is a Windows RDP information disclosure vulnerability. The provided connected documents identify the CVE as part of broader Microsoft Windows vulnerability assessments (e.g., OpenVAS/Nessus plugins) and list it among CVEs in KB updates and advisories. The core details in the materi...
CVE-2022-26808
Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2022-30203
Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.
CVE-2022-35765
Technical details about CVE-2022-35765 (affected product, root cause, impact, fix) are not provided in the supplied documents. Monitor for official disclosures and vendor advisories for remediation once published.
CVE-2018-1016
CVE-2018-1016 is a Windows font library remote code execution vulnerability. The issue arises from the Windows font library improperly handling specially crafted embedded fonts, enabling code execution on a vulnerable system. Affected products include multiple Windows versions (Windows 7, Windows...
CVE-2019-0555
The CVE-2019-0555 entry corresponds to an elevation of privilege in Microsoft XmlDocument that can escape AppContainer sandbox via cross-boundary remoting. Connected analysis explains an IDispatch/type library abuse path: malicious clients query for the old IXMLDOMDocument interface, then marshal...
CVE-2019-1071
Technical details for CVE-2019-1071 are not present in the provided documents. No affected products, impact, or remediation are stated here. Monitor for updates and refer to the primary CVE entry for official information.
CVE-2020-1492
CVE-2020-1492 – Windows Media Foundation memory corruption : A memory handling flaw in Windows Media Foundation can lead to memory corruption when objects are processed in memory. An attacker who exploits this could install programs, view/modify/delete data, or create new accounts with full right...
CVE-2021-34445
CVE-2021-34445 is a Windows Local Privilege Escalation vulnerability in the Remote Access Connection Manager. The CVSS v3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates high impact on confidentiality, integrity, and availability with a local, low-complexity path and required low privile...
CVE-2021-38628
Technical details for CVE-2021-38628 are not publicly provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, impact, or remediation. Monitor for updates.
CVE-2022-24502
Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.
CVE-2018-0744
CVE-2018-0744 is a Windows kernel elevation-of-privilege vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds up to 1709), and Windows Server 2016/1709. The issue arises from how the kernel handles objects in memory, enabling local privilege escalation. E...
CVE-2018-8626
CVE-2018-8626 is a remote code execution vulnerability in Windows DNS servers caused by improper handling of requests, leading to a heap overflow. Affected products include Windows Server variants and Windows 10/Server deployments configured as DNS servers. The root cause centers on the Windows D...
CVE-2021-31959
CVE-2021-31959 is a memory corruption vulnerability in the Microsoft Windows Scripting Engine (jscript9.dll) used by Internet Explorer. Public docs describe it as a scripting engine memory corruption issue that could enable arbitrary code execution on affected Windows versions; a patch was releas...
CVE-2022-22009
CVE-2022-22009 is a Windows Hyper-V remote code execution vulnerability. The connected sources confirm Hyper-V is affected and provide concrete product scope: Windows Hyper-V on affected Windows Server/Windows versions with the hypervisor component implicated. CVSS details from the sources indica...
CVE-2022-26810
Technical details about CVE-2022-26810 are not provided in the supplied connected documents. No explicit affected products/versions, root cause, or fixes are described here. Monitor for updates from official sources.
CVE-2022-26935
Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.
CVE-2022-30222
Technical details about CVE-2022-30222 (Windows Shell Remote Code Execution Vulnerability) are not provided in the supplied documents. The connected items reference the vulnerability but do not specify affected products, root cause, impact, fixes, or exploit information. Monitor for updates.
CVE-2021-31958
Technical details for CVE-2021-31958 are not publicly provided in the supplied documents; monitor for updates.
CVE-2021-40461
CVE-2021-40461 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Windows Hyper-V component on Windows 10/11 and Windows Server (various versions). Root cause/impact: allows remote code execution with adjacent network access and no user interaction; CVSS3.1 base score 9.0 (HIGH) ...
CVE-2022-24479
Technical details about CVE-2022-24479 are not provided in the connected documents. The entry's description is general; no information on affected product, root cause, impact, or remediation is present here. Monitor for updates.
CVE-2022-24495
CVE-2022-24495 corresponds to a Windows DirectShow remote code execution vulnerability. The connected documents confirm the affected technology (Windows DirectShow) and the CVE’s existence, but they do not provide concrete patch details, affected product/version specifics, or explicit remediation...
CVE-2022-30163
CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...
CVE-2017-0267
CVE-2017-0267 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server 1.0. The issue arises from improper handling of certain SMBv1 requests, allowing a remote attacker to obtain sensitive information by sending specially crafted data to affected servers across multiple W...
CVE-2018-0749
CVE-2018-0749 is an elevation-of-privilege issue in the Windows SMB Server (affecting Windows 7 SP1, 8.1, 10 variants, Server 2008/2012/2016, etc.). The root cause centers on how the SMB server and NT Object Manager handle Extended Attributes and process IDs when opening named pipes, which could ...
CVE-2018-1010
Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.
CVE-2020-1281
CVE-2020-1281 correlates to a Microsoft Windows OLE Remote Code Execution vulnerability. CNVD-2021-22931 describes a flaw where Windows OLE fails to properly validate user input, enabling an attacker to execute arbitrary code via a crafted file or program. The initial description also notes remot...
CVE-2020-16913
This CVE is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) where the Windows kernel-mode driver improperly handles objects in memory. An attacker who can log on and run a crafted application could execute code in kernel mode, install programs, and modify data or create accoun...
CVE-2023-21767
Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.
CVE-2018-0743
Summary (CVE-2018-0743): Elevation of privilege in Windows Subsystem for Linux (WSL) on Windows 10 (versions 1703 and 1709) and Windows Server 1709 due to improper handling of memory objects. The vulnerability allows a local attacker to run code with elevated privileges by exploiting how WSL mana...
CVE-2019-1065
CVE-2019-1065 is a Windows kernel elevation-of-privilege vulnerability. It occurs when the Windows kernel fails to handle memory objects securely, enabling a locally authenticated attacker to run arbitrary code in kernel mode, potentially installing programs, altering or deleting data, viewing da...
CVE-2021-34450
CVE-2021-34450 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Hyper-V components on Windows Server/Windows; attacker could exploit from within a guest VM to execute code on the host (authenticated VM user). Exploitation details in connected sources indicate host compromise vi...
CVE-2022-22045
Technical details about CVE-2022-22045 are not provided in the supplied documents. The inputs only state the vulnerability title without specifics (affected product/version, impact, exploit, or remediation). Monitor for updates.
CVE-2022-22050
CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...