1241 matches found
CVE-2018-3639
CVE-2018-3639 is a speculative execution side‑channel vulnerability (SSB) that can leak memory via speculative stores. The Connected ALMA doc notes a mitigation: SSB is disabled by the new alt-java launcher, reducing impact at the cost of performance, and it references OpenJDK 8u282 as part of th...
CVE-2018-5391
CVE-2018-5391 affects the Linux kernel (3.9+) via FragmentSmack: IP fragment reassembly can be exploited to exhaust CPU and cause DoS. Citrix/Arista/CentOS advisories describe affected products and kernel updates; CentOS/RH advisories list patched versions and note the vulnerability stems from fr...
CVE-2019-1125
CVE-2019-1125 is a Linux kernel local information-disclosure vulnerability related to SWAPGS speculation (Spectre variant 1). The issue allows a local attacker to read kernel/privileged memory through speculative execution on most x86 processors; mitigation relies on memory barriers to limit spec...
CVE-2018-0886
CVE-2018-0886 denotes a CredSSP remote code execution vulnerability in Windows authentication flows (Credential Security Support Provider protocol). The core issue is how CredSSP validates requests during authentication, enabling potential code execution via an RDP-related interaction. Public adv...
CVE-2019-1181
CVE-2019-1181 is a remote code execution vulnerability in Windows Remote Desktop Services (RDS/Terminal Services). The Huawei advisory confirms the issue as one of four RC vulnerabilities in RDS where an unauthenticated, network-based attacker can exploit by sending specially crafted RDP requests...
CVE-2020-0645
CVE-2020-0645 corresponds to a tampering vulnerability in Microsoft IIS Server due to improper handling of malformed HTTP request headers. Affected component: IIS Server within Microsoft Windows Server/Windows. Impact (as stated in connected sources): an attacker could tamper with responses retur...
CVE-2019-0836
CVE-2019-0836 is a Windows local privilege-escalation vulnerability tied to the LUAFV driver (luafv.sys). CIRCL sightings confirm in-the-wild exploitation, with exploits documented (e.g., exploit-db entries 46718). The CVE entry identifies an elevation-of-privilege flaw when Windows improperly ha...
CVE-2020-15707
CVE-2020-15707 is a GRUB2 bootloader vulnerability (initrd size handling) causing a heap-based buffer overflow via integer overflow in initrd processing. The flaw affects GRUB2 2.04 and earlier as deployed in multiple distros (Debian, Red Hat, Ubuntu) and can enable arbitrary code execution durin...
CVE-2020-1269
Technical details for CVE-2020-1269 are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2020-15706
CVE-2020-15706 affects GRUB2 (2.04 and earlier) and is a race-condition/use-after-free in grub_script_function_create() triggered by redefining a function during execution, leading to arbitrary code execution and Secure Boot restriction bypass. Remediation is to upgrade to patched GRUB2 packages ...
CVE-2018-8641
CVE-2018-8641 is a Windows Win32k kernel-mode privilege-escalation vulnerability. The Win32k component fails to properly handle objects in memory, enabling local privilege escalation. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 and corresponding Server ...
CVE-2020-15705
GRUB2 ≤ 2.04 fails to validate kernel signatures when booting directly without shim, allowing Secure Boot bypass if the kernel signing certificate is in the Secure Boot DB. The issue affects GRUB2 2.04 and earlier; upgrades to patched grub2/shim combinations are advised (e.g., 2.06+ and related s...
CVE-2019-1182
CVE-2019-1182 is a remote code execution vulnerability in Microsoft Windows Remote Desktop Services (RDS) caused by a heap overflow in the server’s dynamic channel handling when processing RDP requests. The flaw is pre-authentication and exploitable by an unauthenticated attacker who connects to ...
CVE-2019-1006
CVE-2019-1006 corresponds to an authentication bypass vulnerability in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF) that allows signing SAML tokens with arbitrary symmetric keys. The connected Nessus entries reiterate this issue as part of Microsoft SharePoint serv...
CVE-2018-0952
CVE-2018-0952 is a local Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector (used by Windows Diagnostics Hub and Visual Studio components). The root cause, as documented, is the ability to create arbitrary files due to lack of proper client impersonation in DiagnosticsHub....
CVE-2019-0685
CVE-2019-0685 is a Windows Win32k Elevation of Privilege vulnerability. The Win32k component fails to properly handle objects in memory, enabling a local attacker to escalate to kernel mode and execute code with high impact. Documented alongside related CVEs (CVE-2019-0803, CVE-2019-0859) and ref...
CVE-2018-8124
CVE-2018-8124 is a Win32k privilege-escalation vulnerability in Windows where the Win32k component fails to properly handle objects in memory. Affected: Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 and corresponding Server editions listed in the description; root cause is impro...
CVE-2020-1013
Technical details specific to CVE-2020-1013 are not provided in the supplied documents. The connected KB articles reference other updates and vulnerabilities but do not reveal CVE-2020-1013 specifics. Monitor for updates.
CVE-2020-1048
CVE-2020-1048 is a Windows Print Spooler elevation of privilege vulnerability. It arises from improper handling that allows arbitrary writing to the file system, enabling local privilege escalation. Public exploits/public PoCs exist (notably PrintDemon) and have been discussed alongside patch cir...
CVE-2018-8166
The CVE-2018-8166 entry is supported by connected documents describing a Win32k privilege-escalation vulnerability in Windows where the Win32k component mishandles objects in memory, allowing local kernel-mode code execution if exploited. Affected products span multiple Windows versions (e.g., Wi...
CVE-2020-1337
CVE-2020-1337 is a local privilege-escalation vulnerability in the Windows Print Spooler. It results from a bypass of the CVE-2020-1048 patch via a Junction Directory, allowing an unprivileged user to achieve elevation by abusing how the spooler writes to the file system. The risk is local (no ne...
CVE-2019-1040
CVE-2019-1040 describes a tampering vulnerability in Microsoft Windows NTLM MIC protection where a MITM attacker can alter NTLM flags in the NTLM exchange without invalidating the signature. The root cause is improper validation/tampering of MIC in NTLM AUTHENTICATE messages, enabling an attacker...
CVE-2020-0611
CVE-2020-0611 is a remote code execution vulnerability in the Windows Remote Desktop Client. Connected documents confirm the flaw affects the RDP client when a user connects to a malicious server, enabling arbitrary code execution on the client. The Microsoft blogs and advisories describe pre-aut...
CVE-2019-0796
Technical details for CVE-2019-0796 are not publicly provided in the supplied documents; no affected product/version or exploit specifics are confirmed here. Monitor for updates.
CVE-2018-8164
CVE-2018-8164 is a Win32k privilege-escalation vulnerability in Windows where the Win32k component fails to properly handle objects in memory. Affected are multiple Windows releases (server and client SKUs listed in the CVE entry). The connected documents corroborate a kernel-mode elevation of pr...
CVE-2019-0730
CVE-2019-0730 is a Windows local privilege escalation affecting the LUAFV driver (luafv.sys). The vulnerability arises from how LUAFV handles certain calls, enabling an attacker to obtain elevated privileges. Public exploitation exists per CIRCL/CVE-2019-0730 sightings, including Exploit-DB entry...
CVE-2019-0821
CVE-2019-0821, CVE-2019-0703 and CVE-2019-0704 describe an information disclosure vulnerability in the Windows SMB Server related to how it handles certain requests. The connected documents consistently identify the SMB Server information-disclosure flaw as the core issue across these CVEs, affec...
CVE-2019-0633
CVE-2019-0633 describes a remote code-execution vulnerability in the Microsoft Windows SMBv2 server. The SMBv2 service can be triggered by handling certain requests, enabling an attacker to execute arbitrary code on the target system. The CVE is distinct from CVE-2019-0630. Severity is high (NVD ...
CVE-2019-0805
Technical details for CVE-2019-0805 are not publicly available in the provided documents. Monitor for updates.
CVE-2019-0731
Technical details (affected product/version, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from CIRCL/CIRSA sources and exploit-db references for CVE-2019-0731.
CVE-2019-0704
CVE-2019-0703 is an information-disclosure vulnerability in Windows SMB Server handling of certain requests. Connected sources confirm the issue as a Windows SMB Information Disclosure vulnerability distinct from CVE-2019-0704 and CVE-2019-0821. FireEye Mandiant Threat Intelligence notes that CVE...
CVE-2018-8401
CVE-2018-8401 describes a local privilege escalation in the DirectX Graphics Kernel driver (DXGKRNL) for Windows. The root cause is improper handling of objects in memory within DXGKRNL, allowing an attacker with local access to elevate privileges. Affected products include Windows Server 2016, W...
CVE-2019-1339
Technical details for CVE-2019-1339 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2020-1237
Technical details for CVE-2020-1237 are not publicly available in the provided documents. The connected EUVD entries do not supply product/version/impact specifics. Monitor for updates.
CVE-2020-16916
CVE-2020-16916 is a Windows elevation-of-privilege flaw in the COM server object creation path. The root cause is Windows handling of COM object creation, allowing an attacker who can log on to run a specially crafted application that exploits the vulnerability to gain elevated code execution. Mi...
CVE-2019-1073
Technical details for CVE-2019-1073 are not publicly available in the provided Connected documents. Monitor for updates; no product/vendor/version/impact/fix information is present in these sources.
CVE-2020-1316
CVE-2020-1316 is a Windows kernel elevation of privilege vulnerability where the Windows kernel fails to properly handle objects in memory. This can allow a local attacker with low privileges to achieve high integrity/critical impact (confidentiality, integrity, and availability), as indicated by...
CVE-2019-1303
CVE-2019-1303 is a Windows AppX Deployment Server privilege-escalation vulnerability. The issue arises when the server improperly handles junctions, enabling a local attacker to gain elevated privileges after executing on the target system. Connected sources consistently refer to the same root ca...
CVE-2018-8400
CVE-2018-8400/8405/8406 describe privilege-escalation flaws in the DirectX Graphics Kernel (DXGKRNL) driver causing elevation of privilege by improper handling of objects in memory. Affected software scope includes Windows Server and Windows 10 variants (per the CVE records). The root cause, as s...
CVE-2020-1262
Technical details for CVE-2020-1262 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2020-1246
Technical details for CVE-2020-1246 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.
CVE-2019-1342
Technical details for CVE-2019-1342 are not publicly provided in the supplied documents. Please monitor official advisories or CVE feeds for updates on affected products, impact, and remediation.
CVE-2020-1301
CVE-2020-1301 is a SMBv1 remote code execution vulnerability that requires authentication on the target network. Publicly available guidance and advisories confirm SMBv1 handling flaws can allow code execution when a specially crafted packet is processed by an SMBv1 server. Connected advisories (...
CVE-2019-1278
Technical details about CVE-2019-1278 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-1266
CVE-2020-1266 is a Windows kernel elevation-of-privilege vulnerability. The description attributes the issue to improper handling of objects in memory, enabling local privilege escalation with high impact (local access, minimal authentication). The provided metrics show a high base score (CVSS v3...
CVE-2019-1320
Technical details for CVE-2019-1320 are not publicly provided in the connected documents. Monitor for updates.
CVE-2019-1340
Technical details for CVE-2019-1340 are not provided in the connected documents. Public details (affected product/version/impact) are not available here. Monitor for updates from official advisories and CVE records.
CVE-2019-0887
CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...
CVE-2020-0686
The CVE-2020-0686 entry describes an elevation-of-privilege vulnerability in Windows Installer when MSI packages process symbolic links. Affected component: Windows Installer in Windows. Root cause: improper handling of symbolic links during MSI processing leading to privilege escalation. Impact:...