2367 matches found
CVE-2019-1145
CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...
CVE-2019-1150
CVE-2019-1150 affects the Windows font library’s handling of embedded fonts, leading to remote code execution. The vulnerability arises from how font data is processed, enabling an attacker to run arbitrary code on the targeted system. Documented impact includes potential full system compromise, ...
CVE-2019-1256
CVE-2019-1256 is a Windows Win32k Elevation of Privilege vulnerability caused by the Win32k component failing to properly handle objects in memory, enabling local privilege escalation. The CVE is distinct from CVE-2019-1285, and is corroborated by multiple records (NVD/CVE list, CNVD, EUVD mentio...
CVE-2020-0639
CVE-2020-0639 is a Windows Common Log File System (CLFS) Driver Information Disclosure vulnerability. Connected CNVD entries describe a flaw where memory objects are mishandled, allowing an authenticated attacker who logs on and runs a crafted application to read data from memory. The CVSSv3 base...
CVE-2020-1558
The connected document confirms CVE-2020-1558 targets the Windows Jet Database Engine, with a remote code execution vulnerability that arises from improper handling of objects in memory. An attacker can trigger code execution by persuading a user to open a specially crafted file. The issue is mit...
CVE-2021-34504
Technical details about CVE-2021-34504 are not provided in the connected documents; the Initial Description lists a Windows Address Book RCE vulnerability but lacks affected product/version specifics. Monitor for updates.
CVE-2021-36960
CVE-2021-36960 is a Windows SMB information-disclosure vulnerability with a CVSS v3.1 base score of 7.5 (HIGH). It is exploitable over a network, requires no privileges and no user interaction, and impacts confidentiality only (I: HIGH; C: HIGH; A: NONE). The initial description labels it as a Wi...
CVE-2022-41121
CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...
CVE-2023-21532
Technical details about CVE-2023-21532 (product, root cause, impact, fixed version) are not publicly provided in the connected documents you supplied. Monitor for updates and additional vulnerability specifics.
CVE-2012-4774
CVE-2012-4774 is a Windows File Handling Component vulnerability. A crafted file or subfolder name can trigger use of unallocated memory as the destination of a copy operation, enabling remote code execution on affected Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windo...
CVE-2016-0145
CVE-2016-0145 is a Graphics Memory Corruption vulnerability in the Windows font library. A remote attacker can execute arbitrary code by delivering a crafted embedded font, affecting Windows flavors listed in the vulnerability entry (e.g., Windows Vista through Windows 10 versions, Windows Server...
CVE-2017-0100
CVE-2017-0100 is a local elevation-of-privilege vulnerability in a DCOM object registered by Helppane.exe (Windows HelpPane). A crafted application can exploit RunAs authentication issues to execute code in another user’s session on affected Windows 7 SP1, Server 2008 R2, 8.1, 2012, RT 8.1, 10 (1...
CVE-2017-8565
CVE-2017-8565 is a Windows PowerShell remote code execution vulnerability triggered when PSObject wraps a CIM Instance. Connected sources describe in detail that deserialization via PSObject, LosFormatter, ObjectStateFormatter (and related gadget chains) can enable remote code execution in PowerS...
CVE-2017-8676
CVE-2017-8676 is an information disclosure vulnerability in the Windows GDI+ component. The NVD entry describes that an authenticated attacker can retrieve information from the targeted system by presenting a specially crafted application, affecting a wide range of Windows versions (Windows clien...
CVE-2018-8349
CVE-2018-8349 is a remote code execution vulnerability in Microsoft COM for Windows caused by improper handling of serialized objects. The vulnerability affects multiple Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server editions such as Server 2008/2012/2016 and R2 varian...
CVE-2019-0790
Technical details for CVE-2019-0790 are not provided in the supplied documents; no affected products, versions, root cause, or mitigations are listed. Monitor for updates.
CVE-2019-1082
Technical details such as affected products, root cause, and remediation for CVE-2019-1082 are not provided in the supplied documents; connected EUVD entries discuss malware but do not add specifics for this CVE. Monitor for updates.
CVE-2019-1243
CVE-2019-1243 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution with the user’s pr...
CVE-2020-1519
CVE-2020-1519 is a Windows elevation-of-privilege vulnerability in the Windows UPnP Device Host that arises from improper handling of memory. An attacker must first gain execution on the target, then run a crafted application to elevate privileges. Microsoft’s security update fixes how the UPnP D...
CVE-2021-1674
Technical details (affected product, root cause, impact, or remediation) are not provided in the connected documents. The CVE entry’s specifics are not disclosed here; monitor for updates.
CVE-2021-28334
CVE-2021-28334 is associated with a Remote Procedure Call Runtime remote code execution vulnerability in Microsoft Windows/Windows Server. The CNVD-2021-74287 entry describes a RPC Runtime RCE vulnerability affecting Windows/Windows Server, implying a remote attacker could execute code over the n...
CVE-2022-34689
CVE-2022-34689 is a Windows CryptoAPI spoofing vulnerability in which the certificate cache index key (MD5-based) can be exploited to masquerade as a legitimate entity. A PoC was released (HIVEPRO PoC report) detailing the attack, underscoring public proof-of-concept availability. The advisory co...
CVE-2022-41053
Technical details about CVE-2022-41053 are not publicly provided in the supplied documents. No affected products, exploit information, or mitigations are specified here. Monitor for updates.
CVE-2023-21728
Technical details about CVE-2023-21728 are not publicly provided in the supplied documents. Please monitor for updates from official sources.
CVE-2012-0150
CVE-2012-0150 describes a buffer overflow in the C runtime library (msvcrt.dll) used by multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7/7 SP1). The vulnerability arises when parsing a crafted media file, copying a version string into a fixed-length stack buffer, allowing remot...
CVE-2018-0754
The CVE-2018-0754 entry concerns the Windows Adobe Type Manager Font Driver (Atmfd.dll). Multiple sources confirm an information-disclosure vulnerability arising from the way objects are handled in memory within Atmfd.dll, affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2, W...
CVE-2018-1038
The CVE-2018-1038 entry affects Windows 7 SP1 and Windows Server 2008 R2 SP1. Root cause: a mis-set bit in a page-table entry allowed userspace to overwrite page tables, enabling local privilege escalation. Documented impact is elevation of privilege with full confidentiality/integrity/availabili...
CVE-2018-8404
CVE-2018-8404 is a Windows local elevation-of-privilege vulnerability in the Win32k subsystem. Root cause: Win32k.sys fails to properly handle objects in memory, enabling elevation of privilege on affected Windows variants (Windows 7, Windows 8.1, Windows 10, and corresponding Server editions). C...
CVE-2018-8468
CVE-2018-8468 is a Windows elevation-of-privilege vulnerability described as a sandbox escape. Affected products include Windows 7, Windows 8.1, Windows 10 family and corresponding Server editions (Server 2008/2012/2016, RT 8.1, etc.). Connected sources indicate exploitation activity (Exploit-DB ...
CVE-2019-0581
CVE-2019-0581 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of objects in memory. Affected products include multiple Windows versions (e.g., Windows 7, Server 2008/2012/R2, 8.1, 10, and server editions). The connected documents corroborate tha...
CVE-2019-0599
CVE-2019-0599 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is shared among multiple CVEs in the same family (CVE-2019-0595, -0596, -0597, -0598, -0625). The available documents identify the affected ...
CVE-2019-0702
Technical details about CVE-2019-0702 are not publicly available in the provided documents. No explicit exploitation, affected products, versions, or remediation are stated here. Monitor for updates from authoritative sources.
CVE-2019-1053
CVE-2019-1053 describes an elevation of privilege in Windows Shell due to failure to validate folder shortcuts. The vulnerability allows an attacker who already has unprivileged code execution on the victim to escalate privileges by escaping a sandbox. The underlying cause is the Shell’s insuffic...
CVE-2019-1152
CVE-2019-1152 is a remote code execution affecting the Windows font library when handling specially crafted embedded fonts. The vulnerability allows an attacker to take control of the affected system, install programs, and access/modify data or create accounts with full rights. Exploitation detai...
CVE-2019-1391
Technical details for CVE-2019-1391 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability trackers.
CVE-2020-1346
Technical details about CVE-2020-1346 are not publicly provided in the connected documents. Monitor for updates from official advisories and third-party analyses.
CVE-2020-16887
CVE-2020-16887 is an elevation-of-privilege vulnerability in the Windows Network Connections Service where improper in-memory handling of objects could allow a locally authenticated attacker to execute code with elevated permissions. The vulnerability can be exploited by running a specially craft...
CVE-2021-31184
Technical details for CVE-2021-31184 (IrDA information disclosure) are not publicly available in the provided documents. Monitor for updates from official advisories and CVE/NVD entries for affected products, versions, and remediation.
CVE-2022-41057
Technical details about CVE-2022-41057 are not provided in the connected documents. Public information here does not specify affected products, root cause, impact, or fixes. Monitor official advisories for updates.
CVE-2023-21680
Technical details about CVE-2023-21680 (Windows Win32k elevation) are not publicly available in the connected documents. Monitor for updates from Microsoft and other sources; wait for confirmed affected products/versions and remediation when disclosed.
CVE-2016-0026
Technical details about CVE-2016-0026 are not publicly provided in the supplied documents; no specific affected products or fixes are described. Monitor for updates.
CVE-2018-8408
CVE-2018-8408 is an information-disclosure vulnerability in the Windows kernel caused by improper initialization of memory objects. The Nessus plugin entry confirms this CVE is associated with Windows kernel information disclosure and lists it among affected products, including Windows 7, Windows...
CVE-2018-8565
CVE-2018-8565 is an information-disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The vulnerability affects multiple Windows editions (as listed in the NVD entry: Windows 7, Server 2012 R2/2016, Windows 8.1, 10 and corresponding server SKUs,...
CVE-2019-0713
Technical details about CVE-2019-0713 are not publicly provided in the connected documents. The initial description summarizes a Hyper-V denial-of-service vulnerability. Monitor for updates from official sources.
CVE-2019-0853
Technical details about CVE-2019-0853 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates and corroborating risk information from official advisories.
CVE-2019-0900
Summary: The connected CNVD entries describe a set of buffer overflow vulnerabilities in Microsoft Windows Jet Database Engine. They state that the Jet Database Engine can experience in-memory boundary violations leading to incorrect reads/writes and potential heap/buffer overflows when processin...
CVE-2019-1095
Technical details for CVE-2019-1095 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability but lacks product/version/impact specifics beyond memory disclosure. Monitor for updates from Microsoft and risk assessments when details eme...
CVE-2019-1102
CVE-2019-1102 affects the Windows Graphics Device Interface (GDI+) and arises from how GDI+ handles memory objects, enabling remote code execution. The Red Hat advisory reiterates the same description. The CVE is rated high risk (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) with network attack vector and...
CVE-2020-16920
CVE-2020-16920 affects Windows via an elevation-of-privilege in the Windows Application Compatibility Client Library, tied to improper handling of registry operations. The vulnerability requires code execution on a victim system before exploitation, enabling a crafted application to gain elevated...