2367 matches found
CVE-2022-26798
Technical details about CVE-2022-26798 are not publicly available in the provided connected documents. The initial description notes a Windows Print Spooler Elevation of Privilege vulnerability, but there are no specific vendor/product/version/root-cause/fix details in the supplied materials. Mon...
CVE-2022-30213
Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.
CVE-2022-41095
Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.
CVE-2017-0269
CVE-2017-0269 is a Windows SMBv1 denial-of-service vulnerability: the SMBv1 server may stop responding when it receives specially crafted requests. The issue is tied to handling of SMBv1 traffic (no explicit exploit details in the provided docs). Affected context is Windows SMBv1 processing; pote...
CVE-2018-0898
Technical details about CVE-2018-0898 are not publicly available in the provided connected documents. Monitor for updates; no explicit affected products, root cause, impact, or remediation are detailed here.
CVE-2018-0900
Technical details are not publicly available in the provided connected documents; monitor for updates.
CVE-2018-0976
The CVE-2018-0976 entry describes a denial-of-service vulnerability in Windows RDP that can be triggered by specially crafted RDP requests, reportedly affecting Windows 7, Windows Server 2008/2012 families, Windows 8.1, and Windows 10/Server 2016+ clients. The connected documents do not provide c...
CVE-2018-8167
CVE-2018-8167 is a Windows CLFS driver elevation of privilege vulnerability. The issue arises when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. Affected products/versions include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10...
CVE-2019-1146
CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...
CVE-2019-1362
CVE-2019-1362 is an elevation of privilege vulnerability in Windows caused by improper handling of objects in memory within the kernel-mode driver win32k. The CVE entry distinguishes this issue from CVE-2019-1364. CVSS data from NVD indicates a high-severity, local-attack-vector issue with a comb...
CVE-2020-0623
Technical details (affected products, versions, root cause, impact or fixes) for CVE-2020-0623 are not publicly provided in the connected documents. Monitor for updates from official advisories.
CVE-2020-0681
CVE-2020-0681 is a remote code execution vulnerability in the Windows Remote Desktop Client. The issue occurs when a user connects to a malicious Remote Desktop server, allowing an attacker to execute arbitrary code on the client machine. The vulnerability is associated with the Remote Desktop Cl...
CVE-2020-0731
Technical details for CVE-2020-0731 are not publicly provided in the connected documents; affected products, root cause, and remediation cannot be specified from current sources. Monitor ENISA EUVD entries and the MSRC advisory for updates.
CVE-2021-1655
Technical details about CVE-2021-1655 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories to obtain affected products, impact, vectors, and fixes.
CVE-2021-28327
Technical details for CVE-2021-28327 are not publicly available in the provided documents. No affected products, root cause, or fixes are specified here. Monitor for updates.
CVE-2021-28356
Public technical details for CVE-2021-28356 are not provided in the connected documents; sources reference the vulnerability name but do not specify affected products, root cause, impact, or fixes.
CVE-2021-34476
CVE-2021-34476 : Bowser.sys Denial of Service vulnerability. Connected data provide CVSS v3.1 metrics: NETWORK exploit, LOW attack complexity, NONE privileges, NONE user interaction, and HIGH availability impact (base score 7.5). No explicit remediation or patch details are provided in the suppli...
CVE-2021-34507
Technical details, affected products, vulnerable components, and remediation are not provided in the connected documents. Monitor for updates from official sources to obtain concrete technical information about CVE-2021-34507.
CVE-2021-36959
Technical details for CVE-2021-36959 are not publicly available in the provided documents. Monitor for updates from connected sources; existing entries reference the vulnerability but do not specify affected products, root cause, impact, or fixes.
CVE-2021-38663
CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...
CVE-2021-41377
Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2022-21862
Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.
CVE-2022-24504
Technical details for CVE-2022-24504 are not publicly provided in the supplied documents. Monitor for updates in the connected sources for affected products, impact specifics, and remediation information.
CVE-2022-34690
Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.
CVE-2022-41116
CVE-2022-41116 is a Windows PPTP Denial of Service vulnerability. The available sources describe a network-exposed issue affecting the Point-to-Point Tunneling Protocol, with a CVSSv3.1 base score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H). The Connected documents do not specify the exact affec...
CVE-2022-44667
Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.
CVE-2016-0042
CVE-2016-0042 corresponds to a Windows DLL loading Remote Code Execution vulnerability. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, and Windows 10 (including 1511). The flaw arises from mishandling D...
CVE-2019-1087
Technical details about CVE-2019-1087 are not provided in the supplied documents. Monitor official advisories for updates on affected products, root cause, impact, and remediation.
CVE-2019-1147
CVE-2019-1147 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of objects in memory. An attacker could trigger code execution by enticing a user to open a specially crafted file; impact is high (arbitrary code execution). The available documents ind...
CVE-2019-1159
CVE-2019-1159 is a Windows kernel elevation-of-privilege vulnerability caused by improper handling of objects in memory. An attacker who can log on could execute a crafted app to run code in kernel mode, potentially installing programs, viewing/changing/deleting data, or creating accounts with fu...
CVE-2020-0657
CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...
CVE-2020-0788
Technical details for CVE-2020-0788 are not publicly available in the provided connected documents; no root cause, impact, or patch specifics are included. Monitor for updates.
CVE-2020-1408
Technical details for CVE-2020-1408 are not publicly provided in the connected documents. The Fedora/OpenVAS/Nessus entries reference this CVE only in passing or within list contexts. Monitor for updates from official advisories.
CVE-2020-1596
Technical details for CVE-2020-1596 are not provided in the connected documents. The initial description lacks product/version/root-cause specifics; monitor for updates.
CVE-2020-16902
CVE-2020-16902 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer fails to properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated privileges and gain full control (install/modify data, ...
CVE-2021-24077
CVE-2021-24077 is a Windows Fax Service Remote Code Execution vulnerability. The NVD entry lists it with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5, indicating a NETWORK attack vector, no authentication, and no user interaction required; impact is high on Confidentiality, Integr...
CVE-2021-38629
CVE-2021-38629 relates to the Windows Ancillary Function Driver for WinSock Information Disclosure. Affected: Windows kernel/network stack component (AFD/WinSock). Underlying cause: information disclosure with network attack surface. CVSS3.1 base score 6.5 (medium), vector NETWORK, low attack com...
CVE-2021-40455
Public technical details for CVE-2021-40455 are not present in the provided documents; monitor for updates from official advisories.
CVE-2021-41332
Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.
CVE-2022-21838
Technical details about CVE-2022-21838 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.
CVE-2022-26915
CVE-2022-26915 is described as a Windows Secure Channel Denial of Service vulnerability. The CNVD entry notes the issue stems from Microsoft Windows’ handling of incoming error messages, enabling a DoS condition. Related entries (NVD/NVD-linked pages and Microsoft KBs) confirm the vulnerability a...
CVE-2022-35752
Technical details about CVE-2022-35752 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2022-35836
CVE-2022-35836 affects the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. The connected AttackKB entry reiterates the same description. Provided details indicate the vulnerability is network-reachable with high impact to confidentiality, integri...
CVE-2022-38006
Technical details about CVE-2022-38006 are not publicly provided in the connected documents. Public information only reiterates a Windows Graphics Component Information Disclosure vulnerability. Monitor for updates; no vulnerability specifics (affected products, root cause, fixes) are disclosed h...
CVE-2023-21542
CVE-2023-21542 is a Windows Installer local elevation of privilege vulnerability. The connected documents (notably the NCSC advisory) list Windows Installer as affected and categorize the impact as “Obtaining increased privileges.” The available sources do not provide root cause specifics, affect...
CVE-2016-3209
CVE-2016-3209 affects Microsoft GDI+ across Windows Vista/7/8.1/Server 2008-2012 and various Office/.NET components, enabling information disclosure by bypassing ASLR through unspecified vectors. Connected sources confirm exploitation activity (e.g., Exploit DB). Public references note MS16-120 a...
CVE-2016-7272
CVE-2016-7272 affects the Windows Graphics component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012/R2, RT 8.1, 10 Gold/1511/1607, Server 2016). The vulnerability enables remote code execution via a crafted web site, with network attack vector and no privileges requ...
CVE-2017-11771
CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...