CVE-2019-0758

Technical details about CVE-2019-0758 are not publicly available in the provided documents. The connected advisories cover related CVEs but do not provide specifics for this entry. Monitor for updates.

CVE-2019-0908

The CVE-2019-0908 issue affects the Windows Jet Database Engine and is a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could lure a user to open a specially crafted file, triggering arbitrary code execution on a vulnerable system. Microsoft addr...

CVE-2019-1093

Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.

CVE-2019-1454

CVE-2019-1454 affects the Windows User Profile Service (ProfSvc). The root cause is improper handling of symlinks, enabling elevation of privilege. Impact is local, with partial confidentiality/integrity/availability concerns stated; exploitation details are not provided in the connected document...

CVE-2019-1469

CVE-2019-1469 is a Windows win32k information-disclosure vulnerability. The gained CVE details indicate the flaw resides in the win32k component exposing kernel information due to incorrect handling, enabling local attackers with logon rights to disclose information. Connected documents describe ...

CVE-2020-0631

Technical details are not publicly available in the provided documents for CVE-2020-0631; no affected products, impact, or remediation are specified beyond the initial description. Monitor for updates.

CVE-2020-0744

Technical details for CVE-2020-0744 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-1000

Technical details for CVE-2020-1000 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2020-1011

CVE-2020-1011: Elevation of Privilege in Windows System Assessment Tool due to improper handling of file operations. Affected: Windows System Assessment Tool; root cause: file handling flaw enabling local privilege escalation. CVSS v3.1 shows HIGH impact (base 7.8) with Local attack vector, Privi...

CVE-2020-1253

Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.

CVE-2020-1478

CVE-2020-1478 describes a memory-corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The weakness could allow an attacker to install programs, view/change/delete data, or create accounts with full user rights, with exploitation possible through s...

CVE-2020-1541

CVE-2020-1541 is a Windows vulnerability in the Windows Backup Engine that enables elevation of privilege by abusing memory handling. Public documentation in the connected CNVD and NVD entries confirms the root cause as improper memory handling within Windows Backup Engine, requiring prior code e...

CVE-2021-1667

Technical details (affected product/version, exploit information, or remediation) are not publicly provided in the connected documents. Monitor updates from official advisories for CVE-2021-1667.

CVE-2021-1700

Technical details about CVE-2021-1700 are not provided in the given documents. No vendor/product/version specifics, root cause, impact, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2021-28318

Technical details about CVE-2021-28318 are not provided in the initial document or any connected items. No affected products, vulnerable components, impact, or remediation are specified. Monitor official advisories for updates.

CVE-2022-34732

CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....

CVE-2022-35832

CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...

CVE-2022-37989

CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...

CVE-2009-2510

Technical details for CVE-2009-2510 are not publicly provided in the connected documents. Please monitor for updates.

CVE-2015-6128

CVE-2015-6128 describes a Windows privilege-escalation flaw where local users can gain privileges by abusing how Windows loads libraries. Affected products include Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. The root cause is mishandling of library loading, enabling ...

CVE-2018-0974

CVE-2018-0974 is a Windows kernel information disclosure vulnerability that could enable an attacker to obtain information facilitating a Kernel ASLR bypass. Affected are Windows client and server families including Windows 7, Server 2008/2008 R2, 8.1, 10 (and Server equivalents). The vulnerabili...

CVE-2018-8333

CVE-2018-8333 is a local Elevation of Privilege in Windows Filter Manager caused by improper handling of memory objects. Affected: Windows 7, Windows 8.1, Windows 10 and various Windows Server editions listed in the CVE entry. Root cause is mismanagement of in-memory objects within Filter Manager...

CVE-2018-8424

CVE-2018-8424 describes an information-disclosure vulnerability in the Windows GDI component where memory contents may be leaked. Affected products include Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, Windows 10 and their Server counterparts (e.g., Windows Server 2008, 201...

CVE-2018-8472

CVE-2018-8472 is a Windows GDI information-disclosure vulnerability. The issue arises from how the Windows Graphics Device Interface handles objects in memory, enabling a local attacker to retrieve information from the target system. Affected software/hosts include multiple Windows platforms list...

CVE-2019-0723

Summary: CVE-2019-0723 is a denial-of-service vulnerability affecting Microsoft Hyper-V, specifically the Hyper-V Network Switch on a host server. The issue arises when input from a privileged user inside a guest OS is not properly validated, enabling an attacker who already has a privileged gues...

CVE-2019-0896

The Connected CNVD entries describe a Microsoft Windows Jet Database Engine vulnerability: a buffer overflow occurring when the engine executes memory operations without proper data-boundary validation, potentially enabling read/write corruption (buffer/heap overflow). This aligns with a Jet DB E...

CVE-2019-1156

The CVE-2019-1156 entry concerns the Windows Jet Database Engine. It describes a remote code execution vulnerability caused by improper handling of memory objects, permitting an attacker to execute arbitrary code on a victim system. Exploitation involves enticing a user to open a specially crafte...

CVE-2019-1319

CVE-2019-1319 affects Windows Error Reporting (WER). The vulnerability stems from how WER handles and executes files, enabling elevation of privilege when exploited locally. Connected documents confirm the issue name and that it is a Windows WER elevation of privilege vulnerability, but do not pr...

CVE-2019-1395

CVE-2019-1395 denotes a Windows Win32k elevation-of-privilege vulnerability where the Win32k component mishandles objects in memory. Affects Windows with local access and low attack complexity, enabling complete confidentiality, integrity, and availability compromise for the attacker. The entry s...

CVE-2019-1466

CVE-2019-1466 corresponds to a Windows GDI information-disclosure vulnerability. Connected CNVD entries describe an information leakage in the Windows GDI component, with attacker methods such as tricking a user into opening crafted documents or visiting untrusted pages. The documents do not prov...

CVE-2020-0615

Technical details about CVE-2020-0615 are not publicly provided in the supplied documents. Monitor for updates from official advisories and CNVD/ENISA entries to confirm affected products, impact, and fixes.

CVE-2020-0648

CVE-2020-0648 : Elevation of privilege in the Windows RSoP Service Application occurs due to improper memory handling. Attack requires initial code execution on the target, after which an attacker could run a crafted application to elevate privileges. The update addresses the vulnerability by cor...

CVE-2020-0769

CVE-2020-0769 is an Elevation of Privilege vulnerability affecting the Windows CSC Service, arising from memory handling issues in the service. The CVE entry notes that exploitation requires initial code execution on the victim system, allowing an attacker to elevate privileges within the system....

CVE-2020-0992

CVE-2020-0992 corresponds to a remote code execution in the Windows Jet Database Engine caused by improper handling of memory objects. The connected CNVD entries describe a Microsoft Windows Jet Database Engine RCE vulnerability with the same root cause (memory object handling) and the impact bei...

CVE-2020-16960

CVE-2020-16960 is a Windows Backup Engine Elevation of Privilege vulnerability. Documents indicate a local attacker could exploit this to gain HIGH-severity privileges (CVSSv3.1 base score 7.8) with no user interaction required. Affected component is the Windows Backup Engine; the vulnerability i...

CVE-2021-28437

Technical details for CVE-2021-28437 are not provided in the supplied documents. No concrete information on affected product versions, root cause, or fixes is present; monitor for updates as new disclosures or patches emerge.

CVE-2021-43230

CVE-2021-43230 is a Windows NTFS Elevation of Privilege vulnerability (local, low attack complexity) with no user interaction required, per the initial CVE entry. The connected documents primarily discuss NTFS-related CVEs in the 2021-4323x family and describe a pool/size calculation overflow in ...

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-29105

No technical details about CVE-2022-29105 are present in the provided connected documents; monitor for updates.

CVE-2022-35745

Technical details about CVE-2022-35745 are not publicly provided in the supplied documents. Please monitor official advisories for updates on affected products, vectors, impacts, and remediation.

CVE-2022-44678

Technical details for CVE-2022-44678 are not provided in the connected documents. No product/version/impact/fix details are present here. Monitor for official disclosures and vendor advisories for updates.

CVE-2012-0181

CVE-2012-0181 affects Win32k.sys in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, and Windows 8 CP). The vulnerability is a memory-corruption/logic issue in the kernel-mode ReadLayoutFile path that handles keyboard layout files, allowing loc...

CVE-2014-0301

CVE-2014-0301 is a DirectShow memory corruption (double-free) in qedit.dll used when processing JPEGs, enabling remote code execution on Windows XP/Server 2003/Vista/Server 2008/Windows 7/8/8.1/Server 2012. Affected components include DirectShow JPEG handling; root cause is a double-free in JPEG ...

CVE-2016-0070

Technical details of CVE-2016-0070 are not publicly provided in the Connected Documents. Monitor for updates.

CVE-2016-7205

CVE-2016-7205 is a Windows memory corruption vulnerability in the Animation Manager that can be triggered by visiting a crafted web site, enabling remote code execution. Affected products include Windows 7 SP1, Windows 8.1, Windows 10 (various builds), Windows Server 2008 R2 SP1, Windows Server 2...

CVE-2017-0050

Technical details about CVE-2017-0050 are not publicly provided in the connected documents. The sources reference the vulnerability generally; monitor for updates on affected products, root cause, and fixes.

CVE-2017-0123

CVE-2017-0123 concerns Uniscribe (usp10.dll) in affected Windows editions (Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1). The vulnerability allows a remote attacker to obtain sensitive information from a process address space via a crafted web site, i.e., an informatio...

CVE-2017-0260

Technical details for CVE-2017-0260 are not provided in the connected documents. The initial entry notes an Office Remote Code Execution vulnerability, but there are no concrete product/version/impact/fix details here. Monitor official advisories for updates.

CVE-2017-0275

CVE-2017-0275 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB server handling of certain requests. The initial description lists affected products as Windows platforms including Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and ...

CVE-2018-8434

CVE-2018-8434 is a Windows Hyper-V information disclosure vulnerability. It occurs when a host OS fails to properly validate input from an authenticated user on a guest OS, allowing potential disclosure of memory information. Affected platforms include Windows 7, Windows Server 2008/2012 families...