2367 matches found
CVE-2019-1158
The CVE-2019-1158 entry corresponds to a Windows Graphics Device Interface (GDI) information disclosure vulnerability. Connected sources describe it as an issue in GDI’s handling of memory, specifically involving EMF file parsing, which can allow an attacker to obtain sensitive information. Explo...
CVE-2019-1212
CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...
CVE-2019-1249
CVE-2019-1249 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could trigger arbitrary code execution by convincing a user to open a specially crafted file, with the impact described as remote code exe...
CVE-2019-1384
Technical details about CVE-2019-1384 are not publicly available in the provided documents. The materials mention a NETLOGON security feature bypass but do not specify affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2019-1407
Technical details for CVE-2019-1407 are not publicly available in the provided Connected documents. Monitor for updates; no specifics on affected products/versions, root cause, impact, or fixes are included here.
CVE-2020-0911
CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...
CVE-2020-0965
CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...
CVE-2020-0999
Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.
CVE-2020-1115
The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...
CVE-2020-1435
The CVE-2020-1435 entry refers to a remote code execution in the Windows Graphics Device Interface (GDI), via how GDI/GDI+ handles objects in memory. The connected CNVD-2021-67491 description confirms the root cause as a memory-handling problem in the Windows GDI that can be exploited to execute ...
CVE-2020-1526
Technical details for CVE-2020-1526 are not publicly provided in the supplied documents; no specifics on affected products, root cause, or remediation are present. Monitor for updates.
CVE-2020-1546
CVE-2020-1546 is an elevation-of-privilege vulnerability in Windows Backup Engine caused by improper memory handling. An attacker must first gain code execution on the victim, then execute a crafted application to elevate privileges. Microsoft’s security update fixes memory handling in the Window...
CVE-2021-28349
Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.
CVE-2021-28443
Technical details about CVE-2021-28443 (affected Windows Console Driver DoS) are not provided in the connected documents. No product/version/root-cause/exploit or remediation details are disclosed here; monitor for official updates.
CVE-2022-35795
Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.
CVE-2012-1848
CVE-2012-1848 affects win32k.sys kernel-mode drivers across multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2/R2 SP1, Windows 7 SP1, and Windows 8 Consumer Preview). The underlying issue is improper handling of user-mode input passed to kernel mode, which enabl...
CVE-2016-0178
The CVE refers to CVE-2016-0178, describing a remote code execution flaw in the RPC Network Data Representation (NDR) Engine. The root cause is improper freeing of memory in the RPC NDR Engine, exploited via malformed RPC requests to remote hosts. Affected products include Windows Vista SP2, Wind...
CVE-2016-3303
CVE-2016-3303 affects the Windows font library in Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Office 2007 SP3/Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync 2010/Attendee, and Live Meeting 2007 Console. Root cause:** improper handling of construct...
CVE-2016-3373
CVE-2016-3373 is a Windows kernel local elevation-of-privilege vulnerability. The Windows Kernel API improperly restricts access to registry information, enabling a locally authenticated attacker to obtain sensitive user account data via a crafted application. Affected products include Windows Vi...
CVE-2017-8708
CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...
CVE-2018-0814
Technical details for CVE-2018-0814 are not publicly available in the provided Connected documents. No explicit affected products, versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2018-8134
CVE-2018-8134 is an elevation of privilege vulnerability in the Windows Kernel API that affects Windows 8.1, Windows 10 (including Windows Server variants) and related OSes. The faulty enforcement of permissions is the root cause. The connected CIRCL entry indicates a public exploit is available ...
CVE-2019-1168
CVE-2019-1168 describes a local elevation-of-privilege vulnerability in the Windows p2pimsvc service. According to NVD/NVD-derived descriptions, an attacker who can log on to the system could run a crafted application to execute arbitrary code with elevated privileges, effectively taking control ...
CVE-2019-1311
IBM Security Bulletin: CVE-2019-1311 is acknowledged within IBM Spectrum Symphony 7.3.1, with an interim fix that upgrades third‑party libraries to address the vulnerability. The bulletin confirms affected product version 7.3.1 and lists a remediation build: sym-7.3.1-build600124. The described C...
CVE-2019-1326
CVE-2019-1326 describes a denial of service vulnerability affecting Windows Remote Desktop Protocol (RDP). The Red Hat entry repeats the DoS description (attacker connects via RDP and sends specially crafted requests) but provides no further technical details, affected software versions, root cau...
CVE-2019-1359
CVE-2019-1359 is a remote code-execution issue in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected updates state that security fixes in October 2019 (KB4519990/4519998/4519985/4519338 and related MSKBs) include Microsoft JET Database Engine remediation a...
CVE-2020-0783
CVE-2020-0783 is an elevation-of-privilege vulnerability in the Windows Universal Plug and Play (UPnP) service. The root cause, as described in provided documents, is improper handling of objects in memory within the UPnP service, enabling a local attacker to execute code with elevated system pri...
CVE-2020-1436
CVE-2020-1436 concerns Windows font library handling of specially crafted fonts. Root cause: improper input handling in the font subsystem. Impact: remote code execution on affected Windows versions (excluding Windows 10 per the description). Connected sources confirm the vulnerability exists; no...
CVE-2020-1543
CVE-2020-1543 is an Elevation of Privilege in Windows Backup Engine caused by improper memory handling. An attacker who already has code execution on the victim system could run a crafted application to gain higher privileges. Microsoft’s security update fixes the vulnerability by correcting how ...
CVE-2021-1696
CVE-2021-1696 is a Windows Graphics Component Information Disclosure Vulnerability. The initial entry provides the vulnerability type but no detailed product/version/affected component beyond that. Connected sources (OpenVAS entries and a Xerox advisory) reference CVE-2021-1696 among broader Wind...
CVE-2021-1702
Technical details for CVE-2021-1702 are not publicly available in the provided documents. Please monitor for updates.
CVE-2021-24083
Technical details about CVE-2021-24083 are not provided in the connected documents. Public details are limited to the Windows Address Book RCE label; monitor for updates.
CVE-2021-28348
CVE-2021-28348 is described in the NVD entry as a Windows GDI+ Remote Code Execution Vulnerability. The NVD metrics show CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attacker complexity, PRIVILEGES REQUIRED: LOW, NONE user interaction, and impacts to Confidentiality, Integrity, an...
CVE-2021-28445
Technical details for CVE-2021-28445 are not publicly provided in the supplied documents. Monitor for updates from vendors and advisories to obtain affected products, impact, and remediation.
CVE-2022-26787
Technical details for CVE-2022-26787 are not provided in the supplied documents. Please monitor for updates from official sources for affected products, impact specifics, and remediations.
CVE-2022-34734
Technical details (affected product/version, root cause, exploit vector, impact, and fix) are not publicly provided in the supplied documents. Monitor for updates from official vulnerability feeds.
CVE-2022-37994
Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.
CVE-2009-2497
CVE-2009-2497 covers a Microsoft CLR vulnerability in .NET Framework 2.0–3.5 SP1 and Silverlight 2 where the CLR mishandles interfaces, enabling remote code execution via XBAPs, Silverlight, ASP.NET, or .NET applications. Connected docs confirm Microsoft issued MS09-061 to address three related v...
CVE-2010-2554
CVE-2010-2554 affects the Tracing Feature for Services in Windows Vista SP1/ SP2, Windows Server 2008 SP2/R2, and Windows 7. The vulnerability arises from incorrect ACLs on registry keys used by the tracing feature, enabling local users to gain elevated privileges via a named pipe and impersonati...
CVE-2015-2506
The CVE-2015-2506 issue is a remote DoS in the Windows Adobe Type Manager Library (atmfd.dll) triggered by specially crafted OpenType fonts. The vulnerable component is the Adobe Type Manager Library integrated in Windows (atmfd.dll). Underlying cause is improper parsing/handling of OpenType font...
CVE-2017-0042
CVE-2017-0042 is a Windows DirectShow information disclosure vulnerability affecting Windows Media Player and related Windows versions (Windows 7/8.x/Server variants). The underlying issue is improper handling of objects in memory during media processing, which allows an unauthenticated, remote a...
CVE-2017-0058
CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...
CVE-2017-0111
CVE-2017-0111 covers Uniscribe memory disclosure in Microsoft Windows (Vista SP2, Server 2008 SP2/R2 SP1, Windows 7 SP1). Connected docs show that Uniscribe’s usp10.dll code path can be reached via DrawText/Unicode text rendering, enabling an attacker-controlled font to read process memory and po...
CVE-2017-0273
CVE-2017-0273 is a Windows SMBv1 vulnerability described as a denial-of-service issue in the SMBv1 server. The affected component is the Microsoft Windows Server Message Block 1.0 (SMBv1) server; the root cause is improper handling of crafted SMB requests that can cause the server to stop respond...
CVE-2017-0285
CVSS context : CVE-2017-0285 is an information-disclosure vulnerability in Windows Uniscribe. The connected document KLA11039 lists an information-disclosure vulnerability in Windows Uniscribe that can be exploited remotely via specially crafted documents to obtain sensitive information. What is ...
CVE-2017-0299
The CVE-2017-0299 entry describes a Windows kernel information disclosure vulnerability in the NT kernel affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2012/2016, Windows 10 various builds, and more). The issue allows an authenticated attacker to obtain informatio...
CVE-2018-0888
CVE-2018-0888 corresponds to a vulnerability in the Microsoft Hyper-V Network Switch where 64-bit Windows clients/servers (Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012/R2; Windows 10 versions 1511–1709; Windows Server 2016) are exposed to information disclos...
CVE-2019-1166
CVE-2019-1166 describes a Windows NTLM tampering vulnerability: a man-in-the-middle attacker could bypass NTLM Message Integrity Check protection. The provided documents reiterate the same description and do not specify the affected Windows versions, patches, or remediation steps. No explicit exp...