2367 matches found
CVE-2019-0633
CVE-2019-0633 describes a remote code-execution vulnerability in the Microsoft Windows SMBv2 server. The SMBv2 service can be triggered by handling certain requests, enabling an attacker to execute arbitrary code on the target system. The CVE is distinct from CVE-2019-0630. Severity is high (NVD ...
CVE-2022-34718
CVE-2022-34718 is a Windows TCP/IP remote code execution vulnerability that can be exploited by sending a crafted IPv6 packet to a host with IPSec enabled. The issue affects the Windows TCP/IP stack and relies on a flaw in handling IPv6/IPsec traffic to achieve code execution, requiring no user i...
CVE-2018-8166
The CVE-2018-8166 entry is supported by connected documents describing a Win32k privilege-escalation vulnerability in Windows where the Win32k component mishandles objects in memory, allowing local kernel-mode code execution if exploited. Affected products span multiple Windows versions (e.g., Wi...
CVE-2019-0796
Technical details for CVE-2019-0796 are not publicly provided in the supplied documents; no affected product/version or exploit specifics are confirmed here. Monitor for updates.
CVE-2022-23293
Technical details for CVE-2022-23293 are not publicly available in the provided Connected documents. Monitor for updates.
CVE-2019-0730
CVE-2019-0730 is a Windows local privilege escalation affecting the LUAFV driver (luafv.sys). The vulnerability arises from how LUAFV handles certain calls, enabling an attacker to obtain elevated privileges. Public exploitation exists per CIRCL/CVE-2019-0730 sightings, including Exploit-DB entry...
CVE-2019-0805
Technical details for CVE-2019-0805 are not publicly available in the provided documents. Monitor for updates.
CVE-2021-43217
CVE-2021-43217 is a Windows Encrypting File System (EFS) remote code execution vulnerability. The connected exploit document documents a practical demonstration of an EFS bypass on Windows 10 and shows use of Kali Linux, Metasploit and reverse TCP payloads, indicating an attacker could achieve co...
CVE-2022-30221
CVE-2022-30221 is a Windows Graphics Component remote code execution vulnerability. The cited sources indicate exploitation requires a user to connect to a malicious RDP server, enabling code execution in the context of the targeted user. Remediation is via Microsoft’s July 2022 security updates ...
CVE-2017-0025
Technical details such as affected products, vulnerable components, impact, and remediation for CVE-2017-0025 are not provided in the connected documents; no publicly disclosed specifics are included here. Monitor for updates.
CVE-2019-0821
CVE-2019-0821, CVE-2019-0703 and CVE-2019-0704 describe an information disclosure vulnerability in the Windows SMB Server related to how it handles certain requests. The connected documents consistently identify the SMB Server information-disclosure flaw as the core issue across these CVEs, affec...
CVE-2019-1073
Technical details for CVE-2019-1073 are not publicly available in the provided Connected documents. Monitor for updates; no product/vendor/version/impact/fix information is present in these sources.
CVE-2009-2524
CVE-2009-2524 refers to an Integer Overflow in LSASS during NTLM authentication in multiple Windows versions. A malformed NTLM packet can cause LSASS to crash and reboot the host, i.e., a denial-of-service condition. Affected software includes Windows XP SP2/SP3, Windows Server 2003 SP2, Windows ...
CVE-2017-0047
Technical details about CVE-2017-0047 are not provided in the connected documents. Public information in the Initial Description is limited to an overview; monitor for updates.
CVE-2020-1246
Technical details for CVE-2020-1246 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.
CVE-2023-21563
Technical details (affected product, vulnerable component, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for updates from official advisories.
CVE-2019-0731
Technical details (affected product/version, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from CIRCL/CIRSA sources and exploit-db references for CVE-2019-0731.
CVE-2023-21549
Technical details for CVE-2023-21549 are not present in the provided documents. The connected entries do not describe affected products/versions or remediation. Monitor official sources for updates on this CVE.
CVE-2019-0704
CVE-2019-0703 is an information-disclosure vulnerability in Windows SMB Server handling of certain requests. Connected sources confirm the issue as a Windows SMB Information Disclosure vulnerability distinct from CVE-2019-0704 and CVE-2019-0821. FireEye Mandiant Threat Intelligence notes that CVE...
CVE-2022-34691
CVE-2022-34691 is referenced in connected Citrix and Windows update documentation. Citrix CTX479236 summarizes FAS information tying CVE-2022-34691 to Microsoft KB KB5014754 and related CVEs, describing SSO/Kerberos-related behaviors with VDA and smart card authentication failures when FAS is inv...
CVE-2016-0143
CVE-2016-0143 is a Windows Win32k Privilege Escalation vulnerability in the kernel-mode driver (win32k.sys) affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, 2012, RT 8.1, Windows 10 Gold/1511). Root cause: improper handling of objects in memory within the Wi...
CVE-2016-3308
Technical details for CVE-2016-3308 are not publicly available in the provided documents; monitor for updates.
CVE-2017-0214
CVE-2017-0213 is a Windows Privilege Escalation flaw in the COM Aggregate Marshaler. Reports confirm it enables local elevation of privilege when a specially crafted app is run, affecting Windows client and server SKUs listed in the CVE description. Several connected sources document exploitation...
CVE-2017-8552
Technical details for CVE-2017-8552 are not publicly provided in the connected documents. No concrete product/version/impact details are present beyond the high-level description. Monitor for updates.
CVE-2019-1339
Technical details for CVE-2019-1339 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2022-30138
Technical details for CVE-2022-30138 are not provided in the supplied documents. The records mention Windows Print Spooler elevation of privilege but do not specify affected products/versions, root cause, exploit information, or fixes. Monitor for updates.
CVE-2020-1301
CVE-2020-1301 is a SMBv1 remote code execution vulnerability that requires authentication on the target network. Publicly available guidance and advisories confirm SMBv1 handling flaws can allow code execution when a specially crafted packet is processed by an SMBv1 server. Connected advisories (...
CVE-2021-43883
CVE-2021-43883 is a Windows Installer Elevation of Privilege vulnerability. The Windows Installer component can be abused when a user is tricked into installing a malicious package, enabling an attacker to gain elevated privileges on the system. The CVSS details in the provided data show a local ...
CVE-2017-11835
CVE-2017-11835 affects the Microsoft Windows Embedded OpenType (EOT) font engine. The vulnerability exists in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, where specially crafted embedded fonts parsed by the EOT font engine can allow a local attacker who logs on and opens a document to read...
CVE-2022-30160
CVE-2022-30160 is a Windows ALPC (Advanced Local Procedure Call) Elevation of Privilege vulnerability. The connected documents identify the issue as a local, low-complexity privilege escalation with no required user interaction and high impact on confidentiality, integrity, and availability (per ...
CVE-2020-16916
CVE-2020-16916 is a Windows elevation-of-privilege flaw in the COM server object creation path. The root cause is Windows handling of COM object creation, allowing an attacker who can log on to run a specially crafted application that exploits the vulnerability to gain elevated code execution. Mi...
CVE-2019-0887
CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...
CVE-2020-1262
Technical details for CVE-2020-1262 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2022-24459
CVE-2022-24459 is an Elevation of Privilege in Windows Fax and Scan service. Connected sources note a PoC exploit exists and that Microsoft patched vulnerabilities in March 2022 Patch Tuesday, but no concrete product/version/fix details are provided in the documents.
CVE-2023-21726
Technical details for CVE-2023-21726 are not provided in the supplied documents. No explicit information on affected products, root cause, impact, or fixes. Monitor for updates from official sources.
CVE-2021-36936
Technical details about CVE-2021-36936 are not publicly provided in the connected documents. No vendor/product/version specifics or remediation steps are present here. Monitor for updates from official advisories and trusted security trackers.
CVE-2019-1342
Technical details for CVE-2019-1342 are not publicly provided in the supplied documents. Please monitor official advisories or CVE feeds for updates on affected products, impact, and remediation.
CVE-2022-24533
Technical details about CVE-2022-24533 (affected products, components, root cause, versions, fixes) are not provided in the connected documents. The available materials only reiterate a Remote Desktop Protocol RCE without specifics. Monitor for updates.
CVE-2017-8563
CVE-2017-8563 is an elevation-of-privilege vulnerability in Windows where Kerberos can fall back to NTLM as the default authentication protocol. The issue is exposed via LDAP/NTLM negotiation and can enable domain‑level credential abuse if NTLM relay occurs. Public documentation notes that follow...
CVE-2021-34535
CVE-2021-34535 is a Remote Desktop Client remote code execution vulnerability in Windows. According to the connected sources, it affects the Windows Remote Desktop Client component and is rated High (CVSS v3.1 base 8.8). Exploitation was addressed in Microsoft’s August 2021 Patch Tuesday updates;...
CVE-2021-28455
Technical details about CVE-2021-28455 (affected components, root cause, impact, and fixes) are not publicly provided in the supplied documents; monitor for updates.
CVE-2022-37981
CVE-2022-37981 is a DoS vulnerability in Windows Event Logging Service. The CNVD entry states the denial arises from a failure to properly handle incoming error messages, enabling an attacker to cause DoS on the affected Windows component. Affected product is Windows Event Logging Service; impact...
CVE-2020-1300
CVE-2020-1300 is a Windows remote code execution vulnerability that arises when Cabinet (.cab) files are not handled securely. The vulnerability can be exploited by convincing a user to open a specially crafted CAB file or by spoofing a network printer and tricking the user into installing a mali...
CVE-2022-23281
CVE-2022-23281 corresponds to a Windows Common Log File System Driver information-disclosure vulnerability. Connected sources describe it as an information leak in the CLFS driver, with CNVD noting “excessive data output” as the underlying issue. Impact is a confidentiality risk; CVSS metrics in ...
CVE-2023-21524
Technical details about CVE-2023-21524 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The materials only reference the vulnerability title and general advisories; monitor for updates.
CVE-2020-1299
CVE-2020-1299 is a Windows remote code execution vulnerability that occurs when a malicious or specially crafted .LNK file is processed. The available connected document explicitly states it is an RCE in LNK file processing and that exploitation would grant the attacker the same user rights as th...
CVE-2022-21845
Public technical details for CVE-2022-21845 are not present in the provided documents. Connected sources reference KBs and KEV listings but do not specify affected components, versions, root cause, or remediation. Monitor for updates.
CVE-2022-21989
CVE-2022-21989 is a Windows Kernel elevation-of-privilege vulnerability. A local attacker can exploit it to escalate privileges and execute code at a higher integrity level, as indicated by Microsoft’s advisory and related coverage. Exploitation requires local access and may depend on additional ...
CVE-2011-0657
CVE-2011-0657 affects the DNSAPI.dll DNS client in multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, Windows 7 SP1). Root cause: improper processing of DNS queries by the DNS client, enabling remote attackers to run arbitrary code via (1) a crafted L...