2367 matches found
CVE-2018-8407
CVE-2018-8407 is an information disclosure vulnerability in the Kernel Remote Procedure Call Provider driver that occurs when objects are not properly initialized in memory. The vulnerability affects multiple Windows releases, including Windows 7, Windows 8.1, Windows 10 and various Windows Serve...
CVE-2022-21833
CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...
CVE-2022-22036
Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-24493
Technical details about CVE-2022-24493 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2018-1016
CVE-2018-1016 is a Windows font library remote code execution vulnerability. The issue arises from the Windows font library improperly handling specially crafted embedded fonts, enabling code execution on a vulnerable system. Affected products include multiple Windows versions (Windows 7, Windows...
CVE-2022-24502
Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.
CVE-2022-30149
Technical details for CVE-2022-30149 (affected component/versions, exploit specifics, and remediation) are not present in the provided connected documents. Monitor for official updates and new public disclosures.
CVE-2022-35768
CVE-2022-35768 is a Windows kernel elevation-of-privilege vulnerability tied to registry/hive memory; the connected docs describe an out-of-bounds read that could disclose kernel pool memory to the hive file, enabling local attacker memory leakage and potential escalation. The CVE is cited in MSR...
CVE-2018-8544
CVE-2018-8544 is a remote code execution vulnerability in the Windows VBScript engine that corrupts memory when handling objects in VBScript. It affects multiple Windows versions (e.g., Windows 7, Windows 10, various Server editions) and is triggered by memory manipulation of VBScript objects, al...
CVE-2022-26810
Technical details about CVE-2022-26810 are not provided in the supplied connected documents. No explicit affected products/versions, root cause, or fixes are described here. Monitor for updates from official sources.
CVE-2022-30203
Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.
CVE-2022-33635
CVE-2022-33635 is tied to the Windows Graphics Component (GDI+) with a vulnerability that could allow an attacker to execute arbitrary code. The CVSSv3 vector indicates a High-severity issue (7.8) with a Local attack vector and required user interaction, meaning an attacker would need a logged-in...
CVE-2018-0749
CVE-2018-0749 is an elevation-of-privilege issue in the Windows SMB Server (affecting Windows 7 SP1, 8.1, 10 variants, Server 2008/2012/2016, etc.). The root cause centers on how the SMB server and NT Object Manager handle Extended Attributes and process IDs when opening named pipes, which could ...
CVE-2018-1010
Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.
CVE-2020-1281
CVE-2020-1281 correlates to a Microsoft Windows OLE Remote Code Execution vulnerability. CNVD-2021-22931 describes a flaw where Windows OLE fails to properly validate user input, enabling an attacker to execute arbitrary code via a crafted file or program. The initial description also notes remot...
CVE-2021-33750
CVE-2021-33750 is a Windows DNS Snap-in Remote Code Execution vulnerability affecting Windows/Windows Server DNS snap-in. The CNVD/NVD entries describe a remote code execution flaw in the DNS snap-in component that could enable an attacker to compromise affected systems. NVD CVSSv3.1/MB: 8.8 (NET...
CVE-2021-33756
CVE-2021-33756 corresponds to a remote code execution flaw in the Windows DNS Snap-in affecting Windows/Windows Server. Public documents identify the affected component as the DNS Snap-in and confirm a high-severity issue (CVSS v3.1 base score 8.8; network vector, no privileges required, user int...
CVE-2023-21682
Technical details about CVE-2023-21682 are not publicly disclosed in the provided connected documents. The materials only reference a Windows PPP information disclosure vulnerability with CVSSv3.1 base score 5.3. Monitor for updates.
CVE-2023-21750
CVE-2023-21750 is a Windows Kernel EoP issue tied to registry virtualization: a logic bug in CmKeyBodyRemapToVirtual allowed deleting HKLM\Software keys using only KEY_READ and KEY_SET_VALUE rights, bypassing expected DELETE checks. This is a local, privilege-escalation vulnerability within the r...
CVE-2012-0159
CVE-2012-0159 is a kernel-level remote code execution vulnerability in Microsoft Windows related to TrueType font parsing. The root cause is a sign extension error in the kernel’s handling of TrueType compound glyphs within win32k.sys, which can be triggered by a crafted TTF file. Affected produc...
CVE-2017-0283
CVE-2017-0283 is described in the connected MSKB as a remote code execution vulnerability in Microsoft Office components that could be triggered by opening a specially crafted Office file. The MSKB describes a security update KB3191937 for Skype for Business 2015 (Lync 2013) that addresses CVE-20...
CVE-2021-31186
CVE-2021-31186 is a Windows RDP information disclosure vulnerability. The provided connected documents identify the CVE as part of broader Microsoft Windows vulnerability assessments (e.g., OpenVAS/Nessus plugins) and list it among CVEs in KB updates and advisories. The core details in the materi...
CVE-2021-34441
CVE-2021-34441 refers to a Microsoft Windows Media Foundation Remote Code Execution vulnerability. The connected sources identify it as affecting Windows Media Foundation components, with a CVSS v3.1 base score of 7.8 (HIGH), indicating local attack vector, required user interaction, and impacts ...
CVE-2021-38628
Technical details for CVE-2021-38628 are not publicly provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, impact, or remediation. Monitor for updates.
CVE-2019-0943
CVE-2019-0943: Windows ALPC handling flaw leads to local privilege escalation. Root cause: improper handling of ALPC calls allowing a logged-on attacker to run code in the system’s security context. Impact per sources: potential full control, data changes/deletion, new accounts with full rights. ...
CVE-2019-1019
CVE-2019-1019 is a Windows security feature bypass in NTLM authentication that allows bypassing validation on NETLOGON messages, enabling an attacker to access a machine with their original user privileges after sending a crafted authentication request. Connected material confirms related exploit...
CVE-2019-1071
Technical details for CVE-2019-1071 are not present in the provided documents. No affected products, impact, or remediation are stated here. Monitor for updates and refer to the primary CVE entry for official information.
CVE-2020-1492
CVE-2020-1492 – Windows Media Foundation memory corruption : A memory handling flaw in Windows Media Foundation can lead to memory corruption when objects are processed in memory. An attacker who exploits this could install programs, view/modify/delete data, or create new accounts with full right...
CVE-2020-1577
CVE-2020-1577 affects DirectWrite. The connected documents confirm an information-disclosure flaw where DirectWrite may reveal memory contents; exploitation could be achieved by convincing a user to open a crafted document or visit an untrusted page. The Microsoft advisory notes the fix is to cor...
CVE-2021-34500
Technical details about CVE-2021-34500 are not provided in the connected documents; no affected products, root-cause, impacts, or fixes are disclosed here. Monitor for updates.
CVE-2022-30163
CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...
CVE-2022-34708
Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.
CVE-2022-38040
Technical details about CVE-2022-38040 (Microsoft ODBC Driver RCE) are not provided in the supplied documents. Public information on affected components, root cause, impact specifics, or fixes is not present here. Monitor for updates in the connected sources for any disclosed details.
CVE-2021-31958
Technical details for CVE-2021-31958 are not publicly provided in the supplied documents; monitor for updates.
CVE-2022-26935
Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.
CVE-2022-41058
Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.
CVE-2018-8251
CVE-2018-8251 describes a memory corruption vulnerability in Windows Media Foundation when it improperly handles objects in memory. Affected: Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (Server 2008 R2, 2012, 2012 R2, 2016; Windows RT 8.1). CVSSv3 base 7.5 (NETWORK, HIGH ...
CVE-2021-24094
CVE-2021-24094 is an IPv6 reassembly-related Windows TCP/IP remote code execution vulnerability. Microsoft’s TCP/IP update set identifies CVE-2021-24094 alongside CVE-2021-24074 and CVE-2021-24086, with CVSSv3 scores indicating CRITICAL impact (9.8) for the RCE flaws. The available connected docu...
CVE-2022-22050
CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...
CVE-2022-34706
Technical details about CVE-2022-34706 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for authoritative updates from Microsoft and CVE repositories.
CVE-2022-37988
CVE-2022-37988 is tied to a Windows registry hive memory corruption bug in which cells larger than 16 KiB are aligned to the next power of two during loading, causing a use-after-free when shrinking a cell. The connected material provides a detailed attacker workflow: trigger hive memory corrupti...
CVE-2022-44668
CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...
CVE-2012-4786
CVE-2012-4786 affects Windows kernel-mode drivers handling TrueType/OpenType font parsing. The advisory set shows remote code execution via crafted TTF/OTF files affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, and RT. Root cause...
CVE-2018-0878
CVE-2018-0878 is a Windows Remote Assistance information-disclosure vulnerability caused by how XML External Entities (XXE) are processed. The CVE applies to multiple Windows client/server SKUs (Windows 7 SP1, 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 versions 1511–1709, and...
CVE-2019-1242
Technical details about CVE-2019-1242 are not provided in the connected documents; monitor for updates.
CVE-2022-21913
The CVE-2022-21913 entry describes a Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass. Public documents present CVSS data from NVD (CVSS v3.1: 7.5, NETWORK, NONE privileges; CVSS v2.0: 5.0, PARTIAL impact). No concrete product/vendor/component/version/root-cause de...
CVE-2022-24540
CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...
CVE-2022-26796
Technical details about CVE-2022-26796 are not provided in the connected documents; no product/version/root-cause/fix information is available here. Monitor for updates.
CVE-2022-33634
CVE-2022-33634 is listed in the connected NCSc advisory as a Windows PPTP vulnerability with an impact described as “Execution of random code” and a CVSS-like score of 8.10. The available connected documents do not provide explicit exploitation details, affected product versions, root cause, or a...