3552 matches found
CVE-2024-49072
Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.
CVE-2025-21417
CVE-2025-21417 is a Windows Telephony Service remote code execution vulnerability. CIRCL confirms the CVE with a high impact (CVSS 8.80, Execute code) within Windows Telephony Service; CNVD describes a remote code execution vulnerability in Windows Telephony Server. Microsoft has public security ...
CVE-2013-0013
The CVE-2013-0013 issue affects the Windows SSL/TLS stack: multiple Windows versions (Vista SP2, Server 2008 SP2/R2 and SP1, Windows 7, 8, Server 2012, Windows RT) have a flaw in the SSL provider that mishandles encrypted packets, enabling a man-in-the-middle to downgrade SSLv2 and intercept hand...
CVE-2019-0582
CVE-2019-0582 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of objects in memory. The vulnerability affects multiple Windows versions and can be triggered when a user opens a specially crafted file, enabling arbitrary code execution with the attack...
CVE-2021-34483
CVE-2021-34483 is a Windows Print Spooler elevation of privileges vulnerability. NVD lists CVSS v3.1: LOCAL, LOW complexity, PRIV: LOW, UI: NONE, with HIGH impact to C/I/A (base 7.8). CVSS v2: LOCAL, LOW, C/P/I/P/A/P (base 4.6). The exact root cause and patched/affected versions are not detailed ...
CVE-2022-21843
CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...
CVE-2022-21851
Technical details for CVE-2022-21851 are not publicly available in the provided documents. No root cause, affected versions, or fixes are disclosed here; monitor for official updates from Microsoft and NVD.
CVE-2022-22011
Technical details (affected components, root cause, impact, and fixes) for CVE-2022-22011 are not provided in the supplied documents. No public details are included here. Monitor official advisories for updates.
CVE-2022-24540
CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...
CVE-2022-38041
CVE-2022-38041 is a Denial-of-Service vulnerability in Windows Secure Channel. Connected documents confirm the affected component is Windows Secure Channel and the impact is DoS (CVSSv3.1 base ~7.5). Microsoft issued security updates in the Oct 2022 cycle to fix this vulnerability; exploitation s...
CVE-2023-21526
Technical details about CVE-2023-21526 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, impact, or mitigations are provided here.
CVE-2023-21537
Technical details about CVE-2023-21537 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Monitor for updates from authoritative sources.
CVE-2023-21681
Technical details about CVE-2023-21681 are not present in the provided connected documents. The supplied items cover generic Microsoft KB updates and an unrelated ENISA entry; monitor for updates and future technical disclosures.
CVE-2024-21313
CVE-2024-21313 is described as a Windows TCP/IP Information Disclosure Vulnerability. The entry provides a CVSSv3.1 base score of 5.3 (Medium) with network attack vector, high attack complexity, no privileges required, user interaction required, and a privacy-focused impact (Confidentiality: High...
CVE-2012-0013
CVE-2012-0013 is a remote-code-execution vulnerability in the Windows PackagerClickOnce handling: ClickOnce file types are not included in the Windows Packager unsafe file type list, allowing an attacker to execute arbitrary code via a crafted Office document. Affected OSes include Windows XP SP2...
CVE-2012-4786
CVE-2012-4786 affects Windows kernel-mode drivers handling TrueType/OpenType font parsing. The advisory set shows remote code execution via crafted TTF/OTF files affecting Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8, Server 2012, and RT. Root cause...
CVE-2013-3128
CVE-2013-3128 describes a vulnerability in OpenType font parsing that affects kernel-mode drivers across multiple Windows editions (XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8, Server 2012, Windows RT) and certain .NET Framework versions. The issue arises in how Ope...
CVE-2018-8344
CVE-2018-8344 is a Windows remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts. Affected platforms include Windows 7, Windows 8.1, Windows 10 (and corresponding server SKUs: 2008, 2008 R2, 2012, 2012 R2, 2016, 2019-era equivalents, and Win...
CVE-2019-0882
CVE-2019-0882 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly discloses memory contents, per the description, with a stated impact of information disclosure. Connected documents reiterate that the issue involves improper handling of in-memory objects in...
CVE-2019-1291
Technical details (affected components, exploit method, patch information) are not provided in the supplied documents. Monitor for official advisories and updates for CVE-2019-1291.
CVE-2020-0738
CVE-2020-0738 is a Windows Media Foundation memory corruption vulnerability. The provided documents identify Microsoft Windows Media Foundation as the affected component and describe memory corruption when handling objects in memory, which the CVSS metrics classify as a high-severity, remotely ex...
CVE-2020-16958
CVE-2020-16958 is a local elevation-of-privilege vulnerability affecting Windows Backup Engine. The connected sources identify the issue as Elevation of Privilege in the Windows Backup Engine, with CVSS v3.1 base score 7.8 (HIGH) and CVSS v2.0 base score 7.2, indicating a local attacker could pot...
CVE-2021-36961
Technical details about CVE-2021-36961 (Windows Installer Denial of Service) are not publicly provided in the supplied documents. No affected product versions, root cause, impact, or fix information is available here. Monitor for forthcoming updates.
CVE-2022-21883
CVE-2022-21883 is a Windows vulnerability in the IKE extension that can be exploited over the network to cause a denial of service . The NVD entry lists a network attack vector with high impact on availability (CVSS v3.1 base score 7.5; impact is confined to availability). The root cause is descr...
CVE-2022-21890
Technical details for CVE-2022-21890 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-33647
CVE-2022-33647 is a Windows Kerberos elevation-of-privilege vulnerability involving RC4-based encryption (RC4-HMAC/RC4-MD4) in Kerberos. The CIRCL/GoogleProjectZero write-up explains exploitation on the wire: an attacker can force RC4-MD4 in AS-REQ/PA-ETYPE-INFO2 flows, obtain an AS-REP with a RC...
CVE-2023-21555
Technical details for CVE-2023-21555 are not publicly available in the provided Connected Documents or Initial Description. No concrete affected products, root cause, or remediation can be confirmed here. Monitor for updates from official advisories.
CVE-2023-33154
Technical details about CVE-2023-33154 are not publicly available in the provided connected documents. Please monitor official advisories and CVE listings for updates.
CVE-2024-26205
CVE-2024-26205 is a Windows RRAS remote code execution vulnerability. Connected sources corroborate that it is network-exploitable with a high base score (8.8) and requires user interaction, enabling remote code execution with high impact on confidentiality, integrity and availability. The issue ...
CVE-2024-26215
Technical details about CVE-2024-26215 are not publicly available in the provided connected documents. Monitor for updates from official vendors and advisories to obtain affected products, impact and remediation information.
CVE-2024-26248
CVE-2024-26248 is a Windows Kerberos Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.5 (Impact: High; Privileges Required: Low; Attack Vector: Network; User Interaction: None). The connected sources list this CVE under Windows Kerberos and assign an impact of Obtaining Incre...
CVE-2024-28925
CVE-2024-28925 is listed in the Microsoft Windows Secure Boot family as a Secure Boot security feature bypass with high impact (CVSS 3.1: 8.0; Adjacent access, no privileges required, user interaction required). The connected advisory (NCSC) confirms a Windows Secure Boot bypass in the same CVE g...
CVE-2024-38131
Technical details about CVE-2024-38131 are not publicly provided in the connected documents. The available material lacks product/version/root-cause/remediation specifics. Monitor official advisories/updates for concrete information.
CVE-2013-3138
CVE-2013-3138 is a denial-of-service vulnerability arising from an integer overflow in the TCP/IP kernel-mode driver. The affected software set includes Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows Server 2012; Windows RT. An attacker can cause a system...
CVE-2020-1537
CVE-2020-1537 is a Windows Elevation of Privilege vulnerability in Windows Remote Access caused by improper file handling. Exploitation requires code execution on a victim system, followed by launching a crafted app. Microsoft patches address the issue by ensuring Windows Remote Access correctly ...
CVE-2022-24494
CVE-2022-24494 refers to a Windows vulnerability in the Windows Ancillary Function Driver for WinSock that allows Elevation of Privilege. The issue is a Local attack requiring Low privileges with no user interaction, and is described as affecting Confidentiality, Integrity, and Availability (per ...
CVE-2022-24542
Technical details for CVE-2022-24542 are not provided in the connected documents. The EUVD/CNVD entries reference Win32k elevation issues but do not supply affected products, versions, root cause, or fixes for this CVE. Monitor for updates.
CVE-2022-29127
Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.
CVE-2023-21730
Technical details about CVE-2023-21730 are not provided in the supplied documents; no affected products, versions, root cause, or fixes are disclosed here. Monitor for updates from official sources for further information.
CVE-2023-21740
CVE-2023-21740 is a Windows Media Remote Code Execution vulnerability. The CVE is listed in NVD/NVD-derived records with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, resulting in a base score of 7.8 (HIGH). The linked OpenVAS entries reference multiple Windows KB updates and include CV...
CVE-2023-21822
Technical details for CVE-2023-21822 are not publicly available in the provided documents. Monitor for updates.
CVE-2023-23407
CVE-2023-23407 : Windows PPPoE remote code execution affecting the PPPoE stack. According to the CVE record, the vulnerability enables total impact on confidentiality, integrity, and availability (CVSS 3.1: 7.1, HIGH). Exploitation is classified as adjacent network access with high complexity and...
CVE-2023-28238
CVE-2023-28238 is a Windows vulnerability in the IKE protocol extensions that enables remote code execution over the network. The CVSSv3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) yields a base score of 7.5 (HIGH). It requires no user interaction, uses a network attack vector, and the attacke...
CVE-2024-26194
CVE-2024-26194 is a Secure Boot security feature bypass vulnerability. The CVSS vector indicates Local access, high attack complexity, and no privileges/UI required, with high confidentiality, integrity, and availability impact. Microsoft’s MSRC page is referenced for a potential fix, and ENISA/N...
CVE-2024-26232
The CVE-2024-26232 entry describes a Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). The available details indicate a LOCAL attack with LOW privileges required and USER INTERACTION required, with HIGH impact on confidentiality, integrity, and availability (CVSS 7.3). The ...
CVE-2012-1527
CVE-2012-1527 corresponds to Windows Shell Briefcase Integer Underflow. The vulnerability arises from an integer underflow in the Briefcase feature of Windows Shell, enabling local privilege escalation for affected Windows editions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Wind...
CVE-2019-1162
CVE-2019-1162 is a Windows elevation-of-privilege vulnerability arising from improper handling of ALPC calls. A local attacker who can log on could run a crafted application to execute code in the security context of the local system, potentially installing programs, modifying data, or creating n...
CVE-2021-34440
Technical details about CVE-2021-34440 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates and official advisories for specifics.
CVE-2021-43215
CVE-2021-43215 affects the iSNS (Internet Storage Name Service) server. It is a memory corruption vulnerability that can lead to remote code execution when an attacker sends a specially crafted request to an affected iSNS server. The issue is network-exploitable (no user interaction) and is consi...