3552 matches found
CVE-2023-21542
CVE-2023-21542 is a Windows Installer local elevation of privilege vulnerability. The connected documents (notably the NCSC advisory) list Windows Installer as affected and categorize the impact as “Obtaining increased privileges.” The available sources do not provide root cause specifics, affect...
CVE-2023-32038
CVE-2023-32038 concerns the Microsoft ODBC Driver Remote Code Execution vulnerability. The connected data identifies the affected component as the Microsoft ODBC Driver and classifies the impact as Remote Code Execution with a high severity (CVSS v3.1 base score 8.8). Attack vectors are NETWORK w...
CVE-2024-30024
CVE-2024-30024 is listed by ENISA NCSC as a Windows RRAS vulnerability with a CVSS v3.1 score of 7.5 (HIGH) and a base impact of executing random code. It is part of the Windows Routing and Remote Access Service (RRAS) family and is described in the connected document as a network-exposed issue t...
CVE-2025-26663
CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...
CVE-2016-0042
CVE-2016-0042 corresponds to a Windows DLL loading Remote Code Execution vulnerability. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, and Windows 10 (including 1511). The flaw arises from mishandling D...
CVE-2016-3209
CVE-2016-3209 affects Microsoft GDI+ across Windows Vista/7/8.1/Server 2008-2012 and various Office/.NET components, enabling information disclosure by bypassing ASLR through unspecified vectors. Connected sources confirm exploitation activity (e.g., Exploit DB). Public references note MS16-120 a...
CVE-2017-0181
CVE-2017-0181 affects the Windows Hyper-V Network Switch on Windows 10/Windows Server 2016 hosts. The vulnerability is a remote code execution caused by improper validation of input from the guest OS, requiring an authenticated user on the guest. Connected sources confirm Hyper-V input validation...
CVE-2017-11771
CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...
CVE-2018-0970
Technical details for CVE-2018-0970 are not provided in the supplied documents. Public disclosure, affected products, and remediation remain unclear; monitor for updates.
CVE-2018-8443
Technical details about CVE-2018-8443 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are described. Monitor for updates from official sources.
CVE-2018-8553
CVE-2018-8553 is a remote code execution vulnerability in how Microsoft Graphics Components handle memory objects. The flaw, affecting multiple Windows versions (Windows 7, Windows Server 2008/2012 family, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2016/2012 R2), stems from memor...
CVE-2019-0897
CVE-2019-0897 describes a remote code execution vulnerability in the Windows Jet Database Engine triggered by improper handling of in-memory objects. The connected CNVD entries reiterate a buffer overflow/heap overflow issue in the Windows Jet Database Engine, caused when data boundaries are not ...
CVE-2019-0905
CVE-2019-0905 describes a remote code execution vulnerability in the Windows Jet Database Engine, triggered when the engine improperly handles objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution on ...
CVE-2019-0907
The CVE-2019-0907 issue concerns the Windows Jet Database Engine and a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could entice a user to open a specially crafted file to trigger arbitrary code execution on the victim’s system. Microsoft’s upd...
CVE-2019-1159
CVE-2019-1159 is a Windows kernel elevation-of-privilege vulnerability caused by improper handling of objects in memory. An attacker who can log on could execute a crafted app to run code in kernel mode, potentially installing programs, viewing/changing/deleting data, or creating accounts with fu...
CVE-2020-1031
Technical details for CVE-2020-1031 are not publicly provided in the Connected Documents. The materials reference Windows DHCP and patches in general but do not specify affected products/versions, exploit details, or remediation for this CVE. Monitor for updates.
CVE-2020-1251
CVE-2020-1251 corresponds to a Windows Win32k elevation of privilege vulnerability. The connected sources confirm the flaw resides in the Windows kernel-mode driver’s handling of memory objects, enabling local privilege escalation. Affected component: Win32k (kernel-mode driver) in Windows; root ...
CVE-2021-1726
CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...
CVE-2022-21884
Technical details for CVE-2022-21884 are not publicly provided in the connected documents; monitor official disclosures or advisories for affected products, impact, and remediation.
CVE-2022-22043
CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...
CVE-2022-35752
Technical details about CVE-2022-35752 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2022-41056
Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.
CVE-2022-41090
Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.
CVE-2023-21686
Technical details about CVE-2023-21686 are not publicly provided in the supplied documents. No affected product/version/root cause or remediation are described here. Monitor for updates from official sources.
CVE-2024-30029
According to the NCSC advisory (NCSC-2024-0210), CVE-2024-30029 affects Microsoft Windows RRAS and is rated with CVSSv3.1 base score 7.5 (HIGH). The RRAS vulnerability enables remote code execution via network access, with the advisory indicating the impact as executing random code on the target....
CVE-2024-30077
Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.
CVE-2025-27742
CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...
CVE-2016-3301
CVE-2016-3301 affects the Windows Graphics Component in the Windows font library, enabling remote code execution via a crafted embedded font. Affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; W...
CVE-2016-7272
CVE-2016-7272 affects the Windows Graphics component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012/R2, RT 8.1, 10 Gold/1511/1607, Server 2016). The vulnerability enables remote code execution via a crafted web site, with network attack vector and no privileges requ...
CVE-2018-0813
Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2018-8341
CVE-2018-8341 describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly handled. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 (and corresponding Server SKUs 2008/2012/2016/2019-era fa...
CVE-2018-8343
CVE-2018-8343 describes a local elevation-of-privilege flaw in the Windows Network Driver Interface Specification (NDIS). The vulnerability arises when ndis.sys does not validate the length of a destination buffer before copying memory, enabling privilege escalation on affected Windows versions (...
CVE-2019-1010
Technical details about CVE-2019-1010 are not publicly available in the provided connected documents. Monitor for updates; current sources only reference Windows GDI information disclosure and MS patching without affected versions or exploit specifics.
CVE-2020-0643
The CVE-2020-0643 entry concerns a information-disclosure vulnerability in Windows GDI+ where memory objects are mishandled. Connected CNVD-2020-04849 describes a Microsoft Windows Graphics Device Interface Plus information disclosure vulnerability with the same affected component; it states that...
CVE-2020-0778
CVE-2020-0778 is described as an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Public metrics show a CVSSv2 base score of 4.6 (Medium) and a CVSSv3 base score of 7.8 (High) with local attack, low complexity, no user interac...
CVE-2020-0953
CVE-2020-0953 is described as a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of memory objects. It affects Microsoft Windows/Windows Server Jet Database Engine components and, per CNVD entries, could be triggered by a user opening a specially ...
CVE-2020-1085
CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...
CVE-2020-1584
CVE-2020-1584 is a Windows elevation-of-privilege vulnerability in how the dnsrslvr.dll handles in-memory objects. The underlying issue involves heap allocations and object copying in several DNS record copy paths (e.g., SigRecordCopy, NsecRecordCopy, KeyRecordCopy, OptRecordCopy, DhcidRecordCopy...
CVE-2021-1640
CVE-2021-1640 is a Windows Print Spooler Elevation of Privilege vulnerability affecting the Print Spooler service, caused by handling of print jobs submitted to FILE: ports. The vulnerability can lead to local privilege escalation with impacts across confidentiality, integrity, and availability (...
CVE-2021-24088
CVE-2021-24088 is a Windows Local Spooler RCE vulnerability. The issue stems from a bug in EnumJobsInLocalQueue where an integer overflow allows a crafted buffer to overwrite metadata and adjacent heap allocations; this can enable arbitrary data writes and potential code execution. Affected compo...
CVE-2021-27089
Technical details for CVE-2021-27089 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and affected products.
CVE-2021-33788
Technical details about CVE-2021-33788 are not provided in the supplied documents. Monitor for updated disclosures and CVE metadata.
CVE-2021-41343
Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.
CVE-2022-38051
CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...
CVE-2023-21755
CVE-2023-21755 is a Windows Kernel Elevation of Privilege vulnerability described as a local, high-severity issue (CVSS 7.8) with low attack complexity and no user interaction required. The provided documents confirm the vulnerability name and impact characteristics but do not specify the exact r...
CVE-2023-21820
Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.
CVE-2023-29346
Technical details about CVE-2023-29346 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources.
CVE-2023-29373
Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.
CVE-2023-33164
CVE-2023-33164 is described as a Remote Procedure Call Runtime Denial of Service vulnerability. The provided data show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexity, privilege requirement Low, no user interaction, and availability impact High. The connected d...