3552 matches found
CVE-2024-30025
CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...
CVE-2025-27487
CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...
CVE-2018-8136
CVE-2018-8136 is described as a remote code execution vulnerability in how Windows handles objects in memory, affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 and Windows 10 servers. The con...
CVE-2019-0890
The connected CNVD entries describe a vulnerability in Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow caused by improper validation of data boundaries during memory operations. This vulnerability affects Windows Jet Database Engine components; attacker-accessible impact co...
CVE-2019-0899
The CVE-2019-0899 entry concerns a remote code execution vulnerability in the Windows Jet Database Engine. Connected CNVD records describe a buffer overflow/heap overflow in the Jet DB Engine when memory boundaries are not properly validated, enabling exploitation through in-memory operations. Th...
CVE-2019-1012
CVE-2019-1012 refers to an information-disclosure vulnerability in the Windows GDI component where memory contents can be disclosed due to improper handling of objects. The issue could be exploited by convincing a user to open a specially crafted document or visit an untrusted page, enabling info...
CVE-2019-1157
The CVE-2019-1157 entry describes a remote code execution in the Windows Jet Database Engine due to improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to exploit this, enabling arbitrary code execution on a affected system. The vulnerability aff...
CVE-2019-1236
CVE-2019-1236 describes a remote code execution vulnerability in the VBScript engine related to how it handles objects in memory. The issue is tied to the VBScript engine’s object memory management and is documented as a vulnerability distinct from CVE-2019-1208. The vulnerability affects Interne...
CVE-2020-1207
Technical details for CVE-2020-1207 are not publicly available in the provided documents. Monitor for updates from official advisories and security bulletins for affected components and remediation.
CVE-2020-16959
CVE-2020-16959 is a Windows Back- up Engine elevation-of-privilege vulnerability. The connected records confirm the affected component as the Windows Backup Engine and describe a local elevation of privilege with low attack complexity and no user interaction required, yielding high impact to conf...
CVE-2021-1649
Technical details for CVE-2021-1649 are not publicly provided in the supplied documents. Monitor for updates from the connected sources for affected products, impact, and fixes.
CVE-2021-36969
Technical details for CVE-2021-36969 are not publicly available in the provided documents. Connected sources reference the CVE and vulnerability class but do not specify affected product versions, root cause, exploitability, or fixes. Monitor for updates.
CVE-2021-38635
CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...
CVE-2021-40466
Technical details about CVE-2021-40466 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents; available sources only state the vulnerability at a high level. Monitor for updates.
CVE-2021-41340
Technical details for CVE-2021-41340 are not publicly provided in the connected documents. Monitor for updates as only high-level description is available from initial and related sources.
CVE-2022-24544
Technical details for CVE-2022-24544 are not publicly available in the provided documents. Monitor for updates.
CVE-2023-21801
CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...
CVE-2023-29365
Technical details about CVE-2023-29365 are not publicly available in the provided documents. Monitor official sources (Microsoft MSRC/NVD) for updates on affected products, impact, and fixes.
CVE-2023-35376
Technical details for CVE-2023-35376 are not publicly available in the provided documents; monitor for updates.
CVE-2024-30016
CVE-2024-30016 affects Windows Cryptographic Services . The vulnerability is described as an information disclosure with impact to confidentiality (high) and is listed in sources as a Windows component issue with a CVSS v3.1 base score of 5.5 (attack vector: local; privileges required: low; user ...
CVE-2024-30036
CVE-2024-30036 – Windows Deployment Services Information Disclosure What is affected: Windows Deployment Services component of Windows. Documented as CVE-2024-30036 with an information disclosure vulnerability. What is vulnerable: The Windows Deployment Services feature exposes data confidentiali...
CVE-2024-30091
Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.
CVE-2024-38198
CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...
CVE-2025-21286
CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...
CVE-2025-48817
Technical details about CVE-2025-48817 are not publicly provided in the supplied documents. No vendor/product/versions or mitigations are disclosed here. Monitor official advisories for updates.
CVE-2008-0107
CVE-2008-0107 is a memory corruption vulnerability in multiple SQL Server lineage components (SQL Server 7.0, SQL Server 2000/2005, MSDE/WYukon) triggered by a crafted on-disk file path supplied via SMB or WebDAV, leading to a heap-based buffer overflow. The flaw permits remote authenticated user...
CVE-2009-2501
CVE-2009-2501 describes a heap-based buffer overflow in Microsoft GDI+ when processing PNG images, enabling remote code execution via crafted PNGs. Affected software/contexts include Internet Explorer 6 SP1 on Windows XP (SP2/SP3) and various Microsoft Office components and viewers that rely on G...
CVE-2011-0661
CVE-2011-0661 describes a remote code execution vulnerability in the Windows SMB Server service. The root cause is improper validation of fields in SMB requests by the SMB Server, allowing an unauthenticated remote attacker to execute arbitrary code via a malformed SMBv1 or SMBv2 packet. Affected...
CVE-2016-0174
CVE-2016-0174 describes a local privilege escalation in Windows kernel-mode drivers (Win32k) affecting multiple Windows family versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/Gold). The vulnerability allows a locally authenticated attacker to gain hig...
CVE-2017-0062
CVE-2017-0062 affects the Graphics Device Interface (GDI) in multiple Windows versions (Vista SP2 through Windows 10/1607). It enables local attackers to disclose sensitive process-memory information via a crafted web site; impact is information disclosure. Connected CIRCL entries indicate the vu...
CVE-2018-8339
Technical details about CVE-2018-8339 are not publicly provided in the connected documents. Available sources reiterate the elevated-privilege issue in Windows Installer but do not disclose affected versions, specific vulnerable components, exploit vectors, or remediation steps beyond general gui...
CVE-2019-0974
CVE-2019-0974 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file, potentially executing arbitrary code on the affected system. The update fixes the issue by co...
CVE-2019-1219
CVE-2019-1219 is an information disclosure vulnerability in Windows Transaction Manager caused by improper handling of objects in memory. Publicly documented by NVD as a Windows MCU information disclosure issue with a CVSS v2 base score of 2.1 (Low) and CVSS v3.1 base score of 5.5 (Medium), sugge...
CVE-2019-1240
CVE-2019-1240 affects the Windows Jet Database Engine. The vulnerability stems from improper handling of objects in memory, enabling remote code execution when a user opens a specially crafted file. Exploitation would occur locally (attackVector LOCAL) with user interaction required, and could al...
CVE-2020-1579
CVE-2020-1579 affects the Windows Function Discovery SSDP Provider. Root cause: improper memory handling leading to privilege elevation. Exploitation requires local code execution to run a crafted app and elevate rights. The security update fixes memory handling in the provider; no further exploi...
CVE-2020-16963
CVE-2020-16963 is a Windows Backup Engine elevation-of-privilege vulnerability with a CVSSv3 base score of 7.8 (LOCAL, LOW attack complexity, Privileges Required: LOW, NONE user interaction). The provided documents do not include explicit technical details on the root cause or affected components...
CVE-2021-26413
CVE-2021-26413 is the Windows Installer Spoofing Vulnerability. Microsoft and CVE records confirm a local-attack surface in the Windows Installer component that can impact integrity (as per CVSS) without user interaction. Public exploit details are not provided in the connected documents; however...
CVE-2021-27095
Technical details about CVE-2021-27095 are not publicly provided in the connected documents. The materials reference the vulnerability only as Windows Media Video Decoder Remote Code Execution without specific affected products, versions, or fixes.
CVE-2021-28333
Technical details about CVE-2021-28333 are not publicly provided in the supplied documents. The connected entries mention the vulnerability at a high level but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.
CVE-2021-28358
Technical details for CVE-2021-28358 are not provided in the given documents. Monitoring updates is recommended as no affected products, root cause, impact, or remediation are stated here.
CVE-2021-31954
CVE-2021-31954 is a Windows CLFS driver elevation-of-privilege vulnerability. The affected component is the Windows Common Log File System Driver, and the CVSS vectors indicate LOCAL attack vector with LOW attack complexity and privileges required (LOW), no user interaction, and total impact on c...
CVE-2022-35750
Technical details about CVE-2022-35750 (affected product/component, versions, root cause, exploitability) are not publicly available in the provided Connected Documents. Monitor for updates and new disclosures in authoritative sources.
CVE-2022-35840
Technical details about CVE-2022-35840 are not publicly available in the provided documents. Monitor for updates from the cited sources to learn affected products, impact, and remediation.
CVE-2022-37955
Technical details for CVE-2022-37955 are not publicly provided in the supplied documents; the materials reference only updates without specific vulnerable components, root cause, or fixes. Monitor for official disclosures and patch guidance.
CVE-2022-38038
CVE-2022-38038 is a Windows kernel registry vulnerability caused by a 16-bit integer overflow during dynamic buffer length calculations in hive loading, leading to hive-based memory corruption and local privilege escalation. The issue is tied to regf/hive loading paths and is grouped with other r...
CVE-2022-41094
Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.
CVE-2023-32020
Technical details about CVE-2023-32020 are not publicly available in the provided connected documents. No affected products, root cause, impact, or remediation information is given here. Monitor for updates from official sources.
CVE-2024-30014
CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...
CVE-2024-30023
CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...