3552 matches found
CVE-2025-21190
CVE-2025-21190 is listed by an EU NCSC advisory under Windows Telephony Service with a CVSS of 8.80 and impact described as executing random code. The Connected Documents do not provide vendor/product version details or a concrete patch/fix within the supplied materials; Microsoft MSRC guidance i...
CVE-2025-21242
CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...
CVE-2025-21270
CVE-2025-21270 affects Microsoft Message Queuing (MSMQ) and is a Denial of Service vulnerability. Public data show an attack over the network with no authentication required, low attack complexity, and a high impact on availability (CVSS v3.1: 7.5). The connected documents indicate MSMQ-related e...
CVE-2025-24064
CVE-2025-24064 is a use-after-free in DNS Server that enables remote code execution over the network. The issue is documented as a DNS Server vulnerability with CVSS 3.1/3.1 and a high impact (Execute Random Code) in the Windows DNS role, per NVD entry and CISA/NCSC consolidation. Microsoft has r...
CVE-2025-53766
CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...
CVE-2009-0550
CVE-2009-0550 impacts Windows HTTP Services (WinHTTP) and WinINet used by Internet Explorer, on Windows 2000 SP4, XP SP2/SP3, Server 2003, Vista, and Server 2008; the vulnerability allows an attacker-controlled remote web server to capture NTLM credentials and replay them, and to execute arbitrar...
CVE-2012-0181
CVE-2012-0181 affects Win32k.sys in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, and Windows 8 CP). The vulnerability is a memory-corruption/logic issue in the kernel-mode ReadLayoutFile path that handles keyboard layout files, allowing loc...
CVE-2014-0301
CVE-2014-0301 is a DirectShow memory corruption (double-free) in qedit.dll used when processing JPEGs, enabling remote code execution on Windows XP/Server 2003/Vista/Server 2008/Windows 7/8/8.1/Server 2012. Affected components include DirectShow JPEG handling; root cause is a double-free in JPEG ...
CVE-2016-0070
Technical details of CVE-2016-0070 are not publicly provided in the Connected Documents. Monitor for updates.
CVE-2016-7205
CVE-2016-7205 is a Windows memory corruption vulnerability in the Animation Manager that can be triggered by visiting a crafted web site, enabling remote code execution. Affected products include Windows 7 SP1, Windows 8.1, Windows 10 (various builds), Windows Server 2008 R2 SP1, Windows Server 2...
CVE-2017-0050
Technical details about CVE-2017-0050 are not publicly provided in the connected documents. The sources reference the vulnerability generally; monitor for updates on affected products, root cause, and fixes.
CVE-2017-0123
CVE-2017-0123 concerns Uniscribe (usp10.dll) in affected Windows editions (Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1). The vulnerability allows a remote attacker to obtain sensitive information from a process address space via a crafted web site, i.e., an informatio...
CVE-2017-0260
Technical details for CVE-2017-0260 are not provided in the connected documents. The initial entry notes an Office Remote Code Execution vulnerability, but there are no concrete product/version/impact/fix details here. Monitor official advisories for updates.
CVE-2017-0275
CVE-2017-0275 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB server handling of certain requests. The initial description lists affected products as Windows platforms including Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and ...
CVE-2018-8434
CVE-2018-8434 is a Windows Hyper-V information disclosure vulnerability. It occurs when a host OS fails to properly validate input from an authenticated user on a guest OS, allowing potential disclosure of memory information. Affected platforms include Windows 7, Windows Server 2008/2012 families...
CVE-2019-0715
The CVE-2019-0715 entry affects Microsoft Hyper-V Network Switch and is described as a denial-of-service vulnerability. A privileged attacker on a guest OS can run a crafted application to crash the host server, indicating that input validation in the Hyper-V Network Switch path is inadequate. Th...
CVE-2019-0893
The connected CNVD entries describe Microsoft Windows Jet Database Engine Buffer Overflow vulnerabilities in Windows and Windows Server. The flaw arises when the engine performs memory operations without proper data-boundary validation, leading to buffer/heap overflows. Concrete exploit details, ...
CVE-2019-0895
The connected CNVD entries describe a Windows Jet Database Engine vulnerability as a buffer overflow/heap overflow issue arising when memory boundaries are not properly validated. They state an attacker could exploit this condition to cause memory corruption, affecting Windows/Windows Server envi...
CVE-2019-0936
CVE-2019-0936 is a Windows elevation-of-privilege vulnerability arising from improper handling of certain symbolic links. The root cause is an inadequate check of symbolic link handling that can enable a local attacker to escalate privileges to Administrator. Affected software is Windows (per des...
CVE-2019-0972
CVE-2019-0972 affects the Local Security Authority Subsystem Service (LSASS) where an authenticated attacker can trigger a denial of service by sending specially crafted authentication requests. Exploitation could cause the LSASS service to reboot the target system. Microsoft’s security update mi...
CVE-2019-1025
CVE-2019-1025 describes a Windows denial-of-service vulnerability caused by improper handling of objects in memory. An attacker who can log on or convince a user to open a crafted file on a network share could make the target stop responding. It does not enable code execution or direct privilege ...
CVE-2019-1247
Technical details about CVE-2019-1247 are not publicly provided in the supplied documents. The materials reference the Jet Database Engine RCE generally but do not specify affected products, versions, impact, or fixes. Monitor for updates.
CVE-2019-1252
CVE-2019-1252 is a Windows GDI information disclosure vulnerability. The Graphical Device Interface component can improperly disclose memory contents due to how objects are handled in memory. A remote attacker could exploit this by enticing a user to open a specially crafted web page or document,...
CVE-2019-1344
Technical details about CVE-2019-1344 are not publicly provided in the supplied documents. The Connected documents do not include affected products, root cause, impact, or fixes. Monitor for updates from official sources.
CVE-2019-1346
Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.
CVE-2019-1466
CVE-2019-1466 corresponds to a Windows GDI information-disclosure vulnerability. Connected CNVD entries describe an information leakage in the Windows GDI component, with attacker methods such as tricking a user into opening crafted documents or visiting untrusted pages. The documents do not prov...
CVE-2020-1593
Technical details about CVE-2020-1593 are not provided in the connected documents; no product/version/impact specifics are disclosed here. Monitor for updates as additional details may be published.
CVE-2020-16960
CVE-2020-16960 is a Windows Backup Engine Elevation of Privilege vulnerability. Documents indicate a local attacker could exploit this to gain HIGH-severity privileges (CVSSv3.1 base score 7.8) with no user interaction required. Affected component is the Windows Backup Engine; the vulnerability i...
CVE-2021-24102
CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...
CVE-2021-27096
CVE-2021-27096 refers to an NTFS elevation-of-privilege weakness in Microsoft Windows/Windows Server. The CNVD entry confirms an NTFS vulnerability that could allow privilege escalation, but the provided documents do not disclose the exact root cause, affected builds, or a specific fix. NVD/Secur...
CVE-2021-31953
CVE-2021-31953 is a Windows elevation-of-privilege issue affecting the Windows Filter Manager. The NVD entry lists a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, integrity, and availability is high. The...
CVE-2021-43224
CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...
CVE-2022-37982
CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...
CVE-2022-37990
CVE-2022-37990 is a Windows kernel elevation-of-privilege issue tied to registry/hive memory handling. The connected analysis places this bug in a pool memory corruption class triggered by a 16‑bit integer overflow when calculating a dynamically allocated buffer length during registry hive operat...
CVE-2022-37999
CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...
CVE-2022-38004
Technical details about CVE-2022-38004 are not publicly available in the provided documents; the connected records reference Windows Fax Service and a remote code execution vulnerability but do not disclose affected versions, root cause, exploit info, or fixes. Monitor for updates.
CVE-2022-38022
CVE-2022-38022 is listed in the ENISA/NCSC (Windows Kernel) catalog as a Windows Kernel elevation-of-privilege vulnerability. The NCSc table places CVE-2022-38022 under Windows Kernel with the impact category “Obtaining Increased Entitlements.” No explicit root-cause, affected versions, or remedi...
CVE-2023-21800
CVE-2023-21800 is a Windows Installer Elevation of Privilege vulnerability. Affected component: Windows Installer. Root cause: elevation of privilege in local context (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8, HIGH). Exploitation status not shown in provided docs. Impact conc...
CVE-2023-21811
Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.
CVE-2023-28240
Technical details for CVE-2023-28240 are not publicly available in the provided documents; monitor for updates.
CVE-2023-28256
CVE-2023-28256 corresponds to a Windows DNS Server remote code execution vulnerability. The initial record identifies the affected software as Windows DNS Server and provides a CVSSv3.1 base score of 6.6 (Medium) with Network attack vector, High attack complexity, and High privileges required; us...
CVE-2023-35297
CVE-2023-35297 is the Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The connected Vulristics/AVLEONOV content notes this CVE as having public exploit activity and exposure on the same-network-segment (PGM) with a network attack vector and high impact. Specific aff...
CVE-2024-38154
CVE-2024-38154 concerns Windows Routing and Remote Access Service (RRAS). The initial document states RRAS Remote Code Execution Vulnerability with a CVSS3.1 base score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected documents do not supply concrete technical details (no vendor/product/ve...
CVE-2024-43644
Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.
CVE-2012-0180
CVE-2012-0180 affects win32k.sys in multiple Windows releases (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8 CP). The issue is improper handling of user-mode input in kernel-mode for windows and messages, enabling local privilege escalation via a crafted app...
CVE-2016-3236
CVE-2016-3236 affects the WPAD proxy discovery implementation in multiple Windows editions (Vista through Windows 10). The weakness arises when WPAD proxy discovery is mishandled, which could allow a remote attacker to redirect network traffic via unspecified vectors, effectively an elevation of ...
CVE-2016-3338
CVE-2016-3338 concerns the Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. It affects multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 pre-1709, and Server 2016) and is triggered by a crafted application that allows ...
CVE-2016-3340
CVE-2016-3340 affects the Windows Common Log File System (CLFS) driver across multiple Windows client/server SKUs (e.g., Vista/7/8.1/10 and corresponding server editions). The vulnerability enables local users to gain privileges via a crafted application, representing a local elevation-of-privile...
CVE-2017-11847
CVE-2017-11847 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1; Windows 8.1/RT; Windows 10 1511–1709; Windows Server 2008/2012/2016, etc.). The root cause is improper handling of objects in memory, enabling a local attacker to escalate privileges and run a...