4260 matches found
CVE-2022-34702
Technical details about CVE-2022-34702 are not publicly provided in the connected documents. No affected products, vectors, or remediation are stated beyond the initial description. Monitor for updates and additional authoritative disclosures.
CVE-2022-35803
CVE-2022-35803 affects the Windows Common Log File System Driver. The vulnerability is a local elevation-of-privilege in CLFS that could allow an attacker with low privileges to gain SYSTEM-level access, with impact to confidentiality, integrity, and availability rated high. The entry notes a CVS...
CVE-2023-24856
Technical details about CVE-2023-24856 are not publicly available in the provided connected documents. The entry lacks affected products/versions or exploit information. Monitor for updates from official sources to obtain concrete details, impact, and remediation.
CVE-2023-24858
CVE-2023-24858 concerns an information-disclosure vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. The issue, affecting the printer driver component, exposes confidential data via the affected driver surfaces. CVSS metrics from NVD indicate network vector, high confidentiali...
CVE-2023-36882
CVE-2023-36882 concerns Microsoft WDAC OLE DB provider for SQL Server, enabling Remote Code Execution. The NVD details show a network-based exploitable flaw with CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, score 8.8 (HIGH). Root cause and affected versions are not fully enumerated in the prov...
CVE-2024-38033
Technical details about CVE-2024-38033 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds for affected products, versions, and fixes.
CVE-2025-21273
Technical details are not publicly provided in the supplied documents. The CVE-2025-21273 entry lacks explicit affected product versions, root cause, or remediation specifics in this set; monitor for updates from Microsoft/MSRC.
CVE-2025-21369
CVE-2025-21369 is listed by the NCSC advisory as a vulnerability in Microsoft Windows’ Digest Authentication that enables executing arbitrary code. The advisory attributes an overall high severity (CVSS v3.1 base 8.80) with a network attack vector and impact. The connected document confirms the v...
CVE-2026-42985
CVE-2026-42985 is described in connected sources as a heap-based buffer overflow in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. The initial and connected docs provide the vulnerability description and a high CVSS score (8.8, HIGH) with netwo...
CVE-2015-0005
CVE-2015-0005 (NETLOGON Spoofing Vulnerability) affects Windows as a domain controller feature: the NETLOGON service on Windows Server 2003 SP2, 2008 SP2 and R2 SP1, and Windows Server 2012 Gold/R2, when configured as a Domain Controller, can be abused by remote attackers to spoof the computer na...
CVE-2019-0577
CVE-2019-0577 is a Jet Database Engine remote code execution vulnerability. The Windows Jet Database Engine improperly handles objects in memory, allowing an attacker who lures a user to open a specially crafted file to execute arbitrary code. Affected Windows versions include Windows 7; Windows ...
CVE-2019-0618
CVE-2019-0618 is a remote code execution vulnerability in Windows GDI/ GDI+. The issue arises from how memory objects are handled by the Windows Graphics Device Interface, enabling a remote attacker to execute arbitrary code on affected systems. The CVE is distinct from CVE-2019-0662. Exploitabil...
CVE-2019-0842
Technical details about CVE-2019-0842 are not publicly provided in the connected documents you supplied. No affected products/versions or fixes are specified here. Monitor for updates.
CVE-2019-0851
Technical details on CVE-2019-0851 are not publicly provided in the supplied connected documents. Monitor official advisories for updates on affected products, root cause, and remediation.
CVE-2022-29138
Technical details (affected products/components, root cause, exploit information, or remediation) are not provided in the supplied documents. Monitor official disclosures from Microsoft and the referenced KB/MSRC pages for updates.
CVE-2022-30205
Technical details (affected product/version, root cause, exploitability, and remediation) for CVE-2022-30205 are not provided in the connected documents. Only high-level references to the Windows Group Policy elevation vulnerability are present. Monitor for updates.
CVE-2022-34727
Technical details (affected components, root cause, exploitability, and fixes) are not publicly available in the provided documents; monitor for updates from Microsoft and vulnerability trackers for concrete remediation and impact information.
CVE-2022-38031
CVE-2022-38031 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The connected documents confirm the affected component as the WDAC OLE DB provider for SQL and show that Microsoft issued updates (e.g., KB5018419 and related security ...
CVE-2022-41047
CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...
CVE-2023-21678
Technical details about CVE-2023-21678 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and related advisories.
CVE-2023-21813
Technical details on CVE-2023-21813 are not provided in the furnished documents; no affected products, exploit info, or fixes are described here. Monitor for updates from official advisories.
CVE-2023-24861
Technical details about CVE-2023-24861 (Windows Graphics Component Elevation of Privilege Vulnerability) are not publicly available in the provided documents; no affected versions, root cause, or remediation are specified here. Monitor for official disclosures and updates.
CVE-2023-24867
The CVE, CVE-2023-24867, is described in connected sources as a remote code execution vulnerability in Microsoft’s PostScript and PCL6 Class Printer Driver. CNVD-2023-28103 explicitly notes a remote code execution flaw in the Microsoft PostScript Printer Driver; NVD/NIST entries corroborate the v...
CVE-2023-28224
CVE-2023-28224 is described as a Windows PPPoE Remote Code Execution vulnerability. The entry provides a CVSS 3.1 score of 7.1 (HIGH) with attack vector Adjacent, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Explo...
CVE-2023-29359
Technical details about CVE-2023-29359 are not provided in the connected documents. The entries identify a GDI Elevation of Privilege vulnerability but do not specify affected products/versions, root cause, impact specifics, or remediation.
CVE-2023-35367
Technical details for CVE-2023-35367 are not publicly provided in the supplied documents. No specific affected products, versions, root cause, remediation, or exploit information is available here. Monitor official sources for updates.
CVE-2023-36906
Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.
CVE-2025-21211
Technical details about CVE-2025-21211 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories; no confirmed affected products, vectors, or fixes are described here.
CVE-2026-58608
CVE-2026-58608 affects Windows Print Spooler components, where a race condition from improper synchronization on a shared resource enables remote code execution over a network. The vulnerability allows an authenticated attacker with low privileges to execute code with high impact (C/H; I/H; A/H) ...
CVE-2016-7212
CVE-2016-7212 affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8.1, 2012 Gold/R2, RT 8.1, 10 up to 1607, and Server 2016) where a crafted image file can lead to remote code execution. Root cause: improper handling in the Windows image load feature. Impact is remote cod...
CVE-2018-0748
CVE-2018-0748 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows platforms (e.g., Windows 7 SP1, 8.1/RT 8.1, server lines, Windows 10 versions up to 1709). The root cause is described as the kernel’s handling of memory addresses enabling elevation of privilege whe...
CVE-2018-8415
CVE-2018-8415 is a PowerShell tampering vulnerability that could let an attacker execute unlogged code locally on affected Windows platforms (Windows 7/10, Windows Server 2012/2016/2019, and PowerShell Core 6.x). Root cause: tampering in PowerShell allowing unlogged code execution. CVSSv3 base sc...
CVE-2018-8477
CVE-2018-8477 is a Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Affected products include multiple Windows client and server editions (e.g., Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2008 R2, 2012/2012 R2, 2016, 2019). The vul...
CVE-2018-8561
CVE-2018-8561 is described in connected sources as a local-elevation-of-privilege vulnerability in Microsoft DirectX. The root cause, per the documents, is DirectX (DXGKRNL or related in-memory objects) not handling memory objects correctly, enabling a non-privileged attacker to execute code with...
CVE-2019-0536
Technical details for CVE-2019-0536 are not provided in the connected documents. No product/version/impact data is available here. Monitor for updates.
CVE-2019-0552
CVE-2019-0552 is a Windows privilege-escalation vulnerability in the COM Desktop Broker component. The issue is triggered locally and allows an attacker with limited privileges to run code with elevated privileges within affected Windows versions (including Windows 10/Server 2016/2019, Windows 8....
CVE-2019-0690
The vulnerability CVE-2019-0690 affects the Microsoft Hyper-V Network Switch on a host server. The issue is a denial-of-service in which input from a privileged user on a guest OS is not properly validated, leading to an impact on availability. The description specifies the affected component and...
CVE-2019-0792
Technical details for CVE-2019-0792 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2019-0904
The CVE-2019-0904 issue is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of in-memory objects. Attackers could entice users to open a specially crafted file to run arbitrary code on affected systems. Affected software/hardware: Windows Jet Database ...
CVE-2019-1282
CVE-2019-1282 affects the Windows Common Log File System (CLFS) Driver. It is a information-disclosure vulnerability caused by improper handling of sandbox checks in CLFS, enabling local attackers to read data outside its intended limits after logging on and running a crafted application. Exploit...
CVE-2020-1113
Technical details for CVE-2020-1113 are not publicly provided in the connected documents. Monitor for official advisories to learn affected products, root cause, impact, and fixes.
CVE-2020-17140
CVE-2020-17140 corresponds to a Windows SMB information-disclosure vulnerability. Public documents (NVD entry and OpenVAS feeds) describe network-exposed impact with confidentiality and, in some sources, availability concerns, while the vulnerability’s root cause is not detailed beyond “SMB infor...
CVE-2021-24078
CVE-2021-24078 is a Windows DNS Server remote code execution vulnerability affecting Windows Server DNS components. Public sources describe an unauthenticated, network-based RCE when a DNS server processes crafted queries, with CVSS v3.1 score of 9.8 (CRITICAL). Public patches exist as part of Mi...
CVE-2021-31182
CVE-2021-31182 concerns Microsoft Bluetooth Driver Spoofing vulnerability. CVSS‑3.1 score 7.1 (AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N). Affected component: Microsoft Bluetooth Driver. Root cause/impact: spoofing could compromise confidentiality (low) and integrity (high) with no availability impact ...
CVE-2021-33754
CNVD-2021-76463 (Microsoft Windows DNS Server RCE vulnerability) ties CVE-2021-33754 to Windows Server DNS Server. The connected CNVD entry confirms a remote code execution issue in the DNS Server component of Windows Server, but provides no vendor/product version specifics, root-cause details, o...
CVE-2021-34516
Technical details about CVE-2021-34516 are not publicly available in the provided documents. Monitor for official disclosures or advisories for affected products, impact, and remediation.
CVE-2022-26936
Technical details about CVE-2022-26936 are not provided in the Connected documents; only general security update KB articles are present. Monitor Microsoft advisories (KB5013941/3942/3943, etc.) for vulnerability-specific information and fixes.
CVE-2022-35744
Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.
CVE-2022-38026
CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...