4267 matches found
CVE-2019-0839
Technical details about CVE-2019-0839 are not publicly provided in the connected documents. Monitor for updates and new public disclosures before drawing conclusions on affected components, root cause, or remediation.
CVE-2019-0853
Technical details about CVE-2019-0853 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates and corroborating risk information from official advisories.
CVE-2019-1343
Technical details about CVE-2019-1343 are not provided in the connected documents. The supplied MSKB entries cover OS updates but do not describe affected products, root cause, impact, or fixes for this CVE. Monitor for updates.
CVE-2020-0626
Technical details for CVE-2020-0626 are not provided in the connected documents. The Initial Description offers only high-level info. Monitor official advisories for updates on affected products/versions and any remediations or mitigations.
CVE-2020-1285
Technical details about CVE-2020-1285 are not provided in the connected documents. The sources reference other CVEs and Windows updates; monitor for updates on CVE-2020-1285.
CVE-2020-1383
CVE-2020-1383 is an information disclosure vulnerability in Windows RRAS: when Routing and Remote Access is enabled, an attacker can exploit a flaw in RPC handling to obtain information that could aid compromise. Exploitation requires a crafted application against an RPC server with RRAS enabled ...
CVE-2020-1516
The CVE-2020-1516 entry describes an Elevation of Privilege in the Windows Work Folders Service caused by improper handling of memory. Exploitation would require the attacker to first gain execution on the target, then run a crafted application to raise privileges. Microsoft’s security update fix...
CVE-2020-1564
CVE-2020-1564 : A remote code execution vulnerability exists in the Windows Jet Database Engine due to improper handling of objects in memory. An attacker could persuade a user to open a specially crafted file to execute arbitrary code. Impact is described as high/severe (per NVD metrics), with a...
CVE-2021-1657
Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.
CVE-2021-28345
Technical details about CVE-2021-28345 are not provided in the supplied documents. The entries reference multiple Windows vulnerabilities but do not specify affected components, impact, or fixes for this CVE. Monitor for updates.
CVE-2021-28434
Technical details for CVE-2021-28434 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.
CVE-2021-34496
Technical details about CVE-2021-34496 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability, but no affected product/version specifics, exploit info, or remediation are included here. Monitor for updates.
CVE-2023-24862
CVE-2023-24862 is a Windows Schannel (Secure Channel) Denial of Service vulnerability. The available data identifies the flaw as local with low privileges required and a high availability impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=N/I=N/A=H). Public documents do not provide granular technical d...
CVE-2023-28243
CVE-2023-28243 is a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry notes a high-severity (CVSS 3.1 base 8.8) issue with network attack vector and no user interaction required, applicable to affected printer driver components. Connected...
CVE-2024-38152
CVE-2024-38152 is listed under Windows WDAC OLE DB provider for SQL with a CVSS and impact of 7.80 (Execute Random Code). The connected documents confirm the affected component and the vulnerability’s label, but do not provide concrete details on root cause, affected versions, exploit scenarios, ...
CVE-2024-49080
CVE-2024-49080 affects Windows IP Routing Management Snapin and is a remote code execution vulnerability. According to the Initial document, it has CVSS 3.1 base metrics: Network attack vector, low attack complexity, low privileges required, no user interaction, with impacts on confidentiality, i...
CVE-2024-49102
CVE-2024-49102 — Windows RRAS Remote Code Execution is a network‑based vulnerability in the Routing and Remote Access Service (RRAS) of Windows. The CVSS score cited in the initial entry is 8.8/10 (High) with AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/A: High, indicating unauthenticated network access re...
CVE-2026-40403
CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...
CVE-2026-62790
CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...
CVE-2018-0830
CVE-2018-0830 is a Windows kernel local information-disclosure vulnerability caused by how objects in memory are handled. Affected products include Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2/R2 SP1; Windows Server 2012/R2; Windows 10 releases Gold, 1511, 1607, 1703, 1709; Wind...
CVE-2018-0868
CVE-2018-0868 concerns a Windows Installer elevation-of-privilege vulnerability in the Windows Installer service across affected Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions up to 1709, and related Server var...
CVE-2018-1015
CVE-2018-1015 is a Windows font library remote code execution vulnerability triggered by specially crafted embedded fonts. The NVD entries describe the issue as affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows 10 and corresponding Server ...
CVE-2018-8423
CVE-2018-8423 : A remote code execution vulnerability exists in the Microsoft JET Database Engine. The issue affects Windows client/server family (Windows 7, 8.1, 10; Windows Server 2008/2012/2016/2019 and R2 variants). The root cause is within the JET Database Engine component; exploitation requ...
CVE-2018-8485
CVE-2018-8485 is a DirectX local privilege-escalation vulnerability: DirectX mismanages objects in memory, enabling code execution with kernel privileges on affected Windows versions (Windows 8.1/Server 2012/2012 R2/10/Server 2016-2019 and related). Root cause is memory handling in DirectX; impac...
CVE-2018-8494
CVE-2018-8494 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser when processing untrusted input. Affected products include Windows 7; Windows Server 2008, 2012, 2012 R2, 2016, 2019; Windows 8.1; Windows 10 (and Windows RT 8.1); Windows Server 2008 R2; Window...
CVE-2019-0656
Technical details for CVE-2019-0656 are not publicly provided in the supplied connected documents. No explicit affected products, root cause, or remediation are stated here; monitor for updates from official sources.
CVE-2019-0794
CVE-2019-0794 is described in connected sources as a Windows VBScript Engine remote command execution vulnerability. The Myhack58 article notes exploitation via hosting a crafted website to trigger through a browser, and also via IE rendering engine or Microsoft Office documents to trigger initia...
CVE-2020-16920
CVE-2020-16920 affects Windows via an elevation-of-privilege in the Windows Application Compatibility Client Library, tied to improper handling of registry operations. The vulnerability requires code execution on a victim system before exploitation, enabling a crafted application to gain elevated...
CVE-2021-34498
Technical details about CVE-2021-34498 are not publicly provided in the connected documents. The available sources (NVD/NCSC/CNVD, etc.) mention the vulnerability at a high level without specifics on affected products, versions, impact, or fixes. Monitor for updates.
CVE-2021-34537
CVE-2021-34537 is a Windows Bluetooth Driver elevation-of-privilege vulnerability in the Windows Bluetooth Service. Public data (NVD) lists CVSS v3.1 base score 8.0 (HIGH), attack vector ADJACENT, user interaction NONE, privileges required LOW, with Confidentiality/Integrity/Availability impacts ...
CVE-2021-38638
CVE-2021-38638 corresponds to a Windows Elevation of Privilege vulnerability in the Windows Ancillary Function Driver for WinSock. According to the NVD entry, the issue has a CVSS v3.1 base score of 7.8 (High) with LOCAL attack vector, LOW attack complexity, and privileges required set to LOW; co...
CVE-2021-41367
CVE-2021-41367 is described as an NTFS Elevation of Privilege Vulnerability. The Connected NVD entry lists CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and UI: NONE. Impact per CVSS3.1 indicates high confidentiality, integrity, and ava...
CVE-2022-21880
CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...
CVE-2022-21914
Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21958
Technical details about CVE-2022-21958 are not provided in the supplied documents. No specifics on affected builds, root cause, or fixes are available here; monitor official advisories for updates.
CVE-2023-21804
Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.
CVE-2023-23421
CVE-2023-23421 is part of a family of hive-memory-corruption bugs in the Windows Registry (kernel) that enable local privilege escalation. The connected analysis shows an attacker-controlled hive memory‑corruption primitive (e.g., UAF in a registry key or related hive data) that can be exploited ...
CVE-2023-24870
Technical details about CVE-2023-24870 (affected product, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE databases.
CVE-2023-24883
Technical details about CVE-2023-24883 are not provided in the supplied documents. Public information on affected product/versions, root cause, impact, and fixes is not available here. Monitor for updates.
CVE-2023-24924
CVE-2023-24924 is a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Connected sources corroborate an RCE flaw in the PostScript and PCL6 printer driver stack, enabling an attacker to remotely execute code. The CVE entry lists a high-severity impact (CVSS...
CVE-2023-28305
Technical details about CVE-2023-28305 are not provided in the connected documents. Public specifics (affected product/version, root cause, impact, or fixes) are not available here; monitor for updates and refer to the official advisories for confirmation.
CVE-2023-35352
Technical details for CVE-2023-35352 are not publicly available in the provided documents. Monitor for updates from Microsoft and security sources.
CVE-2024-30090
CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...
CVE-2024-43623
CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...
CVE-2017-0060
The CVE-2017-0060/0062 issue affects the Graphics Device Interface (GDI) in multiple Windows releases (Vista through Windows 10 variants listed in the initial entry). The vulnerability enables a remote attacker to obtain sensitive information from process memory by visiting a crafted web site, i....
CVE-2018-0825
CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...
CVE-2018-8309
CVE-2018-8309 is a Windows Denial of Service vulnerability where the root cause is the improper handling of objects in memory. Affected products include multiple Windows releases such as Windows 7, Windows 8.1, Windows 10, Windows Server 2008/R2, 2012/R2, 2016 and related server editions. The vul...
CVE-2018-8345
CVE-2018-8345 and CVE-2018-8346 are described as LNK remote code execution vulnerabilities in Microsoft Windows, caused by how the system processes shortcut files with the “.lnk” extension. The connected documents confirm the issue affects multiple Windows versions (e.g., Windows 7, Windows Serve...
CVE-2019-0549
CVE-2019-0549 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 (and corresponding Server editions such as Server 2012/2012 R2, 2016, 2019). F...