4267 matches found
CVE-2018-8304
CVE-2018-8304 is a Windows DNSAPI.dll denial-of-service vulnerability arising from improper handling of DNS responses. Affected: Windows 7, Server 2008/2012/2012 R2, Server 2008 R2, 2016; Windows 8.1/10/10 Servers; DNSAPI denial of service could impact availability. Connected documents confirm th...
CVE-2019-0615
Technical details (affected products/versions, root cause specifics, impact scope) for CVE-2019-0615 are not publicly available in the provided documents. Monitor for updates in connected advisories (CPAI series) and official disclosures.
CVE-2019-0660
Technical details for CVE-2019-0660 are not publicly available in the provided connected documents. Monitor for updates from advisories and CVE records to obtain affected products, impact, and remediation guidance.
CVE-2019-0756
Affected component: Microsoft XML Core Services MSXML parser. Description from CVE-2019-0756 indicates a remote code execution vulnerability when the MSXML parser processes user input. Severity is high (CVSS v3 base 8.8; v2 base 9.3). The connected PRION/NVD entries reiterate the same advisory wi...
CVE-2019-0775
CVE-2019-0775 corresponds to an information-disclosure vulnerability in the Windows kernel where memory objects are not handled correctly, enabling partial confidentiality impact in a local context. Affected component is the Windows kernel; root cause is improper handling of objects in memory. Th...
CVE-2019-1057
CVE-2019-1057 applies to the Microsoft XML Core Services MSXML parser. A remote code execution vulnerability occurs when the MSXML parser processes untrusted user input; an attacker could entice a user to visit a crafted website, triggering remote code execution and potentially take control of th...
CVE-2020-1039
Technical details for CVE-2020-1039 (Jet Database Engine RCE) are not provided in the Connected Documents. Please monitor official advisories (MSRC/NVD) for affected products, exact root cause, impact scope, and available fixes.
CVE-2020-1378
CVE-2020-1378 is a Kernel Transaction Manager (KTM) / registry KTM log recovery vulnerability reported by James Forshaw (2019–2020) alongside CVE-2019-0959 and CVE-2020-1377. The connected material links it to KTM log processing and recovery of registry state, noting that KTM transaction handling...
CVE-2020-16897
CVE-2020-16897 is an information-disclosure vulnerability in NetBIOS over TCP (NetBT) where objects in memory are improperly handled. An attacker who runs a crafted application could obtain information to help further compromise the system, but cannot directly execute code or elevate rights. The ...
CVE-2021-26894
Technical details for CVE-2021-26894 are not provided in the connected documents. The NVD entry notes a Windows DNS Server RCE with CRITICAL severity (CVSS v3.1 9.8) but no specifics on affected versions or fixes are given here. Monitor for updates.
CVE-2021-28354
Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.
CVE-2021-40460
Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21867
Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-23296
Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.
CVE-2022-24550
Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.
CVE-2022-26802
CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...
CVE-2022-30200
Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2022-41100
CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...
CVE-2023-21694
Technical details about CVE-2023-21694 are not publicly provided in the supplied documents. The connected records do not specify affected products, root cause, remediation, or exploit status. Monitor for official disclosures and updates.
CVE-2023-24927
CVE-2023-24927 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. The connected CNVD entry confirms remote code execution exists, but the provided documents do not specify the exact root cause, affected versions, or exploit detail...
CVE-2023-29372
CVE-2023-29372 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The available information lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, UI required, and impa...
CVE-2023-38254
CVE-2023-38254 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). The available documents identify MSMQ as the affected component and indicate the vulnerability causes availability impact (A) with no confidentiality or integrity impact, and do not provide exploi...
CVE-2024-30019
CVE-2024-30019 is a Windows DHCP Server Denial-of-Service vulnerability. The OpenVAS/NCSC references confirm affected product Windows DHCP Server and impact Denial-of-Service (CVSS around 6.5). Exploitation or exploit status is not detailed in the provided docs. Remediation is to apply the Micros...
CVE-2024-43634
CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...
CVE-2025-21213
Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.
CVE-2025-21297
CVE-2025-21297 is a Windows Remote Desktop Services remote code execution vulnerability with CVSS v3.1 base score 8.1 (HIGH). The initial document indicates a network attack vector with no user interaction and high impact on confidentiality, integrity, and availability. Connected sources confirm ...
CVE-2025-21332
CVE-2025-21332 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The connected data shows a CVSS v3.1 base score of 4.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) indicating a network-accessible issue with low integrity/availability impacts and user interaction require...
CVE-2025-27483
CVE-2025-27483 is an NTFS elevation-of-privilege issue described as an out-of-bounds read in Windows NTFS that could allow a local attacker to obtain elevated privileges. The CVE is tied to Windows NTFS and is rated HIGH (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 7.8). Public refe...
CVE-2026-65794
CVE-2026-65794 is a buffer over-read in the Windows SMB Client that allows an unauthenticated attacker to disclose information over the network. The CVSS v3.1 base score is 6.5 (Medium) with a network attack vector, low attack complexity, no privileges required, and user interaction required; imp...
CVE-2017-11927
Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.
CVE-2018-0816
Technical details about CVE-2018-0816 are not publicly provided in the connected documents; the initial description summarizes the vulnerability but does not specify affected products, versions, impact, or fixes.
CVE-2018-1013
CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...
CVE-2018-8549
CVE-2018-8549 is a Windows kernel driver signature validation bypass vulnerability. It affects Windows clients/servers listed (Windows 8.1, 10, 2012/2016/2019, etc.). The underlying issue is incorrect validation of kernel driver signatures, enabling bypass of security features. Public data in con...
CVE-2018-8596
CVE-2018-8596 affects the Windows GDI component. The vulnerability is an information disclosure due to improper memory disclosure in GDI, impacting multiple Windows versions (Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 and various Server editions). Root cause: imp...
CVE-2019-0767
CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...
CVE-2019-0782
Technical details for CVE-2019-0782 are not publicly available in the provided documents. Monitor for updates from NVD/MSRC and ENISA EUVD databases.
CVE-2019-0849
The connected advisory confirms this is a Windows Graphics Device Interface (GDI) information disclosure issue. Specifically, CVE-2019-0802 (related to Windows GDI) is caused by improper handling of objects in memory, enabling information disclosure. For CVE-2019-0849, the primary document descri...
CVE-2019-1468
The connected CNVD entry corroborates CVE-2019-1468 as a Win32k/Windows font library RCE: improper handling of specially crafted embedded fonts enables remote code execution. Affected: Windows clients/servers with Win32k font handling vulnerability. Root cause: inadequate validation when processi...
CVE-2020-0634
CVE-2020-0634 affects the Windows Common Log File System (CLFS) Driver. Connected CNVD-2020-08133 describes a privilege-lifting vulnerability in the CLFS Driver caused by improper handling of memory objects, enabling privilege escalation by an authenticated user who logs on and runs a crafted app...
CVE-2020-0726
Technical details for CVE-2020-0726 are not publicly available in the provided documents. No confirmed affected products or remediation are described here. Monitor for updates as more information becomes available.
CVE-2020-0887
CVE-2020-0887 is a Windows Win32k elevation-of-privilege vulnerability in which the Win32k component fails to properly handle objects in memory. This can allow local code execution with kernel-level privileges if exploited. The description states it is distinct from CVE-2020-0788 and CVE-2020-087...
CVE-2020-1339
CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...
CVE-2020-16922
CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...
CVE-2021-28332
Technical details for CVE-2021-28332 are not provided in the connected documents. The entries reference RPC Runtime RCE in general but do not specify affected product/version/root cause or fixes. Monitor for updates.
CVE-2021-28338
Technical details for CVE-2021-28338 are not provided in the supplied documents. Monitor for official disclosures and remediation guidance as more information becomes available.
CVE-2021-28340
Technical details for CVE-2021-28340 are not publicly available in the provided documents. No affected product/version, impact, or remediation is specified here. Monitor for updates.
CVE-2021-28342
Technical details about CVE-2021-28342 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.
CVE-2021-31976
CVE-2021-31976 is described as a Server for NFS Information Disclosure Vulnerability. The provided documents do not specify affected products, vendor, component, or vulnerable versions. CVSS metrics are available: CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, n...