4267 matches found
CVE-2023-24866
Technical details about CVE-2023-24866 are not publicly provided in the supplied documents. No affected products, versions, or remediation specifics are confirmed here. Monitor for updates from official sources.
CVE-2022-34733
CVE-2022-34733 pertains to the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. NVD lists CVSS v3.1 base score 8.8 (HIGH) with Network attack vector, no privileges required, user interaction needed, and high impact on confidentiality, integrity, a...
CVE-2022-41109
Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.
CVE-2023-21695
Technical details about CVE-2023-21695 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit/vector/impact details are provided here.
CVE-2023-21747
CVE-2023-21747 is a Windows kernel registry vulnerability caused by an out-of-memory error during a highly sensitive hive-unload operation. The issue allowed an attacker with local access to trigger memory allocation failures in a critical path, risking instability and potential misuse of hive st...
CVE-2023-28236
CVE-2023-28236 is a Windows kernel elevation-of-privilege vulnerability. The description indicates a local-privilege escalation affecting the Windows kernel with a high impact on confidentiality, integrity, and availability (CVSS 3.1: AV:L, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H). The available con...
CVE-2023-36908
CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.
CVE-2024-30009
CVE-2024-30009 corresponds to a Windows RRAS remote code execution vulnerability. The RRAS service is affected, with the issue enabling execution of arbitrary code on a network-accessible target. The CVSS vector indicates network access, low attack complexity, no privileges required, user interac...
CVE-2024-43592
CVE-2024-43592 is a Windows RRAS remote code execution vulnerability. The connected sources indicate it affects Windows RRAS with an attack vector over the network, requiring low privileges and no user interaction, yielding a high impact on confidentiality, integrity, and availability (C/H/I/A). ...
CVE-2025-21303
Technical details are not publicly provided in the supplied documents for CVE-2025-21303 (Windows Telephony Service RCE). Monitor for updates from Microsoft; no specific vulnerable component/version or remediation is described here.
CVE-2025-26647
CVE-2025-26647 describes an elevation-of-privilege vulnerability in Windows Kerberos caused by improper input validation, allowing network-based privilege escalation. Affected component: Windows Kerberos in Windows client/server environments. Impact is high (CVSS 3.1: 8.8, Network exploit, Privil...
CVE-2026-49178
CVE-2026-49178 is a heap-based buffer overflow in Windows Active Directory Domain Services that enables a network-based remote code execution by an authenticated, low-privilege attacker. The affected component is AD DS; the vulnerability enables code execution with high impact on confidentiality,...
CVE-2026-62787
CVE-2026-62787 is a remote code execution vulnerability in Windows DNS Server caused by a use-after-free condition. An authenticated attacker could execute code over the network on a targeted host. CVSS v3.1 base score 7.5 (HIGH): AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The connected sources confirm...
CVE-2012-1528
CVE-2012-1528 is a Windows Shell vulnerability originating from an integer overflow in the Briefcase feature. The flaw affects multiple Windows client/server platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008/R2 SP, Windows 7 SP1, Windows 8, Server 2012) and can let local users gain p...
CVE-2016-0015
DirectShow Heap Corruption Remote Code Execution (CVE-2016-0015) affects Windows components listed in the CVE, with the vulnerability arising from improper validation in DirectShow. An attacker could trigger arbitrary-code execution by convincing a user to open a crafted file, potentially gaining...
CVE-2017-0289
CVE-2017-0289 is a Windows Graphics Information Disclosure vulnerability affecting a broad set of Windows client/server releases (e.g., Windows 7/8.1/10, Windows Server 2008-2016) where the Windows GDI/Graphics components improperly disclose memory contents. The issue is linked to memory disclosu...
CVE-2018-8514
CVE-2018-8514 is an information-disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime caused by improper initialization of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10 (various editions), Windows Server 2008/2012/2012 R2/2016/2019, and Windows...
CVE-2018-8595
CVE-2018-8595 concerns an information-disclosure flaw in the Windows Graphics Device Interface (GDI) where memory contents are improperly disclosed. Affected are multiple Windows versions listed in the CVE (e.g., Windows 7, Windows 8.1, Windows 10 and corresponding server releases). The root caus...
CVE-2019-0598
Technical details for CVE-2019-0598 are not publicly available in the provided documents; monitor for updates.
CVE-2019-0616
Microsoft Windows GDI (Graphics Device Interface) contains an information disclosure vulnerability. The Graphics Device Interface component is affected due to improper handling of objects in memory, enabling a remote attacker to obtain sensitive information. The linked advisories corroborate the ...
CVE-2019-0617
CVE-2019-0617 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is characterized by a high-severity impact (CVSS v3.0: 7.8) with a local attack vector, requiring user interaction, and resulting in high confident...
CVE-2019-0759
Technical details about CVE-2019-0759 are not publicly available in the provided documents. Monitor for updates and additional authoritative disclosures.
CVE-2019-1148
CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...
CVE-2020-1083
The CVE-2020-1083 vulnerability is a local information-disclosure issue in the Windows Graphics Component caused by improper handling of objects in memory. An attacker must log on to the affected system and run a crafted application to exploit it. The update fixes the issue by correcting how the ...
CVE-2020-1474
CVE-2020-1474 concerns the Windows Image Acquisition (WIA) Service, where memory contents can be disclosed by an attacker who authenticates and connects an imaging device (camera, scanner, phone) to a vulnerable system and runs a crafted application. The vulnerability arises from how the WIA Serv...
CVE-2020-1531
CVE-2020-1531 is an elevation-of-privilege flaw in Windows Accounts Control caused by improper memory handling. An attacker must already have code execution on the target host and can then run a crafted program to elevate privileges. The vulnerability’s fix is delivered via a security update that...
CVE-2021-28352
Technical details for CVE-2021-28352 are not provided in the supplied documents. No affected products, impact, or remediation information are disclosed here. Monitor for updates from official advisories and vendor advisories to obtain concrete details.
CVE-2021-40477
Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.
CVE-2021-40489
Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.
CVE-2022-21916
Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.
CVE-2022-38033
CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...
CVE-2022-41098
Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.
CVE-2023-21525
Technical details for CVE-2023-21525 are not publicly provided in the supplied documents; no affected product/version/exploit information is available here. Monitor for updates from official advisories to obtain specifics and remediation guidance.
CVE-2023-21816
No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.
CVE-2023-24942
Technical details (affected products, root cause, impact, or remediation) are not publicly available in the provided documents for CVE-2023-24942. Monitor for updates.
CVE-2026-33834
Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are included here. Monitor for updates from official CVE/NVD entries to obtain concrete exploit info, mitigations, and fixes.
CVE-2015-0014
CVE-2015-0014 corresponds to a Telnet service buffer overflow in multiple Windows editions (Server 2003 SP2; Vista SP2; Server 2008 SP2/R2 SP1; 7; 8; 8.1; Server 2012/2012 R2). The underlying issue is a buffer overflow in the Windows Telnet Service (tlntsess.exe) caused by improper processing/val...
CVE-2018-0959
CVE-2018-0959 is a remote code execution vulnerability in Windows Hyper-V where a host server fails to validate input from an authenticated user on a guest OS. Affected products include Windows clients and server editions listed in the description (e.g., Windows 7, 8.1; Windows Server 2008-2016; ...
CVE-2018-0971
CVE-2018-0971 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to bypass Kernel ASLR. The Initial description lists affected Windows versions (multiple client/server editions). Connected documents show exploitation references: CIRCL entries for CVE-20...
CVE-2018-8340
CVE-2018-8340 is a security feature bypass in Active Directory Federation Services (AD FS) where multi-factor authentication requests are improperly handled. The description across sources identifies the vulnerability affecting Windows Server 2016 , Windows Server 2012 R2 , and Windows 10 Servers...
CVE-2018-8450
CVE-2018-8450 is a Windows Remote Code Execution vulnerability affecting Windows Search where an attacker can exploit memory handling of objects to take control of the system. The issue is addressed by Microsoft security updates KB4467702 (Windows 10 v1803/Server 1803) and related KBs for Windows...
CVE-2019-0716
CVE-2019-0716 is a Windows Denial of Service vulnerability caused by improper handling of memory objects. The public description states that an attacker who logs on to an affected system and runs a specially crafted application could cause the target to stop responding. The issue does not allow c...
CVE-2019-0856
Technical details about CVE-2019-0856 (affected products, root cause, impact, and fixes) are not present in the provided documents. Monitor official Microsoft advisories and Vulners updates for new information.
CVE-2019-1187
CVE-2019-1187 is a denial-of-service vulnerability in the XmlLite runtime (XmlLite.dll) where improper XML input parsing can cause a crash. According to the NVD/NIST entry, exploitation is possible by a remote, unauthenticated attacker issuing specially crafted XML requests to an XML application,...
CVE-2019-1290
Technical details about CVE-2019-1290 are not publicly provided in the connected documents; the materials describe the vulnerability in general terms and reference other CVEs. Monitor for updates.
CVE-2019-1380
CVE-2019-1380 is a local elevation-of-privilege issue in Windows where splwow64.exe mishandles certain calls (aka Microsoft splwow64 Elevation of Privilege Vulnerability). Affected software is Windows system component splwow64.exe; root cause centers on how certain calls are processed. Documented...
CVE-2020-0632
Technical details about CVE-2020-0632 are not publicly provided in the connected records; no affected products, root cause, impact, or fix information is disclosed here. Monitor for updates from vendors/security advisories.
CVE-2020-1070
Technical details for CVE-2020-1070 are not provided in the supplied documents; only a high-level description is available. Monitor for updates.
CVE-2020-1317
Technical details for CVE-2020-1317 are not present in the provided connected documents. The initial entry notes a Group Policy elevation of privilege issue but does not publish affected products, versions, impact, or remediation. Monitor for updates.