4267 matches found
CVE-2019-1028
Technical details (affected products, versions, root cause, exploit vectors, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2019-1268
CVE-2019-1268 involves a privilege escalation in Microsoft Windows Winlogon. The root cause, as described in CNVD-2019-31856, is that Winlogon does not properly handle file path information, allowing an attacker to log on and run a specially crafted application to execute arbitrary code with elev...
CVE-2020-0684
CVE-2020-0684 is a Windows remote code execution vulnerability triggered when a .LNK file is processed. The connected docs confirm that an attacker could execute code with the current user’s privileges, affecting Windows/Windows Server platforms via .LNK handling, and that patches were released i...
CVE-2020-0771
CVE-2020-0771 is a Windows CSC Service privilege-elevation vulnerability caused by improper memory handling. It requires local execution to exploit and could allow an attacker to gain elevated privileges on the system. Connected documents confirm the affected component is Windows CSC Service and ...
CVE-2020-0962
CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...
CVE-2020-1009
CVE-2020-1009 is an Elevation of Privilege vulnerability in the Microsoft Store Install Service where local file operations in protected locations can be abused to gain elevated access. Root cause as stated: how the service handles file operations in protected locations. Impact is described as HI...
CVE-2020-1468
CVE-2020-1468: Information disclosure in Windows GDI. The Windows GDI component improperly discloses memory contents, enabling partial confidentiality impact. Connected CNVD entry corroborates Windows/Windows Server information disclosure presence; no vendor/product patch details are provided in ...
CVE-2021-1653
CVE-2021-1653 details are not publicly provided in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2021-1660
CVE-2021-1660 is a Remote Procedure Call (RPC) Runtime remote code execution vulnerability in Windows. The connected sources confirm the flaw affects RPC components and was addressed by Microsoft security updates released in January 2021 (KB4598242/KB4598243 and related advisories), with patches ...
CVE-2021-1699
Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.
CVE-2021-1727
CVE-2021-1727 is a Windows Installer elevation-of-privilege vulnerability. CVSS v3.1 vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8 (HIGH). Local access with low privileges and no user interaction, impacting confidentiality, integrity, and availability. Related entries reference Micr...
CVE-2021-24103
CVE-2021-24103 corresponds to a Windows Event Tracing Elevation of Privilege vulnerability. Documents provide CVSS 3.1 base score 7.8 (LOCAL, LOW privileges required, NONE user interaction; high impact on confidentiality, integrity, and availability). The vulnerability is active per the CVE entry...
CVE-2021-28325
Technical details for CVE-2021-28325 are not publicly available in the provided connected documents. The materials reference the SMB information disclosure vulnerability and related entries, but no concrete specifics (affected products/versions/fixes) are provided here. Monitor for updates.
CVE-2021-28440
Technical details about CVE-2021-28440 are not publicly provided in the supplied documents. No affected products, root cause, exploit status, or remediation specifics are included here. Monitor for updates in connected sources.
CVE-2021-43222
CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...
CVE-2021-43229
CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...
CVE-2022-22711
Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.
CVE-2022-38005
Technical details for CVE-2022-38005 are not publicly provided in the supplied documents. No specifics on affected products, impact, or fixes are present here; please monitor for updates.
CVE-2022-44681
Technical details about CVE-2022-44681 are not publicly provided in the connected documents. Monitoring for updates is recommended.
CVE-2023-21754
Technical details about CVE-2023-21754 are not publicly provided in the supplied documents. No information on affected products, root cause, impact, or remediation is available here. Monitor for updates from official sources.
CVE-2023-35351
CVE-2023-35351: Windows Active Directory Certificate Services (AD CS) Remote Code Execution vulnerability. Affected: Windows AD CS; vulnerability type is remote code execution. CVSSv3.1 base score 6.6 (vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation status and detailed root ca...
CVE-2023-35362
Technical details for CVE-2023-35362 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.
CVE-2023-36004
CVE-2023-36004 is a Windows DPAPI spoofing vulnerability. The records indicate the DPAPI component can be abused to pretend to be another user, with high impact on confidentiality, integrity, and availability (CVSSv3.1: 7.5). Multiple sources (NVD entry and ENISA/OpenVAS listings) corroborate the...
CVE-2024-38240
CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...
CVE-2024-38250
CVE-2024-38250 is a Windows Graphics Component elevation-of-privilege vulnerability. The CVE entry (Microsoft product area) indicates a local attacker with low privileges and no user interaction could obtain higher privileges (CVSS 7.8, High). Connected sources corroborate that Microsoft has issu...
CVE-2024-43626
CVE-2024-43626 is a Windows Telephony Service Elevation of Privilege vulnerability. Affected: Windows operating systems where the Telephony Service component is present. Nature: local, low-privilege user could potentially elevate privileges (high impact to confidentiality, integrity, and availabi...
CVE-2024-49124
According to the connected NCSC advisory, CVE-2024-49124 is an LDAP-related vulnerability in Windows LDAP with an impact described as Execution of random code (CVSS 8.1/8.10 range in the table). The advisory notes that Microsoft has fixed vulnerabilities and recommends applying the security updat...
CVE-2025-21255
Technical details about CVE-2025-21255 are not provided in the supplied documents. Public information is limited to a basic description and references. Monitor Microsoft KBs/NVD for affected products, root cause, and remediation as updates are published.
CVE-2025-53778
CVE-2025-53778 is a Windows NTLM elevation-of-privilege flaw caused by improper authentication in NTLM that can enable a network-authenticated attacker with low privileges to elevate to SYSTEM. It is discussed in security reports (e.g., KREBS patch-tuesday coverage) and is addressed by August 202...
CVE-2016-3305
Technical details about CVE-2016-3305 are not publicly available in the provided documents. Monitor for updates to confirm affected components, impact, and fixes.
CVE-2016-3371
CVE-2016-3371 is a Windows kernel elevation of privilege vulnerability affecting a broad set of Windows versions (Vista SP2/2008 SP2 R2, Windows 7 SP1, 8.1, Server 2012/RT, Windows 10 1511/1607). The issue stems from improper enforcement of permissions by the Windows Kernel API, allowing local at...
CVE-2018-0883
CVE-2018-0883 is a remote code execution vulnerability in Windows Shell caused by improper validation of file copy destinations. Affected are Windows Shell components across multiple Windows platforms (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 R2/2012/2016 and Windows 10 builds up to...
CVE-2018-17612
Summary of CVE-2018-17612 : Sennheiser HeadSetup (and HeadSetup Pro) improperly published the private signing key in the public distribution and installed CA/root certificates into the local Trusted Root CA store. The root cause is the inclusion of the private key in the SennComCCKey.pem file, en...
CVE-2018-8116
The provided connected documents confirm CVE-2018-8116 is a DoS vulnerability in the Windows Graphics Component, arising from how the component handles objects in memory and affecting multiple Windows versions (e.g., Windows 7, Windows 10, server editions). Concrete details include the affected p...
CVE-2019-0973
CVE-2019-0973 affects the Windows Installer. The issue stems from improper input sanitization that enables insecure library loading, leading to elevation of privilege. A locally authenticated attacker could execute arbitrary code with elevated system privileges, potentially installing programs, v...
CVE-2019-1250
Technical details for CVE-2019-1250 are not provided in the supplied documents. Public information here confirms it’s a Windows Jet Database Engine RCE vulnerability but no product/version, affected component, impact, or fix details are specified. Monitor for updates.
CVE-2019-1397
Technical details about CVE-2019-1397 are not publicly available in the provided documents; no affected products, versions, or fixes are described. Monitor for updates.
CVE-2020-0629
Technical details about CVE-2020-0629 are not provided in the supplied documents; monitoring for updates in the connected sources is advised.
CVE-2020-0785
CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...
CVE-2020-0886
Technical details about CVE-2020-0886 (Windows Storage Services elevation of privilege) are not present in the provided connected documents; no product/version specifics or fixes are disclosed here. Monitor for official updates.
CVE-2020-1152
Technical details about CVE-2020-1152 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The entry’s description is present, but no concrete technical details are supplied. Monitor for updates.
CVE-2020-17038
Technical details for CVE-2020-17038 are not publicly available in the provided documents. No affected products, root cause, or remediation information are included. Monitor for updates.
CVE-2021-27077
CVE-2021-27077 is a Windows Win32k Elevation of Privilege vulnerability in win32kfull.sys!BLTRECORD::bRotate. If the HOOK_PLGBLT flag is set, the code may read a surface object’s hdev and call DrvPlgBlt() on the referenced driver without verifying it implements the function, potentially leading t...
CVE-2021-28323
Technical details about CVE-2021-28323 are not provided in the supplied documents. Public disclosures, impacted products, root cause, and fixes are not specified here. Monitor for updates.
CVE-2022-26933
Technical details about CVE-2022-26933 (NTFS Information Disclosure) are not provided in the connected documents. Monitor for updates; no affected products, root cause, impact, or fixes are disclosed here.
CVE-2022-35751
Technical details about CVE-2022-35751 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is provided here; monitor for updates.
CVE-2022-38000
CVE-2022-38000 is a Windows Point-to-Point Tunneling Protocol (PPTP) remote code execution vulnerability. Connected MS updates document this CVE under the Windows PPTP entry and indicate it is addressed by October 2022 security updates (e.g., KB5018410/KB5018427). The vulnerability affects the PP...
CVE-2023-32085
CVE-2023-32085 is a local information-disclosure vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The NVD entry describes it as a PostScript/PCL6 printer driver information disclosure with a CVSS v3.1 base score of 5.5 (Medium), vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N....
CVE-2023-35319
CVE-2023-35319 is a Remote Procedure Call (RPC) Runtime Denial of Service vulnerability. The NVD entry lists a network attack vector with low attack complexity, requiring low privileges and no user interaction, leading to an availability impact (C:A) of High and no confidentiality or integrity im...