4299 matches found
CVE-2020-0849
Technical details for CVE-2020-0849 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0865
CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...
CVE-2020-1052
Technical details for CVE-2020-1052 (ssdpsrv.dll memory handling vulnerability) are not provided in the connected documents. Monitor for updates; no public exploit specifics, affected versions, root cause, or remediation details are given here.
CVE-2020-16997
Technical details about CVE-2020-16997 are not provided in the connected documents. The Initial Description is generic; no affected products, root cause, impact, or remediation are present. Monitor for updates.
CVE-2021-1661
Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.
CVE-2021-24079
CVE-2021-24079 is a Windows security vulnerability described as a Windows Backup Engine Information Disclosure Vulnerability. Connected sources show a CVSSv3.1 base score of 5.5 (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) with a Confidentiality impact of HIGH an...
CVE-2021-26415
CVE-2021-26415 affects the Windows Installer component and is described as a Windows privilege-elevation vulnerability. The connected documents confirm a local, low-privilege escalation path with no user interaction required, leveraging improper handling in Windows Installer. The CVE is associate...
CVE-2021-28315
CVE-2021-28315 is a Windows Media Video Decoder Remote Code Execution Vulnerability. Public entries describe an RCE affecting Windows systems via the Windows Media Video Decoder component; CVSS metrics show a Local, Low-Complexity access with Partial confidentiality, integrity, and availability i...
CVE-2021-31972
Technical details about CVE-2021-31972 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, vulnerability scope, and fixes.
CVE-2022-22000
Technical details about CVE-2022-22000 are not provided in the connected documents. The available sources confirm the vulnerability label but do not document affected products, root cause, or fixes here. Monitor for updates.
CVE-2022-26817
Technical details about CVE-2022-26817 (affected products, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2022-35767
Technical details are not provided in the supplied connected documents for CVE-2022-35767. Public disclosure, affected products, exploit status, and fixes are not specified here; monitor for updates.
CVE-2022-35795
Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.
CVE-2022-37996
CVE-2022-37996 is documented as a Windows kernel memory information disclosure vulnerability with a CVSSv3.1 base score of 5.5 (LOCAL attack vector, LOW attack complexity, LOW privileges required, HIGH confidentiality impact). The linked NCSC advisory lists CVE-2022-37996 under Windows NTFS with ...
CVE-2022-37997
CVE-2022-37997 is a local-elevation-of-privilege vulnerability in the Windows Graphics Component. It is documented as affecting the Microsoft Windows Graphics Component with a CVSS v3.1 base score of 7.8 (High) and an attack vector of LOCAL with LOW attack complexity, requiring LOW privileges and...
CVE-2022-44683
Technical details for CVE-2022-44683 are not provided in the connected documents. No product, version, root cause, impact, or fix details are present. Monitor for updates.
CVE-2023-32055
CVE-2023-32055 is an Active Template Library Elevation of Privilege vulnerability with CVSSv3.1 base score 6.7 (Medium). It is a Local attack requiring HIGH privileges and no user interaction, with impact to confidentiality, integrity, and availability rated High. The entry references a Microsoft...
CVE-2023-35328
Technical details for CVE-2023-35328 are not provided in the supplied documents. No product/version/root-cause/impact/fix information is present here. Monitor for updates from official advisories and connected sources.
CVE-2023-35344
Technical details about CVE-2023-35344 are not publicly provided in the supplied documents. Monitor for updates and refer to official vulnerability guides for later disclosures.
CVE-2023-35345
Technical details (affected component, root cause, CVSS, exploit status) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2024-37979
CVE-2024-37979 is described in connected sources as a Windows Kernel Elevation of Privilege vulnerability with an impact of obtaining elevated privileges . The NCSC entry lists the CVE under the Windows Kernel section with that impact. Beyond that, the provided documents do not specify the affect...
CVE-2024-38049
Technical details (affected components, exploit vectors, or patch specifics) for CVE-2024-38049 are not provided in the connected documents. No public details are present in the supplied sources; monitor for updates.
CVE-2024-38141
CVE-2024-38141 is a Windows vulnerability in the Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Connected sources indicate the issue is tied to the WinSock AF Dvr and that exploitation would require local access with low privileges and no user interaction...
CVE-2024-43450
CVE-2024-43450 is a Windows DNS spoofing vulnerability affecting Windows DNS/NTLM; the CVSS v3.1 base score is 7.5 (Network, High impact, User interaction required). Connected sources place this CVE in Microsoft Windows DNS with impact described as “Pretend to be another user.” Microsoft has rele...
CVE-2024-43541
CVE-2024-43541 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables a network-based Denial of Service. The NCSC advisory lists a CVSS v3.1 base score of 7.5 (HIGH), with network access required and no user interaction, and specifies the impact as Denial ...
CVE-2025-21215
Technical details about CVE-2025-21215 are not provided in the connected documents. Public information here is limited to the vulnerability title and references; monitor for updates from Microsoft/NVD.
CVE-2025-26687
CVE-2025-26687 is a use-after-free in Windows Win32K - GRFX that enables a network-based privilege escalation. The affected component is the Win32K GRFX graphics subsystem; the underlying issue is a use-after-free in that path, leading to total impact (CVE-2025-26687 shows a base score of 7.5/10 ...
CVE-2025-29831
Technical details about CVE-2025-29831 (affected product, root cause, patch) are not provided in the supplied documents. Monitor for updates and refer to the official vulnerability entry for authoritative information.
CVE-2026-21525
CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...
CVE-2016-0178
The CVE refers to CVE-2016-0178, describing a remote code execution flaw in the RPC Network Data Representation (NDR) Engine. The root cause is improper freeing of memory in the RPC NDR Engine, exploited via malformed RPC requests to remote hosts. Affected products include Windows Vista SP2, Wind...
CVE-2017-0058
CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...
CVE-2017-0276
Technical details for CVE-2017-0276 are not publicly available in the provided documents. Monitor for updates; current sources in the set do not describe affected products/versions, root cause, or remediation specific to this CVE.
CVE-2017-0282
CVE-2017-0282 is an information disclosure vulnerability in the Windows Uniscribe component. It affects Windows and Office products listed in the initial entry, with memory contents disclosure possible via specially crafted documents. Public sources in the connected materials confirm an informati...
CVE-2017-8495
CVE-2017-8495 is a Kerberos security feature bypass in which Extended Protection for Authentication can be circumvented by tampering with the SNAME field during ticket exchange (Orpheus’ Lyre). Affected Windows family includes Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1, Windows RT 8.1...
CVE-2017-8708
CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...
CVE-2018-8134
CVE-2018-8134 is an elevation of privilege vulnerability in the Windows Kernel API that affects Windows 8.1, Windows 10 (including Windows Server variants) and related OSes. The faulty enforcement of permissions is the root cause. The connected CIRCL entry indicates a public exploit is available ...
CVE-2019-1212
CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...
CVE-2019-1249
CVE-2019-1249 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could trigger arbitrary code execution by convincing a user to open a specially crafted file, with the impact described as remote code exe...
CVE-2019-1384
Technical details about CVE-2019-1384 are not publicly available in the provided documents. The materials mention a NETLOGON security feature bypass but do not specify affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2020-0911
CVE-2020-0911 describes an elevation-of-privilege vulnerability in Windows where the Windows Modules Installer improperly handles objects in memory. An attacker could exploit this by running a specially crafted application on a victim system to execute arbitrary code in an elevated context. The u...
CVE-2020-0965
CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...
CVE-2020-0999
Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.
CVE-2020-1115
The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...
CVE-2020-1310
CVE-2020-1310 is a Windows Win32k elevation of privilege vulnerability where the Windows kernel-mode driver fails to properly handle objects in memory. The description identifies it as a local-privilege escalation (LOCAL vector, high privileges required) with a kernel-mode trust boundary issue in...
CVE-2020-1435
The CVE-2020-1435 entry refers to a remote code execution in the Windows Graphics Device Interface (GDI), via how GDI/GDI+ handles objects in memory. The connected CNVD-2021-67491 description confirms the root cause as a memory-handling problem in the Windows GDI that can be exploited to execute ...
CVE-2020-1598
Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.
CVE-2020-17040
Technical details for CVE-2020-17040 are not publicly provided in the Connected documents. The NVD entry summarizes a Windows Hyper-V security feature bypass but does not disclose affected products, root cause, exploit vectors, or remediation here. Monitor for updates.
CVE-2020-17055
Technical details about CVE-2020-17055 are not provided in the connected documents; public specifics (affected products, root cause, exploitability) are not disclosed here. Monitor for updates.