4267 matches found
CVE-2020-0859
CVE-2020-0859 is described as an information disclosure vulnerability in Windows Modules Installer Service where file information could be disclosed. The primary details available: affected component is Windows Modules Installer Service; root cause and exact exploitation path are not elaborated i...
CVE-2020-0883
CVE-2020-0883 is a remote code execution flaw in Windows GDI+ involving memory handling of GDI objects. A working exploit PoC exists (CVE-2020-0883) showing a reverse shell workflow; patch availability is indicated by March 2020 updates (KB4541500/KB4541506) addressing GDI memory-related flaws, t...
CVE-2020-0946
CVE-2020-0946 is a Media Foundation Information Disclosure vulnerability in Microsoft Windows where improper handling of memory objects can allow an information disclosure. The initial entry identifies Media Foundation as the affected component and describes the flaw as memory-object handling lea...
CVE-2020-0995
CVE-2020-0995 represents a Remote Code Execution vulnerability in Microsoft Windows Jet Database Engine. Connected sources describe the issue as stemming from improper handling of memory objects within the Jet Database Engine, enabling an attacker to execute arbitrary code on a target system, typ...
CVE-2020-1067
CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...
CVE-2020-1116
CVE-2020-1116 is described as a Windows CSRSS Information Disclosure Vulnerability, arising from CSRSS failing to properly handle objects in memory. The affected component is Windows CSRSS; the vulnerability enables information disclosure via local access (CVSSv3.1: 5.5 MEDIUM, AV:L/AC:L/PR:L/UI:...
CVE-2020-1153
CVE-2020-1153 is a remote code execution vulnerability in the way Microsoft Graphics Components handles objects in memory. The connected MSKB entries reference Windows updates that include security fixes for the Microsoft Graphics Component as part of the May 2020 updates (e.g., KB4556799 and rel...
CVE-2020-1236
CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...
CVE-2020-1302
Technical details for CVE-2020-1302 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-1365
Technical details about CVE-2020-1365 are not publicly provided in the connected documents. The Windows Event Logging Service elevation-of-privilege vulnerability lacks product/version/impact/fix specifics here. Monitor sources for updates and confirmed technical details.
CVE-2020-1371
Technical details about CVE-2020-1371 are not publicly provided in the connected documents. Please monitor for updates from official sources for affected products, impact, and remediation.
CVE-2020-1430
Technical details about CVE-2020-1430 are not publicly provided in the connected documents. Please monitor for official advisories or vendor advisories for affected products, exposure, and fixes.
CVE-2020-17000
CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...
CVE-2021-1688
Technical details for CVE-2021-1688 are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2021-28446
CVE-2021-28446 is a Windows Portmapping Information Disclosure Vulnerability with local attack vector. NVD data shows Confidentiality Impact HIGH (I) and no Integrity/Availability impact, base score 5.5 (3.1) / 2.1 (2.0) and a higher CNA score 7.1 (HIGH). Exploitation status is listed as null in ...
CVE-2021-43234
CVE-2021-43234 is a Windows Fax Service Remote Code Execution Vulnerability. Connected CNVD entry explicitly states a remote code execution vulnerability exists in Microsoft Windows Fax Service, enabling an attacker to run arbitrary code on the target host. NVD entries corroborate the CVE and ass...
CVE-2022-35747
Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.
CVE-2022-35759
Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.
CVE-2023-32033
CVE-2023-32033: Microsoft Failover Cluster Remote Code Execution vulnerability with CVSS v3.1 base score 7.2 (HIGH). Attack vector is NETWORK, no user interaction, with confidentiality, integrity, and availability impacts all HIGH. Initial description confirms the affected vector but does not spe...
CVE-2023-35340
Microsoft Windows CVE-2023-35340 affects the CNG Key Isolation Service and is a local elevation-of-privilege vulnerability. It has a CVSS v3.1 base score of 7.8 (AV:L, AC:H, PR:L, UI:N, S:C, C:H, I:H, A:H). The provided documents identify the affected component and impact but do not include explo...
CVE-2023-35361
CVE-2023-35361 is a Windows Kernel Elevation of Privilege vulnerability. The provided documents identify the flaw as a local-privilege escalation with high impact (confidentiality, integrity, and availability) but do not supply concrete technical details, affected versions, root cause specifics, ...
CVE-2023-35638
CVE-2023-35638 is an identified Denial-of-Service vulnerability affecting the Windows DHCP Server component. The connected sources confirm it is a network-accessible issue with a CVSS v3.1 base score of 7.5 (HIGH), attack vector: NETWORK, attack complexity: LOW, privileges required: NONE, user in...
CVE-2024-30067
Technical details for CVE-2024-30067 are not provided in the supplied documents. Monitor official disclosures for affected products, impact, and remediation guidance.
CVE-2024-37989
Technical details and affected products for CVE-2024-37989 are not publicly provided in the supplied documents. Monitor for vendor advisories and CVE repositories for updates.
CVE-2024-38065
Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.
CVE-2024-49125
Technical details about CVE-2024-49125 are not publicly available in the provided connected documents. Monitor for updates from official sources for affected products, impact, and fixes.
CVE-2025-21407
According to the provided documents, CVE-2025-21407 is associated with Windows Telephony Service and is listed with a high impact (CVSS 8.80) involving the execution of arbitrary code. The NCSC advisory explicitly catalogs CVE-2025-21407 under Windows Telephony Service with an impact of executing...
CVE-2025-21410
CVE-2025-21410 is a Windows RRAS Remote Code Execution vulnerability. AFFECTED: Windows RRAS component (Routing and Remote Access Service) with exploitation yielding total impact (RCE) on the host. ROOT CAUSE/DETAILS: Not explicitly provided in the documents beyond RRAS RCE naming; exploitation i...
CVE-2026-20856
CVE-2026-20856 is a Windows Server Update Services (WSUS) remote code execution vulnerability caused by improper input validation. Exploitation is possible over a network with no user interaction; CVSSv3.1 base score 8.1 (High). Public references note this is addressed by January 2026 security up...
CVE-2026-21530
CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...
CVE-2026-32183
CVE-2026-32183 is a Windows Snipping Tool vulnerability that allows local execution of arbitrary code due to improper neutralization of special elements in a command (command injection). Affected component: Snipping Tool on Windows. Impact per sources: Executing (remote) code with high confidenti...
CVE-2026-50447
CVE-2026-50447 is a Windows Message Queuing (MSMQ) remote-code-execution vulnerability. The issue is a heap-based buffer overflow in MSMQ that could allow an unauthenticated attacker to execute code over the network. Public sources indicate high-severity impact (CVSS v3.1: 9.8, network attack, no...
CVE-2016-3342
Technical details for CVE-2016-3342 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2016-3396
CVE-2016-3396 is a GDI+ remote code execution in Graphics Device Interface (GDI) that allows a remote attacker to execute arbitrary code via a crafted embedded font. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R...
CVE-2017-0121
CVE-2017-0121 is an information disclosure vulnerability in Microsoft Windows Uniscribe. The vulnerability allows a remote attacker to obtain sensitive information from the memory of a process by luring a user to a crafted web site. Affected are Windows Vista SP2, Windows Server 2008 SP2 and R2 S...
CVE-2017-11880
CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...
CVE-2017-8480
Technical details for CVE-2017-8480 are not publicly available in the provided documents. Monitor for updates.
CVE-2017-8490
Technical details about CVE-2017-8490 are not publicly provided in the connected EUVD entries; no affected products, root cause, impact, or remediation details are disclosed here. Monitor for updates.
CVE-2019-1406
CVE-2019-1406 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue could allow an attacker to execute arbitrary code on affected systems. Public references in the provided documents identify the Jet Database...
CVE-2019-1465
CVE-2019-1465 corresponds to a Windows GDI Information Disclosure vulnerability in the GDI component. The CNVD entries describe an information leakage vector where an attacker could obtain memory contents, with exploitation via social engineering (e.g., crafted documents or untrusted pages). The ...
CVE-2020-0866
The CVE-2020-0866 entry maps to a Windows Work Folder Service elevation of privilege vulnerability. Connected CNVD-2020-23447 describes a privilege escalation via the service’s improper handling of file operations, enabling a specially crafted application to execute processes with elevated privil...
CVE-2020-0958
CVE-2020-0958 is a Windows kernel-mode elevation-of-privilege vulnerability tied to the Win32k driver. The CNVD-2020-32590/32588/32589 entries describe the flaw as an issue in how the kernel-mode Win32k object memory is handled, enabling local privilege escalation. The vulnerability affects Windo...
CVE-2020-0987
Technical details (affected product/version, root cause, impact, fixes) are not publicly available in the provided Connected Documents; cross‑references exist (CVE-2020-0982, CVE-2020-0987, CVE-2020-1005) but no specifics are given.
CVE-2020-1038
Technical details about CVE-2020-1038 are not publicly provided in the connected documents; no affected products/versions or root-cause are specified beyond the generic memory-handling issue. Monitor for authoritative updates.
CVE-2020-1094
CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...
CVE-2020-1428
Technical details about CVE-2020-1428 are not publicly provided in the connected documents you supplied. Please monitor for updates from official advisories.
CVE-2020-1491
Technical details about CVE-2020-1491 are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-17025
Technical details for CVE-2020-17025 are not provided in the supplied documents; affected products, impact, root cause, or remediation are not disclosed. Monitor for updates.