4644 matches found
CVE-2024-21420
Technical details about CVE-2024-21420 are not publicly provided in the supplied documents. The connected sources reference the CVE ID and Microsoft patches but do not disclose affected product specifics, root cause, impact, or remediation beyond generic update context. Monitor for updates.
CVE-2019-0731
Technical details (affected product/version, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from CIRCL/CIRSA sources and exploit-db references for CVE-2019-0731.
CVE-2020-1042
CVE-2020-1042 describes a remote code execution in Hyper-V RemoteFX vGPU where the host fails to validate input received from an authenticated user on a guest OS. The CVE is characterized with a high/critical impact (CVSS v3.1: 9.0, AdJACENT attack vector, LOW attack complexity, Privileges Requir...
CVE-2023-21524
Technical details about CVE-2023-21524 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The materials only reference the vulnerability title and general advisories; monitor for updates.
CVE-2022-23284
Technical details for CVE-2022-23284 (affected product, root cause, impact, and fix) are not publicly available in the provided Connected documents. Monitor for updates from official sources.
CVE-2024-21358
Technical details about CVE-2024-21358 (Microsoft WDAC OLE DB provider for SQL Server remote code execution) are not provided in the supplied documents. Monitor for official updates from Microsoft and trusted security advisories for affected products, mitigations, and fixes.
CVE-2021-26441
CVE-2021-26441 is a local-elevation vulnerability in the Storage Spaces Controller. CVSSv3.1 base 7.8 (HIGH): LOCAL vector, LOW privileges required, no user interaction; impacts on confidentiality, integrity, and availability are High. The provided documents do not specify affected product/versio...
CVE-2022-34303
CVE-2022-34303 describes a Secure Boot bypass in signed 3rd‑party UEFI bootloaders (Eurosoft) where an attacker can substitute the current signed bootloader with a malicious one to load unsigned code in the pre-boot phase. Access to the EFI System Partition is required to boot via external media,...
CVE-2023-21726
Technical details for CVE-2023-21726 are not provided in the supplied documents. No explicit information on affected products, root cause, impact, or fixes. Monitor for updates from official sources.
CVE-2016-0143
CVE-2016-0143 is a Windows Win32k Privilege Escalation vulnerability in the kernel-mode driver (win32k.sys) affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, 2012, RT 8.1, Windows 10 Gold/1511). Root cause: improper handling of objects in memory within the Wi...
CVE-2020-1043
Technical details (affected product, vulnerable component, impact, versions, or exploit info) are not provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.
CVE-2021-43883
CVE-2021-43883 is a Windows Installer Elevation of Privilege vulnerability. The Windows Installer component can be abused when a user is tricked into installing a malicious package, enabling an attacker to gain elevated privileges on the system. The CVSS details in the provided data show a local ...
CVE-2024-49113
CVE-2024-49113 is a Windows LDAP Denial-of-Service vulnerability affecting the LDAP client. Public PoCs exist (e.g., LDAPNightmare) and show proof-of-concept testing integrated with Metasploit and other repositories; multiple exploit/checker projects also reference testing for this CVE. The descr...
CVE-2016-3308
Technical details for CVE-2016-3308 are not publicly available in the provided documents; monitor for updates.
CVE-2019-0887
CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...
CVE-2024-21370
Public technical details for CVE-2024-21370 are not provided in the connected documents; the OpenVAS entries enumerate the CVE across multiple Microsoft KBs without product/version specifics. Monitor for updates.
CVE-2019-1339
Technical details for CVE-2019-1339 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2022-21975
CVE-2022-21975 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry indicates the affected component is Windows Hyper-V and that exploitation requires local access with high attack complexity and low privileges, resulting in a high availability impact (A: HIGH) while confidentialit...
CVE-2023-21684
CVE-2023-21684 relates to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry identifies the affected component as a Microsoft printer driver (PostScript and PCL6) and notes a high-severity impact (CVSSv3.1 base score 8.8; Network attack,...
CVE-2026-69493
CVE-2026-69493 is a critical (CVSS 9.8) out-of-bounds read vulnerability in Windows Event Logging Service , as assigned by Microsoft . The flaw allows an unauthorized, network-based attacker to achieve remote code execution without user interaction, with high impact to confidentiality, integrity,...
CVE-2022-30138
Technical details for CVE-2022-30138 are not provided in the supplied documents. The records mention Windows Print Spooler elevation of privilege but do not specify affected products/versions, root cause, exploit information, or fixes. Monitor for updates.
CVE-2026-66799
CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...
CVE-2017-0214
CVE-2017-0213 is a Windows Privilege Escalation flaw in the COM Aggregate Marshaler. Reports confirm it enables local elevation of privilege when a specially crafted app is run, affecting Windows client and server SKUs listed in the CVE description. Several connected sources document exploitation...
CVE-2020-0689
CVE-2020-0689 is a Microsoft Secure Boot security feature bypass vulnerability affecting UEFI modules loaded with Secure Boot. Microsoft advisories relate to an attacker bypassing Secure Boot to load untrusted software, with remediation provided by a Secure Boot DBX update (KB5012170) that adds t...
CVE-2024-21344
CVE-2024-21344 is described as a Windows NAT Denial of Service vulnerability with CVSS v3.1 base score 5.9 (Network attack, High attack complexity, No privileges, No user interaction, Availability impact). The available connected documents do not specify affected products/versions, root cause det...
CVE-2026-62735
CVE-2026-62735 is a Windows HTTP.sys vulnerability described as a heap-based buffer overflow that enables an authorized, locally interacting attacker to elevate privileges. Evidence across sources confirms a local-exploit path with high impact (C/H/I/A), CVSS 3.1 vector: LOCAL, LOW complexity, LO...
CVE-2020-1301
CVE-2020-1301 is a SMBv1 remote code execution vulnerability that requires authentication on the target network. Publicly available guidance and advisories confirm SMBv1 handling flaws can allow code execution when a specially crafted packet is processed by an SMBv1 server. Connected advisories (...
CVE-2024-26234
The proxy driver spoofing vulnerability (CVE-2024-26234) in the Windows operating system allows an attacker to execute arbitrary code by replacing the proxy server driver due to access control errors. Microsoft confirmed this was a zero-day vulnerability that was actively exploited in the wild. T...
CVE-2025-21413
CVE-2025-21413 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network access, no privileges, user interaction required, with high impact to confidentiality, integrity, and availability. Connected sources conf...
CVE-2022-24459
CVE-2022-24459 is an Elevation of Privilege in Windows Fax and Scan service. Connected sources note a PoC exploit exists and that Microsoft patched vulnerabilities in March 2022 Patch Tuesday, but no concrete product/version/fix details are provided in the documents.
CVE-2022-30160
CVE-2022-30160 is a Windows ALPC (Advanced Local Procedure Call) Elevation of Privilege vulnerability. The connected documents identify the issue as a local, low-complexity privilege escalation with no required user interaction and high impact on confidentiality, integrity, and availability (per ...
CVE-2024-21391
CVE-2024-21391 affects Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The initial document provides a CVSS 3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and user interaction required. No specific remediati...
CVE-2026-20931
CVE-2026-20931 is a Windows Telephony Service elevation-of-privilege vulnerability described as external control of a file name or path. The connected sources confirm the affected component as Windows Telephony Service and the issue enables an attacker on an adjacent network to obtain increased p...
CVE-2022-29120
Technical details (affected product/component/version/root cause/fix) are not provided in the initial or connected documents. Monitor for official updates; no explicit remediation, exploit status, or CVE-risk details are present in the supplied sources.
CVE-2024-21359
Technical details for CVE-2024-21359 are not provided in the connected documents. The available data only references a WDAC OLE DB provider RCE vulnerability. Monitor for official advisories to learn affected products, impact, and remediation.
CVE-2024-21446
CVE-2024-21446 is an NTFS Elevation of Privilege vulnerability. The NVD entry indicates a local, low-attack-complexity flaw in NTFS that yields a high impact on confidentiality, integrity, and availability (C:H, I:H, A:H) with a base score of 7.8 (Microsoft-reported). Exploitation is listed as lo...
CVE-2020-16916
CVE-2020-16916 is a Windows elevation-of-privilege flaw in the COM server object creation path. The root cause is Windows handling of COM object creation, allowing an attacker who can log on to run a specially crafted application that exploits the vulnerability to gain elevated code execution. Mi...
CVE-2021-34535
CVE-2021-34535 is a Remote Desktop Client remote code execution vulnerability in Windows. According to the connected sources, it affects the Windows Remote Desktop Client component and is rated High (CVSS v3.1 base 8.8). Exploitation was addressed in Microsoft’s August 2021 Patch Tuesday updates;...
CVE-2024-21347
Technical details for CVE-2024-21347 are not provided in the connected documents. Monitor for updates and published fixes or advisories once available.
CVE-2021-36936
Technical details about CVE-2021-36936 are not publicly provided in the connected documents. No vendor/product/version specifics or remediation steps are present here. Monitor for updates from official advisories and trusted security trackers.
CVE-2023-36425
Technical details (affected products, root cause, exploitability, or remediation) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2024-21352
Technical details for CVE-2024-21352 are not publicly available in the provided documents; monitor for updates.
CVE-2024-26173
Technical details about CVE-2024-26173 are not provided in the connected documents. The materials discuss Windows registry and kernel context at a high level without concrete affected components, root cause, impact specifics, or patches. Monitor updates for official disclosures.
CVE-2024-21365
CVE-2024-21365 affects the Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. It has a CVSS v3.1 base score of 8.8 (High) with Network attack vector, Low attack complexity, No privileges required, and User interaction required; impacts Confidentiality, Int...
CVE-2024-21361
Technical details for CVE-2024-21361 are not publicly provided in the supplied documents; monitor for updates.
CVE-2024-21441
CVE-2024-21441 affects the Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The NVD entry rates it High (CVSS 3.1: 8.8) with NETWORK vector, LOW attack complexity, NONE privileges, and user interaction required; impacts on confidentiality, integrity, and...
CVE-2021-26868
Technical details about CVE-2021-26868 are not publicly provided in the supplied documents; monitor for updates.
CVE-2023-36402
Technical details about CVE-2023-36402 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Please monitor for official disclosures and updates as new information becomes available.