5098 matches found
CVE-2022-37987
CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...
CVE-2023-24929
CVE-2023-24929 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Connected documents confirm this is a remote-code-execution issue affecting the printer driver stack, with a high-severity CVSS and network attack potential, but do not provide ...
CVE-2024-49082
CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...
CVE-2025-21351
CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...
CVE-2025-24035
CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...
CVE-2025-59258
CVE-2025-59258 is an information-disclosure vulnerability affecting Windows Active Directory Federation Services (ADFS). The incident involves insertion of sensitive data into ADFS log files, enabling a local attacker to disclose information. The CVE is characterized in the provided data as a loc...
CVE-2019-1246
CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...
CVE-2021-33764
CVE-2021-33764 is a Windows Kerberos KDC information-disclosure issue affecting domain controllers. Public details describe a RFC 4556 (section 3.2.1) noncompliance that can impact PIV/smart-card scenarios. Microsoft’s out-of-band updates note a temporary mitigation using a registry key and advis...
CVE-2021-42282
Technical details for CVE-2021-42282 are not publicly provided in the connected documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates.
CVE-2022-22037
CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...
CVE-2022-23283
CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...
CVE-2022-29150
CVE-2022-29150 is a Windows Cluster Shared Volume (CSV) Elevation of Privilege vulnerability. Public details in the provided documents are limited to the vulnerability title and related Microsoft security updates; no explicit root-cause, affected product/version specifics, or exploit details are ...
CVE-2022-30146
Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2023-29351
Technical details about CVE-2023-29351 are not publicly available in the provided documents. Monitor Microsoft and NVD for updates on affected products, impact, and remediation.
CVE-2024-20655
CVE-2024-20655 is a Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability. The provided documents mention this CVE in risk references and OpenVAS listings but do not supply concrete technical details such as affected product versions, root cause, or specific fix....
CVE-2019-1155
CVE-2019-1155 is a Jet Database Engine remote code execution vulnerability in Windows. It arises from improper handling of in-memory objects, enabling an attacker to run arbitrary code on a victim system by enticing the user to open a specially crafted file. The update fixes how the Jet Database ...
CVE-2022-21878
CVE-2022-21878 is a Windows Geolocation Service Remote Code Execution Vulnerability. Affected software: Windows Geolocation Service component; root cause and exact exploit path are not detailed in the provided documents. CVSS2 score is 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C); CVSS3.1 score is 7.8 (AV:L/...
CVE-2022-29135
CVE-2022-29135 is described as a Windows CSV Elevation of Privilege vulnerability. The connected documents reference CSV-related issues and protections within Microsoft security updates issued May 2022, including CVE coverage notes and known issues about CSV ownership and certificate-mapping hand...
CVE-2024-20680
Technical details about CVE-2024-20680 (affected MSMQC, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-43513
CVE-2024-43513 is a BitLocker security feature bypass vulnerability affecting Windows BitLocker. The entry notes a bypass of security measures with a CVSS v3.1 base score of 6.4 (Physical access, High impact for confidentiality, integrity, and availability). The connected Microsoft update guidanc...
CVE-2026-20846
CVE-2026-20846 describes a buffer over-read in Windows GDI+ that can be exploited over a network to cause a denial of service. The CVSS v3.1 base score is 7.5 (HIGH). Mitigation requires the Microsoft update per the MSRC vulnerability entry CVE-2026-20846.
CVE-2018-8413
CVE-2018-8413 affects the Windows Theme API and specifically the ThemePack (CAB-based) file parser used by Windows theme files. The connected exploit entries describe a vulnerability in the ThemePack parser that allows attackers to create arbitrary files at arbitrary locations, enabling remote co...
CVE-2020-16996
CVE-2020-16996 is a Kerberos Security Feature Bypass vulnerability. The connected documents tie this CVE to Microsoft Kerberos ticket handling issues and state that security updates were released in March 2021 as part of cumulative/security rollups (e.g., KB5000847/KB5000840/KB5000848 and related...
CVE-2022-26803
Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.
CVE-2022-26812
Technical details about CVE-2022-26812 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present here. Monitor for updates.
CVE-2022-29128
Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.
CVE-2022-30151
CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.
CVE-2022-34710
Technical details about CVE-2022-34710 are not provided in the connected documents. No affected product/version/root-cause/fix is specified. Monitor for updates from these sources for concrete details.
CVE-2023-21543
According to NCSC-2023-0017, CVE-2023-21543 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability with CVSS v3.1 score 8.10 (impact: executing random code) affecting Windows L2TP components. The CVE is listed among other Windows network‑facing RCE bugs; no specific ex...
CVE-2023-21548
CVE-2023-21548 is a Windows SSTP remote code execution vulnerability. The connected NC Sc doc lists it under Windows SSTP with CVSS 8.10 (network context) and labels it as a SSTP issue; no explicit root-cause details or affected product versions are provided beyond “Windows SSTP.” The initial doc...
CVE-2023-28251
CVE-2023-28251 is described as a Windows Driver Revocation List Security Feature Bypass vulnerability. The consolidated data shows a CVSSv3.1 base score of 5.5 (Medium) with a Local attack vector, Low attack complexity, Low privileges required, no user interaction, and Confidentiality Impact None...
CVE-2023-36392
CVE-2023-36392 is a DHCP Server Service Denial of Service vulnerability. The available document set identifies the issue as a network-based vulnerability with high impact (Availability) and CVSS v3.1 base score 7.5, but concrete technical details such as affected product/version, root cause, or p...
CVE-2024-20682
CVE-2024-20682 concerns the Windows Cryptographic Services Remote Code Execution vulnerability. The available data show a vulnerability affecting Windows components, enabling a local attacker to achieve code execution with high impact on confidentiality, integrity, and availability. The CVSS 3.1 ...
CVE-2019-1091
Technical details about CVE-2019-1091 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2020-0635
CVE-2020-0635 is described in CNVD entries as an elevation of privilege in Microsoft Windows/Windows Server caused by improper handling of certain symbolic links. The CNVD text specifies that exploiting this flaw allows an attacker to gain system-level privileges by running a crafted application ...
CVE-2020-16896
CVE-2020-16896 describes an information-disclosure vulnerability in Microsoft Windows Remote Desktop Protocol (RDP). According to the linked sources, the issue arises when an attacker connects to a target system via RDP and sends specially crafted requests, potentially allowing the attacker to ob...
CVE-2022-21868
Technical details about CVE-2022-21868 are not publicly provided in the supplied documents. Monitor for updates from official sources.
CVE-2022-30152
CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...
CVE-2023-23410
CVE-2023-23410 is described as a Windows HTTP.sys Elevation of Privilege Vulnerability. The initial document provides CVSS 3.1 metrics: local attack vector, low attack complexity, privileges required low, and impact high on confidentiality, integrity, and availability, with a base score of 7.8. C...
CVE-2023-24910
CVE-2023-24910 is a Windows Graphics Component Elevation of Privilege vulnerability. Affected: Windows graphics subsystem components (local component/privilege escalation surface). Root cause: Elevation of privileges with a local attack vector (attack vector Local, low complexity, privileges requ...
CVE-2024-20692
Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.
CVE-2024-26195
CVE-2024-26195 is a remote code execution vulnerability in Microsoft Windows DHCP Server (DHCP Server Service). According to OpenVAS data, it is listed under Windows DHCP Server with an impact described as “Executing Random Code.” The NVD entry confirms DHCP Server Service Remote Code Execution V...
CVE-2025-47827
Technical details for CVE-2025-47827 are not publicly provided in the supplied documents. The initial description notes a Secure Boot bypass via igel-flash-driver, but no additional technical specifics, affected versions, or fixes are included here. Monitor for updates.
CVE-2018-8566
Technical details on CVE-2018-8566 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2019-0626
The CVE-2019-0626 entry describes a memory corruption vulnerability in the Windows Server DHCP Service caused by improper processing of DHCP messages, enabling remote code execution when an attacker sends specially crafted DHCP packets. Connected advisories corroborate code execution on Microsoft...
CVE-2020-0764
CVE-2020-0764 is an elevation-of-privilege vulnerability in Windows Storage Services where improper handling of file operations could let an attacker gain elevated privileges after achieving code execution on a victim system and running a crafted application. The issue is mitigated by a security ...
CVE-2020-16949
CVE-2020-16949 is a denial-of-service flaw in Microsoft Outlook where improper handling of in-memory objects leads to remote DoS after receiving a crafted e‑mail. Public details from multiple sources confirm Outlook vulnerabilities across versions (notably Outlook 2013/KB4484524 references and MS...
CVE-2022-26926
Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.
CVE-2022-30161
Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.