5098 matches found
CVE-2022-34719
Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.
CVE-2023-24872
CVE-2023-24872 affects the Microsoft PostScript and PCL6 Class Printer Driver. The entry documents a Remote Code Execution vulnerability with high severity (CVSS 3.1: AV=N/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H). Concrete technical details (affected product/version, root cause, exploit status, or fixes) ...
CVE-2023-24911
The CNVD-2023-30862 entry aligns with CVE-2023-24911, describing an information-disclosure vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. It notes an information disclosure exists and involves these Microsoft printer drivers, but provides no version/impact details or remedia...
CVE-2023-24939
Technical details about CVE-2023-24939 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are described here. Monitor for updates.
CVE-2023-28224
CVE-2023-28224 is described as a Windows PPPoE Remote Code Execution vulnerability. The entry provides a CVSS 3.1 score of 7.1 (HIGH) with attack vector Adjacent, high complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability. Explo...
CVE-2023-29359
Technical details about CVE-2023-29359 are not provided in the connected documents. The entries identify a GDI Elevation of Privilege vulnerability but do not specify affected products/versions, root cause, impact specifics, or remediation.
CVE-2024-43641
CVE-2024-43641 is a Windows Registry Elevation of Privilege issue. The connected documents reveal a sophisticated exploitation path based on hive memory corruption and out-of-bounds cell indexes, enabling an unprivileged actor to obtain arbitrary kernel read/write access and, ultimately, SYSTEM-l...
CVE-2025-21260
Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.
CVE-2025-21369
CVE-2025-21369 is listed by the NCSC advisory as a vulnerability in Microsoft Windows’ Digest Authentication that enables executing arbitrary code. The advisory attributes an overall high severity (CVSS v3.1 base 8.80) with a network attack vector and impact. The connected document confirms the v...
CVE-2025-59282
CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...
CVE-2017-11780
CVE-2017-11780 is a remote code execution vulnerability in the Microsoft Windows Server Message Block 1.0 (SMBv1) server. The issue occurs when SMBv1 fails to handle certain requests, allowing an unauthenticated attacker to execute code on the target server over the network. Affected products inc...
CVE-2019-0623
CVE-2019-0623 affects Windows due to a Win32k memory handling issue that enables local privilege escalation. The vulnerability arises when the Win32k component fails to properly handle objects in memory, enabling an attacker with local access to elevate privileges. The provided documents describe...
CVE-2019-0628
Technical details for CVE-2019-0628 are not provided in the connected documents. Public details appear limited to generic references; monitor official advisories for updates.
CVE-2019-0690
The vulnerability CVE-2019-0690 affects the Microsoft Hyper-V Network Switch on a host server. The issue is a denial-of-service in which input from a privileged user on a guest OS is not properly validated, leading to an impact on availability. The description specifies the affected component and...
CVE-2019-0784
Technical details for CVE-2019-0784 are not publicly available in the provided documents; no confirmed affected products, versions, or fixes are listed. Monitor for updates from official sources as additional information may be published.
CVE-2019-0844
Technical details about CVE-2019-0844 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected products, impact, and remediation.
CVE-2019-0885
CVE-2019-0885 is a Windows OLE remote code execution vulnerability caused by improper validation of user input in OLE handling. The connected documents confirm the RCE impact; however, the provided sources do not specify affected products/versions, root-cause details beyond the OLE input validati...
CVE-2019-0906
CVE-2019-0906: Jet Database Engine remote code execution in Windows. In memory handling flaw could allow arbitrary code execution when a victim opens a specially crafted file. Update from Microsoft fixes the memory handling of objects in the Jet engine to address the vulnerability; exploit detail...
CVE-2019-0948
CVE-2019-0948 is an information-disclosure vulnerability in Windows Event Viewer (eventvwr.msc) where XML input containing an external entity reference is improperly parsed. An authenticated user can be persuaded to import a crafted XML file, allowing an attacker to read arbitrary files via an XM...
CVE-2019-1039
The CVE-2019-1039 entry describes an information disclosure vulnerability in the Windows kernel where objects are improperly initialized in memory. A locally authenticated attacker could run a crafted application to obtain information that could be used to further compromise the system. Root caus...
CVE-2019-1145
CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...
CVE-2019-1235
CVE-2019-1235 describes an elevation of privilege in Windows Text Service Framework (TSF) where the TSF server does not validate the source of input or commands it receives. Local, low-attack-surface vector with high impact (C/H/I/A). The vulnerability is tracked with Microsoft advisories and upd...
CVE-2021-31191
CVE-2021-31191 refers to a Windows Projected File System FS Filter Driver information disclosure vulnerability. The available sources identify the affected component as the FS Filter Driver in Windows and indicate a potential confidentiality impact. CVSS metrics from NVD/Microsoft show: CVSS v3.1...
CVE-2021-33752
CVE-2021-33752 is described as a Windows DNS Snap-in Remote Code Execution vulnerability. Connected sources corroborate a DNS Snap-in RCE in Microsoft Windows/Windows Server, indicating an elevated risk with a network attacker, high impact (CVE-3.1: HIGH) and no authentication required, with user...
CVE-2021-33784
CVE-2021-33784 affects the Windows Cloud Files Mini Filter Driver, with elevation of privilege as the underlying issue. The vulnerability is described in the CVE as a Windows Mini Filter Driver privilege escalation and has a CVSS3.1 base score of 7.8 (LOCAL, LOW complexity, Privileges Required: L...
CVE-2021-36974
Technical details for CVE-2021-36974 are not publicly provided in the supplied documents. No affected product, root cause, or remediation is specified here. Monitor official advisories for updates.
CVE-2022-21881
Technical details about CVE-2022-21881 are not provided in the supplied documents. The entries reference Windows kernel elevation issues and related updates, but do not disclose affected products/versions or root cause specifics. Monitor for updates.
CVE-2022-26936
Technical details about CVE-2022-26936 are not provided in the Connected documents; only general security update KB articles are present. Monitor Microsoft advisories (KB5013941/3942/3943, etc.) for vulnerability-specific information and fixes.
CVE-2022-30142
CVE-2022-30142 is a Windows File History Remote Code Execution vulnerability reported with CVSS v3.1 base score 7.5 (HIGH) and network attack vector, requiring user interaction. The vulnerability affects Windows File History and involves a high-impact compromise of confidentiality, integrity, and...
CVE-2022-30164
Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.
CVE-2023-21773
Technical details for CVE-2023-21773 are not provided in the supplied documents. Monitor for official advisories for updates and remediation.
CVE-2023-24865
CVE-2023-24865 corresponds to a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that results in an information disclosure. The CVE is characterized by a network-accessible vector with low attack complexity and low privileges required, but with high confidentiality impact a...
CVE-2024-38058
CVE-2024-38058 is tied to BitLocker: Microsoft security updates (KB5040430, KB5040431, KB5040437, etc.) add PCRs 4–7 and 11 to the default Secure Boot validation profile. This is described as a BitLocker-related change with CVE-2024-38058 referenced for the PCR extension in multiple OS updates. T...
CVE-2024-38186
Technical details (affected product, root cause, impact, versions, or remediation) for CVE-2024-38186 are not provided in the connected documents. Monitor for updates.
CVE-2024-38196
CVE-2024-38196 is tied to the Windows Common Log File System Driver and is described as an Elevation of Privilege (local) vulnerability. The CVE is listed with a CVSSv3.1 base score of 7.8 (HIGH) and a local attack vector with low attack complexity, requiring low privileges and no user interactio...
CVE-2025-21338
CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...
CVE-2026-62819
CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...
CVE-2026-62820
CVE-2026-62820 concerns Windows DNS Server. The issue is a race condition caused by concurrent execution using a shared resource with improper synchronization, leading to remote code execution over a network. Affected product is Windows DNS Server; the vulnerability is triggered via network acces...
CVE-2019-0614
The connected advisories confirm an information disclosure vulnerability in Microsoft Windows GDI. The Graphics Device Interface component is affected by improper handling of in-memory objects, exposing memory contents. CPAI-2019-1525 notes remote attackers could exploit this to access sensitive ...
CVE-2019-0790
Technical details for CVE-2019-0790 are not provided in the supplied documents; no affected products, versions, root cause, or mitigations are listed. Monitor for updates.
CVE-2019-0851
Technical details on CVE-2019-0851 are not publicly provided in the supplied connected documents. Monitor official advisories for updates on affected products, root cause, and remediation.
CVE-2019-1144
CVE-2019-1144 is a remote code execution vulnerability in the Windows font library (fontsub.dll) triggered by specially crafted embedded fonts. The impact, per NVD/NVD-derived sources, is full system compromise: attacker can install programs, view/modify/delete data, and create accounts with full...
CVE-2019-1150
CVE-2019-1150 affects the Windows font library’s handling of embedded fonts, leading to remote code execution. The vulnerability arises from how font data is processed, enabling an attacker to run arbitrary code on the targeted system. Documented impact includes potential full system compromise, ...
CVE-2019-1232
CVE-2019-1232 is a local elevation-of-privilege flaw in the Diagnostics Hub Standard Collector Service. Affected: Diagnostics Hub Standard Collector Service; root cause: improper impersonation of certain file operations. Impact per sources: confidentiality, integrity, and availability are rated p...
CVE-2019-1256
CVE-2019-1256 is a Windows Win32k Elevation of Privilege vulnerability caused by the Win32k component failing to properly handle objects in memory, enabling local privilege escalation. The CVE is distinct from CVE-2019-1285, and is corroborated by multiple records (NVD/CVE list, CNVD, EUVD mentio...
CVE-2019-1453
CVE-2019-1453 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). The Red Hat CVE entry and CNVD/OpenVAS references confirm the issue arises when an attacker connects via RDP and sends specially crafted requests to the target, with impact described as DoS. The NVD e...
CVE-2020-1243
CVE-2020-1243 affects Microsoft Hyper-V. The vulnerability arises when Hyper-V on a host does not properly validate certain malicious data from a guest VM, enabling a locally authenticated attacker with a guest-VM privilege to trigger a denial-of-service by running a specially crafted application...
CVE-2020-1566
CVE-2020-1566 is a Windows Kernel Elevation of Privilege vulnerability arising from a memory handling flaw in the Windows kernel, where mismanagement of objects in memory could allow a local attacker to execute arbitrary code in kernel mode, potentially install programs, view/change/delete data, ...
CVE-2020-17001
CVE-2020-17001 is a Windows Print Spooler Elevation of Privilege vulnerability. Affected software is Windows Print Spooler. The CVSS context from NVD (base CVSSv3.1 score 7.8, HIGH) indicates local, low complexity, no user interaction required, with HIGH impacts on confidentiality, integrity, and...