5098 matches found
CVE-2023-35387
CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...
CVE-2024-43623
CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...
CVE-2025-24066
CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...
CVE-2025-29809
CVE-2025-29809 is a Windows Kerberos security feature bypass vulnerability. The issue involves insecure storage of sensitive information in Kerberos, enabling an attacker with local access and low privileges, and no user interaction, to bypass a security feature. Affected product/area: Windows Ke...
CVE-2017-0038
The connected material describes a Windows IO Manager bug class (two-step: kernel-mode Initiator sets INPC and IFAC without OFAC; Receiver uses RequestorMode) that can bypass security checks and enable privilege escalation. It clarifies that INPC disables MemAC and SecAC, while OFAC can re-enable...
CVE-2017-0060
The CVE-2017-0060/0062 issue affects the Graphics Device Interface (GDI) in multiple Windows releases (Vista through Windows 10 variants listed in the initial entry). The vulnerability enables a remote attacker to obtain sensitive information from process memory by visiting a crafted web site, i....
CVE-2018-8271
CVE-2018-8271 is an information-disclosure vulnerability in Windows where the bowser.sys kernel‑mode driver mishandles objects in memory. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Window...
CVE-2018-8485
CVE-2018-8485 is a DirectX local privilege-escalation vulnerability: DirectX mismanages objects in memory, enabling code execution with kernel privileges on affected Windows versions (Windows 8.1/Server 2012/2012 R2/10/Server 2016-2019 and related). Root cause is memory handling in DirectX; impac...
CVE-2018-8494
CVE-2018-8494 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser when processing untrusted input. Affected products include Windows 7; Windows Server 2008, 2012, 2012 R2, 2016, 2019; Windows 8.1; Windows 10 (and Windows RT 8.1); Windows Server 2008 R2; Window...
CVE-2019-0554
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2019-0635
Technical details (affected components, root cause, versions, and fixes) are not publicly available in the provided documents. Monitor for updates. CVE-2019-0635 concerns information disclosure in Windows Hyper-V where input from a guest OS may not be properly validated.
CVE-2019-0637
Technical details about CVE-2019-0637 (Windows Defender Firewall security feature bypass) are not publicly provided in the connected documents; monitor for updates to learn of affected products, impact, and fixes.
CVE-2019-0772
Technical details for CVE-2019-0772 are not publicly available in the provided documents. Monitor for updates; connected data does not include affected products, versions, impact, or remediation specifics.
CVE-2019-0839
Technical details about CVE-2019-0839 are not publicly provided in the connected documents. Monitor for updates and new public disclosures before drawing conclusions on affected components, root cause, or remediation.
CVE-2020-0655
CVE-2020-0655 corresponds to a Remote Desktop Services vulnerability where an authenticated attacker can trigger remote code execution via clipboard redirection. The connected KB entries confirm the CVE is among multiple Microsoft Windows vulnerabilities and highlight the affected component as Re...
CVE-2020-1247
Technical details about CVE-2020-1247 are not provided in the connected documents. Public details (affected product/versions, root cause, impact, fix) are not disclosed here. Monitor official advisories and CVE databases for updates.
CVE-2020-1488
Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.
CVE-2020-17098
CVE-2020-17098 maps to a Windows GDI+ Information Disclosure vulnerability. Connected documents reference this ID across multiple OpenVAS entries and NVD/NVD-derived records, with CVSS details indicating local access and varying impact on confidentiality (high in CVSS 3.1 vectors, partial in some...
CVE-2021-33785
CVE-2021-33785 is described in connected records as a Windows/Windows Server Denial of Service vulnerability in the AF_UNIX Socket Provider. The documents do not provide detailed affected products/versions, root cause, exploit info, or remediation steps beyond the general DoS context.
CVE-2021-34498
Technical details about CVE-2021-34498 are not publicly provided in the connected documents. The available sources (NVD/NCSC/CNVD, etc.) mention the vulnerability at a high level without specifics on affected products, versions, impact, or fixes. Monitor for updates.
CVE-2021-36954
CVE-2021-36954 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The issue affects Windows where a local attacker can exploit the Bind Filter Driver to elevate privileges with low privileges and no user interaction, potentially affecting confidentiality, integrity, and availab...
CVE-2021-38638
CVE-2021-38638 corresponds to a Windows Elevation of Privilege vulnerability in the Windows Ancillary Function Driver for WinSock. According to the NVD entry, the issue has a CVSS v3.1 base score of 7.8 (High) with LOCAL attack vector, LOW attack complexity, and privileges required set to LOW; co...
CVE-2021-38665
CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...
CVE-2022-37984
CVE-2022-37984 is a Windows WLAN Service privilege elevation vulnerability. Public sources describe it as an improper privilege assignment in the Windows WLAN Service that allows a local attacker to elevate to higher privileges (impact: increased entitlements). The CNVD/ENISA entries corroborate ...
CVE-2022-41045
Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.
CVE-2023-21804
Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.
CVE-2023-24870
Technical details about CVE-2023-24870 (affected product, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE databases.
CVE-2023-35330
CVE-2023-35330 is a Windows vulnerability described as a Windows Extended Negotiation Denial of Service. According to the provided data, the CVSS 3.1 base score is 7.5 (High), with network attack vector, low parallel complexity, no privileges required, no user interaction, and impact limited to A...
CVE-2024-30011
CVE-2024-30011 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry lists CVSS v3.1 base score 6.5 (MEDIUM), with Network attackVector, Low attackComplexity, Low privilegesRequired, No user interaction, and Availability impact HIGH. CIRCL reporting also references CVE-2024-30011. T...
CVE-2024-38117
CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...
CVE-2026-62824
CVE-2026-62824 describes a stack-based buffer overflow in the Remote Desktop Client that allows a remote attacker to execute code over the network. The vulnerability is exploitable without privileges but requires user interaction, with a network-based attack vector and impacts to confidentiality,...
CVE-2018-0811
Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.
CVE-2018-0897
CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...
CVE-2018-8392
CVE-2018-8392 is a heap-based buffer overflow in the Microsoft Jet Database Engine. The issue arises from improper handling of in-memory objects, enabling a remote, unauthenticated attacker to exploit by enticing a user to open a specially crafted Excel file, potentially leading to remote code ex...
CVE-2019-0602
The connected advisories describe a GDI information disclosure vulnerability in Microsoft Windows (CVE-2019-0602 family). Affected component: Graphics Device Interface (GDI). Root cause stated: improper handling of objects in memory leading to memory disclosure. Impact: information disclosure; (n...
CVE-2019-0709
CVE-2019-0709 describes a remote code execution vulnerability in Microsoft Windows Hyper-V. The issue arises when Hyper-V on a host server fails to properly validate input received from an authenticated user on a guest OS, allowing a specially crafted guest app to cause the Hyper-V host to run ar...
CVE-2019-0775
CVE-2019-0775 corresponds to an information-disclosure vulnerability in the Windows kernel where memory objects are not handled correctly, enabling partial confidentiality impact in a local context. Affected component is the Windows kernel; root cause is improper handling of objects in memory. Th...
CVE-2019-1026
The CVE-2019-1026 entry describes a local elevation-of-privilege vulnerability in Windows Audio Service. Affected component: Windows Audio Service on Windows operating systems. Root cause per NVD: how the service handles processing requests, enabling an attacker who runs a specially crafted appli...
CVE-2019-1057
CVE-2019-1057 applies to the Microsoft XML Core Services MSXML parser. A remote code execution vulnerability occurs when the MSXML parser processes untrusted user input; an attacker could entice a user to visit a crafted website, triggering remote code execution and potentially take control of th...
CVE-2019-1391
Technical details for CVE-2019-1391 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability trackers.
CVE-2020-0669
Technical details for CVE-2020-0669 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2020-1233
IBM Security Bulletin E10F8688... describes CVE-2020-1233 as a vulnerability in the Node.js URI.js module used by IBM App Connect Enterprise Certified Container Designer flows, enabling possible phishing via URL confusion (remote/URL-based). Affected: App Connect Enterprise Certified Container wi...
CVE-2020-1378
CVE-2020-1378 is a Kernel Transaction Manager (KTM) / registry KTM log recovery vulnerability reported by James Forshaw (2019–2020) alongside CVE-2019-0959 and CVE-2020-1377. The connected material links it to KTM log processing and recovery of registry state, noting that KTM transaction handling...
CVE-2021-24096
CVE-2021-24096 is a Windows Kernel Elevation of Privilege vulnerability that was exploited via a registry symbolic-link bypass related to server silos. The accompanying analysis with CVE context (MSRC) notes that Microsoft fixed this issue in 2021 by removing the PsIsCurrentThreadInServerSilo che...
CVE-2021-28329
Technical details for CVE-2021-28329 are not provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and remediation.
CVE-2021-31977
CVE-2021-31977 is a Windows Hyper-V Denial of Service vulnerability. Affected: Windows Hyper-V; Impact: Denial of Service with HIGH availability impact. CVSSv3.1 base score 8.6 (NETWORK, LOW complexity, NONE privileges, NONE user interaction, S C). The exploit would be remote over the network and...
CVE-2021-34489
CVE-2021-34489 is a DirectWrite remote code execution vulnerability in Microsoft Windows/Windows Server. The issue affects the DirectWrite component and is described as enabling arbitrary code execution with a HIGH impact, requiring user interaction (UI:R) and a local vector (AV:L/AC:L on CVSS3) ...
CVE-2021-34512
Technical details about CVE-2021-34512 are not publicly available in the provided connected documents. Monitor for updates from NVD, Microsoft, CNVD, and other official advisories for concrete information.
CVE-2021-34537
CVE-2021-34537 is a Windows Bluetooth Driver elevation-of-privilege vulnerability in the Windows Bluetooth Service. Public data (NVD) lists CVSS v3.1 base score 8.0 (HIGH), attack vector ADJACENT, user interaction NONE, privileges required LOW, with Confidentiality/Integrity/Availability impacts ...