Lucene search
+L
MicrosoftWindows Server 2016

5098 matches found

CVE
CVE
added 2021/10/13 12:27 a.m.152 views

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

7.8CVSS7.8AI score0.02519EPSS
Save
CVE
CVE
added 2021/10/13 12:27 a.m.152 views

CVE-2021-40467

CVE-2021-40467 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. According to the records, it enables a local attacker to escalate privileges via the CLFS component, with high impact on confidentiality, integrity, and availability (vector: LOCAL, low attack complexi...

7.8CVSS7.9AI score0.00543EPSS
Save
CVE
CVE
added 2021/10/13 12:28 a.m.152 views

CVE-2021-41342

Technical details for CVE-2021-41342 are not publicly available in the provided documents; the materials reference the vulnerability name but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

8.8CVSS7.7AI score0.01629EPSS
Save
CVE
CVE
added 2021/11/10 12:46 a.m.152 views

CVE-2021-41356

CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...

7.5CVSS7.9AI score0.02993EPSS
Save
CVE
CVE
added 2021/11/10 12:46 a.m.152 views

CVE-2021-42275

Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.

8.8CVSS8.8AI score0.02081EPSS
Save
CVE
CVE
added 2022/01/11 8:23 p.m.152 views

CVE-2022-21914

Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.

7.8CVSS8.5AI score0.00669EPSS
Save
CVE
CVE
added 2022/04/15 7:05 p.m.152 views

CVE-2022-26819

Technical details about CVE-2022-26819 are not provided in the supplied documents; no affected products, exploit info, or remediation are specified here. Monitor for updates.

8.5CVSS6.9AI score0.01929EPSS
Save
CVE
CVE
added 2022/06/15 9:51 p.m.152 views

CVE-2022-30155

Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.

7.1CVSS6.7AI score0.04961EPSS
Save
CVE
CVE
added 2022/09/13 12:00 a.m.152 views

CVE-2022-37956

CVE-2022-37956 is a Windows kernel elevation-of-privilege vulnerability involving local, memory-corruption in the registry hive path. The CVE is described as a Windows Kernel Elevation of Privilege Vulnerability with a CVSSv3.1 base score of 7.8 (HIGH); attack vector LOCAL, complexity LOW, privil...

7.8CVSS8.6AI score0.0129EPSS
Save
CVE
CVE
added 2022/11/09 12:00 a.m.152 views

CVE-2022-41100

CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...

7.8CVSS8.1AI score0.00306EPSS
Save
CVE
CVE
added 2023/01/10 12:00 a.m.152 views

CVE-2023-21558

Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

7.8CVSS7.7AI score0.00459EPSS
Save
CVE
CVE
added 2023/03/14 4:55 p.m.152 views

CVE-2023-23401

Technical details (affected components, root cause, impact, and remediation) for CVE-2023-23401 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

7.8CVSS7.8AI score0.00598EPSS
Save
CVE
CVE
added 2023/03/14 4:55 p.m.152 views

CVE-2023-24863

The CVE-2023-24863 entry concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver described as an Information Disclosure Vulnerability . The public data provided does not specify the exact root cause details, vulnerable file/function, affected product versions, or the ex...

6.5CVSS6.3AI score0.01461EPSS
Save
CVE
CVE
added 2023/04/11 7:13 p.m.152 views

CVE-2023-24927

CVE-2023-24927 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. The connected CNVD entry confirms remote code execution exists, but the provided documents do not specify the exact root cause, affected versions, or exploit detail...

8.8CVSS9.1AI score0.0164EPSS
Save
CVE
CVE
added 2023/04/11 7:13 p.m.152 views

CVE-2023-28271

CVE-2023-28271 is discussed within registry and KTM-transaction logging context in the connected documents, indicating a kernel memory-related information disclosure linked to KTM logs and registry transaction handling. The material notes exposure of uninitialized kernel data and pointers to KTM ...

5.5CVSS5.5AI score0.01164EPSS
Save
CVE
CVE
added 2023/04/11 7:13 p.m.152 views

CVE-2023-28305

Technical details about CVE-2023-28305 are not provided in the connected documents. Public specifics (affected product/version, root cause, impact, or fixes) are not available here; monitor for updates and refer to the official advisories for confirmation.

6.6CVSS6.8AI score0.00853EPSS
Save
CVE
CVE
added 2024/05/14 4:57 p.m.152 views

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

7.8CVSS6.3AI score0.00713EPSS
Save
CVE
CVE
added 2024/06/11 4:59 p.m.152 views

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

7CVSS8.1AI score0.01965EPSS
SaveIn wild
CVE
CVE
added 2025/01/14 6:04 p.m.152 views

CVE-2025-21213

Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.

4.6CVSS4.7AI score0.0072EPSS
Save
CVE
CVE
added 2025/03/11 4:59 p.m.152 views

CVE-2025-24045

CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...

8.1CVSS8.2AI score0.01417EPSS
Save
CVE
CVE
added 2026/05/12 4:59 p.m.152 views

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

8.8CVSS6.1AI score0.00427EPSS
Save
CVE
CVE
added 2017/04/12 2:00 p.m.151 views

CVE-2017-0211

CVE-2017-0211 is a Windows OLE/COM elevation-of-privilege issue where a Structured Storage object can be exposed across a security boundary via a property bag, enabling creation of a remote COM object in the server process and potential privilege escalation. Google Project Zero details show how I...

5.5CVSS6.4AI score0.13975EPSS
Save
CVE
CVE
added 2018/03/14 5:00 p.m.151 views

CVE-2018-0816

Technical details about CVE-2018-0816 are not publicly provided in the connected documents; the initial description summarizes the vulnerability but does not specify affected products, versions, impact, or fixes.

7CVSS6.2AI score0.01218EPSS
Save
CVE
CVE
added 2018/02/15 2:00 a.m.151 views

CVE-2018-0825

CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...

7.6CVSS7.3AI score0.16479EPSS
Save
CVE
CVE
added 2018/04/12 1:00 a.m.151 views

CVE-2018-1013

CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...

9.3CVSS7.3AI score0.23665EPSS
Save
CVE
CVE
added 2018/07/11 12:00 a.m.151 views

CVE-2018-8304

CVE-2018-8304 is a Windows DNSAPI.dll denial-of-service vulnerability arising from improper handling of DNS responses. Affected: Windows 7, Server 2008/2012/2012 R2, Server 2008 R2, 2016; Windows 8.1/10/10 Servers; DNSAPI denial of service could impact availability. Connected documents confirm th...

7.1CVSS6.3AI score0.11796EPSS
Save
CVE
CVE
added 2019/01/08 9:00 p.m.151 views

CVE-2019-0549

CVE-2019-0549 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 (and corresponding Server editions such as Server 2012/2012 R2, 2016, 2019). F...

5.5CVSS5.6AI score0.01849EPSS
Save
CVE
CVE
added 2019/03/06 12:00 a.m.151 views

CVE-2019-0631

Technical details of CVE-2019-0631 are not publicly available in the provided documents; no affected products, exploit specifics, or remediation are specified. Monitor official advisories for updates.

7.8CVSS8.3AI score0.01335EPSS
Save
CVE
CVE
added 2019/03/06 12:00 a.m.151 views

CVE-2019-0662

CVE-2019-0662 is a remote code execution vulnerability in Microsoft Windows GDI/GDI+. The issue arises from how GDI handles objects in memory, enabling a remote attacker to execute arbitrary code on affected systems. Connected advisories corroborate a GDI-based RCE family (distinct from CVE-2019-...

9.3CVSS9.4AI score0.15355EPSS
Save
CVE
CVE
added 2019/04/09 1:52 a.m.151 views

CVE-2019-0756

Affected component: Microsoft XML Core Services MSXML parser. Description from CVE-2019-0756 indicates a remote code execution vulnerability when the MSXML parser processes user input. Severity is high (CVSS v3 base 8.8; v2 base 9.3). The connected PRION/NVD entries reiterate the same advisory wi...

9.3CVSS8.8AI score0.12499EPSS
Save
CVE
CVE
added 2019/04/09 1:42 a.m.151 views

CVE-2019-0767

CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...

5.5CVSS5.5AI score0.01794EPSS
Save
CVE
CVE
added 2019/04/09 8:16 p.m.151 views

CVE-2019-0814

CVE-2019-0814 affects Microsoft Windows Win32k: information disclosure due to win32k improperly providing kernel information. The vulnerability is the same family as CVE-2019-0848 and is described across NVD/CNVD records and related CVE entries. Affected software is Windows Windows Win32k subsyst...

5.5CVSS6AI score0.02127EPSS
Save
CVE
CVE
added 2019/10/10 1:28 p.m.151 views

CVE-2019-1337

The CVE-2019-1337 entry describes an information disclosure vulnerability in the Windows Update Client where memory objects are mishandled. Affected component: Windows Update Client. Root cause: improper handling of in-memory objects leading to potential memory contents disclosure. Exploitation d...

5.5CVSS6.5AI score0.02199EPSS
SaveWeb
CVE
CVE
added 2020/01/14 11:11 p.m.151 views

CVE-2020-0634

CVE-2020-0634 affects the Windows Common Log File System (CLFS) Driver. Connected CNVD-2020-08133 describes a privilege-lifting vulnerability in the CLFS Driver caused by improper handling of memory objects, enabling privilege escalation by an authenticated user who logs on and runs a crafted app...

7.8CVSS8.5AI score0.01232EPSS
Save
CVE
CVE
added 2020/02/11 9:22 p.m.151 views

CVE-2020-0665

CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...

8.1CVSS8.1AI score0.04382EPSS
Save
CVE
CVE
added 2020/02/11 9:23 p.m.151 views

CVE-2020-0729

CVE-2020-0729 is a Windows remote code execution vulnerability that can be triggered when a user processes a .LNK (shortcut) file. Exploitation could run arbitrary code with the same privileges as the logged-in user. The connected documents confirm this CVE is part of Windows update advisories an...

8.8CVSS8.2AI score0.30863EPSS
Save
CVE
CVE
added 2020/08/17 7:13 p.m.151 views

CVE-2020-1525

CVE-2020-1525 describes a memory corruption vulnerability in Windows Media Foundation triggered by how in-memory objects are handled. A successful exploit could allow an attacker to install programs, view/change/delete data, or create new accounts with full rights. Exploitation vectors include co...

8.8CVSS8AI score0.02853EPSS
Save
CVE
CVE
added 2020/10/16 10:17 p.m.151 views

CVE-2020-16922

CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...

5.5CVSS5.6AI score0.00806EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.151 views

CVE-2021-1657

Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.

7.8CVSS8.3AI score0.00939EPSS
Save
CVE
CVE
added 2021/04/13 7:33 p.m.151 views

CVE-2021-28341

Technical details for CVE-2021-28341 are not publicly provided in the supplied documents. Related OpenVAS/Nessus plugins reference the CVE list but do not describe affected products, root causes, or fixes. Monitor for updates.

8.8CVSS8.9AI score0.02315EPSS
Save
CVE
CVE
added 2021/04/13 7:33 p.m.151 views

CVE-2021-28354

Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.

8.8CVSS8.9AI score0.02315EPSS
Save
CVE
CVE
added 2021/06/08 10:46 p.m.151 views

CVE-2021-31976

CVE-2021-31976 is described as a Server for NFS Information Disclosure Vulnerability. The provided documents do not specify affected products, vendor, component, or vulnerable versions. CVSS metrics are available: CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, n...

7.8CVSS8.1AI score0.03659EPSS
Save
CVE
CVE
added 2021/07/14 5:54 p.m.151 views

CVE-2021-34499

Technical details about CVE-2021-34499 are not publicly provided in the supplied documents; monitor for updates.

6.5CVSS7.3AI score0.02845EPSS
Save
CVE
CVE
added 2021/09/15 11:23 a.m.151 views

CVE-2021-38636

The CVE-2021-38636 entry refers to a Windows Redirected Drive Buffering SubSystem Driver Information Disclosure vulnerability. Affected software is Windows; the vulnerability affects the Redirected Drive Buffering SubSystem Driver (component/driver) and enables partial confidentiality impact via ...

5.5CVSS6.6AI score0.00869EPSS
Save
CVE
CVE
added 2022/01/11 8:22 p.m.151 views

CVE-2022-21880

CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...

7.8CVSS8.1AI score0.03883EPSS
Save
CVE
CVE
added 2022/04/15 7:03 p.m.151 views

CVE-2022-24485

Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.

7.5CVSS8.7AI score0.017EPSS
Save
CVE
CVE
added 2022/04/15 7:04 p.m.151 views

CVE-2022-24550

Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.

7.8CVSS8.6AI score0.00876EPSS
Save
CVE
CVE
added 2022/04/15 7:04 p.m.151 views

CVE-2022-26802

CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...

7.8CVSS8.6AI score0.00796EPSS
Save
CVE
CVE
added 2022/06/15 9:52 p.m.151 views

CVE-2022-30166

Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.

7.8CVSS8.1AI score0.01389EPSS
Save
CVE
CVE
added 2022/09/13 6:41 p.m.151 views

CVE-2022-30200

Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

7.8CVSS8.8AI score0.01251EPSS
Save
Total number of security vulnerabilities5098