5098 matches found
CVE-2023-29372
CVE-2023-29372 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The available information lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, UI required, and impa...
CVE-2021-41370
Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2022-24485
Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.
CVE-2022-24550
Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.
CVE-2022-26802
CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...
CVE-2022-30166
Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.
CVE-2022-30200
Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2022-41109
Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.
CVE-2023-21747
CVE-2023-21747 is a Windows kernel registry vulnerability caused by an out-of-memory error during a highly sensitive hive-unload operation. The issue allowed an attacker with local access to trigger memory allocation failures in a critical path, risking instability and potential misuse of hive st...
CVE-2024-37972
Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.
CVE-2024-49122
CVE-2024-49122 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The entry notes a network-exposed base score of 8.1 (High) with no user interaction and total impact, and the MSMQ component is affected. Connected documents corroborate an RCE classification for MSMQ with u...
CVE-2025-21332
CVE-2025-21332 corresponds to a MapUrlToZone Security Feature Bypass in Windows. The connected data shows a CVSS v3.1 base score of 4.3 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) indicating a network-accessible issue with low integrity/availability impacts and user interaction require...
CVE-2025-27483
CVE-2025-27483 is an NTFS elevation-of-privilege issue described as an out-of-bounds read in Windows NTFS that could allow a local attacker to obtain elevated privileges. The CVE is tied to Windows NTFS and is rated HIGH (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 7.8). Public refe...
CVE-2026-62790
CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...
CVE-2017-11927
Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.
CVE-2018-0830
CVE-2018-0830 is a Windows kernel local information-disclosure vulnerability caused by how objects in memory are handled. Affected products include Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2/R2 SP1; Windows Server 2012/R2; Windows 10 releases Gold, 1511, 1607, 1703, 1709; Wind...
CVE-2018-8514
CVE-2018-8514 is an information-disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime caused by improper initialization of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10 (various editions), Windows Server 2008/2012/2012 R2/2016/2019, and Windows...
CVE-2018-8549
CVE-2018-8549 is a Windows kernel driver signature validation bypass vulnerability. It affects Windows clients/servers listed (Windows 8.1, 10, 2012/2016/2019, etc.). The underlying issue is incorrect validation of kernel driver signatures, enabling bypass of security features. Public data in con...
CVE-2019-0598
Technical details for CVE-2019-0598 are not publicly available in the provided documents; monitor for updates.
CVE-2019-0782
Technical details for CVE-2019-0782 are not publicly available in the provided documents. Monitor for updates from NVD/MSRC and ENISA EUVD databases.
CVE-2019-0849
The connected advisory confirms this is a Windows Graphics Device Interface (GDI) information disclosure issue. Specifically, CVE-2019-0802 (related to Windows GDI) is caused by improper handling of objects in memory, enabling information disclosure. For CVE-2019-0849, the primary document descri...
CVE-2019-1468
The connected CNVD entry corroborates CVE-2019-1468 as a Win32k/Windows font library RCE: improper handling of specially crafted embedded fonts enables remote code execution. Affected: Windows clients/servers with Win32k font handling vulnerability. Root cause: inadequate validation when processi...
CVE-2020-1039
Technical details for CVE-2020-1039 (Jet Database Engine RCE) are not provided in the Connected Documents. Please monitor official advisories (MSRC/NVD) for affected products, exact root cause, impact scope, and available fixes.
CVE-2020-1133
Technical details about CVE-2020-1133 are not publicly provided in the connected documents. Available sources mention Diagnostics Hub Standard Collector and the fix, but no affected versions, exploit specifics, or mitigation steps are given. Monitor for updates.
CVE-2020-1239
CVE-2020-1239 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The CVSS v3.1 base score is 8.8 (HIGH): network attack vector, no privileges required, UI required, and the impact is high on confidentiality, integrity, and availabili...
CVE-2020-1474
CVE-2020-1474 concerns the Windows Image Acquisition (WIA) Service, where memory contents can be disclosed by an attacker who authenticates and connects an imaging device (camera, scanner, phone) to a vulnerable system and runs a crafted application. The vulnerability arises from how the WIA Serv...
CVE-2020-1562
Microsoft Graphics Components remote code execution vulnerability CVE-2020-1562 exists due to how objects are handled in memory. An attacker could execute arbitrary code if a user opens a specially crafted file. The vulnerability is addressed by a security update that fixes the memory handling of...
CVE-2020-16897
CVE-2020-16897 is an information-disclosure vulnerability in NetBIOS over TCP (NetBT) where objects in memory are improperly handled. An attacker who runs a crafted application could obtain information to help further compromise the system, but cannot directly execute code or elevate rights. The ...
CVE-2021-28332
Technical details for CVE-2021-28332 are not provided in the connected documents. The entries reference RPC Runtime RCE in general but do not specify affected product/version/root cause or fixes. Monitor for updates.
CVE-2021-28340
Technical details for CVE-2021-28340 are not publicly available in the provided documents. No affected product/version, impact, or remediation is specified here. Monitor for updates.
CVE-2021-28342
Technical details about CVE-2021-28342 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.
CVE-2021-31208
CVE-2021-31208 is a Windows Container Manager Service elevation-of-privilege vulnerability affecting Windows/Windows Server. Connected sources confirm the issue and assign a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Required: LOW, no user interaction). Public exploits exist. Microsoft issued...
CVE-2021-31969
CVE-2021-31969 is a privilege-escalation vulnerability in Windows Cloud Files Mini Filter Driver (clfs.sys). The issue arises in the cloud file processing path inside HsmFltProcessHSMControl/HsmFltProcessUpdatePlaceholder, where Cloud Reparse Tag data is only partially validated and a misinterpre...
CVE-2022-21867
Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-41050
Technical details about CVE-2022-41050 are not publicly available in the provided documents. No product/version/root-cause/exploit information is given here. Monitor for updates from official advisories and vulnerability databases.
CVE-2023-21694
Technical details about CVE-2023-21694 are not publicly provided in the supplied documents. The connected records do not specify affected products, root cause, remediation, or exploit status. Monitor for official disclosures and updates.
CVE-2023-24866
Technical details about CVE-2023-24866 are not publicly provided in the supplied documents. No affected products, versions, or remediation specifics are confirmed here. Monitor for updates from official sources.
CVE-2023-24942
Technical details (affected products, root cause, impact, or remediation) are not publicly available in the provided documents for CVE-2023-24942. Monitor for updates.
CVE-2023-38254
CVE-2023-38254 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). The available documents identify MSMQ as the affected component and indicate the vulnerability causes availability impact (A) with no confidentiality or integrity impact, and do not provide exploi...
CVE-2024-30019
CVE-2024-30019 is a Windows DHCP Server Denial-of-Service vulnerability. The OpenVAS/NCSC references confirm affected product Windows DHCP Server and impact Denial-of-Service (CVSS around 6.5). Exploitation or exploit status is not detailed in the provided docs. Remediation is to apply the Micros...
CVE-2024-43592
CVE-2024-43592 is a Windows RRAS remote code execution vulnerability. The connected sources indicate it affects Windows RRAS with an attack vector over the network, requiring low privileges and no user interaction, yielding a high impact on confidentiality, integrity, and availability (C/H/I/A). ...
CVE-2024-43634
CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...
CVE-2025-26647
CVE-2025-26647 describes an elevation-of-privilege vulnerability in Windows Kerberos caused by improper input validation, allowing network-based privilege escalation. Affected component: Windows Kerberos in Windows client/server environments. Impact is high (CVSS 3.1: 8.8, Network exploit, Privil...
CVE-2018-0959
CVE-2018-0959 is a remote code execution vulnerability in Windows Hyper-V where a host server fails to validate input from an authenticated user on a guest OS. Affected products include Windows clients and server editions listed in the description (e.g., Windows 7, 8.1; Windows Server 2008-2016; ...
CVE-2018-8450
CVE-2018-8450 is a Windows Remote Code Execution vulnerability affecting Windows Search where an attacker can exploit memory handling of objects to take control of the system. The issue is addressed by Microsoft security updates KB4467702 (Windows 10 v1803/Server 1803) and related KBs for Windows...
CVE-2019-0572
CVE-2019-0572 concerns a Windows Data Sharing Service elevation of privileges vulnerability. Connected sources indicate the issue affects Microsoft Windows Data Sharing Service components in Windows 10 and related OS families, enabling a local attacker to obtain elevated privileges by abusing imp...
CVE-2019-0615
Technical details (affected products/versions, root cause specifics, impact scope) for CVE-2019-0615 are not publicly available in the provided documents. Monitor for updates in connected advisories (CPAI series) and official disclosures.
CVE-2019-0616
Microsoft Windows GDI (Graphics Device Interface) contains an information disclosure vulnerability. The Graphics Device Interface component is affected due to improper handling of objects in memory, enabling a remote attacker to obtain sensitive information. The linked advisories corroborate the ...
CVE-2019-0617
CVE-2019-0617 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is characterized by a high-severity impact (CVSS v3.0: 7.8) with a local attack vector, requiring user interaction, and resulting in high confident...