5098 matches found
CVE-2024-30029
According to the NCSC advisory (NCSC-2024-0210), CVE-2024-30029 affects Microsoft Windows RRAS and is rated with CVSSv3.1 base score 7.5 (HIGH). The RRAS vulnerability enables remote code execution via network access, with the advisory indicating the impact as executing random code on the target....
CVE-2021-27089
Technical details for CVE-2021-27089 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and affected products.
CVE-2021-36966
Technical details about CVE-2021-36966 (affected components, root cause, impact, or remediation) are not provided in the connected documents. Monitor Microsoft/MSRC advisories and NVD/NVD-linked references for concrete remediation information.
CVE-2021-41343
Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.
CVE-2022-21870
Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.
CVE-2022-22041
CVE-2022-22041 is a Windows Print Spooler elevation of privilege vulnerability affecting Windows Print Spooler components. The Connected documents reference this CVE as part of the July 2022 Patch Tuesday fixes addressing multiple Print Spooler elevation-of-privilege flaws, with remediation deliv...
CVE-2022-24536
Technical details (affected product versions, root cause, exploitability, and remediation) for CVE-2022-24536 are not provided in the supplied documents. Please monitor official vendor/security advisories for updates.
CVE-2022-35748
Technical details about CVE-2022-35748 are not provided in the supplied documents; no specific affected product/version/fix is disclosed here. Monitor for updates as more information becomes public.
CVE-2022-35752
Technical details about CVE-2022-35752 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2022-38051
CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...
CVE-2022-44667
Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.
CVE-2023-21542
CVE-2023-21542 is a Windows Installer local elevation of privilege vulnerability. The connected documents (notably the NCSC advisory) list Windows Installer as affected and categorize the impact as “Obtaining increased privileges.” The available sources do not provide root cause specifics, affect...
CVE-2023-21686
Technical details about CVE-2023-21686 are not publicly provided in the supplied documents. No affected product/version/root cause or remediation are described here. Monitor for updates from official sources.
CVE-2023-21755
CVE-2023-21755 is a Windows Kernel Elevation of Privilege vulnerability described as a local, high-severity issue (CVSS 7.8) with low attack complexity and no user interaction required. The provided documents confirm the vulnerability name and impact characteristics but do not specify the exact r...
CVE-2023-33164
CVE-2023-33164 is described as a Remote Procedure Call Runtime Denial of Service vulnerability. The provided data show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexity, privilege requirement Low, no user interaction, and availability impact High. The connected d...
CVE-2024-30070
CVE-2024-30070 is a DHCP Server Denial of Service vulnerability affecting Windows DHCP Server. Current documents confirm the vulnerability exists and classify it as a network-exploitable DoS with a CVSS v3.1 base score of 7.5 (HIGH) and no privileges required, no user interaction, and availabilit...
CVE-2024-30077
Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.
CVE-2024-30083
CVE-2024-30083 affects Windows Standards-Based Storage Management Service and is rated CVSSv3.1 7.5 (Network, no privileges, no user interaction) with Availability impact. Connected sources confirm this CVE is a Windows DoS vulnerability in the Storage Management Service and align on network-base...
CVE-2025-24061
CVE-2025-24061 : Windows Mark of the Web (MOTW) protection mechanism has a local bypass vulnerability (CVSS 3.1/LOCAL) that could allow an attacker to circumnavigate security protections with user interaction required. The issue is categorized as a local elevation/problem in the MOTW feature and ...
CVE-2025-26663
CVE-2025-26663 is a Windows LDAP remote code-execution vulnerability described as a use-after-free in the LDAP service that enables an unauthenticated attacker to run code over the network. The CVSS 3.1 base metrics indicate high impact on confidentiality, integrity, and availability (C:H, I:H, A...
CVE-2018-0813
Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2018-8136
CVE-2018-8136 is described as a remote code execution vulnerability in how Windows handles objects in memory, affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 and Windows 10 servers. The con...
CVE-2019-0551
CVE-2019-0551 is a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from an authenticated user on a guest OS, enabling code execution on the host. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and...
CVE-2019-0899
The CVE-2019-0899 entry concerns a remote code execution vulnerability in the Windows Jet Database Engine. Connected CNVD records describe a buffer overflow/heap overflow in the Jet DB Engine when memory boundaries are not properly validated, enabling exploitation through in-memory operations. Th...
CVE-2019-1157
The CVE-2019-1157 entry describes a remote code execution in the Windows Jet Database Engine due to improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to exploit this, enabling arbitrary code execution on a affected system. The vulnerability aff...
CVE-2019-1159
CVE-2019-1159 is a Windows kernel elevation-of-privilege vulnerability caused by improper handling of objects in memory. An attacker who can log on could execute a crafted app to run code in kernel mode, potentially installing programs, viewing/changing/deleting data, or creating accounts with fu...
CVE-2019-1236
CVE-2019-1236 describes a remote code execution vulnerability in the VBScript engine related to how it handles objects in memory. The issue is tied to the VBScript engine’s object memory management and is documented as a vulnerability distinct from CVE-2019-1208. The vulnerability affects Interne...
CVE-2020-0913
CVE-2020-0913 is a Windows kernel elevation-of-privilege vulnerability. The initial description states an attacker could exploit improper handling of memory-resident objects to gain higher privileges. Connected sources corroborate a Windows kernel EoP class issue tied to memory object handling, w...
CVE-2020-0953
CVE-2020-0953 is described as a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of memory objects. It affects Microsoft Windows/Windows Server Jet Database Engine components and, per CNVD entries, could be triggered by a user opening a specially ...
CVE-2020-1207
Technical details for CVE-2020-1207 are not publicly available in the provided documents. Monitor for updates from official advisories and security bulletins for affected components and remediation.
CVE-2020-1379
Technical details about CVE-2020-1379 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2020-1507
Technical details such as affected products, versions, root cause, and fixes are not provided in the supplied documents. Monitor for public updates from official advisories to obtain concrete vulnerability specifics.
CVE-2021-1646
CVE-2021-1646 is a Windows WLAN Service Elevation of Privilege vulnerability. Connected sources identify it as affecting the Windows WLAN Service component and root cause-related access issues enabling local elevation of privileges (CVSS 3.1/2.0). Exploitation status is not detailed in the provid...
CVE-2021-1649
Technical details for CVE-2021-1649 are not publicly provided in the supplied documents. Monitor for updates from the connected sources for affected products, impact, and fixes.
CVE-2021-24080
CVE-2021-24080 is a Windows vulnerability described as a Denial of Service in the Windows Trust Verification API. The connected documents confirm this CVE is active and listed in multiple sources. Affected component: Windows Trust Verification API (Windows). Underlying impact stated in the availa...
CVE-2021-24088
CVE-2021-24088 is a Windows Local Spooler RCE vulnerability. The issue stems from a bug in EnumJobsInLocalQueue where an integer overflow allows a crafted buffer to overwrite metadata and adjacent heap allocations; this can enable arbitrary data writes and potential code execution. Affected compo...
CVE-2021-33743
Technical details about CVE-2021-33743 are not publicly provided in the supplied documents; no concrete affected versions, root cause, or fixes are present. Monitor for updates.
CVE-2021-36967
CVE-2021-36967 affects the Windows WLAN AutoConfig Service and is an Elevation of Privilege vulnerability. CVSS details (NVD, CVSS 3.1) indicate an adjacent-network attack vector, low attack complexity, no authentication, and high impact to confidentiality, integrity, and availability (base score...
CVE-2021-36969
Technical details for CVE-2021-36969 are not publicly available in the provided documents. Connected sources reference the CVE and vulnerability class but do not specify affected product versions, root cause, exploitability, or fixes. Monitor for updates.
CVE-2021-38629
CVE-2021-38629 relates to the Windows Ancillary Function Driver for WinSock Information Disclosure. Affected: Windows kernel/network stack component (AFD/WinSock). Underlying cause: information disclosure with network attack surface. CVSS3.1 base score 6.5 (medium), vector NETWORK, low attack com...
CVE-2021-38635
CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...
CVE-2021-41340
Technical details for CVE-2021-41340 are not publicly provided in the connected documents. Monitor for updates as only high-level description is available from initial and related sources.
CVE-2022-22002
Technical details for CVE-2022-22002 are not publicly provided in the connected documents. Available sources mention the vulnerability title, but no affected products, root cause, impact, or fixes are included here. Monitor for updates.
CVE-2022-37959
Technical details about CVE-2022-37959 (affected software, vulnerable component, impact, exploitation, or remediations) are not provided in the supplied documents. Monitor for vendor advisories and updated analyses.
CVE-2022-38006
Technical details about CVE-2022-38006 are not publicly provided in the connected documents. Public information only reiterates a Windows Graphics Component Information Disclosure vulnerability. Monitor for updates; no vulnerability specifics (affected products, root cause, fixes) are disclosed h...
CVE-2022-41088
Technical details for CVE-2022-41088 are not provided in the connected documents. No affected product/component/version, root-cause, impact, or remediation details are given here; monitor official sources for updates.
CVE-2022-41090
Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.
CVE-2022-41102
Technical details for CVE-2022-41102 are not provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor official sources for updates.
CVE-2023-21801
CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...