5098 matches found
CVE-2021-28349
Technical details (affected products/versions, root cause, exploit specifics, remediation) for CVE-2021-28349 are not provided in the connected documents. Monitor official advisories and vulnerability feeds for updates.
CVE-2023-35342
Technical details for CVE-2023-35342 are not provided in the supplied documents; no affected product/version/root-cause/mitigation is specified here. Monitor for updates in the connected sources.
CVE-2024-30086
Technical details about CVE-2024-30086 (affected component, root cause, impact, and fixes) are not provided in the supplied documents. Monitor for updates from Microsoft and official CVE disclosures.
CVE-2024-30094
Technical details about CVE-2024-30094 (RRAS remote code execution) are not publicly provided in the supplied connected documents. No affected products/versions, exploit information, root cause, or remediation details are present. Monitor for updates.
CVE-2024-37969
Technical details about CVE-2024-37969 (affected product, root cause, exploitability, and remediation) are not publicly provided in the supplied documents. Monitor for updates from official advisories.
CVE-2024-38125
CVE-2024-38125 affects the Windows Kernel Streaming WOW Thunk Service Driver and enables local elevation of privileges. The vulnerability is associated with the Kernel Streaming WOW Thunk Service Driver and can lead to obtaining elevated privileges (SYSTEM). Microsoft has issued fixes in August 2...
CVE-2024-43532
CVE-2024-43532 is a Remote Registry Service Elevation of Privilege vulnerability with a documented exploit path in a private GitHub post, alleging interception of NTLM data via RPC_A uthon level CONNECT and a Machine‑in‑the‑Middle attack against advapi32.dll behavior. Affected: Windows 10/11 and ...
CVE-2024-49086
Technical details (affected product, vulnerable component, exploit specifics, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and security advisories.
CVE-2025-21221
CVE-2025-21221: Heap-based buffer overflow in Windows Telephony Service enables remote code execution over the network. Exploitation requires network access, no privileges, and user interaction is needed; impact is high on confidentiality, integrity, and availability. Affected component: Windows ...
CVE-2025-21229
CVE-2025-21229 is listed as a Windows Digital Media Elevation of Privilege vulnerability. Connected documents indicate Microsoft updates exist to fix vulnerabilities in Windows, with MSRC guidance and KB articles available, but do not provide explicit technical details (vulnerable component versi...
CVE-2025-33070
CVE-2025-33070 is reported in EU/NCSC context as affecting Windows Netlogon, caused by use of an uninitialized resource, enabling an unauthenticated attacker to obtain elevated privileges. The CVSS vector indicates network access is required with high impact on confidentiality, integrity, and ava...
CVE-2026-59132
CVE-2026-59132 describes a null pointer dereference in Windows TCP/IP that enables a network-based denial of service by an unauthenticated attacker. Affected component is Windows TCP/IP; root cause is a null pointer dereference leading to denial of service. CVSSv3.1 base score is 7.5 (HIGH) with ...
CVE-2017-0278
CVE-2017-0278 corresponds to a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The issue is triggered by how the SMBv1 server handles certain requests, affecting multiple Windows editions (e.g., Windows 7, Windows 8.1, Windows Server 2008/2012/2016, and related .NET env...
CVE-2017-0282
CVE-2017-0282 is an information disclosure vulnerability in the Windows Uniscribe component. It affects Windows and Office products listed in the initial entry, with memory contents disclosure possible via specially crafted documents. Public sources in the connected materials confirm an informati...
CVE-2017-0299
The CVE-2017-0299 entry describes a Windows kernel information disclosure vulnerability in the NT kernel affecting multiple Windows versions (Windows 7 SP1, Windows 8.1, Windows Server 2012/2016, Windows 10 various builds, and more). The issue allows an authenticated attacker to obtain informatio...
CVE-2017-11830
CVE-2017-11830 is a Windows Device Guard security feature bypass. Connected sources describe a TOCTOU race in the WDAC cache signing path (CiSetFileCache) that can allow an unsigned file to appear signed. The issue was addressed previously via NtSetCachedSigningLevel, but public reports (Exploit-...
CVE-2017-8495
CVE-2017-8495 is a Kerberos security feature bypass in which Extended Protection for Authentication can be circumvented by tampering with the SNAME field during ticket exchange (Orpheus’ Lyre). Affected Windows family includes Windows 7 SP1, Windows Server 2008 SP2/R2, Windows 8.1, Windows RT 8.1...
CVE-2017-8708
CVE-2017-8708 affects the Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Impact is information disclosure on a range of Windows desktop/server versions (Windows 7 SP1, Windows 8.1, Windows 10 various builds, Windows Server 2008 SP2/R2 SP1, 20...
CVE-2018-0814
Technical details for CVE-2018-0814 are not publicly available in the provided Connected documents. No explicit affected products, versions, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2018-1003
CVE-2018-1003 is a buffer overflow vulnerability in the Microsoft JET Database Engine that could enable remote code execution on affected Windows systems (e.g., Windows 7, Windows 10, Windows Server variants). The connected OSV entry confirms the same description; no concrete exploit details or s...
CVE-2018-8132
Technical details about CVE-2018-8132 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2018-8212
The CVE-2018-8212 entry describes a security feature bypass in Microsoft Device Guard (Code Integrity Policy) that could allow an attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10/Windows 10 Servers. The underlying is...
CVE-2019-1018
CVE-2019-1018 (DirectX Elevation of Privilege) affects Windows DirectX and involves improper handling of objects in memory, enabling a local attacker to execute code in kernel mode and potentially install programs, view/change/delete data, or create accounts with full rights. The root cause is un...
CVE-2019-1166
CVE-2019-1166 describes a Windows NTLM tampering vulnerability: a man-in-the-middle attacker could bypass NTLM Message Integrity Check protection. The provided documents reiterate the same description and do not specify the affected Windows versions, patches, or remediation steps. No explicit exp...
CVE-2019-1212
CVE-2019-1212 describes a memory corruption vulnerability in the Windows Server DHCP service triggered when processing specially crafted packets. The flaw could allow a remote unauthenticated attacker to cause the DHCP server service to stop responding. The vulnerability affects the Windows DHCP ...
CVE-2019-1311
IBM Security Bulletin: CVE-2019-1311 is acknowledged within IBM Spectrum Symphony 7.3.1, with an interim fix that upgrades third‑party libraries to address the vulnerability. The bulletin confirms affected product version 7.3.1 and lists a remediation build: sym-7.3.1-build600124. The described C...
CVE-2019-1321
CVE-2019-1321 : An elevation-of-privilege flaw in Windows CloudStore occurs when a Discretionary Access Control List (DACL) is mishandled. Technical description across connected documents confirms the issue is a local-elevation vulnerability in Windows CloudStore. The NVD entry lists CVSS results...
CVE-2019-1359
CVE-2019-1359 is a remote code-execution issue in the Windows Jet Database Engine caused by improper handling of in-memory objects. Connected updates state that security fixes in October 2019 (KB4519990/4519998/4519985/4519338 and related MSKBs) include Microsoft JET Database Engine remediation a...
CVE-2019-1407
Technical details for CVE-2019-1407 are not publicly available in the provided Connected documents. Monitor for updates; no specifics on affected products/versions, root cause, impact, or fixes are included here.
CVE-2019-1430
CVE-2019-1430 affects Windows Media Foundation. Root cause: improper parsing of specially crafted QuickTime files, enabling remote code execution with the caller’s privileges when a user opens the tainted file. Public exploits exist; attacker must lure the user to open the QuickTime content. Miti...
CVE-2020-0704
The CVE-2020-0704 entry concerns a Windows Wireless Network Manager Elevation of Privilege vulnerability. The affected component is the Windows Wireless Network Manager, where memory is improperly handled. The root cause is a memory handling issue that allows an attacker who already has code exec...
CVE-2020-0807
Technical details for CVE-2020-0807 are not provided in the supplied documents. Monitor for updates.
CVE-2020-1203
CVE-2020-1203 is an elevation of privilege affecting the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector, caused by improper handling of memory in affected objects. The description notes this CVE is distinct from CVE-2020-1202 and does not provide explicit affected ver...
CVE-2020-1381
CVE-2020-1381 pertains to the Windows Graphics Component and is an elevation-of-privilege vulnerability caused by improper handling of objects in memory. The issue could allow a local attacker to run processes in an elevated context by executing a specially crafted application on the affected sys...
CVE-2020-1435
The CVE-2020-1435 entry refers to a remote code execution in the Windows Graphics Device Interface (GDI), via how GDI/GDI+ handles objects in memory. The connected CNVD-2021-67491 description confirms the root cause as a memory-handling problem in the Windows GDI that can be exploited to execute ...
CVE-2020-1486
The CVE-2020-1486 entry describes a Windows kernel Elevation of Privilege vulnerability caused by the kernel’s improper handling of objects in memory. An attacker who can log on could run arbitrary code in kernel mode, potentially installing programs, stealing data, or creating accounts with full...
CVE-2020-1513
CVE-2020-1513 : Elevation of privilege in the Windows CSC Service caused by improper memory handling. An attacker must gain execution locally and run a crafted application to escalate privileges. The fix is a security update that corrects how the CSC Service handles memory. No additional technica...
CVE-2020-1526
Technical details for CVE-2020-1526 are not publicly provided in the supplied documents; no specifics on affected products, root cause, or remediation are present. Monitor for updates.
CVE-2020-1548
The CVE-2020-1548 entry concerns a memory-handling information disclosure in the Windows WaasMedic Service. The vulnerability requires an attacker to first gain execution on the target, then run a crafted application to disclose memory. The affected component is Windows WaasMedic Service; the und...
CVE-2020-16974
Technical details about CVE-2020-16974 (affected product/version, root cause, impact, or patch specifics) are not provided in the connected documents. Monitor for updates.
CVE-2020-17069
Technical details about CVE-2020-17069 are not publicly available in the supplied documents. Monitor for updates from official sources for affected products, root cause, and remediation.
CVE-2021-1703
CVE-2021-1703 affects the Windows Event Logging Service and is classified as an Elevation of Privilege vulnerability (obtaining increased entitlements). Public material in the connected documents identifies Windows Event Logging Service as the affected component and notes an entitlement-raising i...
CVE-2021-24079
CVE-2021-24079 is a Windows security vulnerability described as a Windows Backup Engine Information Disclosure Vulnerability. Connected sources show a CVSSv3.1 base score of 5.5 (LOCAL, LOW attack complexity, LOW privileges required, NONE user interaction) with a Confidentiality impact of HIGH an...
CVE-2021-28348
CVE-2021-28348 is described in the NVD entry as a Windows GDI+ Remote Code Execution Vulnerability. The NVD metrics show CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attacker complexity, PRIVILEGES REQUIRED: LOW, NONE user interaction, and impacts to Confidentiality, Integrity, an...
CVE-2021-43229
CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...
CVE-2022-22000
Technical details about CVE-2022-22000 are not provided in the connected documents. The available sources confirm the vulnerability label but do not document affected products, root cause, or fixes here. Monitor for updates.
CVE-2022-22717
CVE-2022-22717 is a Windows Print Spooler elevation-of-privilege vulnerability. Affected: Windows OS with Print Spooler; the provided docs do not specify the exact root cause. CVSSv3.1 base score 7.0 (HIGH), vector LOCAL, Privileges Required LOW, User Interaction NONE, and impacts to confidential...
CVE-2022-26817
Technical details about CVE-2022-26817 (affected products, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.