5098 matches found
CVE-2026-62792
Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...
CVE-2023-32039
Technical details about CVE-2023-32039 are not provided in the connected documents. Please monitor for updates.
CVE-2023-36871
Technical details for CVE-2023-36871 are not publicly available in the provided connected documents. No vendor/product/version specifics, exploit information, or remediation are included here. Monitor for updates from official sources.
CVE-2024-38043
Technical details for CVE-2024-38043 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates from Microsoft and CVE repositories.
CVE-2024-38048
Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.
CVE-2024-38085
Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.
CVE-2024-43628
According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...
CVE-2024-49079
Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.
CVE-2025-21200
CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...
CVE-2025-21269
CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...
CVE-2025-24995
CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...
CVE-2016-7247
CVE-2016-7247 describes a Secure Boot component vulnerability that could allow physically proximate attackers to bypass Secure Boot by crafting a boot policy, affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows RT 8.1, Windows 10 (versions 1511 and 1607), and Windows Server 2016. The Op...
CVE-2017-0056
Technical details for CVE-2017-0056 are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2017-0184
Microsoft Hyper-V remote Denial of Service vulnerability (CVE-2017-0184) arises from improper validation of input from a privileged user on a guest OS, potentially allowing a guest to crash the host. Affected component: Hyper-V on Windows Server. Consequence: denial of service impacting host avai...
CVE-2017-11788
CVE-2017-11788 affects Windows Search in multiple Windows versions (7 SP1, 8.1, 10, Server SKUs) where unauthenticated attackers can remotely send crafted messages to trigger a denial-of-service by mismanaging in-memory objects. The vulnerability is documented across NVD and CNVD entries, with Op...
CVE-2018-0881
CVE-2018-0881 concerns a privilege-elevation flaw in the Microsoft Video Control component. The vulnerability stems from how objects are handled in memory, enabling an attacker who can log on and run a crafted application to execute code with elevated/system privileges on affected Windows release...
CVE-2018-8121
Technical details for CVE-2018-8121 are not publicly available in the provided connected documents. No specific affected products, root cause, impacts, or remediation are described here; monitor for updates.
CVE-2018-8200
CVE-2018-8200 is a local security bypass in Windows Device Guard, enabling an attacker to inject malicious code into a PowerShell session by bypassing the Code Integrity Policy. Affected: Windows Server 2016, Windows 10 (and variants). Root cause: Device Guard Code Integrity Policy bypass vulnera...
CVE-2018-8221
The connected CNVD entry CNVD-2018-12041 confirms a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows 10 and Windows Server 2016 . The underlying issue is a bypass of the Device Guard/Code I...
CVE-2018-8433
Technical details about CVE-2018-8433 are not publicly provided in the connected documents. Monitor for updates.
CVE-2019-0733
Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.
CVE-2019-0734
CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...
CVE-2019-1179
CVE-2019-1179 describes an elevation-of-privilege flaw in how unistore.dll handles objects in memory. A locally authenticated attacker could execute code with elevated permissions by running a crafted application. The vulnerability is addressed by a security update that ensures unistore.dll prope...
CVE-2019-1411
CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...
CVE-2019-1488
Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.
CVE-2020-0614
Technical details about CVE-2020-0614 are not provided in the connected documents; no specifics on affected products, root cause, or remediation are available here. Monitor for updates.
CVE-2020-0617
CVE-2020-0617 relates to a Microsoft Hyper-V Denial of Service vulnerability. The CNVD entry describes that the vulnerability stems from Hyper-V Virtual PCI on the host failing to properly validate input submitted by privileged users from a guest OS, allowing an attacker with privileged access an...
CVE-2020-0621
CVE-2020-0621 is a Windows 10 security feature bypass vulnerability where third‑party filters invoked during a password update can bypass protections. Affected product: Windows 10 (password update path with third‑party filters). Root cause: bypass of security feature during password change, enabl...
CVE-2020-0737
CVE-2020-0737 is a Windows elevation-of-privilege vulnerability tied to how tapisrv.dll handles in-memory objects. The root cause is memory-objects handling in this DLL, enabling an attacker who can supply or manipulate objects to execute code with elevated privileges on affected Windows systems....
CVE-2020-0865
CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...
CVE-2020-0881
CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...
CVE-2020-0982
CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...
CVE-2020-1091
Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.
CVE-2020-1176
The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...
CVE-2020-1235
Technical details for CVE-2020-1235 are not publicly available in the provided documents. Monitoring for updates is recommended.
CVE-2020-1333
CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...
CVE-2020-1412
CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...
CVE-2020-1556
CVE-2020-1556 affects Windows WalletService. It is an Elevation of Privilege vulnerability arising from how WalletService handles objects in memory, enabling a locally authenticated attacker to run a crafted application and execute code with elevated permissions. Exploitation requires local acces...
CVE-2020-17011
CVE-2020-17011 is a Windows Port Class Library elevation of privilege vulnerability. The NVD entry lists a local, low-complexity vector with no authentication required and a high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 7.8). Connected documents identify the is...
CVE-2020-17036
CVE-2020-17036 corresponds to a Windows Function Discovery SSDP Provider Information Disclosure Vulnerability. The vulnerability affects Windows Function Discovery SSDP Provider and is described as an information disclosure issue. The provided documents do not include concrete technical details s...
CVE-2021-1685
CVE-2021-1685 is a Windows AppX Deployment Extensions Elevation of Privilege vulnerability. Affected component: Windows AppX Deployment Extensions. Exploitation is local with low attack complexity; privileges required are LOW and user interaction is not required per CVSS details, leading to parti...
CVE-2021-1710
Technical details for CVE-2021-1710 are not provided in the connected documents. The initial description only notes a Windows Media Foundation remote code execution vulnerability; no affected products, root cause, or remediation details are given here.
CVE-2021-27094
Technical details for CVE-2021-27094 are not publicly provided in the supplied documents; the entry only states a Windows Early Launch Antimalware Driver security feature bypass. Monitor for updates; no affected products, impacts, or fixes are specified here.
CVE-2021-28309
Technical details for CVE-2021-28309 (Windows Kernel Information Disclosure Vulnerability) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or remediations are disclosed here. Monitor sources for updates.
CVE-2021-43223
CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...
CVE-2021-43233
CVE-2021-43233 is a Windows Remote Desktop Client remote code execution vulnerability. Public data (NVD) rates it as CVSS v3.1 7.5 (HIGH) with NETWORK access, high attack complexity, and no privileges required, but user interaction is required. A connected document notes an additional assessment:...
CVE-2022-26797
Technical details about CVE-2022-26797 are not publicly available in the provided connected documents. Monitor for updates from official sources to obtain affected products, root cause, impact, and remediation.
CVE-2022-26820
Technical details about CVE-2022-26820 are not publicly available in the provided documents. Monitor for updates.