5098 matches found
CVE-2018-8200
CVE-2018-8200 is a local security bypass in Windows Device Guard, enabling an attacker to inject malicious code into a PowerShell session by bypassing the Code Integrity Policy. Affected: Windows Server 2016, Windows 10 (and variants). Root cause: Device Guard Code Integrity Policy bypass vulnera...
CVE-2021-1661
Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.
CVE-2018-8221
The connected CNVD entry CNVD-2018-12041 confirms a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session, affecting Windows 10 and Windows Server 2016 . The underlying issue is a bypass of the Device Guard/Code I...
CVE-2018-8433
Technical details about CVE-2018-8433 are not publicly provided in the connected documents. Monitor for updates.
CVE-2019-0733
Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.
CVE-2019-0734
CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...
CVE-2019-1022
CVE-2019-1022 describes a local elevation-of-privilege in Windows Audio Service. The vulnerability arises from how the service handles certain process-related requests; a crafted, local application could enable an attacker to execute code with elevated privileges, potentially compromising the hos...
CVE-2019-1411
CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...
CVE-2020-0621
CVE-2020-0621 is a Windows 10 security feature bypass vulnerability where third‑party filters invoked during a password update can bypass protections. Affected product: Windows 10 (password update path with third‑party filters). Root cause: bypass of security feature during password change, enabl...
CVE-2020-0779
CVE-2020-0779 is described as an elevation of privilege vulnerability in Windows Installer, arising when MSI packages process symbolic links. The affected component is Windows Installer (MSI) handling of symbolic links, enabling a local attacker to escalate privileges by bypassing access restrict...
CVE-2020-0838
CVE-2020-0838 describes an elevation-of-privilege vulnerability in Windows NTFS where access checks are insufficiently performed. An attacker who can log on locally and run a specially crafted application could execute code in an elevated context, potentially gaining full control of the affected ...
CVE-2020-0881
CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...
CVE-2020-0982
CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...
CVE-2020-1091
Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.
CVE-2020-1235
Technical details for CVE-2020-1235 are not publicly available in the provided documents. Monitoring for updates is recommended.
CVE-2020-1282
Technical details for CVE-2020-1282 are not provided in the connected documents. Based on the initial entry, no explicit exploit vectors, impacted products, or remediation are disclosed here; monitor for official updates.
CVE-2020-1333
CVE-2020-1333 is an elevation of privilege vulnerability in Microsoft Windows and Windows Server caused by Group Policy Services Policy Processing failing to properly handle reparse points. The CNVD-2020-52916 entry confirms the root cause as the policy processing re-resolution issue and lists Wi...
CVE-2020-1412
CNVD-2021-67490 identifies a Microsoft Windows/Windows Server remote code execution vulnerability stemming from how Graphics Components handles in-memory objects. Affected product scope is Windows/Windows Server with Graphics Components implicated; root cause is in-memory object handling in Graph...
CVE-2020-1556
CVE-2020-1556 affects Windows WalletService. It is an Elevation of Privilege vulnerability arising from how WalletService handles objects in memory, enabling a locally authenticated attacker to run a crafted application and execute code with elevated permissions. Exploitation requires local acces...
CVE-2020-17010
CVE-2020-17010 is a local Win32k elevation-of-privilege vulnerability in Microsoft Windows. It affects Win32k/Windows components and could allow an attacker to obtain SYSTEM-level privileges on a vulnerable host, with CVSS indicating LOCAL access, LOW attack complexity, and HIGH impact to confide...
CVE-2020-17011
CVE-2020-17011 is a Windows Port Class Library elevation of privilege vulnerability. The NVD entry lists a local, low-complexity vector with no authentication required and a high impact on confidentiality, integrity, and availability (CVSS v3.1 base score 7.8). Connected documents identify the is...
CVE-2021-1685
CVE-2021-1685 is a Windows AppX Deployment Extensions Elevation of Privilege vulnerability. Affected component: Windows AppX Deployment Extensions. Exploitation is local with low attack complexity; privileges required are LOW and user interaction is not required per CVSS details, leading to parti...
CVE-2021-1710
Technical details for CVE-2021-1710 are not provided in the connected documents. The initial description only notes a Windows Media Foundation remote code execution vulnerability; no affected products, root cause, or remediation details are given here.
CVE-2021-36973
Technical details about CVE-2021-36973 (affected components, root cause, impact, vulnerable versions, and fixes) are not provided in the connected documents. Monitor official sources (Microsoft security guidance, NVD) for updates and remediation information.
CVE-2021-43223
CVE-2021-43223 affects the Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. The NVD entry provides CVSS v3.1 details: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with a base score of 7.8 (HIGH). The vector indicates a local attacker with low privileges...
CVE-2022-35795
Technical details for CVE-2022-35795 are not provided in the connected documents; the materials here do not reveal affected products, root cause, or remediation. Monitor for updates from official sources.
CVE-2023-35318
Technical details about CVE-2023-35318 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.
CVE-2023-35357
CVE-2023-35357 is a Windows Kernel local privilege escalation stemming from registry hive memory corruption. The material shows how an attacker can leverage an out-of-bounds hive cell index to manipulate the CMHIVE/HHIVE, potentially reading/writing kernel memory via hacks like the registry value...
CVE-2024-30062
CVE-2024-30062 affects Windows Standards-Based Storage Management Service. The connected data documents confirm a local, user-interaction–required remote code execution vulnerability in Windows Storage components, with CVSSv3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (base 7.8). The issue is tied to...
CVE-2024-30076
Technical details for CVE-2024-30076 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official vulnerability databases.
CVE-2024-30082
Technical details about CVE-2024-30082 are not provided in the connected documents. The supplied materials contain no concrete product/version/root-cause/impact/fix information. Monitor official advisories for updates and remediation guidance.
CVE-2024-38022
Technical details about CVE-2024-38022 are not provided in the connected documents; no affected products, root cause, or fixes are described here. Monitor for updates from official sources.
CVE-2024-38028
Technical details for CVE-2024-38028 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified. Monitor for updates.
CVE-2024-38053
Technical details for CVE-2024-38053 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.
CVE-2024-38116
Technical details for CVE-2024-38116 are not publicly available in the provided documents; monitor for updates.
CVE-2024-38143
CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...
CVE-2024-49104
The connected NCSC advisory (EUVD/NCSC) lists CVE-2024-49104 under Windows Routing and Remote Access Service (RRAS) with a high impact: Execution of arbitrary code (CVSS 8.80). The RRAS entry is described as vulnerable to arbitrary code execution, but the document does not provide root cause spec...
CVE-2025-21225
Technical details about CVE-2025-21225 (WindowsRD Gateway Denial-of-Service) are not provided in the connected documents. Public details appear only as vulnerability entries; monitor official advisories and patch guidance for remediation and impact updates.
CVE-2025-21281
CVE-2025-21281 is a Microsoft Windows COM elevation-of-privilege vulnerability. The CVE entry maps to Windows COM with a high CVSS v3.1 score (7.8, LOW_PRIVILEGES, LOCAL vector; no user interaction; confidentiality/integrity/availability impact: HIGH). The connected documents identify the affecte...
CVE-2025-26670
CVE-2025-26670 is a Windows LDAP use-after-free vulnerability that enables remote code execution over the network. The available connected sources confirm the issue affects Windows LDAP and describe the underlying cause as a use-after-free condition, with the impact explicitly stated as remote co...
CVE-2016-7238
CVE-2016-7238 is a local privilege-escalation vulnerability in Windows NTLM password-change caching across multiple Windows versions (Vista through Windows Server 2016). An attacker with local access could craft an application to trigger privilege escalation. The issue arises from incorrect cachi...
CVE-2017-0076
Summary of CVE-2017-0076 and related entries : The vulnerability affects Hyper-V in multiple Windows platforms (Vista SP2; Server 2008 SP2/2008 R2; Windows 7 SP1; Windows 8.1; Server 2012/2012 R2; Windows 10 versions 1511/1607; and Windows Server 2016). The issue allows a guest OS user running in...
CVE-2017-0171
CVE-2017-0171 is a Windows DNS Server denial-of-service vulnerability. The affected products include Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 Gold and R2, and Windows Server 2016, where the DNS service could be overwhelmed when answering version queries, leading to a denial of serv...
CVE-2017-0296
CVE-2017-0296 affects Windows platforms (Windows 7 SP1 to Windows Server 2016) with a privilege-escalation via tdx.sys due to a missing length check when copying memory. The affected component is tdx.sys; root cause is inadequate buffer length validation. Impact per description: privilege escalat...
CVE-2017-11783
CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...
CVE-2018-0973
Technical details for CVE-2018-0973 are not publicly available in the provided documents. The connected EUVD and CIRCL entries do not reveal affected products, impacts, or fixes for this CVE. Monitor sources for updates.
CVE-2018-8170
CVE-2018-8170 is a Windows kernel image elevation-of-privilege vulnerability affecting Windows 10 and Windows 10 Server builds. The issue arises from how the Windows kernel image handles objects in memory, enabling an attacker who can run a locally crafted application to execute code with elevate...
CVE-2018-8201
CVE-2018-8201 describes a security feature bypass in Microsoft Device Guard that could allow a local attacker to inject malicious code into a Windows PowerShell session. Affected products include Windows Server 2016 and Windows 10 (including Windows 10 servers). The vulnerability stems from bypas...
CVE-2018-8462
CVE-2018-8462 is a local elevation-of-privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver. The CNVD entry states that the DXGKRNL driver’s handling of memory objects is vulnerable, enabling privilege escalation on Windows platforms (Windows Server 2016 and Windows 10 family). ...