5098 matches found
CVE-2022-34728
CVE-2022-34728 is described as a Windows Graphics Component Information Disclosure Vulnerability. The provided metrics indicate a CVSSv3.1 base score of 5.5 (MEDIUM), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and NONE user interaction. The confidentiality impact is...
CVE-2022-35760
Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.
CVE-2023-35350
Technical details for CVE-2023-35350 are not publicly available in the provided documents. Affected product/impact/root cause are not disclosed here. Monitor for updates and official advisories.
CVE-2023-35358
CVE-2023-35358 refers to a Windows kernel registry vulnerability where an unexpected -1 cell index was observed in KCB.KeyCell, indicating that the code assumed at least one key with an allocated node in the key node stack, but differed when using layered/differencing hives and transactions. The ...
CVE-2024-30068
Technical details about CVE-2024-30068 are not provided in the supplied documents; no affected products, root cause, or fixes are disclosed here. Monitor for updates.
CVE-2024-38027
Technical details about CVE-2024-38027 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. No public disclosure details available here. Monitor for updates.
CVE-2024-38071
Technical details about CVE-2024-38071 (Windows Remote Desktop Licensing Service DoS) are not provided in the connected documents. The materials reference OS updates and general fixes but do not specify affected products/versions, exploit vectors, impact, or remediation. Monitor for updates.
CVE-2024-38073
Technical specifics for CVE-2024-38073 (Windows Remote Desktop Licensing Service DoS) are not disclosed in the provided connected documents. Affected products, vulnerable components, and fixes are not present here; monitor for official disclosures and updates.
CVE-2024-38122
Technical details about CVE-2024-38122 are not provided in the connected documents. The initial entry only labels an LSA server information disclosure without concrete details on affected products, versions, impact, or fixes; monitor for updates.
CVE-2024-38214
CVE-2024-38214 is a Windows RRAS Information Disclosure Vulnerability affecting RRAS in Windows. The provided data lists RRAS as the vulnerable component with an impact of accessing sensitive data, and references Microsoft security updates (e.g., KB5041773 and related August 2024 updates) as miti...
CVE-2024-38242
CVE-2024-38242: Kernel Streaming Service Driver Elevation of Privilege. A local attacker with low privileges can exploit this to gain SYSTEM-level access without user interaction (per CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base 7.8). Microsoft has released updates to fix the issue (e.g., ...
CVE-2024-38258
Technical details (affected product, versions, root cause, exploit info) for CVE-2024-38258 are not provided in the connected documents. Monitor official advisories for fixes and remediation guidance.
CVE-2025-21228
CVE-2025-21228 is a Windows Digital Media Elevation of Privilege vulnerability. The initial and related documents identify the issue as a Windows Digital Media component risk that could allow an attacker to obtain elevated privileges (Impact: high; Privileges Required: low; Attack Vector: physica...
CVE-2025-21237
CVE-2025-21237 is a Windows Telephony Service Remote Code Execution vulnerability. Exploitation could allow remote code execution via the Telephony Service; CVSS v3.1 base score 8.8 (HIGH) with network access, user interaction required. Affected products are Windows components where Telephony Ser...
CVE-2025-21250
CVE-2025-21250 is a Windows Telephony Service Remote Code Execution vulnerability with CVSS 3.1 base score 8.8 (Network, Low attack complexity, No privileges, User interaction required). Connected sources reference the Windows Telephony Service as the affected component and indicate in CIRCL that...
CVE-2025-24056
CVE-2025-24056 is a heap-based buffer overflow in the Windows Telephony Server that allows a network-based attacker to execute arbitrary code on affected systems. The issue is described as remote code execution with network access (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and a base score of 8.8 (HIG...
CVE-2025-24987
CVE-2025-24987 is a Windows USB Video Driver vulnerability described as an out-of-bounds read that can allow an authorized attacker to elevate privileges with physical access. The issue affects the Windows USB Video Driver component and is associated with high impact on confidentiality, integrity...
CVE-2026-21530
CVE-2026-21530 : A double-free vulnerability in Windows Rich Text Edit is described as enabling an authorized attacker to perform local privilege escalation. The connected documents confirm the affected component and the local-privilege-elevation impact but do not provide exploit details, specifi...
CVE-2026-54128
CVE-2026-54128 is a Windows DHCP Client use-after-free vulnerability that could allow an unauthenticated local attacker to execute code. The issue, described in the NVD entry and echoed by TALOS, affects the Windows DHCP Client component and is known to have been exploited in the wild (per CIRCL ...
CVE-2017-0121
CVE-2017-0121 is an information disclosure vulnerability in Microsoft Windows Uniscribe. The vulnerability allows a remote attacker to obtain sensitive information from the memory of a process by luring a user to a crafted web site. Affected are Windows Vista SP2, Windows Server 2008 SP2 and R2 S...
CVE-2017-11880
CVE-2017-11880 affects the Windows kernel across multiple OS versions (Windows 7 SP1, Server 2008 SP2/R2 SP1, 8.1, 2012/2012 R2, 10 1511/1607/1703, Server 2016). It enables an attacker to run a specially crafted application to obtain information and further compromise the system due to the kernel...
CVE-2017-8491
Technical details about CVE-2017-8491 are not publicly provided in the supplied documents; monitor for updates.
CVE-2017-8576
CVE-2017-8576 affects the Windows Graphics Component in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. An authenticated attacker can run arbitrary code in kernel mode by presenting a specially crafted application, enabling elevation of privilege. The issue is rooted in how the Windo...
CVE-2018-0975
CVE-2018-0975 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to obtain information leading to a Kernel ASLR bypass. The Initial document lists affected Windows platforms (Windows 7, Windows Server 2008/2012/2016, Windows 8.1, Windows 10 and correspo...
CVE-2018-8231
CVE-2018-8231 is a remote code execution vulnerability in Microsoft Windows HTTP.sys. The flaw occurs when Http.sys improperly handles objects in memory, allowing an attacker to gain control of the affected system by sending specially crafted requests. Affected products include Windows Server 201...
CVE-2019-1230
The CVE-2019-1230 entry describes an information-disclosure vulnerability in Microsoft Windows Hyper-V, where the Hyper-V Network Switch fails to properly validate input from an authenticated user on a guest OS. The root cause is a flawed input-validation path within the Hyper-V network switch, e...
CVE-2019-1286
CVE-2019-1286 concerns a Windows GDI information disclosure vulnerability. The connected materials describe an information disclosure in the Graphics Device Interface (GDI) where memory contents may be improperly disclosed. The vulnerability is tied to the GDI component and memory handling. The s...
CVE-2019-1394
Technical details about CVE-2019-1394 are not provided in the connected documents. Monitor for updates from official advisories; the supplied EUVD entries relate to unrelated malware listings and do not illuminate this CVE.
CVE-2020-0627
Technical details for CVE-2020-0627 are not publicly available in the provided documents; no affected products or fixes are specified. Monitor for updates.
CVE-2020-0628
Technical details for CVE-2020-0628 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-0636
CVE-2020-0636 is a Windows Subsystem for Linux elevation-of-privilege vulnerability. The issue arises from how WSL handles files, enabling a local attacker to execute code with elevated privileges if they gain code execution on the system. Microsoft’s MSRC advisory notes the vulnerability could a...
CVE-2020-0842
CVE-2020-0842 is a Windows Installer elevation-of-privilege vulnerability. It arises from how Windows Installer handles certain filesystem operations, enabling an unprivileged attacker to execute code on the victim system with local access. The entry is part of a set of CVEs linked to Windows Ins...
CVE-2020-1021
Technical details for CVE-2020-1021 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are specified here. Monitor for updates.
CVE-2020-1067
CVE-2020-1067 is a remote code execution vulnerability in Windows, caused by how the OS handles objects in memory. The NVD entry notes a network-based attack vector with low attack complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability (CV...
CVE-2020-1287
CVE-2020-1287 is a Windows WalletService elevation of privilege vulnerability. The WalletService stores/handles objects in memory in a way that can be exploited to elevate privileges; both CNVD entries (CNVD-2021-27713, CNVD-2021-29542) describe this WalletService memory-object handling flaw with...
CVE-2020-1348
CVE-2020-1348 is a Microsoft Windows GDI Information Disclosure vulnerability. According to the initial description, it arises from the GDI component improperly disclosing memory contents, enabling information disclosure with partial confidentiality impact (CVSSv3 base score 6.5). OpenVAS-derived...
CVE-2020-1407
Technical details for CVE-2020-1407 are not provided in the supplied documents. The description mentions the Jet Database Engine RCE but no affected product/version specifics or remediation are included here. Monitor for updates.
CVE-2020-1422
Technical details about CVE-2020-1422 are not publicly provided in the supplied connected documents. Monitor for updates from authoritative sources to obtain affected products, impact, and remediation.
CVE-2020-17027
Technical details about CVE-2020-17027 are not present in the provided documents; no specific affected products, root cause, impact, or remediation are disclosed. Monitor for updates.
CVE-2020-17041
CVE-2020-17041 technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2021-1672
CVE-2021-1672 refers to a Windows vulnerability in the Projected File System (PFS) FS Filter Driver that enables information disclosure. The connected MSRC entry and NVD record confirm the affected component is the Windows PFS FS Filter Driver, with root cause described as an information disclosu...
CVE-2021-1708
Technical details for CVE-2021-1708 are not provided in the supplied documents. Monitor for updates; no affected products, impact, or remediation details can be confirmed from the available sources.
CVE-2021-1734
CVE-2021-1734 is described as a Windows Remote Procedure Call Information Disclosure vulnerability. The provided metrics show CVSS v3.1 base score 7.5 (HIGH) with a network attack vector, low attack complexity, no privileges required, no user interaction, and an impact of high confidentiality los...
CVE-2021-28314
Technical details such as affected products, vulnerable components, exploit method, affected versions, and remediation specifics for CVE-2021-28314 are not provided in the connected documents; monitor for updates.
CVE-2021-28328
Technical details for CVE-2021-28328 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official advisories and vulnerability feeds.
CVE-2022-26821
Technical details about CVE-2022-26821 are not publicly provided in the supplied documents. Monitor for updates from official advisories and referenced sources.
CVE-2022-35747
Technical details for CVE-2022-35747 are not provided in the connected documents. No affected products, root cause, impacts, or fixes are specified beyond the generic description. Monitor for updates for public disclosure and remediation guidance.
CVE-2022-35759
Technical details for CVE-2022-35759 (affected product, root cause, impact, and fix) are not provided in the connected documents. Monitor for updates.