5098 matches found
CVE-2025-21296
CVE-2025-21296 corresponds to a BranchCache remote code execution vulnerability in Microsoft BranchCache. Connected sources describe BranchCache as a WAN optimization feature and indicate a vulnerability that could allow remote code execution. The CVE entry itself lists a 7.5 CVSSv3.1 score with ...
CVE-2020-1365
Technical details about CVE-2020-1365 are not publicly provided in the connected documents. The Windows Event Logging Service elevation-of-privilege vulnerability lacks product/version/impact/fix specifics here. Monitor sources for updates and confirmed technical details.
CVE-2021-43231
Technical details for CVE-2021-43231 are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, impact, and remediation information.
CVE-2024-37987
Technical details about CVE-2024-37987 are not provided in the given documents; no affected products, versions, root cause, impact, or fixes are described. Monitor for updates from vendors and security advisories.
CVE-2024-37988
Technical details for CVE-2024-37988 are not publicly available in the provided documents. No information on affected products, root cause, impact, or fixes is present here. Monitor for updates from the referenced sources and connected advisories.
CVE-2024-38056
Technical details about CVE-2024-38056 are not publicly provided in the connected documents. The entry is listed, but no affected products, root cause, impact, or fixes are described here.
CVE-2024-38065
Technical details about CVE-2024-38065 (affected product/component/impact) are not provided in the supplied documents. No concrete exploit or remediation information is available here. Monitor for official disclosures and updated advisories.
CVE-2024-38099
Technical details about CVE-2024-38099 (Windows Remote Desktop Licensing Service DoS) are not provided in the supplied documents. Monitor for official advisories for affected products, impact, and fixes.
CVE-2024-38105
CVE-2024-38105 details are not publicly available in the provided documents. Monitor for updates; no specifics on vulnerable components, impact, or fixes are included here.
CVE-2024-38120
CVE-2024-38120 is a Windows RRAS Remote Code Execution vulnerability in the Routing and Remote Access Service. The CVSSv3.1 vector shows NETWORK attack vector, LOW complexity, and NONE privileges required with UI interaction, yielding a HIGH impact on confidentiality, integrity, and availability....
CVE-2024-43511
Technical details about CVE-2024-43511 are not provided in the supplied documents. Public information beyond basic CVSS data is not included here; monitor for updates.
CVE-2024-43544
CVE-2024-43544 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables Denial of Service over a network with no authentication or user interaction; CVSS v3.1 base score 7.5 (HIGH) with Availability impact. Connected sources corroborate the DoS impact and ca...
CVE-2025-21202
CVE-2025-21202 is a Windows Recovery Environment Agent elevation-of-privilege vulnerability. The consolidated sources show an impact of obtaining elevated privileges (CVE mapped under Windows Recovery Environment Agent) with a CVSS-like score around 6.1 (Medium) and physical access as a considera...
CVE-2025-21290
The CVE-2025-21290 vulnerability affects Microsoft Message Queuing (MSMQ) and is a Denial of Service issue exploitable over the network. The provided data show a CVSS v3.1 base score of 7.5 (HIGH) with attack vector Network and no user interaction required. The root cause detail is not explicitly...
CVE-2025-27471
CVE-2025-27471 affects Microsoft Windows Streaming Service. Technical details in connected docs confirm that the vulnerability arises from sensitive data storage in improperly locked memory, enabling a network-based Denial of Service. The CVSS v3.1 base score is 5.9 (Network, High attack complexi...
CVE-2025-33064
CVE-2025-33064 affects Windows Routing and Remote Access Service (RRAS). It is a heap-based buffer overflow that allows an authenticated attacker to execute code over the network. CVSS v3.1 base score 8.8 (HIGH). Affected component: RRAS on Windows. Root cause: heap-based overflow in RRAS handlin...
CVE-2026-58640
CVE-2026-58640 is a heap-based buffer overflow in Windows NTFS that enables an authorized local attacker to execute code. The vulnerability is tied to Windows NTFS logic and has a CVSS v3.1 score of 7.3 (HIGH) with local access required and user interaction. Affected component: Windows NTFS; root...
CVE-2017-0163
CVE-2017-0163 affects Windows Server Hyper-V Network Switch, allowing remote code execution when input from a guest OS is not properly validated. The underlying issue is improper validation of guest-supplied input, enabling an attacker with guest access to execute arbitrary code on the host. Publ...
CVE-2017-0188
CVE-2017-0188 concerns a Win32k information-disclosure vulnerability in Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10, and Windows Server 2016. The win32k component improperly provides kernel information, enabling an attacker who can exploit the issue to obtain information that coul...
CVE-2017-0192
The CVE-2017-0192 entry describes an information disclosure in the Microsoft Windows ATMFD.dll (Adobe Type Manager Font Driver). Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, and Windows 10 bui...
CVE-2017-0297
Technical details (affected products, root cause, impact, remediation) are not publicly available in the provided connected documents. Monitor for updates from official advisories.
CVE-2017-8470
Technical details for CVE-2017-8470 are not publicly available in the provided documents; monitor for updates from Microsoft/MSRC and security vendors.
CVE-2019-1090
CVE-2019-1090 is a Windows elevation-of-privilege vulnerability in dnsrslvr.dll caused by how objects are handled in memory. Attack remains local with no user interaction required per the CVSS vectors, and the impact is described as complete confidentiality, integrity, and availability loss if ex...
CVE-2019-1272
Connected sources confirm a Windows privilege escalation vulnerability related to ALPC in Microsoft Windows/Windows Server. The issue arises from improper handling of ALPC calls, allowing an attacker who logs on to the system to run arbitrary code in the security context of the local system (loca...
CVE-2019-1334
Technical details about CVE-2019-1334 are not publicly available in the provided connected documents. Monitor for updates; no affected products, root cause, or fixes are described here.
CVE-2020-0722
Technical details for CVE-2020-0722 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2020-0809
CVE-2020-0809 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. Affected component: Windows Media Foundation in Windows. Reported impact is high (CVE with base score 8.8/9.3) per NVD metrics, but no exploitation details or fixes are...
CVE-2020-0843
CVE-2020-0843 is a local elevation-of-privilege vulnerability in Windows Installer. The issue arises from how Windows Installer handles certain filesystem operations, allowing an unprivileged attacker on the victim system to compromise the host. CVSSv3.1 base score is 7.8 (HIGH) with local exploi...
CVE-2020-0908
CVE-2020-0908 is a remote code execution vulnerability in the Windows Text Service Module. The issue arises from improper memory handling within TSM, enabling an attacker to execute code on a target system, typically by convincing a user to visit a specially crafted webpage or open content. Explo...
CVE-2020-0921
Technical details about CVE-2020-0921 are not provided in the connected documents; the materials reference the vulnerability in general terms related to Microsoft Graphics components but do not specify affected products/versions, root cause, or remediation. Monitor for updates.
CVE-2020-0955
Technical details for CVE-2020-0955 are not publicly provided in the supplied documents. Monitor official advisories for updates; current sources only describe an information-disclosure via CPU memory access without specifics.
CVE-2020-1033
CVE-2020-1033 (Windows Kernel Information Disclosure) The vulnerability is an information disclosure in the Windows kernel where objects in memory are improperly handled. An authenticated attacker could exploit this by running a specially crafted application to obtain information that could help ...
CVE-2020-1047
CVE-2020-1047 is an elevation-of-privilege vulnerability in Windows Hyper-V where memory object handling can allow an attacker to gain elevated privileges on the host OS. The flaw itself does not enable arbitrary code execution in isolation, but could be combined with other vulnerabilities (e.g.,...
CVE-2020-1209
CVE-2020-1209 is a local elevation-of-privilege vulnerability in the Windows Network List Service. The issue arises from improper handling of in-memory objects within this service, enabling a locally authenticated attacker to execute code with elevated privileges. Public docs within the connected...
CVE-2020-1238
CVE-2020-1238 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. It affects Windows Media Foundation components; exploitation could allow memory corruption within the affected process, with CVSS indicating high impact (exploitability...
CVE-2020-1241
CVE-2020-1241 is a Windows Kernel security feature bypass vulnerability. It arises when the Kernel fails to properly sanitize certain parameters, allowing a locally authenticated attacker to run a crafted application to bypass security checks. The vulnerability is addressed by updates that correc...
CVE-2020-1268
CVE-2020-1268 is a Windows information-disclosure vulnerability where a Windows service improperly handles objects in memory. Exploitation requires an attacker to log on to the affected system and run a crafted application; the flaw does not in itself enable code execution or privilege escalation...
CVE-2020-1344
CVE-2020-1344 is a Windows WalletService elevation-of-privilege vulnerability rooted in how WalletService handles objects in memory, potentially allowing a crafted app to execute code with elevated privileges. Related entries (CVE-2020-1362/1369) describe the same WalletService memory-handling th...
CVE-2020-1368
CVE-2020-1368 is a Windows elevation-of-privilege vulnerability in the Windows Credential Enrollment Manager Service. The CNVD entry states that the issue stems from how the Credential Enrollment Manager Service handles objects in memory, which an attacker can exploit by running a specially craft...
CVE-2020-1411
Technical details about CVE-2020-1411 (affected product, root cause, impact, or remediation) are not publicly provided in the connected documents. Monitor for updates.
CVE-2020-17029
CVE-2020-17029 is a Windows Canonical Display Driver Information Disclosure Vulnerability. Affected software: Windows Canonical Display Driver. Root cause: information disclosure vulnerability within the Canonical Display driver. Impact: confidentiality impact HIGH (per CVSS 3.1), with local atta...
CVE-2020-17046
Technical details for CVE-2020-17046 are not provided in the supplied documents. Public information is limited to basic description; monitor for updates.
CVE-2020-17056
Technical details about CVE-2020-17056 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents. Monitor official advisories for updates.
CVE-2020-17075
CVE-2020-17075 corresponds to a Windows USO Core Worker elevation-of-privilege vulnerability. According to the linked NVD entry, the vulnerability has a CVSS v3.1 base score of 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; no user interaction needed. Th...
CVE-2021-1693
Technical details about CVE-2021-1693 are not provided in the connected documents. The initial description remains high‑level; monitor official advisories for updates to obtain affected products, impact, and fixes.
CVE-2021-24090
CVE-2021-24090 is a Windows Elevation of Privilege affecting Windows Error Reporting (WER). The connected records identify the affected component as Windows Error Reporting and classify the vulnerability as privilege escalation with impact on confidentiality, integrity, and availability (per CVSS...
CVE-2023-35338
Technical details for CVE-2023-35338 (affected components, root cause, exploits, or fixes) are not provided in the connected documents. Monitor for updates from official sources.
CVE-2024-38046
CVE-2024-38046 is described as a local privilege-escalation vulnerability in PowerShell. The primary public documentation (NVD/NCSC) confirms a local attacker with low privileges could elevate privileges on affected Windows components, with a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Require...
CVE-2024-38151
Technical details (affected product/component/root cause/impact/fix) for CVE-2024-38151 are not provided in the connected documents. Only the label “Windows Kernel Information Disclosure” with CVSS 5.5 is given; monitor for updates.