4929 matches found
CVE-2023-36401
Technical details (affected product, root cause, impact, or patch) are not provided in the connected documents. Please monitor for updates from Microsoft or CVE references to get concrete details and remediation when they become available.
CVE-2024-26209
CVE-2024-26209 affects Microsoft Windows Local Security Authority Subsystem Service (LSASS). The entry describes an information disclosure vulnerability in LSASS, with a CVSS 3.1 base score of 5.5 (Medium), attack vector Local, privileges required Low, user interaction None, and a confidentiality...
CVE-2024-26218
CVE-2024-26218 is a Windows Kernel Elevation of Privilege vulnerability that Microsoft has addressed within the Windows KB updates KB5036893 and KB5036894. OpenVAS references place this CVE under Windows Kernel as enabling “elevated rights” (local, kernel-mode) with high CVSS 7.8 characteristics....
CVE-2024-30006
CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...
CVE-2024-38199
Technical details about CVE-2024-38199 are not publicly provided in the connected documents. Monitor for updates from Microsoft and NVD for affected products, fixes, and exploit information.
CVE-2021-43893
Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.
CVE-2022-21859
Technical details for CVE-2022-21859 are not publicly available in the provided documents. Monitor for updates from NVD, CVE records, and vendor advisories.
CVE-2022-22026
CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...
CVE-2022-37987
CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...
CVE-2024-20698
CVE-2024-20698 is a Windows Kernel Elevation of Privilege vulnerability. The connected exploit analysis reveals that the bug resides in ntoskrnl.exe within WbAddLookupEntryEx, which manipulates an array of process pointers. Before the patch, it reallocates and inserts a new pointer, but the patch...
CVE-2024-49082
CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...
CVE-2025-24035
CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...
CVE-2019-0966
CVE-2019-0966 describes a denial-of-service vulnerability in Microsoft Hyper-V where a host server fails to properly validate input from a privileged user on a guest OS. The issue can impact availability (CVSS3 base score 6.8, with HIGH availability impact) and is categorized as an authentication...
CVE-2021-34447
CVE-2021-34447 is tied to Windows MSHTML/Internet Explorer, with public details indicating an IE11 remote-code-execution vulnerability. Connected KB entry KB5005563 describes a cumulative security update for Internet Explorer (Sept 14, 2021) that resolves IE/MSHTML vulnerabilities and lists affec...
CVE-2021-42282
Technical details for CVE-2021-42282 are not publicly provided in the connected documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates.
CVE-2022-22027
Technical details for CVE-2022-22027 are not publicly provided in the supplied documents. Monitor for updates and availability of affected product/version, root cause, impact, or fixes.
CVE-2022-30146
Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.
CVE-2022-37958
CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...
CVE-2023-36427
CVE-2023-36427 is a Windows Hyper-V elevation-of-privilege vulnerability. The connected documents confirm its existence as part of Microsoft Patch Tuesday coverage (e.g., Windows Hyper‑V entry listed among CVEs addressed by the November 2023 security updates). Public literature in the connected c...
CVE-2025-21351
CVE-2025-21351 is a Windows AD DS API Denial of Service vulnerability. The initial record notes a network‑vector DoS impacting AD DS APIs with a CVSS v3.1 base score of 7.5 (HIGH) and no user interaction required. Connected documents indicate Microsoft has released updates addressing vulnerabilit...
CVE-2019-1155
CVE-2019-1155 is a Jet Database Engine remote code execution vulnerability in Windows. It arises from improper handling of in-memory objects, enabling an attacker to run arbitrary code on a victim system by enticing the user to open a specially crafted file. The update fixes how the Jet Database ...
CVE-2021-33764
CVE-2021-33764 is a Windows Kerberos KDC information-disclosure issue affecting domain controllers. Public details describe a RFC 4556 (section 3.2.1) noncompliance that can impact PIV/smart-card scenarios. Microsoft’s out-of-band updates note a temporary mitigation using a registry key and advis...
CVE-2022-21878
CVE-2022-21878 is a Windows Geolocation Service Remote Code Execution Vulnerability. Affected software: Windows Geolocation Service component; root cause and exact exploit path are not detailed in the provided documents. CVSS2 score is 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C); CVSS3.1 score is 7.8 (AV:L/...
CVE-2022-22037
CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...
CVE-2022-34703
Technical details for CVE-2022-34703 (affected products, root cause, impact or fixes) are not provided in the connected documents. Monitor for updates from the sources in the initial document.
CVE-2023-24929
CVE-2023-24929 corresponds to a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Connected documents confirm this is a remote-code-execution issue affecting the printer driver stack, with a high-severity CVSS and network attack potential, but do not provide ...
CVE-2024-20655
CVE-2024-20655 is a Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability. The provided documents mention this CVE in risk references and OpenVAS listings but do not supply concrete technical details such as affected product versions, root cause, or specific fix....
CVE-2024-20680
Technical details about CVE-2024-20680 (affected MSMQC, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2020-16996
CVE-2020-16996 is a Kerberos Security Feature Bypass vulnerability. The connected documents tie this CVE to Microsoft Kerberos ticket handling issues and state that security updates were released in March 2021 as part of cumulative/security rollups (e.g., KB5000847/KB5000840/KB5000848 and related...
CVE-2022-26803
Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.
CVE-2022-26812
Technical details about CVE-2022-26812 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present here. Monitor for updates.
CVE-2022-29128
Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.
CVE-2022-29135
CVE-2022-29135 is described as a Windows CSV Elevation of Privilege vulnerability. The connected documents reference CSV-related issues and protections within Microsoft security updates issued May 2022, including CVE coverage notes and known issues about CSV ownership and certificate-mapping hand...
CVE-2022-29150
CVE-2022-29150 is a Windows Cluster Shared Volume (CSV) Elevation of Privilege vulnerability. Public details in the provided documents are limited to the vulnerability title and related Microsoft security updates; no explicit root-cause, affected product/version specifics, or exploit details are ...
CVE-2022-30151
CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.
CVE-2023-36392
CVE-2023-36392 is a DHCP Server Service Denial of Service vulnerability. The available document set identifies the issue as a network-based vulnerability with high impact (Availability) and CVSS v3.1 base score 7.5, but concrete technical details such as affected product/version, root cause, or p...
CVE-2024-20682
CVE-2024-20682 concerns the Windows Cryptographic Services Remote Code Execution vulnerability. The available data show a vulnerability affecting Windows components, enabling a local attacker to achieve code execution with high impact on confidentiality, integrity, and availability. The CVSS 3.1 ...
CVE-2026-47288
CVE-2026-47288 affects Windows Kerberos Key Distribution Center (KDC). The vulnerability is an integer overflow/wraparound in the Kerberos code, enabling an authorized attacker on an adjacent network to execute code. The CVE has a CVSSv3.1 score of 7.1 ( HIGH ) with attack vector Adjacent, high i...
CVE-2018-8413
CVE-2018-8413 affects the Windows Theme API and specifically the ThemePack (CAB-based) file parser used by Windows theme files. The connected exploit entries describe a vulnerability in the ThemePack parser that allows attackers to create arbitrary files at arbitrary locations, enabling remote co...
CVE-2019-1091
Technical details about CVE-2019-1091 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2019-1246
CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...
CVE-2020-16896
CVE-2020-16896 describes an information-disclosure vulnerability in Microsoft Windows Remote Desktop Protocol (RDP). According to the linked sources, the issue arises when an attacker connects to a target system via RDP and sends specially crafted requests, potentially allowing the attacker to ob...
CVE-2022-21868
Technical details about CVE-2022-21868 are not publicly provided in the supplied documents. Monitor for updates from official sources.
CVE-2022-34710
Technical details about CVE-2022-34710 are not provided in the connected documents. No affected product/version/root-cause/fix is specified. Monitor for updates from these sources for concrete details.
CVE-2023-21543
According to NCSC-2023-0017, CVE-2023-21543 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability with CVSS v3.1 score 8.10 (impact: executing random code) affecting Windows L2TP components. The CVE is listed among other Windows network‑facing RCE bugs; no specific ex...
CVE-2023-21548
CVE-2023-21548 is a Windows SSTP remote code execution vulnerability. The connected NC Sc doc lists it under Windows SSTP with CVSS 8.10 (network context) and labels it as a SSTP issue; no explicit root-cause details or affected product versions are provided beyond “Windows SSTP.” The initial doc...
CVE-2023-29351
Technical details about CVE-2023-29351 are not publicly available in the provided documents. Monitor Microsoft and NVD for updates on affected products, impact, and remediation.
CVE-2024-20692
Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.
CVE-2025-24996
CVE-2025-24996 : Affects Windows NTLM. External control of a file name or path enables an unauthorized network spoofing scenario, potentially allowing impersonation over a network. CVSSv3.1 base 6.5 (Network attack, low complexity, no privileges required, user interaction required; CIA: high conf...