4929 matches found
CVE-2019-0986
CVE-2019-0986 affects the Windows User Profile Service (ProfSvc) and concerns improper handling of symlinks. The vulnerability enables elevation of privilege, allowing an attacker who can log on to run a crafted application that could delete files or folders in an elevated context. The impact is ...
CVE-2022-34696
Technical details for CVE-2022-34696 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation are included. Monitor for updates.
CVE-2026-49798
CVE-2026-49798 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation. The root cause is use-after-free in kernel code, allowing an unauthenticated attacker with local access to elevate privileges. Affected component details are limited in the provided documents;...
CVE-2026-58594
CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...
CVE-2019-0755
CVE-2019-0755 is a Windows kernel information-disclosure vulnerability. The connected sources describe an issue where the Windows kernel improperly handles or initializes objects in memory, enabling local access-based information disclosure with high confidentiality impact (per CVSS3 vector: loca...
CVE-2019-1149
CVE-2019-1149 is a remote code execution vulnerability in the Windows font library caused by improper handling of embedded fonts (Microsoft Graphics Remote Code Execution). It can allow an attacker to take control of the system, install programs, or modify data after successful exploitation via w...
CVE-2019-1241
Technical details for CVE-2019-1241 are not provided in the connected documents; only related Jet Database Engine vulnerabilities (e.g., CVE-2019-1246) are described. Monitor for updates.
CVE-2021-34442
CVE-2021-34442 is a remote code execution vulnerability in Windows DNS Server. Affected component: Windows DNS Server; vulnerability type: Remote Code Execution; root cause and exploit specifics are not detailed in the connected documents, but CVSS metrics are provided: CVSS v3.1 base score 7.5 (...
CVE-2021-34534
CVE-2021-34534 is a Windows MSHTML Platform Remote Code Execution vulnerability. Affects the Windows MSHTML Platform component; CVSSv3.1 base score 7.5 (HIGH) with network access required and user interaction required. Exploitation vectors, root cause, and exact affected versions are not detailed...
CVE-2022-30194
Technical details about CVE-2022-30194 are not publicly provided in the supplied documents; no affected products, exploit info, or remediation details are included. Monitor for updates.
CVE-2022-34302
CVE-2022-34302 affects signed bootloaders in the UEFI Secure Boot chain (New Horizon Datasys bootloader). An attacker can bypass Secure Boot and load unsigned code in the pre-boot stage by replacing the currently used signed bootloader. This requires access to the EFI System Partition to boot wit...
CVE-2022-41118
Technical details about CVE-2022-41118 are not provided in the supplied documents. No product/vendor/version or exploit information is available here. Monitor for updates from official sources; further details and remediation would require vendor advisories.
CVE-2023-21805
Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.
CVE-2023-23423
CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...
CVE-2023-28216
Technical details about CVE-2023-28216 are not publicly available in the provided documents. Monitor for updates.
CVE-2024-28899
Technical details for CVE-2024-28899 are not publicly available in the provided documents. No affected products, root cause, exploit info, or remediation are specified here; monitor for updates.
CVE-2024-28924
Technical details about CVE-2024-28924 are not publicly provided in the connected documents. Monitor for updates from Microsoft, NVD, or CVE editors for affected products, impact, root cause, and available fixes.
CVE-2024-30037
The CVE-2024-30037 entry affects Windows Common Log File System Driver and is categorized as a local Elevation of Privilege vulnerability (requires local access; may grant elevated privileges). The connected documents corroborate the CVE mapping and indicate it is part of a set of Windows fixes; ...
CVE-2024-30038
CVE-2024-30038 is a Win32k local privilege escalation vulnerability. The issue exists in Win32k’s kernel-user boundary; exploitation would require local access with low privileges and no user interaction, potentially granting HIGH confidentiality/integrity/availability impact. Microsoft has issue...
CVE-2024-49019
CVE-2024-49019 affects Active Directory Certificate Services (AD CS) and enables privilege escalation. The connected exploit resource demonstrates misuse of certificate-based authentication to obtain domain admin rights (e.g., requesting and using a certificate to gain LDAP/administrative access,...
CVE-2019-0847
Technical details for CVE-2019-0847 are not publicly available in the provided documents; no affected product/version, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2019-0879
Technical details about CVE-2019-0879 are not publicly provided in the supplied documents. The connected EUVD/CNVD entries reference the Jet Database Engine remote code execution but do not include affected versions, exploit info, or fixes. Monitor for updates.
CVE-2021-34456
Technical details for CVE-2021-34456 are not provided in the supplied documents. No affected product/version is specified here; monitor for updates from official sources for public details and remediation.
CVE-2021-42279
CVE-2021-42279 concerns a memory corruption vulnerability in the Chakra Scripting Engine / ChakraCore. Connected sources indicate an out-of-bounds write as the root cause, enabling memory corruption with a network-accessible context and high impact characteristics (I/H, A/H) per CVSS details, tho...
CVE-2022-30206
CVE-2022-30206 is a Windows Print Spooler Elevation of Privilege vulnerability. The connected exploit PoC demonstrates local EoP by abusing the Print Spooler to delete an arbitrary TargetFile via a spooler-related file operation (creating a printer, setting SpoolDirectory, triggering an oplock on...
CVE-2022-38047
CVE-2022-38047 is a Windows Point‑to‑Point Tunneling Protocol (PPTP) remote code execution vulnerability. The CVE affects the PPTP component in Windows, with a network‑level attack surface, high impact (C/H/I/A all high) and no user interaction required per CVSS v3.1. Connected sources corroborat...
CVE-2023-24901
CVE-2023-24901 maps to a Windows NFS Portmapper Information Disclosure vulnerability. The NVD record lists a CVSS v3.1 base score of 7.5 (HIGH) with Network attack vector, low attack complexity, no privileges required, no user interaction, and a confidentiality impact of HIGH (I and A mostly unaf...
CVE-2024-28921
CVE-2024-28921 is a Windows Secure Boot security feature bypass vulnerability. The CVE entry is supported by multiple sources (NVD/NCSC/related feeds) indicating a local-attack-path bypassing Secure Boot with elevated privileges required and no user interaction. The CVSS vector shows: Local attac...
CVE-2019-0625
Technical details for CVE-2019-0625 are not publicly available in the provided documents. Monitor for updates; current sources confirm a Jet Database Engine remote code execution vulnerability but do not expose affected products, versions, or fixes in this set.
CVE-2019-0795
Technical details for CVE-2019-0795 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are stated. Monitor for updates from connected sources.
CVE-2019-1184
CVE-2019-1184 is a Windows elevation-of-privilege issue in the Windows Core Shell COM Server Registrar that arises from improperly handling COM calls. Exploitation requires a logged-on user who runs a specially crafted application, enabling higher-privilege execution on an affected system. Affect...
CVE-2020-0607
CVE-2020-0607 is an information disclosure vulnerability in Microsoft Windows Graphics Components related to how memory objects are handled. The issue could allow partial disclosure of information (CVSS2: Confidentiality Partial; AV:N/AC:M/Au:N/I:N/A:N) with a local-style potential exploit (CVSS3...
CVE-2021-34497
CVE-2021-34497 corresponds to a Windows MSHTML Platform Remote Code Execution vulnerability. Public details in the provided connected documents show the affected surface includes Internet Explorer/MSHTML components and the associated patch KB5005563 (Cumulative security update for Internet Explor...
CVE-2022-21869
Technical details about CVE-2022-21869 (Clipboard User Service Elevation of Privilege) are not provided in the connected documents. Monitor for updates; current sources do not publicly disclose affected products, root cause, impact, or fixes in this dataset.
CVE-2022-26814
Technical details about CVE-2022-26814 (Windows DNS Server RCE) are not publicly provided in the connected documents. The CVE appears alongside DNS-related fixes in Microsoft updates, but explicit affected versions, root cause, or patch information is not present here.
CVE-2022-35820
Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.
CVE-2022-41048
Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.
CVE-2023-21527
CVE-2023-21527 is a Denial-of-Service vulnerability in the Windows iSCSI Service. The connected NCSc advisory explicitly lists CVE-2023-21527 under Windows iSCSI with a DoS impact. The initial record assigns CVSS v3.1: 7.5 (Network, High, Availability impact) with no documented exploitation statu...
CVE-2023-23393
CVE-2023-23393 is a Windows BrokerInfrastructure Service elevation-of-privilege issue. Documented impact is local, with high confidentiality, integrity, and availability impact; requires low privileges and no user interaction. Remediation details in provided sources point to Microsoft security up...
CVE-2023-23394
Technical details for CVE-2023-23394 are not provided in the connected documents. They reference CSRSS generally and Windows updates (DCOM hardening, LSASS, domain join issues) but do not specify affected products/versions or exploit details. Monitor for updates.
CVE-2023-29358
CVE-2023-29358 is a Windows GDI Elevation of Privilege vulnerability. Per the sources, it is a LOCAL, low-attack-complexity issue with LOW privileges required, and it has HIGH confidentiality, integrity, and availability impact. The connected documents corroborate the Windows context and do not p...
CVE-2024-26180
Technical details about CVE-2024-26180 are not provided in the supplied documents. Monitor for updates from official advisories and affected vendors.
CVE-2026-34348
CVE-2026-34348 affects the Windows Event Logging Service. The issue is a protection mechanism failure that can allow an authorized attacker to disclose information over a network. According to the available records, the exploit surface is network-based with low privileges required and no user int...
CVE-2019-1269
Affected software: Microsoft Windows. The CVE-2019-1269 entry describes an elevation of privilege vulnerability in how Windows handles calls to Advanced Local Procedure Call (ALPC). Root cause: improper handling/processing of ALPC calls enabling an attacker to run code in the security context of ...
CVE-2020-16910
CVE-2020-16910 is a Windows security feature bypass in which Windows may fail to enforce file creation permissions, enabling an attacker to create files in a protected UEFI location. Exploitation would involve running a specially crafted application to bypass UEFI variable security in Windows. Mi...
CVE-2022-21863
CVE-2022-21863 is a Windows elevation-of-privilege vulnerability in the StateRepository API Server. The NVD entry confirms the issue and indicates a local attacker could obtain elevated privileges. Related OpenVAS entries show affected Windows platforms and list KB updates (KB5009543/KB5009545 an...
CVE-2022-22001
CVE-2022-22001 affects Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. Connected documents confirm the CVE in Microsoft Windows contexts and list a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges required, NONE user interaction, HIGH impact...
CVE-2022-24494
CVE-2022-24494 refers to a Windows vulnerability in the Windows Ancillary Function Driver for WinSock that allows Elevation of Privilege. The issue is a Local attack requiring Low privileges with no user interaction, and is described as affecting Confidentiality, Integrity, and Availability (per ...
CVE-2022-26917
CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...