4929 matches found
CVE-2024-38033
Technical details about CVE-2024-38033 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds for affected products, versions, and fixes.
CVE-2024-38186
Technical details (affected product, root cause, impact, versions, or remediation) for CVE-2024-38186 are not provided in the connected documents. Monitor for updates.
CVE-2025-59282
CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...
CVE-2026-42985
CVE-2026-42985 is described in connected sources as a heap-based buffer overflow in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. The initial and connected docs provide the vulnerability description and a high CVSS score (8.8, HIGH) with netwo...
CVE-2018-8547
CVE-2018-8547 is a cross-site scripting (XSS) vulnerability in an open-source customization for Microsoft Active Directory Federation Services (AD FS). Affected components are AD FS servers on Windows platforms (e.g., Windows Server 2012 R2, 2016, 2019, etc.). The issue arises because the customi...
CVE-2019-0614
The connected advisories confirm an information disclosure vulnerability in Microsoft Windows GDI. The Graphics Device Interface component is affected by improper handling of in-memory objects, exposing memory contents. CPAI-2019-1525 notes remote attackers could exploit this to access sensitive ...
CVE-2019-0844
Technical details about CVE-2019-0844 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected products, impact, and remediation.
CVE-2019-0845
Technical details for CVE-2019-0845 are not publicly available in the provided documents. Monitor for updates to determine affected products, impact, and fixes.
CVE-2019-0885
CVE-2019-0885 is a Windows OLE remote code execution vulnerability caused by improper validation of user input in OLE handling. The connected documents confirm the RCE impact; however, the provided sources do not specify affected products/versions, root-cause details beyond the OLE input validati...
CVE-2019-1232
CVE-2019-1232 is a local elevation-of-privilege flaw in the Diagnostics Hub Standard Collector Service. Affected: Diagnostics Hub Standard Collector Service; root cause: improper impersonation of certain file operations. Impact per sources: confidentiality, integrity, and availability are rated p...
CVE-2019-1235
CVE-2019-1235 describes an elevation of privilege in Windows Text Service Framework (TSF) where the TSF server does not validate the source of input or commands it receives. Local, low-attack-surface vector with high impact (C/H/I/A). The vulnerability is tracked with Microsoft advisories and upd...
CVE-2019-1256
CVE-2019-1256 is a Windows Win32k Elevation of Privilege vulnerability caused by the Win32k component failing to properly handle objects in memory, enabling local privilege escalation. The CVE is distinct from CVE-2019-1285, and is corroborated by multiple records (NVD/CVE list, CNVD, EUVD mentio...
CVE-2021-1674
Technical details (affected product, root cause, impact, or remediation) are not provided in the connected documents. The CVE entry’s specifics are not disclosed here; monitor for updates.
CVE-2021-33752
CVE-2021-33752 is described as a Windows DNS Snap-in Remote Code Execution vulnerability. Connected sources corroborate a DNS Snap-in RCE in Microsoft Windows/Windows Server, indicating an elevated risk with a network attacker, high impact (CVE-3.1: HIGH) and no authentication required, with user...
CVE-2021-36975
CVE-2021-36975 is a Win32k Elevation of Privilege vulnerability in Windows. Affected component: Win32k (kernel/user-interface layer); root cause involves privilege escalation via Win32k. CVSS 3.1 base score 7.8 (HIGH); attack vector LOCAL, attack complexity LOW, privileges required LOW, user inte...
CVE-2022-21881
Technical details about CVE-2022-21881 are not provided in the supplied documents. The entries reference Windows kernel elevation issues and related updates, but do not disclose affected products/versions or root cause specifics. Monitor for updates.
CVE-2022-21901
Technical details for CVE-2022-21901 are not publicly available in the provided documents. No explicit affected components, root cause, impact, or remediation are disclosed here. Monitor for updates from official advisories.
CVE-2022-26786
Technical details for CVE-2022-26786 are not publicly available within the provided documents. No concrete affected products, versions, or fixes are stated here. Monitor for updates from official sources to obtain remediation and impact information.
CVE-2022-41074
Technical details for CVE-2022-41074 are not publicly provided in the supplied documents. Monitor updates from Microsoft/NVD for affected component, impact, and remediation.
CVE-2022-44666
CVE-2022-44666 is a Windows Contacts RCE affecting the Windows Contacts components (VCF/Contact handling) where an href/link attribute processing flow could reach SafeExecute and execute arbitrary code. Affected context centers on wab32.dll/wab.exe usage within Windows Contacts; PoCs and public w...
CVE-2023-24865
CVE-2023-24865 corresponds to a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that results in an information disclosure. The CVE is characterized by a network-accessible vector with low attack complexity and low privileges required, but with high confidentiality impact a...
CVE-2023-24885
CVE-2023-24885 corresponds to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The connected CNVD entry confirms a remote code execution flaw in the PostScript and PCL6 class printer drivers; however, the documents do not provide detailed root cause ana...
CVE-2023-29352
CVE-2023-29352 is a Windows Remote Desktop Security Feature Bypass vulnerability. The CVSS 3.1 vector indicates network access with low attack complexity, no privileges, and user interaction required, resulting in potential integrity impact (I: High) but no confidentiality or availability impact ...
CVE-2023-36906
Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.
CVE-2024-30031
CVE-2024-30031 is documented as a Windows elevation-of-privilege issue affecting the CNG Key Isolation Service . The available sources describe the vulnerability as a local, privilege-required issue with high impact across confidentiality, integrity, and availability, but do not provide vendor-sp...
CVE-2024-38058
CVE-2024-38058 is tied to BitLocker: Microsoft security updates (KB5040430, KB5040431, KB5040437, etc.) add PCRs 4–7 and 11 to the default Secure Boot validation profile. This is described as a BitLocker-related change with CVE-2024-38058 referenced for the PCR extension in multiple OS updates. T...
CVE-2024-38104
Technical details for CVE-2024-38104 are not provided in the supplied connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for official updates to disclose specifics.
CVE-2024-43641
CVE-2024-43641 is a Windows Registry Elevation of Privilege issue. The connected documents reveal a sophisticated exploitation path based on hive memory corruption and out-of-bounds cell indexes, enabling an unprivileged actor to obtain arbitrary kernel read/write access and, ultimately, SYSTEM-l...
CVE-2024-49120
Technical details for CVE-2024-49120 are not publicly available in the provided documents. Monitor for updates from Microsoft and security advisories; this dataset does not disclose affected products, vectors, or fixes.
CVE-2025-21191
CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...
CVE-2025-21260
Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.
CVE-2026-35421
CVE-2026-35421 describes a heap-based buffer overflow in Windows GDI that permits a local attacker to execute arbitrary code. The entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, NO privileges required, user interaction required, and impacts to con...
CVE-2026-62778
CVE-2026-62778 refers to a Windows DNS vulnerability described as a use-after-free in the DNS service that enables a remote attacker to elevate privileges over a network. The affected component is the Windows DNS service; the root cause is a use-after-free condition in DNS processing. The impact ...
CVE-2019-0784
Technical details for CVE-2019-0784 are not publicly available in the provided documents; no confirmed affected products, versions, or fixes are listed. Monitor for updates from official sources as additional information may be published.
CVE-2019-0790
Technical details for CVE-2019-0790 are not provided in the supplied documents; no affected products, versions, root cause, or mitigations are listed. Monitor for updates.
CVE-2019-0902
The connected documents describe a vulnerability in the Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow arising when memory-boundary checks are not properly performed during operations in memory. The root cause is that data boundaries are not validated, leading to an out-of...
CVE-2019-0906
CVE-2019-0906: Jet Database Engine remote code execution in Windows. In memory handling flaw could allow arbitrary code execution when a victim opens a specially crafted file. Update from Microsoft fixes the memory handling of objects in the Jet engine to address the vulnerability; exploit detail...
CVE-2019-1144
CVE-2019-1144 is a remote code execution vulnerability in the Windows font library (fontsub.dll) triggered by specially crafted embedded fonts. The impact, per NVD/NVD-derived sources, is full system compromise: attacker can install programs, view/modify/delete data, and create accounts with full...
CVE-2019-1145
CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...
CVE-2020-0639
CVE-2020-0639 is a Windows Common Log File System (CLFS) Driver Information Disclosure vulnerability. Connected CNVD entries describe a flaw where memory objects are mishandled, allowing an authenticated attacker who logs on and runs a crafted application to read data from memory. The CVSSv3 base...
CVE-2020-1243
CVE-2020-1243 affects Microsoft Hyper-V. The vulnerability arises when Hyper-V on a host does not properly validate certain malicious data from a guest VM, enabling a locally authenticated attacker with a guest-VM privilege to trigger a denial-of-service by running a specially crafted application...
CVE-2020-1346
Technical details about CVE-2020-1346 are not publicly provided in the connected documents. Monitor for updates from official advisories and third-party analyses.
CVE-2020-1558
The connected document confirms CVE-2020-1558 targets the Windows Jet Database Engine, with a remote code execution vulnerability that arises from improper handling of objects in memory. An attacker can trigger code execution by persuading a user to open a specially crafted file. The issue is mit...
CVE-2020-16887
CVE-2020-16887 is an elevation-of-privilege vulnerability in the Windows Network Connections Service where improper in-memory handling of objects could allow a locally authenticated attacker to execute code with elevated permissions. The vulnerability can be exploited by running a specially craft...
CVE-2020-17001
CVE-2020-17001 is a Windows Print Spooler Elevation of Privilege vulnerability. Affected software is Windows Print Spooler. The CVSS context from NVD (base CVSSv3.1 score 7.8, HIGH) indicates local, low complexity, no user interaction required, with HIGH impacts on confidentiality, integrity, and...
CVE-2021-28479
CVE-2021-28479 maps to a Windows CSC Service Information Disclosure vulnerability. Affected software is Windows operating systems with the CSC service; the root cause relates to information disclosure in the CSC service. The NVD metrics show CVSS base scores of 2.1 (2.0/6.0) depending on version,...
CVE-2021-33746
CVE-2021-33746 is a Windows DNS Server Remote Code Execution vulnerability described in the provided documents as a network-exploitable issue with high impact. The sources indicate an affected component (Windows DNS Server) and classify the vulnerability as CVE-2021-33746, but they do not give co...
CVE-2021-34504
Technical details about CVE-2021-34504 are not provided in the connected documents; the Initial Description lists a Windows Address Book RCE vulnerability but lacks affected product/version specifics. Monitor for updates.
CVE-2021-36957
CVE-2021-36957 is a Windows Desktop Bridge elevation of privilege vulnerability. Public details in the initial document are limited to the CVE title and scoring; concrete technical specifics (affected product versions, root cause, exploitability) are not elaborated there. Connected Microsoft advi...