4929 matches found
CVE-2018-8549
CVE-2018-8549 is a Windows kernel driver signature validation bypass vulnerability. It affects Windows clients/servers listed (Windows 8.1, 10, 2012/2016/2019, etc.). The underlying issue is incorrect validation of kernel driver signatures, enabling bypass of security features. Public data in con...
CVE-2019-0849
The connected advisory confirms this is a Windows Graphics Device Interface (GDI) information disclosure issue. Specifically, CVE-2019-0802 (related to Windows GDI) is caused by improper handling of objects in memory, enabling information disclosure. For CVE-2019-0849, the primary document descri...
CVE-2019-1337
The CVE-2019-1337 entry describes an information disclosure vulnerability in the Windows Update Client where memory objects are mishandled. Affected component: Windows Update Client. Root cause: improper handling of in-memory objects leading to potential memory contents disclosure. Exploitation d...
CVE-2020-0665
CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...
CVE-2020-1133
Technical details about CVE-2020-1133 are not publicly provided in the connected documents. Available sources mention Diagnostics Hub Standard Collector and the fix, but no affected versions, exploit specifics, or mitigation steps are given. Monitor for updates.
CVE-2020-1239
CVE-2020-1239 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The CVSS v3.1 base score is 8.8 (HIGH): network attack vector, no privileges required, UI required, and the impact is high on confidentiality, integrity, and availabili...
CVE-2020-1378
CVE-2020-1378 is a Kernel Transaction Manager (KTM) / registry KTM log recovery vulnerability reported by James Forshaw (2019–2020) alongside CVE-2019-0959 and CVE-2020-1377. The connected material links it to KTM log processing and recovery of registry state, noting that KTM transaction handling...
CVE-2020-1525
CVE-2020-1525 describes a memory corruption vulnerability in Windows Media Foundation triggered by how in-memory objects are handled. A successful exploit could allow an attacker to install programs, view/change/delete data, or create new accounts with full rights. Exploitation vectors include co...
CVE-2020-16897
CVE-2020-16897 is an information-disclosure vulnerability in NetBIOS over TCP (NetBT) where objects in memory are improperly handled. An attacker who runs a crafted application could obtain information to help further compromise the system, but cannot directly execute code or elevate rights. The ...
CVE-2020-16922
CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...
CVE-2021-26894
Technical details for CVE-2021-26894 are not provided in the connected documents. The NVD entry notes a Windows DNS Server RCE with CRITICAL severity (CVSS v3.1 9.8) but no specifics on affected versions or fixes are given here. Monitor for updates.
CVE-2021-28354
Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.
CVE-2021-31969
CVE-2021-31969 is a privilege-escalation vulnerability in Windows Cloud Files Mini Filter Driver (clfs.sys). The issue arises in the cloud file processing path inside HsmFltProcessHSMControl/HsmFltProcessUpdatePlaceholder, where Cloud Reparse Tag data is only partially validated and a misinterpre...
CVE-2021-41370
Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.
CVE-2022-21880
CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...
CVE-2022-24550
Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.
CVE-2022-41096
Technical details about CVE-2022-41096 are not publicly provided in the supplied documents. No affected products/versions or impact are explicitly described here. Monitor the connected sources for updates from Microsoft and NVD when more information becomes available.
CVE-2023-21558
Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2023-21694
Technical details about CVE-2023-21694 are not publicly provided in the supplied documents. The connected records do not specify affected products, root cause, remediation, or exploit status. Monitor for official disclosures and updates.
CVE-2023-21747
CVE-2023-21747 is a Windows kernel registry vulnerability caused by an out-of-memory error during a highly sensitive hive-unload operation. The issue allowed an attacker with local access to trigger memory allocation failures in a critical path, risking instability and potential misuse of hive st...
CVE-2023-23401
Technical details (affected components, root cause, impact, and remediation) for CVE-2023-23401 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.
CVE-2023-38254
CVE-2023-38254 corresponds to a Denial of Service vulnerability in Microsoft Message Queuing (MSMQ). The available documents identify MSMQ as the affected component and indicate the vulnerability causes availability impact (A) with no confidentiality or integrity impact, and do not provide exploi...
CVE-2024-43634
CVE-2024-43634 (Windows USB Video Class System Driver Elevation of Privilege) affects Windows USB Video Driver. Connected sources corroborate a privilege-escalation vulnerability with CVSS v3.1 base score 6.8 (Vector: Privileges none, User interaction none, Attack vector physical, Scope unchanged...
CVE-2025-21208
CVE-2025-21208 is a Windows RRAS Remote Code Execution vulnerability. The NVD entry confirms the issue as a network‑vector RCE with high impact (CVSSv3.1: 8.8, C/H/I/A = high; AV:N, AC:L, PR:N, UI:R, S:U). The vulnerability is tied to Windows RRAS and has a documented CVE entry; exploitation/avai...
CVE-2025-27483
CVE-2025-27483 is an NTFS elevation-of-privilege issue described as an out-of-bounds read in Windows NTFS that could allow a local attacker to obtain elevated privileges. The CVE is tied to Windows NTFS and is rated HIGH (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; base score 7.8). Public refe...
CVE-2018-8432
CVE-2018-8432 is a remote code execution in Microsoft Graphics Components. It affects Windows and Office components (e.g., Office, Word Viewer, Excel Viewer, PowerPoint Viewer) across multiple Windows and Office versions; the underlying issue is how Graphics Components handle objects in memory. E...
CVE-2019-0659
Technical details about CVE-2019-0659 are not provided in the connected documents; no explicit affected products, versions, or remediation are available here. Monitor for updates in case new details are published.
CVE-2019-0660
Technical details for CVE-2019-0660 are not publicly available in the provided connected documents. Monitor for updates from advisories and CVE records to obtain affected products, impact, and remediation guidance.
CVE-2019-0767
CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...
CVE-2019-0782
Technical details for CVE-2019-0782 are not publicly available in the provided documents. Monitor for updates from NVD/MSRC and ENISA EUVD databases.
CVE-2019-0856
Technical details about CVE-2019-0856 (affected products, root cause, impact, and fixes) are not present in the provided documents. Monitor official Microsoft advisories and Vulners updates for new information.
CVE-2019-1117
Technical details (affected products, versions, root cause, impact, fixes) for CVE-2019-1117 are not present in the provided connected documents. Monitor for updates; no public details are included here.
CVE-2019-1380
CVE-2019-1380 is a local elevation-of-privilege issue in Windows where splwow64.exe mishandles certain calls (aka Microsoft splwow64 Elevation of Privilege Vulnerability). Affected software is Windows system component splwow64.exe; root cause centers on how certain calls are processed. Documented...
CVE-2019-1468
The connected CNVD entry corroborates CVE-2019-1468 as a Win32k/Windows font library RCE: improper handling of specially crafted embedded fonts enables remote code execution. Affected: Windows clients/servers with Win32k font handling vulnerability. Root cause: inadequate validation when processi...
CVE-2020-0671
Technical details for CVE-2020-0671 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.
CVE-2020-1039
Technical details for CVE-2020-1039 (Jet Database Engine RCE) are not provided in the Connected Documents. Please monitor official advisories (MSRC/NVD) for affected products, exact root cause, impact scope, and available fixes.
CVE-2020-1474
CVE-2020-1474 concerns the Windows Image Acquisition (WIA) Service, where memory contents can be disclosed by an attacker who authenticates and connects an imaging device (camera, scanner, phone) to a vulnerable system and runs a crafted application. The vulnerability arises from how the WIA Serv...
CVE-2021-28332
Technical details for CVE-2021-28332 are not provided in the connected documents. The entries reference RPC Runtime RCE in general but do not specify affected product/version/root cause or fixes. Monitor for updates.
CVE-2021-28340
Technical details for CVE-2021-28340 are not publicly available in the provided documents. No affected product/version, impact, or remediation is specified here. Monitor for updates.
CVE-2021-28341
Technical details for CVE-2021-28341 are not publicly provided in the supplied documents. Related OpenVAS/Nessus plugins reference the CVE list but do not describe affected products, root causes, or fixes. Monitor for updates.
CVE-2021-28342
Technical details about CVE-2021-28342 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.
CVE-2021-31976
CVE-2021-31976 is described as a Server for NFS Information Disclosure Vulnerability. The provided documents do not specify affected products, vendor, component, or vulnerable versions. CVSS metrics are available: CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, n...
CVE-2021-34499
Technical details about CVE-2021-34499 are not publicly provided in the supplied documents; monitor for updates.
CVE-2022-21867
Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-21910
Technical details about CVE-2022-21910 (affected product, impact, exploitability, or fixes) are not provided in the supplied documents. Monitor for official disclosures and updates from Microsoft and security advisories.
CVE-2022-26802
CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...
CVE-2022-41050
Technical details about CVE-2022-41050 are not publicly available in the provided documents. No product/version/root-cause/exploit information is given here. Monitor for updates from official advisories and vulnerability databases.
CVE-2022-41109
Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.