4929 matches found
CVE-2019-0696
CVE-2019-0696 is a Windows kernel local elevation-of-privilege vulnerability. Affected: Windows kernel; root cause described as improper handling of objects in memory. Impact: attacker gains kernel-level privileges locally (no user interaction required per CVSS). Exploitation status and exact pat...
CVE-2019-1108
Summary: CVE-2019-1108 is a vulnerability in the Windows Remote Desktop Protocol (RDP) Client that leads to information disclosure through memory contents. The connected exploit document describes an attacker connecting remotely to an affected system and running a specially crafted application to...
CVE-2019-1318
CVE-2019-1318 corresponds to a TLS spoofing issue affecting Windows where TLS sessions without Extended Master Secret (EMS) can be exploited via man‑in‑the‑middle scenarios. Connected sources describe the vulnerability as a spoofing vulnerability in TLS when EMS is not used, with impact on confid...
CVE-2020-0755
Technical details for CVE-2020-0755 are not publicly provided in the connected documents. Monitor for updates from official advisories, as no concrete technical specifics (affected products, impact, or fixes) are present here.
CVE-2020-0761
CVE-2020-0761 is a remote code execution vulnerability in Active Directory integrated DNS (ADIDNS) where in-memory objects are mishandled. An authenticated attacker could send crafted requests to an ADIDNS server and execute arbitrary code with SYSTEM privileges. The root cause is described as im...
CVE-2020-0822
CVE-2020-0822 is an Elevation of Privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. Evidence from security feeds (e.g., Tenable plugin for KB4541506/KB4541504) confirms the issue is addressed by Microsoft security updates that fix how th...
CVE-2020-1175
CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...
CVE-2020-1489
CVE-2020-1489 is a Windows elevation-of-privilege vulnerability in the CSC Service that arises from improper memory handling. An attacker who can execute code on the victim system could run a crafted application to elevate privileges. The root cause is memory handling in the Windows CSC Service, ...
CVE-2020-1490
Technical details for CVE-2020-1490 are not provided in the connected documents. Public information about affected products, root cause, impact, or fixes is not included here; monitor for updates from official sources.
CVE-2020-1517
CVE-2020-1517 is an Elevation of Privilege vulnerability in Windows File Server Resource Management Service caused by improper memory handling. An attacker who can execute code on a target system may leverage this to elevate privileges locally. The NVD description states exploitation requires ini...
CVE-2020-1565
CVE-2020-1565 is a Windows elevation-of-privilege flaw: when the Public Account Pictures folder incorrectly handles junctions, an attacker who already has code execution on the target could exploit a crafted application to gain higher privileges. The core issue, per connected sources, is how Wind...
CVE-2020-17134
CVE-2020-17134 concerns the Windows Cloud Files Mini Filter Driver (cldflt) and was discussed in Project Zero material describing file-system filter drivers. The connected sources confirm this as a Windows mini-filter elevation of privilege issue affecting cloud/file-system filter drivers and not...
CVE-2021-1709
Technical details (affected component, root cause, impact, or fixes) for CVE-2021-1709 are not provided in the supplied documents. Monitor for further updates from official advisories and vendors.
CVE-2021-31190
CVE-2021-31190 is a Windows Container Isolation FS Filter Driver elevation of privilege vulnerability. Affects Windows components including Windows 10 (1809) and Windows Server 2019 family and related Server Core variants; CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW, User Interaction...
CVE-2021-38635
CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...
CVE-2021-40463
CVE-2021-40463 is a Windows NAT Denial of Service vulnerability. The connected OpenVAS entries map this CVE to multiple Microsoft KBs (KB5006667, KB5006669, KB5006670, KB5006674, KB5006675, etc.), indicating it is considered in Windows security update contexts, but the provided documents do not d...
CVE-2021-41378
CVE-2021-41378 corresponds to a Windows NTFS remote code execution vulnerability. The CNVD entry describes a Windows NTFS RCE vulnerability, and NVD echoes a Windows NTFS RCE description for this CVE. Public details in connected sources do not specify the affected product version(s) or root cause...
CVE-2022-21903
Technical details about CVE-2022-21903 are not publicly provided in the supplied documents; no affected products, impact, nor remediation specifics are given here. Monitor for updates from official advisories.
CVE-2022-21994
CVE-2022-21994 is a Windows elevation-of-privilege issue in the DWM Core Library that permits local escalation with low attack complexity and no user interaction (per CVSS data in the initial). Connected documents corroborate a Windows DWM Core Library vulnerability and show Microsoft remediation...
CVE-2022-24544
Technical details for CVE-2022-24544 are not publicly available in the provided documents. Monitor for updates.
CVE-2022-26792
Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.
CVE-2022-34725
Technical details about CVE-2022-34725 are not publicly provided in the supplied documents. No affected products, vulnerable components, exploit information, or remediation specifics are present. Monitor for official disclosures or updates from vendors.
CVE-2022-35743
CVE-2022-35743 is a Microsoft Windows MSDT Remote Code Execution vulnerability. Documents indicate an exploitation path that is Local with Low Attack Complexity and requires User Interaction, yielding high confidentiality, integrity, and availability impact. CVSS 3.1 base score 7.8 (HIGH). No exp...
CVE-2022-35834
CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...
CVE-2022-35841
Technical details about CVE-2022-35841 (Windows Enterprise App Management Service RCE) are not publicly provided in the connected documents. No explicit root cause, affected versions, or fixes are disclosed here; monitor Microsoft/NVD updates for technical specifics.
CVE-2022-37995
CVE-2022-37995 is a Windows Kernel elevation-of-privilege vulnerability. The initial entry notes a local attacker could achieve a high-severity (CVSS 7.8) impact with low attack complexity and no user interaction required. Connected documents list this CVE under Windows Kernel and enumerate fixes...
CVE-2022-38051
CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...
CVE-2022-41055
Technical details about CVE-2022-41055 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from the vendor and vulnerability feeds.
CVE-2022-41097
Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.
CVE-2022-44675
Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.
CVE-2023-28223
CVE-2023-28223 is a Windows DNS remote code execution vulnerability described in the CVE entry as a Windows DNS RCE with network access. The associated CVSS 3.1 metrics indicate an attacker can exploit it over the network without user interaction, but with high attack complexity and user privileg...
CVE-2023-29368
CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...
CVE-2023-35639
CVE-2023-35639 — Microsoft ODBC Driver Remote Code Execution is documented in the CVE entry and corroborated by multiple sources in the connected set as a Windows component vulnerability. In NVD, the CVSSv3.1 base score is 8.8 (HIGH) with a network attack vector, requiring user interaction, and r...
CVE-2023-36905
CVE-2023-36905 affects Windows Wireless Wide Area Network Service (WwanSvc). The NVD entry shows a High-severity information disclosure (CVSS 3.1 base 7.5) with network attack vector and no user interaction; confidentiality impact is High. Connected docs reference Microsoft MSRC/KB guidance but d...
CVE-2024-38180
CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...
CVE-2024-43467
CVE-2024-43467 corresponds to a Windows Remote Desktop Licensing Service remote code execution vulnerability. The initial sources indicate this CVE is tracked under Windows Remote Desktop Licensing Service with a CVSS v3.1 base score of 7.5 (NETWORK, HIGH impact, requires LOW privileges, no user ...
CVE-2024-43599
CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...
CVE-2024-43629
CVE-2024-43629 affects the Windows DWM Core Library and is an Elevation of Privilege vulnerability. The connected KB/MSRC data confirms the affected component (DWM Core Library) and labels the CVE with a high severity (base score 7.8, local attack, low complexity, privileges required: low) and im...
CVE-2025-21216
CVE-2025-21216 is a Windows Internet Connection Sharing (ICS) Denial of Service vulnerability. The available data show a CVSS v3.1 base score of 6.5 (Medium) with an impact on availability, requiring adjacent network access, low attack complexity, no privileges required, and no user interaction. ...
CVE-2025-21226
Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.
CVE-2025-21307
CVE-2025-21307 concerns the Windows Reliable Multicast Transport Driver (RMCAST) and is described as a remote code execution vulnerability. The CVSS vector indicates network access, no user interaction, and a high impact across confidentiality, integrity, and availability (base score 9.8, CRITICA...
CVE-2025-24058
CVE-2025-24058 describes an elevation-of-privilege in the Windows DWM Core Library caused by improper input validation. The vulnerability enables a locally authenticated attacker to escalate privileges (local vector, no user interaction required per CVSS: High, with base score 7.8). Connected sou...
CVE-2025-24992
CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...
CVE-2025-26686
CVE-2025-26686 is a Windows TCP/IP remote code execution vulnerability caused by sensitive data stored in improperly locked memory. It is network-based with high impact (total compromise potential) and requires user interaction according to the CVSS: network exposure, high complexity, no privileg...
CVE-2025-27478
CVE-2025-27478 is a heap-based buffer overflow in Windows Local Security Authority (LSA) that enables a locally authenticated attacker to elevate privileges. The CVE is rated CVSS v3.1 7.0 (HIGH) with Local access, high confidentiality/integrity/availability impact. Connected sources confirm the ...
CVE-2019-0898
Affected software: Windows Jet Database Engine (in Microsoft Windows and Windows Server). Vulnerability type & cause: Multiple connected CNVD entries describe a buffer overflow in the Jet Database Engine, occurring when memory operations do not properly validate data boundaries, leading to incorr...
CVE-2019-1285
CVE-2019-1285 is a Windows Win32k elevation of privilege vulnerability caused by improper handling of memory objects in the Win32k component. Affects Windows systems; root cause is in-memory object handling leading to local privilege escalation. CVSS indicators: CVSSv2 base 7.2 (HIGH, LOCAL, no a...
CVE-2020-0707
CVE-2020-0707 is a Windows IME privilege-elevation vulnerability arising from improper memory handling in Windows IME. The issue enables local privilege escalation when an attacker gains execution on the target system and runs a specially crafted application. Connected sources corroborate the Win...
CVE-2020-0810
CVE-2020-0810 affects the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector on Windows. The root cause is an elevation of privilege vulnerability allowing file creation in arbitrary locations, exploitable by a logged-on attacker who runs a crafted application; this could...