4929 matches found
CVE-2023-28241
Technical details on CVE-2023-28241 are not publicly provided in the supplied documents; monitor for updates.
CVE-2023-28276
Technical details for CVE-2023-28276 are not publicly provided in the connected documents; only the NVD entry description is visible. Monitor for updates.
CVE-2023-32056
CVE-2023-32056 is a Windows Server Update Services (WSUS) elevation-of-privilege vulnerability. The NVD entry lists CVSS v3.1 metrics: base score 9.8 (CRITICAL), with network attack vector, no user interaction required, and high confidentiality, integrity, and availability impacts. Microsoft KB u...
CVE-2023-33163
Technical details (affected products/versions, root cause, exploit information, or remediation) for CVE-2023-33163 are not provided in the connected documents. Monitor for future advisories from Microsoft and security bulletins.
CVE-2023-35332
Technical details for CVE-2023-35332 are not publicly provided in the supplied documents. No affected products, root cause, impact, or fixes are stated here. Monitor for updates from the connected sources for concrete technical information.
CVE-2024-30039
CVE-2024-30039 affects the Windows Remote Access Connection Manager. The connected documents map this CVE to Windows components and indicate an information-disclosure risk with CVSS 3.1/3.5-like characteristics: local access required, low attack complexity, no user interaction, confidentiality im...
CVE-2024-37979
CVE-2024-37979 is described in connected sources as a Windows Kernel Elevation of Privilege vulnerability with an impact of obtaining elevated privileges . The NCSC entry lists the CVE under the Windows Kernel section with that impact. Beyond that, the provided documents do not specify the affect...
CVE-2024-38049
Technical details (affected components, exploit vectors, or patch specifics) for CVE-2024-38049 are not provided in the connected documents. No public details are present in the supplied sources; monitor for updates.
CVE-2024-38114
Technical details for CVE-2024-38114 are not provided in the connected documents. The initial description notes a Windows IP Routing Management Snapin Remote Code Execution vulnerability with CVSS 3.1/8.8, but no affected versions, root cause, or mitigations are included here.
CVE-2024-43626
CVE-2024-43626 is a Windows Telephony Service Elevation of Privilege vulnerability. Affected: Windows operating systems where the Telephony Service component is present. Nature: local, low-privilege user could potentially elevate privileges (high impact to confidentiality, integrity, and availabi...
CVE-2025-21197
CVE-2025-21197 is an information disclosure in Windows NTFS due to improper access control, enabling an authorized user to disclose file path information in folders they cannot list. Connected sources corroborate NTFS as affected and classify the impact as data exposure. Mitigation involves apply...
CVE-2025-21203
CVE-2025-21203 affects Windows Routing and Remote Access Service (RRAS). The connected data confirms a network-accessible vulnerability in RRAS that can cause an information disclosure via a buffer over-read. Affected component: RRAS on Windows; root cause: buffer over-read; impact: confidential ...
CVE-2025-21308
CVE-2025-21308 Windows Themes Spoofing affects the Windows Theme system. The vulnerability lets a malicious party impersonate the user and potentially execute code in the victim’s context, requiring the victim to open/edit a rogue file. The impact is described as impersonation with potential code...
CVE-2025-21358
Technical details about CVE-2025-21358 are not provided in the supplied documents. No affected products, vectors, or fixes are specified here; monitor for updates from official advisories.
CVE-2025-21409
CVE-2025-21409 is a Windows Telephony Service Remote Code Execution vulnerability exploitable over the network (CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this CVE entry and link it to Windows Telephony Service across Microsoft advisories; updates KB5050009, KB5050...
CVE-2025-26635
CVE-2025-26635 describes a Windows Hello security feature bypass caused by weak authentication, enabling an authorized attacker to bypass a security feature over the network. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) yields a base score of 6.5 (Medium) with confidentiality and int...
CVE-2025-27479
CVE-2025-27479 appears in connected records as a Kerberos-related Denial-of-Service vulnerability described under the Kerberos Key Distribution Proxy Service. The available sources confirm an impact on Windows Kerberos with a network-based DoS potential due to an insufficient resource pool, but d...
CVE-2025-27484
CVE-2025-27484 affects Windows Universal Plug and Play (UPnP) Device Host. The issue is described as sensitive data storage in improperly locked memory, enabling an authorized attacker to elevate privileges over the network. Public details in connected docs indicate the vulnerability impacts the ...
CVE-2025-29831
Technical details about CVE-2025-29831 (affected product, root cause, patch) are not provided in the supplied documents. Monitor for updates and refer to the official vulnerability entry for authoritative information.
CVE-2025-33071
CVE-2025-33071 is an RCE flaw affecting the Windows KDC Proxy Service (KPSSVC). The vulnerability arises from a use-after-free in KPSSVC, enabling a remote attacker to execute code over the network on affected Windows systems. The CVE is rated high severity (CVSS ~8.1/8.1–8.10, depending on sourc...
CVE-2018-8490
CVE-2018-8490 is a remote code execution vulnerability in Windows Hyper-V where a host fails to properly validate input from a guest OS user. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server variants. Root cause (as described): improper input validation in Hyper-V...
CVE-2018-8492
CVE-2018-8492 is a Device Guard Code Integrity Policy Security Feature Bypass vulnerability in Windows. Affected products include Windows Server 2016, Windows 10, Windows Server 2019, and Windows 10 Server editions. The root cause is a security feature bypass in Device Guard that could allow an a...
CVE-2018-8612
CVE-2018-8612 is a Denial of Service vulnerability in the Connected User Experiences and Telemetry Service of Windows. The issue arises when the service fails to validate certain function values, enabling a local attacker to cause an availability impact on affected systems. Affected products incl...
CVE-2019-0965
The CVE-2019-0965 issue affects Microsoft Windows Hyper-V on a host server, where the host fails to properly validate input from a guest OS. According to connected records, a specially crafted application running on a guest could trigger Hyper-V to execute arbitrary code on the host. The vulnerab...
CVE-2019-1050
CVE-2019-1050 affects the Windows GDI component and is an information-disclosure vulnerability where memory objects may be improperly disclosed. An attacker could exploit this by convincing a user to open a specially crafted document or visit an untrusted webpage, potentially enabling access to m...
CVE-2019-1085
Technical details for CVE-2019-1085 are not provided in the connected documents. The initial description mentions a Windows WLAN Service elevation of privilege vulnerability but includes no vendor/product/version specifics, exploit info, or remediation details. Monitor for updates and refer to of...
CVE-2019-1158
The CVE-2019-1158 entry corresponds to a Windows Graphics Device Interface (GDI) information disclosure vulnerability. Connected sources describe it as an issue in GDI’s handling of memory, specifically involving EMF file parsing, which can allow an attacker to obtain sensitive information. Explo...
CVE-2019-1178
CVE-2019-1178 is an elevation-of-privilege vulnerability in the memory handling of ssdpsrv.dll. The NVD entry states that a locally authenticated attacker could execute code with elevated permissions by running a crafted application, and that a security update fixes the issue by ensuring ssdpsrv....
CVE-2019-1190
CVE-2019-1190 is a Windows kernel image elevation of privilege vulnerability. The issue arises from how the kernel image handles objects in memory, allowing a locally authenticated attacker to run code with elevated privileges via a crafted application. Public exploits exist for this vulnerabilit...
CVE-2019-1249
CVE-2019-1249 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could trigger arbitrary code execution by convincing a user to open a specially crafted file, with the impact described as remote code exe...
CVE-2019-1270
This CVE (CVE-2019-1270) describes an elevation-of-privilege vulnerability in the Windows Store Installer. The root cause is a symbolic-link attack on the WindowsApps directory, allowing misuse of the Windows Store Installer to escalate privileges locally. The issue is tied to the Windows Store I...
CVE-2019-1294
CVE-2019-1294 is a Windows Secure Boot security feature bypass vulnerability that allows access to debugging functionality. The connected records corroborate that the issue enables bypass of Secure Boot protections, with the primary impact described as compromising confidentiality (C High) while ...
CVE-2019-1456
The CVE-2019-1456 entry describes a remote code execution vulnerability in Microsoft Windows where the Windows Adobe Type Manager Library fails to properly handle specially crafted OpenType fonts. Affected component: Windows Adobe Type Manager Library; root cause: improper handling of OpenType fo...
CVE-2020-0724
Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.
CVE-2020-0794
CVE-2020-0794 is a Windows denial-of-service vulnerability caused by improper handling of memory objects. The CVE entry indicates local attack vector with low complexity and no authentication, resulting in availability impact (DoS). Public records in the connected documents reference Windows secu...
CVE-2020-0896
Technical details about CVE-2020-0896 are not provided in the connected documents. Public information in these sources does not specify affected products, root cause, or fixes. Monitor for updates.
CVE-2020-0964
CVE-2020-0964 is a remote code execution vulnerability in Microsoft Windows GDI+ where memory objects are mishandled by the Graphics Device Interface. The issue affects GDI+ processing and can allow an attacker to run arbitrary code on a vulnerable system. Microsoft’s April 2020 Patch Tuesday upd...
CVE-2020-0965
CVE-2020-0965 corresponds to a remote code execution vulnerability in the Microsoft Windows Codecs Library. The CNVD entry describes a memory-handling flaw in Windows Codecs Library that can be exploited to execute arbitrary code via specially crafted image files. Public details in CNVD/NVD confi...
CVE-2020-0999
Technical details about CVE-2020-0999 are not publicly provided in the connected documents. The CVE entry mentions Jet Database Engine RCE, but no specifics on vulnerable versions, root cause, or remediation are included here. Monitor for updates.
CVE-2020-1008
CVE-2020-1008 describes a Remote Code Execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. The connected KB4549951 article references fixes related to the JET Database Engine within Windows 10 builds 18362.778/18363.778, but does not provide a produc...
CVE-2020-1030
Technical details about CVE-2020-1030 are not publicly provided in the connected documents. The initial entry describes a local elevation of privilege via the Windows Print Spooler but lacks explicit product/version/root cause specifics beyond that. Monitor for updates.
CVE-2020-1080
Windows Hyper-V Elevation of Privilege (CVE-2020-1080) is documented as an elevation of privilege in Hyper-V when handling objects in memory on a host server. Exploitation is described as local (requires access to the host), with the flaw not by itself enabling arbitrary code execution but potent...
CVE-2020-1115
The CVE-2020-1115 entry concerns the Windows Common Log File System (CLFS) driver, where improper in-memory handling creates an elevation of privilege vulnerability. Exploitation would require the attacker to log on locally and run a specially crafted application to gain control of the affected s...
CVE-2020-1211
CVE-2020-1211 is confirmed in OSV as an elevation of privilege in the Connected Devices Platform Service. The description states the vulnerability stems from how the service handles objects in memory, enabling an attacker to gain elevated code execution privileges. The Connected Devices Platform ...
CVE-2020-16997
Technical details about CVE-2020-16997 are not provided in the connected documents. The Initial Description is generic; no affected products, root cause, impact, or remediation are present. Monitor for updates.
CVE-2020-16998
Technical details about CVE-2020-16998 are not publicly provided in the supplied documents. Monitor for updates from official advisories to obtain affected products, root causes, and remediation guidance.
CVE-2020-17055
Technical details about CVE-2020-17055 are not provided in the connected documents; public specifics (affected products, root cause, exploitability) are not disclosed here. Monitor for updates.
CVE-2022-37997
CVE-2022-37997 is a local-elevation-of-privilege vulnerability in the Windows Graphics Component. It is documented as affecting the Microsoft Windows Graphics Component with a CVSS v3.1 base score of 7.8 (High) and an attack vector of LOCAL with LOW attack complexity, requiring LOW privileges and...
CVE-2023-35328
Technical details for CVE-2023-35328 are not provided in the supplied documents. No product/version/root-cause/impact/fix information is present here. Monitor for updates from official advisories and connected sources.