4929 matches found
CVE-2025-24995
CVE-2025-24995 is a heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver that allows a locally authorized attacker to elevate privileges. The NVD entry confirms the vulnerable component and impact (local privilege elevation; high severity). Public references point to Micros...
CVE-2018-8592
CVE-2018-8592 is an elevation-of-privilege vulnerability in Windows 10 version 1809 (and Windows Server 2019) that can be triggered when the OS is installed from physical media (USB/DVD) with the “keep nothing” option selected. Successful exploitation could grant local, elevated access to an atta...
CVE-2020-0837
CVE-2020-0837 affects Active Directory Federation Services (ADFS) and is an Elevation of Privilege vulnerability arising from improper handling of multi-factor authentication requests. The initial description states that an attacker could bypass some MFA factors by sending a specially crafted aut...
CVE-2020-0858
CVE-2020-0858 is a Windows elevation-of-privilege vulnerability where the Public Account Pictures folder improperly handles junctions. The root cause is incorrect handling of junctions in that folder, enabling local attacker code execution with privileges as described in the CVE entry. Exploitati...
CVE-2020-0909
CVE-2020-0909 affects Microsoft Windows Hyper-V on Windows Server. The vulnerability arises when Hyper-V fails to properly handle specially crafted network packets, which could allow a denial-of-service condition. The connected documents confirm Hyper-V as the affected component and describe the ...
CVE-2020-0997
CVE-2020-0997 is a Windows Camera Codec Pack remote code execution vulnerability caused by improper handling of objects in memory. An attacker could execute arbitrary code in the context of the current user, potentially taking control if the user has admin rights. Exploitation requires the user t...
CVE-2020-1253
Technical details about CVE-2020-1253 are not provided in the connected documents. The initial entry notes an elevation of privileges in the Windows kernel-mode driver, but no specifics (versions, impact, or fixes) are included here.
CVE-2020-1314
CVE-2020-1314: A Windows TSF Elevation of Privilege vulnerability exists where the TSF server mishandles messages from TSF clients, enabling an attacker with a crafted TSF client to execute arbitrary code with local privileges by exploiting the TSF messaging flow. No patch details are provided in...
CVE-2020-1485
CVE-2020-1485 is a Windows Information Disclosure vulnerability in the Windows Image Acquisition (WIA) Service. It allows an authenticated, local attacker who can connect an imaging device (camera/scanner/phone) and run a crafted app to disclose memory contents from WIA, potentially exposing info...
CVE-2020-1598
Technical details for CVE-2020-1598 are not provided in the connected documents; the sources here pertain to other Microsoft advisories and general updates. Monitor for public disclosures or vendor mitigations to confirm affected products, root cause, and fixes.
CVE-2021-1642
CVE-2021-1642 affects Windows AppX Deployment Extensions and is described as an Elevation of Privilege vulnerability. CVSSv3.1 score 7.8 (HIGH) with local attack vector, low complexity, and privileges required LOW; impact to confidentiality, integrity, and availability is HIGH. Connected document...
CVE-2021-28442
Technical details about CVE-2021-28442 are not provided in the supplied documents. No specifics on affected products, root cause, or fixes are present. Monitor for updates.
CVE-2022-21998
CVE-2022-21998 affects the Windows Common Log File System Driver and is described as a local-information-disclosure vulnerability. The CVSS details indicate a Local attack vector, low attack complexity, no user interaction, and a confidentiality impact of High (C:H) with no integrity or availabil...
CVE-2022-35832
CVE-2022-35832 is documented as a Windows Event Tracing Denial of Service vulnerability. The connected sources provide no explicit product/version information or fix details; the NVD entry lists a CVSSv3.1 base score of 5.5 (Medium) with LOCAL attack vector, LOW privileges required, no user inter...
CVE-2022-37994
Technical details about CVE-2022-37994—including affected product versions, root cause, exploitability, and remediation—are not disclosed in the provided connected documents. No concrete exploit information or fix is described here. Monitor official MSRC/NVD advisories for updates.
CVE-2022-44679
CVE-2022-44679 is a Windows Graphics Component Information Disclosure vulnerability. Affected: Windows Graphics Component; root cause details are not provided in the supplied documents beyond the vulnerability type. CVSS 3.1 base score 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N); attack vector loca...
CVE-2023-21697
Technical details about CVE-2023-21697 are not publicly available in the provided documents. Monitor for updates from Microsoft/NVD and Vulners for affected products, exploit information, and remediation.
CVE-2023-21702
CVE-2023-21702 refers to a Windows iSCSI Service Denial of Service vulnerability. The initial description notes a HIGH (7.5) CVSS v3.1 impact with network attack vector and no user interaction, but the connected documents do not provide additional technical details, affected software versions, ro...
CVE-2023-21797
Technical details about CVE-2023-21797 are not publicly provided in the supplied documents; no affected product/version or exploit information is present here. Monitor for updates from official sources.
CVE-2023-24906
CVE-2023-24906 concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver that can lead to information disclosure. The affected component is the PostScript and PCL6 Class Printer Driver; root cause and detailed technical steps are not elaborated in the provided documents b...
CVE-2023-32039
Technical details about CVE-2023-32039 are not provided in the connected documents. Please monitor for updates.
CVE-2023-35317
Technical details (affected component/version/root cause/exploit status) for CVE-2023-35317 are not provided in the supplied documents. Monitor for updates from official sources.
CVE-2023-35324
Technical details about CVE-2023-35324 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.
CVE-2023-36871
Technical details for CVE-2023-36871 are not publicly available in the provided connected documents. No vendor/product/version specifics, exploit information, or remediation are included here. Monitor for updates from official sources.
CVE-2024-30005
CVE-2024-30005 relates to the Windows Mobile Broadband Driver remote code execution. Per NCSC, it is listed under Windows Mobile Broadband with a CVSS around 6.8/6.80 and impact described as executing random code. No root-cause or remediation details are provided in the available documents; monit...
CVE-2024-30034
CVE-2024-30034 affects Windows Cloud Files Mini Filter Driver and is an information disclosure vulnerability. CVSSv3.1 provides a base score of 5.5 (MEDIUM), attack vector LOCAL, attack complexity LOW, privileges required LOW, no user interaction, with confidentiality impact HIGH. Exploitation st...
CVE-2024-38043
Technical details for CVE-2024-38043 are not publicly provided in the supplied documents. No affected product/version or root cause is specified here. Monitor for updates from Microsoft and CVE repositories.
CVE-2024-38048
Technical details for CVE-2024-38048 are not publicly provided in the connected documents. Please monitor for updates; the supplied sources do not include affected products, root cause, impact, or remediation specifics.
CVE-2024-38085
Technical details about CVE-2024-38085 are not provided in the supplied documents; no affected products, root cause, or mitigations are disclosed here. Monitor for updates from Microsoft and related CVE references.
CVE-2024-43628
According to the NCSC advisory, CVE-2024-43628 is a Windows Telephony Service Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.8 (HIGH) and an impact described as Execute random code. The vulnerability is listed under Windows Telephony Service with a remediation path through M...
CVE-2024-49079
Technical details for CVE-2024-49079 are not provided in the supplied documents. Monitor for updates from Microsoft, NVD, CVE List, and other official sources as disclosures evolve.
CVE-2025-21200
CVE-2025-21200 is listed by ENISA/NCSC as a vulnerability affecting the Windows Telephony Service with high impact and the ability to execute arbitrary code. The linked material specifies a CVSSv3.1 base score of 8.8 (Network attack, No user privileges, User interaction required; High confidentia...
CVE-2025-21269
CVE-2025-21269 is described as a Windows HTML Platforms Security Feature Bypass vulnerability. Connected CNVD/NCSC/KB entries reference a Windows HTML Platforms security feature bypass without detailed exploit steps; the Initial metrics show CVSS 3.1 (4.3, Network, UI: Required). Exploitation spe...
CVE-2026-40415
Technical details (affected product, component, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates from official advisories.
CVE-2019-0733
Technical details for CVE-2019-0733 are not publicly provided in the connected documents; the initial description is generic. Monitor official advisories for updates and specifics.
CVE-2019-0734
CVE-2019-0734 is a Windows elevation-of-privilege issue where a man-in-the-middle can decode and replace Kerberos authentication requests, enabling an attacker to be validated as Administrator. Affected: Microsoft Windows Kerberos authentication flow. Impact as documented: high severity with pote...
CVE-2019-1179
CVE-2019-1179 describes an elevation-of-privilege flaw in how unistore.dll handles objects in memory. A locally authenticated attacker could execute code with elevated permissions by running a crafted application. The vulnerability is addressed by a security update that ensures unistore.dll prope...
CVE-2019-1206
CVE-2019-1206 describes a memory corruption vulnerability in the Windows Server DHCP service triggered by processing specially crafted DHCP failover packets. The underlying issue is improper handling of failover packets, which can allow a remote attacker to cause the DHCP service to become nonres...
CVE-2019-1411
CVE-2019-1411 is a DirectWrite information disclosure vulnerability. The issue arises when DirectWrite improperly discloses memory contents. The CVSS v3.1 vector indicates NETWORK attack, LOW complexity, no privileges required, UI interaction is REQUIRED, with a HIGH impact on confidentiality and...
CVE-2019-1488
Technical details about CVE-2019-1488 are not available in the provided documents. Monitor for updates from ENISA/RH and OpenVAS references for any concrete exposures or fixes.
CVE-2020-0614
Technical details about CVE-2020-0614 are not provided in the connected documents; no specifics on affected products, root cause, or remediation are available here. Monitor for updates.
CVE-2020-0617
CVE-2020-0617 relates to a Microsoft Hyper-V Denial of Service vulnerability. The CNVD entry describes that the vulnerability stems from Hyper-V Virtual PCI on the host failing to properly validate input submitted by privileged users from a guest OS, allowing an attacker with privileged access an...
CVE-2020-0621
CVE-2020-0621 is a Windows 10 security feature bypass vulnerability where third‑party filters invoked during a password update can bypass protections. Affected product: Windows 10 (password update path with third‑party filters). Root cause: bypass of security feature during password change, enabl...
CVE-2020-0737
CVE-2020-0737 is a Windows elevation-of-privilege vulnerability tied to how tapisrv.dll handles in-memory objects. The root cause is memory-objects handling in this DLL, enabling an attacker who can supply or manipulate objects to execute code with elevated privileges on affected Windows systems....
CVE-2020-0865
CVE-2020-0865 is a Windows Work Folder Service elevation-of-privilege vulnerability. CNVD-2020-23447 describes a privilege-mobilization flaw where the service’s mis-handling of file operations allows an attacker with a specially crafted application to execute processes with elevated privileges on...
CVE-2020-0881
CVE-2020-0883 is a remote code execution vulnerability in Windows GDI (GDI+), caused by improper handling of memory objects. The CVE is documented as distinct from CVE-2020-0881. A working exploit PoC for CVE-2020-0883 exists in public GitHub material, indicating practical exploitability. Several...
CVE-2020-0982
CVE-2020-0982 is an information disclosure vulnerability in Microsoft Windows Graphics Component. Affected: Windows Graphics Component; root cause: improper handling of in-memory objects. Impact per sources: potential disclosure of information. The connected documents also list related CVEs (CVE-...
CVE-2020-1091
Technical details about CVE-2020-1091 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability databases for affected products, root cause, and fixes.
CVE-2020-1176
The CVE-2020-1176 entry concerns a remote code execution in the Windows Jet Database Engine caused by improper handling of objects in memory. The connected document indicates that the Jet Database Engine is referenced within a May 2020 Windows security update (KB4556799) affecting OS builds 18362...