4929 matches found
CVE-2020-17025
Technical details for CVE-2020-17025 are not provided in the supplied documents; affected products, impact, root cause, or remediation are not disclosed. Monitor for updates.
CVE-2024-30012
CVE-2024-30012 is a Windows Mobile Broadband Driver Remote Code Execution vulnerability. The CVSS v3.1 base score is 6.8 (AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected component is the Windows Mobile Broadband Driver; impact is remote code execution with high confidentiality, integrity, and ...
CVE-2024-37971
Technical details about CVE-2024-37971 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and NVD for affected products, impact, and remediation; current sources do not specify affected components or fixes within this dataset.
CVE-2024-38013
Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.
CVE-2024-38019
Technical details about CVE-2024-38019 are not provided in the supplied documents. Public sources in Connected documents do not specify affected products, root cause, exploit status or remediation. Monitor for official advisories and Microsoft update notes for confirmation.
CVE-2024-38061
Technical details for CVE-2024-38061 (affected products, root cause, impact, fixes) are not provided in the supplied documents. No remediation or exploitation specifics are available here. Monitor for updates.
CVE-2024-38064
Technical details for CVE-2024-38064 are not provided in the supplied documents. Public details (affected product/impact) are not disclosed here. Monitor for updates from vendors and vulnerability feeds to obtain concrete root cause, affected components, and fixes.
CVE-2024-43556
CVE-2024-43556 is a Windows Graphics Component elevation-of-privilege vulnerability. Public sources confirm it affects the Windows Graphics Component and can yield elevated privileges (base CVSS v3.1 7.8). The issue is listed as a local, privilege-escalation risk; exploitation details are not pro...
CVE-2024-43589
Technical details about CVE-2024-43589 (affected RRAS, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE registries.
CVE-2025-21231
CVE-2025-21231 documents describe a Denial-of-Service vulnerability in the Windows IP Helper component. The CVE entry lists a network-based attack vector with low attack complexity and no privileges required, resulting in availability impact. Connected records corroborate IP Helper as the affecte...
CVE-2025-21237
CVE-2025-21237 is a Windows Telephony Service Remote Code Execution vulnerability. Exploitation could allow remote code execution via the Telephony Service; CVSS v3.1 base score 8.8 (HIGH) with network access, user interaction required. Affected products are Windows components where Telephony Ser...
CVE-2025-27476
CVE-2025-27476 is a Windows Digital Media use-after-free vulnerability that enables local privilege escalation on an affected system. Governance: the initial description confirms local elevation of privileges; connected Microsoft advisories and NVD entries indicate Windows Digital Media is the af...
CVE-2026-21525
CVE-2026-21525 is a Windows Remote Access Connection Manager (RasMan) Denial of Service vulnerability caused by a NULL pointer dereference. An unauthenticated, locally-initiated attacker can trigger a crash of RasMan, impacting availability. Connected sources confirm this as a local DoS issue, wi...
CVE-2026-25187
CVE-2026-25187 is a Winlogon elevation-of-privilege vulnerability described as improper link resolution before file access (link following). It is a local vulnerability in Windows Winlogon that could allow an authorized attacker to elevate privileges to SYSTEM with no user interaction required. T...
CVE-2019-0865
Technical details about CVE-2019-0865 are not present in the provided connected documents. The supplied materials are unrelated MSKB entries and a generic CVE description. Monitor for updates.
CVE-2019-0998
CVE-2019-0998 affects Windows Storage Service, where improper handling of file operations allows an attacker who can execute code on a victim system to obtain elevated privileges. The root cause is an elevation-of-privilege flaw in the Storage Service’s file operation handling. Exploitation requi...
CVE-2019-1175
CVE-2019-1175 is a Windows elevation-of-privilege vulnerability linked to psmsrv.dll handling of in-memory objects. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. Microsoft security guidance notes the fix involves ensuring psmsrv.dll pr...
CVE-2019-1188
CVE-2019-1188 is a remote code execution vulnerability in Microsoft Windows involving processing of .LNK shortcut references. An attacker could trick a user into opening a removable drive or remote share containing a malicious .LNK file and an associated binary; when the user opens the drive or p...
CVE-2019-1382
CVE-2019-1382 affects Microsoft Windows ActiveX Installer Service (AxInstSV). The root cause is an elevation of privilege where the service may access files without proper authentication, enabling local privilege escalation. Documented impact is local access with elevated privileges; no exploit d...
CVE-2019-1433
Technical details about CVE-2019-1433 are not publicly available in the provided connected documents; monitor for updates.
CVE-2019-1438
Technical details for CVE-2019-1438 are not publicly available in the provided documents. No exposed affected products, root cause, impact, or remediation are disclosed here. Monitor official advisories and NVD for updates.
CVE-2020-0841
Technical details for CVE-2020-0841 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates.
CVE-2020-0859
CVE-2020-0859 is described as an information disclosure vulnerability in Windows Modules Installer Service where file information could be disclosed. The primary details available: affected component is Windows Modules Installer Service; root cause and exact exploitation path are not elaborated i...
CVE-2020-0950
CVE-2020-0950 is described as a memory corruption vulnerability in Windows Media Foundation caused by improper handling of memory objects, part of the Media Foundation Memory Corruption family alongside CVE-2020-0948 and CVE-2020-0949. The connected CNVD entries similarly refer to a Media Foundat...
CVE-2020-0988
CVE-2020-0988 describes a remote code execution flaw in Microsoft Windows Jet Database Engine caused by improper handling of memory objects. The connected KB4549951 document indicates a security update addressing Jet DB Engine issues as part of Windows 10 OS builds 18362.778 and 18363.778 (securi...
CVE-2020-0995
CVE-2020-0995 represents a Remote Code Execution vulnerability in Microsoft Windows Jet Database Engine. Connected sources describe the issue as stemming from improper handling of memory objects within the Jet Database Engine, enabling an attacker to execute arbitrary code on a target system, typ...
CVE-2020-1094
CVE-2020-1094 is an elevation of privilege vulnerability in the Windows Work Folder Service. The flaw arises from improper handling of file operations within the Work Folder Service, enabling a locally authenticated attacker to elevate privileges by running a crafted application. The vulnerabilit...
CVE-2020-1153
CVE-2020-1153 is a remote code execution vulnerability in the way Microsoft Graphics Components handles objects in memory. The connected MSKB entries reference Windows updates that include security fixes for the Microsoft Graphics Component as part of the May 2020 updates (e.g., KB4556799 and rel...
CVE-2020-1155
IBM MaaS360 Cloud Extender has CVE-2020-1155 and CVE-2020-1156. The IBM security bulletin notes the affected product is IBM MaaS360 Cloud Extender (2.101.x and earlier) and provides a remediation: upgrade to version 2.102.000.060 or newer. No other technical details (e.g., root cause, exploitabil...
CVE-2020-1236
CVE-2020-1236 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Jet DB Engine (Jet Database Engine/RCE) is listed among CVEs tied to Microsoft Jet components in OpenVAS entries, and is explicitly referenced in the lin...
CVE-2020-1278
CVE-2020-1278 relates to an elevation of privilege in the Diagnostics Hub Standard Collector Service due to improper file operations. The vulnerability enables local privilege elevation, as the service handles files in a way that can be exploited by an authenticated attacker with access to the sy...
CVE-2020-1302
Technical details for CVE-2020-1302 are not publicly available in the provided documents. Monitor for updates.
CVE-2020-1428
Technical details about CVE-2020-1428 are not publicly provided in the connected documents you supplied. Please monitor for updates from official advisories.
CVE-2020-17000
CVE-2020-17000 is a Windows/Windows Server Remote Desktop Protocol (RDP) client information-disclosure vulnerability. The connected CNVD entry describes it as an information-disclosure flaw in the RDP client that can allow an attacker to read uninitialized memory contents. CVSSv3.1 indicates aLoc...
CVE-2020-17068
Technical details for CVE-2020-17068 are not publicly provided in the connected documents. No confirmed affected products, root cause, or fixes are present here. Monitor for updates from authoritative sources.
CVE-2020-17099
CVE-2020-17099 corresponds to a Windows lock-screen security feature bypass. The available data indicate a physical-access vulnerability affecting Windows lock screen functionality, with a CVSSv3.1 base score of 6.8 and impact on confidentiality, integrity, and availability (C:H/I:H/A:H) when exp...
CVE-2021-1652
Technical details for CVE-2021-1652 are not publicly provided in the connected documents. No affected product/version or exploit information is disclosed here. Monitor for updates.
CVE-2021-1661
Technical details for CVE-2021-1661 are not publicly available in the provided documents. Monitor for updates to confirm affected products, root cause, impact, and remediation.
CVE-2021-1684
Technical details for CVE-2021-1684 are not provided in the connected documents. The Initial Description mentions a Passkey Entry Protocol impersonation and a Microsoft update that may fail pairing when public keys share the same X coordinate.
CVE-2021-28316
CVE-2021-28316 affects Windows WLAN AutoConfig, enabling a security feature bypass in that service. Reports indicate it is a local-attack surface with no public exploitation to date, and Microsoft released fixes as part of the September 2021 Patch Tuesday. The vulnerability’s impact is described ...
CVE-2021-28446
CVE-2021-28446 is a Windows Portmapping Information Disclosure Vulnerability with local attack vector. NVD data shows Confidentiality Impact HIGH (I) and no Integrity/Availability impact, base score 5.5 (3.1) / 2.1 (2.0) and a higher CNA score 7.1 (HIGH). Exploitation status is listed as null in ...
CVE-2021-43234
CVE-2021-43234 is a Windows Fax Service Remote Code Execution Vulnerability. Connected CNVD entry explicitly states a remote code execution vulnerability exists in Microsoft Windows Fax Service, enabling an attacker to run arbitrary code on the target host. NVD entries corroborate the CVE and ass...
CVE-2021-43248
Technical details for CVE-2021-43248 are not publicly available in the provided documents; monitor for updates.
CVE-2022-26795
CVE-2022-26795 is a Windows Print Spooler elevation-of-privilege vulnerability. The vulnerability is local, with low attack complexity and no user interaction required, and yields high impact to confidentiality, integrity, and availability per CVSS 3.1/3.1 metrics. The available connected sources...
CVE-2022-26821
Technical details about CVE-2022-26821 are not publicly provided in the supplied documents. Monitor for updates from official advisories and referenced sources.
CVE-2022-35760
Technical details about CVE-2022-35760 (affected product, root cause, impact or fix) are not provided in the connected documents. Please monitor for updates from official sources.
CVE-2022-37983
CVE-2022-37983 affects the Windows DWM Core Library. The vulnerability is an elevation of privilege that arises from improper privilege assignment in the DWM Core Library, enabling a local attacker with low privileges to gain higher privileges (high impact on confidentiality, integrity, and avail...
CVE-2023-35350
Technical details for CVE-2023-35350 are not publicly available in the provided documents. Affected product/impact/root cause are not disclosed here. Monitor for updates and official advisories.
CVE-2023-35358
CVE-2023-35358 refers to a Windows kernel registry vulnerability where an unexpected -1 cell index was observed in KCB.KeyCell, indicating that the code assumed at least one key with an allocated node in the key node stack, but differed when using layered/differencing hives and transactions. The ...