5309 matches found
CVE-2024-38149
CVE-2024-38149 is a Windows BranchCache Denial of Service vulnerability. Documents indicate a network-exploitable issue (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) affecting BranchCache components. Microsoft provides fixes via security updates (KB/MSRC guidance); no explicit root-cause ...
CVE-2019-0701
The CVE-2019-0701 entry describes a denial-of-service condition affecting Microsoft Hyper-V. It concerns the host Hyper-V environment failing to properly validate input from a privileged user on a guest OS, associated with the Windows Hyper-V Denial of Service vulnerability. The NVD entries group...
CVE-2019-1176
CVE-2019-1176 is a Windows DirectX elevation-of-privilege vulnerability. It occurs when DirectX mishandles objects in memory, potentially allowing a locally authenticated attacker to run kernel-mode code, install programs, view/change/delete data, or create full-privilege accounts by exploiting a...
CVE-2020-0680
CVE-2020-0680 is a Windows elevation-of-privilege vulnerability in the Windows Function Discovery Service related to how objects in memory are handled. The description states an elevation of privilege via memory handling in this service, indicating a local attack path with partial confidentiality...
CVE-2020-0705
CVE-2020-0705 is an information-disclosure vulnerability in Windows’ Network Driver Interface Specification (NDIS) where memory handling is improper. The issue can disclose information from memory and requires prior execution on the target (local access with low attack complexity per CVSS v3.1: A...
CVE-2020-0721
Technical details for CVE-2020-0721 are not publicly available in the provided documents . Monitor for updates in case further specifics on affected products, impact, or fixes are released.
CVE-2020-0723
Technical details for CVE-2020-0723 are not publicly provided in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.
CVE-2020-0741
CVE-2020-0741 is an elevation of privilege vulnerability affecting Microsoft Windows and Microsoft Windows Server via the Connected Devices Platform Service . The root cause, as described in connected CNVD records, is improper handling of objects in memory within this service, enabling an attacke...
CVE-2020-0747
Technical details about CVE-2020-0747 are not publicly provided in the attached documents. Monitor for updates from authoritative sources; current entries describe the vulnerability at a high level without specific affected products, versions, or mitigations.
CVE-2020-0797
CVE-2020-0797 is a Windows Privilege Mobilization vulnerability in the Windows Work Folder Service. The issue arises from the service handling file operations improperly, enabling an attacker with a specially crafted application to run processes with elevated privileges. No exploit details, patch...
CVE-2020-0875
CVE-2020-0875 describes an information disclosure vulnerability in how splwow64.exe handles certain calls. An attacker who exploits this could obtain information to further compromise the user’s system (low-integrity to medium-integrity). The flaw by itself does not grant arbitrary code execution...
CVE-2020-1014
CVE-2020-1014 is described in connected docs as an elevation of privilege in the Microsoft Windows Update Client caused by improper privilege handling. The CNVD entry attributes the flaw to the Windows Update Client, enabling privilege escalation, and the OpenVAS/MSKB references corroborate this ...
CVE-2020-1029
CVE-2020-1029 affects the Windows Connected User Experiences and Telemetry Service. The vulnerability is an Elevation of Privilege caused by improper handling of file operations in this service. According to the data, it can be triggered locally (local access required) and could grant elevated/sy...
CVE-2020-1081
CVE-2020-1081 is an elevation-of-privilege issue in the Windows Printer Service caused by improper validation of file paths when loading printer drivers. Affected product: Windows Printer Service. Root cause details and specific vulnerable versions are not enumerated in the provided documents bey...
CVE-2020-1123
CVE-2020-1123 is a denial-of-service vulnerability in Microsoft Windows Connected User Experiences and Telemetry Service, arising from improper handling of operations (e.g., file-related handling) and related to the CVE-2020-1084 distinction. Connected documents corroborate DoS impact from failur...
CVE-2020-1204
CVE-2020-1204 is an Elevation of Privilege in Windows Mobile Device Management Diagnostics caused by improper handling of junctions. The vulnerability could allow an attacker to bypass access restrictions and delete files after logging on and running a crafted app. Microsoft’s MSRC entry notes a ...
CVE-2020-1283
CVE-2020-1283 is a Windows denial-of-service vulnerability where memory objects are improperly handled, causing the system to stop responding. The connected Nessus entry (KB4557957 family) lists CVE-2020-1283 among patched issues in June 2020, but the provided sources do not specify affected prod...
CVE-2020-1291
CVE-2020-1291 is an elevation of privilege vulnerability in the Windows Network Connections Service related to how memory objects are handled. The issue is documented for Windows Network Connections Service (no explicit affected OS versions in the provided texts). The CVSS data in the initial rec...
CVE-2020-1309
Technical details for CVE-2020-1309 (affected product/version, impact, exploitability) are not publicly available in the provided documents. Monitor for updates from CVE/NVD entries and vendor advisories.
CVE-2020-1372
CVE-2020-1372 refers to an Elevation of Privilege in Windows Mobile Device Management (MDM) Diagnostics. CNVD entries state the root cause as improper handling of objects in memory, exploitable by running a specially crafted application to bypass access restrictions (and, in one CNVD entry, delet...
CVE-2021-1729
CVE-2021-1729 is described as a Windows Update Stack Setup Elevation of Privilege vulnerability. The connected documents confirm the issue concerns the Windows Update Stack installer and reference multiple advisories from 2021–2022, including ZDI advisory ZDI-21-284 and Microsoft MSRC/KB entries....
CVE-2021-26862
Technical details about CVE-2021-26862 (affected product/component, root cause, impact, or patch) are not provided in the connected documents. Monitor official advisories for updates; current sources only confirm the vulnerability name/type without specifics.
CVE-2021-28435
Technical details about CVE-2021-28435 are not publicly provided in the connected documents you supplied. Monitor for updates from vendor advisories and security feeds to learn affected products, impact, and fixes.
CVE-2021-43235
Technical details for CVE-2021-43235 are not publicly available in the provided documents. Monitor for updates from official sources; currently only CVSS metrics and references are noted.
CVE-2024-38091
Technical details for CVE-2024-38091 are not provided in the connected documents. Monitor for updates; no affected products, root cause, vectors, or fixes are stated here.
CVE-2024-38239
Microsoft Windows Kerberos CVE-2024-38239 is an Elevation of Privilege in the Windows Kerberos component. The connected Windows vulnerability listing assigns CVSS v3.1 base score 7.2 (HIGH) with network attack vector, low attack complexity, and privileges required: HIGH; impact is CONfidentiality...
CVE-2024-38260
CVE-2024-38260 is a Windows Remote Desktop Licensing Service RCE vulnerability. Affected: Windows systems with the Remote Desktop Licensing Service. Impact per sources: execution of arbitrary code with the attacker’s privileges; CVSSv3.1 base score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Conne...
CVE-2024-49121
CVE-2024-49121 is an LDAP Denial-of-Service vulnerability in Windows LDAP (Domain Controller). The connected advisory confirms the LDAP issue as a DoS risk and notes that Microsoft has released fixes via updates; applying the relevant Windows security updates is the recommended remediation. MITRE...
CVE-2025-21243
CVE-2025-21243 affects Windows Telephony Service. The vulnerability is a remote code execution flaw caused by input validation in Windows Telephony Server, enabling network-based exploitation with required user interaction and no privileges. The CVSS v3.1 base score is 8.8 (HIGH) with network acc...
CVE-2025-21265
Technical details about CVE-2025-21265 are not provided in the supplied documents. Public information on affected products, root cause, and fixes is missing here. Monitor for updates from Microsoft and NVD for concrete vulnerability specifics.
CVE-2025-26634
CVE-2025-26634 describes a heap-based buffer overflow in Windows Core Messaging that could allow an unauthenticated? not; authorized attacker to elevate privileges over a network. The CVE entry lists a CVSS v3.1 base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality/i...
CVE-2026-32202
CVE-2026-32202 is a Windows Shell vulnerability described as a protection mechanism failure that enables spoofing over a network. Connected sources label the issue under Windows Shell with the capability for an attacker to pretend to be another user (e.g., “Pretend to be another user”) and refere...
CVE-2026-50368
CVE-2026-50368 refers to a stack-based buffer overflow in Active Directory Federation Services (AD FS) that allows an unauthenticated attacker to cause a denial of service over the network. The vulnerability arises in the AD FS component and is described in multiple sources as enabling a DS impac...
CVE-2026-61346
CVE-2026-61346 describes a use-after-free in the Windows Graphics Kernel that can allow an authorized local attacker to elevate privileges. The available documents confirm the vulnerable component is the Windows Graphics Kernel and indicate a local, high-impact risk (CVSSv3.1: AV=L/AC=H/PR=L/UI=N...
CVE-2026-61356
CVE-2026-61356 : The vulnerability concerns Windows Remote Desktop Services . The issue is described as “Missing authentication for a critical function,” enabling an elevation of privileges attack from a local, authenticated position. The CVSS 3.1 score is reported as 7.8 (HIGH) with local access...
CVE-2019-0712
Technical details (affected products, components, root cause, fix) are not provided in the connected documents. The initial CVE description notes a Hyper-V Denial of Service vulnerability, but no public technical specifics are supplied here. Monitor for updates.
CVE-2019-1173
CVE-2019-1173 is an elevation-of-privilege flaw affecting the Windows component PsmServiceExtHost.dll where in-memory object handling is improper. The vulnerability allows a locally authenticated attacker to execute code with elevated permissions by running a crafted application. Microsoft’s secu...
CVE-2019-1223
The CVE-2019-1223 entry describes a denial-of-service in Remote Desktop Protocol (RDP) where an attacker can cause the RDP service to stop responding by sending specially crafted connection requests. The vulnerability arises in how RDP handles connection requests, enabling network-based DoS when ...
CVE-2019-1440
Technical details for CVE-2019-1440 are not provided in the supplied documents; no affected products, versions, impact, or fixes are specified. Monitor for updates from official sources.
CVE-2020-0806
CVE-2020-0806 concerns an elevation of privilege in Windows Error Reporting (WER) related to how WER handles and executes files. The combination of affected component (WER) and the underlying memory handling issue yields a local, low-attack-surface vector with a high-impact outcome (CVE-2020-0806...
CVE-2020-0857
CVE-2020-0857 is an elevation of privilege vulnerability in Windows: the Windows Search Indexer mishandles memory objects, enabling local attackers to gain elevated privileges. Affected: Windows Search Indexer process; root cause is memory handling. Impact per sources is elevation of privileges w...
CVE-2020-0877
CVE-2020-0887 is a Windows Win32k Elevation of Privilege vulnerability where the Win32k component fails to properly handle objects in memory. The description (and related CVEs 2020-0788 and 2020-0877) indicate a local privilege escalation risk, with kernel-mode execution potential as stated in mu...
CVE-2020-1082
CVE-2020-1082 is an elevation of privilege vulnerability in Windows Error Reporting (WER) related to how WER handles and executes files. The description identifies the issue as distinct from CVE-2020-1021 and CVE-2020-1088. Public documentation in the connected sources confirms the vulnerable com...
CVE-2020-1097
CVE-2020-1097 describes an information-disclosure vulnerability in the Windows GDI component where memory contents could be exposed due to improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage,...
CVE-2020-1114
Technical details about CVE-2020-1114 are not present in the provided Connected documents. Public details appear limited to the Initial description. Monitor for updates.
CVE-2020-1134
Technical details for CVE-2020-1134 are not provided in the connected documents. Public information in the Initial Description is limited to general vulnerability context. Monitor for updates from ENISA EUVD entries if relevant.
CVE-2020-1154
CVE-2020-1154 : Elevation of privilege in the Windows Common Log File System (CLFS) Driver due to improper handling of objects in memory. The vulnerability enables local privilege escalation, with a high-severity impact (CONFIDENTIALITY/INTEGRITY/AVAILABILITY listed as HIGH in CVSS 3.1, and LOCAL...
CVE-2020-1197
CVE-2020-1197 is an elevation-of-privilege vulnerability in Windows Error Reporting Manager caused by improper handling of a process crash. Public sources (CNVD entry) describe that an attacker who can log on and run a crafted app may delete target files and elevate privileges. NVD lists impact a...
CVE-2020-1222
Technical details about CVE-2020-1222/1309 are not publicly provided in the connected documents. Available entries summarize memory handling and privilege elevation but do not specify affected products, versions, root cause, impact, or remediation beyond generic references. Monitor for updates.