Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
le System Driver Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1214
CVE ID: CVE-2019-1215 State: PUBLISHED Published: 2019-09-11T21:24:58.000Z Last Updated: 2025-10-21T23:45:31.121Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303. Additional Analyst Notes: - CVE Program Container
his CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1215
CVE ID: CVE-2019-1216 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:29.868Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1216
CVE ID: CVE-2019-1217 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:29.654Z Vendors: Microsoft Products: Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1803 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows Server 2019, Microsoft Edge (
indows 10 Version 1809 for ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows Server 2019, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems, ChakraCore Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1237, CVE-2019-1298, CVE-2019-1300. Additi
Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1138, CVE-2019-1237, CVE-2019-1298, CVE-2019-1300. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1217
CVE ID: CVE-2019-1218 State: PUBLISHED Published: 2019-08-14T20:55:05 Last Updated: 2024-08-04T18:13:30.317Z Vendors: Microsoft Products: Outlook for iOS Problem Types: Spoofing Description: A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. An authenticated attacker could exploit the vulnerability by sending a specially crafted email message to a victim. The attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on the affected systems and run scripts in the security context of the current user. The security update addresses the vulnerability by correcting how Outlook iOS parse
ecurity context of the current user. The security update addresses the vulnerability by correcting how Outlook iOS parses specially crafted email messages. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1218
CVE ID: CVE-2019-1219 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:29.675Z Vendors: Microsoft Products: Windows, Windows Server, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows Transaction Manager improperly handles objects in memory, aka 'Windows Transaction Manager Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.c
closure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1219
CVE ID: CVE-2019-1220 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:30.148Z Vendors: Microsoft Products: Internet Explorer 9, Internet Explorer 11, Internet Explorer 11 on Windows Server 2012, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems, Internet Explorer 10, Microsoft Edge (EdgeHTML-based) on Windows 10 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows Server 2016, Microsoft Edge (EdgeHTML-based) on Windows 10 Ver
or ARM64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems, Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Problem Types: Security Feature Bypass Description: A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs, aka 'Microsoft Browser Security Feature Bypass Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1220
CVE ID: CVE-2019-1221 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:29.695Z Vendors: Microsoft Products: Internet Explorer 11, Internet Explorer 11 on Windows Server 2012, Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems, Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems, Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. Additional Analyst Notes: - CVE Program Containe
ernet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1221
CVE ID: CVE-2019-1222 State: PUBLISHED Published: 2019-08-14T20:55:05 Last Updated: 2024-08-04T18:13:29.535Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Rem
Core installation) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target sys
user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP. The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1222 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190819-01-windows-en - https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf
CVE ID: CVE-2019-1223 State: PUBLISHED Published: 2019-08-14T20:55:05 Last Updated: 2024-08-04T18:13:29.520Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Denial of Service Description: A denial of service vulnerability exists in Remote Desktop
installation) Problem Types: Denial of Service Description: A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services. The update addresses the vulnerability by correcting how RDP handles connection requests. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.mic
DP handles connection requests. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1223
CVE ID: CVE-2019-1224 State: PUBLISHED Published: 2019-08-14T20:55:05 Last Updated: 2024-08-04T18:13:29.334Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation) Problem Types: Informat
installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows RDP server initializes memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program
recting how the Windows RDP server initializes memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1224
CVE ID: CVE-2019-1225 State: PUBLISHED Published: 2019-08-14T20:55:05 Last Updated: 2024-08-04T18:13:30.371Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation) Problem Types: Informat
installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows RDP server initializes memory. Additional Analyst Notes: - CVE Program Container: References: -
recting how the Windows RDP server initializes memory. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1225
CVE ID: CVE-2019-1226 State: PUBLISHED Published: 2019-08-14T20:55:05 Last Updated: 2024-08-04T18:13:29.557Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation) Problem Types: Remo
Core installation), Windows 10 Version 1909, Windows Server, version 1909 (Server Core installation) Problem Types: Remote Code Execution Description: A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who successfully exploited this vulnerability could execute arbitrary code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerabi
install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would need to send a specially crafted request to the target systems Remote Desktop Service via RDP. The update addresses the vulnerability by correcting how Remote Desktop Services handles connection requests. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1226 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190819-01-windows-en - https://cert-portal.siemens.com/productcert/pdf/ssa-187667.pdf
CVE ID: CVE-2019-1227 State: PUBLISHED Published: 2019-08-14T20:55:05 Last Updated: 2024-08-04T18:13:29.702Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1803, Windows Server, version 1803 (Server Core Installation), Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when
re installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system. The update addresses the vulnerability by correcting how the W
be used to try to further compromise the affected system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1227
CVE ID: CVE-2019-1228 State: PUBLISHED Published: 2019-08-14T20:55:06 Last Updated: 2024-08-04T18:13:29.252Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Windows 7, Windows 7 Service Pack 1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Systems Service Pack 1, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation) Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in
osure Description: An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory. Addition
system. The update addresses the vulnerability by correcting how the Windows kernel handles objects in memory. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1228
CVE ID: CVE-2019-1229 State: PUBLISHED Published: 2019-08-14T20:55:06 Last Updated: 2024-08-04T18:13:30.206Z Vendors: Microsoft Products: Microsoft Dynamics 365 (on-premises) version 9.0 Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vulnerability could leverage a customizer privilege within Dynamics to gain control of the Web Role hosting the Dynamics installation. To exploit this vulnerability, an attacker needs to have credentials for a user that has permission to author customized business rules in Dynamics, and persist XAML script in a way that causes it to be interpr
ermission to author customized business rules in Dynamics, and persist XAML script in a way that causes it to be interpreted as code. The update addresses the vulnerability by restricting XAML activities to a whitelisted set. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1229
CVE ID: CVE-2019-1230 State: PUBLISHED Published: 2019-10-10T13:28:40 Last Updated: 2024-08-04T18:13:29.680Z Vendors: Microsoft Products: Windows, Windows Server Problem Types: Information Disclosure Description: An information disclosure vulnerability exists when the Windows Hyper-V Network Switch on a host operating system fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1230
CVE ID: CVE-2019-1231 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:29.574Z Vendors: Microsoft Products: Rome SDK Problem Types: Information Disclosure Description: An information disclosure vulnerability exists in the way Rome SDK handles server SSL/TLS certificate validation, aka 'Rome SDK Information Disclosure Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1231
CVE ID: CVE-2019-1232 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:29.614Z Vendors: Microsoft Products: Microsoft Visual Studio, Windows, Windows Server, Microsoft Visual Studio 2017, Windows 10 Version 1903 for 32-bit Systems, Windows 10 Version 1903 for x64-based Systems, Windows 10 Version 1903 for ARM64-based Systems, Windows Server, version 1903 (Server Core installation), Microsoft Visual Studio 2019 Problem Types: Elevation of Privilege Description: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation
ector Service improperly impersonates certain file operations, aka 'Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1232
CVE ID: CVE-2019-1233 State: PUBLISHED Published: 2019-09-11T21:24:58 Last Updated: 2024-08-04T18:13:29.652Z Vendors: Microsoft Products: Microsoft Exchange Server 2016, Microsoft Exchange Server 2019 Problem Types: Denial of Service Description: A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1233
CVE ID: CVE-2019-1234 State: PUBLISHED Published: 2019-11-12T18:52:47 Last Updated: 2024-08-04T18:13:29.584Z Vendors: Microsoft Products: Azure Stack Problem Types: Spoofing Description: A spoofing vulnerability exists when Azure Stack fails to validate certain requests, aka 'Azure Stack Spoofing Vulnerability'. Additional Analyst Notes: - CVE Program Container: References: - https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1234 - https://research.checkpoint.com/2020/remote-cloud-execution-critical-vulnerabilities-in-azure-cloud-infrastructure-part-i/