CVE-2013-3900

CVE-2013-3900 describes a remote code execution in the WinVerifyTrust Authenticode verification for PE files. An attacker could modify a signed executable to execute code without invalidating the signature, potentially gaining full control of the system. Microsoft republished this CVE in the Secu...

CVE-2021-1732

CVE-2021-1732 is a Windows Win32k local privilege escalation vulnerability. The root cause is a flaw in how the WndExtra field is handled as an offset, enabling an out-of-bounds write that grants SYSTEM privileges. Public exploit activity exists in multiple GitHub repos that demonstrate a local p...

CVE-2020-17087

CVE-2020-17087 is a Windows Kernel Local Privilege Escalation vulnerability tied to a heap-based overflow in cng.sys. Connected exploit sources describe a local-vector attack requiring initial code execution, then abusing an IOCTL to .\\.GLOBALROOT\Device\Cng with a crafted size parameter that ca...

CVE-2021-28310

CVE-2021-28310 is a Win32k Elevation of Privilege vulnerability in Microsoft Windows. Project Zero’s 2021 review notes Win32k 0-day activity among in-the-wild exploits, with CVE-2021-28310 listed as one of the Windows 0-days targeted in 2021 (alongside other Win32k issues). The CVE entry is suppo...

CVE-2023-21549

Technical details for CVE-2023-21549 are not present in the provided documents. The connected entries do not describe affected products/versions or remediation. Monitor official sources for updates on this CVE.

CVE-2023-21563

Technical details (affected product, vulnerable component, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for updates from official advisories.

CVE-2023-21726

Technical details for CVE-2023-21726 are not provided in the supplied documents. No explicit information on affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2023-21551

Technical details about CVE-2023-21551 are not provided in the supplied documents. Monitor official advisories for updates; no specifics on affected products, impact, or remediation are available here.

CVE-2023-21524

Technical details about CVE-2023-21524 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The materials only reference the vulnerability title and general advisories; monitor for updates.

CVE-2023-21557

CVE-2023-21557 concerns the Windows LDAP (Lightweight Directory Access Protocol) Denial of Service vulnerability. The provided documents identify the affected component as Windows LDAP but do not specify affected product versions, root cause details, exploitation methods, or a concrete fix. Conne...

CVE-2023-21556

Technical details about CVE-2023-21556 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2023-21541

Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.

CVE-2023-21552

CVE-2023-21552 is documented in an NCSC advisory as a Windows Graphics Component vulnerability (Windows GDI) with CVSS v3.1 base score 7.80, affecting privilege escalation. The NCSC listing confirms its classification as an elevation of privileges issue in Windows Graphics/Graphics Device Interfa...

CVE-2023-21535

CVE-2023-21535 is a Windows SSTP Remote Code Execution vulnerability. The affected component is Secure Socket Tunneling Protocol (SSTP); root cause details are not expanded beyond “SSTP RCE” in the provided documents, but the CVE is rated high (CVSS 8.1) with network access, high confidentiality/...

CVE-2023-21561

Technical details about CVE-2023-21561 (affected product/component, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2023-21676

CVE-2023-21676 is a Windows LDAP Remote Code Execution vulnerability. The threat involves the Windows LDAP component, with network access as the attack vector and a high-severity impact profile (score 8.8/10; confidentiality, integrity, and availability impact). The available connected documents ...

CVE-2023-21732

Technical details about CVE-2023-21732 are not publicly provided in the connected documents. Monitor for updates for affected products, versions, payloads, and mitigations as they become available.

CVE-2023-21560

Technical details about CVE-2023-21560 (affected products, root cause, impact, remediation) are not provided in the supplied connected documents. Monitor for official disclosures and vendor advisories; the current set does not specify affected systems or fixes.

CVE-2023-21548

CVE-2023-21548 is a Windows SSTP remote code execution vulnerability. The connected NC Sc doc lists it under Windows SSTP with CVSS 8.10 (network context) and labels it as a SSTP issue; no explicit root-cause details or affected product versions are provided beyond “Windows SSTP.” The initial doc...

CVE-2023-21539

CVE-2023-21539 is described as a Windows Remote Code Execution vulnerability in the Windows authentication path. The connected sources confirm a network-exposed attack surface (vector: network; privileges required: low; user interaction: none) with a high impact on confidentiality, integrity, and...

CVE-2023-21543

According to NCSC-2023-0017, CVE-2023-21543 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability with CVSS v3.1 score 8.10 (impact: executing random code) affecting Windows L2TP components. The CVE is listed among other Windows network‑facing RCE bugs; no specific ex...

CVE-2023-21682

Technical details about CVE-2023-21682 are not publicly disclosed in the provided connected documents. The materials only reference a Windows PPP information disclosure vulnerability with CVSSv3.1 base score 5.3. Monitor for updates.

CVE-2023-21750

CVE-2023-21750 is a Windows Kernel EoP issue tied to registry virtualization: a logic bug in CmKeyBodyRemapToVirtual allowed deleting HKLM\Software keys using only KEY_READ and KEY_SET_VALUE rights, bypassing expected DELETE checks. This is a local, privilege-escalation vulnerability within the r...

CVE-2023-21536

CVE-2023-21536 is described in the provided documents as a Windows Event Tracing vulnerability with the impact of access to sensitive data (CVSSv3.1 base score 4.7). The connected sources associate this CVE with Windows Event Tracing and list it among other Windows vulnerabilities, but they do no...

CVE-2023-21683

Technical details about CVE-2023-21683 are not provided in the connected documents. Public information on affected products, root cause, or fixes is not present here. Monitor for updates from official sources.

CVE-2023-21559

Technical details about CVE-2023-21559 are not provided in the connected documents. The materials reference Windows cryptographic information disclosure generally but do not specify affected products, root cause, exploit status, or fixes. Monitor for updates.

CVE-2023-21681

Technical details about CVE-2023-21681 are not present in the provided connected documents. The supplied items cover generic Microsoft KB updates and an unrelated ENISA entry; monitor for updates and future technical disclosures.

CVE-2023-21555

Technical details for CVE-2023-21555 are not publicly available in the provided Connected Documents or Initial Description. No concrete affected products, root cause, or remediation can be confirmed here. Monitor for updates from official advisories.

CVE-2023-21730

Technical details about CVE-2023-21730 are not provided in the supplied documents; no affected products, versions, root cause, or fixes are disclosed here. Monitor for updates from official sources for further information.

CVE-2023-21537

Technical details about CVE-2023-21537 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Monitor for updates from authoritative sources.

CVE-2023-21527

CVE-2023-21527 is a Denial-of-Service vulnerability in the Windows iSCSI Service. The connected NCSc advisory explicitly lists CVE-2023-21527 under Windows iSCSI with a DoS impact. The initial record assigns CVSS v3.1: 7.5 (Network, High, Availability impact) with no documented exploitation statu...

CVE-2023-21679

Technical details about CVE-2023-21679 are not provided in the supplied documents. The connected EUVD/KB entries do not describe affected products, versions, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2023-21733

CVE-2023-21733 affects the Windows Bind Filter Driver and is described as an Elevation of Privilege vulnerability. The CVSS 3.1 metrics indicate LOCAL attack vector, HIGH impact to confidentiality, integrity, and availability, with LOW privileges required and HIGH attack complexity. The connected...

CVE-2023-21540

CVE-2023-21540 targets Windows Cryptographic Services. The Connected OpenVAS entries corroborate that this CVE is associated with Windows cryptographic components and describe an information-disclosure impact (confidentiality) with a local attack vector. The Initial Description also labels it as ...

CVE-2023-21675

CVE-2023-21675 is described in the connected documents as a Windows kernel vulnerability rooted in hive/registry memory corruption. The attack targets HKCU (volatile/hive storage) using out-of-bounds cell indexes to access the _CMHIVE/_HHIVE structures from kernel pool, enabling arbitrary read/wr...

CVE-2023-21774

CVE-2023-21774 is a Windows Kernel elevation-of-privilege vulnerability tied to Windows Registry security descriptors. The connected analysis notes it stemmed from incorrect security refresh in the Key Control Block (KCB) for certain keys, enabling incorrect access state after hive-related operat...

CVE-2023-21678

Technical details about CVE-2023-21678 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and related advisories.

CVE-2023-21546

CVE-2023-21546 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability. The entry provides a network-exposed, high-severity issue (CVSSv3.1: 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial description and connected documents identify the affected vector as networ...

CVE-2023-21772

CVE-2023-21772 is a Windows kernel EoP rooted in the registry’s security descriptor lifecycle. The registry virtualization path could free the old security descriptor and then attempt to allocate a new one; if allocation failed, the key could be left without a security descriptor, violating memor...

CVE-2023-21773

Technical details for CVE-2023-21773 are not provided in the supplied documents. Monitor for official advisories for updates and remediation.

CVE-2023-21532

Technical details about CVE-2023-21532 (product, root cause, impact, fixed version) are not publicly provided in the connected documents you supplied. Monitor for updates and additional vulnerability specifics.

CVE-2023-21680

Technical details about CVE-2023-21680 (Windows Win32k elevation) are not publicly available in the connected documents. Monitor for updates from Microsoft and other sources; wait for confirmed affected products/versions and remediation when disclosed.

CVE-2023-21550

Technical details for CVE-2023-21550 are not provided in the supplied documents. Monitoring for updates is recommended; no specific affected products, impact, or remediation are disclosed here.

CVE-2023-21728

Technical details about CVE-2023-21728 are not publicly provided in the supplied documents. Please monitor for updates from official sources.

CVE-2023-21747

CVE-2023-21747 is a Windows kernel registry vulnerability caused by an out-of-memory error during a highly sensitive hive-unload operation. The issue allowed an attacker with local access to trigger memory allocation failures in a critical path, risking instability and potential misuse of hive st...

CVE-2023-21748

CVE-2023-21748 is a Windows kernel local EoP vulnerability rooted in registry hive memory corruption (HKCU, volatile storage). The blog post chain explains an attack primitive using out-of-bounds hive cell indexes that map to _CMHIVE/_HHIVE structures via a 32-bit cell index, enabling precise der...

CVE-2023-21525

Technical details for CVE-2023-21525 are not publicly provided in the supplied documents; no affected product/version/exploit information is available here. Monitor for updates from official advisories to obtain specifics and remediation guidance.

CVE-2023-21755

CVE-2023-21755 is a Windows Kernel Elevation of Privilege vulnerability described as a local, high-severity issue (CVSS 7.8) with low attack complexity and no user interaction required. The provided documents confirm the vulnerability name and impact characteristics but do not specify the exact r...

CVE-2022-41094

Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.

CVE-2023-21749

CVE-2023-21749: Windows Kernel local privilege escalation stemming from registry SID table poisoning, described in CIRCL as “Windows Kernel registry SID table poisoning leading to bad locking and other issues.” The connected docs do not provide detailed root-cause analysis beyond that label, nor ...