CVE-2021-36961

Technical details about CVE-2021-36961 (Windows Installer Denial of Service) are not publicly provided in the supplied documents. No affected product versions, root cause, impact, or fix information is available here. Monitor for forthcoming updates.

CVE-2021-40447

Technical details about CVE-2021-40447 (Windows Print Spooler Elevation of Privilege) are not provided in the supplied documents. No affected products/versions/root-cause are specified. Monitor official advisories (e.g., Microsoft security guidance) for updates.

CVE-2022-21922

Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.

CVE-2022-30208

Public technical details about CVE-2022-30208 are not provided in the connected documents. The entry describes a Windows SAM DoS vulnerability but includes no affected product versions, exploit specifics, or remediation. Monitor for official advisories and updates.

CVE-2018-0742

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates from trusted sources.

CVE-2019-0601

Technical details for CVE-2019-0601 are not publicly available in the provided documents; monitor for updates.

CVE-2019-1162

CVE-2019-1162 is a Windows elevation-of-privilege vulnerability arising from improper handling of ALPC calls. A local attacker who can log on could run a crafted application to execute code in the security context of the local system, potentially installing programs, modifying data, or creating n...

CVE-2020-0738

CVE-2020-0738 is a Windows Media Foundation memory corruption vulnerability. The provided documents identify Microsoft Windows Media Foundation as the affected component and describe memory corruption when handling objects in memory, which the CVSS metrics classify as a high-severity, remotely ex...

CVE-2021-1651

Technical details about CVE-2021-1651 are not provided in the supplied documents; only the vulnerability is named. Monitor for updates from official advisories.

CVE-2022-21851

Technical details for CVE-2022-21851 are not publicly available in the provided documents. No root cause, affected versions, or fixes are disclosed here; monitor for official updates from Microsoft and NVD.

CVE-2022-21890

Technical details for CVE-2022-21890 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-22011

Technical details (affected components, root cause, impact, and fixes) for CVE-2022-22011 are not provided in the supplied documents. No public details are included here. Monitor official advisories for updates.

CVE-2022-29127

Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.

CVE-2019-0727

CVE-2019-0727 describes an elevation-of-privilege flaw in the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector, allowing an attacker who can log on to delete files in arbitrary locations. The vulnerability is rooted in the collectors’ handling of file deletion permissio...

CVE-2019-1289

CVE-2019-1289 is a Windows vulnerability described as an elevation of privilege in Windows Update Delivery Optimization caused by improper enforcement of file share permissions. Affected: Windows Update Delivery Optimization component. Impact: local privilege escalation with integrity impact (I:H...

CVE-2021-1658

Technical details (affected product/component versions, root cause, impact specifics, and remediation) for CVE-2021-1658 are not provided in the connected documents. Monitor for updates in official advisories and vendor patches.

CVE-2021-33757

Technical details for CVE-2021-33757 are not publicly disclosed in the provided documents. The entries reference the vulnerability by name but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2021-33781

Technical details for CVE-2021-33781 are not publicly available in the provided documents. No affected products, versions, exploitation status, or fixes are disclosed here. Monitor for official advisories for updates.

CVE-2021-34439

CVE-2021-34439 is a Windows Media Foundation remote code execution vulnerability affecting Microsoft Windows Media Foundation. Public sources describe a remote code execution in Media Foundation components that could be exploited locally to execute code with high impact. Related advisories indica...

CVE-2022-21843

CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...

CVE-2022-21883

CVE-2022-21883 is a Windows vulnerability in the IKE extension that can be exploited over the network to cause a denial of service . The NVD entry lists a network attack vector with high impact on availability (CVSS v3.1 base score 7.5; impact is confined to availability). The root cause is descr...

CVE-2022-29140

Technical details about CVE-2022-29140 (Windows Print Spooler information disclosure) are not publicly provided in the supplied Connected Documents. No specific affected product/version or remediation is described here; monitor official advisories for updates.

CVE-2018-8344

CVE-2018-8344 is a Windows remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts. Affected platforms include Windows 7, Windows 8.1, Windows 10 (and corresponding server SKUs: 2008, 2008 R2, 2012, 2012 R2, 2016, 2019-era equivalents, and Win...

CVE-2019-0882

CVE-2019-0882 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly discloses memory contents, per the description, with a stated impact of information disclosure. Connected documents reiterate that the issue involves improper handling of in-memory objects in...

CVE-2020-0915

Technical details for CVE-2020-0915 are not publicly provided in the supplied documents. Monitor for updates from official sources; no affected product/version/impact/fix can be confirmed from the provided data.

CVE-2021-34483

CVE-2021-34483 is a Windows Print Spooler elevation of privileges vulnerability. NVD lists CVSS v3.1: LOCAL, LOW complexity, PRIV: LOW, UI: NONE, with HIGH impact to C/I/A (base 7.8). CVSS v2: LOCAL, LOW, C/P/I/P/A/P (base 4.6). The exact root cause and patched/affected versions are not detailed ...

CVE-2018-0747

Technical details for CVE-2018-0747 are not publicly provided in the supplied documents; no concrete affected products, root cause, or patch information are present. Monitor for updates.

CVE-2018-8550

CVE-2018-8550 is a local elevation-of-privilege flaw in Windows COM Aggregate Marshaler. The vulnerability allows an attacker with local access to run code with elevated privileges on affected Windows versions (Windows 7, Windows 8.1/10 family, and corresponding Server SKUs). Public references (e...

CVE-2020-1537

CVE-2020-1537 is a Windows Elevation of Privilege vulnerability in Windows Remote Access caused by improper file handling. Exploitation requires code execution on a victim system, followed by launching a crafted app. Microsoft patches address the issue by ensuring Windows Remote Access correctly ...

CVE-2021-26425

CVE-2021-26425 is a Windows Event Tracing elevation-of-privilege vulnerability. Affects Windows Event Tracing component with local, low-privilege attack requirements and high impact on confidentiality/integrity/availability (per CVSS 3.1 vector). The connected sources confirm this CVE within Micr...

CVE-2021-26865

CVE-2021-26865 is discussed in depth in connected materials (Project Zero/blog post and MSRC notes). The Windows Container Execution Agent elevation issue was demonstrated to enable container escapes from a non‑administrative container user by abusing server/application silos and object manager r...

CVE-2021-33740

CVE-2021-33740 is a Windows Media Remote Code Execution vulnerability affecting Windows/Windows Server; exploitation is described as a local attack requiring user interaction, with the underlying issue in Windows Media components. References from CNVD/EUVD entries describe a Windows Media remote ...

CVE-2021-34440

Technical details about CVE-2021-34440 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates and official advisories for specifics.

CVE-2021-34457

CVE-2021-34457 affects the Windows Remote Access Connection Manager, described as an Information Disclosure Vulnerability. The NVD entry lists CVSS v3.1 base score 5.5 (Medium) with LOCAL access, LOW attack complexity, and no user interaction required; confidentiality impact is High while integri...

CVE-2022-21995

CVE-2022-21995 is a Windows Hyper-V Remote Code Execution vulnerability. According to the connected sources, it affects Microsoft Hyper-V and has a CVSS v3.1 base score of 7.9 (HIGH) with an adjacent network attack vector, high attack complexity, no privileges required, and user interaction requi...

CVE-2022-24542

Technical details for CVE-2022-24542 are not provided in the connected documents. The EUVD/CNVD entries reference Win32k elevation issues but do not supply affected products, versions, root cause, or fixes for this CVE. Monitor for updates.

CVE-2022-34701

Technical details about CVE-2022-34701 (affected product, root cause, impact, or fix) are not provided in the connected documents; monitor for official disclosures and updates.

CVE-2022-34722

CVE-2022-34722 is a Windows IKE Protocol Extensions RCE affecting systems with IPSec enabled and IKEv1 in use. An unauthenticated attacker could send a crafted IP packet to execute arbitrary code on vulnerable Windows hosts; Ikev2 is not affected. The vulnerability is classified as critical (CVSS...

CVE-2022-38041

CVE-2022-38041 is a Denial-of-Service vulnerability in Windows Secure Channel. Connected documents confirm the affected component is Windows Secure Channel and the impact is DoS (CVSSv3.1 base ~7.5). Microsoft issued security updates in the Oct 2022 cycle to fix this vulnerability; exploitation s...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2019-0582

CVE-2019-0582 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of objects in memory. The vulnerability affects multiple Windows versions and can be triggered when a user opens a specially crafted file, enabling arbitrary code execution with the attack...

CVE-2021-31194

CVE-2021-31194 is described in the provided documents as an OLE Automation Remote Code Execution vulnerability in Windows. The NVD entry lists CVSSv3.1 base score 8.8 ( HIGH ) with network attack vector, low complexity, privileges required: LOW, and user interaction NONE, resulting in HIGH confid...

CVE-2021-33749

CNVD-2021-62476 and NVD entries describe CVE-2021-33749 as a Windows DNS Snap-in remote code execution vulnerability in Microsoft Windows/Windows Server. Affected component: DNS Snap-in. Root cause: remote code execution via the DNS Snap-in. Impact: potential full system compromise; confidentiali...

CVE-2022-22040

Technical details about CVE-2022-22040 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact specifics, and fixes before taking action.

CVE-2022-30143

CVE-2022-30143 is an LDAP Remote Code Execution vulnerability affecting Windows LDAP, where exploitation is contingent on the LDAP MaxReceiveBuffer policy being configured higher than the default. The Linked AVLEONOV content notes that the vulnerability exists for LDAP RCEs during Patch Tuesday J...

CVE-2023-21822

Technical details for CVE-2023-21822 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0881

CVE-2019-0881 is described as a Windows Kernel elevation-of-privilege vulnerability that occurs when the kernel improperly handles key enumeration. The Initial document provides a high-level description with CVSS metrics and MSRC references, but contains no product-version or patch details. Conne...

CVE-2019-1280

CVE-2019-1280 is a Windows LNK processing remote code execution vulnerability. The flaw allows an attacker to execute code with the same user rights as the logged-in user when a .LNK file is processed. Some connected sources note active exploitation vectors (Astaroth) and public patches from Micr...

CVE-2019-1316

Technical details are not publicly available in the provided documents. Monitor for updates and potential new information from official sources.

CVE-2020-16958

CVE-2020-16958 is a local elevation-of-privilege vulnerability affecting Windows Backup Engine. The connected sources identify the issue as Elevation of Privilege in the Windows Backup Engine, with CVSS v3.1 base score 7.8 (HIGH) and CVSS v2.0 base score 7.2, indicating a local attacker could pot...