CVE-2021-1638

CVE-2021-1638 corresponds to Windows Bluetooth Security Feature Bypass (Impersonation in the Passkey Entry Protocol). The issue arises in Bluetooth pairing where a remote device shares the same public key X coordinate as the local one, allowing potential impersonation. Microsoft released updates ...

CVE-2021-26426

CVE-2021-26426 pertains to Windows User Profile/User Account Profile Picture Elevation of Privilege in the Windows User Profile Service. The primary description confirms an elevation of privilege vulnerability, and NVD metrics show a local, low-complexity vulnerability with local access and parti...

CVE-2021-36938

CVE-2021-36938 affects the Windows Cryptographic Primitives Library and is described as a Windows information-disclosure vulnerability. The available sources identify a vulnerability in the Windows Cryptographic Primitives Library with a CONFIDENTIALITY impact (HIGH per CVSS 3.1) and MEDIUM overa...

CVE-2021-43215

CVE-2021-43215 affects the iSNS (Internet Storage Name Service) server. It is a memory corruption vulnerability that can lead to remote code execution when an attacker sends a specially crafted request to an affected iSNS server. The issue is network-exploitable (no user interaction) and is consi...

CVE-2022-26918

CVE-2022-26918 relates to a Windows Fax Compose Form remote code execution vulnerability. According to CNVD-2022-71976, the root cause is a failure to properly filter special elements of the input data during external input construction, enabling arbitrary code execution on affected systems. The ...

CVE-2022-30153

CVE-2022-30153 is cited in connected materials as a Windows LDAP Remote Code Execution vulnerability, listed among several Windows LDAP RCEs. The AVLEONOV post notes that some LDAP RCEs depend on the LDAP MaxReceiveBuffer policy, implying a conditional exploitation vector for certain LDAP configu...

CVE-2022-37974

CVE-2022-37974 is an information-disclosure vulnerability in Windows Mixed Reality Developer Tools. The advisory entries in the connected set identify the affected component as Windows Mixed Reality Developer Tools and classify the impact as information disclosure, with CVSSv3.1 a base score of 6...

CVE-2018-0817

Technical details about CVE-2018-0817 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are specified here.

CVE-2020-0625

Technical details for CVE-2020-0625 are not publicly available in the provided documents. Monitor for updates from primary sources.

CVE-2021-1692

Technical details (affected software, exact root cause, vulnerable components, versions, impact, and fixes for CVE-2021-1692) are not publicly provided in the supplied documents; monitor for official disclosures or updates.

CVE-2021-31961

CVE-2021-31961 corresponds to a Windows InstallService Elevation of Privilege vulnerability in Microsoft Windows/Windows Server. The affected component is InstallService, and root cause/technical specifics are not detailed beyond the privilege-escalation nature. Impacts include local privilege es...

CVE-2021-34533

CVE-2021-34533 is a Windows Graphics Component Font Parsing Remote Code Execution Vulnerability. Affected software is the Windows Graphics Component; the issue arises from font parsing logic, enabling code execution on the target system. The CVSS data indicates a HIGH impact with potential local ...

CVE-2021-38631

CVE-2021-38631 is a Windows RDP information-disclosure vulnerability. Public sources and patches indicate it affects Remote Desktop Protocol handling on Windows 7–11 and Windows Server 2008–2019, allowing an attacker with local access to view the RDP password. Microsoft released fixes as part of ...

CVE-2022-35835

Technical details (affected component, root cause, exploitability, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2019-0847

Technical details for CVE-2019-0847 are not publicly available in the provided documents; no affected product/version, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2019-1225

CVE-2019-1225 is a Windows RDP server information-disclosure vulnerability caused by improper memory initialization. An attacker must remotely connect to an affected system and run a crafted application to access memory contents. Microsoft addressed the issue via a security update that fixes how ...

CVE-2019-1241

Technical details for CVE-2019-1241 are not provided in the connected documents; only related Jet Database Engine vulnerabilities (e.g., CVE-2019-1246) are described. Monitor for updates.

CVE-2021-34534

CVE-2021-34534 is a Windows MSHTML Platform Remote Code Execution vulnerability. Affects the Windows MSHTML Platform component; CVSSv3.1 base score 7.5 (HIGH) with network access required and user interaction required. Exploitation vectors, root cause, and exact affected versions are not detailed...

CVE-2021-38667

CVE-2021-38667 is a Windows Print Spooler Elevation of Privilege vulnerability. The NVD entry identifies it as a local, low-attack-complexity flaw that yields partial confidentiality, partial integrity, and partial availability impact, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attacke...

CVE-2022-41118

Technical details about CVE-2022-41118 are not provided in the supplied documents. No product/vendor/version or exploit information is available here. Monitor for updates from official sources; further details and remediation would require vendor advisories.

CVE-2023-21765

Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.

CVE-2019-0574

CVE-2019-0574 describes an elevation of privilege in Windows Data Sharing Service affecting Windows 10, Windows Server 2016/2019 and related builds. Connected sources state a local attacker can gain elevated privileges via this service, but do not provide concrete root-cause details or patch/vers...

CVE-2019-0576

Public details for CVE-2019-0576 are not present in the connected documents. The initial description lists affected Windows versions but provides no concrete exploit, root cause, affected components, or remediation specifics in the supplied data.

CVE-2019-0620

The CVE-2019-0620 entry describes a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from a guest OS, allowing an authenticated guest to run a specially crafted app that could cause the Hyper-V host to execute arbitrary code. The ...

CVE-2019-0625

Technical details for CVE-2019-0625 are not publicly available in the provided documents. Monitor for updates; current sources confirm a Jet Database Engine remote code execution vulnerability but do not expose affected products, versions, or fixes in this set.

CVE-2019-0879

Technical details about CVE-2019-0879 are not publicly provided in the supplied documents. The connected EUVD/CNVD entries reference the Jet Database Engine remote code execution but do not include affected versions, exploit info, or fixes. Monitor for updates.

CVE-2019-0986

CVE-2019-0986 affects the Windows User Profile Service (ProfSvc) and concerns improper handling of symlinks. The vulnerability enables elevation of privilege, allowing an attacker who can log on to run a crafted application that could delete files or folders in an elevated context. The impact is ...

CVE-2019-1149

CVE-2019-1149 is a remote code execution vulnerability in the Windows font library caused by improper handling of embedded fonts (Microsoft Graphics Remote Code Execution). It can allow an attacker to take control of the system, install programs, or modify data after successful exploitation via w...

CVE-2020-0607

CVE-2020-0607 is an information disclosure vulnerability in Microsoft Windows Graphics Components related to how memory objects are handled. The issue could allow partial disclosure of information (CVSS2: Confidentiality Partial; AV:N/AC:M/Au:N/I:N/A:N) with a local-style potential exploit (CVSS3...

CVE-2022-21863

CVE-2022-21863 is a Windows elevation-of-privilege vulnerability in the StateRepository API Server. The NVD entry confirms the issue and indicates a local attacker could obtain elevated privileges. Related OpenVAS entries show affected Windows platforms and list KB updates (KB5009543/KB5009545 an...

CVE-2022-21997

Technical details about CVE-2022-21997 are not provided in the supplied documents. Monitor for updates from NVD/Microsoft and ENISA KEV references.

CVE-2022-30194

Technical details about CVE-2022-30194 are not publicly provided in the supplied documents; no affected products, exploit info, or remediation details are included. Monitor for updates.

CVE-2022-35820

Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.

CVE-2022-38047

CVE-2022-38047 is a Windows Point‑to‑Point Tunneling Protocol (PPTP) remote code execution vulnerability. The CVE affects the PPTP component in Windows, with a network‑level attack surface, high impact (C/H/I/A all high) and no user interaction required per CVSS v3.1. Connected sources corroborat...

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-0170

CVE-2017-0170 is an information-disclosure flaw in Windows Performance Monitor Console where XML input is parsed unsafely, allowing an XML external entity (XXE) to read arbitrary files. Affected are Windows versions listed in the CVE description (Windows 7/8.1/10, Windows Server variants, and Win...

CVE-2019-0735

CVE-2019-0735 is a Windows CSRSS elevation-of-privilege vulnerability caused by improper handling of in-memory objects. The entry documents a local attacker gain of high impact (confidentiality/ integrity/ availability) by exploiting this flaw. The CIRCL sighting notes an exploitation link (Explo...

CVE-2019-0795

Technical details for CVE-2019-0795 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are stated. Monitor for updates from connected sources.

CVE-2021-34497

CVE-2021-34497 corresponds to a Windows MSHTML Platform Remote Code Execution vulnerability. Public details in the provided connected documents show the affected surface includes Internet Explorer/MSHTML components and the associated patch KB5005563 (Cumulative security update for Internet Explor...

CVE-2022-21869

Technical details about CVE-2022-21869 (Clipboard User Service Elevation of Privilege) are not provided in the connected documents. Monitor for updates; current sources do not publicly disclose affected products, root cause, impact, or fixes in this dataset.

CVE-2022-30206

CVE-2022-30206 is a Windows Print Spooler Elevation of Privilege vulnerability. The connected exploit PoC demonstrates local EoP by abusing the Print Spooler to delete an arbitrary TargetFile via a spooler-related file operation (creating a printer, setting SpoolDirectory, triggering an oplock on...

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...

CVE-2022-34696

Technical details for CVE-2022-34696 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation are included. Monitor for updates.

CVE-2022-41048

Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2018-8206

CVE-2018-8206 is a Windows FTP Server denial-of-service vulnerability caused by improper handling of FTP connections. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2/2016, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2012 R2/2016/2019-era variants as l...

CVE-2018-8475

CVE-2018-8475 is a Windows remote code execution vulnerability caused by improper handling of specially crafted image files. Affected: Windows 7; Windows Server 2008/2012; Windows 8.1; Windows RT 8.1; Windows 10; Windows Server 2008 R2/2012/2016; Windows 10 Servers. The description does not provi...

CVE-2019-0621

Technical details about CVE-2019-0621 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2019-0755

CVE-2019-0755 is a Windows kernel information-disclosure vulnerability. The connected sources describe an issue where the Windows kernel improperly handles or initializes objects in memory, enabling local access-based information disclosure with high confidentiality impact (per CVSS3 vector: loca...

CVE-2019-0877

CVE-2019-0877 is associated with Microsoft Windows Jet Database Engine remote code execution. The vulnerability arises from the Jet Engine failing to properly handle objects in memory, allowing an attacker to trigger arbitrary code execution by convincing a user to open a specially crafted file. ...