CVE-2022-22040

Technical details about CVE-2022-22040 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact specifics, and fixes before taking action.

CVE-2022-34302

CVE-2022-34302 affects signed bootloaders in the UEFI Secure Boot chain (New Horizon Datasys bootloader). An attacker can bypass Secure Boot and load unsigned code in the pre-boot stage by replacing the currently used signed bootloader. This requires access to the EFI System Partition to boot wit...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2018-8550

CVE-2018-8550 is a local elevation-of-privilege flaw in Windows COM Aggregate Marshaler. The vulnerability allows an attacker with local access to run code with elevated privileges on affected Windows versions (Windows 7, Windows 8.1/10 family, and corresponding Server SKUs). Public references (e...

CVE-2019-0620

The CVE-2019-0620 entry describes a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from a guest OS, allowing an authenticated guest to run a specially crafted app that could cause the Hyper-V host to execute arbitrary code. The ...

CVE-2021-1645

CVE-2021-1645 is a Windows DP API cryptography flaw affecting Windows Containers that can lead to information disclosure. Affected component: Windows Containers use of DP API; root cause described as a cryptographic flaw in the Windows DP API within container contexts. Impact is confidentiality b...

CVE-2021-33781

Technical details for CVE-2021-33781 are not publicly available in the provided documents. No affected products, versions, exploitation status, or fixes are disclosed here. Monitor for official advisories for updates.

CVE-2021-38639

Technical details about CVE-2021-38639 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the CVE is described as a Win32k elevation of privilege vulnerability, with published CVSS metrics in NVD.

CVE-2022-24540

CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...

CVE-2023-21822

Technical details for CVE-2023-21822 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-0016

CVE-2017-0016 affects multiple Windows versions (Windows 10, 8.1, RT 8.1, Server 2012R2/2016) where SMBv2/v3 packet handling in the Server service is flawed, enabling a remote attacker to potentially cause a crash or execute arbitrary code via a crafted SMB request. The issue is tied to SMBv2/SMB...

CVE-2019-0575

CVE-2019-0575 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue can be triggered when a user opens a specially crafted file, enabling an attacker to run arbitrary code on the victim’s machine. The vulnerability ...

CVE-2019-1149

CVE-2019-1149 is a remote code execution vulnerability in the Windows font library caused by improper handling of embedded fonts (Microsoft Graphics Remote Code Execution). It can allow an attacker to take control of the system, install programs, or modify data after successful exploitation via w...

CVE-2019-1291

Technical details (affected components, exploit method, patch information) are not provided in the supplied documents. Monitor for official advisories and updates for CVE-2019-1291.

CVE-2021-1638

CVE-2021-1638 corresponds to Windows Bluetooth Security Feature Bypass (Impersonation in the Passkey Entry Protocol). The issue arises in Bluetooth pairing where a remote device shares the same public key X coordinate as the local one, allowing potential impersonation. Microsoft released updates ...

CVE-2021-31194

CVE-2021-31194 is described in the provided documents as an OLE Automation Remote Code Execution vulnerability in Windows. The NVD entry lists CVSSv3.1 base score 8.8 ( HIGH ) with network attack vector, low complexity, privileges required: LOW, and user interaction NONE, resulting in HIGH confid...

CVE-2021-31961

CVE-2021-31961 corresponds to a Windows InstallService Elevation of Privilege vulnerability in Microsoft Windows/Windows Server. The affected component is InstallService, and root cause/technical specifics are not detailed beyond the privilege-escalation nature. Impacts include local privilege es...

CVE-2021-34440

Technical details about CVE-2021-34440 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates and official advisories for specifics.

CVE-2021-38631

CVE-2021-38631 is a Windows RDP information-disclosure vulnerability. Public sources and patches indicate it affects Remote Desktop Protocol handling on Windows 7–11 and Windows Server 2008–2019, allowing an attacker with local access to view the RDP password. Microsoft released fixes as part of ...

CVE-2022-34701

Technical details about CVE-2022-34701 (affected product, root cause, impact, or fix) are not provided in the connected documents; monitor for official disclosures and updates.

CVE-2022-38027

CVE-2022-38027 is a Windows Storage Elevation of Privilege vulnerability affecting Microsoft Windows Storage, arising from improper assignment of privileges to applications. The issue enables local privilege escalation with high impacts to confidentiality, integrity, and availability (local acces...

CVE-2021-26426

CVE-2021-26426 pertains to Windows User Profile/User Account Profile Picture Elevation of Privilege in the Windows User Profile Service. The primary description confirms an elevation of privilege vulnerability, and NVD metrics show a local, low-complexity vulnerability with local access and parti...

CVE-2021-26865

CVE-2021-26865 is discussed in depth in connected materials (Project Zero/blog post and MSRC notes). The Windows Container Execution Agent elevation issue was demonstrated to enable container escapes from a non‑administrative container user by abusing server/application silos and object manager r...

CVE-2021-33740

CVE-2021-33740 is a Windows Media Remote Code Execution vulnerability affecting Windows/Windows Server; exploitation is described as a local attack requiring user interaction, with the underlying issue in Windows Media components. References from CNVD/EUVD entries describe a Windows Media remote ...

CVE-2021-33749

CNVD-2021-62476 and NVD entries describe CVE-2021-33749 as a Windows DNS Snap-in remote code execution vulnerability in Microsoft Windows/Windows Server. Affected component: DNS Snap-in. Root cause: remote code execution via the DNS Snap-in. Impact: potential full system compromise; confidentiali...

CVE-2021-34456

Technical details for CVE-2021-34456 are not provided in the supplied documents. No affected product/version is specified here; monitor for updates from official sources for public details and remediation.

CVE-2021-34457

CVE-2021-34457 affects the Windows Remote Access Connection Manager, described as an Information Disclosure Vulnerability. The NVD entry lists CVSS v3.1 base score 5.5 (Medium) with LOCAL access, LOW attack complexity, and no user interaction required; confidentiality impact is High while integri...

CVE-2021-36965

CVE-2021-36965 concerns a Remote Code Execution flaw in Windows WLAN AutoConfig service. Connected documents confirm the affected component is WLAN AutoConfig and reference September 2021 Microsoft patches; no explicit root-cause details or in-wild exploitation are provided in the supplied source...

CVE-2022-23285

CVE-2022-23285 is a Remote Desktop Client Remote Code Execution vulnerability (CVSS v3.1 base 8.8) elevated to HIGH by NVD. It is referenced in March 2022 Microsoft Patch Tuesday coverage as a Remote Desktop/RDP-related issue addressed by the accompanying security updates (e.g., KB5011497, KB5011...

CVE-2022-23298

Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.

CVE-2022-29127

Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.

CVE-2022-30194

Technical details about CVE-2022-30194 are not publicly provided in the supplied documents; no affected products, exploit info, or remediation details are included. Monitor for updates.

CVE-2022-35820

Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.

CVE-2018-0817

Technical details about CVE-2018-0817 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are specified here.

CVE-2019-0802

CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...

CVE-2019-1453

CVE-2019-1453 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). The Red Hat CVE entry and CNVD/OpenVAS references confirm the issue arises when an attacker connects via RDP and sends specially crafted requests to the target, with impact described as DoS. The NVD e...

CVE-2020-1509

CVE-2020-1509 is an elevation-of-privilege vulnerability in the Local Security Authority Subsystem Service (LSASS) on Windows. An authenticated attacker could exploit a specially crafted authentication request to elevate privileges on the target system. The issue is addressed by a security update...

CVE-2022-22001

CVE-2022-22001 affects Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. Connected documents confirm the CVE in Microsoft Windows contexts and list a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2022-26827

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2022-26827 are not provided in the connected documents. Monitoring for updates is advised; no public details are present in the supplied sources.

CVE-2022-30143

CVE-2022-30143 is an LDAP Remote Code Execution vulnerability affecting Windows LDAP, where exploitation is contingent on the LDAP MaxReceiveBuffer policy being configured higher than the default. The Linked AVLEONOV content notes that the vulnerability exists for LDAP RCEs during Patch Tuesday J...

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2018-8206

CVE-2018-8206 is a Windows FTP Server denial-of-service vulnerability caused by improper handling of FTP connections. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2/2016, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2012 R2/2016/2019-era variants as l...

CVE-2019-1269

Affected software: Microsoft Windows. The CVE-2019-1269 entry describes an elevation of privilege vulnerability in how Windows handles calls to Advanced Local Procedure Call (ALPC). Root cause: improper handling/processing of ALPC calls enabling an attacker to run code in the security context of ...

CVE-2019-1280

CVE-2019-1280 is a Windows LNK processing remote code execution vulnerability. The flaw allows an attacker to execute code with the same user rights as the logged-in user when a .LNK file is processed. Some connected sources note active exploitation vectors (Astaroth) and public patches from Micr...

CVE-2021-1692

Technical details (affected software, exact root cause, vulnerable components, versions, impact, and fixes for CVE-2021-1692) are not publicly provided in the supplied documents; monitor for official disclosures or updates.

CVE-2021-34497

CVE-2021-34497 corresponds to a Windows MSHTML Platform Remote Code Execution vulnerability. Public details in the provided connected documents show the affected surface includes Internet Explorer/MSHTML components and the associated patch KB5005563 (Cumulative security update for Internet Explor...

CVE-2021-34530

CVE-2021-34530 is a Microsoft Windows Graphics Component remote code execution vulnerability. The connected sources confirm the affected component as Microsoft Graphics Component, with a CVSSv3 base score of 7.8 (HIGH) and local attack vector/low user interaction requirements per the CVSS data, a...

CVE-2021-42279

CVE-2021-42279 concerns a memory corruption vulnerability in the Chakra Scripting Engine / ChakraCore. Connected sources indicate an out-of-bounds write as the root cause, enabling memory corruption with a network-accessible context and high impact characteristics (I/H, A/H) per CVSS details, tho...

CVE-2022-30153

CVE-2022-30153 is cited in connected materials as a Windows LDAP Remote Code Execution vulnerability, listed among several Windows LDAP RCEs. The AVLEONOV post notes that some LDAP RCEs depend on the LDAP MaxReceiveBuffer policy, implying a conditional exploitation vector for certain LDAP configu...