CVE-2018-0817

Technical details about CVE-2018-0817 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are specified here.

CVE-2019-1280

CVE-2019-1280 is a Windows LNK processing remote code execution vulnerability. The flaw allows an attacker to execute code with the same user rights as the logged-in user when a .LNK file is processed. Some connected sources note active exploitation vectors (Astaroth) and public patches from Micr...

CVE-2021-1692

Technical details (affected software, exact root cause, vulnerable components, versions, impact, and fixes for CVE-2021-1692) are not publicly provided in the supplied documents; monitor for official disclosures or updates.

CVE-2021-31961

CVE-2021-31961 corresponds to a Windows InstallService Elevation of Privilege vulnerability in Microsoft Windows/Windows Server. The affected component is InstallService, and root cause/technical specifics are not detailed beyond the privilege-escalation nature. Impacts include local privilege es...

CVE-2021-34457

CVE-2021-34457 affects the Windows Remote Access Connection Manager, described as an Information Disclosure Vulnerability. The NVD entry lists CVSS v3.1 base score 5.5 (Medium) with LOCAL access, LOW attack complexity, and no user interaction required; confidentiality impact is High while integri...

CVE-2021-36938

CVE-2021-36938 affects the Windows Cryptographic Primitives Library and is described as a Windows information-disclosure vulnerability. The available sources identify a vulnerability in the Windows Cryptographic Primitives Library with a CONFIDENTIALITY impact (HIGH per CVSS 3.1) and MEDIUM overa...

CVE-2022-30153

CVE-2022-30153 is cited in connected materials as a Windows LDAP Remote Code Execution vulnerability, listed among several Windows LDAP RCEs. The AVLEONOV post notes that some LDAP RCEs depend on the LDAP MaxReceiveBuffer policy, implying a conditional exploitation vector for certain LDAP configu...

CVE-2022-34301

CVE-2022-34301 describes a vulnerability in third‑party UEFI bootloaders (CryptoPro Secure Disk) that can bypass Secure Boot and execute unsigned code in the pre‑boot phase. An attacker must access the EFI System Partition and replace the signed bootloader with a vulnerable one, enabling local co...

CVE-2022-38041

CVE-2022-38041 is a Denial-of-Service vulnerability in Windows Secure Channel. Connected documents confirm the affected component is Windows Secure Channel and the impact is DoS (CVSSv3.1 base ~7.5). Microsoft issued security updates in the Oct 2022 cycle to fix this vulnerability; exploitation s...

CVE-2019-0620

The CVE-2019-0620 entry describes a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from a guest OS, allowing an authenticated guest to run a specially crafted app that could cause the Hyper-V host to execute arbitrary code. The ...

CVE-2019-0802

CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...

CVE-2019-1316

Technical details are not publicly available in the provided documents. Monitor for updates and potential new information from official sources.

CVE-2020-0625

Technical details for CVE-2020-0625 are not publicly available in the provided documents. Monitor for updates from primary sources.

CVE-2021-1638

CVE-2021-1638 corresponds to Windows Bluetooth Security Feature Bypass (Impersonation in the Passkey Entry Protocol). The issue arises in Bluetooth pairing where a remote device shares the same public key X coordinate as the local one, allowing potential impersonation. Microsoft released updates ...

CVE-2021-38631

CVE-2021-38631 is a Windows RDP information-disclosure vulnerability. Public sources and patches indicate it affects Remote Desktop Protocol handling on Windows 7–11 and Windows Server 2008–2019, allowing an attacker with local access to view the RDP password. Microsoft released fixes as part of ...

CVE-2021-38667

CVE-2021-38667 is a Windows Print Spooler Elevation of Privilege vulnerability. The NVD entry identifies it as a local, low-attack-complexity flaw that yields partial confidentiality, partial integrity, and partial availability impact, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attacke...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...

CVE-2022-26918

CVE-2022-26918 relates to a Windows Fax Compose Form remote code execution vulnerability. According to CNVD-2022-71976, the root cause is a failure to properly filter special elements of the input data during external input construction, enabling arbitrary code execution on affected systems. The ...

CVE-2022-35835

Technical details (affected component, root cause, exploitability, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2023-21765

Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.

CVE-2019-0576

Public details for CVE-2019-0576 are not present in the connected documents. The initial description lists affected Windows versions but provides no concrete exploit, root cause, affected components, or remediation specifics in the supplied data.

CVE-2019-0735

CVE-2019-0735 is a Windows CSRSS elevation-of-privilege vulnerability caused by improper handling of in-memory objects. The entry documents a local attacker gain of high impact (confidentiality/ integrity/ availability) by exploiting this flaw. The CIRCL sighting notes an exploitation link (Explo...

CVE-2019-1149

CVE-2019-1149 is a remote code execution vulnerability in the Windows font library caused by improper handling of embedded fonts (Microsoft Graphics Remote Code Execution). It can allow an attacker to take control of the system, install programs, or modify data after successful exploitation via w...

CVE-2021-34533

CVE-2021-34533 is a Windows Graphics Component Font Parsing Remote Code Execution Vulnerability. Affected software is the Windows Graphics Component; the issue arises from font parsing logic, enabling code execution on the target system. The CVSS data indicates a HIGH impact with potential local ...

CVE-2021-34534

CVE-2021-34534 is a Windows MSHTML Platform Remote Code Execution vulnerability. Affects the Windows MSHTML Platform component; CVSSv3.1 base score 7.5 (HIGH) with network access required and user interaction required. Exploitation vectors, root cause, and exact affected versions are not detailed...

CVE-2022-21997

Technical details about CVE-2022-21997 are not provided in the supplied documents. Monitor for updates from NVD/Microsoft and ENISA KEV references.

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2019-0574

CVE-2019-0574 describes an elevation of privilege in Windows Data Sharing Service affecting Windows 10, Windows Server 2016/2019 and related builds. Connected sources state a local attacker can gain elevated privileges via this service, but do not provide concrete root-cause details or patch/vers...

CVE-2019-0755

CVE-2019-0755 is a Windows kernel information-disclosure vulnerability. The connected sources describe an issue where the Windows kernel improperly handles or initializes objects in memory, enabling local access-based information disclosure with high confidentiality impact (per CVSS3 vector: loca...

CVE-2019-0847

Technical details for CVE-2019-0847 are not publicly available in the provided documents; no affected product/version, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2019-1241

Technical details for CVE-2019-1241 are not provided in the connected documents; only related Jet Database Engine vulnerabilities (e.g., CVE-2019-1246) are described. Monitor for updates.

CVE-2022-30194

Technical details about CVE-2022-30194 are not publicly provided in the supplied documents; no affected products, exploit info, or remediation details are included. Monitor for updates.

CVE-2022-30206

CVE-2022-30206 is a Windows Print Spooler Elevation of Privilege vulnerability. The connected exploit PoC demonstrates local EoP by abusing the Print Spooler to delete an arbitrary TargetFile via a spooler-related file operation (creating a printer, setting SpoolDirectory, triggering an oplock on...

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...

CVE-2022-34302

CVE-2022-34302 affects signed bootloaders in the UEFI Secure Boot chain (New Horizon Datasys bootloader). An attacker can bypass Secure Boot and load unsigned code in the pre-boot stage by replacing the currently used signed bootloader. This requires access to the EFI System Partition to boot wit...

CVE-2022-34696

Technical details for CVE-2022-34696 are not publicly available in the provided documents; no affected products, root cause, impact, or remediation are included. Monitor for updates.

CVE-2022-41118

Technical details about CVE-2022-41118 are not provided in the supplied documents. No product/vendor/version or exploit information is available here. Monitor for updates from official sources; further details and remediation would require vendor advisories.

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2019-0795

Technical details for CVE-2019-0795 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are stated. Monitor for updates from connected sources.

CVE-2019-0879

Technical details about CVE-2019-0879 are not publicly provided in the supplied documents. The connected EUVD/CNVD entries reference the Jet Database Engine remote code execution but do not include affected versions, exploit info, or fixes. Monitor for updates.

CVE-2019-0986

CVE-2019-0986 affects the Windows User Profile Service (ProfSvc) and concerns improper handling of symlinks. The vulnerability enables elevation of privilege, allowing an attacker who can log on to run a crafted application that could delete files or folders in an elevated context. The impact is ...

CVE-2020-0607

CVE-2020-0607 is an information disclosure vulnerability in Microsoft Windows Graphics Components related to how memory objects are handled. The issue could allow partial disclosure of information (CVSS2: Confidentiality Partial; AV:N/AC:M/Au:N/I:N/A:N) with a local-style potential exploit (CVSS3...

CVE-2021-34497

CVE-2021-34497 corresponds to a Windows MSHTML Platform Remote Code Execution vulnerability. Public details in the provided connected documents show the affected surface includes Internet Explorer/MSHTML components and the associated patch KB5005563 (Cumulative security update for Internet Explor...

CVE-2022-21869

Technical details about CVE-2022-21869 (Clipboard User Service Elevation of Privilege) are not provided in the connected documents. Monitor for updates; current sources do not publicly disclose affected products, root cause, impact, or fixes in this dataset.

CVE-2022-35820

Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.

CVE-2022-38047

CVE-2022-38047 is a Windows Point‑to‑Point Tunneling Protocol (PPTP) remote code execution vulnerability. The CVE affects the PPTP component in Windows, with a network‑level attack surface, high impact (C/H/I/A all high) and no user interaction required per CVSS v3.1. Connected sources corroborat...

CVE-2022-41048

Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.

CVE-2017-0016

CVE-2017-0016 affects multiple Windows versions (Windows 10, 8.1, RT 8.1, Server 2012R2/2016) where SMBv2/v3 packet handling in the Server service is flawed, enabling a remote attacker to potentially cause a crash or execute arbitrary code via a crafted SMB request. The issue is tied to SMBv2/SMB...

CVE-2017-0170

CVE-2017-0170 is an information-disclosure flaw in Windows Performance Monitor Console where XML input is parsed unsafely, allowing an XML external entity (XXE) to read arbitrary files. Affected are Windows versions listed in the CVE description (Windows 7/8.1/10, Windows Server variants, and Win...

CVE-2017-8527

Technical details for CVE-2017-8527 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, root cause, exploits, or fixes are included here. Monitor for updates from official advisories.