CVE-2022-35835

Technical details (affected component, root cause, exploitability, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2022-38027

CVE-2022-38027 is a Windows Storage Elevation of Privilege vulnerability affecting Microsoft Windows Storage, arising from improper assignment of privileges to applications. The issue enables local privilege escalation with high impacts to confidentiality, integrity, and availability (local acces...

CVE-2022-41048

Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.

CVE-2023-21765

Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2018-8206

CVE-2018-8206 is a Windows FTP Server denial-of-service vulnerability caused by improper handling of FTP connections. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2/2016, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2012 R2/2016/2019-era variants as l...

CVE-2019-0575

CVE-2019-0575 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue can be triggered when a user opens a specially crafted file, enabling an attacker to run arbitrary code on the victim’s machine. The vulnerability ...

CVE-2019-0755

CVE-2019-0755 is a Windows kernel information-disclosure vulnerability. The connected sources describe an issue where the Windows kernel improperly handles or initializes objects in memory, enabling local access-based information disclosure with high confidentiality impact (per CVSS3 vector: loca...

CVE-2019-0879

Technical details about CVE-2019-0879 are not publicly provided in the supplied documents. The connected EUVD/CNVD entries reference the Jet Database Engine remote code execution but do not include affected versions, exploit info, or fixes. Monitor for updates.

CVE-2019-1269

Affected software: Microsoft Windows. The CVE-2019-1269 entry describes an elevation of privilege vulnerability in how Windows handles calls to Advanced Local Procedure Call (ALPC). Root cause: improper handling/processing of ALPC calls enabling an attacker to run code in the security context of ...

CVE-2020-0607

CVE-2020-0607 is an information disclosure vulnerability in Microsoft Windows Graphics Components related to how memory objects are handled. The issue could allow partial disclosure of information (CVSS2: Confidentiality Partial; AV:N/AC:M/Au:N/I:N/A:N) with a local-style potential exploit (CVSS3...

CVE-2021-34534

CVE-2021-34534 is a Windows MSHTML Platform Remote Code Execution vulnerability. Affects the Windows MSHTML Platform component; CVSSv3.1 base score 7.5 (HIGH) with network access required and user interaction required. Exploitation vectors, root cause, and exact affected versions are not detailed...

CVE-2022-21863

CVE-2022-21863 is a Windows elevation-of-privilege vulnerability in the StateRepository API Server. The NVD entry confirms the issue and indicates a local attacker could obtain elevated privileges. Related OpenVAS entries show affected Windows platforms and list KB updates (KB5009543/KB5009545 an...

CVE-2022-22001

CVE-2022-22001 affects Windows Remote Access Connection Manager and is described as an Elevation of Privilege vulnerability. Connected documents confirm the CVE in Microsoft Windows contexts and list a CVSS v3.1 base score of 7.8 (LOCAL, LOW privileges required, NONE user interaction, HIGH impact...

CVE-2022-23285

CVE-2022-23285 is a Remote Desktop Client Remote Code Execution vulnerability (CVSS v3.1 base 8.8) elevated to HIGH by NVD. It is referenced in March 2022 Microsoft Patch Tuesday coverage as a Remote Desktop/RDP-related issue addressed by the accompanying security updates (e.g., KB5011497, KB5011...

CVE-2023-21803

CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...

CVE-2017-0161

CVE-2017-0161 is a Windows NetBT Session Services vulnerability described as a race condition when NetBT fails to maintain certain sequencing requirements, enabling a remote code execution in affected Windows releases. The CVE is present in Windows 7/8.1/10 and server SKUs listed in the initial d...

CVE-2017-8527

Technical details for CVE-2017-8527 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, root cause, exploits, or fixes are included here. Monitor for updates from official advisories.

CVE-2019-0736

CVE-2019-0736 is a memory corruption vulnerability in the Windows DHCP client triggered by specially crafted DHCP responses. If exploited, it could allow remote code execution on the affected Windows client. The issue arises from how the DHCP client handles certain responses (root cause: memory c...

CVE-2019-0795

Technical details for CVE-2019-0795 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are stated. Monitor for updates from connected sources.

CVE-2019-1184

CVE-2019-1184 is a Windows elevation-of-privilege issue in the Windows Core Shell COM Server Registrar that arises from improperly handling COM calls. Exploitation requires a logged-on user who runs a specially crafted application, enabling higher-privilege execution on an affected system. Affect...

CVE-2021-26433

Technical details (affected product/version, root cause, impact, or exploit information) are not provided in the connected documents for CVE-2021-26433. Monitor for updates.

CVE-2021-26885

CVE-2021-26885 is a Windows WalletService elevation of privilege vulnerability described as a local privilege escalation that could impact a system’s confidentiality, integrity and availability. The public documents identify the affected component as Windows WalletService and classify the vulnera...

CVE-2021-36933

CVE-2021-36933 corresponds to a Windows component vulnerability: the Windows Services for NFS ONCRPC XDR Driver Information Disclosure. According to the NVD entry, it is an information disclosure with a CVSS v3.1 base score of 7.5 (HIGH), exploitable over the network without user interaction, aff...

CVE-2021-42279

CVE-2021-42279 concerns a memory corruption vulnerability in the Chakra Scripting Engine / ChakraCore. Connected sources indicate an out-of-bounds write as the root cause, enabling memory corruption with a network-accessible context and high impact characteristics (I/H, A/H) per CVSS details, tho...

CVE-2022-26828

CVE-2022-26828 is a Windows Bluetooth Driver Elevation of Privilege vulnerability. The affected component is the Windows Bluetooth driver; the root cause and exact exploitation details are not provided in the documents beyond the elevation-privilege nature. According to the references, the vulner...

CVE-2022-30225

Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.

CVE-2022-37970

CVE-2022-37970 affects the Windows DWM Core Library, enabling local privilege escalation (attack vector: LOCAL; privileges required: LOW; UI: NONE). The CVSS base notes HIGH impact on confidentiality, integrity, and availability. Microsoft has released security updates (referenced in MSRC/KB advi...

CVE-2022-37980

Technical details about CVE-2022-37980 (affected software, root cause, impact, and fix) are not publicly disclosed in the provided documents. Monitor official sources for updates.

CVE-2022-38037

CVE-2022-38037 is described in the sources as a Windows kernel memory corruption vulnerability caused by the registry hive loader not enforcing a correct relationship between the hive file version (minor) and the subkey list structures. Specifically, the hive loader may assume a given minor versi...

CVE-2017-11885

CVE-2017-11885 is a Windows RRAS (Routing and Remote Access) remote code execution vulnerability affecting multiple Windows versions. The vulnerability arises from how RRAS handles requests, enabling remote execution without user interaction. Public exploitation exists (e.g., Exploit-DB entry lin...

CVE-2017-8695

CVE-2017-8695 is an information-disclosure vulnerability in Windows Uniscribe where Microsoft’s Graphics Component can leak memory contents when handling objects, exploitable via a specially crafted document or an untrusted webpage. Affected products span Windows versions from Windows Server 2008...

CVE-2018-0967

CVE-2018-0967 is a Windows SNMP Service Denial of Service vulnerability. According to connected documents, it arises from how Windows SNMP Service handles malformed SNMP traps/messages, allowing an attacker to trigger a denial of service via a specially crafted SNMP payload. Affected product fami...

CVE-2018-1012

CVE-2018-1012 describes a remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts, commonly called the Microsoft Graphics Remote Code Execution Vulnerability. Affected are Windows 7; Windows Server 2008, 2008 R2, 2012, 2012 R2; Windows 8.1; Wi...

CVE-2019-0583

Technical details for CVE-2019-0583 are not provided in the supplied documents; the public records here do not specify affected products/root cause/remediation. Monitor for updates.

CVE-2019-0625

Technical details for CVE-2019-0625 are not publicly available in the provided documents. Monitor for updates; current sources confirm a Jet Database Engine remote code execution vulnerability but do not expose affected products, versions, or fixes in this set.

CVE-2020-1015

CVE-2020-1015 is a Windows elevation-of-privilege vulnerability affecting the User-Mode Power Service (UMPS). Connected CNVD entries corroborate an EoP issue stemming from improper handling of memory objects in Windows components (UMPS and related services such as WpcDesktopMonSvc); they describe...

CVE-2020-1112

Technical details for CVE-2020-1112 are not publicly available in the provided documents. No confirmed affected products, root cause, or fixes are documented here. Monitor official CVE sources and vendor updates for concrete details.

CVE-2020-16910

CVE-2020-16910 is a Windows security feature bypass in which Windows may fail to enforce file creation permissions, enabling an attacker to create files in a protected UEFI location. Exploitation would involve running a specially crafted application to bypass UEFI variable security in Windows. Mi...

CVE-2020-16927

CVE-2020-16927 describes a denial-of-service vulnerability in Remote Desktop Protocol (RDP). An attacker can trigger a denial of service by initiating an RDP connection to a server that exposes RDP and sending specially crafted requests, potentially causing the RDP service to stop responding. The...

CVE-2021-31951

CVE-2021-31951 is a Windows Kernel Elevation of Privilege vulnerability (affected software: Windows Kernel components). The initial description provides the vulnerability type and name, while connected documents enumerate CVE-2021-31951 among Windows vulnerability references but do not supply exp...

CVE-2021-31971

CVE-2021-31971 is a Windows security vulnerability described as a Windows HTML Platforms Security Feature Bypass. Connected sources confirm it is a remote, network-exploitable vulnerability in the HTML platforms component of Internet Explorer/Windows HTML Platform. Exploitation details in the Nes...

CVE-2021-34455

CVE-2021-34455 is a Windows/File History Service elevation-of-privilege issue. Connected CNVD-2021-66071 describes an elevation-of-privilege vulnerability in the File History Service of Microsoft Windows/Windows Server. The CVE entry lists local access, low attack complexity, no authentication re...

CVE-2022-26917

CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...

CVE-2022-38046

CVE-2022-38046 is a real vulnerability in Windows Web Account Manager that could lead to information disclosure. The affected component is part of Windows, and the risk is described as HIGH (CVSSv3.1 7.5). Public exploits exist per a Kaspersky vulnerability outline, and Microsoft has released sec...

CVE-2018-0751

CVE-2018-0751 is a Windows Kernel API elevation-of-privilege vulnerability affecting Windows family (kernel API permission handling). The connected records reference the CVE as a Windows kernel issue and show related exploitation listings (e.g., exploit-db entries linked in CIRCL). No explicit pr...

CVE-2018-8475

CVE-2018-8475 is a Windows remote code execution vulnerability caused by improper handling of specially crafted image files. Affected: Windows 7; Windows Server 2008/2012; Windows 8.1; Windows RT 8.1; Windows 10; Windows Server 2008 R2/2012/2016; Windows 10 Servers. The description does not provi...

CVE-2019-0621

Technical details about CVE-2019-0621 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2019-0877

CVE-2019-0877 is associated with Microsoft Windows Jet Database Engine remote code execution. The vulnerability arises from the Jet Engine failing to properly handle objects in memory, allowing an attacker to trigger arbitrary code execution by convincing a user to open a specially crafted file. ...