CVE-2022-21885

Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.

CVE-2022-26789

CVE-2022-26789 is a Windows Print Spooler Elevation of Privilege vulnerability. According to the sources, the CVSS v3.1 base score is 7.8 (LOCAL, LOW attack complexity, NONE authentication, HIGH confidentiality/integrity/availability impact). Documented exploitation details are not provided in th...

CVE-2023-36900

CVE-2023-36900 affects the Windows Common Log File System (CLFS) driver, enabling Elevation of Privilege via an integer overflow/wraparound vulnerability. The connected exploit repository documents a PoC labeled as an exploit for an Integer Overflow or Wraparound in Microsoft CLFS, with a Denial-...

CVE-2017-8695

CVE-2017-8695 is an information-disclosure vulnerability in Windows Uniscribe where Microsoft’s Graphics Component can leak memory contents when handling objects, exploitable via a specially crafted document or an untrusted webpage. Affected products span Windows versions from Windows Server 2008...

CVE-2019-0877

CVE-2019-0877 is associated with Microsoft Windows Jet Database Engine remote code execution. The vulnerability arises from the Jet Engine failing to properly handle objects in memory, allowing an attacker to trigger arbitrary code execution by convincing a user to open a specially crafted file. ...

CVE-2019-1271

CVE-2019-1271 is described in connected CNVD-2019-31848 as a privilege escalation vulnerability in hdAudio.sys affecting Microsoft Windows and Windows Server. The entry notes that an attacker who logs on to the system and runs a specially crafted application can exploit this vulnerability to comp...

CVE-2020-1034

Technical details specific to CVE-2020-1034, including affected products, root cause, and fixes, are not provided in the connected documents. Monitor for official updates from Microsoft Security Update Guide and MSKB posts for this CVE.

CVE-2020-1470

CVE-2020-1470 – Windows Work Folders Service Elevation of Privilege : An elevation of privilege vulnerability exists in the Windows Work Folders Service caused by improper handling of memory. To exploit, an attacker must first gain code execution on the victim system and then run a specially craf...

CVE-2020-16911

CVE-2020-16911 is a Windows GDI memory handling remote code execution vulnerability. An attacker can exploit memory objects via network/vector (e.g., via crafted web content or documents) to gain code execution and install/modify data or create accounts. The vulnerability is addressed by a Micros...

CVE-2021-1669

CVE-2021-1669 is a Windows Remote Desktop Security Feature Bypass vulnerability. The linked NVD entry notes a high-severity, network-based issue (CVSS v3.1: 8.8; privileges required: LOW; user interaction: NONE; impact: HIGH across confidentiality, integrity, availability). OpenVAS-derived entrie...

CVE-2021-26431

CVE-2021-26431 affects the Windows Recovery Environment Agent and is an elevation-of-privilege vulnerability. CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, PRIVILEGES-REQUIRED: LOW, UI: NONE) with HIGH confidentiality, integrity, and availability impacts. The issue is addressed by Micro...

CVE-2021-34492

Technical details for CVE-2021-34492 are not provided in the supplied documents. Monitor for updates from NVD, Microsoft advisories, or vendor/CSIRT bulletins for affected products and remediation.

CVE-2022-30147

Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.

CVE-2022-41052

CVE-2022-41052 is a Windows Graphics Component remote code execution vulnerability. The CVSS 3.1 base score is 7.8 (HIGH) with an attack vector of LOCAL, requiring user interaction, and impact on confidentiality, integrity, and availability (all HIGH). Affected details (product, component, root c...

CVE-2017-0158

CVE-2017-0158 is a Windows scripting engine memory corruption vulnerability. The issue arises from improper handling/sanitization of in-memory handles in the Scripting Engine, enabling remote code execution when a user visits a malicious site or opens a crafted document. Affected platforms includ...

CVE-2019-0578

CVE-2019-0578 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of in-memory objects, enabling code execution when a user opens a crafted file. Affected systems include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (various ...

CVE-2019-0579

Technical details for CVE-2019-0579 (affected software, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0688

CVE-2019-0688 : Windows TCP/IP Information Disclosure vulnerability due to improper handling of fragmented IP packets in the TCP/IP stack. The OpenVAS/OpenVAS-related entries reference Windows KB updates (KB4493509, KB4493474/0/1/6/ etc.) addressing multiple Windows vulnerabilities, including CVE...

CVE-2019-0941

Technical details about CVE-2019-0941 are not publicly provided in supplied documents. The set includes only general description of a DoS in IIS request filtering and related updates; no affected product versions or root causes are specified here. Monitor for updates.

CVE-2019-1183

CVE-2019-1183 is described as fully mitigated by security updates for CVE-2019-1194; no separate update is required. Connected documents show CVE-2019-1194 as a remote code execution vulnerability in Internet Explorer’s scripting engine (memory corruption risk via VBScript/IE scripting paths). Th...

CVE-2020-1313

CVE-2020-1313 is a Windows elevation-of-privilege flaw in the Windows Update Orchestrator Service. The vulnerability stems from improper handling of file operations in the USO/UniversalOrchestrator components, allowing an unprivileged caller to schedule work that can execute with SYSTEM context v...

CVE-2020-1417

CVE-2020-1417 is a Windows kernel elevation-of-privilege vulnerability. The issue arises when the Windows kernel fails to handle objects in memory, allowing an attacker who can log on locally to run arbitrary code in kernel mode, potentially installing programs, accessing and altering data, or cr...

CVE-2020-1467

CVE-2020-1467 is a Windows elevation-of-privilege flaw arising from improper handling of hard links. An attacker who can log on to the system could run a crafted program to overwrite a targeted file, gaining elevated privileges. Microsoft addressed the issue via security updates that correct Wind...

CVE-2020-16924

Technical details about CVE-2020-16924 are not publicly available in the provided connected documents; monitor for updates.

CVE-2021-34461

CVE-2021-34461 is an elevation of privilege vulnerability in the Windows Container Isolation FS Filter Driver. The available connected materials identify the issue as a local privilege escalation within the FS filter component used for container isolation, enabling an attacker with local access t...

CVE-2021-42283

CVE-2021-42283 is an NTFS Elevation of Privilege vulnerability with documented CVSS 3.1 base score 7.8 (HIGH) and local attack vector with low complexity, no authentication, and user interaction not required. The entry also lists CVSS 2.0 data (MEDIUM) and a CNA score. There are no connected docu...

CVE-2022-21848

Technical details about CVE-2022-21848 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2022-22022

Technical details about CVE-2022-22022 are not publicly available in the provided documents. No affected product/version or root cause is disclosed here. Monitor for updates in the connected sources.

CVE-2022-29137

Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2017-0277

CVE-2017-0277 describes a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The SMBv1 service on affected Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 1511/1607/1703, Windows Server 2...

CVE-2018-0829

The Windows kernel information disclosure in CVE-2018-0829 affects multiple Windows versions: Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 and R2; Windows 10 releases (Gold, 1511, 1607, 1703, 1709); Windows Server 2016 and Windows Server version 1...

CVE-2019-0596

The CVE-2019-0596 entry describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. Affected component: Jet Database Engine. Impact: remote code execution with high severity (per CVE). The connected records also indicate sim...

CVE-2020-16907

CVE-2020-16907 is a Windows kernel-mode elevation of privilege vulnerability. The issue arises when the Windows kernel-mode driver fails to properly handle objects in memory, allowing a local attacker to execute arbitrary code in kernel mode, potentially installing programs, accessing or modifyin...

CVE-2021-31193

CVE-2021-31193 is a Windows SSDP Service elevation-of-privilege vulnerability. Affects Windows OS where the SSDP service can be abused locally to gain high integrity privileges (CVSS3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation in provided documents points to Microsoft security updates r...

CVE-2021-42285

CVE-2021-42285 is a Windows kernel elevation-of-privilege vulnerability. The provided records describe it as a Windows Kernel Elevation of Privilege Vulnerability with a local attack vector and low attack complexity. In the NVD entry, the CVSS vectors are CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2022-21889

Technical details about CVE-2022-21889 are not publicly provided in the supplied documents; monitoring for updates from vendors and CVE databases is advised.

CVE-2022-29115

Technical details about CVE-2022-29115 are not publicly provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for updates.

CVE-2022-29121

Technical details about CVE-2022-29121 are not provided in the supplied documents. No information on affected products/versions or fixes is available here. Monitor for updates from Microsoft/MSRC and vendor advisories.

CVE-2022-44676

Technical details for CVE-2022-44676 are not provided in the supplied documents. Public availability of affected products, root cause, and fixes cannot be confirmed here; monitor for updates from official sources.

CVE-2023-21802

Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.

CVE-2018-0756

CVE-2018-0756 affects the Windows kernel in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/Server 1709, due to how objects are handled in memory, enabling local elevation of privilege. The connected documents do not provide additional concrete technical details (affected compon...

CVE-2018-8482

CVE-2018-8482 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products include Windows 7, Windows 8.1, Windows 10 and corresponding server editions listed in the description. The root cause is an information disclosur...

CVE-2019-0600

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability feeds.

CVE-2019-0846

The CVE-2019-0846 entry concerns a remote code execution vulnerability in the Microsoft Windows Jet Database Engine. Connected sources describe the root cause as improper handling of objects in memory within the Jet Database Engine, enabling arbitrary code execution when a victim opens a crafted ...

CVE-2019-1274

CVE-2019-1274 is a Windows kernel information-disclosure vulnerability described as failing to properly initialize a memory address. The connected Red Hat entry mirrors the description; NVD/NIST details also reference this Windows kernel information-disclosure issue. The vulnerability impact is i...

CVE-2020-0608

CVE-2020-0608 is an information disclosure vulnerability affecting the Win32k component where kernel information is improperly disclosed. The root cause is in win32k exposing kernel data, leading to potential information disclosure with local access and no user interaction required. The CVSS metr...

CVE-2020-0630

Technical details for CVE-2020-0630 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as new information may emerge.

CVE-2020-0687

CVE-2020-0687 is a Windows remote code execution vulnerability in the Microsoft Graphics/Font handling component. It arises when the Windows font library improperly processes specially crafted embedded fonts, enabling an attacker to execute arbitrary code remotely. Microsoft addressed the issue a...