CVE-2021-36933

CVE-2021-36933 corresponds to a Windows component vulnerability: the Windows Services for NFS ONCRPC XDR Driver Information Disclosure. According to the NVD entry, it is an information disclosure with a CVSS v3.1 base score of 7.5 (HIGH), exploitable over the network without user interaction, aff...

CVE-2022-26789

CVE-2022-26789 is a Windows Print Spooler Elevation of Privilege vulnerability. According to the sources, the CVSS v3.1 base score is 7.8 (LOCAL, LOW attack complexity, NONE authentication, HIGH confidentiality/integrity/availability impact). Documented exploitation details are not provided in th...

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2022-37970

CVE-2022-37970 affects the Windows DWM Core Library, enabling local privilege escalation (attack vector: LOCAL; privileges required: LOW; UI: NONE). The CVSS base notes HIGH impact on confidentiality, integrity, and availability. Microsoft has released security updates (referenced in MSRC/KB advi...

CVE-2022-37980

Technical details about CVE-2022-37980 (affected software, root cause, impact, and fix) are not publicly disclosed in the provided documents. Monitor official sources for updates.

CVE-2022-38037

CVE-2022-38037 is described in the sources as a Windows kernel memory corruption vulnerability caused by the registry hive loader not enforcing a correct relationship between the hive file version (minor) and the subkey list structures. Specifically, the hive loader may assume a given minor versi...

CVE-2017-8695

CVE-2017-8695 is an information-disclosure vulnerability in Windows Uniscribe where Microsoft’s Graphics Component can leak memory contents when handling objects, exploitable via a specially crafted document or an untrusted webpage. Affected products span Windows versions from Windows Server 2008...

CVE-2018-0967

CVE-2018-0967 is a Windows SNMP Service Denial of Service vulnerability. According to connected documents, it arises from how Windows SNMP Service handles malformed SNMP traps/messages, allowing an attacker to trigger a denial of service via a specially crafted SNMP payload. Affected product fami...

CVE-2018-1012

CVE-2018-1012 describes a remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts, commonly called the Microsoft Graphics Remote Code Execution Vulnerability. Affected are Windows 7; Windows Server 2008, 2008 R2, 2012, 2012 R2; Windows 8.1; Wi...

CVE-2020-0630

Technical details for CVE-2020-0630 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as new information may emerge.

CVE-2020-1313

CVE-2020-1313 is a Windows elevation-of-privilege flaw in the Windows Update Orchestrator Service. The vulnerability stems from improper handling of file operations in the USO/UniversalOrchestrator components, allowing an unprivileged caller to schedule work that can execute with SYSTEM context v...

CVE-2021-34508

Technical details for CVE-2021-34508 (affected component, root cause, remediation specifics) are not provided in the connected documents. Monitor official advisories (MSRC/NVD) for updates.

CVE-2021-34516

Technical details about CVE-2021-34516 are not publicly available in the provided documents. Monitor for official disclosures or advisories for affected products, impact, and remediation.

CVE-2021-40465

CVE-2021-40465, Windows Text Shaping Remote Code Execution Vulnerability, is documented with CVSS 3.1 base score 7.8 (HIGH) and CVSS2 base 6.8 (MEDIUM) by NVD/Microsoft, indicating LOCAL exploitability with LOW attack complexity and user interaction required. The available sources in the provided...

CVE-2022-21885

Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.

CVE-2022-26828

CVE-2022-26828 is a Windows Bluetooth Driver Elevation of Privilege vulnerability. The affected component is the Windows Bluetooth driver; the root cause and exact exploitation details are not provided in the documents beyond the elevation-privilege nature. According to the references, the vulner...

CVE-2022-26917

CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2023-36900

CVE-2023-36900 affects the Windows Common Log File System (CLFS) driver, enabling Elevation of Privilege via an integer overflow/wraparound vulnerability. The connected exploit repository documents a PoC labeled as an exploit for an Integer Overflow or Wraparound in Microsoft CLFS, with a Denial-...

CVE-2018-0756

CVE-2018-0756 affects the Windows kernel in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/Server 1709, due to how objects are handled in memory, enabling local elevation of privilege. The connected documents do not provide additional concrete technical details (affected compon...

CVE-2018-8475

CVE-2018-8475 is a Windows remote code execution vulnerability caused by improper handling of specially crafted image files. Affected: Windows 7; Windows Server 2008/2012; Windows 8.1; Windows RT 8.1; Windows 10; Windows Server 2008 R2/2012/2016; Windows 10 Servers. The description does not provi...

CVE-2019-0618

CVE-2019-0618 is a remote code execution vulnerability in Windows GDI/ GDI+. The issue arises from how memory objects are handled by the Windows Graphics Device Interface, enabling a remote attacker to execute arbitrary code on affected systems. The CVE is distinct from CVE-2019-0662. Exploitabil...

CVE-2019-0625

Technical details for CVE-2019-0625 are not publicly available in the provided documents. Monitor for updates; current sources confirm a Jet Database Engine remote code execution vulnerability but do not expose affected products, versions, or fixes in this set.

CVE-2019-0688

CVE-2019-0688 : Windows TCP/IP Information Disclosure vulnerability due to improper handling of fragmented IP packets in the TCP/IP stack. The OpenVAS/OpenVAS-related entries reference Windows KB updates (KB4493509, KB4493474/0/1/6/ etc.) addressing multiple Windows vulnerabilities, including CVE...

CVE-2019-0846

The CVE-2019-0846 entry concerns a remote code execution vulnerability in the Microsoft Windows Jet Database Engine. Connected sources describe the root cause as improper handling of objects in memory within the Jet Database Engine, enabling arbitrary code execution when a victim opens a crafted ...

CVE-2020-0687

CVE-2020-0687 is a Windows remote code execution vulnerability in the Microsoft Graphics/Font handling component. It arises when the Windows font library improperly processes specially crafted embedded fonts, enabling an attacker to execute arbitrary code remotely. Microsoft addressed the issue a...

CVE-2020-1034

Technical details specific to CVE-2020-1034, including affected products, root cause, and fixes, are not provided in the connected documents. Monitor for official updates from Microsoft Security Update Guide and MSKB posts for this CVE.

CVE-2020-1417

CVE-2020-1417 is a Windows kernel elevation-of-privilege vulnerability. The issue arises when the Windows kernel fails to handle objects in memory, allowing an attacker who can log on locally to run arbitrary code in kernel mode, potentially installing programs, accessing and altering data, or cr...

CVE-2020-1470

CVE-2020-1470 – Windows Work Folders Service Elevation of Privilege : An elevation of privilege vulnerability exists in the Windows Work Folders Service caused by improper handling of memory. To exploit, an attacker must first gain code execution on the victim system and then run a specially craf...

CVE-2020-16924

Technical details about CVE-2020-16924 are not publicly available in the provided connected documents; monitor for updates.

CVE-2020-16927

CVE-2020-16927 describes a denial-of-service vulnerability in Remote Desktop Protocol (RDP). An attacker can trigger a denial of service by initiating an RDP connection to a server that exposes RDP and sending specially crafted requests, potentially causing the RDP service to stop responding. The...

CVE-2021-1669

CVE-2021-1669 is a Windows Remote Desktop Security Feature Bypass vulnerability. The linked NVD entry notes a high-severity, network-based issue (CVSS v3.1: 8.8; privileges required: LOW; user interaction: NONE; impact: HIGH across confidentiality, integrity, availability). OpenVAS-derived entrie...

CVE-2021-26431

CVE-2021-26431 affects the Windows Recovery Environment Agent and is an elevation-of-privilege vulnerability. CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, PRIVILEGES-REQUIRED: LOW, UI: NONE) with HIGH confidentiality, integrity, and availability impacts. The issue is addressed by Micro...

CVE-2021-33751

CVE-2021-33751 is a Storage Spaces Controller Elevation of Privilege vulnerability affecting Windows Storage Spaces Controller. The CVSS indicates local, low attack complexity, with high impact to confidentiality, integrity, and availability. Affected component is Storage Spaces Controller; root ...

CVE-2022-21889

Technical details about CVE-2022-21889 are not publicly provided in the supplied documents; monitoring for updates from vendors and CVE databases is advised.

CVE-2022-21899

Technical details about CVE-2022-21899 are not provided in the connected documents. The references show listings and patches but do not describe the vulnerability specifics, affected products, root cause, or fixes. Monitor for updates.

CVE-2022-29137

Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.

CVE-2022-30147

Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.

CVE-2022-34699

Summary: CVE-2022-34699 is a Windows Win32k elevation-of-privilege vulnerability. The affected component is Win32k; the issue enables local privilege escalation with high impact (C/H/I/A: High) when exploited locally. The CVSS 3.1 base score is 7.8 (Attack Vector: Local; Attack Complexity: Low; P...

CVE-2016-7212

CVE-2016-7212 affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8.1, 2012 Gold/R2, RT 8.1, 10 up to 1607, and Server 2016) where a crafted image file can lead to remote code execution. Root cause: improper handling in the Windows image load feature. Impact is remote cod...

CVE-2017-0158

CVE-2017-0158 is a Windows scripting engine memory corruption vulnerability. The issue arises from improper handling/sanitization of in-memory handles in the Scripting Engine, enabling remote code execution when a user visits a malicious site or opens a crafted document. Affected platforms includ...

CVE-2018-8332

CVE-2018-8332 is a remote code execution vulnerability in the Windows font library (Win32k) where specially crafted embedded fonts are mishandled. It affects a broad set of Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server equivalents listed in the initial entry), as well...

CVE-2019-0552

CVE-2019-0552 is a Windows privilege-escalation vulnerability in the COM Desktop Broker component. The issue is triggered locally and allows an attacker with limited privileges to run code with elevated privileges within affected Windows versions (including Windows 10/Server 2016/2019, Windows 8....

CVE-2019-0941

Technical details about CVE-2019-0941 are not publicly provided in supplied documents. The set includes only general description of a DoS in IIS request filtering and related updates; no affected product versions or root causes are specified here. Monitor for updates.

CVE-2019-1274

CVE-2019-1274 is a Windows kernel information-disclosure vulnerability described as failing to properly initialize a memory address. The connected Red Hat entry mirrors the description; NVD/NIST details also reference this Windows kernel information-disclosure issue. The vulnerability impact is i...

CVE-2020-1561

CVE-2020-1561 is a remote code execution in Microsoft Graphics Components caused by how objects are handled in memory. Trigger requires opening a specially crafted file. A security update fixes the memory handling to address the vulnerability. Connected sources note CVE-2020-1561 among Microsoft ...

CVE-2021-31971

CVE-2021-31971 is a Windows security vulnerability described as a Windows HTML Platforms Security Feature Bypass. Connected sources confirm it is a remote, network-exploitable vulnerability in the HTML platforms component of Internet Explorer/Windows HTML Platform. Exploitation details in the Nes...

CVE-2021-34454

CVE-2021-34454 is described as a Windows Information Disclosure vulnerability in the Remote Access Connection Manager. The included data indicates a local, low-complexity attack with no authentication required, resulting in partial confidentiality loss (per CVSS v3.1: 5.5 MEDIUM). The NVD entry a...

CVE-2022-21992

Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...

CVE-2022-29121

Technical details about CVE-2022-29121 are not provided in the supplied documents. No information on affected products/versions or fixes is available here. Monitor for updates from Microsoft/MSRC and vendor advisories.