CVE-2022-37980

Technical details about CVE-2022-37980 (affected software, root cause, impact, and fix) are not publicly disclosed in the provided documents. Monitor official sources for updates.

CVE-2018-0751

CVE-2018-0751 is a Windows Kernel API elevation-of-privilege vulnerability affecting Windows family (kernel API permission handling). The connected records reference the CVE as a Windows kernel issue and show related exploitation listings (e.g., exploit-db entries linked in CIRCL). No explicit pr...

CVE-2018-0967

CVE-2018-0967 is a Windows SNMP Service Denial of Service vulnerability. According to connected documents, it arises from how Windows SNMP Service handles malformed SNMP traps/messages, allowing an attacker to trigger a denial of service via a specially crafted SNMP payload. Affected product fami...

CVE-2018-1012

CVE-2018-1012 describes a remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts, commonly called the Microsoft Graphics Remote Code Execution Vulnerability. Affected are Windows 7; Windows Server 2008, 2008 R2, 2012, 2012 R2; Windows 8.1; Wi...

CVE-2019-1287

The CVE-2019-1287 entry describes an elevation-of-privilege vulnerability in the Windows Network Connectivity Assistant, caused by how the component handles objects in memory. Affected: Windows OS component Windows Network Connectivity Assistant. Consequence: local privilege elevation with high i...

CVE-2020-0630

Technical details for CVE-2020-0630 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as new information may emerge.

CVE-2021-31951

CVE-2021-31951 is a Windows Kernel Elevation of Privilege vulnerability (affected software: Windows Kernel components). The initial description provides the vulnerability type and name, while connected documents enumerate CVE-2021-31951 among Windows vulnerability references but do not supply exp...

CVE-2021-34516

Technical details about CVE-2021-34516 are not publicly available in the provided documents. Monitor for official disclosures or advisories for affected products, impact, and remediation.

CVE-2021-36933

CVE-2021-36933 corresponds to a Windows component vulnerability: the Windows Services for NFS ONCRPC XDR Driver Information Disclosure. According to the NVD entry, it is an information disclosure with a CVSS v3.1 base score of 7.5 (HIGH), exploitable over the network without user interaction, aff...

CVE-2021-40465

CVE-2021-40465, Windows Text Shaping Remote Code Execution Vulnerability, is documented with CVSS 3.1 base score 7.8 (HIGH) and CVSS2 base 6.8 (MEDIUM) by NVD/Microsoft, indicating LOCAL exploitability with LOW attack complexity and user interaction required. The available sources in the provided...

CVE-2022-21885

Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.

CVE-2022-26789

CVE-2022-26789 is a Windows Print Spooler Elevation of Privilege vulnerability. According to the sources, the CVSS v3.1 base score is 7.8 (LOCAL, LOW attack complexity, NONE authentication, HIGH confidentiality/integrity/availability impact). Documented exploitation details are not provided in th...

CVE-2022-26917

CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...

CVE-2022-30147

Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2022-37970

CVE-2022-37970 affects the Windows DWM Core Library, enabling local privilege escalation (attack vector: LOCAL; privileges required: LOW; UI: NONE). The CVSS base notes HIGH impact on confidentiality, integrity, and availability. Microsoft has released security updates (referenced in MSRC/KB advi...

CVE-2018-8475

CVE-2018-8475 is a Windows remote code execution vulnerability caused by improper handling of specially crafted image files. Affected: Windows 7; Windows Server 2008/2012; Windows 8.1; Windows RT 8.1; Windows 10; Windows Server 2008 R2/2012/2016; Windows 10 Servers. The description does not provi...

CVE-2019-0618

CVE-2019-0618 is a remote code execution vulnerability in Windows GDI/ GDI+. The issue arises from how memory objects are handled by the Windows Graphics Device Interface, enabling a remote attacker to execute arbitrary code on affected systems. The CVE is distinct from CVE-2019-0662. Exploitabil...

CVE-2019-0625

Technical details for CVE-2019-0625 are not publicly available in the provided documents. Monitor for updates; current sources confirm a Jet Database Engine remote code execution vulnerability but do not expose affected products, versions, or fixes in this set.

CVE-2019-0688

CVE-2019-0688 : Windows TCP/IP Information Disclosure vulnerability due to improper handling of fragmented IP packets in the TCP/IP stack. The OpenVAS/OpenVAS-related entries reference Windows KB updates (KB4493509, KB4493474/0/1/6/ etc.) addressing multiple Windows vulnerabilities, including CVE...

CVE-2019-0846

The CVE-2019-0846 entry concerns a remote code execution vulnerability in the Microsoft Windows Jet Database Engine. Connected sources describe the root cause as improper handling of objects in memory within the Jet Database Engine, enabling arbitrary code execution when a victim opens a crafted ...

CVE-2020-0687

CVE-2020-0687 is a Windows remote code execution vulnerability in the Microsoft Graphics/Font handling component. It arises when the Windows font library improperly processes specially crafted embedded fonts, enabling an attacker to execute arbitrary code remotely. Microsoft addressed the issue a...

CVE-2020-1313

CVE-2020-1313 is a Windows elevation-of-privilege flaw in the Windows Update Orchestrator Service. The vulnerability stems from improper handling of file operations in the USO/UniversalOrchestrator components, allowing an unprivileged caller to schedule work that can execute with SYSTEM context v...

CVE-2020-1470

CVE-2020-1470 – Windows Work Folders Service Elevation of Privilege : An elevation of privilege vulnerability exists in the Windows Work Folders Service caused by improper handling of memory. To exploit, an attacker must first gain code execution on the victim system and then run a specially craf...

CVE-2020-16924

Technical details about CVE-2020-16924 are not publicly available in the provided connected documents; monitor for updates.

CVE-2021-34508

Technical details for CVE-2021-34508 (affected component, root cause, remediation specifics) are not provided in the connected documents. Monitor official advisories (MSRC/NVD) for updates.

CVE-2022-21889

Technical details about CVE-2022-21889 are not publicly provided in the supplied documents; monitoring for updates from vendors and CVE databases is advised.

CVE-2022-21899

Technical details about CVE-2022-21899 are not provided in the connected documents. The references show listings and patches but do not describe the vulnerability specifics, affected products, root cause, or fixes. Monitor for updates.

CVE-2022-26828

CVE-2022-26828 is a Windows Bluetooth Driver Elevation of Privilege vulnerability. The affected component is the Windows Bluetooth driver; the root cause and exact exploitation details are not provided in the documents beyond the elevation-privilege nature. According to the references, the vulner...

CVE-2022-29137

Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.

CVE-2022-34699

Summary: CVE-2022-34699 is a Windows Win32k elevation-of-privilege vulnerability. The affected component is Win32k; the issue enables local privilege escalation with high impact (C/H/I/A: High) when exploited locally. The CVSS 3.1 base score is 7.8 (Attack Vector: Local; Attack Complexity: Low; P...

CVE-2023-21757

Technical details for CVE-2023-21757 are not publicly provided in the supplied documents. No information on affected products/versions, impact, or fixes. Monitor for updates from official sources.

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2023-36900

CVE-2023-36900 affects the Windows Common Log File System (CLFS) driver, enabling Elevation of Privilege via an integer overflow/wraparound vulnerability. The connected exploit repository documents a PoC labeled as an exploit for an Integer Overflow or Wraparound in Microsoft CLFS, with a Denial-...

CVE-2016-7212

CVE-2016-7212 affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8.1, 2012 Gold/R2, RT 8.1, 10 up to 1607, and Server 2016) where a crafted image file can lead to remote code execution. Root cause: improper handling in the Windows image load feature. Impact is remote cod...

CVE-2017-11780

CVE-2017-11780 is a remote code execution vulnerability in the Microsoft Windows Server Message Block 1.0 (SMBv1) server. The issue occurs when SMBv1 fails to handle certain requests, allowing an unauthenticated attacker to execute code on the target server over the network. Affected products inc...

CVE-2018-0756

CVE-2018-0756 affects the Windows kernel in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/Server 1709, due to how objects are handled in memory, enabling local elevation of privilege. The connected documents do not provide additional concrete technical details (affected compon...

CVE-2018-8332

CVE-2018-8332 is a remote code execution vulnerability in the Windows font library (Win32k) where specially crafted embedded fonts are mishandled. It affects a broad set of Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server equivalents listed in the initial entry), as well...

CVE-2019-0941

Technical details about CVE-2019-0941 are not publicly provided in supplied documents. The set includes only general description of a DoS in IIS request filtering and related updates; no affected product versions or root causes are specified here. Monitor for updates.

CVE-2019-1274

CVE-2019-1274 is a Windows kernel information-disclosure vulnerability described as failing to properly initialize a memory address. The connected Red Hat entry mirrors the description; NVD/NIST details also reference this Windows kernel information-disclosure issue. The vulnerability impact is i...

CVE-2020-1034

Technical details specific to CVE-2020-1034, including affected products, root cause, and fixes, are not provided in the connected documents. Monitor for official updates from Microsoft Security Update Guide and MSKB posts for this CVE.

CVE-2020-1417

CVE-2020-1417 is a Windows kernel elevation-of-privilege vulnerability. The issue arises when the Windows kernel fails to handle objects in memory, allowing an attacker who can log on locally to run arbitrary code in kernel mode, potentially installing programs, accessing and altering data, or cr...

CVE-2020-16927

CVE-2020-16927 describes a denial-of-service vulnerability in Remote Desktop Protocol (RDP). An attacker can trigger a denial of service by initiating an RDP connection to a server that exposes RDP and sending specially crafted requests, potentially causing the RDP service to stop responding. The...

CVE-2021-1669

CVE-2021-1669 is a Windows Remote Desktop Security Feature Bypass vulnerability. The linked NVD entry notes a high-severity, network-based issue (CVSS v3.1: 8.8; privileges required: LOW; user interaction: NONE; impact: HIGH across confidentiality, integrity, availability). OpenVAS-derived entrie...

CVE-2021-26431

CVE-2021-26431 affects the Windows Recovery Environment Agent and is an elevation-of-privilege vulnerability. CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, PRIVILEGES-REQUIRED: LOW, UI: NONE) with HIGH confidentiality, integrity, and availability impacts. The issue is addressed by Micro...

CVE-2021-31971

CVE-2021-31971 is a Windows security vulnerability described as a Windows HTML Platforms Security Feature Bypass. Connected sources confirm it is a remote, network-exploitable vulnerability in the HTML platforms component of Internet Explorer/Windows HTML Platform. Exploitation details in the Nes...

CVE-2021-33751

CVE-2021-33751 is a Storage Spaces Controller Elevation of Privilege vulnerability affecting Windows Storage Spaces Controller. The CVSS indicates local, low attack complexity, with high impact to confidentiality, integrity, and availability. Affected component is Storage Spaces Controller; root ...

CVE-2022-29121

Technical details about CVE-2022-29121 are not provided in the supplied documents. No information on affected products/versions or fixes is available here. Monitor for updates from Microsoft/MSRC and vendor advisories.

CVE-2022-35803

CVE-2022-35803 affects the Windows Common Log File System Driver. The vulnerability is a local elevation-of-privilege in CLFS that could allow an attacker with low privileges to gain SYSTEM-level access, with impact to confidentiality, integrity, and availability rated high. The entry notes a CVS...

CVE-2022-41047

CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...