CVE-2019-0575

CVE-2019-0575 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue can be triggered when a user opens a specially crafted file, enabling an attacker to run arbitrary code on the victim’s machine. The vulnerability ...

CVE-2019-0791

CVE-2019-0791 is a remote code execution vulnerability in the Microsoft XML Core Services (MSXML) parser when it processes user input. The issue enables network-based exploitation with user interaction required, and is rated HIGH (CVSS v3.0: 8.8). The initial document does not specify a fixed pat...

CVE-2019-0792

Technical details for CVE-2019-0792 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2019-0842

Technical details about CVE-2019-0842 are not publicly provided in the connected documents you supplied. No affected products/versions or fixes are specified here. Monitor for updates.

CVE-2019-0904

The CVE-2019-0904 issue is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of in-memory objects. Attackers could entice users to open a specially crafted file to run arbitrary code on affected systems. Affected software/hardware: Windows Jet Database ...

CVE-2019-1274

CVE-2019-1274 is a Windows kernel information-disclosure vulnerability described as failing to properly initialize a memory address. The connected Red Hat entry mirrors the description; NVD/NIST details also reference this Windows kernel information-disclosure issue. The vulnerability impact is i...

CVE-2021-1669

CVE-2021-1669 is a Windows Remote Desktop Security Feature Bypass vulnerability. The linked NVD entry notes a high-severity, network-based issue (CVSS v3.1: 8.8; privileges required: LOW; user interaction: NONE; impact: HIGH across confidentiality, integrity, availability). OpenVAS-derived entrie...

CVE-2021-34530

CVE-2021-34530 is a Microsoft Windows Graphics Component remote code execution vulnerability. The connected sources confirm the affected component as Microsoft Graphics Component, with a CVSSv3 base score of 7.8 (HIGH) and local attack vector/low user interaction requirements per the CVSS data, a...

CVE-2021-36965

CVE-2021-36965 concerns a Remote Code Execution flaw in Windows WLAN AutoConfig service. Connected documents confirm the affected component is WLAN AutoConfig and reference September 2021 Microsoft patches; no explicit root-cause details or in-wild exploitation are provided in the supplied source...

CVE-2022-21963

CVE-2022-21963 is described as a Windows Resilient File System (ReFS) Remote Code Execution vulnerability. The available data shows a high-impact, local/physical-attack scenario with no user interaction, but no concrete remediation details or version-specific affected products are provided beyond...

CVE-2022-34702

Technical details about CVE-2022-34702 are not publicly provided in the connected documents. No affected products, vectors, or remediation are stated beyond the initial description. Monitor for updates and additional authoritative disclosures.

CVE-2023-21802

Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.

CVE-2023-21803

CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...

CVE-2023-21813

Technical details on CVE-2023-21813 are not provided in the furnished documents; no affected products, exploit info, or fixes are described here. Monitor for updates from official advisories.

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2016-7212

CVE-2016-7212 affects multiple Windows versions (Vista SP2, Server 2008 SP2/R2 SP1, 7 SP1, 8.1, 2012 Gold/R2, RT 8.1, 10 up to 1607, and Server 2016) where a crafted image file can lead to remote code execution. Root cause: improper handling in the Windows image load feature. Impact is remote cod...

CVE-2018-0748

CVE-2018-0748 is a Windows kernel elevation-of-privilege vulnerability affecting multiple Windows platforms (e.g., Windows 7 SP1, 8.1/RT 8.1, server lines, Windows 10 versions up to 1709). The root cause is described as the kernel’s handling of memory addresses enabling elevation of privilege whe...

CVE-2018-0965

CVE-2018-0965 describes a remote code execution vulnerability in Windows Hyper‑V, triggered when a host server fails to properly validate input from an authenticated user on a guest OS. Affected products include Windows Server 2016 and Windows 10/Windows 10 servers. The root cause is improper inp...

CVE-2019-0848

CVE-2019-0848 is an information disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The issue is distinct from CVE-2019-0814. Public data indicates local access and potential partial confidentiality impact, with CVSS metrics showing a low to m...

CVE-2020-1113

Technical details for CVE-2020-1113 are not publicly provided in the connected documents. Monitor for official advisories to learn affected products, root cause, impact, and fixes.

CVE-2020-1417

CVE-2020-1417 is a Windows kernel elevation-of-privilege vulnerability. The issue arises when the Windows kernel fails to handle objects in memory, allowing an attacker who can log on locally to run arbitrary code in kernel mode, potentially installing programs, accessing and altering data, or cr...

CVE-2020-16940

The CVE-2020-16940 issue is an elevation of privilege in Windows computing environments caused by the Windows User Profile Service (ProfSvc) mishandling junction points. The vulnerability allows an attacker who can log on to exploit a specially crafted application to delete files or folders with ...

CVE-2021-1645

CVE-2021-1645 is a Windows DP API cryptography flaw affecting Windows Containers that can lead to information disclosure. Affected component: Windows Containers use of DP API; root cause described as a cryptographic flaw in the Windows DP API within container contexts. Impact is confidentiality b...

CVE-2021-26433

Technical details (affected product/version, root cause, impact, or exploit information) are not provided in the connected documents for CVE-2021-26433. Monitor for updates.

CVE-2021-34516

Technical details about CVE-2021-34516 are not publicly available in the provided documents. Monitor for official disclosures or advisories for affected products, impact, and remediation.

CVE-2022-21888

Technical details about CVE-2022-21888 are not publicly provided in the supplied documents. No affected products, versions, or fixes are specified. Monitor for updates from official sources.

CVE-2022-21897

Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.

CVE-2022-21992

Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...

CVE-2022-30205

Technical details (affected product/version, root cause, exploitability, and remediation) for CVE-2022-30205 are not provided in the connected documents. Only high-level references to the Windows Group Policy elevation vulnerability are present. Monitor for updates.

CVE-2022-38031

CVE-2022-38031 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The connected documents confirm the affected component as the WDAC OLE DB provider for SQL and show that Microsoft issued updates (e.g., KB5018419 and related security ...

CVE-2017-11780

CVE-2017-11780 is a remote code execution vulnerability in the Microsoft Windows Server Message Block 1.0 (SMBv1) server. The issue occurs when SMBv1 fails to handle certain requests, allowing an unauthenticated attacker to execute code on the target server over the network. Affected products inc...

CVE-2018-8332

CVE-2018-8332 is a remote code execution vulnerability in the Windows font library (Win32k) where specially crafted embedded fonts are mishandled. It affects a broad set of Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server equivalents listed in the initial entry), as well...

CVE-2019-0536

Technical details for CVE-2019-0536 are not provided in the connected documents. No product/version/impact data is available here. Monitor for updates.

CVE-2019-0552

CVE-2019-0552 is a Windows privilege-escalation vulnerability in the COM Desktop Broker component. The issue is triggered locally and allows an attacker with limited privileges to run code with elevated privileges within affected Windows versions (including Windows 10/Server 2016/2019, Windows 8....

CVE-2019-0618

CVE-2019-0618 is a remote code execution vulnerability in Windows GDI/ GDI+. The issue arises from how memory objects are handled by the Windows Graphics Device Interface, enabling a remote attacker to execute arbitrary code on affected systems. The CVE is distinct from CVE-2019-0662. Exploitabil...

CVE-2019-0732

CVE-2019-0732 affects Windows by bypassing Device Guard due to improper handling of calls to the LUAFV driver (luafv.sys). The issue enables local, low-privilege attackers to achieve partial confidentiality, integrity, and availability impacts as described in the CVE context. Exploitation is docu...

CVE-2019-1282

CVE-2019-1282 affects the Windows Common Log File System (CLFS) Driver. It is a information-disclosure vulnerability caused by improper handling of sandbox checks in CLFS, enabling local attackers to read data outside its intended limits after logging on and running a crafted application. Exploit...

CVE-2020-1518

Technical details about CVE-2020-1518 (affected component, root cause, impact, exploitability or patch specifics) are not publicly provided in the connected documents; monitor for updates from official sources for concrete information.

CVE-2021-31191

CVE-2021-31191 refers to a Windows Projected File System FS Filter Driver information disclosure vulnerability. The available sources identify the affected component as the FS Filter Driver in Windows and indicate a potential confidentiality impact. CVSS metrics from NVD/Microsoft show: CVSS v3.1...

CVE-2021-34454

CVE-2021-34454 is described as a Windows Information Disclosure vulnerability in the Remote Access Connection Manager. The included data indicates a local, low-complexity attack with no authentication required, resulting in partial confidentiality loss (per CVSS v3.1: 5.5 MEDIUM). The NVD entry a...

CVE-2021-36953

Technical details about CVE-2021-36953 (affected component/version/impact) are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21881

Technical details about CVE-2022-21881 are not provided in the supplied documents. The entries reference Windows kernel elevation issues and related updates, but do not disclose affected products/versions or root cause specifics. Monitor for updates.

CVE-2022-26786

Technical details for CVE-2022-26786 are not publicly available within the provided documents. No concrete affected products, versions, or fixes are stated here. Monitor for updates from official sources to obtain remediation and impact information.

CVE-2022-30164

Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.

CVE-2022-38026

CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...

CVE-2022-41047

CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...

CVE-2019-0690

The vulnerability CVE-2019-0690 affects the Microsoft Hyper-V Network Switch on a host server. The issue is a denial-of-service in which input from a privileged user on a guest OS is not properly validated, leading to an impact on availability. The description specifies the affected component and...

CVE-2019-0786

CVE-2019-0786 is an elevation-of-privilege flaw in the Microsoft SMB Server. Authentication is required; a crafted file opened over SMB on the same host can escalate privileges. CVSS3 base score 9.8 (CRITICAL) with network access, no user interaction, and high impact to confidentiality, integrity...

CVE-2019-0885

CVE-2019-0885 is a Windows OLE remote code execution vulnerability caused by improper validation of user input in OLE handling. The connected documents confirm the RCE impact; however, the provided sources do not specify affected products/versions, root-cause details beyond the OLE input validati...

CVE-2019-1039

The CVE-2019-1039 entry describes an information disclosure vulnerability in the Windows kernel where objects are improperly initialized in memory. A locally authenticated attacker could run a crafted application to obtain information that could be used to further compromise the system. Root caus...