CVE-2019-0784

Technical details for CVE-2019-0784 are not publicly available in the provided documents; no confirmed affected products, versions, or fixes are listed. Monitor for updates from official sources as additional information may be published.

CVE-2019-1082

Technical details such as affected products, root cause, and remediation for CVE-2019-1082 are not provided in the supplied documents; connected EUVD entries discuss malware but do not add specifics for this CVE. Monitor for updates.

CVE-2019-1183

CVE-2019-1183 is described as fully mitigated by security updates for CVE-2019-1194; no separate update is required. Connected documents show CVE-2019-1194 as a remote code execution vulnerability in Internet Explorer’s scripting engine (memory corruption risk via VBScript/IE scripting paths). Th...

CVE-2019-1243

CVE-2019-1243 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution with the user’s pr...

CVE-2019-1273

CVE-2019-1273 is an XSS vulnerability in Active Directory Federation Services (ADFS) where error messages are not properly sanitized. The connected documents consistently describe a cross-site scripting issue tied to ADFS error handling, but do not provide specifics on affected product versions, ...

CVE-2020-1512

CVE-2020-1512 affects the Windows State Repository Service. The information-disclosure vulnerability arises from the service improperly handling objects in memory, allowing a locally-executed, specially crafted application to obtain information to further compromise the system. The provided docum...

CVE-2020-17092

CVE-2020-17092 corresponds to a Windows vulnerability in the Network Connections Service described as an Elevation of Privilege. The entry lists local access with low attack complexity and no user interaction as prerequisites, and indicates high impact across confidentiality, integrity, and avail...

CVE-2021-28353

Technical details for CVE-2021-28353 are not provided in the connected documents. Monitor for updates; no public details (impact, affected products, or remediation) are included in the supplied material.

CVE-2021-28479

CVE-2021-28479 maps to a Windows CSC Service Information Disclosure vulnerability. Affected software is Windows operating systems with the CSC service; the root cause relates to information disclosure in the CSC service. The NVD metrics show CVSS base scores of 2.1 (2.0/6.0) depending on version,...

CVE-2021-31184

Technical details for CVE-2021-31184 (IrDA information disclosure) are not publicly available in the provided documents. Monitor for updates from official advisories and CVE/NVD entries for affected products, versions, and remediation.

CVE-2021-33752

CVE-2021-33752 is described as a Windows DNS Snap-in Remote Code Execution vulnerability. Connected sources corroborate a DNS Snap-in RCE in Microsoft Windows/Windows Server, indicating an elevated risk with a network attacker, high impact (CVE-3.1: HIGH) and no authentication required, with user...

CVE-2021-36957

CVE-2021-36957 is a Windows Desktop Bridge elevation of privilege vulnerability. Public details in the initial document are limited to the CVE title and scoring; concrete technical specifics (affected product versions, root cause, exploitability) are not elaborated there. Connected Microsoft advi...

CVE-2022-37985

CVE-2022-37985 affects the Microsoft Windows Graphics Component and is classified as an information disclosure vulnerability. The NT its entry indicates the affected component is the Windows Graphics Component, with CVSS v3.1 base score 5.5 (Attack Vector: Local, Attack Complexity: Low, Privilege...

CVE-2023-36906

Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.

CVE-2017-8565

CVE-2017-8565 is a Windows PowerShell remote code execution vulnerability triggered when PSObject wraps a CIM Instance. Connected sources describe in detail that deserialization via PSObject, LosFormatter, ObjectStateFormatter (and related gadget chains) can enable remote code execution in PowerS...

CVE-2018-8468

CVE-2018-8468 is a Windows elevation-of-privilege vulnerability described as a sandbox escape. Affected products include Windows 7, Windows 8.1, Windows 10 family and corresponding Server editions (Server 2008/2012/2016, RT 8.1, etc.). Connected sources indicate exploitation activity (Exploit-DB ...

CVE-2018-8495

The CVE-2018-8495 issue is a Windows Shell Remote Code Execution vulnerability where Windows Shell mishandles URIs. An attacker could host a specially crafted website and entice a user to view it, triggering code execution with the current user’s rights and potentially full control if admin right...

CVE-2019-0597

Technical details about CVE-2019-0597 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-0599

CVE-2019-0599 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is shared among multiple CVEs in the same family (CVE-2019-0595, -0596, -0597, -0598, -0625). The available documents identify the affected ...

CVE-2019-0713

Technical details about CVE-2019-0713 are not publicly provided in the connected documents. The initial description summarizes a Hyper-V denial-of-service vulnerability. Monitor for updates from official sources.

CVE-2019-0838

Technical details for CVE-2019-0838 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2019-0900

Summary: The connected CNVD entries describe a set of buffer overflow vulnerabilities in Microsoft Windows Jet Database Engine. They state that the Jet Database Engine can experience in-memory boundary violations leading to incorrect reads/writes and potential heap/buffer overflows when processin...

CVE-2019-1021

CVE-2019-1021 affects Windows Audio Service, causing an elevation of privilege by incorrect handling of process requests. An attacker with local access could run a specially crafted app to obtain elevated code execution; however, the vulnerability alone does not guarantee arbitrary code execution...

CVE-2019-1053

CVE-2019-1053 describes an elevation of privilege in Windows Shell due to failure to validate folder shortcuts. The vulnerability allows an attacker who already has unprivileged code execution on the victim to escalate privileges by escaping a sandbox. The underlying cause is the Shell’s insuffic...

CVE-2019-1453

CVE-2019-1453 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). The Red Hat CVE entry and CNVD/OpenVAS references confirm the issue arises when an attacker connects via RDP and sends specially crafted requests to the target, with impact described as DoS. The NVD e...

CVE-2020-1519

CVE-2020-1519 is a Windows elevation-of-privilege vulnerability in the Windows UPnP Device Host that arises from improper handling of memory. An attacker must first gain execution on the target, then run a crafted application to elevate privileges. Microsoft’s security update fixes how the UPnP D...

CVE-2021-36970

Technical details for CVE-2021-36970 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or remediation are present here; monitor for updates from official sources.

CVE-2021-36974

Technical details for CVE-2021-36974 are not publicly provided in the supplied documents. No affected product, root cause, or remediation is specified here. Monitor official advisories for updates.

CVE-2022-21850

CVE-2022-21850 is described in the provided materials as a Remote Desktop Client Remote Code Execution vulnerability. The connected documents confirm the vulnerability relates to the Windows Remote Desktop Client but do not provide concrete technical specifics (e.g., root cause, affected versions...

CVE-2022-21873

Technical details for CVE-2022-21873 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are stated here; monitor for updates.

CVE-2022-23285

CVE-2022-23285 is a Remote Desktop Client Remote Code Execution vulnerability (CVSS v3.1 base 8.8) elevated to HIGH by NVD. It is referenced in March 2022 Microsoft Patch Tuesday coverage as a Remote Desktop/RDP-related issue addressed by the accompanying security updates (e.g., KB5011497, KB5011...

CVE-2022-24488

CVE-2022-24488 is a Windows Desktop Bridge elevation of privilege vulnerability. Connected sources (NCSC advisory) assign CVSSv3.1 7.8, impact: Obtaining Increased Entitlements, within Windows App Store/Windows Desktop Bridge context; no public exploit details or remediation steps are provided in...

CVE-2022-26793

Technical details (affected component, root cause, vulnerable versions, exploitability) are not provided in the supplied documents. Monitor for updates.

CVE-2022-41053

Technical details about CVE-2022-41053 are not publicly provided in the supplied documents. No affected products, exploit information, or mitigations are specified here. Monitor for updates.

CVE-2022-41121

CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...

CVE-2018-0842

CVE-2018-0842 : Windows kernel elevation-of-privilege vulnerability affecting multiple Windows client and server editions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, 1703–1709 and 1709 variants, Windows 10 releases). The issue arises from how memory objects ...

CVE-2018-8404

CVE-2018-8404 is a Windows local elevation-of-privilege vulnerability in the Win32k subsystem. Root cause: Win32k.sys fails to properly handle objects in memory, enabling elevation of privilege on affected Windows variants (Windows 7, Windows 8.1, Windows 10, and corresponding Server editions). C...

CVE-2018-8423

CVE-2018-8423 : A remote code execution vulnerability exists in the Microsoft JET Database Engine. The issue affects Windows client/server family (Windows 7, 8.1, 10; Windows Server 2008/2012/2016/2019 and R2 variants). The root cause is within the JET Database Engine component; exploitation requ...

CVE-2019-0580

The CVE-2019-0580 entry describes a remote code execution flaw in the Windows Jet Database Engine caused by improper memory-object handling. It affects Windows client/server platforms (Windows 7, 8.1, 10 and various Server editions) and is exploitable when a user opens a specially crafted file th...

CVE-2019-0581

CVE-2019-0581 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of objects in memory. Affected products include multiple Windows versions (e.g., Windows 7, Server 2008/2012/R2, 8.1, 10, and server editions). The connected documents corroborate tha...

CVE-2019-0793

Technical details about CVE-2019-0793 are not publicly available in the provided connected documents; monitor for updates.

CVE-2019-1044

CVE-2019-1044 is a Windows security feature bypass in Windows Secure Kernel Mode where improper handling of memory objects can allow a locally-authenticated attacker to violate virtual trust levels (VTL). Affects Windows client/server releases referenced in the advisory (e.g., Windows 10/Server 2...

CVE-2020-0746

Technical details about CVE-2020-0746 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2020-1516

The CVE-2020-1516 entry describes an Elevation of Privilege in the Windows Work Folders Service caused by improper handling of memory. Exploitation would require the attacker to first gain execution on the target, then run a crafted application to raise privileges. Microsoft’s security update fix...

CVE-2020-16939

CVE-2020-16939 is a Microsoft Windows elevation-of-privilege vuln in Group Policy where access is not correctly checked. An attacker must log on and run a crafted application to execute code in an elevated context. NVD/metrics: CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW, User Intera...

CVE-2021-27072

Technical details (affected products/versions/patch information) are not publicly available in the provided documents; monitor for official advisories and updates for CVE-2021-27072.

CVE-2021-28434

Technical details for CVE-2021-28434 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2021-34511

Technical details about CVE-2021-34511 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit, impact, or remediation details are present in the connected content.

CVE-2021-36975

CVE-2021-36975 is a Win32k Elevation of Privilege vulnerability in Windows. Affected component: Win32k (kernel/user-interface layer); root cause involves privilege escalation via Win32k. CVSS 3.1 base score 7.8 (HIGH); attack vector LOCAL, attack complexity LOW, privileges required LOW, user inte...

CVE-2021-38632

CVE-2021-38632 is reported as a BitLocker Security Feature Bypass Vulnerability. The primary document shows a Microsoft/software–level vulnerability entry with a CVSS v3.1 base score of 4.6 (MEDIUM) from NVD, and a local/physical-attack profile (PHYSICAL access, no user interaction required per C...