CVE-2021-1674

Technical details (affected product, root cause, impact, or remediation) are not provided in the connected documents. The CVE entry’s specifics are not disclosed here; monitor for updates.

CVE-2019-0849

The connected advisory confirms this is a Windows Graphics Device Interface (GDI) information disclosure issue. Specifically, CVE-2019-0802 (related to Windows GDI) is caused by improper handling of objects in memory, enabling information disclosure. For CVE-2019-0849, the primary document descri...

CVE-2019-1243

CVE-2019-1243 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution with the user’s pr...

CVE-2019-1476

CVE-2019-1476 affects Windows AppX Deployment Service (AppXSVC). It is an elevation-of-privilege vulnerability arising from improper handling of file hard links (and related junctions) by AppXSVC, enabling a low-privileged user to overwrite arbitrary files and escalate privileges. Public exploit ...

CVE-2020-1383

CVE-2020-1383 is an information disclosure vulnerability in Windows RRAS: when Routing and Remote Access is enabled, an attacker can exploit a flaw in RPC handling to obtain information that could aid compromise. Exploitation requires a crafted application against an RPC server with RRAS enabled ...

CVE-2020-1566

CVE-2020-1566 is a Windows Kernel Elevation of Privilege vulnerability arising from a memory handling flaw in the Windows kernel, where mismanagement of objects in memory could allow a local attacker to execute arbitrary code in kernel mode, potentially install programs, view/change/delete data, ...

CVE-2020-16935

The CVE-2020-16935 entry describes a Windows elevation-of-privilege flaw caused by improper handling of COM object creation. The vulnerability could allow an attacker who has logged on to run arbitrary code with elevated privileges by executing a specially crafted application, with exploitation e...

CVE-2021-1657

Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.

CVE-2021-34511

Technical details about CVE-2021-34511 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit, impact, or remediation details are present in the connected content.

CVE-2021-36960

CVE-2021-36960 is a Windows SMB information-disclosure vulnerability with a CVSS v3.1 base score of 7.5 (HIGH). It is exploitable over a network, requires no privileges and no user interaction, and impacts confidentiality only (I: HIGH; C: HIGH; A: NONE). The initial description labels it as a Wi...

CVE-2021-41371

CVE-2021-41371 is a Windows RDP information-disclosure vulnerability affecting the RDP implementation on Windows client/server versions from Windows 7 through Windows 11 and Windows Server 2008–2019. Public reporting indicates the flaw enables an attacker with local access to view the RDP passwor...

CVE-2022-21877

CVE-2022-21877 is a Windows storage space controller information-disclosure vulnerability. The connected OpenVAS exploit entry describes an out-of-bounds read in the spaceport.sys driver that can leak data past the system buffer, indicating a local information-leak impact. A GitHub repository pro...

CVE-2022-35764

CVE-2022-35764 refers to a Storage Spaces Direct Elevation of Privilege vulnerability. The CVSS v3.1 metrics indicate a LOCAL, low-attack-complexity vector with Privileges Required: LOW and UI: NONE, Confidentiality/Integrity/Availability impacts: HIGH, base score 7.8 (HIGH). Exploitation status ...

CVE-2022-37985

CVE-2022-37985 affects the Microsoft Windows Graphics Component and is classified as an information disclosure vulnerability. The NT its entry indicates the affected component is the Windows Graphics Component, with CVSS v3.1 base score 5.5 (Attack Vector: Local, Attack Complexity: Low, Privilege...

CVE-2016-0026

Technical details about CVE-2016-0026 are not publicly provided in the supplied documents; no specific affected products or fixes are described. Monitor for updates.

CVE-2017-0100

CVE-2017-0100 is a local elevation-of-privilege vulnerability in a DCOM object registered by Helppane.exe (Windows HelpPane). A crafted application can exploit RunAs authentication issues to execute code in another user’s session on affected Windows 7 SP1, Server 2008 R2, 8.1, 2012, RT 8.1, 10 (1...

CVE-2018-8398

The connected CPAI-2019-0228 advisory describes a related information-disclosure vulnerability in the Microsoft Graphics Component due to improper in-memory handling of JPEG decoding. While CVE-2018-8398 (Windows GDI Information Disclosure) is the primary CVE here, the document confirms a memory-...

CVE-2018-8423

CVE-2018-8423 : A remote code execution vulnerability exists in the Microsoft JET Database Engine. The issue affects Windows client/server family (Windows 7, 8.1, 10; Windows Server 2008/2012/2016/2019 and R2 variants). The root cause is within the JET Database Engine component; exploitation requ...

CVE-2018-8565

CVE-2018-8565 is an information-disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The vulnerability affects multiple Windows editions (as listed in the NVD entry: Windows 7, Server 2012 R2/2016, Windows 8.1, 10 and corresponding server SKUs,...

CVE-2019-0714

CVE-2019-0714 affects Microsoft Hyper-V Network Switch. A privileged guest OS user can trigger a denial-of-service that crashes the host by running a crafted application; the vulnerability arises from improper validation of input by the Hyper-V Network Switch. The fix involves changes to how virt...

CVE-2019-0790

Technical details for CVE-2019-0790 are not provided in the supplied documents; no affected products, versions, root cause, or mitigations are listed. Monitor for updates.

CVE-2019-1095

Technical details for CVE-2019-1095 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability but lacks product/version/impact specifics beyond memory disclosure. Monitor for updates from Microsoft and risk assessments when details eme...

CVE-2019-1152

CVE-2019-1152 is a remote code execution affecting the Windows font library when handling specially crafted embedded fonts. The vulnerability allows an attacker to take control of the affected system, install programs, and access/modify data or create accounts with full rights. Exploitation detai...

CVE-2020-1564

CVE-2020-1564 : A remote code execution vulnerability exists in the Windows Jet Database Engine due to improper handling of objects in memory. An attacker could persuade a user to open a specially crafted file to execute arbitrary code. Impact is described as high/severe (per NVD metrics), with a...

CVE-2021-28334

CVE-2021-28334 is associated with a Remote Procedure Call Runtime remote code execution vulnerability in Microsoft Windows/Windows Server. The CNVD-2021-74287 entry describes a RPC Runtime RCE vulnerability affecting Windows/Windows Server, implying a remote attacker could execute code over the n...

CVE-2021-31192

CVE-2021-31192 is a Windows Media Foundation Core remote code execution vulnerability. Public advisories identify the affected component as Windows Media Foundation Core and assign a high impact (remote code execution with local/remote exploitation context depending on source). Microsoft lifecycl...

CVE-2021-33785

CVE-2021-33785 is described in connected records as a Windows/Windows Server Denial of Service vulnerability in the AF_UNIX Socket Provider. The documents do not provide detailed affected products/versions, root cause, exploit info, or remediation steps beyond the general DoS context.

CVE-2021-38638

CVE-2021-38638 corresponds to a Windows Elevation of Privilege vulnerability in the Windows Ancillary Function Driver for WinSock. According to the NVD entry, the issue has a CVSS v3.1 base score of 7.8 (High) with LOCAL attack vector, LOW attack complexity, and privileges required set to LOW; co...

CVE-2022-24466

Technical details for CVE-2022-24466 are not publicly provided in the supplied documents. The connected entries reference this CVE among others but do not describe affected products, root cause, impact, or fixes.

CVE-2022-34689

CVE-2022-34689 is a Windows CryptoAPI spoofing vulnerability in which the certificate cache index key (MD5-based) can be exploited to masquerade as a legitimate entity. A PoC was released (HIVEPRO PoC report) detailing the attack, underscoring public proof-of-concept availability. The advisory co...

CVE-2022-41053

Technical details about CVE-2022-41053 are not publicly provided in the supplied documents. No affected products, exploit information, or mitigations are specified here. Monitor for updates.

CVE-2023-21818

Technical details for CVE-2023-21818 are not publicly provided in the supplied documents. The available sources reference the CVE within larger Windows vulnerability lists but do not disclose affected products, root cause, impact, or fixes.

CVE-2017-0038

The connected material describes a Windows IO Manager bug class (two-step: kernel-mode Initiator sets INPC and IFAC without OFAC; Receiver uses RequestorMode) that can bypass security checks and enable privilege escalation. It clarifies that INPC disables MemAC and SecAC, while OFAC can re-enable...

CVE-2018-0752

CVE-2018-0752 is a Windows Kernel API elevation-of-privilege vulnerability. It affects Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 all listed versions (Gold, 1511, 1607, 1703, 1709), Windows Server 2016, and Windows Server version 1709, due to how the Kernel API enforces permissio...

CVE-2018-0754

The CVE-2018-0754 entry concerns the Windows Adobe Type Manager Font Driver (Atmfd.dll). Multiple sources confirm an information-disclosure vulnerability arising from the way objects are handled in memory within Atmfd.dll, affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2, W...

CVE-2018-8494

CVE-2018-8494 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser when processing untrusted input. Affected products include Windows 7; Windows Server 2008, 2012, 2012 R2, 2016, 2019; Windows 8.1; Windows 10 (and Windows RT 8.1); Windows Server 2008 R2; Window...

CVE-2019-0619

The connected advisories corroborate CVE-2019-0619 as a Windows Graphic Device Interface (GDI) information disclosure vulnerability. It arises from improper handling of objects in memory in the Graphics Device Interface component, enabling remote attackers to obtain sensitive information. The adv...

CVE-2019-0721

Technical details about CVE-2019-0721 are not publicly available in the provided connected documents; none supply affected product/version, root cause, or remediation for this CVE. Monitor for updates.

CVE-2019-0889

CVE-2019-0889 : Connected CNVD entries describe a buffer/heap overflow vulnerability in the Windows Jet Database Engine. The issue arises when memory operations do not properly validate data boundaries, enabling overflow conditions. The CNVDs indicate a network-origin misuse could trigger in-memo...

CVE-2019-1044

CVE-2019-1044 is a Windows security feature bypass in Windows Secure Kernel Mode where improper handling of memory objects can allow a locally-authenticated attacker to violate virtual trust levels (VTL). Affects Windows client/server releases referenced in the advisory (e.g., Windows 10/Server 2...

CVE-2019-1102

CVE-2019-1102 affects the Windows Graphics Device Interface (GDI+) and arises from how GDI+ handles memory objects, enabling remote code execution. The Red Hat advisory reiterates the same description. The CVE is rated high risk (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) with network attack vector and...

CVE-2019-1391

Technical details for CVE-2019-1391 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability trackers.

CVE-2019-9510

CVE-2019-9510 affects Windows 10 (1803+) and Windows Server 2019+ where, after a temporary network disruption, an RDP client automatically reconnects to a remote session in an unlocked state, bypassing the lock screen and potentially bypassing MFA prompts that rely on the Windows logon screen. Th...

CVE-2020-0670

Technical details about CVE-2020-0670 are not publicly available in the provided documents. No affected products, impact, or remediation are described here. Monitor for updates from official advisories and trusted sources.

CVE-2020-1512

CVE-2020-1512 affects the Windows State Repository Service. The information-disclosure vulnerability arises from the service improperly handling objects in memory, allowing a locally-executed, specially crafted application to obtain information to further compromise the system. The provided docum...

CVE-2020-1519

CVE-2020-1519 is a Windows elevation-of-privilege vulnerability in the Windows UPnP Device Host that arises from improper handling of memory. An attacker must first gain execution on the target, then run a crafted application to elevate privileges. Microsoft’s security update fixes how the UPnP D...

CVE-2020-16887

CVE-2020-16887 is an elevation-of-privilege vulnerability in the Windows Network Connections Service where improper in-memory handling of objects could allow a locally authenticated attacker to execute code with elevated permissions. The vulnerability can be exploited by running a specially craft...

CVE-2020-17092

CVE-2020-17092 corresponds to a Windows vulnerability in the Network Connections Service described as an Elevation of Privilege. The entry lists local access with low attack complexity and no user interaction as prerequisites, and indicates high impact across confidentiality, integrity, and avail...

CVE-2021-34536

CVE-2021-34536 refers to a Windows Storage Spaces Controller Elevation of Privilege vulnerability. The NVD entry lists a CVSS 3.1 base score of 7.8 with Local attack vector, Low privileges required, and No user interaction, and indicates a High impact on confidentiality, integrity, and availabili...

CVE-2021-38632

CVE-2021-38632 is reported as a BitLocker Security Feature Bypass Vulnerability. The primary document shows a Microsoft/software–level vulnerability entry with a CVSS v3.1 base score of 4.6 (MEDIUM) from NVD, and a local/physical-attack profile (PHYSICAL access, no user interaction required per C...