CVE-2018-0825

CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...

CVE-2018-0842

CVE-2018-0842 : Windows kernel elevation-of-privilege vulnerability affecting multiple Windows client and server editions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, 1703–1709 and 1709 variants, Windows 10 releases). The issue arises from how memory objects ...

CVE-2018-0896

CVE-2018-0896 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows 10 versions 1511–1709, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709) where memory address handling allows an information disclosure vulnerability. Root ca...

CVE-2018-1013

CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...

CVE-2018-8584

CVE-2018-8584 is an elevation-of-privilege vulnerability in Windows where ALPC calls are not handled correctly, enabling a local attacker to run code with the system security context. Affected: Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Server family. Root cause: improper ha...

CVE-2019-0554

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0722

The CVE-2019-0722 issue affects Microsoft Windows Hyper-V. A remote code execution vulnerability exists when Hyper-V on a host fails to properly validate input from an authenticated guest OS user, allowing a crafted guest app to cause the host to run arbitrary code. Exploitation could grant the a...

CVE-2019-0853

Technical details about CVE-2019-0853 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates and corroborating risk information from official advisories.

CVE-2019-1044

CVE-2019-1044 is a Windows security feature bypass in Windows Secure Kernel Mode where improper handling of memory objects can allow a locally-authenticated attacker to violate virtual trust levels (VTL). Affects Windows client/server releases referenced in the advisory (e.g., Windows 10/Server 2...

CVE-2019-1053

CVE-2019-1053 describes an elevation of privilege in Windows Shell due to failure to validate folder shortcuts. The vulnerability allows an attacker who already has unprivileged code execution on the victim to escalate privileges by escaping a sandbox. The underlying cause is the Shell’s insuffic...

CVE-2019-9510

CVE-2019-9510 affects Windows 10 (1803+) and Windows Server 2019+ where, after a temporary network disruption, an RDP client automatically reconnects to a remote session in an unlocked state, bypassing the lock screen and potentially bypassing MFA prompts that rely on the Windows logon screen. Th...

CVE-2020-0670

Technical details about CVE-2020-0670 are not publicly available in the provided documents. No affected products, impact, or remediation are described here. Monitor for updates from official advisories and trusted sources.

CVE-2020-1512

CVE-2020-1512 affects the Windows State Repository Service. The information-disclosure vulnerability arises from the service improperly handling objects in memory, allowing a locally-executed, specially crafted application to obtain information to further compromise the system. The provided docum...

CVE-2020-17092

CVE-2020-17092 corresponds to a Windows vulnerability in the Network Connections Service described as an Elevation of Privilege. The entry lists local access with low attack complexity and no user interaction as prerequisites, and indicates high impact across confidentiality, integrity, and avail...

CVE-2021-28337

Technical details for CVE-2021-28337 are not publicly available in the provided documents. Monitor for updates from vendor advisories and vulnerability databases.

CVE-2021-28353

Technical details for CVE-2021-28353 are not provided in the connected documents. Monitor for updates; no public details (impact, affected products, or remediation) are included in the supplied material.

CVE-2021-34504

Technical details about CVE-2021-34504 are not provided in the connected documents; the Initial Description lists a Windows Address Book RCE vulnerability but lacks affected product/version specifics. Monitor for updates.

CVE-2021-34536

CVE-2021-34536 refers to a Windows Storage Spaces Controller Elevation of Privilege vulnerability. The NVD entry lists a CVSS 3.1 base score of 7.8 with Local attack vector, Low privileges required, and No user interaction, and indicates a High impact on confidentiality, integrity, and availabili...

CVE-2021-38632

CVE-2021-38632 is reported as a BitLocker Security Feature Bypass Vulnerability. The primary document shows a Microsoft/software–level vulnerability entry with a CVSS v3.1 base score of 4.6 (MEDIUM) from NVD, and a local/physical-attack profile (PHYSICAL access, no user interaction required per C...

CVE-2021-41345

Technical details for CVE-2021-41345 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2022-21908

CVE-2022-21908 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, and scope UNCHANGED; impact to Confidentiality, Integrity, and Availability is ...

CVE-2022-21912

CVE-2022-21912 is a DirectX Graphics Kernel vulnerability affecting Windows DirectX components. The entry notes DirectX Graphics Kernel Remote Code Execution Vulnerability with patch guidance from Microsoft (KB5009543, KB5009545, KB5009557, KB5009543 family). Vulnerable component: DirectX Graphic...

CVE-2022-23299

Technical details about CVE-2022-23299 (affected product, root cause, impact, fix) are not publicly available in the provided documents. Monitor for updates as new information may be released.

CVE-2022-35797

Technical details about CVE-2022-35797 (affected product/component, root cause, versions, exploitability) are not publicly disclosed in the provided documents. Monitor official advisories for updates.

CVE-2018-0868

CVE-2018-0868 concerns a Windows Installer elevation-of-privilege vulnerability in the Windows Installer service across affected Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions up to 1709, and related Server var...

CVE-2018-0877

CVE-2018-0877 affects the WCIFS (Windows Desktop Bridge VFS) driver. The root cause is improper handling of file paths in privileged Windows directories, allowing a reparse to a user-controlled location during a file-create path when the requested file did not exist in a trusted directory. This c...

CVE-2018-8446

CVE-2018-8446 is an information disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 (and Windows Server 2016/Servers). The issue is described as a lo...

CVE-2019-0662

CVE-2019-0662 is a remote code execution vulnerability in Microsoft Windows GDI/GDI+. The issue arises from how GDI handles objects in memory, enabling a remote attacker to execute arbitrary code on affected systems. Connected advisories corroborate a GDI-based RCE family (distinct from CVE-2019-...

CVE-2019-0838

Technical details for CVE-2019-0838 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2019-0900

Summary: The connected CNVD entries describe a set of buffer overflow vulnerabilities in Microsoft Windows Jet Database Engine. They state that the Jet Database Engine can experience in-memory boundary violations leading to incorrect reads/writes and potential heap/buffer overflows when processin...

CVE-2020-0626

Technical details for CVE-2020-0626 are not provided in the connected documents. The Initial Description offers only high-level info. Monitor official advisories for updates on affected products/versions and any remediations or mitigations.

CVE-2020-0655

CVE-2020-0655 corresponds to a Remote Desktop Services vulnerability where an authenticated attacker can trigger remote code execution via clipboard redirection. The connected KB entries confirm the CVE is among multiple Microsoft Windows vulnerabilities and highlight the affected component as Re...

CVE-2020-1285

Technical details about CVE-2020-1285 are not provided in the connected documents. The sources reference other CVEs and Windows updates; monitor for updates on CVE-2020-1285.

CVE-2020-1516

The CVE-2020-1516 entry describes an Elevation of Privilege in the Windows Work Folders Service caused by improper handling of memory. Exploitation would require the attacker to first gain execution on the target, then run a crafted application to raise privileges. Microsoft’s security update fix...

CVE-2021-27072

Technical details (affected products/versions/patch information) are not publicly available in the provided documents; monitor for official advisories and updates for CVE-2021-27072.

CVE-2021-31184

Technical details for CVE-2021-31184 (IrDA information disclosure) are not publicly available in the provided documents. Monitor for updates from official advisories and CVE/NVD entries for affected products, versions, and remediation.

CVE-2021-31188

CVE-2021-31188 is a Windows Graphics Component Elevation of Privilege vulnerability. The connected documents corroborate that this CVE is addressed by May 2021 Windows security updates (e.g., KB5003173, KB5003208, KB5003203 and related servicing patches) as part of updates to Windows App Platform...

CVE-2021-34537

CVE-2021-34537 is a Windows Bluetooth Driver elevation-of-privilege vulnerability in the Windows Bluetooth Service. Public data (NVD) lists CVSS v3.1 base score 8.0 (HIGH), attack vector ADJACENT, user interaction NONE, privileges required LOW, with Confidentiality/Integrity/Availability impacts ...

CVE-2021-42275

Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.

CVE-2022-21858

Technical details (affected components, root cause, versions, exploitability, or fixes) are not publicly provided in the supplied documents. Monitor official MSRC/NVD entries and OpenVAS feeds for updates.

CVE-2022-21985

CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...

CVE-2022-44689

CVE-2022-44689 affects Windows Subsystem for Linux (WSL2) kernel, enabling local elevation of privilege. The NVD entry lists a local attack vector with low complexity and low privileges required, resulting in high impact to confidentiality, integrity, and availability. Connected sources corrobora...

CVE-2023-23421

CVE-2023-23421 is part of a family of hive-memory-corruption bugs in the Windows Registry (kernel) that enable local privilege escalation. The connected analysis shows an attacker-controlled hive memory‑corruption primitive (e.g., UAF in a registry key or related hive data) that can be exploited ...

CVE-2017-0060

The CVE-2017-0060/0062 issue affects the Graphics Device Interface (GDI) in multiple Windows releases (Vista through Windows 10 variants listed in the initial entry). The vulnerability enables a remote attacker to obtain sensitive information from process memory by visiting a crafted web site, i....

CVE-2017-0289

CVE-2017-0289 is a Windows Graphics Information Disclosure vulnerability affecting a broad set of Windows client/server releases (e.g., Windows 7/8.1/10, Windows Server 2008-2016) where the Windows GDI/Graphics components improperly disclose memory contents. The issue is linked to memory disclosu...

CVE-2018-1015

CVE-2018-1015 is a Windows font library remote code execution vulnerability triggered by specially crafted embedded fonts. The NVD entries describe the issue as affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows 10 and corresponding Server ...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8345

CVE-2018-8345 and CVE-2018-8346 are described as LNK remote code execution vulnerabilities in Microsoft Windows, caused by how the system processes shortcut files with the “.lnk” extension. The connected documents confirm the issue affects multiple Windows versions (e.g., Windows 7, Windows Serve...

CVE-2018-8442

Technical details about CVE-2018-8442 are not publicly available in the provided connected documents; monitor for updates from official advisories.

CVE-2019-0580

The CVE-2019-0580 entry describes a remote code execution flaw in the Windows Jet Database Engine caused by improper memory-object handling. It affects Windows client/server platforms (Windows 7, 8.1, 10 and various Server editions) and is exploitable when a user opens a specially crafted file th...