CVE-2022-21958

Technical details about CVE-2022-21958 are not provided in the supplied documents. No specifics on affected builds, root cause, or fixes are available here; monitor official advisories for updates.

CVE-2022-30144

Technical details for CVE-2022-30144 (affected component, root cause, impact, and remediation) are not provided in the connected documents. Monitor Microsoft/NVD updates for confirmed exploit information and patch guidance.

CVE-2016-3223

CVE-2016-3223 relates to a Group Policy Elevation of Privilege vulnerability in Windows where LDAP authentication is mishandled, enabling a MiTM attacker to modify domain controller–to–client Group Policy update data and potentially escalate privileges. The issue affects multiple Windows editions...

CVE-2018-0825

CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...

CVE-2018-0830

CVE-2018-0830 is a Windows kernel local information-disclosure vulnerability caused by how objects in memory are handled. Affected products include Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2/R2 SP1; Windows Server 2012/R2; Windows 10 releases Gold, 1511, 1607, 1703, 1709; Wind...

CVE-2018-0868

CVE-2018-0868 concerns a Windows Installer elevation-of-privilege vulnerability in the Windows Installer service across affected Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions up to 1709, and related Server var...

CVE-2018-1015

CVE-2018-1015 is a Windows font library remote code execution vulnerability triggered by specially crafted embedded fonts. The NVD entries describe the issue as affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows 10 and corresponding Server ...

CVE-2018-8271

CVE-2018-8271 is an information-disclosure vulnerability in Windows where the bowser.sys kernel‑mode driver mishandles objects in memory. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Window...

CVE-2018-8485

CVE-2018-8485 is a DirectX local privilege-escalation vulnerability: DirectX mismanages objects in memory, enabling code execution with kernel privileges on affected Windows versions (Windows 8.1/Server 2012/2012 R2/10/Server 2016-2019 and related). Root cause is memory handling in DirectX; impac...

CVE-2019-0549

CVE-2019-0549 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 (and corresponding Server editions such as Server 2012/2012 R2, 2016, 2019). F...

CVE-2019-0554

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0794

CVE-2019-0794 is described in connected sources as a Windows VBScript Engine remote command execution vulnerability. The Myhack58 article notes exploitation via hosting a crafted website to trigger through a browser, and also via IE rendering engine or Microsoft Office documents to trigger initia...

CVE-2019-1224

The CVE-2019-1224 entry describes an information disclosure in the Windows RDP server where memory contents could be exposed to an attacker. The vulnerability requires remote authentication-free access: an attacker must connect to an affected system and run a specially crafted application to expl...

CVE-2019-1337

The CVE-2019-1337 entry describes an information disclosure vulnerability in the Windows Update Client where memory objects are mishandled. Affected component: Windows Update Client. Root cause: improper handling of in-memory objects leading to potential memory contents disclosure. Exploitation d...

CVE-2020-1239

CVE-2020-1239 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The CVSS v3.1 base score is 8.8 (HIGH): network attack vector, no privileges required, UI required, and the impact is high on confidentiality, integrity, and availabili...

CVE-2020-1286

CVE-2020-1286 is a Windows Shell remote code execution vulnerability caused by improper validation of file paths. Exploitation could allow code execution in the context of the current user. The connected documents corroborate the CVE and list it among multiple Windows vulnerabilities addressed in...

CVE-2020-1292

CVE-2020-1292 – OpenSSH for Windows Elevation of Privilege : The vulnerability exists in OpenSSH for Windows where configuration settings are not properly restricted. An authenticated attacker could modify the OpenSSH for Windows configuration to replace the shell with a malicious binary, enablin...

CVE-2020-1525

CVE-2020-1525 describes a memory corruption vulnerability in Windows Media Foundation triggered by how in-memory objects are handled. A successful exploit could allow an attacker to install programs, view/change/delete data, or create new accounts with full rights. Exploitation vectors include co...

CVE-2020-16967

CVE-2020-16967 affects the Windows Camera Codec Pack. The vulnerability is a remote code execution due to improper handling of objects in memory, allowing arbitrary code to run in the context of the currently logged-in user. Exploitation requires the user to open a specially crafted file (deliver...

CVE-2021-1722

CVE-2021-1722 is a Windows Fax Service Remote Code Execution vulnerability. Affects Windows Fax Service through a network attack with no authentication; CVSS v3.1 base score up to 9.8 (C:H/I:H/A:H; AV:N; UI:N; PR:N; S:U). OpenVAS/NVD entries corroborate network-based RCE with high impact to confi...

CVE-2021-31170

CVE-2021-31170 affects the Windows Graphics Component (graphics driver) and is described as an elevation of privilege vulnerability. Multiple connected sources identify a local threat requiring no user interaction, with root cause framed as a resource management error in the Microsoft Graphics Co...

CVE-2021-33785

CVE-2021-33785 is described in connected records as a Windows/Windows Server Denial of Service vulnerability in the AF_UNIX Socket Provider. The documents do not provide detailed affected products/versions, root cause, exploit info, or remediation steps beyond the general DoS context.

CVE-2021-34512

Technical details about CVE-2021-34512 are not publicly available in the provided connected documents. Monitor for updates from NVD, Microsoft, CNVD, and other official advisories for concrete information.

CVE-2021-34537

CVE-2021-34537 is a Windows Bluetooth Driver elevation-of-privilege vulnerability in the Windows Bluetooth Service. Public data (NVD) lists CVSS v3.1 base score 8.0 (HIGH), attack vector ADJACENT, user interaction NONE, privileges required LOW, with Confidentiality/Integrity/Availability impacts ...

CVE-2021-36954

CVE-2021-36954 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The issue affects Windows where a local attacker can exploit the Bind Filter Driver to elevate privileges with low privileges and no user interaction, potentially affecting confidentiality, integrity, and availab...

CVE-2021-38636

The CVE-2021-38636 entry refers to a Windows Redirected Drive Buffering SubSystem Driver Information Disclosure vulnerability. Affected software is Windows; the vulnerability affects the Redirected Drive Buffering SubSystem Driver (component/driver) and enables partial confidentiality impact via ...

CVE-2021-41342

Technical details for CVE-2021-41342 are not publicly available in the provided documents; the materials reference the vulnerability name but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2021-41356

CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...

CVE-2021-41367

CVE-2021-41367 is described as an NTFS Elevation of Privilege Vulnerability. The Connected NVD entry lists CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and UI: NONE. Impact per CVSS3.1 indicates high confidentiality, integrity, and ava...

CVE-2021-42275

Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.

CVE-2022-21880

CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...

CVE-2022-21914

Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-21804

Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.

CVE-2023-23421

CVE-2023-23421 is part of a family of hive-memory-corruption bugs in the Windows Registry (kernel) that enable local privilege escalation. The connected analysis shows an attacker-controlled hive memory‑corruption primitive (e.g., UAF in a registry key or related hive data) that can be exploited ...

CVE-2017-0060

The CVE-2017-0060/0062 issue affects the Graphics Device Interface (GDI) in multiple Windows releases (Vista through Windows 10 variants listed in the initial entry). The vulnerability enables a remote attacker to obtain sensitive information from process memory by visiting a crafted web site, i....

CVE-2017-0211

CVE-2017-0211 is a Windows OLE/COM elevation-of-privilege issue where a Structured Storage object can be exposed across a security boundary via a property bag, enabling creation of a remote COM object in the server process and potential privilege escalation. Google Project Zero details show how I...

CVE-2018-8309

CVE-2018-8309 is a Windows Denial of Service vulnerability where the root cause is the improper handling of objects in memory. Affected products include multiple Windows releases such as Windows 7, Windows 8.1, Windows 10, Windows Server 2008/R2, 2012/R2, 2016 and related server editions. The vul...

CVE-2018-8345

CVE-2018-8345 and CVE-2018-8346 are described as LNK remote code execution vulnerabilities in Microsoft Windows, caused by how the system processes shortcut files with the “.lnk” extension. The connected documents confirm the issue affects multiple Windows versions (e.g., Windows 7, Windows Serve...

CVE-2018-8392

CVE-2018-8392 is a heap-based buffer overflow in the Microsoft Jet Database Engine. The issue arises from improper handling of in-memory objects, enabling a remote, unauthenticated attacker to exploit by enticing a user to open a specially crafted Excel file, potentially leading to remote code ex...

CVE-2019-0602

The connected advisories describe a GDI information disclosure vulnerability in Microsoft Windows (CVE-2019-0602 family). Affected component: Graphics Device Interface (GDI). Root cause stated: improper handling of objects in memory leading to memory disclosure. Impact: information disclosure; (n...

CVE-2019-0635

Technical details (affected components, root cause, versions, and fixes) are not publicly available in the provided documents. Monitor for updates. CVE-2019-0635 concerns information disclosure in Windows Hyper-V where input from a guest OS may not be properly validated.

CVE-2019-0637

Technical details about CVE-2019-0637 (Windows Defender Firewall security feature bypass) are not publicly provided in the connected documents; monitor for updates to learn of affected products, impact, and fixes.

CVE-2019-0660

Technical details for CVE-2019-0660 are not publicly available in the provided connected documents. Monitor for updates from advisories and CVE records to obtain affected products, impact, and remediation guidance.

CVE-2019-0849

The connected advisory confirms this is a Windows Graphics Device Interface (GDI) information disclosure issue. Specifically, CVE-2019-0802 (related to Windows GDI) is caused by improper handling of objects in memory, enabling information disclosure. For CVE-2019-0849, the primary document descri...

CVE-2019-1468

The connected CNVD entry corroborates CVE-2019-1468 as a Win32k/Windows font library RCE: improper handling of specially crafted embedded fonts enables remote code execution. Affected: Windows clients/servers with Win32k font handling vulnerability. Root cause: inadequate validation when processi...

CVE-2020-0665

CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...

CVE-2020-0729

CVE-2020-0729 is a Windows remote code execution vulnerability that can be triggered when a user processes a .LNK (shortcut) file. Exploitation could run arbitrary code with the same privileges as the logged-in user. The connected documents confirm this CVE is part of Windows update advisories an...

CVE-2020-1488

Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.

CVE-2020-1562

Microsoft Graphics Components remote code execution vulnerability CVE-2020-1562 exists due to how objects are handled in memory. An attacker could execute arbitrary code if a user opens a specially crafted file. The vulnerability is addressed by a security update that fixes the memory handling of...

CVE-2021-24096

CVE-2021-24096 is a Windows Kernel Elevation of Privilege vulnerability that was exploited via a registry symbolic-link bypass related to server silos. The accompanying analysis with CVE context (MSRC) notes that Microsoft fixed this issue in 2021 by removing the PsIsCurrentThreadInServerSilo che...