CVE-2021-28329

Technical details for CVE-2021-28329 are not provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and remediation.

CVE-2021-28341

Technical details for CVE-2021-28341 are not publicly provided in the supplied documents. Related OpenVAS/Nessus plugins reference the CVE list but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2021-33755

Technical details about CVE-2021-33755 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-38665

CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...

CVE-2021-40467

CVE-2021-40467 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. According to the records, it enables a local attacker to escalate privileges via the CLFS component, with high impact on confidentiality, integrity, and availability (vector: LOCAL, low attack complexi...

CVE-2022-24550

Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.

CVE-2022-30155

Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.

CVE-2022-34733

CVE-2022-34733 pertains to the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. NVD lists CVSS v3.1 base score 8.8 (HIGH) with Network attack vector, no privileges required, user interaction needed, and high impact on confidentiality, integrity, a...

CVE-2022-37984

CVE-2022-37984 is a Windows WLAN Service privilege elevation vulnerability. Public sources describe it as an improper privilege assignment in the Windows WLAN Service that allows a local attacker to elevate to higher privileges (impact: increased entitlements). The CNVD/ENISA entries corroborate ...

CVE-2017-11927

Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.

CVE-2018-0816

Technical details about CVE-2018-0816 are not publicly provided in the connected documents; the initial description summarizes the vulnerability but does not specify affected products, versions, impact, or fixes.

CVE-2018-8304

CVE-2018-8304 is a Windows DNSAPI.dll denial-of-service vulnerability arising from improper handling of DNS responses. Affected: Windows 7, Server 2008/2012/2012 R2, Server 2008 R2, 2016; Windows 8.1/10/10 Servers; DNSAPI denial of service could impact availability. Connected documents confirm th...

CVE-2018-8410

CVE-2018-8410 is a Windows Kernel API elevation-of-privilege vulnerability caused by improper handling of registry objects in memory. The Windows kernel vulnerability affects multiple OS versions (Windows 7, Server 2012/2012 R2, RT 8.1, 8.1, 10, 2016/2008 R2 etc.) as listed in the initial descrip...

CVE-2019-0631

Technical details of CVE-2019-0631 are not publicly available in the provided documents; no affected products, exploit specifics, or remediation are specified. Monitor official advisories for updates.

CVE-2019-0756

Affected component: Microsoft XML Core Services MSXML parser. Description from CVE-2019-0756 indicates a remote code execution vulnerability when the MSXML parser processes user input. Severity is high (CVSS v3 base 8.8; v2 base 9.3). The connected PRION/NVD entries reiterate the same advisory wi...

CVE-2019-0775

CVE-2019-0775 corresponds to an information-disclosure vulnerability in the Windows kernel where memory objects are not handled correctly, enabling partial confidentiality impact in a local context. Affected component is the Windows kernel; root cause is improper handling of objects in memory. Th...

CVE-2019-1057

CVE-2019-1057 applies to the Microsoft XML Core Services MSXML parser. A remote code execution vulnerability occurs when the MSXML parser processes untrusted user input; an attacker could entice a user to visit a crafted website, triggering remote code execution and potentially take control of th...

CVE-2020-0887

CVE-2020-0887 is a Windows Win32k elevation-of-privilege vulnerability in which the Win32k component fails to properly handle objects in memory. This can allow local code execution with kernel-level privileges if exploited. The description states it is distinct from CVE-2020-0788 and CVE-2020-087...

CVE-2021-28342

Technical details about CVE-2021-28342 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.

CVE-2021-31168

CVE-2021-31168 affects the Windows Container Manager Service in Windows/Windows Server and is an elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH), with local attacker access and no user interaction. Public exploit activity is indicated in related advisories/plugins; ex...

CVE-2021-34489

CVE-2021-34489 is a DirectWrite remote code execution vulnerability in Microsoft Windows/Windows Server. The issue affects the DirectWrite component and is described as enabling arbitrary code execution with a HIGH impact, requiring user interaction (UI:R) and a local vector (AV:L/AC:L on CVSS3) ...

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2022-21867

Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-24485

Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.

CVE-2022-30200

Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2022-37956

CVE-2022-37956 is a Windows kernel elevation-of-privilege vulnerability involving local, memory-corruption in the registry hive path. The CVE is described as a Windows Kernel Elevation of Privilege Vulnerability with a CVSSv3.1 base score of 7.8 (HIGH); attack vector LOCAL, complexity LOW, privil...

CVE-2022-41045

Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.

CVE-2022-41096

Technical details about CVE-2022-41096 are not publicly provided in the supplied documents. No affected products/versions or impact are explicitly described here. Monitor the connected sources for updates from Microsoft and NVD when more information becomes available.

CVE-2022-41109

Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.

CVE-2023-21558

Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-21694

Technical details about CVE-2023-21694 are not publicly provided in the supplied documents. The connected records do not specify affected products, root cause, remediation, or exploit status. Monitor for official disclosures and updates.

CVE-2023-21695

Technical details about CVE-2023-21695 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit/vector/impact details are provided here.

CVE-2017-0289

CVE-2017-0289 is a Windows Graphics Information Disclosure vulnerability affecting a broad set of Windows client/server releases (e.g., Windows 7/8.1/10, Windows Server 2008-2016) where the Windows GDI/Graphics components improperly disclose memory contents. The issue is linked to memory disclosu...

CVE-2018-1013

CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...

CVE-2018-8596

CVE-2018-8596 affects the Windows GDI component. The vulnerability is an information disclosure due to improper memory disclosure in GDI, impacting multiple Windows versions (Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 and various Server editions). Root cause: imp...

CVE-2019-0598

Technical details for CVE-2019-0598 are not publicly available in the provided documents; monitor for updates.

CVE-2019-0615

Technical details (affected products/versions, root cause specifics, impact scope) for CVE-2019-0615 are not publicly available in the provided documents. Monitor for updates in connected advisories (CPAI series) and official disclosures.

CVE-2019-0767

CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...

CVE-2020-1039

Technical details for CVE-2020-1039 (Jet Database Engine RCE) are not provided in the Connected Documents. Please monitor official advisories (MSRC/NVD) for affected products, exact root cause, impact scope, and available fixes.

CVE-2020-1339

CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...

CVE-2020-1378

CVE-2020-1378 is a Kernel Transaction Manager (KTM) / registry KTM log recovery vulnerability reported by James Forshaw (2019–2020) alongside CVE-2019-0959 and CVE-2020-1377. The connected material links it to KTM log processing and recovery of registry state, noting that KTM transaction handling...

CVE-2020-1425

Summary: CVE-2020-1425 and CVE-2020-1457 describe remote code execution vulnerabilities in Microsoft Windows Codecs Library due to memory-object handling. The CVE-2020-1425 entry reports a network-exploitable issue with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H and CVSS v2 base score...

CVE-2020-16897

CVE-2020-16897 is an information-disclosure vulnerability in NetBIOS over TCP (NetBT) where objects in memory are improperly handled. An attacker who runs a crafted application could obtain information to help further compromise the system, but cannot directly execute code or elevate rights. The ...

CVE-2021-28332

Technical details for CVE-2021-28332 are not provided in the connected documents. The entries reference RPC Runtime RCE in general but do not specify affected product/version/root cause or fixes. Monitor for updates.

CVE-2021-28338

Technical details for CVE-2021-28338 are not provided in the supplied documents. Monitor for official disclosures and remediation guidance as more information becomes available.

CVE-2021-28340

Technical details for CVE-2021-28340 are not publicly available in the provided documents. No affected product/version, impact, or remediation is specified here. Monitor for updates.

CVE-2021-28354

Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.

CVE-2021-31169

Technical details (affected components, root cause, exact impact, and fixes) are not publicly provided in the supplied documents. Monitor for official advisories and vendor updates.

CVE-2021-31208

CVE-2021-31208 is a Windows Container Manager Service elevation-of-privilege vulnerability affecting Windows/Windows Server. Connected sources confirm the issue and assign a CVSS v3.1 base score of 7.8 (LOCAL, Privileges Required: LOW, no user interaction). Public exploits exist. Microsoft issued...

CVE-2021-31952

CVE-2021-31952 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability. Affected product area is the Windows kernel-mode driver; the root cause is an elevation of privilege in the kernel-mode driver that could allow an attacker with local access to gain higher privileges. The CVSS me...