CVE-2019-0775

CVE-2019-0775 corresponds to an information-disclosure vulnerability in the Windows kernel where memory objects are not handled correctly, enabling partial confidentiality impact in a local context. Affected component is the Windows kernel; root cause is improper handling of objects in memory. Th...

CVE-2021-36954

CVE-2021-36954 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The issue affects Windows where a local attacker can exploit the Bind Filter Driver to elevate privileges with low privileges and no user interaction, potentially affecting confidentiality, integrity, and availab...

CVE-2022-24550

Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.

CVE-2022-26790

Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-41096

Technical details about CVE-2022-41096 are not publicly provided in the supplied documents. No affected products/versions or impact are explicitly described here. Monitor the connected sources for updates from Microsoft and NVD when more information becomes available.

CVE-2022-41098

Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.

CVE-2023-21759

CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...

CVE-2017-0211

CVE-2017-0211 is a Windows OLE/COM elevation-of-privilege issue where a Structured Storage object can be exposed across a security boundary via a property bag, enabling creation of a remote COM object in the server process and potential privilege escalation. Google Project Zero details show how I...

CVE-2018-8392

CVE-2018-8392 is a heap-based buffer overflow in the Microsoft Jet Database Engine. The issue arises from improper handling of in-memory objects, enabling a remote, unauthenticated attacker to exploit by enticing a user to open a specially crafted Excel file, potentially leading to remote code ex...

CVE-2018-8410

CVE-2018-8410 is a Windows Kernel API elevation-of-privilege vulnerability caused by improper handling of registry objects in memory. The Windows kernel vulnerability affects multiple OS versions (Windows 7, Server 2012/2012 R2, RT 8.1, 8.1, 10, 2016/2008 R2 etc.) as listed in the initial descrip...

CVE-2018-8481

CVE-2018-8481 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products listed include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions). The connected documents (EUVD/CNVD/NVD) describe th...

CVE-2019-0631

Technical details of CVE-2019-0631 are not publicly available in the provided documents; no affected products, exploit specifics, or remediation are specified. Monitor official advisories for updates.

CVE-2019-0637

Technical details about CVE-2019-0637 (Windows Defender Firewall security feature bypass) are not publicly provided in the connected documents; monitor for updates to learn of affected products, impact, and fixes.

CVE-2019-0814

CVE-2019-0814 affects Microsoft Windows Win32k: information disclosure due to win32k improperly providing kernel information. The vulnerability is the same family as CVE-2019-0848 and is described across NVD/CNVD records and related CVE entries. Affected software is Windows Windows Win32k subsyst...

CVE-2019-1290

Technical details about CVE-2019-1290 are not publicly provided in the connected documents; the materials describe the vulnerability in general terms and reference other CVEs. Monitor for updates.

CVE-2019-1319

CVE-2019-1319 affects Windows Error Reporting (WER). The vulnerability stems from how WER handles and executes files, enabling elevation of privilege when exploited locally. Connected documents confirm the issue name and that it is a Windows WER elevation of privilege vulnerability, but do not pr...

CVE-2019-1333

Technical details about CVE-2019-1333 (affected components, root cause, impact, or fixes) are not provided in the connected documents. The initial description references a Windows Remote Desktop Client RCE, but no public details are included here; monitor for updates.

CVE-2020-0665

CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...

CVE-2020-1039

Technical details for CVE-2020-1039 (Jet Database Engine RCE) are not provided in the Connected Documents. Please monitor official advisories (MSRC/NVD) for affected products, exact root cause, impact scope, and available fixes.

CVE-2020-1339

CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...

CVE-2020-1379

Technical details about CVE-2020-1379 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-1488

Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.

CVE-2020-1529

CVE-2020-1529 is a Windows GDI elevation-of-privilege vulnerability where improper handling of in-memory GDI objects could allow a local attacker to run code in kernel mode. The initial description notes kernel-mode code execution and privilege elevation after logging on and running a crafted app...

CVE-2020-16899

CVE-2020-16899 is a denial-of-service vulnerability in the Windows TCP/IP stack caused by improper handling of ICMPv6 Router Advertisement packets. An attacker who can send crafted ICMPv6 RA packets to a remote Windows host could cause the system to stop responding. The CVE explicitly notes that ...

CVE-2021-1666

Technical details about CVE-2021-1666 are not provided in the supplied documents; none of the connected items reveal affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2021-28341

Technical details for CVE-2021-28341 are not publicly provided in the supplied documents. Related OpenVAS/Nessus plugins reference the CVE list but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2021-28354

Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.

CVE-2021-31952

CVE-2021-31952 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability. Affected product area is the Windows kernel-mode driver; the root cause is an elevation of privilege in the kernel-mode driver that could allow an attacker with local access to gain higher privileges. The CVSS me...

CVE-2021-36962

Technical details for CVE-2021-36962 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2022-21867

Technical details for CVE-2022-21867 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-21695

Technical details about CVE-2023-21695 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit/vector/impact details are provided here.

CVE-2023-21760

Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2018-8167

CVE-2018-8167 is a Windows CLFS driver elevation of privilege vulnerability. The issue arises when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. Affected products/versions include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10...

CVE-2018-8411

CVE-2018-8411 is a local NTFS elevation-of-privilege vulnerability in Windows due to NTFS failing to properly check access rights. A local attacker could exploit this to gain elevated privileges on affected Windows editions (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016/2019 a...

CVE-2018-8595

CVE-2018-8595 concerns an information-disclosure flaw in the Windows Graphics Device Interface (GDI) where memory contents are improperly disclosed. Affected are multiple Windows versions listed in the CVE (e.g., Windows 7, Windows 8.1, Windows 10 and corresponding server releases). The root caus...

CVE-2019-0572

CVE-2019-0572 concerns a Windows Data Sharing Service elevation of privileges vulnerability. Connected sources indicate the issue affects Microsoft Windows Data Sharing Service components in Windows 10 and related OS families, enabling a local attacker to obtain elevated privileges by abusing imp...

CVE-2019-1148

CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...

CVE-2019-1380

CVE-2019-1380 is a local elevation-of-privilege issue in Windows where splwow64.exe mishandles certain calls (aka Microsoft splwow64 Elevation of Privilege Vulnerability). Affected software is Windows system component splwow64.exe; root cause centers on how certain calls are processed. Documented...

CVE-2020-0887

CVE-2020-0887 is a Windows Win32k elevation-of-privilege vulnerability in which the Win32k component fails to properly handle objects in memory. This can allow local code execution with kernel-level privileges if exploited. The description states it is distinct from CVE-2020-0788 and CVE-2020-087...

CVE-2020-1554

CVE-2020-1554 affects Windows Media Foundation memory handling. The vulnerability is a memory corruption issue in Windows Media Foundation when it improperly handles objects in memory, potentially allowing an attacker to install programs, view/change/delete data, or create accounts with full righ...

CVE-2020-16897

CVE-2020-16897 is an information-disclosure vulnerability in NetBIOS over TCP (NetBT) where objects in memory are improperly handled. An attacker who runs a crafted application could obtain information to help further compromise the system, but cannot directly execute code or elevate rights. The ...

CVE-2021-1663

CVE-2021-1663 affects the Windows Projected File System FS Filter Driver and is categorized as an Information Disclosure vulnerability. Public details in connected documents identify the vulnerable component as the Windows FS Filter Driver and indicate partial/high confidentiality impact (CVSS 3....

CVE-2021-28335

CVE-2021-28335 corresponds to a remote code execution vulnerability in the Windows RPC Runtime. Affected product scope is Microsoft Windows/Windows Server; root cause is a vulnerability in RPC Runtime that enables remote code execution with network access. CVSSv3.1 base score is 8.8 (HIGH), with ...

CVE-2021-28342

Technical details about CVE-2021-28342 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.

CVE-2021-33755

Technical details about CVE-2021-33755 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-21866

Technical details for CVE-2022-21866 are not provided in the supplied documents; affected products, root cause, exploit info, and fixes are not specified here. Monitor for updates.

CVE-2022-30213

Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.

CVE-2016-0015

DirectShow Heap Corruption Remote Code Execution (CVE-2016-0015) affects Windows components listed in the CVE, with the vulnerability arising from improper validation in DirectShow. An attacker could trigger arbitrary-code execution by convincing a user to open a crafted file, potentially gaining...

CVE-2018-0745

CVE-2018-0745 is a Windows kernel information-disclosure vulnerability affecting Windows 10 v1703, v1709 and Windows Server 2016/2019 lineage as described in the CVE entry. The root cause involves the way objects are handled in memory, enabling information disclosure. Concrete details present in ...