CVE-2021-1663

CVE-2021-1663 affects the Windows Projected File System FS Filter Driver and is categorized as an Information Disclosure vulnerability. Public details in connected documents identify the vulnerable component as the Windows FS Filter Driver and indicate partial/high confidentiality impact (CVSS 3....

CVE-2021-1666

Technical details about CVE-2021-1666 are not provided in the supplied documents; none of the connected items reveal affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2021-28352

Technical details for CVE-2021-28352 are not provided in the supplied documents. No affected products, impact, or remediation information are disclosed here. Monitor for updates from official advisories and vendor advisories to obtain concrete details.

CVE-2021-28355

Technical details for CVE-2021-28355 are not publicly available in the provided documents; monitor for updates.

CVE-2022-21916

Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.

CVE-2022-30145

The CVE is Windows Encrypting File System (EFS) Remote Code Execution (CVE-2022-30145). Public records in the connected documents confirm this as a Windows OS vulnerability affecting EFS functionality, with multiple Microsoft security updates released in June 2022 (e.g., KB5014699, KB5014678, KB5...

CVE-2022-30148

CVE-2022-30148 is a Windows DSC information disclosure vulnerability affecting the Windows Desired State Configuration component. The connected sources confirm the issue is described as a DSC information disclosure vulnerability and indicate remediation is through Microsoft security updates relea...

CVE-2023-21759

CVE-2023-21759 is a Windows Smart Card Resource Management Server security feature bypass (local, low risk, CVSS 3.1 base 3.3). Connected sources confirm this CVE exists and has been cataloged by NVD and MSRC. Microsoft KBs linked to this CVE are KB5022303 (OS 22621.1105) and related January 2023...

CVE-2023-21816

No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.

CVE-2018-0745

CVE-2018-0745 is a Windows kernel information-disclosure vulnerability affecting Windows 10 v1703, v1709 and Windows Server 2016/2019 lineage as described in the CVE entry. The root cause involves the way objects are handled in memory, enabling information disclosure. Concrete details present in ...

CVE-2018-0959

CVE-2018-0959 is a remote code execution vulnerability in Windows Hyper-V where a host server fails to validate input from an authenticated user on a guest OS. Affected products include Windows clients and server editions listed in the description (e.g., Windows 7, 8.1; Windows Server 2008-2016; ...

CVE-2018-8167

CVE-2018-8167 is a Windows CLFS driver elevation of privilege vulnerability. The issue arises when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. Affected products/versions include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10...

CVE-2018-8450

CVE-2018-8450 is a Windows Remote Code Execution vulnerability affecting Windows Search where an attacker can exploit memory handling of objects to take control of the system. The issue is addressed by Microsoft security updates KB4467702 (Windows 10 v1803/Server 1803) and related KBs for Windows...

CVE-2018-8481

CVE-2018-8481 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products listed include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions). The connected documents (EUVD/CNVD/NVD) describe th...

CVE-2019-0694

CVE-2019-0694 : A local elevation-of-privilege vulnerability due to an integer overflow in the Windows Subsystem for Linux. Affects the WSL component; root cause is the integer overflow, enabling a local attacker to escalate privileges. The provided documents do not specify affected versions, exp...

CVE-2019-0716

CVE-2019-0716 is a Windows Denial of Service vulnerability caused by improper handling of memory objects. The public description states that an attacker who logs on to an affected system and runs a specially crafted application could cause the target to stop responding. The issue does not allow c...

CVE-2019-0856

Technical details about CVE-2019-0856 (affected products, root cause, impact, and fixes) are not present in the provided documents. Monitor official Microsoft advisories and Vulners updates for new information.

CVE-2019-1117

Technical details (affected products, versions, root cause, impact, fixes) for CVE-2019-1117 are not present in the provided connected documents. Monitor for updates; no public details are included here.

CVE-2019-1187

CVE-2019-1187 is a denial-of-service vulnerability in the XmlLite runtime (XmlLite.dll) where improper XML input parsing can cause a crash. According to the NVD/NIST entry, exploitation is possible by a remote, unauthenticated attacker issuing specially crafted XML requests to an XML application,...

CVE-2019-1290

Technical details about CVE-2019-1290 are not publicly provided in the connected documents; the materials describe the vulnerability in general terms and reference other CVEs. Monitor for updates.

CVE-2020-0632

Technical details about CVE-2020-0632 are not publicly provided in the connected records; no affected products, root cause, impact, or fix information is disclosed here. Monitor for updates from vendors/security advisories.

CVE-2020-0941

CVE-2020-0941 is a Win32k Information Disclosure vulnerability in Windows. The root cause is improper handling of objects in memory within the win32k component, leading to kernel information disclosure. Exploitation requires local access: either an attacker must log on locally or persuade a local...

CVE-2020-1317

Technical details for CVE-2020-1317 are not present in the provided connected documents. The initial entry notes a Group Policy elevation of privilege issue but does not publish affected products, versions, impact, or remediation. Monitor for updates.

CVE-2020-1376

CVE-2020-1376 describes an elevation-of-privilege in Windows components, specifically fdSSDP.dll handling of memory and the fix addressing memory object handling in ssdpsrv.dll. The exploit requires a locally authenticated attacker to run a crafted application to achieve code execution with eleva...

CVE-2020-1379

Technical details about CVE-2020-1379 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-1554

CVE-2020-1554 affects Windows Media Foundation memory handling. The vulnerability is a memory corruption issue in Windows Media Foundation when it improperly handles objects in memory, potentially allowing an attacker to install programs, view/change/delete data, or create accounts with full righ...

CVE-2020-16908

CVE-2020-16908 is a Windows Setup elevation-of-privilege vulnerability. A locally authenticated attacker can exploit improper handling of directories in Windows Setup to run arbitrary code with elevated system privileges, enabling installation of programs, viewing/changing/deleting data, or creat...

CVE-2021-24080

CVE-2021-24080 is a Windows vulnerability described as a Denial of Service in the Windows Trust Verification API. The connected documents confirm this CVE is active and listed in multiple sources. Affected component: Windows Trust Verification API (Windows). Underlying impact stated in the availa...

CVE-2021-28330

Technical details for CVE-2021-28330 are not publicly provided in the supplied documents. The sources reference the vulnerability by ID and a generic description; monitor for updates.

CVE-2021-28335

CVE-2021-28335 corresponds to a remote code execution vulnerability in the Windows RPC Runtime. Affected product scope is Microsoft Windows/Windows Server; root cause is a vulnerability in RPC Runtime that enables remote code execution with network access. CVSSv3.1 base score is 8.8 (HIGH), with ...

CVE-2021-28336

The provided documents reference CVE-2021-28336 as a Windows RPC Runtime Remote Code Execution vulnerability. The CNVD entry describes a remote code execution flaw in the RPC Runtime affecting Microsoft Windows/Windows Server. Nessus/OpenVAS plugins in the connected set list CVE-2021-28336 among ...

CVE-2021-28344

Technical details for CVE-2021-28344 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28346

Technical details about CVE-2021-28346 are not provided in the supplied documents. Monitor for updates from official advisories; no affected product/version/root-cause/mitigation details are present here.

CVE-2021-38630

Technical details (affected product, root cause, impact, or fix) are not provided in the connected documents for CVE-2021-38630. Monitor official advisories (NVD, MSRC) for updates.

CVE-2021-38634

CVE-2021-38634 is a Microsoft Windows Update Client Elevation of Privilege vulnerability. Public data (NVD) lists it as a local, low-privilege, no-user-interaction EoP affecting the Windows Update Client, with CVSS v3.1 base score 7.8 (HIGH) and CVSSv2 base score 7.2. The CNA entry also shows a r...

CVE-2021-41331

CVE-2021-41331 corresponds to a Windows Media Audio Decoder Remote Code Execution Vulnerability. Public documents (NVD/NVD-derived entries) describe impact as remote code execution with high-severity ratings: CVSS 3.1 base score 7.8 (LOCAL ATTACK VECTOR, PRIVILEGES NONE, UI REQUIRED; CONF/I/H = H...

CVE-2022-21835

CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...

CVE-2022-21852

Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.

CVE-2022-21895

Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.

CVE-2022-29131

CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...

CVE-2022-37998

CVE-2022-37998 is a DoS vulnerability in Windows Local Session Manager (LSM). Root cause described as improper handling of error messages leading to denial of service. Public exploits exist (per KLA20000). Affected product is Windows OS; remediation is to apply the Microsoft security updates that...

CVE-2023-21760

Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2023-36909

Technical details for CVE-2023-36909 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are present here. Monitor for updates.

CVE-2016-7272

CVE-2016-7272 affects the Windows Graphics component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012/R2, RT 8.1, 10 Gold/1511/1607, Server 2016). The vulnerability enables remote code execution via a crafted web site, with network attack vector and no privileges requ...

CVE-2017-0182

The connected Nessus plugin confirms a Hyper-V Denial of Service issue tied to CVE-2017-0182 family: a DoS affecting Microsoft Windows Hyper-V when input from a privileged guest OS is not properly validated, potentially crashing the host. Affected platforms include Windows client/server variants ...

CVE-2018-0753

CVE-2018-0753 describes a denial-of-service vulnerability in Windows IPSec where the system may stop responding due to how objects are handled in memory. Affected products explicitly include Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions 1511/1607/1703/1709, Windows Server 2...

CVE-2018-0823

The CVE-2018-0823 occurrence is a concrete, NPFS-related elevation-of-privilege flaw in Windows 10 version 1709 and Windows Server 1709, caused by how Named Pipe File System handles objects. Local attacker with logon can exploit to execute processes with elevated privileges. Public exploits exist...

CVE-2018-1040

The CVE-2018-1040 issue is a Denial of Service vulnerability in Windows’ Code Integrity Module hashing. Affected products include Windows 7, Windows 8.1/Server variants, Windows 10, and newer Server editions. The underlying cause is in the hashing routine of the Code Integrity Module, leading to ...

CVE-2018-8394

CVE-2018-8394 is an information disclosure vulnerability in the Windows GDI component. The provided documents state that the GDI memory contents can be improperly disclosed, affecting multiple Windows versions (e.g., Windows 7, Windows 10, various Windows Server editions). The Connected documents...

CVE-2018-8411

CVE-2018-8411 is a local NTFS elevation-of-privilege vulnerability in Windows due to NTFS failing to properly check access rights. A local attacker could exploit this to gain elevated privileges on affected Windows editions (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016/2019 a...