CVE-2021-40464

Technical details about CVE-2021-40464 are not publicly available in the provided connected documents; monitor for updates.

CVE-2021-41331

CVE-2021-41331 corresponds to a Windows Media Audio Decoder Remote Code Execution Vulnerability. Public documents (NVD/NVD-derived entries) describe impact as remote code execution with high-severity ratings: CVSS 3.1 base score 7.8 (LOCAL ATTACK VECTOR, PRIVILEGES NONE, UI REQUIRED; CONF/I/H = H...

CVE-2021-41366

CVE-2021-41366 : Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege. The NVD entry reports a high-severity (CVSS 3.1 base 7.8) vulnerability with a LOCAL attack vector, requiring LOW privileges and NO user interaction, leading to HIGH impact on confidentiality, integri...

CVE-2021-41377

Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-21838

Technical details about CVE-2022-21838 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates from official sources.

CVE-2022-21852

Technical details for CVE-2022-21852 are not publicly available in the provided documents; monitor for updates.

CVE-2022-21864

Technical details for CVE-2022-21864 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2022-21916

Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.

CVE-2022-30150

Technical details about CVE-2022-30150 (Windows Defender Remote Credential Guard Elevation of Privilege) are not provided in the connected documents. The records include the CVE entry and references but do not specify root cause, affected versions, exploitability, or mitigations within the suppli...

CVE-2022-34690

Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2016-0042

CVE-2016-0042 corresponds to a Windows DLL loading Remote Code Execution vulnerability. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, and Windows 10 (including 1511). The flaw arises from mishandling D...

CVE-2018-0976

The CVE-2018-0976 entry describes a denial-of-service vulnerability in Windows RDP that can be triggered by specially crafted RDP requests, reportedly affecting Windows 7, Windows Server 2008/2012 families, Windows 8.1, and Windows 10/Server 2016+ clients. The connected documents do not provide c...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8454

CVE-2018-8454 is a Windows information-disclosure vulnerability in the Windows Audio Service where memory objects may be mishandled. Affected products listed in the CVE entry include Windows 10, Windows 10 Servers, and Windows Server 2019. In the Nessus/OpenVAS content, this vulnerability is incl...

CVE-2019-0897

CVE-2019-0897 describes a remote code execution vulnerability in the Windows Jet Database Engine triggered by improper handling of in-memory objects. The connected CNVD entries reiterate a buffer overflow/heap overflow issue in the Windows Jet Database Engine, caused when data boundaries are not ...

CVE-2020-0623

Technical details (affected products, versions, root cause, impact or fixes) for CVE-2020-0623 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0657

CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...

CVE-2020-0671

Technical details for CVE-2020-0671 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2020-0731

Technical details for CVE-2020-0731 are not publicly provided in the connected documents; affected products, root cause, and remediation cannot be specified from current sources. Monitor ENISA EUVD entries and the MSRC advisory for updates.

CVE-2020-0945

CVE-2020-0945 is a Media Foundation information-disclosure vulnerability in Microsoft Windows media handling where memory objects are not properly managed, potentially exposing partial confidentiality. The entry provides a CVSS score (4.3/5.0 base, MEDIUM) and vectors for both CVSS v2 and v3, but...

CVE-2020-1317

Technical details for CVE-2020-1317 are not present in the provided connected documents. The initial entry notes a Group Policy elevation of privilege issue but does not publish affected products, versions, impact, or remediation. Monitor for updates.

CVE-2020-1510

CVE-2020-1510 is a Windows win32k information-disclosure vulnerability. The root cause is improper handling of objects in memory by win32k, enabling an attacker who logs on and runs a crafted app to access kernel information and potentially leverage it for further compromise. Impact is described ...

CVE-2020-16899

CVE-2020-16899 is a denial-of-service vulnerability in the Windows TCP/IP stack caused by improper handling of ICMPv6 Router Advertisement packets. An attacker who can send crafted ICMPv6 RA packets to a remote Windows host could cause the system to stop responding. The CVE explicitly notes that ...

CVE-2021-24077

CVE-2021-24077 is a Windows Fax Service Remote Code Execution vulnerability. The NVD entry lists it with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5, indicating a NETWORK attack vector, no authentication, and no user interaction required; impact is high on Confidentiality, Integr...

CVE-2021-34476

CVE-2021-34476 : Bowser.sys Denial of Service vulnerability. Connected data provide CVSS v3.1 metrics: NETWORK exploit, LOW attack complexity, NONE privileges, NONE user interaction, and HIGH availability impact (base score 7.5). No explicit remediation or patch details are provided in the suppli...

CVE-2021-41332

Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2021-42280

CVE-2021-42280 is tied to the Windows Feedback Hub Elevation of Privilege vulnerability. Affected software is Windows Feedback Hub (Windows OS). The provided documents describe the vulnerability as local, with low attack complexity and high impact on confidentiality, integrity, and availability (...

CVE-2022-21875

CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...

CVE-2022-22031

Technical details about CVE-2022-22031 (Windows Credential Guard domain-joined public key privilege elevation) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or fixes are specified here; monitor for updates from the cited sources.

CVE-2022-26790

Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-30212

CVE-2022-30212: A Windows Connected Devices Platform Service information-disclosure vulnerability. Affected product: Windows Connected Devices Platform Service. Underlying issue enables information disclosure; some sources describe it as exploitable remotely to obtain sensitive data. Remediation ...

CVE-2022-37998

CVE-2022-37998 is a DoS vulnerability in Windows Local Session Manager (LSM). Root cause described as improper handling of error messages leading to denial of service. Public exploits exist (per KLA20000). Affected product is Windows OS; remediation is to apply the Microsoft security updates that...

CVE-2022-41114

CVE-2022-41114 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The CVE entry, with a CVSS v3.1 base score of 7.0 (HIGH), indicates a LOCAL attack vector requiring LOW privileges and no user interaction, with impact to confidentiality, integrity, and availability. Public refe...

CVE-2016-3209

CVE-2016-3209 affects Microsoft GDI+ across Windows Vista/7/8.1/Server 2008-2012 and various Office/.NET components, enabling information disclosure by bypassing ASLR through unspecified vectors. Connected sources confirm exploitation activity (e.g., Exploit DB). Public references note MS16-120 a...

CVE-2017-11771

CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...

CVE-2018-0813

Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2018-0898

Technical details about CVE-2018-0898 are not publicly available in the provided connected documents. Monitor for updates; no explicit affected products, root cause, impact, or remediation are detailed here.

CVE-2018-0956

CVE-2018-0956 is a DoS vulnerability in Windows HTTP.sys’s HTTP/2 stack caused by improper parsing of crafted HTTP/2 requests. The affected product surface is Windows Server 2016 and Windows 10/Windows Server 2016-era builds that include HTTP.sys. The impact is denial of service (availability) wi...

CVE-2018-8136

CVE-2018-8136 is described as a remote code execution vulnerability in how Windows handles objects in memory, affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 and Windows 10 servers. The con...

CVE-2018-8341

CVE-2018-8341 describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly handled. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 (and corresponding Server SKUs 2008/2012/2016/2019-era fa...

CVE-2018-8443

Technical details about CVE-2018-8443 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are described. Monitor for updates from official sources.

CVE-2019-0603

CVE-2019-0603 impacts Windows Deployment Services TFTP Server. The vulnerability stems from improper handling of objects in memory within WDSTFTP, allowing a remote attacker to craft a request that executes arbitrary code with elevated privileges. The available connected documents confirm this re...

CVE-2019-0776

CVE-2019-0776 is a Windows win32k information disclosure vulnerability: the win32k component improperly provides kernel information, enabling local attackers with low privileges and no user interaction to potentially access confidential data. Affected software is Windows OS via the win32k subsyst...

CVE-2019-0905

CVE-2019-0905 describes a remote code execution vulnerability in the Windows Jet Database Engine, triggered when the engine improperly handles objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution on ...

CVE-2019-0907

The CVE-2019-0907 issue concerns the Windows Jet Database Engine and a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could entice a user to open a specially crafted file to trigger arbitrary code execution on the victim’s system. Microsoft’s upd...

CVE-2019-1010

Technical details about CVE-2019-1010 are not publicly available in the provided connected documents. Monitor for updates; current sources only reference Windows GDI information disclosure and MS patching without affected versions or exploit specifics.

CVE-2019-1122

Technical details for CVE-2019-1122 are not present in the provided connected documents. Public details about affected components/versions are not provided here; monitor for updates.

CVE-2019-1128

Technical details about CVE-2019-1128 (affected component, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2019-1146

CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...