CVE-2023-36912

Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0892

CVE-2019-0892 describes a Windows Win32k privilege-elevation vulnerability. The Win32k memory-handling of objects can be exploited to execute arbitrary code in kernel mode, enabling an attacker who can log on to run a crafted app that elevates privileges, potentially installing programs, modifyin...

CVE-2019-0897

CVE-2019-0897 describes a remote code execution vulnerability in the Windows Jet Database Engine triggered by improper handling of in-memory objects. The connected CNVD entries reiterate a buffer overflow/heap overflow issue in the Windows Jet Database Engine, caused when data boundaries are not ...

CVE-2020-0681

CVE-2020-0681 is a remote code execution vulnerability in the Windows Remote Desktop Client. The issue occurs when a user connects to a malicious Remote Desktop server, allowing an attacker to execute arbitrary code on the client machine. The vulnerability is associated with the Remote Desktop Cl...

CVE-2020-1510

CVE-2020-1510 is a Windows win32k information-disclosure vulnerability. The root cause is improper handling of objects in memory by win32k, enabling an attacker who logs on and runs a crafted app to access kernel information and potentially leverage it for further compromise. Impact is described ...

CVE-2021-24077

CVE-2021-24077 is a Windows Fax Service Remote Code Execution vulnerability. The NVD entry lists it with CVSSv3.1 base score 9.8 (CRITICAL) and CVSSv2 base score 7.5, indicating a NETWORK attack vector, no authentication, and no user interaction required; impact is high on Confidentiality, Integr...

CVE-2021-28333

Technical details about CVE-2021-28333 are not publicly provided in the supplied documents. The connected entries mention the vulnerability at a high level but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2021-28336

The provided documents reference CVE-2021-28336 as a Windows RPC Runtime Remote Code Execution vulnerability. The CNVD entry describes a remote code execution flaw in the RPC Runtime affecting Microsoft Windows/Windows Server. Nessus/OpenVAS plugins in the connected set list CVE-2021-28336 among ...

CVE-2021-28344

Technical details for CVE-2021-28344 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28346

Technical details about CVE-2021-28346 are not provided in the supplied documents. Monitor for updates from official advisories; no affected product/version/root-cause/mitigation details are present here.

CVE-2021-28352

Technical details for CVE-2021-28352 are not provided in the supplied documents. No affected products, impact, or remediation information are disclosed here. Monitor for updates from official advisories and vendor advisories to obtain concrete details.

CVE-2021-31974

Technical details for CVE-2021-31974 are not publicly provided in the supplied documents. Monitor official advisories and vulnerability feeds for updates.

CVE-2021-34491

Technical details about CVE-2021-34491 are not present in the provided documents; public information in the initial entry is limited to a Win32k information disclosure reference. Monitor for updates from authoritative advisories.

CVE-2021-34503

CVE-2021-34503 is a Windows Media Foundation remote code execution vulnerability described in multiple sources as an issue in the Media Foundation component of Microsoft Windows that can lead to remote code execution. Connected documents corroborate that the vulnerability affects Windows Media Fo...

CVE-2021-36959

Technical details for CVE-2021-36959 are not publicly available in the provided documents. Monitor for updates from connected sources; existing entries reference the vulnerability but do not specify affected products, root cause, impact, or fixes.

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-40464

Technical details about CVE-2021-40464 are not publicly available in the provided connected documents; monitor for updates.

CVE-2021-41332

Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2021-41366

CVE-2021-41366 : Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege. The NVD entry reports a high-severity (CVSS 3.1 base 7.8) vulnerability with a LOCAL attack vector, requiring LOW privileges and NO user interaction, leading to HIGH impact on confidentiality, integri...

CVE-2022-21895

Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.

CVE-2022-38051

CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...

CVE-2023-36909

Technical details for CVE-2023-36909 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are present here. Monitor for updates.

CVE-2017-0078

Technical details for CVE-2017-0078 are not provided in the connected documents. Monitor for updates from official advisories; no exploit, impact, or remediation specifics are included here.

CVE-2017-0269

CVE-2017-0269 is a Windows SMBv1 denial-of-service vulnerability: the SMBv1 server may stop responding when it receives specially crafted requests. The issue is tied to handling of SMBv1 traffic (no explicit exploit details in the provided docs). Affected context is Windows SMBv1 processing; pote...

CVE-2019-0695

CVE-2019-0695 describes a denial-of-service vulnerability in Microsoft Hyper-V where a host server fails to properly validate input from a privileged user on a guest operating system. The issue is tied to Hyper-V on the host and is characterized as a DoS with the impact described by the CVE entry...

CVE-2019-1087

Technical details about CVE-2019-1087 are not provided in the supplied documents. Monitor official advisories for updates on affected products, root cause, impact, and remediation.

CVE-2019-1146

CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...

CVE-2019-1347

Technical details about CVE-2019-1347 are not provided in the connected documents. Public details (affected products, root cause, impact, or fixes) are not disclosed here. Monitor for updates and refer to the initial CVE entry for any forthcoming specifics.

CVE-2019-1419

CVE-2019-1419 is a remote code execution vulnerability in Microsoft Windows affecting the Windows Adobe Type Manager Library, caused by improper handling of specially crafted OpenType fonts. The issue is described consistently across the NVD entry and Red Hat CVE records (RH:CVE-2019-1419/CVE-201...

CVE-2020-0644

Technical details for CVE-2020-0644 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2020-0945

CVE-2020-0945 is a Media Foundation information-disclosure vulnerability in Microsoft Windows media handling where memory objects are not properly managed, potentially exposing partial confidentiality. The entry provides a CVSS score (4.3/5.0 base, MEDIUM) and vectors for both CVSS v2 and v3, but...

CVE-2020-1319

CVE-2020-1319 affects Microsoft Windows Codecs Library. The root cause is memory handling in the Codecs Library, with public details noting an uninitialized pointer leading to remote code execution when processing a specially crafted image file. Impact per sources: attacker could take control of ...

CVE-2020-1584

CVE-2020-1584 is a Windows elevation-of-privilege vulnerability in how the dnsrslvr.dll handles in-memory objects. The underlying issue involves heap allocations and object copying in several DNS record copy paths (e.g., SigRecordCopy, NsecRecordCopy, KeyRecordCopy, OptRecordCopy, DhcidRecordCopy...

CVE-2020-1587

CVE-2020-1587 : Elevation of privilege in the Windows Ancillary Function Driver for WinSock caused by improper memory handling. Exploitation requires an initial execution on the victim, followed by running a crafted app to elevate privileges. Microsoft’s security update fixes the memory handling ...

CVE-2021-1726

CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...

CVE-2021-24080

CVE-2021-24080 is a Windows vulnerability described as a Denial of Service in the Windows Trust Verification API. The connected documents confirm this CVE is active and listed in multiple sources. Affected component: Windows Trust Verification API (Windows). Underlying impact stated in the availa...

CVE-2021-28327

Technical details for CVE-2021-28327 are not publicly available in the provided documents. No affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2021-28330

Technical details for CVE-2021-28330 are not publicly provided in the supplied documents. The sources reference the vulnerability by ID and a generic description; monitor for updates.

CVE-2021-33765

Technical details about CVE-2021-33765 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-34488

CVE-2021-34488 affects the Windows Console Driver (Windows/Windows Server). The vulnerability is an Elevation of Privilege issue in the Console Driver, with local access required and low exploit complexity. Microsoft/MSRC entries (KB5004237, KB5004244, KB5004245) indicate security updates to addr...

CVE-2021-38635

CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...

CVE-2022-30150

Technical details about CVE-2022-30150 (Windows Defender Remote Credential Guard Elevation of Privilege) are not provided in the connected documents. The records include the CVE entry and references but do not specify root cause, affected versions, exploitability, or mitigations within the suppli...

CVE-2022-41077

CVE-2022-41077 is Windows Fax Compose Form Elevation of Privilege. Affected component: Windows Fax service (Fax/Compose form). Root cause and impact as per provided data: local attacker with low privileges can exploit the vulnerability with no user interaction to achieve elevation of privilege, w...

CVE-2022-41114

CVE-2022-41114 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The CVE entry, with a CVSS v3.1 base score of 7.0 (HIGH), indicates a LOCAL attack vector requiring LOW privileges and no user interaction, with impact to confidentiality, integrity, and availability. Public refe...

CVE-2023-21753

CVE-2023-21753 is a Windows Event Tracing for Windows (ETW) information disclosure vulnerability. It is a local-attack, low-privilege issue with confidentiality impact, enabling information leakage without affecting integrity or availability. Public exploits are reported in OpenVAS; remediation i...

CVE-2023-21801

CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...

CVE-2023-21820

Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2018-0900

Technical details are not publicly available in the provided connected documents; monitor for updates.

CVE-2018-8140

CVE-2018-8140 (Cortana Elevation of Privilege) affects Windows 10 and Windows Server (server 1709/1803) where Cortana retrieves data from user input services without considering status, enabling local privilege escalation. Root cause: Cortana’s data handling allows execution of commands with elev...

CVE-2018-8339

Technical details about CVE-2018-8339 are not publicly provided in the connected documents. Available sources reiterate the elevated-privilege issue in Windows Installer but do not disclose affected versions, specific vulnerable components, exploit vectors, or remediation steps beyond general gui...