CVE-2020-16909

CVE-2020-16909 describes a local privilege-escalation flaw in Windows Error Reporting (WER) that arises when WER handles and executes files. An attacker could exploit a crafted application to gain higher privileges and access sensitive information and system functionality. The NVD entry notes a s...

CVE-2020-16936

CVE-2020-16936 describes an elevation of privilege vulnerability in Windows Backup Service caused by improper handling of file operations. An attacker must first achieve code execution on the target system and could then run a crafted application to elevate privileges. The vulnerability is mitiga...

CVE-2021-1640

CVE-2021-1640 is a Windows Print Spooler Elevation of Privilege vulnerability affecting the Print Spooler service, caused by handling of print jobs submitted to FILE: ports. The vulnerability can lead to local privilege escalation with impacts across confidentiality, integrity, and availability (...

CVE-2021-1668

CVE-2021-1668 : Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-26891

CVE-2021-26891 is a Windows Container Execution Agent Elevation of Privilege vulnerability affecting Windows Server Containers. Project Zero analysis details multiple silo/registry/object-manager weaknesses that can be chained to escape a container from a non‑administrator. Core issues include: (...

CVE-2021-28327

Technical details for CVE-2021-28327 are not publicly available in the provided documents. No affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2021-31188

CVE-2021-31188 is a Windows Graphics Component Elevation of Privilege vulnerability. The connected documents corroborate that this CVE is addressed by May 2021 Windows security updates (e.g., KB5003173, KB5003208, KB5003203 and related servicing patches) as part of updates to Windows App Platform...

CVE-2021-33765

Technical details about CVE-2021-33765 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-33783

CVE-2021-33783 is a Windows SMB Information Disclosure Vulnerability affecting Microsoft Windows/Windows Server SMB behavior. The primary sources classify it as a network-exposed SMB issue with information disclosure impact (confidentiality high per CVSS 3.1, I:N, A:N) and partial information exp...

CVE-2021-34488

CVE-2021-34488 affects the Windows Console Driver (Windows/Windows Server). The vulnerability is an Elevation of Privilege issue in the Console Driver, with local access required and low exploit complexity. Microsoft/MSRC entries (KB5004237, KB5004244, KB5004245) indicate security updates to addr...

CVE-2021-34493

CVE-2021-34493 is a Windows Partition Management Driver Elevation of Privilege vulnerability. The connected documents describe a local, privilege-escalation flaw in the Partition Management Driver that can affect Windows client/server platforms. CVSS data included with the NVD entry shows CVSS‑3....

CVE-2021-36959

Technical details for CVE-2021-36959 are not publicly available in the provided documents. Monitor for updates from connected sources; existing entries reference the vulnerability but do not specify affected products, root cause, impact, or fixes.

CVE-2021-41332

Technical details for CVE-2021-41332 are not publicly provided in the connected documents; no specifics on affected products, root cause, impact, or remediation are present. Monitor for updates.

CVE-2021-41366

CVE-2021-41366 : Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege. The NVD entry reports a high-severity (CVSS 3.1 base 7.8) vulnerability with a LOCAL attack vector, requiring LOW privileges and NO user interaction, leading to HIGH impact on confidentiality, integri...

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2022-44667

Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.

CVE-2023-36912

Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.

CVE-2016-3301

CVE-2016-3301 affects the Windows Graphics Component in the Windows font library, enabling remote code execution via a crafted embedded font. Affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; W...

CVE-2017-0269

CVE-2017-0269 is a Windows SMBv1 denial-of-service vulnerability: the SMBv1 server may stop responding when it receives specially crafted requests. The issue is tied to handling of SMBv1 traffic (no explicit exploit details in the provided docs). Affected context is Windows SMBv1 processing; pote...

CVE-2017-11771

CVE-2017-11771 is a remote code execution vulnerability in the Microsoft Windows Search component. The issue arises from improper handling of DNS responses by the Windows Search service, allowing an unauthenticated, remote attacker to execute code on affected systems. The CVE is referenced alongs...

CVE-2018-0956

CVE-2018-0956 is a DoS vulnerability in Windows HTTP.sys’s HTTP/2 stack caused by improper parsing of crafted HTTP/2 requests. The affected product surface is Windows Server 2016 and Windows 10/Windows Server 2016-era builds that include HTTP.sys. The impact is denial of service (availability) wi...

CVE-2018-0976

The CVE-2018-0976 entry describes a denial-of-service vulnerability in Windows RDP that can be triggered by specially crafted RDP requests, reportedly affecting Windows 7, Windows Server 2008/2012 families, Windows 8.1, and Windows 10/Server 2016+ clients. The connected documents do not provide c...

CVE-2019-0571

CVE-2019-0571 is a Windows Data Sharing Service elevation of privilege vulnerability affecting Windows 10, Windows Server 2016/2019, and related builds. The issue arises from improper handling of file operations within the Data Sharing Service, enabling a local attacker to gain elevated privilege...

CVE-2019-0776

CVE-2019-0776 is a Windows win32k information disclosure vulnerability: the win32k component improperly provides kernel information, enabling local attackers with low privileges and no user interaction to potentially access confidential data. Affected software is Windows OS via the win32k subsyst...

CVE-2019-1012

CVE-2019-1012 refers to an information-disclosure vulnerability in the Windows GDI component where memory contents can be disclosed due to improper handling of objects. The issue could be exploited by convincing a user to open a specially crafted document or visit an untrusted page, enabling info...

CVE-2019-1122

Technical details for CVE-2019-1122 are not present in the provided connected documents. Public details about affected components/versions are not provided here; monitor for updates.

CVE-2019-1146

CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...

CVE-2020-0657

CVE-2020-0657 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The underlying issue is improper handling of memory objects by the CLFS driver, enabling a local attacker to elevate privileges. Connected documents reference this CVE within Microsoft upd...

CVE-2020-0788

Technical details for CVE-2020-0788 are not publicly available in the provided connected documents; no root cause, impact, or patch specifics are included. Monitor for updates.

CVE-2020-1319

CVE-2020-1319 affects Microsoft Windows Codecs Library. The root cause is memory handling in the Codecs Library, with public details noting an uninitialized pointer leading to remote code execution when processing a specially crafted image file. Impact per sources: attacker could take control of ...

CVE-2020-1355

The CVE-2020-1355 entry maps to a Windows Font Driver Host memory-handling bug that can lead to remote code execution. Public sources describe the issue as memory mismanagement in the Font Driver Host, enabling an attacker to gain code execution on a vulnerable system. Microsoft’s advisory notes ...

CVE-2020-1408

Technical details for CVE-2020-1408 are not publicly provided in the connected documents. The Fedora/OpenVAS/Nessus entries reference this CVE only in passing or within list contexts. Monitor for updates from official advisories.

CVE-2020-1596

Technical details for CVE-2020-1596 are not provided in the connected documents. The initial description lacks product/version/root-cause specifics; monitor for updates.

CVE-2021-1655

Technical details about CVE-2021-1655 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories to obtain affected products, impact, vectors, and fixes.

CVE-2021-33761

Technical details for CVE-2021-33761 are not publicly available in the provided connected documents. The entry lacks explicit affected products, root cause, impact, or remediation within the supplied data. Monitor for updates from official advisories.

CVE-2021-34476

CVE-2021-34476 : Bowser.sys Denial of Service vulnerability. Connected data provide CVSS v3.1 metrics: NETWORK exploit, LOW attack complexity, NONE privileges, NONE user interaction, and HIGH availability impact (base score 7.5). No explicit remediation or patch details are provided in the suppli...

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-40488

CVE-2021-40488 corresponds to a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSS details show a LOCAL attack with LOW attack complexity and NO authentication required, potentially impacting confidentiality, integrity, and availability (C/C/I/A = HIGH). The vulnerability is...

CVE-2022-21862

Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-21875

CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...

CVE-2022-22031

Technical details about CVE-2022-22031 (Windows Credential Guard domain-joined public key privilege elevation) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or fixes are specified here; monitor for updates from the cited sources.

CVE-2022-26915

CVE-2022-26915 is described as a Windows Secure Channel Denial of Service vulnerability. The CNVD entry notes the issue stems from Microsoft Windows’ handling of incoming error messages, enabling a DoS condition. Related entries (NVD/NVD-linked pages and Microsoft KBs) confirm the vulnerability a...

CVE-2022-30212

CVE-2022-30212: A Windows Connected Devices Platform Service information-disclosure vulnerability. Affected product: Windows Connected Devices Platform Service. Underlying issue enables information disclosure; some sources describe it as exploitable remotely to obtain sensitive data. Remediation ...

CVE-2022-34690

Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.

CVE-2022-35836

CVE-2022-35836 affects the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. The connected AttackKB entry reiterates the same description. Provided details indicate the vulnerability is network-reachable with high impact to confidentiality, integri...

CVE-2022-38006

Technical details about CVE-2022-38006 are not publicly provided in the connected documents. Public information only reiterates a Windows Graphics Component Information Disclosure vulnerability. Monitor for updates; no vulnerability specifics (affected products, root cause, fixes) are disclosed h...

CVE-2022-41054

Technical details about CVE-2022-41054 (affected product, root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from Microsoft or security advisories.

CVE-2022-41114

CVE-2022-41114 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The CVE entry, with a CVSS v3.1 base score of 7.0 (HIGH), indicates a LOCAL attack vector requiring LOW privileges and no user interaction, with impact to confidentiality, integrity, and availability. Public refe...

CVE-2023-21753

CVE-2023-21753 is a Windows Event Tracing for Windows (ETW) information disclosure vulnerability. It is a local-attack, low-privilege issue with confidentiality impact, enabling information leakage without affecting integrity or availability. Public exploits are reported in OpenVAS; remediation i...

CVE-2016-0042

CVE-2016-0042 corresponds to a Windows DLL loading Remote Code Execution vulnerability. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012, Windows RT 8.1, and Windows 10 (including 1511). The flaw arises from mishandling D...