CVE-2020-16902

CVE-2020-16902 is a Windows Installer elevation-of-privilege vulnerability. The Windows Installer fails to properly sanitize input, causing insecure library loading. A locally authenticated attacker could execute arbitrary code with elevated privileges and gain full control (install/modify data, ...

CVE-2019-1157

The CVE-2019-1157 entry describes a remote code execution in the Windows Jet Database Engine due to improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to exploit this, enabling arbitrary code execution on a affected system. The vulnerability aff...

CVE-2019-1159

CVE-2019-1159 is a Windows kernel elevation-of-privilege vulnerability caused by improper handling of objects in memory. An attacker who can log on could execute a crafted app to run code in kernel mode, potentially installing programs, viewing/changing/deleting data, or creating accounts with fu...

CVE-2020-0643

The CVE-2020-0643 entry concerns a information-disclosure vulnerability in Windows GDI+ where memory objects are mishandled. Connected CNVD-2020-04849 describes a Microsoft Windows Graphics Device Interface Plus information disclosure vulnerability with the same affected component; it states that...

CVE-2020-0887

CVE-2020-0887 is a Windows Win32k elevation-of-privilege vulnerability in which the Win32k component fails to properly handle objects in memory. This can allow local code execution with kernel-level privileges if exploited. The description states it is distinct from CVE-2020-0788 and CVE-2020-087...

CVE-2020-0914

CVE-2020-0914 affects the Windows State Repository Service. The vulnerability is an Information Disclosure in which objects in memory are mishandled, potentially allowing a local attacker who runs a specially crafted application to obtain sensitive information and further compromise the system. M...

CVE-2020-1355

The CVE-2020-1355 entry maps to a Windows Font Driver Host memory-handling bug that can lead to remote code execution. Public sources describe the issue as memory mismanagement in the Font Driver Host, enabling an attacker to gain code execution on a vulnerable system. Microsoft’s advisory notes ...

CVE-2021-27089

Technical details for CVE-2021-27089 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and affected products.

CVE-2021-28321

CVE-2021-28321 is a elevation-of-privilege issue in the Diagnostics Hub Standard Collector Service. The NVD entry lists a local, low-attack‑complexity vector with no authentication, achieving high impact on confidentiality, integrity, and availability (CVSS‑3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:...

CVE-2021-28333

Technical details about CVE-2021-28333 are not publicly provided in the supplied documents. The connected entries mention the vulnerability at a high level but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2021-31974

Technical details for CVE-2021-31974 are not publicly provided in the supplied documents. Monitor official advisories and vulnerability feeds for updates.

CVE-2021-33788

Technical details about CVE-2021-33788 are not provided in the supplied documents. Monitor for updated disclosures and CVE metadata.

CVE-2021-41340

Technical details for CVE-2021-41340 are not publicly provided in the connected documents. Monitor for updates as only high-level description is available from initial and related sources.

CVE-2021-42284

Technical details (affected product, vulnerable component, root cause, and remediation) are not provided in the supplied documents for CVE-2021-42284. Please monitor for updates from official sources; no exploitable details or patch information are available here.

CVE-2022-21847

CVE-2022-21847 is a Windows Hyper-V Denial of Service vulnerability. Public records confirm this CVE exists and is associated with local attack requirements and a medium overall risk (NVD: CVSS v3.1 base 6.5, CVSS v2: 4.9). Affected context is Hyper-V on Windows, but the exact root cause, vulnera...

CVE-2022-21959

Technical details about CVE-2022-21959 are not publicly provided in the supplied documents. Monitor for updates from NVD and vendor advisories.

CVE-2022-21961

CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...

CVE-2022-22041

CVE-2022-22041 is a Windows Print Spooler elevation of privilege vulnerability affecting Windows Print Spooler components. The Connected documents reference this CVE as part of the July 2022 Patch Tuesday fixes addressing multiple Print Spooler elevation-of-privilege flaws, with remediation deliv...

CVE-2022-34733

CVE-2022-34733 pertains to the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. NVD lists CVSS v3.1 base score 8.8 (HIGH) with Network attack vector, no privileges required, user interaction needed, and high impact on confidentiality, integrity, a...

CVE-2022-41090

Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.

CVE-2022-44680

CVE-2022-44680 is a Windows Graphics Component Elevation of Privilege vulnerability. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local, low-complexity exploit requiring low privileges with no user interaction, capable of compromising confidentiality, integrity, and avail...

CVE-2023-21753

CVE-2023-21753 is a Windows Event Tracing for Windows (ETW) information disclosure vulnerability. It is a local-attack, low-privilege issue with confidentiality impact, enabling information leakage without affecting integrity or availability. Public exploits are reported in OpenVAS; remediation i...

CVE-2023-21801

CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...

CVE-2016-3237

CVE-2016-3237 is a Kerberos authentication bypass in multiple Windows versions where domain password changes may fall back to NTLM, enabling MITM style bypass of authentication. Affected: Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold/R...

CVE-2018-0822

CVE-2018-0822 is an elevation-of-privilege vulnerability in NTFS on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709, caused by how NTFS handles objects (Global Reparse Point). Impact: local privilege escalation with high severity (per CVSS v3). Public exploit exists (exploi...

CVE-2018-0830

CVE-2018-0830 is a Windows kernel local information-disclosure vulnerability caused by how objects in memory are handled. Affected products include Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2/R2 SP1; Windows Server 2012/R2; Windows 10 releases Gold, 1511, 1607, 1703, 1709; Wind...

CVE-2018-0970

Technical details for CVE-2018-0970 are not provided in the supplied documents. Public disclosure, affected products, and remediation remain unclear; monitor for updates.

CVE-2018-8140

CVE-2018-8140 (Cortana Elevation of Privilege) affects Windows 10 and Windows Server (server 1709/1803) where Cortana retrieves data from user input services without considering status, enabling local privilege escalation. Root cause: Cortana’s data handling allows execution of commands with elev...

CVE-2018-8343

CVE-2018-8343 describes a local elevation-of-privilege flaw in the Windows Network Driver Interface Specification (NDIS). The vulnerability arises when ndis.sys does not validate the length of a destination buffer before copying memory, enabling privilege escalation on affected Windows versions (...

CVE-2019-0754

Technical details about CVE-2019-0754 are not publicly provided in the connected documents. The available sources reiterate the general Windows DoS description without specifics on affected components, versions, or fixes. Monitor for updates.

CVE-2019-0890

The connected CNVD entries describe a vulnerability in Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow caused by improper validation of data boundaries during memory operations. This vulnerability affects Windows Jet Database Engine components; attacker-accessible impact co...

CVE-2019-0909

CVE-2019-0909 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to execute arbitrary code with the user’s privileges. Impact is reported as high (C/H/I/A). Remediation...

CVE-2019-0974

CVE-2019-0974 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file, potentially executing arbitrary code on the affected system. The update fixes the issue by co...

CVE-2019-1123

Technical details for CVE-2019-1123 and related DirectWrite remote code execution vulnerabilities are not publicly available in the provided documents; monitor for updates.

CVE-2020-0778

CVE-2020-0778 is described as an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Public metrics show a CVSSv2 base score of 4.6 (Medium) and a CVSSv3 base score of 7.8 (High) with local attack, low complexity, no user interac...

CVE-2020-1031

Technical details for CVE-2020-1031 are not publicly provided in the Connected Documents. The materials reference Windows DHCP and patches in general but do not specify affected products/versions, exploit details, or remediation for this CVE. Monitor for updates.

CVE-2020-1202

CVE-2020-1202 affects Diagnostics Hub Standard Collector or Visual Studio Standard Collector. Root cause: improper handling of memory objects leading to elevation of privilege. Impact: local elevation of privileges if exploited; CVSS data in the Initial document indicates HIGH severity. Exploitat...

CVE-2020-1522

CVE-2020-1522 is a Windows Elevation of Privilege vulnerability in the Windows Speech Runtime caused by improper memory handling. The human-authored description states that an attacker who already has code execution on the victim machine could run a crafted application to elevate privileges. Micr...

CVE-2020-1579

CVE-2020-1579 affects the Windows Function Discovery SSDP Provider. Root cause: improper memory handling leading to privilege elevation. Exploitation requires local code execution to run a crafted app and elevate rights. The security update fixes memory handling in the provider; no further exploi...

CVE-2020-1584

CVE-2020-1584 is a Windows elevation-of-privilege vulnerability in how the dnsrslvr.dll handles in-memory objects. The underlying issue involves heap allocations and object copying in several DNS record copy paths (e.g., SigRecordCopy, NsecRecordCopy, KeyRecordCopy, OptRecordCopy, DhcidRecordCopy...

CVE-2020-16959

CVE-2020-16959 is a Windows Back- up Engine elevation-of-privilege vulnerability. The connected records confirm the affected component as the Windows Backup Engine and describe a local elevation of privilege with low attack complexity and no user interaction required, yielding high impact to conf...

CVE-2021-24088

CVE-2021-24088 is a Windows Local Spooler RCE vulnerability. The issue stems from a bug in EnumJobsInLocalQueue where an integer overflow allows a crafted buffer to overwrite metadata and adjacent heap allocations; this can enable arbitrary data writes and potential code execution. Affected compo...

CVE-2021-28357

CVE-2021-28357 is a Windows RPC Runtime Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.8 (network, low privileges required, no user interaction) with HIGH impact to confidentiality, integrity, and availability. The vulnerability affects the Windows RPC Runtime and is addressed ...

CVE-2021-33759

Technical details about CVE-2021-33759 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft MSRC, and CNVD/NCSC sources for affected components, impact, and fixes.

CVE-2022-21981

Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.

CVE-2022-30140

Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2022-41102

Technical details for CVE-2022-41102 are not provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor official sources for updates.

CVE-2016-0150

CVE-2016-0150 describes a Denial of Service in Microsoft Windows HTTP.sys (HTTP 2.0 stack). A remote, unauthenticated attacker can send specially crafted HTTP/2 requests to Windows 10 Gold and 1511 to cause the system to become unresponsive. Connected advisories (MS16-049) document the fix as a s...

CVE-2017-0182

The connected Nessus plugin confirms a Hyper-V Denial of Service issue tied to CVE-2017-0182 family: a DoS affecting Microsoft Windows Hyper-V when input from a privileged guest OS is not properly validated, potentially crashing the host. Affected platforms include Windows client/server variants ...

CVE-2018-0809

CVE-2018-0809 affects the Windows kernel on Windows 10 (versions 1703 and 1709) and Windows Server 1709. It is an elevation of privilege vulnerability caused by the kernel’s handling of objects in memory. A local attacker could exploit this to execute code in kernel mode with elevated privileges....