CVE-2022-21959

Technical details about CVE-2022-21959 are not publicly provided in the supplied documents. Monitor for updates from NVD and vendor advisories.

CVE-2022-21981

Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.

CVE-2022-35840

Technical details about CVE-2022-35840 are not publicly available in the provided documents. Monitor for updates from the cited sources to learn affected products, impact, and remediation.

CVE-2022-38038

CVE-2022-38038 is a Windows kernel registry vulnerability caused by a 16-bit integer overflow during dynamic buffer length calculations in hive loading, leading to hive-based memory corruption and local privilege escalation. The issue is tied to regf/hive loading paths and is grouped with other r...

CVE-2022-41088

Technical details for CVE-2022-41088 are not provided in the connected documents. No affected product/component/version, root-cause, impact, or remediation details are given here; monitor official sources for updates.

CVE-2022-41093

Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.

CVE-2022-41102

Technical details for CVE-2022-41102 are not provided in the supplied documents. No affected products, versions, root cause, or remediation are specified here. Monitor official sources for updates.

CVE-2023-21801

CVE-2023-21801 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. Connected documents confirm the vulnerability exists in these printer drivers but do not provide concrete details on affected product versions, root cause specifics...

CVE-2016-0150

CVE-2016-0150 describes a Denial of Service in Microsoft Windows HTTP.sys (HTTP 2.0 stack). A remote, unauthenticated attacker can send specially crafted HTTP/2 requests to Windows 10 Gold and 1511 to cause the system to become unresponsive. Connected advisories (MS16-049) document the fix as a s...

CVE-2016-0174

CVE-2016-0174 describes a local privilege escalation in Windows kernel-mode drivers (Win32k) affecting multiple Windows family versions (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, and Windows 10 1511/Gold). The vulnerability allows a locally authenticated attacker to gain hig...

CVE-2017-0062

CVE-2017-0062 affects the Graphics Device Interface (GDI) in multiple Windows versions (Vista SP2 through Windows 10/1607). It enables local attackers to disclose sensitive process-memory information via a crafted web site; impact is information disclosure. Connected CIRCL entries indicate the vu...

CVE-2018-0809

CVE-2018-0809 affects the Windows kernel on Windows 10 (versions 1703 and 1709) and Windows Server 1709. It is an elevation of privilege vulnerability caused by the kernel’s handling of objects in memory. A local attacker could exploit this to execute code in kernel mode with elevated privileges....

CVE-2018-0846

The connected documents confirm CVE-2018-0846 affects the Windows Common Log File System (CLFS) driver and describes an elevation-of-privilege flaw caused by improper handling of objects in memory. Affected products include various Windows client/server builds (Windows 7 SP1, Windows 8.1/RT 8.1, ...

CVE-2018-0880

CVE-2018-0880 affects Windows Desktop Bridge by improper handling of the virtual registry, enabling Privilege Escalation on Windows 10 v1607/v1703/v1709 and corresponding Server SKUs. Connected sources document public PoCs and indicate the fix (MSRC case 42755) did not cover all variants, with re...

CVE-2019-0573

CVE-2019-0573 describes a local elevation-of-privilege vulnerability in the Windows Data Sharing Service. Connected sources indicate affected OS family includes Windows 10/Server 2016/2019, with a local attacker able to exploit and gain elevated privileges. The CVE entry links to exploit-db explo...

CVE-2019-0974

CVE-2019-0974 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file, potentially executing arbitrary code on the affected system. The update fixes the issue by co...

CVE-2020-0782

Technical details for CVE-2020-0782 are not publicly available in the provided documents. The initial description gives a high-level remediation but no product/version/root-cause or exploit specifics. Monitor for updates from official advisories.

CVE-2020-0959

CVE-2020-0959 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects in the Jet DB Engine. The issue can be triggered by processing crafted files that lead to arbitrary code execution with the attacker’s context. Public sources (CNVD fam...

CVE-2020-1579

CVE-2020-1579 affects the Windows Function Discovery SSDP Provider. Root cause: improper memory handling leading to privilege elevation. Exploitation requires local code execution to run a crafted app and elevate rights. The security update fixes memory handling in the provider; no further exploi...

CVE-2020-16963

CVE-2020-16963 is a Windows Backup Engine elevation-of-privilege vulnerability with a CVSSv3 base score of 7.8 (LOCAL, LOW attack complexity, Privileges Required: LOW, NONE user interaction). The provided documents do not include explicit technical details on the root cause or affected components...

CVE-2020-16975

CVE-2020-16975 describes an elevation of privilege vulnerability in the Windows Backup Service caused by improper handling of file operations. An attacker who already has code execution on the victim system could exploit this by running a crafted application to elevate privileges. Microsoft’s sec...

CVE-2021-27095

Technical details about CVE-2021-27095 are not publicly provided in the connected documents. The materials reference the vulnerability only as Windows Media Video Decoder Remote Code Execution without specific affected products, versions, or fixes.

CVE-2021-28358

Technical details for CVE-2021-28358 are not provided in the given documents. Monitoring updates is recommended as no affected products, root cause, impact, or remediation are stated here.

CVE-2021-31954

CVE-2021-31954 is a Windows CLFS driver elevation-of-privilege vulnerability. The affected component is the Windows Common Log File System Driver, and the CVSS vectors indicate LOCAL attack vector with LOW attack complexity and privileges required (LOW), no user interaction, and total impact on c...

CVE-2021-31970

CVE-2021-31970 is a Windows TCP/IP Driver Security Feature Bypass vulnerability. Affected software is Windows, with the issue residing in the TCP/IP driver as described by the NVD entry. Exploitation would be local, requiring low privileges, with no user interaction, and could impact availability...

CVE-2022-21921

CVE-2022-21921 is a Windows Defender Credential Guard security feature bypass. Connected documents identify Windows Defender as affected, with the issue categorized as a security-measure bypass (CVSS/Impact cited in sources such as Microsoft KBs and security advisories). The root cause and exact ...

CVE-2022-30198

CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...

CVE-2022-35834

CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...

CVE-2022-37975

Technical details about CVE-2022-37975 (root cause, affected products/versions, exploit info, or explicit fix) are not provided in the connected documents. Monitor for official updates from Microsoft and CVE advisories for concrete remediation guidance.

CVE-2022-37992

Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.

CVE-2022-41092

Technical details about CVE-2022-41092 are not publicly provided in the supplied documents; no affected versions or fixes are specified here. Monitor for updates.

CVE-2022-44697

CVE-2022-44697 corresponds to a Windows Graphics Component Elevation of Privilege vulnerability. The CVE entry indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in HIGH impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). ...

CVE-2016-0168

CVE-2016-0168 is a Windows GDI information-disclosure vulnerability affecting multiple Windows versions. Connected data confirms exploitation activity (Exploits listed on Exploit-DB and sightings in CIRCL) but provides no vendor-specific patch or remediation details in the supplied documents. No ...

CVE-2017-0271

CVE-2017-0271 is an information-disclosure vulnerability in Microsoft Windows SMBv1 server processing. It stems from improper handling of SMBv1 requests, potentially allowing a remote attacker to obtain partial sensitive information from affected Windows systems. Affected products include Windows...

CVE-2017-0279

CVE-2017-0279 corresponds to a remote code execution vulnerability in the Microsoft Windows SMB v1 server. The available connected and initial documents indicate: affected component is the SMBv1 server (Server Message Block 1.0) on multiple Windows platforms (e.g., Windows 7, Windows 8.1, Windows...

CVE-2018-0895

Technical details for CVE-2018-0895 are not provided in the connected documents. Public information in this dataset does not specify affected products/versions/impact. Monitor for updates.

CVE-2018-1036

The CVE-2018-1036 entry describes an NTFS elevation of privilege in Windows where access checks are improperly performed. Affected products include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions such as 2008, 2012, 2016, and 2012 R2 variants). The vulnerability is l...

CVE-2018-8205

CVE-2018-8205 is a denial-of-service vulnerability: Windows improperly handles objects in memory, leading to a crash/DoS. Affected products include Windows 7, Windows 8.1, Windows 10 (and corresponding server editions such as Windows Server 2008 R2, 2012, 2012 R2, 2016). The Initial and NVD descr...

CVE-2018-8308

CVE-2018-8308 is a Windows kernel elevation of privilege vulnerability caused by improper handling of memory objects. The issue enables a local attacker to escalate privileges by exploiting kernel memory handling weaknesses. Affected platforms include Windows 7, Windows Server 2008/2012 (and R2),...

CVE-2018-8438

CVE-2018-8438 is a denial-of-service vulnerability in Microsoft Hyper-V Network Switch. The issue occurs when the host fails to properly validate input from a privileged user on a guest OS, potentially impacting availability. Affected products include Windows Server 2012 R2, Windows RT 8.1, Windo...

CVE-2019-0693

CVE-2019-0693 is an elevation-of-privilege vulnerability in the Windows Subsystem for Linux caused by an integer overflow. It is a local attack with low complexity and no user interaction, potentially leading to partial confidentiality, integrity, and full availability impact as per CVSS metrics....

CVE-2019-0720

The CVE-2019-0720 entry concerns Windows Hyper-V Network Switch on a host server. The vulnerability arises when the Hyper-V switch fails to validate input from an authenticated user on a guest OS, allowing a specially crafted guest app to trigger the host OS to execute arbitrary code. The impact ...

CVE-2019-0837

CVE-2019-0837 is a DirectX information-disclosure vulnerability in Windows where DirectX improperly handles objects in memory (root cause: memory handling error). The vulnerability could allow an information leak if exploited, with a reported CVSSv3 base score of 5.5 (Local, Low/Low for exploitab...

CVE-2019-0894

CVE-2019-0894 concerns the Windows Jet Database Engine remote code execution caused by improper in-memory handling (memory boundaries) in Jet DB. Connected CNVD entries describe a related class of vulnerabilities in the Windows Jet Database Engine: buffer overflow/heap overflow arising when memor...

CVE-2019-0909

CVE-2019-0909 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to execute arbitrary code with the user’s privileges. Impact is reported as high (C/H/I/A). Remediation...

CVE-2019-1484

CVE-2019-1484 describes a Windows OLE remote code execution vulnerability caused by improper validation of user input. Red Hat entry mirrors this description. OpenVAS items reference missing Microsoft security updates (e.g., KB4530684/68/89/71/73/and others) as remediation, implying patching via ...

CVE-2020-0889

The CVE-2020-0889 vulnerability affects the Windows Jet Database Engine in Microsoft Windows/Windows Server, arising from improper handling of memory objects and enabling remote code execution. The connected KB4549951 notes a security update (KB4549951) for Windows 10 OS builds 18362.778 and 1836...

CVE-2020-0985

CVE-2020-0985 is a Windows vulnerability described as an Elevation of Privilege in the Windows Update Stack, caused by improper handling of objects in memory. The entry confirms it is a distinct CVE from CVE-2020-0996 and assigns a Local, Low-Privilege, No-Interaction attack model with high impac...

CVE-2020-1484

CVE-2020-1484 is an elevation-of-privilege vulnerability in the Windows Work Folders Service caused by improper handling of memory. An attacker would need to gain execution on the victim system, then run a crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-1539

CVE-2020-1539 is an Elevation of Privilege vulnerability in Windows Backup Engine caused by incorrect memory handling. An attacker who can execute code locally could exploit this by running a crafted program to elevate privileges. Microsoft’s security update addresses the issue by correcting how ...