CVE-2020-16914

CVE-2020-16914 is an information-disclosure in Windows GDI+ caused by how GDI+ handles memory addresses. Exploitation requires a logged-on attacker with a crafted app; remediation is a Microsoft security update addressing memory handling in GDI+.

CVE-2020-17088

CVE-2020-17088 is a Windows elevation-of-privilege vulnerability in the Common Log File System (CLFS) driver. The connected CNVD entry explicitly attributes an EoP issue to the CLFS component in Microsoft Windows/Windows Server, indicating a local attacker could exploit it to compromise confident...

CVE-2020-17134

CVE-2020-17134 concerns the Windows Cloud Files Mini Filter Driver (cldflt) and was discussed in Project Zero material describing file-system filter drivers. The connected sources confirm this as a Windows mini-filter elevation of privilege issue affecting cloud/file-system filter drivers and not...

CVE-2021-1709

Technical details (affected component, root cause, impact, or fixes) for CVE-2021-1709 are not provided in the supplied documents. Monitor for further updates from official advisories and vendors.

CVE-2021-28339

CVE-2021-28339 is a Remote Procedure Call Runtime remote code execution vulnerability affecting Windows components. The connected scans show the CVE referenced across multiple Windows monthly security updates (KB5001330/1335/1337/1340/1342/1347) and in Nessus/OpenVAS feeds, indicating it is being...

CVE-2021-28357

CVE-2021-28357 is a Windows RPC Runtime Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.8 (network, low privileges required, no user interaction) with HIGH impact to confidentiality, integrity, and availability. The vulnerability affects the Windows RPC Runtime and is addressed ...

CVE-2021-34513

CVE-2021-34513 corresponds to a Microsoft Windows Storage Spaces Controller elevation of privilege vulnerability. Connected sources confirm the issue resides in the Storage Spaces Controller component and can yield total/confidentiality/privilege impact as described by CVSS metrics (LOCAL, LOW at...

CVE-2021-36964

Technical details for CVE-2021-36964 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-38624

Technical details about CVE-2021-38624 are not provided in the connected documents. Available records do not specify affected products/versions or fixes beyond the vulnerability title. Monitor for updates.

CVE-2021-40443

Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2021-41330

CVE-2021-41330 is documented in the connected sources as a Windows Codecs Library vulnerability that enables executing random code (high severity, CVSS v3.1 base score 7.8). Microsoft’s advisories reference related fixes as part of the Windows update stack; the vulnerability is treated as a code-...

CVE-2022-21903

Technical details about CVE-2022-21903 are not publicly provided in the supplied documents; no affected products, impact, nor remediation specifics are given here. Monitor for updates from official advisories.

CVE-2022-21918

Technical details about CVE-2022-21918 are not publicly provided in the connected documents. Monitor for updates and rely on official advisories for affected products, versions, and remediation.

CVE-2022-26826

Technical details for CVE-2022-26826 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation information.

CVE-2022-30140

Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2022-34731

CVE-2022-34731 affects the Microsoft WDAC OLE DB provider for SQL Server and is categorized as a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction required. The connected documents identify the affe...

CVE-2022-37995

CVE-2022-37995 is a Windows Kernel elevation-of-privilege vulnerability. The initial entry notes a local attacker could achieve a high-severity (CVSS 7.8) impact with low attack complexity and no user interaction required. Connected documents list this CVE under Windows Kernel and enumerate fixes...

CVE-2023-21693

Technical details about CVE-2023-21693 are not publicly provided in the supplied connected documents. No specifics on affected products, root cause, or remediation are included here. Monitor for updates from official sources.

CVE-2023-36905

CVE-2023-36905 affects Windows Wireless Wide Area Network Service (WwanSvc). The NVD entry shows a High-severity information disclosure (CVSS 3.1 base 7.5) with network attack vector and no user interaction; confidentiality impact is High. Connected docs reference Microsoft MSRC/KB guidance but d...

CVE-2017-0014

Public technical details for CVE-2017-0014 are not present in the provided connected documents. The records describe affected products and cross-reference other CVEs, but no concrete exploit vectors, impact specifics, or remediation are disclosed here. Monitor for updates.

CVE-2017-0288

CVE-2017-0288 is a Windows graphics information disclosure vulnerability in the Graphics Device Interface (GDI). The Windows GDI component improperly discloses memory contents, enabling information disclosure on affected systems. Connected advisories confirm this issue affecting multiple Windows ...

CVE-2018-0757

Technical details about CVE-2018-0757 are not publicly available in the provided documents. Connected sources discuss malware and general Windows kernel disclosures but do not specify affected products, versions, or fixes. Monitor for official updates.

CVE-2018-8207

The CVE-2018-8207 entry describes an information disclosure vulnerability in the Windows kernel caused by improper handling of memory objects. Affected products include Windows 7, Windows Server 2008/R2/2012/2012 R2, Windows 8.1, Windows 10 and corresponding server variants. The issue stems from ...

CVE-2018-8208

The CVE-2018-8208 entry describes an elevation-of-privilege vulnerability in Windows Desktop Bridge where the virtual registry is not managed correctly. Affected products include Windows Server 2016 and Windows 10 variants. The root cause is related to Desktop Bridge’s handling of the virtual reg...

CVE-2018-8282

CVE-2018-8282 is a Win32k Elevation of Privilege vulnerability in Windows, caused by the Windows kernel-mode driver failing to properly handle objects in memory. It affects Windows 7, Server 2012 R2, RT 8.1, Server 2008/2012, 8.1, Server 2016, Server 2008 R2, 10 and Server 10 servers. Impact is l...

CVE-2019-0689

Technical details about CVE-2019-0689 are not publicly provided in the connected documents. The available Initial Description notes an elevation-of-privilege issue in Windows Subsystem for Linux, but no concrete exploit paths, affected versions, or fixes are present here. Monitor for updates.

CVE-2019-0888

CVE-2019-0888 affects Microsoft ActiveX Data Objects (ADO). A use-after-free in memory handling could allow remote code execution when a user visits a crafted website; the vulnerability is addressed by a Microsoft security update that changes how ADO handles objects in memory. A PoC/Exploit exist...

CVE-2019-1285

CVE-2019-1285 is a Windows Win32k elevation of privilege vulnerability caused by improper handling of memory objects in the Win32k component. Affects Windows systems; root cause is in-memory object handling leading to local privilege escalation. CVSS indicators: CVSSv2 base 7.2 (HIGH, LOCAL, no a...

CVE-2019-1318

CVE-2019-1318 corresponds to a TLS spoofing issue affecting Windows where TLS sessions without Extended Master Secret (EMS) can be exploited via man‑in‑the‑middle scenarios. Connected sources describe the vulnerability as a spoofing vulnerability in TLS when EMS is not used, with impact on confid...

CVE-2020-0677

Technical details for CVE-2020-0677 are not provided in the connected documents. The initial entry outlines memory handling in the CNG service but lacks explicit product/version/root-cause data. Monitor official advisories for updates.

CVE-2020-0724

Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.

CVE-2020-1135

CVE-2020-1135 is a local elevation-of-privilege flaw in the Windows Graphics Component. A specially crafted app could cause the component to mishandle memory objects, allowing an attacker to execute code with elevated privileges on a targeted system. Microsoft documents this as an EoP in the Grap...

CVE-2020-1201

CVE-2020-1201 is an elevation-of-privilege vulnerability in Windows Now Playing Session Manager where memory objects are mishandled. Exploitation requires local access (authenticated user) and could allow the attacker to run code with elevated privileges by logging onto the system and executing a...

CVE-2020-1489

CVE-2020-1489 is a Windows elevation-of-privilege vulnerability in the CSC Service that arises from improper memory handling. An attacker who can execute code on the victim system could run a crafted application to elevate privileges. The root cause is memory handling in the Windows CSC Service, ...

CVE-2020-1490

Technical details for CVE-2020-1490 are not provided in the connected documents. Public information about affected products, root cause, impact, or fixes is not included here; monitor for updates from official sources.

CVE-2020-1540

CVE-2020-1540 is an elevation-of-privilege issue in Windows Backup Engine caused by improper memory handling. The CNVD entry explicitly notes a memory-handling root cause and that exploitation would require prior execution on the target. Both the NVD entry and Microsoft advisories indicate that a...

CVE-2020-1560

CVE-2020-1560 is a remote code execution in Microsoft Windows Codecs Library. It arises from how the Windows Codecs Library handles objects in memory, allowing an unauthenticated attacker to craft an image file that, when processed, could execute arbitrary code on the affected system. Public sour...

CVE-2020-16921

CVE-2020-16921 is an information-disclosure vulnerability in the Windows Text Services Framework caused by improper handling of objects in memory. An attacker who can log on to an affected system and open a specially crafted file could read data not intended to be disclosed. The issue does not en...

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2021-1706

Technical details for CVE-2021-1706 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from authoritative sources.

CVE-2021-24093

Technical details about CVE-2021-24093 are not publicly provided in the supplied documents. Sources mention Windows Graphics Components and remote code execution at a high level but do not disclose affected versions, vectors, or fixes. Monitor for updates.

CVE-2021-25195

CVE-2021-25195 is described as a Windows PKU2U Elevation of Privilege vulnerability. The provided data include CVSSv3.1 metrics indicating a LOCAL attack with LOW privileges required, NO user interaction, and HIGH impact on confidentiality, integrity and availability (base score 7.8). The initial...

CVE-2021-33758

CVE-2021-33758 is a Windows Hyper-V Denial of Service vulnerability affecting Hyper-V on Windows Server/Windows systems. The CVSS3 base metrics indicate a NETWORK attack vector, LOW attack complexity, with privileges required: LOW and no user interaction, leading to a high availability impact. Pu...

CVE-2021-34510

CVE-2021-34510 is a Microsoft Windows/Windows Server Elevation of Privilege vulnerability described across multiple sources as affecting the Storage Spaces Controller. Connected documents corroborate that the Storage Spaces Controller component is the affected part and that the vulnerability enab...

CVE-2021-38637

CVE-2021-38637 corresponds to a Windows Storage Information Disclosure vulnerability. The linked documents show mitigations via Microsoft security updates KB5005565, KB5005566, KB5005568, with advisories from MSRC. CVSS data indicate a MEDIUM base score (CVSS 3.1: 5.5) with LOCAL attack vector an...

CVE-2021-40463

CVE-2021-40463 is a Windows NAT Denial of Service vulnerability. The connected OpenVAS entries map this CVE to multiple Microsoft KBs (KB5006667, KB5006669, KB5006670, KB5006674, KB5006675, etc.), indicating it is considered in Windows security update contexts, but the provided documents do not d...

CVE-2022-21834

Technical details for CVE-2022-21834 are not provided in the given documents. Monitor for updates from Microsoft and NVD; no affected products, root cause, impact, or remediation information is available here.

CVE-2022-21924

CVE-2022-21924 is described in the provided documents as a Workstation Service Remote Protocol Security Feature Bypass Vulnerability , with a MEDIUM severity (CVSS v2 base score 5.4 and CVSS v3.1 base score 5.3). The available sources stop short of naming affected products, versions, or root caus...

CVE-2022-23290

Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.

CVE-2022-26792

Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.