CVE-2018-8489

The CVE-2018-8489 entry describes a Windows Hyper-V remote code execution vulnerability. The root cause is that Hyper-V on a host server fails to properly validate input from an authenticated user on a guest OS, allowing arbitrary code execution on the host. Affected platforms include multiple Wi...

CVE-2019-0837

CVE-2019-0837 is a DirectX information-disclosure vulnerability in Windows where DirectX improperly handles objects in memory (root cause: memory handling error). The vulnerability could allow an information leak if exploited, with a reported CVSSv3 base score of 5.5 (Local, Low/Low for exploitab...

CVE-2019-0898

Affected software: Windows Jet Database Engine (in Microsoft Windows and Windows Server). Vulnerability type & cause: Multiple connected CNVD entries describe a buffer overflow in the Jet Database Engine, occurring when memory operations do not properly validate data boundaries, leading to incorr...

CVE-2019-0974

CVE-2019-0974 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file, potentially executing arbitrary code on the affected system. The update fixes the issue by co...

CVE-2019-1484

CVE-2019-1484 describes a Windows OLE remote code execution vulnerability caused by improper validation of user input. Red Hat entry mirrors this description. OpenVAS items reference missing Microsoft security updates (e.g., KB4530684/68/89/71/73/and others) as remediation, implying patching via ...

CVE-2020-0707

CVE-2020-0707 is a Windows IME privilege-elevation vulnerability arising from improper memory handling in Windows IME. The issue enables local privilege escalation when an attacker gains execution on the target system and runs a specially crafted application. Connected sources corroborate the Win...

CVE-2020-0724

Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.

CVE-2020-1135

CVE-2020-1135 is a local elevation-of-privilege flaw in the Windows Graphics Component. A specially crafted app could cause the component to mishandle memory objects, allowing an attacker to execute code with elevated privileges on a targeted system. Microsoft documents this as an EoP in the Grap...

CVE-2020-1552

CVE-2020-1552 (Windows Work Folder Service Elevation of Privilege) Affects Windows Work Folders Service. The vulnerability arises because the service improperly handles file operations, allowing an attacker to run code with elevated privileges by executing a specially crafted application on the v...

CVE-2020-16889

CVE-2020-16889 describes an information disclosure vulnerability in Windows KernelStream where in-memory objects are not handled correctly. Exploitation requires an authenticated user to log on and run a crafted application; it does not directly enable code execution or privilege escalation, but ...

CVE-2021-1665

Technical details for CVE-2021-1665 are not provided in the connected documents. The provided sources reference multiple CVEs and general vulnerability contexts but do not disclose affected products, root cause, impact, or remediation for this specific CVE. Monitor for updates.

CVE-2021-1706

Technical details for CVE-2021-1706 are not publicly available in the provided documents. No affected products, impact, or remediation are specified here. Monitor for updates from authoritative sources.

CVE-2021-25195

CVE-2021-25195 is described as a Windows PKU2U Elevation of Privilege vulnerability. The provided data include CVSSv3.1 metrics indicating a LOCAL attack with LOW privileges required, NO user interaction, and HIGH impact on confidentiality, integrity and availability (base score 7.8). The initial...

CVE-2021-26867

CVE-2021-26867 is a Windows Hyper-V remote code execution vulnerability. Public sources indicate the issue affects Hyper-V components under Windows Server/Windows client environments and is described with high/critical impact. The NCSC dossier explicitly notes that exploitation is possible for Hy...

CVE-2021-28343

Technical details for CVE-2021-28343 are not provided in the supplied documents. Public information such as affected product/version, root cause, impact, or remediation is not present here; monitor for updates.

CVE-2021-38637

CVE-2021-38637 corresponds to a Windows Storage Information Disclosure vulnerability. The linked documents show mitigations via Microsoft security updates KB5005565, KB5005566, KB5005568, with advisories from MSRC. CVSS data indicate a MEDIUM base score (CVSS 3.1: 5.5) with LOCAL attack vector an...

CVE-2021-40466

Technical details about CVE-2021-40466 (affected product/component, root cause, impact, and fixes) are not provided in the connected documents; available sources only state the vulnerability at a high level. Monitor for updates.

CVE-2021-41339

Technical details about CVE-2021-41339 are not publicly available in the provided documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2022-21903

Technical details about CVE-2022-21903 are not publicly provided in the supplied documents; no affected products, impact, nor remediation specifics are given here. Monitor for updates from official advisories.

CVE-2022-21904

Technical details for CVE-2022-21904 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-21994

CVE-2022-21994 is a Windows elevation-of-privilege issue in the DWM Core Library that permits local escalation with low attack complexity and no user interaction (per CVSS data in the initial). Connected documents corroborate a Windows DWM Core Library vulnerability and show Microsoft remediation...

CVE-2022-26826

Technical details for CVE-2022-26826 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories to obtain affected products, impact, and remediation information.

CVE-2022-34730

Technical details about CVE-2022-34730 are not publicly provided in the supplied connected documents. No product/version/impact/fix details are present here; monitor for updates from official advisories.

CVE-2022-37957

Technical details about CVE-2022-37957 are not publicly provided in the supplied documents. The connected items reference the vulnerability generally as a Windows Kernel Elevation of Privilege issue but do not include affected product versions, root cause, CVSS specifics beyond the CVSS score in ...

CVE-2022-41092

Technical details about CVE-2022-41092 are not publicly provided in the supplied documents; no affected versions or fixes are specified here. Monitor for updates.

CVE-2022-44675

Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2016-0168

CVE-2016-0168 is a Windows GDI information-disclosure vulnerability affecting multiple Windows versions. Connected data confirms exploitation activity (Exploits listed on Exploit-DB and sightings in CIRCL) but provides no vendor-specific patch or remediation details in the supplied documents. No ...

CVE-2016-3236

CVE-2016-3236 affects the WPAD proxy discovery implementation in multiple Windows editions (Vista through Windows 10). The weakness arises when WPAD proxy discovery is mishandled, which could allow a remote attacker to redirect network traffic via unspecified vectors, effectively an elevation of ...

CVE-2017-0099

CVE-2017-0099 pertains to Hyper-V in Microsoft Windows (lists affected: Windows Vista SP2, Server 2008 SP2/2008 R2, Windows 7 SP1, Windows 8.1, Server 2012 Gold/R2, Windows 10 Gold, 1511, 1607, Server 2016). The issue allows guest OS users, running as VMs, to cause a denial-of-service via a craft...

CVE-2017-11779

CVE-2017-11779 concerns a vulnerability in the Windows DNSAPI.dll within the DNSAPI component of Microsoft Windows. A heap-based buffer overflow in the handling/validation of NSEC3 records (triggered by malicious DNS responses) could allow a remote attacker to execute arbitrary code in the contex...

CVE-2018-0757

Technical details about CVE-2018-0757 are not publicly available in the provided documents. Connected sources discuss malware and general Windows kernel disclosures but do not specify affected products, versions, or fixes. Monitor for official updates.

CVE-2019-0723

Summary: CVE-2019-0723 is a denial-of-service vulnerability affecting Microsoft Hyper-V, specifically the Hyper-V Network Switch on a host server. The issue arises when input from a privileged user inside a guest OS is not properly validated, enabling an attacker who already has a privileged gues...

CVE-2019-1067

CVE-2019-1067 is described as a Windows kernel elevation of privilege vulnerability where the kernel fails to properly handle objects in memory. The provided connected documents do not specify a product/vendor/version, root cause details beyond the general memory handling issue, or a concrete fix...

CVE-2019-1124

Technical details for CVE-2019-1124 are not publicly provided in the supplied documents; no affected products, versions, exploit information, or fixes are specified. Monitor for updates in connected sources.

CVE-2020-0822

CVE-2020-0822 is an Elevation of Privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. Evidence from security feeds (e.g., Tenable plugin for KB4541506/KB4541504) confirms the issue is addressed by Microsoft security updates that fix how th...

CVE-2020-1000

Technical details for CVE-2020-1000 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2020-1175

CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...

CVE-2020-1473

CVE-2020-1473 : A remote code execution vulnerability in the Windows Jet Database Engine arises from improper handling of objects in memory. An attacker could trigger arbitrary code execution by enticing a user to open a specially crafted file. Mitigation is provided by the update that fixes the ...

CVE-2020-1528

CVE-2020-1528 concerns an elevation of privilege in Windows related to the Windows Radio Manager API improperly handling memory. The vulnerability requires an attacker to gain code execution on the victim and then run a crafted application to elevate privileges; Microsoft’s security update fixes ...

CVE-2020-1538

Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2021-1701

Technical details for CVE-2021-1701 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, root cause, exploit, or fixes are included here.

CVE-2021-1704

CVE-2021-1704 is documented as a Windows Hyper-V Elevation of Privilege vulnerability. The connected OpenVAS entries (KB4598** series) list CVE-2021-1704 among affected Windows vulnerabilities, indicating it is addressed across multiple Microsoft security updates. The provided documents do not in...

CVE-2021-28331

CVE-2021-28331 is described in connected CNVD as a Remote Procedure Call Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server, enabling remote code execution via RPC Runtime. The provided documents do not specify affected product versions, root cause specifics, e...

CVE-2021-28339

CVE-2021-28339 is a Remote Procedure Call Runtime remote code execution vulnerability affecting Windows components. The connected scans show the CVE referenced across multiple Windows monthly security updates (KB5001330/1335/1337/1340/1342/1347) and in Nessus/OpenVAS feeds, indicating it is being...

CVE-2021-40476

CVE-2021-40476 is a Windows AppContainer Elevation of Privilege vulnerability. The provided documents identify the impacted component as Windows AppContainer, with CVSS v3.1 base score 7.8 (LOCAL, LOW ATTACK COMPLEXITY, NO PRIVILEGES REQUIRED, UI REQUIRED, HIGH impact to C/I/A) and CVSS2 metrics ...

CVE-2021-41330

CVE-2021-41330 is documented in the connected sources as a Windows Codecs Library vulnerability that enables executing random code (high severity, CVSS v3.1 base score 7.8). Microsoft’s advisories reference related fixes as part of the Windows update stack; the vulnerability is treated as a code-...

CVE-2022-21892

CVE-2022-21892 concerns Windows Resilient File System (ReFS). The initial entry identifies a Remote Code Execution Vulnerability in ReFS, with CVSS metrics showing a base score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C) per NVD and a Microsoft 3.1 vector (CVSS:3.1) indicating physical access, low attack...

CVE-2022-23290

Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.

CVE-2022-34732

CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....