CVE-2021-34487

Technical details for CVE-2021-34487 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and CVE records; no concrete affected products, root cause, or fixes are described here.

CVE-2019-0704

CVE-2019-0703 is an information-disclosure vulnerability in Windows SMB Server handling of certain requests. Connected sources confirm the issue as a Windows SMB Information Disclosure vulnerability distinct from CVE-2019-0704 and CVE-2019-0821. FireEye Mandiant Threat Intelligence notes that CVE...

CVE-2021-26432

CVE-2021-26432 is a remote code execution vulnerability in the Windows Services for NFS ONCRPC XDR Driver. The issue allows an attacker to execute arbitrary code on a vulnerable system via the ONCRPC XDR Driver component, with high impact (C/H/I/A = HIGH) and network access (CVSS scores reflect r...

CVE-2017-0214

CVE-2017-0213 is a Windows Privilege Escalation flaw in the COM Aggregate Marshaler. Reports confirm it enables local elevation of privilege when a specially crafted app is run, affecting Windows client and server SKUs listed in the CVE description. Several connected sources document exploitation...

CVE-2019-1339

Technical details for CVE-2019-1339 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-1274

Technical details for CVE-2020-1274 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories and EUVD entries for any new information.

CVE-2018-8401

CVE-2018-8401 describes a local privilege escalation in the DirectX Graphics Kernel driver (DXGKRNL) for Windows. The root cause is improper handling of objects in memory within DXGKRNL, allowing an attacker with local access to elevate privileges. Affected products include Windows Server 2016, W...

CVE-2020-1275

Technical details for CVE-2020-1275 are not publicly available in the provided documents. Monitor for updates from official advisories; no confirmed affected products, impact, or remediation are stated here.

CVE-2020-16916

CVE-2020-16916 is a Windows elevation-of-privilege flaw in the COM server object creation path. The root cause is Windows handling of COM object creation, allowing an attacker who can log on to run a specially crafted application that exploits the vulnerability to gain elevated code execution. Mi...

CVE-2016-0143

CVE-2016-0143 is a Windows Win32k Privilege Escalation vulnerability in the kernel-mode driver (win32k.sys) affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, 2012, RT 8.1, Windows 10 Gold/1511). Root cause: improper handling of objects in memory within the Wi...

CVE-2022-30221

CVE-2022-30221 is a Windows Graphics Component remote code execution vulnerability. The cited sources indicate exploitation requires a user to connect to a malicious RDP server, enabling code execution in the context of the targeted user. Remediation is via Microsoft’s July 2022 security updates ...

CVE-2019-1073

Technical details for CVE-2019-1073 are not publicly available in the provided Connected documents. Monitor for updates; no product/vendor/version/impact/fix information is present in these sources.

CVE-2020-1237

Technical details for CVE-2020-1237 are not publicly available in the provided documents. The connected EUVD entries do not supply product/version/impact specifics. Monitor for updates.

CVE-2022-30138

Technical details for CVE-2022-30138 are not provided in the supplied documents. The records mention Windows Print Spooler elevation of privilege but do not specify affected products/versions, root cause, exploit information, or fixes. Monitor for updates.

CVE-2017-0025

Technical details such as affected products, vulnerable components, impact, and remediation for CVE-2017-0025 are not provided in the connected documents; no publicly disclosed specifics are included here. Monitor for updates.

CVE-2020-1276

Technical details for CVE-2020-1276 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2021-43883

CVE-2021-43883 is a Windows Installer Elevation of Privilege vulnerability. The Windows Installer component can be abused when a user is tricked into installing a malicious package, enabling an attacker to gain elevated privileges on the system. The CVSS details in the provided data show a local ...

CVE-2016-3308

Technical details for CVE-2016-3308 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1316

CVE-2020-1316 is a Windows kernel elevation of privilege vulnerability where the Windows kernel fails to properly handle objects in memory. This can allow a local attacker with low privileges to achieve high integrity/critical impact (confidentiality, integrity, and availability), as indicated by...

CVE-2022-21849

CVE-2022-21849 is a remote code execution vulnerability in Windows IKE Extension. The IDS/attack surface centers on the IPSec/IKE service; a remote attacker could trigger multiple vulnerabilities when the IPSec service is running, without authentication. Public details in connected documents iden...

CVE-2019-1303

CVE-2019-1303 is a Windows AppX Deployment Server privilege-escalation vulnerability. The issue arises when the server improperly handles junctions, enabling a local attacker to gain elevated privileges after executing on the target system. Connected sources consistently refer to the same root ca...

CVE-2022-34691

CVE-2022-34691 is referenced in connected Citrix and Windows update documentation. Citrix CTX479236 summarizes FAS information tying CVE-2022-34691 to Microsoft KB KB5014754 and related CVEs, describing SSO/Kerberos-related behaviors with VDA and smart card authentication failures when FAS is inv...

CVE-2018-8400

CVE-2018-8400/8405/8406 describe privilege-escalation flaws in the DirectX Graphics Kernel (DXGKRNL) driver causing elevation of privilege by improper handling of objects in memory. Affected software scope includes Windows Server and Windows 10 variants (per the CVE records). The root cause, as s...

CVE-2020-1262

Technical details for CVE-2020-1262 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2020-1246

Technical details for CVE-2020-1246 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.

CVE-2022-30160

CVE-2022-30160 is a Windows ALPC (Advanced Local Procedure Call) Elevation of Privilege vulnerability. The connected documents identify the issue as a local, low-complexity privilege escalation with no required user interaction and high impact on confidentiality, integrity, and availability (per ...

CVE-2017-0047

Technical details about CVE-2017-0047 are not provided in the connected documents. Public information in the Initial Description is limited to an overview; monitor for updates.

CVE-2019-1278

Technical details about CVE-2019-1278 (affected product, vulnerable component, impact, exploitability) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1342

Technical details for CVE-2019-1342 are not publicly provided in the supplied documents. Please monitor official advisories or CVE feeds for updates on affected products, impact, and remediation.

CVE-2021-26868

Technical details about CVE-2021-26868 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-24459

CVE-2022-24459 is an Elevation of Privilege in Windows Fax and Scan service. Connected sources note a PoC exploit exists and that Microsoft patched vulnerabilities in March 2022 Patch Tuesday, but no concrete product/version/fix details are provided in the documents.

CVE-2017-8563

CVE-2017-8563 is an elevation-of-privilege vulnerability in Windows where Kerberos can fall back to NTLM as the default authentication protocol. The issue is exposed via LDAP/NTLM negotiation and can enable domain‑level credential abuse if NTLM relay occurs. Public documentation notes that follow...

CVE-2019-1222

CVE-2019-1222 is a remote code execution vulnerability in Microsoft Windows Remote Desktop Services (RDS). An unauthenticated attacker can connect via RDP, send specially crafted requests, and execute arbitrary code on the target system. Exploitation is pre-authentication and requires no user int...

CVE-2020-1273

Technical details for CVE-2020-1273 are not provided in the connected documents. Monitor official advisories for updates; no validated exploit, affected products, or remediation information are included here.

CVE-2020-1301

CVE-2020-1301 is a SMBv1 remote code execution vulnerability that requires authentication on the target network. Publicly available guidance and advisories confirm SMBv1 handling flaws can allow code execution when a specially crafted packet is processed by an SMBv1 server. Connected advisories (...

CVE-2020-1266

CVE-2020-1266 is a Windows kernel elevation-of-privilege vulnerability. The description attributes the issue to improper handling of objects in memory, enabling local privilege escalation with high impact (local access, minimal authentication). The provided metrics show a high base score (CVSS v3...

CVE-2022-21974

CVE-2022-21974 corresponds to Microsoft Roaming Security Rights Management Services remote code execution. Connected sources corroborate a user-assisted scenario where exploitation involves opening a malicious RTF file in Microsoft Word, implying phishing-like delivery. The AVLEONOV post explicit...

CVE-2019-1320

Technical details for CVE-2019-1320 are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-24533

Technical details about CVE-2022-24533 (affected products, components, root cause, versions, fixes) are not provided in the connected documents. The available materials only reiterate a Remote Desktop Protocol RCE without specifics. Monitor for updates.

CVE-2019-1340

Technical details for CVE-2019-1340 are not provided in the connected documents. Public details (affected product/version/impact) are not available here. Monitor for updates from official advisories and CVE records.

CVE-2022-24525

CVE-2022-24525 is a Windows Update Stack Elevation of Privilege vulnerability affecting the Windows Update Stack. The available connected documents confirm a local, privilege-escalation flaw with a CVSSv3.1 base score of 7.0 (High) and Local attack vector, Independent of user interaction. Publicl...

CVE-2022-24507

CVE-2022-24507 concerns the Windows Ancillary Function Driver for WinSock, describing an elevation of privilege vulnerability. The connected records indicate the issue is tied to WinSock’s ancillary driver and classify the vulnerability with a high-impact profile (CVSS 3.1: LOCAL, LOW privileges ...

CVE-2020-0686

The CVE-2020-0686 entry describes an elevation-of-privilege vulnerability in Windows Installer when MSI packages process symbolic links. Affected component: Windows Installer in Windows. Root cause: improper handling of symbolic links during MSI processing leading to privilege escalation. Impact:...

CVE-2022-22038

CVE-2022-22038 is a Remote Procedure Call Runtime Remote Code Execution vulnerability. Connected sources note a POC exploit exists and that exploitation would require multiple attempts with high attack complexity, potentially over a network. The available documents do not specify affected product...

CVE-2020-1143

Technical details about CVE-2020-1143 are not provided in the connected documents; monitor for updates and new disclosures before drawing conclusions.

CVE-2020-1264

Technical details for CVE-2020-1264 are not publicly available in the provided documents; no affected products, impact, exploit information, or remediation are specified here. Monitor for updates.

CVE-2020-1300

CVE-2020-1300 is a Windows remote code execution vulnerability that arises when Cabinet (.cab) files are not handled securely. The vulnerability can be exploited by convincing a user to open a specially crafted CAB file or by spoofing a network printer and tricking the user into installing a mali...

CVE-2022-23281

CVE-2022-23281 corresponds to a Windows Common Log File System Driver information-disclosure vulnerability. Connected sources describe it as an information leak in the CLFS driver, with CNVD noting “excessive data output” as the underlying issue. Impact is a confidentiality risk; CVSS metrics in ...

CVE-2019-0887

CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...

CVE-2022-37981

CVE-2022-37981 is a DoS vulnerability in Windows Event Logging Service. The CNVD entry states the denial arises from a failure to properly handle incoming error messages, enabling an attacker to cause DoS on the affected Windows component. Affected product is Windows Event Logging Service; impact...