CVE-2021-1704

CVE-2021-1704 is documented as a Windows Hyper-V Elevation of Privilege vulnerability. The connected OpenVAS entries (KB4598** series) list CVE-2021-1704 among affected Windows vulnerabilities, indicating it is addressed across multiple Microsoft security updates. The provided documents do not in...

CVE-2021-28331

CVE-2021-28331 is described in connected CNVD as a Remote Procedure Call Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server, enabling remote code execution via RPC Runtime. The provided documents do not specify affected product versions, root cause specifics, e...

CVE-2021-28339

CVE-2021-28339 is a Remote Procedure Call Runtime remote code execution vulnerability affecting Windows components. The connected scans show the CVE referenced across multiple Windows monthly security updates (KB5001330/1335/1337/1340/1342/1347) and in Nessus/OpenVAS feeds, indicating it is being...

CVE-2021-33744

Technical details for CVE-2021-33744 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2021-38662

Technical details for CVE-2021-38662 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-40476

CVE-2021-40476 is a Windows AppContainer Elevation of Privilege vulnerability. The provided documents identify the impacted component as Windows AppContainer, with CVSS v3.1 base score 7.8 (LOCAL, LOW ATTACK COMPLEXITY, NO PRIVILEGES REQUIRED, UI REQUIRED, HIGH impact to C/I/A) and CVSS2 metrics ...

CVE-2021-41330

CVE-2021-41330 is documented in the connected sources as a Windows Codecs Library vulnerability that enables executing random code (high severity, CVSS v3.1 base score 7.8). Microsoft’s advisories reference related fixes as part of the Windows update stack; the vulnerability is treated as a code-...

CVE-2022-23290

Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.

CVE-2022-34732

CVE-2022-34732 corresponds to a Microsoft ODBC Driver Remote Code Execution vulnerability. According to the provided data, it has a CVSS v3.1 base score of 8.8 (HIGH) with network attack, no privileges required, user interaction needed, and impacts to confidentiality, integrity, and availability....

CVE-2022-37977

CVE-2022-37977 is a Local Security Authority Subsystem Service (LSASS) Denial of Service vulnerability in Windows. CNVD’s description attributes the issue to a failure in properly handling incoming error messages, which could allow an attacker to trigger an application DoS. Multiple national advi...

CVE-2022-41055

Technical details about CVE-2022-41055 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from the vendor and vulnerability feeds.

CVE-2023-36907

Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.

CVE-2023-36913

Technical details about CVE-2023-36913 are not publicly provided in the supplied documents. No specific affected products, root cause, or remediation are described here. Monitor for updates as new information may be released.

CVE-2017-0180

Technical details for CVE-2017-0180 are not publicly provided in the connected documents. Available sources reference Hyper-V Network Switch input validation issues but do not disclose affected versions, root cause specifics, or exploit information. Monitor for updates.

CVE-2018-0827

CVE-2018-0827 affects Windows Scripting Host (WSH) on Windows 10 versions 1703/1709 and Windows Server 1709. The vulnerability is a Device Guard/UMCI security feature bypass caused by how objects are handled in memory, enabling a local attacker who has access to run a malicious program to bypass ...

CVE-2018-0957

Technical details about CVE-2018-0957 are not publicly available in the provided documents. Monitor for updates from official sources for affected products, impact, and remediation.

CVE-2018-8127

CVE-2018-8127 is a Windows kernel information-disclosure vulnerability affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and server editions). Root cause: the kernel improperly handles objects in memory, enabling information leakage. The connected records do not provide concrete expl...

CVE-2018-8307

CVE-2018-8307 is a WordPad security feature bypass affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and corresponding Server editions) where embedded OLE objects are improperly handled. The vulnerability is described as a bypass of security features when WordPad processes OLE object...

CVE-2018-8330

CVE-2018-8330 is a Windows kernel information-disclosure vulnerability where the kernel improperly handles objects in memory. Affected are multiple Windows client/server editions (e.g., Windows 7, 8.1, 10 and corresponding server releases such as Server 2008/2012/2016/2019). The underlying cause ...

CVE-2019-0896

The Connected CNVD entries describe a Microsoft Windows Jet Database Engine vulnerability: a buffer overflow occurring when the engine executes memory operations without proper data-boundary validation, potentially enabling read/write corruption (buffer/heap overflow). This aligns with a Jet DB E...

CVE-2019-1060

Technical details for CVE-2019-1060 are not provided in the supplied documents. Public information about the MSXML RCE vulnerability is not included here; monitor for updates in the connected KB/MSRC sources.

CVE-2019-1093

Technical details about CVE-2019-1093 are not provided in the connected documents. Monitor for updates from Microsoft/MSRC and ENISA entries for affected components and remediation.

CVE-2019-1164

CVE-2019-1164 is a Windows kernel elevation-of-privilege vulnerability. The security flaw arises when the Windows kernel mishandles objects in memory, allowing a logged-on attacker to run arbitrary code in kernel mode and potentially install programs, view/change/delete data, or create privileged...

CVE-2019-1285

CVE-2019-1285 is a Windows Win32k elevation of privilege vulnerability caused by improper handling of memory objects in the Win32k component. Affects Windows systems; root cause is in-memory object handling leading to local privilege escalation. CVSS indicators: CVSSv2 base 7.2 (HIGH, LOCAL, no a...

CVE-2020-0677

Technical details for CVE-2020-0677 are not provided in the connected documents. The initial entry outlines memory handling in the CNG service but lacks explicit product/version/root-cause data. Monitor official advisories for updates.

CVE-2020-1011

CVE-2020-1011: Elevation of Privilege in Windows System Assessment Tool due to improper handling of file operations. Affected: Windows System Assessment Tool; root cause: file handling flaw enabling local privilege escalation. CVSS v3.1 shows HIGH impact (base 7.8) with Local attack vector, Privi...

CVE-2020-1308

CVE-2020-1308 is a DirectX Elevation of Privilege vulnerability caused by improper handling of memory objects. It requires the attacker to log on locally and to run a crafted application, potentially allowing kernel-mode code execution, data modification, or creation of privileged accounts. The v...

CVE-2020-1468

CVE-2020-1468: Information disclosure in Windows GDI. The Windows GDI component improperly discloses memory contents, enabling partial confidentiality impact. Connected CNVD entry corroborates Windows/Windows Server information disclosure presence; no vendor/product patch details are provided in ...

CVE-2020-1479

CVE-2020-1479 is a Windows/DirectX-related elevation of privilege vulnerability. The issue arises from improper handling of objects in memory, enabling a locally authenticated attacker to run code in kernel mode after logging on and executing a crafted application. The impact, as described in the...

CVE-2020-1480

CVE-2020-1480 is a Windows GDI Elevation of Privilege vulnerability. It describes a state where the Graphics Device Interface may mishandle objects in memory, allowing a local attacker who can log on to run code in kernel mode and potentially install programs, access data, or create accounts with...

CVE-2020-1490

Technical details for CVE-2020-1490 are not provided in the connected documents. Public information about affected products, root cause, impact, or fixes is not included here; monitor for updates from official sources.

CVE-2020-1535

CVE-2020-1535 is an Elevation of Privilege vulnerability in the Windows Backup Engine caused by improper handling of memory. An attacker would need to first gain code execution locally and then run a crafted application to elevate privileges. Microsoft’s security update addresses the issue by cor...

CVE-2021-1700

Technical details about CVE-2021-1700 are not provided in the given documents. No vendor/product/version specifics, root cause, impact, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2021-24093

Technical details about CVE-2021-24093 are not publicly provided in the supplied documents. Sources mention Windows Graphics Components and remote code execution at a high level but do not disclose affected versions, vectors, or fixes. Monitor for updates.

CVE-2021-31975

No technical details (affected products, root cause, or fixes) for CVE-2021-31975 are provided in the supplied documents. Monitor for updates from official advisories and vendor advisories.

CVE-2021-33758

CVE-2021-33758 is a Windows Hyper-V Denial of Service vulnerability affecting Hyper-V on Windows Server/Windows systems. The CVSS3 base metrics indicate a NETWORK attack vector, LOW attack complexity, with privileges required: LOW and no user interaction, leading to a high availability impact. Pu...

CVE-2021-38624

Technical details about CVE-2021-38624 are not provided in the connected documents. Available records do not specify affected products/versions or fixes beyond the vulnerability title. Monitor for updates.

CVE-2022-22712

CVE-2022-22712: Windows Hyper-V Denial of Service vulnerability. Affects Hyper-V; root cause details are not provided in the initial document, but CVSS metrics indicate Local attack vector with no authentication and no user interaction, leading to a high availability impact (CVE‑v2 base score 4.7...

CVE-2022-26792

Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.

CVE-2022-26794

Technical details for CVE-2022-26794 are not publicly provided in the supplied documents. No specifics on affected components, root cause, impact, or fixes are present here. Monitor for updates in connected sources.

CVE-2022-38000

CVE-2022-38000 is a Windows Point-to-Point Tunneling Protocol (PPTP) remote code execution vulnerability. Connected MS updates document this CVE under the Windows PPTP entry and indicate it is addressed by October 2022 security updates (e.g., KB5018410/KB5018427). The vulnerability affects the PP...

CVE-2023-21811

Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2016-3225

A local elevation of privilege vulnerability exists in the Microsoft Server Message Block (SMB) component across various versions of Microsoft Windows , including Vista SP2, Windows 7 SP1, Windows 8.1, Windows 10 Gold and 1511, and various Windows Server editions. The root cause is a deficiency i...

CVE-2018-0843

Technical details for CVE-2018-0843 are not publicly available in the provided documents; monitor for updates.

CVE-2018-0958

CVE-2018-0958 is a Windows security feature bypass vulnerability that could enable bypass of Device Guard on affected Windows platforms (Windows 10, Windows Server 2016). The connected documents corroborate that this is a Windows feature-bypass issue; however, they do not provide concrete technic...

CVE-2018-8213

CVE-2018-8213 is a Windows remote code execution vulnerability caused by improper handling of objects in memory. Affected products per provided data: Windows Server 2016 and Windows 10 (including Windows 10 Servers). The entry is linked to CVE-2018-8210 as a distinct CVE with its own affected set...

CVE-2018-8471

CVE-2018-8471 describes a local elevation-of-privilege vulnerability in the Microsoft RemoteFX Virtual GPU miniport driver. The issue arises from how the driver handles objects in memory, enabling an attacker with local access to execute code with elevated privileges on affected Windows versions ...

CVE-2019-0689

Technical details about CVE-2019-0689 are not publicly provided in the connected documents. The available Initial Description notes an elevation-of-privilege issue in Windows Subsystem for Linux, but no concrete exploit paths, affected versions, or fixes are present here. Monitor for updates.

CVE-2019-0692

CVE-2019-0692 describes an elevation-of-privilege vulnerability in Windows Subsystem for Linux caused by an integer overflow. The issue enables local attackers to potentially escalate privileges within affected Windows environments. The initial entry notes the vulnerability and distinguishes it f...

CVE-2019-0711

The CVE-2019-0711 vulnerability affects Microsoft Hyper-V and involves denial-of-service when a host server fails to properly validate input from a privileged guest OS user. An attacker with a privileged guest account can run a crafted application inside a VM to crash the host. The vulnerability ...