CVE-2022-37995

CVE-2022-37995 is a Windows Kernel elevation-of-privilege vulnerability. The initial entry notes a local attacker could achieve a high-severity (CVSS 7.8) impact with low attack complexity and no user interaction required. Connected documents list this CVE under Windows Kernel and enumerate fixes...

CVE-2023-21811

Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2016-3236

CVE-2016-3236 affects the WPAD proxy discovery implementation in multiple Windows editions (Vista through Windows 10). The weakness arises when WPAD proxy discovery is mishandled, which could allow a remote attacker to redirect network traffic via unspecified vectors, effectively an elevation of ...

CVE-2016-3338

CVE-2016-3338 concerns the Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. It affects multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 pre-1709, and Server 2016) and is triggered by a crafted application that allows ...

CVE-2017-0050

Technical details about CVE-2017-0050 are not publicly provided in the connected documents. The sources reference the vulnerability generally; monitor for updates on affected products, root cause, and fixes.

CVE-2017-0166

CVE-2017-0166: An LDAP elevation of privilege vulnerability in Windows occurs when LDAP request buffer lengths are improperly calculated. This enables a remote attacker to send malicious traffic to a Domain Controller to achieve elevated privileges. The initial description and connected documents...

CVE-2018-0883

CVE-2018-0883 is a remote code execution vulnerability in Windows Shell caused by improper validation of file copy destinations. Affected are Windows Shell components across multiple Windows platforms (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 R2/2012/2016 and Windows 10 builds up to...

CVE-2018-0963

CVE-2018-0963 is a Windows Kernel elevation-of-privilege vulnerability. Affected: Windows Server 2016, Windows 10, Windows 10 Servers. Root cause: Windows Kernel mishandling of objects in memory enabling local privilege escalation. Impact: partial confidentiality/integrity/availability (per CVSS ...

CVE-2018-8434

CVE-2018-8434 is a Windows Hyper-V information disclosure vulnerability. It occurs when a host OS fails to properly validate input from an authenticated user on a guest OS, allowing potential disclosure of memory information. Affected platforms include Windows 7, Windows Server 2008/2012 families...

CVE-2019-0895

The connected CNVD entries describe a Windows Jet Database Engine vulnerability as a buffer overflow/heap overflow issue arising when memory boundaries are not properly validated. They state an attacker could exploit this condition to cause memory corruption, affecting Windows/Windows Server envi...

CVE-2019-1025

CVE-2019-1025 describes a Windows denial-of-service vulnerability caused by improper handling of objects in memory. An attacker who can log on or convince a user to open a crafted file on a network share could make the target stop responding. It does not enable code execution or direct privilege ...

CVE-2019-1060

Technical details for CVE-2019-1060 are not provided in the supplied documents. Public information about the MSXML RCE vulnerability is not included here; monitor for updates in the connected KB/MSRC sources.

CVE-2019-1393

Technical details about CVE-2019-1393 are not provided in the connected documents. The EUVD entries mention malware 'sbrugna' but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2020-0992

CVE-2020-0992 corresponds to a remote code execution in the Windows Jet Database Engine caused by improper handling of memory objects. The connected CNVD entries describe a Microsoft Windows Jet Database Engine RCE vulnerability with the same root cause (memory object handling) and the impact bei...

CVE-2020-1207

Technical details for CVE-2020-1207 are not publicly available in the provided documents. Monitor for updates from official advisories and security bulletins for affected components and remediation.

CVE-2020-1306

Technical details about CVE-2020-1306 are not provided in the connected documents. The entry notes a Windows Runtime elevation of privilege issue but does not specify affected products/versions or fixes. Monitor for updates.

CVE-2020-1398

CVE-2020-1398 corresponds to the Windows Lockscreen Elevation of Privilege vulnerability. The connected CNVD entry confirms the issue originates from improper handling of the Lock screen’s Ease of Use dialog, enabling privilege escalation when exploited. The initial description states exploitatio...

CVE-2020-1478

CVE-2020-1478 describes a memory-corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The weakness could allow an attacker to install programs, view/change/delete data, or create accounts with full user rights, with exploitation possible through s...

CVE-2020-1533

CVE-2020-1533 is a Windows WalletService elevation-of-privilege vulnerability. The issue arises from how WalletService handles objects in memory, permitting a locally authenticated attacker to execute code with elevated privileges by running a crafted application. The CVE entry notes that exploit...

CVE-2020-1544

CVE-2020-1544 is an Elevation of Privilege in the Windows Backup Engine caused by improper memory handling. An attacker with prior code execution could run a crafted application to elevate privileges. Microsoft security updates fix the Windows Backup Engine’s memory handling to address the vulner...

CVE-2020-1551

CVE-2020-1551 : Elevation of Privilege in Windows Backup Engine due to improper handling of memory. The vulnerability requires prior execution on a vulnerable system and can be exploited by running a specially crafted application to elevate privileges. The Windows security update fixes memory han...

CVE-2020-1578

CVE-2020-1578 is an information disclosure vulnerability in the Windows kernel that could allow an attacker to retrieve kernel object memory addresses, potentially bypassing ASLR. Exploitation requires user login on the affected system and running a crafted app. The mitigation is a Microsoft secu...

CVE-2020-16894

CVE-2020-16894 is a Windows NAT denial-of-service vulnerability: a privileged guest-VM user can craft input that forces the host to crash due to improper NAT validation. Remediation is to apply the Microsoft update that modifies how Windows NAT accesses the host.

CVE-2020-17137

CVE-2020-17137 is a DirectX Graphics Kernel Elevation of Privilege vulnerability. Affects Microsoft Windows systems via the DirectX Graphics Kernel component (DXGK); the root cause is an Elevation of Privilege flaw with local attack vector, requiring low privileges and no user interaction (CVSSv3...

CVE-2021-1676

Technical details for CVE-2021-1676 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-28437

Technical details for CVE-2021-28437 are not provided in the supplied documents. No concrete information on affected product versions, root cause, or fixes is present; monitor for updates as new disclosures or patches emerge.

CVE-2021-28447

CVE-2021-28447 is described in the provided documents as a Windows vulnerability affecting the Early Launch Antimalware Driver, characterized as a security feature bypass. The NVD entry lists a CVSS-3.1 base score of 4.4 (local, low attack complexity, high privileges required, no user interaction...

CVE-2021-33773

CVE-2021-33773 affects the Windows Remote Access Connection Manager in Windows/Windows Server, described as an Elevation of Privilege vulnerability. Connected sources confirm the affected component and privilege/escalation nature, with CVSS indicating high impact (local, with high confidentiality...

CVE-2021-36967

CVE-2021-36967 affects the Windows WLAN AutoConfig Service and is an Elevation of Privilege vulnerability. CVSS details (NVD, CVSS 3.1) indicate an adjacent-network attack vector, low attack complexity, no authentication, and high impact to confidentiality, integrity, and availability (base score...

CVE-2021-36969

Technical details for CVE-2021-36969 are not publicly available in the provided documents. Connected sources reference the CVE and vulnerability class but do not specify affected product versions, root cause, exploitability, or fixes. Monitor for updates.

CVE-2021-38637

CVE-2021-38637 corresponds to a Windows Storage Information Disclosure vulnerability. The linked documents show mitigations via Microsoft security updates KB5005565, KB5005566, KB5005568, with advisories from MSRC. CVSS data indicate a MEDIUM base score (CVSS 3.1: 5.5) with LOCAL attack vector an...

CVE-2021-42274

CVE-2021-42274 is a Windows Hyper‑V Discrete Device Assignment (DDA) Denial of Service vulnerability. The connected documents indicate a Hyper‑V DoS issue without detailing exploit vectors or root cause in code. Mitigations are version‑specific Windows updates from November 2021 (e.g., KB5007205,...

CVE-2021-42286

CVE-2021-42286: Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability. Affected component: Windows Core Shell SI Host Extension Framework. Root cause: elevation of privilege in the Composable Shell path (Core Shell). Impact (per sources): local a...

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

CVE-2021-43224

CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...

CVE-2022-21879

Technical details for CVE-2022-21879 are not publicly provided in the supplied documents; no affected products or fixes are described here. Monitor for official disclosures and updates.

CVE-2022-21962

CVE-2022-21962 corresponds to a Windows Resilient File System (ReFS) remote code execution vulnerability. The NVD entry lists two CVSS assessments: CVSS v2 base score 7.2 (LOCAL, with no user interaction, impact to confidentiality/integrity/availability) and CVSS v3.1 base score 6.8 (attack vecto...

CVE-2022-22711

Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.

CVE-2022-23290

Technical details about CVE-2022-23290 are not publicly provided in the supplied connected documents. No concrete product/version/root-cause/impact/fix information is present beyond the generic vulnerability label. Monitor for official updates from primary sources.

CVE-2022-24498

CVE-2022-24498 is a Windows iSCSI Target Service Information Disclosure vulnerability. The available data show that it affects the Windows iSCSI Target Service and has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Low privileges required, No user interaction, Confidentiality impa...

CVE-2022-37999

CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...

CVE-2022-38000

CVE-2022-38000 is a Windows Point-to-Point Tunneling Protocol (PPTP) remote code execution vulnerability. Connected MS updates document this CVE under the Windows PPTP entry and indicate it is addressed by October 2022 security updates (e.g., KB5018410/KB5018427). The vulnerability affects the PP...

CVE-2022-38022

CVE-2022-38022 is listed in the ENISA/NCSC (Windows Kernel) catalog as a Windows Kernel elevation-of-privilege vulnerability. The NCSc table places CVE-2022-38022 under Windows Kernel with the impact category “Obtaining Increased Entitlements.” No explicit root-cause, affected versions, or remedi...

CVE-2022-44678

Technical details for CVE-2022-44678 are not provided in the connected documents. No product/version/impact/fix details are present here. Monitor for official disclosures and vendor advisories for updates.

CVE-2023-21766

CVE-2023-21766 corresponds to a Windows Overlay Filter information-disclosure vulnerability. The CVE entry lists a local attack surface with a Confidentiality impact of High, no Integrity/Availability impact, and a CVSS 3.1 base score of 4.7 (Attack Vector: Local; Attack Complexity: High; Privile...

CVE-2016-3302

CVE-2016-3302 is a Windows lock screen elevation-of-privilege vulnerability. Affected products include Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 (Gold, 1511, 1607). The issue arises when the Windows lock screen improperly loads web content, enabling a physically proximat...

CVE-2016-3305

Technical details about CVE-2016-3305 are not publicly available in the provided documents. Monitor for updates to confirm affected components, impact, and fixes.

CVE-2016-3340

CVE-2016-3340 affects the Windows Common Log File System (CLFS) driver across multiple Windows client/server SKUs (e.g., Vista/7/8.1/10 and corresponding server editions). The vulnerability enables local users to gain privileges via a crafted application, representing a local elevation-of-privile...

CVE-2016-3345

CVE-2016-3345 is the Windows SMBv1 Server Remote Code Execution vulnerability. The SMBv1 server on affected Windows editions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 R2/2012, Windows RT 8.1, Windows 10 1511/1607) could allow an authenticated attacker to execute arbi...

CVE-2016-3371

CVE-2016-3371 is a Windows kernel elevation of privilege vulnerability affecting a broad set of Windows versions (Vista SP2/2008 SP2 R2, Windows 7 SP1, 8.1, Server 2012/RT, Windows 10 1511/1607). The issue stems from improper enforcement of permissions by the Windows Kernel API, allowing local at...