CVE-2021-28322

Technical details about CVE-2021-28322 are not publicly provided in the supplied documents. No affected products, exploit information, or fixes are described here. Monitor for updates from the referenced advisories and vulnerability feeds.

CVE-2021-28350

Technical details about CVE-2021-28350, including affected components, root cause, impact specifics, and patch information, are not provided in the connected documents. Please monitor official advisories and updates for substantive, fact-grounded details.

CVE-2021-33772

CVE-2021-33772 is a Windows TCP/IP Driver Denial of Service vulnerability. Connected KB data indicate the issue is addressed by the July 2021 security update KB5004237 for Windows 10 versions 2004/20H2/21H1, affecting the Windows TCP/IP driver. No further technical specifics (root cause details, ...

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

CVE-2022-21861

Technical details about CVE-2022-21861 are not provided in the connected documents; publicly available content in the initial entry is limited to a high-level description and scores. Monitor for updates.

CVE-2022-21879

Technical details for CVE-2022-21879 are not publicly provided in the supplied documents; no affected products or fixes are described here. Monitor for official disclosures and updates.

CVE-2022-21962

CVE-2022-21962 corresponds to a Windows Resilient File System (ReFS) remote code execution vulnerability. The NVD entry lists two CVSS assessments: CVSS v2 base score 7.2 (LOCAL, with no user interaction, impact to confidentiality/integrity/availability) and CVSS v3.1 base score 6.8 (attack vecto...

CVE-2022-26933

Technical details about CVE-2022-26933 (NTFS Information Disclosure) are not provided in the connected documents. Monitor for updates; no affected products, root cause, impact, or fixes are disclosed here.

CVE-2022-35837

Technical details about CVE-2022-35837 are not publicly provided in the supplied documents. Monitor for updates from official sources; current materials only confirm the vulnerability name and CVE ID without specifics.

CVE-2022-37990

CVE-2022-37990 is a Windows kernel elevation-of-privilege issue tied to registry/hive memory handling. The connected analysis places this bug in a pool memory corruption class triggered by a 16‑bit integer overflow when calculating a dynamically allocated buffer length during registry hive operat...

CVE-2022-37999

CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...

CVE-2022-38004

Technical details about CVE-2022-38004 are not publicly available in the provided documents; the connected records reference Windows Fax Service and a remote code execution vulnerability but do not disclose affected versions, root cause, exploit info, or fixes. Monitor for updates.

CVE-2022-38039

CVE-2022-38039 is referenced in associated material as a Windows kernel hive/registry bug arising from a 16-bit integer overflow when computing the length of a dynamically allocated buffer during registry hive processing. This memory corruption pattern is discussed alongside related CVEs (e.g., C...

CVE-2022-41101

CVE-2022-41101 is a Windows Overlay Filter Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8 (HIGH). It is a LOCAL exploit requiring LOW privileges and no user interaction, with full impact on confidentiality, integrity, and availability as per the score. The provided documents id...

CVE-2022-44681

Technical details about CVE-2022-44681 are not publicly provided in the connected documents. Monitoring for updates is recommended.

CVE-2023-21766

CVE-2023-21766 corresponds to a Windows Overlay Filter information-disclosure vulnerability. The CVE entry lists a local attack surface with a Confidentiality impact of High, no Integrity/Availability impact, and a CVSS 3.1 base score of 4.7 (Attack Vector: Local; Attack Complexity: High; Privile...

CVE-2023-21811

Technical details for CVE-2023-21811 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2016-3305

Technical details about CVE-2016-3305 are not publicly available in the provided documents. Monitor for updates to confirm affected components, impact, and fixes.

CVE-2016-3345

CVE-2016-3345 is the Windows SMBv1 Server Remote Code Execution vulnerability. The SMBv1 server on affected Windows editions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 R2/2012, Windows RT 8.1, Windows 10 1511/1607) could allow an authenticated attacker to execute arbi...

CVE-2018-0883

CVE-2018-0883 is a remote code execution vulnerability in Windows Shell caused by improper validation of file copy destinations. Affected are Windows Shell components across multiple Windows platforms (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 R2/2012/2016 and Windows 10 builds up to...

CVE-2018-0963

CVE-2018-0963 is a Windows Kernel elevation-of-privilege vulnerability. Affected: Windows Server 2016, Windows 10, Windows 10 Servers. Root cause: Windows Kernel mishandling of objects in memory enabling local privilege escalation. Impact: partial confidentiality/integrity/availability (per CVSS ...

CVE-2018-17612

Summary of CVE-2018-17612 : Sennheiser HeadSetup (and HeadSetup Pro) improperly published the private signing key in the public distribution and installed CA/root certificates into the local Trusted Root CA store. The root cause is the inclusion of the private key in the SennComCCKey.pem file, en...

CVE-2018-8169

CVE-2018-8169 is a local elevation-of-privilege vulnerability in the HIDParser driver used by Windows HID parsing. The root cause, per CNVD-2018-11571, is that HIDParser fails to properly handle objects in memory, enabling a local attacker to execute code with higher privileges by running a craft...

CVE-2018-8313

CVE-2018-8313 is an elevation of privilege vulnerability in how the Windows Kernel API enforces permissions. The issue affects multiple Windows platforms including Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, and Windows 10 Servers. Th...

CVE-2019-0766

CVE-2019-0766 involves a local elevation of privilege in the Windows AppX Deployment Server. The connected documents indicate an attacker who can log on to the system can create files in arbitrary locations, indicating a race/permission issue enabling privilege escalation. The description across ...

CVE-2019-0973

CVE-2019-0973 affects the Windows Installer. The issue stems from improper input sanitization that enables insecure library loading, leading to elevation of privilege. A locally authenticated attacker could execute arbitrary code with elevated system privileges, potentially installing programs, v...

CVE-2019-1483

CVE-2019-1483 affects Windows AppX Deployment Server (AppXSVC) and arises from improper handling of junctions, enabling elevation of privilege once an attacker gains execution on the target. The related CVE-2019-1476 entry describes a similar issue where AppXSVC mishandles hard links, allowing an...

CVE-2020-0704

The CVE-2020-0704 entry concerns a Windows Wireless Network Manager Elevation of Privilege vulnerability. The affected component is the Windows Wireless Network Manager, where memory is improperly handled. The root cause is a memory handling issue that allows an attacker who already has code exec...

CVE-2020-0785

CVE-2020-0785 is an elevation-of-privilege flaw in the Windows User Profile Service (ProfSvc) caused by improper handling of symlinks. The vulnerability allows a local attacker with low privileges to elevate to higher privileges without user interaction, as documented in the CVE description and c...

CVE-2020-0951

The CVE-2020-0951 issue is a security feature bypass in Windows Defender Application Control (WDAC). The vulnerability could allow an attacker with local admin access to bypass WDAC enforcement and execute PowerShell commands that WDAC would normally block. Exploitation requires an administrator ...

CVE-2020-0962

CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...

CVE-2020-1152

Technical details about CVE-2020-1152 (affected product/component/root cause/impact/fix) are not provided in the connected documents. The entry’s description is present, but no concrete technical details are supplied. Monitor for updates.

CVE-2020-1486

The CVE-2020-1486 entry describes a Windows kernel Elevation of Privilege vulnerability caused by the kernel’s improper handling of objects in memory. An attacker who can log on could run arbitrary code in kernel mode, potentially installing programs, stealing data, or creating accounts with full...

CVE-2020-1544

CVE-2020-1544 is an Elevation of Privilege in the Windows Backup Engine caused by improper memory handling. An attacker with prior code execution could run a crafted application to elevate privileges. Microsoft security updates fix the Windows Backup Engine’s memory handling to address the vulner...

CVE-2020-16964

CVE-2020-16964 is described as a Windows Backup Engine Elevation of Privilege vulnerability. The available documents indicate a local, low-privilege attack that yields full confidentiality, integrity, and availability impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). No specific affected pr...

CVE-2021-1653

CVE-2021-1653 details are not publicly provided in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2021-1660

CVE-2021-1660 is a Remote Procedure Call (RPC) Runtime remote code execution vulnerability in Windows. The connected sources confirm the flaw affects RPC components and was addressed by Microsoft security updates released in January 2021 (KB4598242/KB4598243 and related advisories), with patches ...

CVE-2021-1680

Technical details about CVE-2021-1680 are not publicly available in the provided connected documents. Monitor for updates for affected product, root cause, impact, and remediation information.

CVE-2021-1697

Technical details about CVE-2021-1697 are not publicly provided in the supplied documents; monitor for official advisories from NVD/OSV/NCSC for affected products, versions, and remediation.

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

CVE-2021-28323

Technical details about CVE-2021-28323 are not provided in the supplied documents. Public disclosures, impacted products, root cause, and fixes are not specified here. Monitor for updates.

CVE-2021-28325

Technical details for CVE-2021-28325 are not publicly available in the provided connected documents. The materials reference the SMB information disclosure vulnerability and related entries, but no concrete specifics (affected products/versions/fixes) are provided here. Monitor for updates.

CVE-2021-28440

Technical details about CVE-2021-28440 are not publicly provided in the supplied documents. No affected products, root cause, exploit status, or remediation specifics are included here. Monitor for updates in connected sources.

CVE-2021-42274

CVE-2021-42274 is a Windows Hyper‑V Discrete Device Assignment (DDA) Denial of Service vulnerability. The connected documents indicate a Hyper‑V DoS issue without detailing exploit vectors or root cause in code. Mitigations are version‑specific Windows updates from November 2021 (e.g., KB5007205,...

CVE-2021-42288

CVE-2021-42288 is identified as Windows Hello Security Feature Bypass Vulnerability. NVD CVSS details: CVSSv3.1 base score 6.1 (PHYSICAL access, NONE privileges, UI NONE; C:H/I:H/A:N; Confidentiality/Integrity HIGH). Connected docs corroborate this CVE in Microsoft KB updates KB5007186 (OS builds...

CVE-2021-43229

CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...

CVE-2022-22711

Technical details about CVE-2022-22711 are not provided in the supplied documents; no affected product/version or exploit information is disclosed. Monitor for updates from official sources.

CVE-2022-38000

CVE-2022-38000 is a Windows Point-to-Point Tunneling Protocol (PPTP) remote code execution vulnerability. Connected MS updates document this CVE under the Windows PPTP entry and indicate it is addressed by October 2022 security updates (e.g., KB5018410/KB5018427). The vulnerability affects the PP...

CVE-2022-38005

Technical details for CVE-2022-38005 are not publicly provided in the supplied documents. No specifics on affected products, impact, or fixes are present here; please monitor for updates.

CVE-2022-44674

CVE-2022-44674 is a Windows Bluetooth Driver information disclosure vulnerability. The CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, Privileges Required: Low, No user interaction, and an unchanged scope; confidentiality impact is High. Exploitation would ...