CVE-2022-22042

CVE-2022-22042 is described in the Initial Document as a Windows Hyper-V Information Disclosure Vulnerability. The Connected Documents do not provide concrete technical details (affected product version, root cause, impact, or remediation) for this CVE. Therefore, the available information remain...

CVE-2020-16898

CVE-2020-16898 is a Windows TCP/IP remote code execution vulnerability triggered by specially crafted ICMPv6 Router Advertisement packets. The issue arises from how the Windows TCP/IP stack handles ICMPv6 RA messages, allowing an attacker to execute code on a targeted Windows host by sending craf...

CVE-2021-38666

CVE-2021-38666 is described as a Remote Desktop Client Remote Code Execution vulnerability. The vulnerability affects the Windows Remote Desktop Client, with the CVSS3.1 score indicating network-exposed, no privileges required, user interaction needed, and high impact to confidentiality, integrit...

CVE-2021-36947

CVE-2021-36947 is listed in the NCSC vulnerability record as a Windows Print Spooler Component vulnerability with the impact: Execute random code. The connected documents do not provide concrete technical details on the root cause, affected subcomponents, specific versions, exploit scenarios, or ...

CVE-2020-0662

CVE-2020-0662 is described as a Windows remote code execution vulnerability arising from how Windows handles objects in memory. The provided sources confirm a remote code execution impact, but there is no detailed information in the connected documents about affected products/versions, specific r...

CVE-2022-23257

Technical details about CVE-2022-23257 are not provided in the supplied documents; no affected products, vulnerable components, impact, or remediation are specified. Monitor for updates.

CVE-2022-30224

Technical details for CVE-2022-30224 are not publicly provided in the connected documents. The materials mention the vulnerability at a high level but do not specify affected products, root cause, impact, or remediation. Monitor for updated disclosures and official advisories.

CVE-2023-36903

No technical details for CVE-2023-36903 are provided in the supplied documents; only the vulnerability title is present. Monitor for updates.

CVE-2019-1088

Technical details are not provided in the connected documents; monitor for updates.

CVE-2021-24084

CVE-2021-24084 is an information disclosure issue in Windows Mobile Device Management. Public docs identify it as a Windows MDM component vulnerability that could lead to confidentiality loss (CVSS v3.1 base score 5.5, HIGH confidentiality impact; LOCAL, LOW complexity; user interaction NONE). Mi...

CVE-2022-21920

CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...

CVE-2022-23286

CVE-2022-23286 affects the Windows Cloud Files Mini Filter Driver and enables local elevation of privilege. Evidence in CNVD/CVE records confirms the driver-related root cause and impact (arbitrary code with elevated privileges). Remediation reported in connected docs includes applying March 2022...

CVE-2023-21712

CVE-2023-21712 describes a Windows PPTP/RAS Remote Code Execution vulnerability. A race condition in the Point-to-Point Tunneling Protocol could allow unauthenticated, network-based attackers to execute arbitrary code in the RAS environment. The issue affects Windows Remote Access Service compone...

CVE-2019-1094

Technical details (affected products/versions/root cause/fix) for CVE-2019-1094 are not provided in the connected documents. Monitor Microsoft advisories and MSRC for updates.

CVE-2019-1127

Technical details about CVE-2019-1127 (and related DirectWrite CVEs) are not provided in the connected documents. Monitor for updates from Microsoft and CVE records for affected products, versions, and mitigations.

CVE-2022-30154

CVE-2022-30154 is an Elevation of Privilege vulnerability in the Microsoft File Server Shadow Copy Agent Service (RVSS). The issue is addressed by Windows updates released on June 14, 2022 (e.g., KB5014702/KB5014738/KB5014678, security updates and hotpatch variants). The vulnerability’s remediati...

CVE-2020-1530

CVE-2020-1530 is an Elevation of Privilege flaw in Windows Remote Access caused by improper handling of memory. An attacker who already has code execution on a victim system could run a crafted program to elevate privileges. The advisory indicates the fix is a security update that corrects how Wi...

CVE-2020-16933

Microsoft Word contains a security feature bypass (CVE-2020-16933) due to improper handling of .LNK files. An attacker can craft a .LNK file to perform actions in the current user’s security context when a user opens it (email or web delivery scenarios described). The vulnerability can lead to co...

CVE-2017-0174

CVE-2017-0174 is a Windows NetBIOS Denial of Service vulnerability. Exploitation involves sending malformed NetBIOS packets to affected Windows versions (Windows 7/8.1/10, Windows Server 2008-2016 and related). The underlying cause is improper handling within the Windows NetBIOS/network stack, al...

CVE-2017-0272

CVE-2017-0272 affects the Microsoft Windows SMBv1 server on Windows clients/servers (Windows 7/8.1, Windows Server 2008 SP2/R2 SP1, 2012, 2016, 10 versions etc.). Root cause: the SMBv1 server mishandles certain requests, enabling remote code execution by a remote attacker. Impact is high (remote ...

CVE-2019-1096

Technical specifics for CVE-2019-1096 are not provided in the supplied Connected documents. Public details about affected products, impact, or remediation are not present here; monitor for updates.

CVE-2022-23291

CVE-2022-23291 is a Windows DWM Core Library elevation-of-privilege vulnerability with local attack vector, low complexity, and impact on confidentiality, integrity, and availability. The NVD/Microsoft entries assign high severity (CVSS v3.1: 7.8) and note an elevation of privileges via the Deskt...

CVE-2022-26801

CVE-2022-26801 is a Windows Print Spooler Elevation of Privilege vulnerability (Local, Low attack complexity; no user interaction required per description). The connected documents show confirmed details on the vulnerability’s existence and CVSS metrics (CVSS 3.1 base score 7.8; confidentiality/i...

CVE-2022-29106

Technical details about CVE-2022-29106 (Windows Hyper-V Shared Virtual Disk Elevation of Privilege) are not provided in the connected documents. Monitor for updates; no product/version/impact/fix information is available here.

CVE-2022-29139

Technical details about CVE-2022-29139 are not provided in the supplied documents. Public info in the connected entries does not describe affected products/versions, exploit methods, or remediation beyond general LDAP RCE context. Monitor for updates.

CVE-2022-33644

CVE-2022-33644 affects Xbox Live Save Service and is an Elevation of Privilege on Windows/Xbox components. Connected data confirms the vulnerability type (privilege escalation) and relates it to Windows/Xbox Live Save Service. Public exploits exist for this CVE, and remediation is provided by Mic...

CVE-2020-16923

CVE-2020-16923 is a remote code execution vulnerability in Microsoft Graphics Components, due to improper handling of objects in memory. An attacker could execute arbitrary code on a target system by convincing a user to open a specially crafted file. Public documents consistently state the issue...

CVE-2021-26435

Technical details about CVE-2021-26435 are not publicly available in the provided connected documents. The records reference the vulnerability and related CVEs but do not disclose affected components, root cause, impact, or fixes. Monitor for updates.

CVE-2022-22025

CVE-2022-22025 refers to a Denial of Service vulnerability in the Windows Internet Information Services Cachuri Module. The available document describes it as a module DoS issue but does not provide details on affected product versions, root cause, attack vector, or fix. Exploitation details are ...

CVE-2022-34705

Technical details about CVE-2022-34705 are not publicly provided in the supplied documents. No concrete affected components, root cause, impact, or fixes are present beyond the vulnerability title and references. Monitor for official disclosures or updates.

CVE-2022-38043

No additional technical details about CVE-2022-38043 are provided in the connected documents. The sources only reiterate the vulnerability name/description. Monitor for updates and verify affected products, root cause, and fixes when new information is published.

CVE-2022-41039

Technical details about CVE-2022-41039 are not provided in the supplied documents. Public details, affected products, or fixes are not included here. Monitor for updates from official sources.

CVE-2022-41081

CVE-2022-41081 is a Windows PPTP Remote Code Execution vulnerability in the Point-to-Point Tunneling Protocol. The root cause is the PPTP implementation failing to properly filter external input during code segment construction, enabling arbitrary code execution when exploited over a network. The...

CVE-2018-8256

CVE-2018-8256 is a remote code execution vulnerability in PowerShell triggered by processing specially crafted files. Affected are Windows PowerShell/PowerShell Core and several Windows OS versions (e.g., Windows 7/8.1/10, Windows Server 2008R2/2012/2016/2019, etc.). The root cause is improper ha...

CVE-2022-24530

CVE-2022-24530 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (LOCAL, LOW privileges required, UI NONE, S C changed, impact: HIGH on confidentiality, integrity, and availability). It reflects a local privilege escalation in the Window...

CVE-2022-38044

CVE-2022-38044 is a Windows CD-ROM File System Driver vulnerability that enables code execution when processing crafted input. Trusted sources in connected data identify the affected component as the Windows CD-ROM Driver and describe the root cause as improper handling/filtering of external inpu...

CVE-2019-1086

CVE-2019-1086 is an elevation-of-privilege vulnerability in Microsoft Windows Audio Service. The connected materials confirm a local-privilege-escalation risk that could permit arbitrary code execution on affected systems; the CVE is part of a trio (CVE-2019-1086/1087/1088). No explicit root-caus...

CVE-2021-26442

Technical details for CVE-2021-26442 are not present in the connected documents. Public info here is generic. Monitor for updates from official advisories; no product/version/impact specifics are provided in the supplied materials.

CVE-2022-34729

Technical details about CVE-2022-34729 are not publicly available in the provided connected documents. Monitor for updates; the entry is described as a Windows GDI Elevation of Privilege vulnerability with local access and high impact in the initial description.

CVE-2021-42277

Technical details about CVE-2021-42277 are not provided in the connected documents; only generic vulnerability labels and references are available. Monitor for official advisories or CVE records for affected products, fixes, and mitigations.

CVE-2022-30165

Technical details for CVE-2022-30165 are not publicly available in the provided documents; monitor for updates.

CVE-2022-37986

Technical details about CVE-2022-37986 (affected component, root cause, impact, or fixes) are not provided in the connected or initial documents. Monitor for updates and additional technical disclosure.

CVE-2019-1037

Technical details (affected products, vulnerable component, versions, impact, or exploit information) for CVE-2019-1037 are not publicly provided in the connected documents. Please monitor for updates as more information becomes available.

CVE-2022-24474

Technical details about CVE-2022-24474 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates.

CVE-2022-24499

Technical details about CVE-2022-24499 are not provided in the connected documents; public specifics (affected products, root cause, exploit info, or remediation) are not available here. Monitor for updates.

CVE-2022-30132

Technical details for CVE-2022-30132 are not provided in the connected documents. Public details (product, impact, fix) are not present here. Monitor for updates from authoritative sources.

CVE-2022-38050

CVE-2022-38050 is a Win32K elevation of privilege vulnerability in the Windows Win32K subsystem. The issue allows a local attacker to obtain the highest-privilege level (SYSTEM) by exploiting a flaw in privilege handling within Win32K. Microsoft’s advisories and cumulative updates fix this by add...

CVE-2019-1155

CVE-2019-1155 is a Jet Database Engine remote code execution vulnerability in Windows. It arises from improper handling of in-memory objects, enabling an attacker to run arbitrary code on a victim system by enticing the user to open a specially crafted file. The update fixes how the Jet Database ...

CVE-2020-17042

CVE-2020-17042 is a Windows Print Spooler remote code execution vulnerability. The CVE entry identifies the affected component as the Windows Print Spooler and indicates a network-based attack with high impact (base score 8.8/3.1 CVSS) and user interaction required. The connected documents provid...

CVE-2021-43893

Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.