CVE-2019-1019

CVE-2019-1019 is a Windows security feature bypass in NTLM authentication that allows bypassing validation on NETLOGON messages, enabling an attacker to access a machine with their original user privileges after sending a crafted authentication request. Connected material confirms related exploit...

CVE-2020-1492

CVE-2020-1492 – Windows Media Foundation memory corruption : A memory handling flaw in Windows Media Foundation can lead to memory corruption when objects are processed in memory. An attacker who exploits this could install programs, view/modify/delete data, or create new accounts with full right...

CVE-2020-1577

CVE-2020-1577 affects DirectWrite. The connected documents confirm an information-disclosure flaw where DirectWrite may reveal memory contents; exploitation could be achieved by convincing a user to open a crafted document or visit an untrusted page. The Microsoft advisory notes the fix is to cor...

CVE-2021-38628

Technical details for CVE-2021-38628 are not publicly provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, impact, or remediation. Monitor for updates.

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

CVE-2022-24495

CVE-2022-24495 corresponds to a Windows DirectShow remote code execution vulnerability. The connected documents confirm the affected technology (Windows DirectShow) and the CVE’s existence, but they do not provide concrete patch details, affected product/version specifics, or explicit remediation...

CVE-2022-26810

Technical details about CVE-2022-26810 are not provided in the supplied connected documents. No explicit affected products/versions, root cause, or fixes are described here. Monitor for updates from official sources.

CVE-2022-30163

CVE-2022-30163 is a Windows Hyper-V remote code execution vulnerability. The available connected sources describe an issue where code executed inside a Hyper-V guest could lead to arbitrary code execution on the Hyper-V host. Microsoft released out-of-band and June 2022 security updates addressin...

CVE-2022-38040

Technical details about CVE-2022-38040 (Microsoft ODBC Driver RCE) are not provided in the supplied documents. Public information on affected components, root cause, impact specifics, or fixes is not present here. Monitor for updates in the connected sources for any disclosed details.

CVE-2023-24859

CVE-2023-24859 is a Windows vulnerability described as a denial-of-service issue in the Windows Internet Key Exchange (IKE) extension. The available data identifies the affected component as the IKE extension and notes impact as availability degradation (DoS) with network attack vector and no use...

CVE-2019-0555

The CVE-2019-0555 entry corresponds to an elevation of privilege in Microsoft XmlDocument that can escape AppContainer sandbox via cross-boundary remoting. Connected analysis explains an IDispatch/type library abuse path: malicious clients query for the old IXMLDOMDocument interface, then marshal...

CVE-2019-0959

Technical details about CVE-2019-0959 are not publicly available in the provided documents. The KTM/registry context mentions the CVE historically, but no concrete root-cause, impact, or fix is described here. Monitor for updates.

CVE-2022-22045

Technical details about CVE-2022-22045 are not provided in the supplied documents. The inputs only state the vulnerability title without specifics (affected product/version, impact, exploit, or remediation). Monitor for updates.

CVE-2022-26927

CVE-2022-26927 : Affects the Windows Graphics Component and enables remote code execution. The CVSSv3.1 base score is 8.8 (HIGH) with a NETWORK attack vector, LOW attack complexity, NO privileges required, and USER INTERACTION REQUIRED; confidentiality, integrity and availability are all High. Th...

CVE-2022-26935

Technical details about CVE-2022-26935 are not provided in the connected documents. The Initial document offers a basic description and CVSS info, but no specifics on affected products/versions, root cause, remediation, or exploit status. Monitor for updates.

CVE-2022-34708

Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.

CVE-2017-0283

CVE-2017-0283 is described in the connected MSKB as a remote code execution vulnerability in Microsoft Office components that could be triggered by opening a specially crafted Office file. The MSKB describes a security update KB3191937 for Skype for Business 2015 (Lync 2013) that addresses CVE-20...

CVE-2018-0743

Summary (CVE-2018-0743): Elevation of privilege in Windows Subsystem for Linux (WSL) on Windows 10 (versions 1703 and 1709) and Windows Server 1709 due to improper handling of memory objects. The vulnerability allows a local attacker to run code with elevated privileges by exploiting how WSL mana...

CVE-2018-8251

CVE-2018-8251 describes a memory corruption vulnerability in Windows Media Foundation when it improperly handles objects in memory. Affected: Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (Server 2008 R2, 2012, 2012 R2, 2016; Windows RT 8.1). CVSSv3 base 7.5 (NETWORK, HIGH ...

CVE-2019-0943

CVE-2019-0943: Windows ALPC handling flaw leads to local privilege escalation. Root cause: improper handling of ALPC calls allowing a logged-on attacker to run code in the system’s security context. Impact per sources: potential full control, data changes/deletion, new accounts with full rights. ...

CVE-2019-1071

Technical details for CVE-2019-1071 are not present in the provided documents. No affected products, impact, or remediation are stated here. Monitor for updates and refer to the primary CVE entry for official information.

CVE-2020-16913

This CVE is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) where the Windows kernel-mode driver improperly handles objects in memory. An attacker who can log on and run a crafted application could execute code in kernel mode, install programs, and modify data or create accoun...

CVE-2021-31187

CVE-2021-31187 affects Windows WalletService and is described as a local elevation of privilege vulnerability. Per NVD, CVSSv3.1 base score 7.8 (HIGH) with a LOCAL attack vector, LOW privileges required, NONE user interaction, and IMPACT on confidentiality, integrity, and availability (C:H/I:H/A:...

CVE-2021-31958

Technical details for CVE-2021-31958 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-22050

CVE-2022-22050 is a Windows Fax Service elevation-of-privilege vulnerability. Documents indicate affected software is Windows Fax Service; vulnerability type is local privilege escalation with high impact (CVSSv3.1 base score 7.8) and low privileges required, no user interaction. No concrete expl...

CVE-2022-34706

Technical details about CVE-2022-34706 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for authoritative updates from Microsoft and CVE repositories.

CVE-2022-37988

CVE-2022-37988 is tied to a Windows registry hive memory corruption bug in which cells larger than 16 KiB are aligned to the next power of two during loading, causing a use-after-free when shrinking a cell. The connected material provides a detailed attacker workflow: trigger hive memory corrupti...

CVE-2022-41058

Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...

CVE-2019-1242

Technical details about CVE-2019-1242 are not provided in the connected documents; monitor for updates.

CVE-2021-34438

CVE-2021-34438 is a Windows Font Driver Host remote code execution vulnerability in Microsoft Windows/Windows Server. The CVE entry describes a remote code execution flaw in the Font Driver Host component that can be triggered locally or remotely depending on context, with high/severe impact as r...

CVE-2021-34500

Technical details about CVE-2021-34500 are not provided in the connected documents; no affected products, root-cause, impacts, or fixes are disclosed here. Monitor for updates.

CVE-2022-26796

Technical details about CVE-2022-26796 are not provided in the connected documents; no product/version/root-cause/fix information is available here. Monitor for updates.

CVE-2022-33634

CVE-2022-33634 is listed in the connected NCSc advisory as a Windows PPTP vulnerability with an impact described as “Execution of random code” and a CVSS-like score of 8.10. The available connected documents do not provide explicit exploitation details, affected product versions, root cause, or a...

CVE-2022-41076

Technical details for CVE-2022-41076 are not publicly available in the provided documents. Monitor for updates; no affected product/version or remediation details are given here.

CVE-2022-44668

CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...

CVE-2018-0878

CVE-2018-0878 is a Windows Remote Assistance information-disclosure vulnerability caused by how XML External Entities (XXE) are processed. The CVE applies to multiple Windows client/server SKUs (Windows 7 SP1, 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, Windows 10 versions 1511–1709, and...

CVE-2018-8210

Technical details such as affected product versions, root cause, exploitability, and patch guidance are not provided in the connected documents; monitor for updates.

CVE-2020-1248

CVE-2020-1248 is a remote code execution vulnerability in Windows GDI+ where memory objects are mishandled, allowing an attacker to take control of the affected system. The issue is tied to how GDI+ handles objects in memory, with exploitation typically requiring user interaction or specific cond...

CVE-2021-24094

CVE-2021-24094 is an IPv6 reassembly-related Windows TCP/IP remote code execution vulnerability. Microsoft’s TCP/IP update set identifies CVE-2021-24094 alongside CVE-2021-24074 and CVE-2021-24086, with CVSSv3 scores indicating CRITICAL impact (9.8) for the RCE flaws. The available connected docu...

CVE-2021-34459

CVE-2021-34459 is a Windows AppContainer Elevation of Privilege vulnerability with local attack vector and no user interaction required. CVSS v3.1 base score 7.8 (HIGH); impact is Confidentiality, Integrity, and Availability all High. The vulnerability is associated with AppContainer in Windows a...

CVE-2022-21913

The CVE-2022-21913 entry describes a Local Security Authority (Domain Policy) Remote Protocol Security Feature Bypass. Public documents present CVSS data from NVD (CVSS v3.1: 7.5, NETWORK, NONE privileges; CVSS v2.0: 5.0, PARTIAL impact). No concrete product/vendor/component/version/root-cause de...

CVE-2022-24483

CVE-2022-24483 is a Windows Kernel information disclosure vulnerability. Affected component is the Windows Kernel; the issue is an information disclosure likely arising from the nt!PfpPrivSourceEnum function, per a GitHub PoC describing an Information disclosure bug in that function. The connecte...

CVE-2022-24540

CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...

CVE-2023-36910

CVE-2023-36910 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ) that can be exploited remotely on affected Windows platforms (Windows 10/11 and Windows Server 2008–2022) without user interaction. The issue is formally described as MSMQ RCE with a high severity rating (...

CVE-2018-8634

CVE-2018-8634 describes a remote code execution vulnerability in Windows caused by improper handling of objects in memory by Microsoft text-to-speech. The issue affects Windows clients/servers listed in the description (e.g., Windows Server 2016, Windows 10, Windows Server 2019). The root cause i...

CVE-2019-0697

The connected advisories describe a remote code execution vulnerability in the Microsoft Windows DHCP Client caused by improper processing of DHCP responses (memory corruption) in the DhcpExtractFullOptions path. A remote attacker could send crafted DHCP replies to execute arbitrary code with adm...

CVE-2019-1291

Technical details (affected components, exploit method, patch information) are not provided in the supplied documents. Monitor for official advisories and updates for CVE-2019-1291.

CVE-2021-26443

Technical details (affected product/version, root cause, impact, and concrete remediation) are not publicly disclosed in the provided connected documents. Monitor vendor advisories and CVE records for updates to obtain authoritative remediation information.

CVE-2021-36961

Technical details about CVE-2021-36961 (Windows Installer Denial of Service) are not publicly provided in the supplied documents. No affected product versions, root cause, impact, or fix information is available here. Monitor for forthcoming updates.