CVE-2021-31186

CVE-2021-31186 is a Windows RDP information disclosure vulnerability. The provided connected documents identify the CVE as part of broader Microsoft Windows vulnerability assessments (e.g., OpenVAS/Nessus plugins) and list it among CVEs in KB updates and advisories. The core details in the materi...

CVE-2021-34450

CVE-2021-34450 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Hyper-V components on Windows Server/Windows; attacker could exploit from within a guest VM to execute code on the host (authenticated VM user). Exploitation details in connected sources indicate host compromise vi...

CVE-2022-22009

CVE-2022-22009 is a Windows Hyper-V remote code execution vulnerability. The connected sources confirm Hyper-V is affected and provide concrete product scope: Windows Hyper-V on affected Windows Server/Windows versions with the hypervisor component implicated. CVSS details from the sources indica...

CVE-2022-22045

Technical details about CVE-2022-22045 are not provided in the supplied documents. The inputs only state the vulnerability title without specifics (affected product/version, impact, exploit, or remediation). Monitor for updates.

CVE-2022-24479

Technical details about CVE-2022-24479 are not provided in the connected documents. The entry's description is general; no information on affected product, root cause, impact, or remediation is present here. Monitor for updates.

CVE-2022-30149

Technical details for CVE-2022-30149 (affected component/versions, exploit specifics, and remediation) are not present in the provided connected documents. Monitor for official updates and new public disclosures.

CVE-2018-8210

Technical details such as affected product versions, root cause, exploitability, and patch guidance are not provided in the connected documents; monitor for updates.

CVE-2019-1012

CVE-2019-1012 refers to an information-disclosure vulnerability in the Windows GDI component where memory contents can be disclosed due to improper handling of objects. The issue could be exploited by convincing a user to open a specially crafted document or visit an untrusted page, enabling info...

CVE-2019-1065

CVE-2019-1065 is a Windows kernel elevation-of-privilege vulnerability. It occurs when the Windows kernel fails to handle memory objects securely, enabling a locally authenticated attacker to run arbitrary code in kernel mode, potentially installing programs, altering or deleting data, viewing da...

CVE-2020-1577

CVE-2020-1577 affects DirectWrite. The connected documents confirm an information-disclosure flaw where DirectWrite may reveal memory contents; exploitation could be achieved by convincing a user to open a crafted document or visit an untrusted page. The Microsoft advisory notes the fix is to cor...

CVE-2021-26443

Technical details (affected product/version, root cause, impact, and concrete remediation) are not publicly disclosed in the provided connected documents. Monitor vendor advisories and CVE records for updates to obtain authoritative remediation information.

CVE-2021-33756

CVE-2021-33756 corresponds to a remote code execution flaw in the Windows DNS Snap-in affecting Windows/Windows Server. Public documents identify the affected component as the DNS Snap-in and confirm a high-severity issue (CVSS v3.1 base score 8.8; network vector, no privileges required, user int...

CVE-2021-34533

CVE-2021-34533 is a Windows Graphics Component Font Parsing Remote Code Execution Vulnerability. Affected software is the Windows Graphics Component; the issue arises from font parsing logic, enabling code execution on the target system. The CVSS data indicates a HIGH impact with potential local ...

CVE-2021-38667

CVE-2021-38667 is a Windows Print Spooler Elevation of Privilege vulnerability. The NVD entry identifies it as a local, low-attack-complexity flaw that yields partial confidentiality, partial integrity, and partial availability impact, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attacke...

CVE-2022-30222

Technical details about CVE-2022-30222 (Windows Shell Remote Code Execution Vulnerability) are not provided in the supplied documents. The connected items reference the vulnerability but do not specify affected products, root cause, impact, fixes, or exploit information. Monitor for updates.

CVE-2018-0743

Summary (CVE-2018-0743): Elevation of privilege in Windows Subsystem for Linux (WSL) on Windows 10 (versions 1703 and 1709) and Windows Server 1709 due to improper handling of memory objects. The vulnerability allows a local attacker to run code with elevated privileges by exploiting how WSL mana...

CVE-2018-0744

CVE-2018-0744 is a Windows kernel elevation-of-privilege vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (various builds up to 1709), and Windows Server 2016/1709. The issue arises from how the kernel handles objects in memory, enabling local privilege escalation. E...

CVE-2018-1010

Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.

CVE-2019-0555

The CVE-2019-0555 entry corresponds to an elevation of privilege in Microsoft XmlDocument that can escape AppContainer sandbox via cross-boundary remoting. Connected analysis explains an IDispatch/type library abuse path: malicious clients query for the old IXMLDOMDocument interface, then marshal...

CVE-2019-1019

CVE-2019-1019 is a Windows security feature bypass in NTLM authentication that allows bypassing validation on NETLOGON messages, enabling an attacker to access a machine with their original user privileges after sending a crafted authentication request. Connected material confirms related exploit...

CVE-2020-1492

CVE-2020-1492 – Windows Media Foundation memory corruption : A memory handling flaw in Windows Media Foundation can lead to memory corruption when objects are processed in memory. An attacker who exploits this could install programs, view/modify/delete data, or create new accounts with full right...

CVE-2021-31187

CVE-2021-31187 affects Windows WalletService and is described as a local elevation of privilege vulnerability. Per NVD, CVSSv3.1 base score 7.8 (HIGH) with a LOCAL attack vector, LOW privileges required, NONE user interaction, and IMPACT on confidentiality, integrity, and availability (C:H/I:H/A:...

CVE-2021-31958

Technical details for CVE-2021-31958 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-33750

CVE-2021-33750 is a Windows DNS Snap-in Remote Code Execution vulnerability affecting Windows/Windows Server DNS snap-in. The CNVD/NVD entries describe a remote code execution flaw in the DNS snap-in component that could enable an attacker to compromise affected systems. NVD CVSSv3.1/MB: 8.8 (NET...

CVE-2022-44668

CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...

CVE-2023-24859

CVE-2023-24859 is a Windows vulnerability described as a denial-of-service issue in the Windows Internet Key Exchange (IKE) extension. The available data identifies the affected component as the IKE extension and notes impact as availability degradation (DoS) with network attack vector and no use...

CVE-2019-0943

CVE-2019-0943: Windows ALPC handling flaw leads to local privilege escalation. Root cause: improper handling of ALPC calls allowing a logged-on attacker to run code in the system’s security context. Impact per sources: potential full control, data changes/deletion, new accounts with full rights. ...

CVE-2021-24094

CVE-2021-24094 is an IPv6 reassembly-related Windows TCP/IP remote code execution vulnerability. Microsoft’s TCP/IP update set identifies CVE-2021-24094 alongside CVE-2021-24074 and CVE-2021-24086, with CVSSv3 scores indicating CRITICAL impact (9.8) for the RCE flaws. The available connected docu...

CVE-2021-26425

CVE-2021-26425 is a Windows Event Tracing elevation-of-privilege vulnerability. Affects Windows Event Tracing component with local, low-privilege attack requirements and high impact on confidentiality/integrity/availability (per CVSS 3.1 vector). The connected sources confirm this CVE within Micr...

CVE-2022-30208

Public technical details about CVE-2022-30208 are not provided in the connected documents. The entry describes a Windows SAM DoS vulnerability but includes no affected product versions, exploit specifics, or remediation. Monitor for official advisories and updates.

CVE-2022-34706

Technical details about CVE-2022-34706 (affected products, root cause, impact, fixes) are not provided in the connected documents. Monitor for authoritative updates from Microsoft and CVE repositories.

CVE-2023-23420

CVE-2023-23420 is a Windows Registry hive memory corruption bug (UAF) tied to transacted key rename. The exploit plan targets the HKCU hive (volatile storage) via a lightweight or KTM transaction sequence that renames a key, then frees keys in a transaction, producing a layout where freed cells c...

CVE-2018-8626

CVE-2018-8626 is a remote code execution vulnerability in Windows DNS servers caused by improper handling of requests, leading to a heap overflow. Affected products include Windows Server variants and Windows 10/Server deployments configured as DNS servers. The root cause centers on the Windows D...

CVE-2019-0697

The connected advisories describe a remote code execution vulnerability in the Microsoft Windows DHCP Client caused by improper processing of DHCP responses (memory corruption) in the DhcpExtractFullOptions path. A remote attacker could send crafted DHCP replies to execute arbitrary code with adm...

CVE-2020-1281

CVE-2020-1281 correlates to a Microsoft Windows OLE Remote Code Execution vulnerability. CNVD-2021-22931 describes a flaw where Windows OLE fails to properly validate user input, enabling an attacker to execute arbitrary code via a crafted file or program. The initial description also notes remot...

CVE-2020-16913

This CVE is a Windows kernel-mode elevation-of-privilege vulnerability (Win32k) where the Windows kernel-mode driver improperly handles objects in memory. An attacker who can log on and run a crafted application could execute code in kernel mode, install programs, and modify data or create accoun...

CVE-2021-40447

Technical details about CVE-2021-40447 (Windows Print Spooler Elevation of Privilege) are not provided in the supplied documents. No affected products/versions/root-cause are specified. Monitor official advisories (e.g., Microsoft security guidance) for updates.

CVE-2022-21869

Technical details about CVE-2022-21869 (Clipboard User Service Elevation of Privilege) are not provided in the connected documents. Monitor for updates; current sources do not publicly disclose affected products, root cause, impact, or fixes in this dataset.

CVE-2022-21922

Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.

CVE-2022-24494

CVE-2022-24494 refers to a Windows vulnerability in the Windows Ancillary Function Driver for WinSock that allows Elevation of Privilege. The issue is a Local attack requiring Low privileges with no user interaction, and is described as affecting Confidentiality, Integrity, and Availability (per ...

CVE-2022-26808

Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2022-34708

Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.

CVE-2022-35765

Technical details about CVE-2022-35765 (affected product, root cause, impact, fix) are not provided in the supplied documents. Monitor for official disclosures and vendor advisories for remediation once published.

CVE-2022-38040

Technical details about CVE-2022-38040 (Microsoft ODBC Driver RCE) are not provided in the supplied documents. Public information on affected components, root cause, impact specifics, or fixes is not present here. Monitor for updates in the connected sources for any disclosed details.

CVE-2022-41058

Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.

CVE-2022-41076

Technical details for CVE-2022-41076 are not publicly available in the provided documents. Monitor for updates; no affected product/version or remediation details are given here.

CVE-2023-21767

Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2018-0749

CVE-2018-0749 is an elevation-of-privilege issue in the Windows SMB Server (affecting Windows 7 SP1, 8.1, 10 variants, Server 2008/2012/2016, etc.). The root cause centers on how the SMB server and NT Object Manager handle Extended Attributes and process IDs when opening named pipes, which could ...

CVE-2019-1289

CVE-2019-1289 is a Windows vulnerability described as an elevation of privilege in Windows Update Delivery Optimization caused by improper enforcement of file share permissions. Affected: Windows Update Delivery Optimization component. Impact: local privilege escalation with integrity impact (I:H...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...