CVE-2021-31182

CVE-2021-31182 concerns Microsoft Bluetooth Driver Spoofing vulnerability. CVSS‑3.1 score 7.1 (AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N). Affected component: Microsoft Bluetooth Driver. Root cause/impact: spoofing could compromise confidentiality (low) and integrity (high) with no availability impact ...

CVE-2022-21897

Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.

CVE-2022-38026

CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...

CVE-2012-0175

CVE-2012-0175 corresponds to a Windows Shell remote code execution vulnerability caused by how Windows handles specially crafted file or directory names. The issue affects multiple Windows editions, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/...

CVE-2014-0263

CVE-2014-0263 concerns a remote code execution vulnerability in the Windows Graphics Component (Direct2D). The issue arises when the Direct2D implementation in affected Windows versions encounters a large 2D geometric figure, processed via Internet Explorer, leading to memory corruption that can ...

CVE-2017-11780

CVE-2017-11780 is a remote code execution vulnerability in the Microsoft Windows Server Message Block 1.0 (SMBv1) server. The issue occurs when SMBv1 fails to handle certain requests, allowing an unauthenticated attacker to execute code on the target server over the network. Affected products inc...

CVE-2018-0811

Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.

CVE-2018-8332

CVE-2018-8332 is a remote code execution vulnerability in the Windows font library (Win32k) where specially crafted embedded fonts are mishandled. It affects a broad set of Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server equivalents listed in the initial entry), as well...

CVE-2019-0623

CVE-2019-0623 affects Windows due to a Win32k memory handling issue that enables local privilege escalation. The vulnerability arises when the Win32k component fails to properly handle objects in memory, enabling an attacker with local access to elevate privileges. The provided documents describe...

CVE-2019-0732

CVE-2019-0732 affects Windows by bypassing Device Guard due to improper handling of calls to the LUAFV driver (luafv.sys). The issue enables local, low-privilege attackers to achieve partial confidentiality, integrity, and availability impacts as described in the CVE context. Exploitation is docu...

CVE-2019-0791

CVE-2019-0791 is a remote code execution vulnerability in the Microsoft XML Core Services (MSXML) parser when it processes user input. The issue enables network-based exploitation with user interaction required, and is rated HIGH (CVSS v3.0: 8.8). The initial document does not specify a fixed pat...

CVE-2019-0948

CVE-2019-0948 is an information-disclosure vulnerability in Windows Event Viewer (eventvwr.msc) where XML input containing an external entity reference is improperly parsed. An authenticated user can be persuaded to import a crafted XML file, allowing an attacker to read arbitrary files via an XM...

CVE-2019-1039

The CVE-2019-1039 entry describes an information disclosure vulnerability in the Windows kernel where objects are improperly initialized in memory. A locally authenticated attacker could run a crafted application to obtain information that could be used to further compromise the system. Root caus...

CVE-2019-1235

CVE-2019-1235 describes an elevation of privilege in Windows Text Service Framework (TSF) where the TSF server does not validate the source of input or commands it receives. Local, low-attack-surface vector with high impact (C/H/I/A). The vulnerability is tracked with Microsoft advisories and upd...

CVE-2020-1518

Technical details about CVE-2020-1518 (affected component, root cause, impact, exploitability or patch specifics) are not publicly provided in the connected documents; monitor for updates from official sources for concrete information.

CVE-2021-31968

CVE-2021-31968 is a Windows Remote Desktop Services Denial of Service vulnerability. The vulnerability affects Microsoft Windows systems exposing Remote Desktop Services and can impact availability (per CVSS v3.1: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/A:H). Connected sources confirm it as a remotely trig...

CVE-2021-34511

Technical details about CVE-2021-34511 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit, impact, or remediation details are present in the connected content.

CVE-2022-21850

CVE-2022-21850 is described in the provided materials as a Remote Desktop Client Remote Code Execution vulnerability. The connected documents confirm the vulnerability relates to the Windows Remote Desktop Client but do not provide concrete technical specifics (e.g., root cause, affected versions...

CVE-2022-22710

CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...

CVE-2022-30142

CVE-2022-30142 is a Windows File History Remote Code Execution vulnerability reported with CVSS v3.1 base score 7.5 (HIGH) and network attack vector, requiring user interaction. The vulnerability affects Windows File History and involves a high-impact compromise of confidentiality, integrity, and...

CVE-2022-34719

Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.

CVE-2022-41074

Technical details for CVE-2022-41074 are not publicly provided in the supplied documents. Monitor updates from Microsoft/NVD for affected component, impact, and remediation.

CVE-2013-5056

The CVE-2013-5056 issue is a use-after-free vulnerability in the Microsoft Scripting Runtime Object Library (scrrun.dll) that allows remote code execution when a user visits a crafted website via Internet Explorer. Affected products span multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vis...

CVE-2014-1811

CVE-2014-1811 affects the Windows TCP/IP stack in Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012, and Windows RT (and related editions). The vulnerability arises from handling malformed data in the TCP header Options field, leading to remote denia...

CVE-2019-0628

Technical details for CVE-2019-0628 are not provided in the connected documents. Public details appear limited to generic references; monitor official advisories for updates.

CVE-2019-0784

Technical details for CVE-2019-0784 are not publicly available in the provided documents; no confirmed affected products, versions, or fixes are listed. Monitor for updates from official sources as additional information may be published.

CVE-2019-0848

CVE-2019-0848 is an information disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The issue is distinct from CVE-2019-0814. Public data indicates local access and potential partial confidentiality impact, with CVSS metrics showing a low to m...

CVE-2019-0906

CVE-2019-0906: Jet Database Engine remote code execution in Windows. In memory handling flaw could allow arbitrary code execution when a victim opens a specially crafted file. Update from Microsoft fixes the memory handling of objects in the Jet engine to address the vulnerability; exploit detail...

CVE-2020-17001

CVE-2020-17001 is a Windows Print Spooler Elevation of Privilege vulnerability. Affected software is Windows Print Spooler. The CVSS context from NVD (base CVSSv3.1 score 7.8, HIGH) indicates local, low complexity, no user interaction required, with HIGH impacts on confidentiality, integrity, and...

CVE-2021-33752

CVE-2021-33752 is described as a Windows DNS Snap-in Remote Code Execution vulnerability. Connected sources corroborate a DNS Snap-in RCE in Microsoft Windows/Windows Server, indicating an elevated risk with a network attacker, high impact (CVE-3.1: HIGH) and no authentication required, with user...

CVE-2021-36932

CVE-2021-36932 affects Windows Services for NFS ONCRPC XDR Driver. The available information indicates an information-disclosure vulnerability with network access (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base 7.5). The description confirms the issue but does not provide detailed root-cause...

CVE-2021-36970

Technical details for CVE-2021-36970 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or remediation are present here; monitor for updates from official sources.

CVE-2022-26786

Technical details for CVE-2022-26786 are not publicly available within the provided documents. No concrete affected products, versions, or fixes are stated here. Monitor for updates from official sources to obtain remediation and impact information.

CVE-2022-35756

Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.

CVE-2022-44666

CVE-2022-44666 is a Windows Contacts RCE affecting the Windows Contacts components (VCF/Contact handling) where an href/link attribute processing flow could reach SafeExecute and execute arbitrary code. Affected context centers on wab32.dll/wab.exe usage within Windows Contacts; PoCs and public w...

CVE-2013-3183

Microsoft Windows ICMPv6 Packet Denial of Service (CVE-2013-3183) affects multiple Windows platforms (Vista SP2, 2008 SP2/R2 SP1, 7 SP1, 8, 2012, RT) where the TCP/IP stack improperly allocates memory for inbound ICMPv6 packets, causing remote denial of service (system hang) via crafted packets. ...

CVE-2019-0614

The connected advisories confirm an information disclosure vulnerability in Microsoft Windows GDI. The Graphics Device Interface component is affected by improper handling of in-memory objects, exposing memory contents. CPAI-2019-1525 notes remote attackers could exploit this to access sensitive ...

CVE-2019-0844

Technical details about CVE-2019-0844 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected products, impact, and remediation.

CVE-2019-0845

Technical details for CVE-2019-0845 are not publicly available in the provided documents. Monitor for updates to determine affected products, impact, and fixes.

CVE-2019-0902

The connected documents describe a vulnerability in the Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow arising when memory-boundary checks are not properly performed during operations in memory. The root cause is that data boundaries are not validated, leading to an out-of...

CVE-2020-16939

CVE-2020-16939 is a Microsoft Windows elevation-of-privilege vuln in Group Policy where access is not correctly checked. An attacker must log on and run a crafted application to execute code in an elevated context. NVD/metrics: CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW, User Intera...

CVE-2022-30164

Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.

CVE-2023-21773

Technical details for CVE-2023-21773 are not provided in the supplied documents. Monitor for official advisories for updates and remediation.

CVE-2018-0897

CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...

CVE-2018-8562

CVE-2018-8562 is a Windows local elevation-of-privilege flaw in the Win32k subsystem caused by improper handling of objects in memory. It affects multiple Windows versions (Windows 7/Server editions/Windows 10 families) and could allow a local attacker to execute code in kernel mode. Remediation ...

CVE-2019-0636

CVE-2019-0636 is described as an information disclosure vulnerability where Windows improperly discloses file information. The provided documents do not supply concrete technical details (affected products/versions, root cause, exploit info, or remediation). No further technical specifics are ava...

CVE-2019-0765

CVE-2019-0765: remote code execution in comctl32.dll due to how the library handles objects in memory, termed the Comctl32 Remote Code Execution Vulnerability. Affected software is Windows’ comctl32.dll component; exact versions and vulnerable configurations are not specified in the provided docu...

CVE-2019-1144

CVE-2019-1144 is a remote code execution vulnerability in the Windows font library (fontsub.dll) triggered by specially crafted embedded fonts. The impact, per NVD/NVD-derived sources, is full system compromise: attacker can install programs, view/modify/delete data, and create accounts with full...

CVE-2019-1145

CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...

CVE-2019-1150

CVE-2019-1150 affects the Windows font library’s handling of embedded fonts, leading to remote code execution. The vulnerability arises from how font data is processed, enabling an attacker to run arbitrary code on the targeted system. Documented impact includes potential full system compromise, ...