CVE-2021-28354

Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.

CVE-2021-40460

Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-23296

Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.

CVE-2022-26802

CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...

CVE-2022-30200

Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2022-34733

CVE-2022-34733 pertains to the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. NVD lists CVSS v3.1 base score 8.8 (HIGH) with Network attack vector, no privileges required, user interaction needed, and high impact on confidentiality, integrity, a...

CVE-2010-3956

CVE-2010-3956 concerns the OpenType Font (OTF) driver in multiple Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 Gold/SP2/R2, and Windows 7). The vulnerability arises from an error in indexing an array when parsing OpenType fonts, enabling a local privilege escalation....

CVE-2012-2551

CVE-2012-2551 is a Kerberos denial-of-service vulnerability affecting Microsoft Windows 7 (including SP1) and Windows Server 2008 R2 (including R2 SP1). The issue is described as a remote denial of service via a crafted Kerberos session request that triggers a NULL pointer dereference, potentiall...

CVE-2017-11927

Technical details about CVE-2017-11927 are not publicly available in the provided connected documents. Monitor for updates; include affected products/versions and remediation when disclosures become available.

CVE-2018-0816

Technical details about CVE-2018-0816 are not publicly provided in the connected documents; the initial description summarizes the vulnerability but does not specify affected products, versions, impact, or fixes.

CVE-2018-8596

CVE-2018-8596 affects the Windows GDI component. The vulnerability is an information disclosure due to improper memory disclosure in GDI, impacting multiple Windows versions (Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 and various Server editions). Root cause: imp...

CVE-2019-0767

CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...

CVE-2019-0782

Technical details for CVE-2019-0782 are not publicly available in the provided documents. Monitor for updates from NVD/MSRC and ENISA EUVD databases.

CVE-2020-0634

CVE-2020-0634 affects the Windows Common Log File System (CLFS) Driver. Connected CNVD-2020-08133 describes a privilege-lifting vulnerability in the CLFS Driver caused by improper handling of memory objects, enabling privilege escalation by an authenticated user who logs on and runs a crafted app...

CVE-2020-1339

CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...

CVE-2020-1531

CVE-2020-1531 is an elevation-of-privilege flaw in Windows Accounts Control caused by improper memory handling. An attacker must already have code execution on the target host and can then run a crafted program to elevate privileges. The vulnerability’s fix is delivered via a security update that...

CVE-2020-16922

CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...

CVE-2021-28332

Technical details for CVE-2021-28332 are not provided in the connected documents. The entries reference RPC Runtime RCE in general but do not specify affected product/version/root cause or fixes. Monitor for updates.

CVE-2021-28338

Technical details for CVE-2021-28338 are not provided in the supplied documents. Monitor for official disclosures and remediation guidance as more information becomes available.

CVE-2021-28340

Technical details for CVE-2021-28340 are not publicly available in the provided documents. No affected product/version, impact, or remediation is specified here. Monitor for updates.

CVE-2021-28342

Technical details about CVE-2021-28342 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.

CVE-2021-41370

Technical details about CVE-2021-41370 are not provided in the supplied documents; no concrete affected products, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-30166

Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.

CVE-2022-38033

CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...

CVE-2022-41098

Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.

CVE-2022-41109

Technical details about CVE-2022-41109 (affected products, root cause, impact, fix) are not provided in the supplied documents. The connected entries reference patches and related issues but do not disclose vulnerability specifics.

CVE-2023-21525

Technical details for CVE-2023-21525 are not publicly provided in the supplied documents; no affected product/version/exploit information is available here. Monitor for updates from official advisories to obtain specifics and remediation guidance.

CVE-2023-21747

CVE-2023-21747 is a Windows kernel registry vulnerability caused by an out-of-memory error during a highly sensitive hive-unload operation. The issue allowed an attacker with local access to trigger memory allocation failures in a critical path, risking instability and potential misuse of hive st...

CVE-2011-5046

CVE-2011-5046 affects the Windows kernel component win32k.sys (GDI) across multiple OS versions (XP SP2/3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 Gold/SP1). The issue arises from improper validation of user-mode input in GDI, enabling remote attackers to execute arbitrary code ...

CVE-2012-1528

CVE-2012-1528 is a Windows Shell vulnerability originating from an integer overflow in the Briefcase feature. The flaw affects multiple Windows client/server platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008/R2 SP, Windows 7 SP1, Windows 8, Server 2012) and can let local users gain p...

CVE-2016-0015

DirectShow Heap Corruption Remote Code Execution (CVE-2016-0015) affects Windows components listed in the CVE, with the vulnerability arising from improper validation in DirectShow. An attacker could trigger arbitrary-code execution by convincing a user to open a crafted file, potentially gaining...

CVE-2017-0289

CVE-2017-0289 is a Windows Graphics Information Disclosure vulnerability affecting a broad set of Windows client/server releases (e.g., Windows 7/8.1/10, Windows Server 2008-2016) where the Windows GDI/Graphics components improperly disclose memory contents. The issue is linked to memory disclosu...

CVE-2018-8432

CVE-2018-8432 is a remote code execution in Microsoft Graphics Components. It affects Windows and Office components (e.g., Office, Word Viewer, Excel Viewer, PowerPoint Viewer) across multiple Windows and Office versions; the underlying issue is how Graphics Components handle objects in memory. E...

CVE-2018-8514

CVE-2018-8514 is an information-disclosure vulnerability in the Windows Remote Procedure Call (RPC) runtime caused by improper initialization of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10 (various editions), Windows Server 2008/2012/2012 R2/2016/2019, and Windows...

CVE-2018-8595

CVE-2018-8595 concerns an information-disclosure flaw in the Windows Graphics Device Interface (GDI) where memory contents are improperly disclosed. Affected are multiple Windows versions listed in the CVE (e.g., Windows 7, Windows 8.1, Windows 10 and corresponding server releases). The root caus...

CVE-2019-0598

Technical details for CVE-2019-0598 are not publicly available in the provided documents; monitor for updates.

CVE-2019-0616

Microsoft Windows GDI (Graphics Device Interface) contains an information disclosure vulnerability. The Graphics Device Interface component is affected due to improper handling of objects in memory, enabling a remote attacker to obtain sensitive information. The linked advisories corroborate the ...

CVE-2019-0617

CVE-2019-0617 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is characterized by a high-severity impact (CVSS v3.0: 7.8) with a local attack vector, requiring user interaction, and resulting in high confident...

CVE-2019-0759

Technical details about CVE-2019-0759 are not publicly available in the provided documents. Monitor for updates and additional authoritative disclosures.

CVE-2019-1148

CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...

CVE-2019-1364

Technical details for CVE-2019-1364 are not publicly available in the provided documents. The connected EUVD entries reference malware unrelated to this CVE, and there is no concrete exploit or remediation detail present here. Monitor for updates as information becomes public.

CVE-2020-1083

The CVE-2020-1083 vulnerability is a local information-disclosure issue in the Windows Graphics Component caused by improper handling of objects in memory. An attacker must log on to the affected system and run a crafted application to exploit it. The update fixes the issue by correcting how the ...

CVE-2020-1474

CVE-2020-1474 concerns the Windows Image Acquisition (WIA) Service, where memory contents can be disclosed by an attacker who authenticates and connects an imaging device (camera, scanner, phone) to a vulnerable system and runs a crafted application. The vulnerability arises from how the WIA Serv...

CVE-2021-28352

Technical details for CVE-2021-28352 are not provided in the supplied documents. No affected products, impact, or remediation information are disclosed here. Monitor for updates from official advisories and vendor advisories to obtain concrete details.

CVE-2021-40489

Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.

CVE-2022-21916

Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.

CVE-2009-0090

CVE-2009-0090 corresponds to a high-severity remote code execution vulnerability in Microsoft .NET Framework. The issue arises because .NET Framework versions 1.0 SP3, 1.1 SP1 and 2.0 SP1 do not properly validate verifiable code, enabling a remote attacker to execute arbitrary code and read stack...

CVE-2015-0014

CVE-2015-0014 corresponds to a Telnet service buffer overflow in multiple Windows editions (Server 2003 SP2; Vista SP2; Server 2008 SP2/R2 SP1; 7; 8; 8.1; Server 2012/2012 R2). The underlying issue is a buffer overflow in the Windows Telnet Service (tlntsess.exe) caused by improper processing/val...

CVE-2016-3304

CVE-2016-3304 is the Windows Graphics Component remote code‑execution vulnerability where the Windows font library improperly handles crafted embedded fonts, affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Office 2007 SP3/2010 SP2, Word Viewer, Skype for Business 2016,...

CVE-2018-0959

CVE-2018-0959 is a remote code execution vulnerability in Windows Hyper-V where a host server fails to validate input from an authenticated user on a guest OS. Affected products include Windows clients and server editions listed in the description (e.g., Windows 7, 8.1; Windows Server 2008-2016; ...