CVE-2018-0971

CVE-2018-0971 is an information-disclosure vulnerability in the Windows kernel that could enable an attacker to bypass Kernel ASLR. The Initial description lists affected Windows versions (multiple client/server editions). Connected documents show exploitation references: CIRCL entries for CVE-20...

CVE-2018-8450

CVE-2018-8450 is a Windows Remote Code Execution vulnerability affecting Windows Search where an attacker can exploit memory handling of objects to take control of the system. The issue is addressed by Microsoft security updates KB4467702 (Windows 10 v1803/Server 1803) and related KBs for Windows...

CVE-2018-8481

CVE-2018-8481 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products listed include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions). The connected documents (EUVD/CNVD/NVD) describe th...

CVE-2019-0716

CVE-2019-0716 is a Windows Denial of Service vulnerability caused by improper handling of memory objects. The public description states that an attacker who logs on to an affected system and runs a specially crafted application could cause the target to stop responding. The issue does not allow c...

CVE-2019-0856

Technical details about CVE-2019-0856 (affected products, root cause, impact, and fixes) are not present in the provided documents. Monitor official Microsoft advisories and Vulners updates for new information.

CVE-2019-1187

CVE-2019-1187 is a denial-of-service vulnerability in the XmlLite runtime (XmlLite.dll) where improper XML input parsing can cause a crash. According to the NVD/NIST entry, exploitation is possible by a remote, unauthenticated attacker issuing specially crafted XML requests to an XML application,...

CVE-2019-1290

Technical details about CVE-2019-1290 are not publicly provided in the connected documents; the materials describe the vulnerability in general terms and reference other CVEs. Monitor for updates.

CVE-2020-0632

Technical details about CVE-2020-0632 are not publicly provided in the connected records; no affected products, root cause, impact, or fix information is disclosed here. Monitor for updates from vendors/security advisories.

CVE-2020-1070

Technical details for CVE-2020-1070 are not provided in the supplied documents; only a high-level description is available. Monitor for updates.

CVE-2020-1317

Technical details for CVE-2020-1317 are not present in the provided connected documents. The initial entry notes a Group Policy elevation of privilege issue but does not publish affected products, versions, impact, or remediation. Monitor for updates.

CVE-2020-1554

CVE-2020-1554 affects Windows Media Foundation memory handling. The vulnerability is a memory corruption issue in Windows Media Foundation when it improperly handles objects in memory, potentially allowing an attacker to install programs, view/change/delete data, or create accounts with full righ...

CVE-2021-1666

Technical details about CVE-2021-1666 are not provided in the supplied documents; none of the connected items reveal affected products, versions, root cause, impact, or remediation. Monitor for updates.

CVE-2021-28344

Technical details for CVE-2021-28344 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28355

Technical details for CVE-2021-28355 are not publicly available in the provided documents; monitor for updates.

CVE-2021-36962

Technical details for CVE-2021-36962 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-38630

Technical details (affected product, root cause, impact, or fix) are not provided in the connected documents for CVE-2021-38630. Monitor official advisories (NVD, MSRC) for updates.

CVE-2022-21835

CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...

CVE-2022-29131

CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...

CVE-2023-21748

CVE-2023-21748 is a Windows kernel local EoP vulnerability rooted in registry hive memory corruption (HKCU, volatile storage). The blog post chain explains an attack primitive using out-of-bounds hive cell indexes that map to _CMHIVE/_HHIVE structures via a 32-bit cell index, enabling precise der...

CVE-2018-1040

The CVE-2018-1040 issue is a Denial of Service vulnerability in Windows’ Code Integrity Module hashing. Affected products include Windows 7, Windows 8.1/Server variants, Windows 10, and newer Server editions. The underlying cause is in the hashing routine of the Code Integrity Module, leading to ...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8348

CVE-2018-8348 is a Windows kernel information disclosure vulnerability caused by improper handling of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016 and related Server variants. Impact is information disclosure (confidentiality) with lo...

CVE-2018-8411

CVE-2018-8411 is a local NTFS elevation-of-privilege vulnerability in Windows due to NTFS failing to properly check access rights. A local attacker could exploit this to gain elevated privileges on affected Windows editions (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016/2019 a...

CVE-2019-0754

Technical details about CVE-2019-0754 are not publicly provided in the connected documents. The available sources reiterate the general Windows DoS description without specifics on affected components, versions, or fixes. Monitor for updates.

CVE-2019-1333

Technical details about CVE-2019-1333 (affected components, root cause, impact, or fixes) are not provided in the connected documents. The initial description references a Windows Remote Desktop Client RCE, but no public details are included here; monitor for updates.

CVE-2020-1376

CVE-2020-1376 describes an elevation-of-privilege in Windows components, specifically fdSSDP.dll handling of memory and the fix addressing memory object handling in ssdpsrv.dll. The exploit requires a locally authenticated attacker to run a crafted application to achieve code execution with eleva...

CVE-2020-1529

CVE-2020-1529 is a Windows GDI elevation-of-privilege vulnerability where improper handling of in-memory GDI objects could allow a local attacker to run code in kernel mode. The initial description notes kernel-mode code execution and privilege elevation after logging on and running a crafted app...

CVE-2020-1557

CVE-2020-1557: A remote code execution vulnerability in the Windows Jet Database Engine occurs due to improper handling of objects in memory. An attacker could trigger code execution by persuading a user to open a specially crafted file. The update fixes the issue by correcting how the Jet Engine...

CVE-2021-28330

Technical details for CVE-2021-28330 are not publicly provided in the supplied documents. The sources reference the vulnerability by ID and a generic description; monitor for updates.

CVE-2021-28335

CVE-2021-28335 corresponds to a remote code execution vulnerability in the Windows RPC Runtime. Affected product scope is Microsoft Windows/Windows Server; root cause is a vulnerability in RPC Runtime that enables remote code execution with network access. CVSSv3.1 base score is 8.8 (HIGH), with ...

CVE-2022-26790

Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-21760

Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2016-7237

CVE-2016-7237 affects Local Security Authority Subsystem Service (LSASS) in Windows between Vista SP2 and Windows Server 2016. The vulnerability allows remote authenticated users to cause a denial of service (system hang) by sending a crafted request, via the LSASS handling path (notably connecte...

CVE-2018-8394

CVE-2018-8394 is an information disclosure vulnerability in the Windows GDI component. The provided documents state that the GDI memory contents can be improperly disclosed, affecting multiple Windows versions (e.g., Windows 7, Windows 10, various Windows Server editions). The Connected documents...

CVE-2019-0603

CVE-2019-0603 impacts Windows Deployment Services TFTP Server. The vulnerability stems from improper handling of objects in memory within WDSTFTP, allowing a remote attacker to craft a request that executes arbitrary code with elevated privileges. The available connected documents confirm this re...

CVE-2019-0663

CVE-2019-0663 concerns a Windows kernel information-disclosure vulnerability. The Windows kernel improperly initializes objects in memory, enabling an authenticated, local attacker to obtain sensitive information by running a specially crafted application. Affects the Windows kernel (memory-objec...

CVE-2019-0774

Technical details for CVE-2019-0774 are not provided in the connected documents. The sources describe a Windows GDI information disclosure vulnerability related to these CVEs but do not specify affected products, versions, or a fix for 0774. Monitor for updates.

CVE-2019-1419

CVE-2019-1419 is a remote code execution vulnerability in Microsoft Windows affecting the Windows Adobe Type Manager Library, caused by improper handling of specially crafted OpenType fonts. The issue is described consistently across the NVD entry and Red Hat CVE records (RH:CVE-2019-1419/CVE-201...

CVE-2019-1467

CVE-2019-1467 corresponds to a Windows GDI Information Disclosure vulnerability. The connected CNVD entries describe an information leakage in the Windows GDI component, where memory contents may be disclosed by an attacker who tricks a user into opening content or visiting a page. These sources ...

CVE-2020-0623

Technical details (affected products, versions, root cause, impact or fixes) for CVE-2020-0623 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-1377

The connected materials describe CVE-2020-1377 within a broader Windows Registry/hive memory‑corruption research stream. They detail how hive memory corruption can be exploited locally via controlled regf data, use‑after‑free in security descriptors, and out‑of‑bounds cell indexes to pivot into k...

CVE-2020-1379

Technical details about CVE-2020-1379 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2020-1587

CVE-2020-1587 : Elevation of privilege in the Windows Ancillary Function Driver for WinSock caused by improper memory handling. Exploitation requires an initial execution on the victim, followed by running a crafted app to elevate privileges. Microsoft’s security update fixes the memory handling ...

CVE-2020-16936

CVE-2020-16936 describes an elevation of privilege vulnerability in Windows Backup Service caused by improper handling of file operations. An attacker must first achieve code execution on the target system and could then run a crafted application to elevate privileges. The vulnerability is mitiga...

CVE-2021-1668

CVE-2021-1668 : Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-28336

The provided documents reference CVE-2021-28336 as a Windows RPC Runtime Remote Code Execution vulnerability. The CNVD entry describes a remote code execution flaw in the RPC Runtime affecting Microsoft Windows/Windows Server. Nessus/OpenVAS plugins in the connected set list CVE-2021-28336 among ...

CVE-2021-28346

Technical details about CVE-2021-28346 are not provided in the supplied documents. Monitor for updates from official advisories; no affected product/version/root-cause/mitigation details are present here.

CVE-2021-31188

CVE-2021-31188 is a Windows Graphics Component Elevation of Privilege vulnerability. The connected documents corroborate that this CVE is addressed by May 2021 Windows security updates (e.g., KB5003173, KB5003208, KB5003203 and related servicing patches) as part of updates to Windows App Platform...

CVE-2021-33765

Technical details about CVE-2021-33765 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-33783

CVE-2021-33783 is a Windows SMB Information Disclosure Vulnerability affecting Microsoft Windows/Windows Server SMB behavior. The primary sources classify it as a network-exposed SMB issue with information disclosure impact (confidentiality high per CVSS 3.1, I:N, A:N) and partial information exp...