CVE-2019-0974

CVE-2019-0974 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file, potentially executing arbitrary code on the affected system. The update fixes the issue by co...

CVE-2019-1219

CVE-2019-1219 is an information disclosure vulnerability in Windows Transaction Manager caused by improper handling of objects in memory. Publicly documented by NVD as a Windows MCU information disclosure issue with a CVSS v2 base score of 2.1 (Low) and CVSS v3.1 base score of 5.5 (Medium), sugge...

CVE-2019-1240

CVE-2019-1240 affects the Windows Jet Database Engine. The vulnerability stems from improper handling of objects in memory, enabling remote code execution when a user opens a specially crafted file. Exploitation would occur locally (attackVector LOCAL) with user interaction required, and could al...

CVE-2020-1475

CVE-2020-1475 is a Windows Server Resource Management Service Elevation of Privilege vulnerability. The issue arises from how srmsvc.dll handles objects in memory, enabling a locally authenticated attacker to execute code with elevated privileges. The vulnerability is triggered by running a speci...

CVE-2020-1579

CVE-2020-1579 affects the Windows Function Discovery SSDP Provider. Root cause: improper memory handling leading to privilege elevation. Exploitation requires local code execution to run a crafted app and elevate rights. The security update fixes memory handling in the provider; no further exploi...

CVE-2020-16963

CVE-2020-16963 is a Windows Backup Engine elevation-of-privilege vulnerability with a CVSSv3 base score of 7.8 (LOCAL, LOW attack complexity, Privileges Required: LOW, NONE user interaction). The provided documents do not include explicit technical details on the root cause or affected components...

CVE-2021-27095

Technical details about CVE-2021-27095 are not publicly provided in the connected documents. The materials reference the vulnerability only as Windows Media Video Decoder Remote Code Execution without specific affected products, versions, or fixes.

CVE-2021-28333

Technical details about CVE-2021-28333 are not publicly provided in the supplied documents. The connected entries mention the vulnerability at a high level but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2021-28358

Technical details for CVE-2021-28358 are not provided in the given documents. Monitoring updates is recommended as no affected products, root cause, impact, or remediation are stated here.

CVE-2021-31954

CVE-2021-31954 is a Windows CLFS driver elevation-of-privilege vulnerability. The affected component is the Windows Common Log File System Driver, and the CVSS vectors indicate LOCAL attack vector with LOW attack complexity and privileges required (LOW), no user interaction, and total impact on c...

CVE-2022-21915

Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.

CVE-2022-35750

Technical details about CVE-2022-35750 (affected product/component, versions, root cause, exploitability) are not publicly available in the provided Connected Documents. Monitor for updates and new disclosures in authoritative sources.

CVE-2022-35840

Technical details about CVE-2022-35840 are not publicly available in the provided documents. Monitor for updates from the cited sources to learn affected products, impact, and remediation.

CVE-2022-37955

Technical details for CVE-2022-37955 are not publicly provided in the supplied documents; the materials reference only updates without specific vulnerable components, root cause, or fixes. Monitor for official disclosures and patch guidance.

CVE-2022-38038

CVE-2022-38038 is a Windows kernel registry vulnerability caused by a 16-bit integer overflow during dynamic buffer length calculations in hive loading, leading to hive-based memory corruption and local privilege escalation. The issue is tied to regf/hive loading paths and is grouped with other r...

CVE-2022-41094

Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.

CVE-2018-0901

Technical details about CVE-2018-0901 are not publicly available in the provided connected documents; monitor for updates.

CVE-2018-1036

The CVE-2018-1036 entry describes an NTFS elevation of privilege in Windows where access checks are improperly performed. Affected products include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions such as 2008, 2012, 2016, and 2012 R2 variants). The vulnerability is l...

CVE-2018-8308

CVE-2018-8308 is a Windows kernel elevation of privilege vulnerability caused by improper handling of memory objects. The issue enables a local attacker to escalate privileges by exploiting kernel memory handling weaknesses. Affected platforms include Windows 7, Windows Server 2008/2012 (and R2),...

CVE-2019-0891

CVE-2019-0891 involves the Windows Jet Database Engine. Connected CNVD entries describe multiple buffer overflow/heap overflow vulnerabilities in the Jet Database Engine across Windows/Windows Server, arising when memory operations fail to validate data boundaries, leading to out-of-bounds reads/...

CVE-2019-0894

CVE-2019-0894 concerns the Windows Jet Database Engine remote code execution caused by improper in-memory handling (memory boundaries) in Jet DB. Connected CNVD entries describe a related class of vulnerabilities in the Windows Jet Database Engine: buffer overflow/heap overflow arising when memor...

CVE-2019-0909

CVE-2019-0909 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to execute arbitrary code with the user’s privileges. Impact is reported as high (C/H/I/A). Remediation...

CVE-2019-1484

CVE-2019-1484 describes a Windows OLE remote code execution vulnerability caused by improper validation of user input. Red Hat entry mirrors this description. OpenVAS items reference missing Microsoft security updates (e.g., KB4530684/68/89/71/73/and others) as remediation, implying patching via ...

CVE-2020-0620

Technical details for CVE-2020-0620 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0782

Technical details for CVE-2020-0782 are not publicly available in the provided documents. The initial description gives a high-level remediation but no product/version/root-cause or exploit specifics. Monitor for updates from official advisories.

CVE-2020-1520

CNVD-2020-49363 and CVE-2020-1520 describe a Windows Remote Code Execution flaw in the Windows Font Driver Host caused by improper memory handling. Affected: Windows Font Driver Host on Windows/Windows Server. Impact: remote code execution with attacker gaining code execution on the victim. Remed...

CVE-2021-28339

CVE-2021-28339 is a Remote Procedure Call Runtime remote code execution vulnerability affecting Windows components. The connected scans show the CVE referenced across multiple Windows monthly security updates (KB5001330/1335/1337/1340/1342/1347) and in Nessus/OpenVAS feeds, indicating it is being...

CVE-2021-28357

CVE-2021-28357 is a Windows RPC Runtime Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.8 (network, low privileges required, no user interaction) with HIGH impact to confidentiality, integrity, and availability. The vulnerability affects the Windows RPC Runtime and is addressed ...

CVE-2021-40443

Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2022-21981

Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.

CVE-2022-30140

Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2022-30198

CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...

CVE-2022-34731

CVE-2022-34731 affects the Microsoft WDAC OLE DB provider for SQL Server and is categorized as a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction required. The connected documents identify the affe...

CVE-2022-35743

CVE-2022-35743 is a Microsoft Windows MSDT Remote Code Execution vulnerability. Documents indicate an exploitation path that is Local with Low Attack Complexity and requires User Interaction, yielding high confidentiality, integrity, and availability impact. CVSS 3.1 base score 7.8 (HIGH). No exp...

CVE-2022-37992

Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.

CVE-2022-41077

CVE-2022-41077 is Windows Fax Compose Form Elevation of Privilege. Affected component: Windows Fax service (Fax/Compose form). Root cause and impact as per provided data: local attacker with low privileges can exploit the vulnerability with no user interaction to achieve elevation of privilege, w...

CVE-2022-44697

CVE-2022-44697 corresponds to a Windows Graphics Component Elevation of Privilege vulnerability. The CVE entry indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in HIGH impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). ...

CVE-2023-21749

CVE-2023-21749: Windows Kernel local privilege escalation stemming from registry SID table poisoning, described in CIRCL as “Windows Kernel registry SID table poisoning leading to bad locking and other issues.” The connected docs do not provide detailed root-cause analysis beyond that label, nor ...

CVE-2010-0021

CVE-2010-0021 is part of the MS10-012 set of SMB server vulnerabilities affecting Windows Vista/Windows Server 2008/Windows 7 and related Server roles. The issue arises from race conditions in the SMB Server service during Negotiate handling (SMBv1/v2), allowing remote attackers to trigger a deni...

CVE-2010-0022

CVE-2010-0022 is part of the SMB server NTLM vulnerabilities addressed by Microsoft MS10-012. The XP/2000/2003/Vista/2008/7 SMB server implementation fails to properly validate shared/servername fields in SMB packets, allowing remote attackers to cause a denial of service (system hang) via a craf...

CVE-2016-3237

CVE-2016-3237 is a Kerberos authentication bypass in multiple Windows versions where domain password changes may fall back to NTLM, enabling MITM style bypass of authentication. Affected: Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold/R...

CVE-2017-0014

Public technical details for CVE-2017-0014 are not present in the provided connected documents. The records describe affected products and cross-reference other CVEs, but no concrete exploit vectors, impact specifics, or remediation are disclosed here. Monitor for updates.

CVE-2017-0114

CVE-2017-0114 is a Windows Uniscribe (usp10.dll) information-disclosure vulnerability affecting Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. The issue arises in Uniscribe when processing Unicode text via DrawText paths triggered by user32/lpk, allowing a remote attacker t...

CVE-2019-1318

CVE-2019-1318 corresponds to a TLS spoofing issue affecting Windows where TLS sessions without Extended Master Secret (EMS) can be exploited via man‑in‑the‑middle scenarios. Connected sources describe the vulnerability as a spoofing vulnerability in TLS when EMS is not used, with impact on confid...

CVE-2020-0677

Technical details for CVE-2020-0677 are not provided in the connected documents. The initial entry outlines memory handling in the CNG service but lacks explicit product/version/root-cause data. Monitor official advisories for updates.

CVE-2020-0724

Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.

CVE-2020-0889

The CVE-2020-0889 vulnerability affects the Windows Jet Database Engine in Microsoft Windows/Windows Server, arising from improper handling of memory objects and enabling remote code execution. The connected KB4549951 notes a security update (KB4549951) for Windows 10 OS builds 18362.778 and 1836...

CVE-2020-0959

CVE-2020-0959 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of memory objects in the Jet DB Engine. The issue can be triggered by processing crafted files that lead to arbitrary code execution with the attacker’s context. Public sources (CNVD fam...

CVE-2020-1539

CVE-2020-1539 is an Elevation of Privilege vulnerability in Windows Backup Engine caused by incorrect memory handling. An attacker who can execute code locally could exploit this by running a crafted program to elevate privileges. Microsoft’s security update addresses the issue by correcting how ...

CVE-2020-16914

CVE-2020-16914 is an information-disclosure in Windows GDI+ caused by how GDI+ handles memory addresses. Exploitation requires a logged-on attacker with a crafted app; remediation is a Microsoft security update addressing memory handling in GDI+.