CVE-2019-0715

The CVE-2019-0715 entry affects Microsoft Hyper-V Network Switch and is described as a denial-of-service vulnerability. A privileged attacker on a guest OS can run a crafted application to crash the host server, indicating that input validation in the Hyper-V Network Switch path is inadequate. Th...

CVE-2019-0893

The connected CNVD entries describe Microsoft Windows Jet Database Engine Buffer Overflow vulnerabilities in Windows and Windows Server. The flaw arises when the engine performs memory operations without proper data-boundary validation, leading to buffer/heap overflows. Concrete exploit details, ...

CVE-2019-0895

The connected CNVD entries describe a Windows Jet Database Engine vulnerability as a buffer overflow/heap overflow issue arising when memory boundaries are not properly validated. They state an attacker could exploit this condition to cause memory corruption, affecting Windows/Windows Server envi...

CVE-2019-0936

CVE-2019-0936 is a Windows elevation-of-privilege vulnerability arising from improper handling of certain symbolic links. The root cause is an inadequate check of symbolic link handling that can enable a local attacker to escalate privileges to Administrator. Affected software is Windows (per des...

CVE-2019-0972

CVE-2019-0972 affects the Local Security Authority Subsystem Service (LSASS) where an authenticated attacker can trigger a denial of service by sending specially crafted authentication requests. Exploitation could cause the LSASS service to reboot the target system. Microsoft’s security update mi...

CVE-2019-1025

CVE-2019-1025 describes a Windows denial-of-service vulnerability caused by improper handling of objects in memory. An attacker who can log on or convince a user to open a crafted file on a network share could make the target stop responding. It does not enable code execution or direct privilege ...

CVE-2019-1247

Technical details about CVE-2019-1247 are not publicly provided in the supplied documents. The materials reference the Jet Database Engine RCE generally but do not specify affected products, versions, impact, or fixes. Monitor for updates.

CVE-2019-1252

CVE-2019-1252 is a Windows GDI information disclosure vulnerability. The Graphical Device Interface component can improperly disclose memory contents due to how objects are handled in memory. A remote attacker could exploit this by enticing a user to open a specially crafted web page or document,...

CVE-2019-1344

Technical details about CVE-2019-1344 are not publicly provided in the supplied documents. The Connected documents do not include affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2019-1346

Technical details for CVE-2019-1346 are not provided in the connected documents. The materials reference a Windows memory-handling DoS but do not specify affected components, versions, impact, or remediation. Monitor for updates.

CVE-2020-1551

CVE-2020-1551 : Elevation of Privilege in Windows Backup Engine due to improper handling of memory. The vulnerability requires prior execution on a vulnerable system and can be exploited by running a specially crafted application to elevate privileges. The Windows security update fixes memory han...

CVE-2020-1593

Technical details about CVE-2020-1593 are not provided in the connected documents; no product/version/impact specifics are disclosed here. Monitor for updates as additional details may be published.

CVE-2021-24102

CVE-2021-24102 is a Windows vulnerability described as a local elevation of privilege in Windows Event Tracing. The connected NVD entry lists a CVSS-3.1 base score of 7.8 with local attack vector, low attack complexity, and privileges required as Low, with no user interaction. The impact is high ...

CVE-2021-27096

CVE-2021-27096 refers to an NTFS elevation-of-privilege weakness in Microsoft Windows/Windows Server. The CNVD entry confirms an NTFS vulnerability that could allow privilege escalation, but the provided documents do not disclose the exact root cause, affected builds, or a specific fix. NVD/Secur...

CVE-2021-31953

CVE-2021-31953 is a Windows elevation-of-privilege issue affecting the Windows Filter Manager. The NVD entry lists a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, integrity, and availability is high. The...

CVE-2021-43224

CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...

CVE-2022-37982

CVE-2022-37982 relates to the Microsoft WDAC OLE DB provider for SQL Server, with a Remote Code Execution vulnerability. Connected documents identify the affected component as the WDAC OLE DB provider for SQL and indicate an impact of executing arbitrary code, consistent with a high-severity netw...

CVE-2022-37990

CVE-2022-37990 is a Windows kernel elevation-of-privilege issue tied to registry/hive memory handling. The connected analysis places this bug in a pool memory corruption class triggered by a 16‑bit integer overflow when calculating a dynamically allocated buffer length during registry hive operat...

CVE-2022-37999

CVE-2022-37999 is a Windows Group Policy Preference Client privilege-elevation vulnerability. The CNVD entry describes it as an elevation of privilege in the Windows Group Policy Preference Client stemming from improper privilege assignment, enabling a local attacker with LOW privileges (LOCAL, L...

CVE-2022-38004

Technical details about CVE-2022-38004 are not publicly available in the provided documents; the connected records reference Windows Fax Service and a remote code execution vulnerability but do not disclose affected versions, root cause, exploit info, or fixes. Monitor for updates.

CVE-2022-38022

CVE-2022-38022 is listed in the ENISA/NCSC (Windows Kernel) catalog as a Windows Kernel elevation-of-privilege vulnerability. The NCSc table places CVE-2022-38022 under Windows Kernel with the impact category “Obtaining Increased Entitlements.” No explicit root-cause, affected versions, or remedi...

CVE-2012-0180

CVE-2012-0180 affects win32k.sys in multiple Windows releases (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8 CP). The issue is improper handling of user-mode input in kernel-mode for windows and messages, enabling local privilege escalation via a crafted app...

CVE-2016-3236

CVE-2016-3236 affects the WPAD proxy discovery implementation in multiple Windows editions (Vista through Windows 10). The weakness arises when WPAD proxy discovery is mishandled, which could allow a remote attacker to redirect network traffic via unspecified vectors, effectively an elevation of ...

CVE-2016-3338

CVE-2016-3338 concerns the Windows Common Log File System (CLFS) driver elevation of privilege vulnerability. It affects multiple Windows platforms (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, Server 2012, RT 8.1, 10 pre-1709, and Server 2016) and is triggered by a crafted application that allows ...

CVE-2016-3340

CVE-2016-3340 affects the Windows Common Log File System (CLFS) driver across multiple Windows client/server SKUs (e.g., Vista/7/8.1/10 and corresponding server editions). The vulnerability enables local users to gain privileges via a crafted application, representing a local elevation-of-privile...

CVE-2017-11847

CVE-2017-11847 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1; Windows 8.1/RT; Windows 10 1511–1709; Windows Server 2008/2012/2016, etc.). The root cause is improper handling of objects in memory, enabling a local attacker to escalate privileges and run a...

CVE-2017-8681

Technical details about CVE-2017-8681 are not publicly provided in the connected documents. No specifics on affected versions, root cause, impact, or remediation are present. Monitor for updates.

CVE-2019-0787

CVE-2019-0787 is described as a remote code execution vulnerability in the Windows Remote Desktop Client when a user connects to a malicious server. Connected documents confirm this CVE refers to the RDP client and note it alongside other remote‑network bugs Microsoft has addressed (e.g., CVE-201...

CVE-2019-1017

CVE-2019-1017 is a Windows Win32k elevation-of-privilege vulnerability. The Win32k component mishandles in-memory objects, allowing a locally authenticated attacker to run arbitrary code in kernel mode after logging on and executing a crafted application. This could enable installation of program...

CVE-2019-1028

Technical details (affected products, versions, root cause, exploit vectors, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1268

CVE-2019-1268 involves a privilege escalation in Microsoft Windows Winlogon. The root cause, as described in CNVD-2019-31856, is that Winlogon does not properly handle file path information, allowing an attacker to log on and run a specially crafted application to execute arbitrary code with elev...

CVE-2019-1393

Technical details about CVE-2019-1393 are not provided in the connected documents. The EUVD entries mention malware 'sbrugna' but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2020-0684

CVE-2020-0684 is a Windows remote code execution vulnerability triggered when a .LNK file is processed. The connected docs confirm that an attacker could execute code with the current user’s privileges, affecting Windows/Windows Server platforms via .LNK handling, and that patches were released i...

CVE-2020-0962

CVE-2020-0962 is a Windows win32k information-disclosure vulnerability. The connected sources describe an information-disclosure flaw in the win32k component that may reveal kernel information when a specially crafted application is run. The vulnerability affects the win32k kernel subsystem and i...

CVE-2020-1009

CVE-2020-1009 is an Elevation of Privilege vulnerability in the Microsoft Store Install Service where local file operations in protected locations can be abused to gain elevated access. Root cause as stated: how the service handles file operations in protected locations. Impact is described as HI...

CVE-2020-1534

CVE-2020-1534 is an Elevation of Privilege in Windows Backup Engine/Windows Backup Service. The connected AVLEONOV post confirms the affected component as Windows Backup Engine and describes the root cause as improper handling of file operations by the Backup Service, enabling privilege escalatio...

CVE-2020-16962

Technical details for CVE-2020-16962 are not publicly provided in the connected documents. Monitor for updates from NVD/MSRC and related feeds for affected software, vulnerable components, root cause, and available fixes.

CVE-2021-1654

Technical details for CVE-2021-1654 are not publicly provided in the connected documents. Monitor for updates as new information becomes available; current sources do not specify affected product versions, root cause, impact, or remediation beyond the initial description.

CVE-2021-1660

CVE-2021-1660 is a Remote Procedure Call (RPC) Runtime remote code execution vulnerability in Windows. The connected sources confirm the flaw affects RPC components and was addressed by Microsoft security updates released in January 2021 (KB4598242/KB4598243 and related advisories), with patches ...

CVE-2021-1699

Technical details for CVE-2021-1699 are not provided in the supplied connected documents. Public information in the Initial document is limited to a Windows modem.sys information disclosure vulnerability. Monitor for updates.

CVE-2021-24103

CVE-2021-24103 corresponds to a Windows Event Tracing Elevation of Privilege vulnerability. Documents provide CVSS 3.1 base score 7.8 (LOCAL, LOW privileges required, NONE user interaction; high impact on confidentiality, integrity, and availability). The vulnerability is active per the CVE entry...

CVE-2021-28350

Technical details about CVE-2021-28350, including affected components, root cause, impact specifics, and patch information, are not provided in the connected documents. Please monitor official advisories and updates for substantive, fact-grounded details.

CVE-2021-28440

Technical details about CVE-2021-28440 are not publicly provided in the supplied documents. No affected products, root cause, exploit status, or remediation specifics are included here. Monitor for updates in connected sources.

CVE-2021-28447

CVE-2021-28447 is described in the provided documents as a Windows vulnerability affecting the Early Launch Antimalware Driver, characterized as a security feature bypass. The NVD entry lists a CVSS-3.1 base score of 4.4 (local, low attack complexity, high privileges required, no user interaction...

CVE-2021-43222

CVE-2021-43222 documents a Microsoft Message Queuing information disclosure vulnerability. The issue affects MSMQ when handling messages over the network, enabling an attacker with network access and no authentication to potentially access confidential information. According to the CVE entry, the...

CVE-2021-43229

CVE-2021-43229 is an NTFS elevation-of-privilege vulnerability affecting Windows systems. The connected exploit walkthrough describes a pool-based overflow caused by an integer overflow during allocation size computation (directory path length + file name length) in several NTFS paths (e.g., Ntfs...

CVE-2022-38005

Technical details for CVE-2022-38005 are not publicly provided in the supplied documents. No specifics on affected products, impact, or fixes are present here; please monitor for updates.

CVE-2023-21754

Technical details about CVE-2023-21754 are not publicly provided in the supplied documents. No information on affected products, root cause, impact, or remediation is available here. Monitor for updates from official sources.

CVE-2016-3305

Technical details about CVE-2016-3305 are not publicly available in the provided documents. Monitor for updates to confirm affected components, impact, and fixes.

CVE-2016-3345

CVE-2016-3345 is the Windows SMBv1 Server Remote Code Execution vulnerability. The SMBv1 server on affected Windows editions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, Windows 8.1, Server 2012 R2/2012, Windows RT 8.1, Windows 10 1511/1607) could allow an authenticated attacker to execute arbi...