CVE-2013-3175

CVE-2013-3175 is a Windows elevation-of-privilege issue in the handling of asynchronous RPC requests. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. Root cause...

CVE-2017-8582

CVE-2017-8582 affects the HTTP.sys server component in multiple Windows editions. The vulnerability arises from the component’s improper handling of in-memory objects, enabling a remote, unauthenticated attacker to obtain information and potentially facilitate further compromise. The impact is an...

CVE-2022-30226

Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.

CVE-2022-34714

Technical details about CVE-2022-34714 are not provided in the attached documents. The connected items do not describe affected products, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2022-35769

Technical details for CVE-2022-35769 (Windows PPP DoS) are not provided in the supplied documents. No affected product/version or remediation is described here. Monitor for updates from Microsoft and Vulners for confirmed specifics.

CVE-2023-21561

Technical details about CVE-2023-21561 (affected product/component, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2011-3402

CVE-2011-3402 is a Windows kernel‑mode vulnerability in the TrueType font parsing engine of win32k.sys that allows remote code execution via crafted font data in Word/web content. The issue affects multiple Windows versions (XP/Server 2003, Vista/Server 2008, Windows 7 and Windows 7/Server 2008 R...

CVE-2022-21973

CVE-2022-21973 corresponds to a Windows Media Center Update Denial of Service vulnerability. The NVD CVSSv3.1 score is 5.5 (MEDIUM) with Local access, Low attack complexity, Privileges Required: Low, no user interaction, but Availability impact: High. Public details in connected sources indicate ...

CVE-2020-0642

An elevation of privilege vulnerability exists in Windows because the Win32k component fails to properly handle objects in memory. Exploiting this flaw allows an attacker to execute arbitrary code in kernel mode or enhance their privileges through a specially crafted application. Exploitation det...

CVE-2022-22034

Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.

CVE-2022-37991

CVE-2022-37991 is a Windows kernel registry issue tied to regf hive loading where key/value name length checks were not enforced (e.g., key names up to 1040 chars). This could lead to memory corruption or crashes during hive load; connected materials describe related hive/registry memory-corrupti...

CVE-2019-1094

Technical details (affected products/versions/root cause/fix) for CVE-2019-1094 are not provided in the connected documents. Monitor Microsoft advisories and MSRC for updates.

CVE-2021-31962

Technical details (affected product/versions, root cause, impact, exploitability, and remediation) are not provided in the supplied documents. Monitor official disclosures and updates from the included sources for any forthcoming information.

CVE-2022-38042

CVE-2022-38042 is an Elevation of Privilege vulnerability in Active Directory Domain Services. The CVSS/description in the sources indicates network-access prerequisites with high impact (C/H, I/H, A/H) and a low-privilege, user-interaction-required path to obtain elevated rights in the AD DS con...

CVE-2013-0007

CVE-2013-0007 impacts Microsoft XML Core Services (MSXML) versions 4.0–6.0. A parsing fault in MSXML can allow remote code execution when a user visits a crafted web page (MSXML XSLT vulnerability). Affected components include MSXML DLLs; root cause is improper XML content parsing. Mitigation is ...

CVE-2019-0584

CVE-2019-0584 refers to a remote code execution vulnerability in the Windows Jet Database Engine, arising from improper handling of objects in memory. The issue affects multiple Windows platforms (as listed in the initial entry). The connected Nessus/Office-related documents corroborate a broader...

CVE-2021-24086

CVE-2021-24086 is a Windows TCP/IP DoS affecting tcpip.sys via IPv6 processing. Public PoCs show remote triggering by crafted IPv6/UDP packets and IPv6 fragment handling, potentially causing kernel memory issues or a crash. The vulnerability was patched by Microsoft in Feb 2021; exploitation deta...

CVE-2022-22042

CVE-2022-22042 is described in the Initial Document as a Windows Hyper-V Information Disclosure Vulnerability. The Connected Documents do not provide concrete technical details (affected product version, root cause, impact, or remediation) for this CVE. Therefore, the available information remain...

CVE-2022-26919

Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2022-41081

CVE-2022-41081 is a Windows PPTP Remote Code Execution vulnerability in the Point-to-Point Tunneling Protocol. The root cause is the PPTP implementation failing to properly filter external input during code segment construction, enabling arbitrary code execution when exploited over a network. The...

CVE-2019-1096

Technical specifics for CVE-2019-1096 are not provided in the supplied Connected documents. Public details about affected products, impact, or remediation are not present here; monitor for updates.

CVE-2021-38666

CVE-2021-38666 is described as a Remote Desktop Client Remote Code Execution vulnerability. The vulnerability affects the Windows Remote Desktop Client, with the CVSS3.1 score indicating network-exposed, no privileges required, user interaction needed, and high impact to confidentiality, integrit...

CVE-2019-0538

CVE-2019-0538 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. A successful exploit could allow an attacker to execute arbitrary code on a vulnerable system by convincing a user to open a specially crafted file. Affected...

CVE-2021-36968

CVE-2021-36968 is a Windows DNS Elevation of Privilege vulnerability disclosed in Patch Tuesday 2021. It stems from a failure to properly enforce security restrictions in Windows DNS, enabling local attackers to elevate privileges to SYSTEM when authenticated. Public sources (including Malwarebyt...

CVE-2022-22014

Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...

CVE-2022-26801

CVE-2022-26801 is a Windows Print Spooler Elevation of Privilege vulnerability (Local, Low attack complexity; no user interaction required per description). The connected documents show confirmed details on the vulnerability’s existence and CVSS metrics (CVSS 3.1 base score 7.8; confidentiality/i...

CVE-2022-29129

CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...

CVE-2022-41039

Technical details about CVE-2022-41039 are not provided in the supplied documents. Public details, affected products, or fixes are not included here. Monitor for updates from official sources.

CVE-2017-0267

CVE-2017-0267 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server 1.0. The issue arises from improper handling of certain SMBv1 requests, allowing a remote attacker to obtain sensitive information by sending specially crafted data to affected servers across multiple W...

CVE-2022-30135

CVE-2022-30135 is a Windows Media Center elevation-of-privilege vulnerability. Connected sources confirm a local, low-complexity flaw leading to privilege escalation with high impact across confidentiality, integrity, and availability (per CVSS v3.1) and complete impact per CVSS v2. The provided ...

CVE-2022-30220

Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.

CVE-2017-0272

CVE-2017-0272 affects the Microsoft Windows SMBv1 server on Windows clients/servers (Windows 7/8.1, Windows Server 2008 SP2/R2 SP1, 2012, 2016, 10 versions etc.). Root cause: the SMBv1 server mishandles certain requests, enabling remote code execution by a remote attacker. Impact is high (remote ...

CVE-2021-36937

Technical details for CVE-2021-36937 are not publicly available in the provided documents. The initial description notes a Windows Media MPEG-4 Video Decoder RCE, but no concrete product/version/impact details are supplied here. Monitor for updates.

CVE-2022-30224

Technical details for CVE-2022-30224 are not publicly provided in the connected documents. The materials mention the vulnerability at a high level but do not specify affected products, root cause, impact, or remediation. Monitor for updated disclosures and official advisories.

CVE-2023-21560

Technical details about CVE-2023-21560 (affected products, root cause, impact, remediation) are not provided in the supplied connected documents. Monitor for official disclosures and vendor advisories; the current set does not specify affected systems or fixes.

CVE-2018-8256

CVE-2018-8256 is a remote code execution vulnerability in PowerShell triggered by processing specially crafted files. Affected are Windows PowerShell/PowerShell Core and several Windows OS versions (e.g., Windows 7/8.1/10, Windows Server 2008R2/2012/2016/2019, etc.). The root cause is improper ha...

CVE-2020-0662

CVE-2020-0662 is described as a Windows remote code execution vulnerability arising from how Windows handles objects in memory. The provided sources confirm a remote code execution impact, but there is no detailed information in the connected documents about affected products/versions, specific r...

CVE-2021-31183

CVE-2021-31183 is a Windows TCP/IP Driver Denial of Service vulnerability. Multiple connected sources (NVD/NVD CNVD entries) describe it as a DoS issue affecting the Windows TCP/IP driver in Windows/Windows Server with network-based attack potential. The CVSS metrics indicate a network, low-attac...

CVE-2022-21833

CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...

CVE-2022-24530

CVE-2022-24530 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (LOCAL, LOW privileges required, UI NONE, S C changed, impact: HIGH on confidentiality, integrity, and availability). It reflects a local privilege escalation in the Window...

CVE-2022-34729

Technical details about CVE-2022-34729 are not publicly available in the provided connected documents. Monitor for updates; the entry is described as a Windows GDI Elevation of Privilege vulnerability with local access and high impact in the initial description.

CVE-2022-38044

CVE-2022-38044 is a Windows CD-ROM File System Driver vulnerability that enables code execution when processing crafted input. Trusted sources in connected data identify the affected component as the Windows CD-ROM Driver and describe the root cause as improper handling/filtering of external inpu...

CVE-2019-1088

Technical details are not provided in the connected documents; monitor for updates.

CVE-2020-16933

Microsoft Word contains a security feature bypass (CVE-2020-16933) due to improper handling of .LNK files. An attacker can craft a .LNK file to perform actions in the current user’s security context when a user opens it (email or web delivery scenarios described). The vulnerability can lead to co...

CVE-2022-37986

Technical details about CVE-2022-37986 (affected component, root cause, impact, or fixes) are not provided in the connected or initial documents. Monitor for updates and additional technical disclosure.

CVE-2022-38029

Summary : CVE-2022-38029 is a Windows ALPC elevation-of-privilege vulnerability. It is a local issue that can grant high-impact privileges to an attacker with low privileges and no user interaction, as indicated by the CVSS vector in the Initial document (CVSS v3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=...

CVE-2023-21548

CVE-2023-21548 is a Windows SSTP remote code execution vulnerability. The connected NC Sc doc lists it under Windows SSTP with CVSS 8.10 (network context) and labels it as a SSTP issue; no explicit root-cause details or affected product versions are provided beyond “Windows SSTP.” The initial doc...

CVE-2023-21732

Technical details about CVE-2023-21732 are not publicly provided in the connected documents. Monitor for updates for affected products, versions, payloads, and mitigations as they become available.

CVE-2019-1246

CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...