CVE-2022-21857

Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...

CVE-2022-21920

CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...

CVE-2022-26919

Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.

CVE-2022-30226

Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.

CVE-2023-21769

CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...

CVE-2010-0480

CVE-2010-0480 is a remote code execution vulnerability in Microsoft MPEG Layer-3 codecs. The issue arises from multiple stack-based buffer overflows in the MPEG Layer-3 audio decoders (l3codecx.ax and related ACM codecs) when processing crafted AVI files, affecting Windows 2000 SP4, XP SP2/SP3, S...

CVE-2021-26442

Technical details for CVE-2021-26442 are not present in the connected documents. Public info here is generic. Monitor for updates from official advisories; no product/version/impact specifics are provided in the supplied materials.

CVE-2022-37991

CVE-2022-37991 is a Windows kernel registry issue tied to regf hive loading where key/value name length checks were not enforced (e.g., key names up to 1040 chars). This could lead to memory corruption or crashes during hive load; connected materials describe related hive/registry memory-corrupti...

CVE-2019-1094

Technical details (affected products/versions/root cause/fix) for CVE-2019-1094 are not provided in the connected documents. Monitor Microsoft advisories and MSRC for updates.

CVE-2022-29129

CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...

CVE-2024-49084

CVE-2024-49084 is a Windows Kernel elevation-of-privilege issue (Windows Kernel). The connected sources list it under Windows Kernel with a CVSS v3.1 base score of 7.0 (local attack vector, high impact across confidentiality, integrity, and availability) and indicate the vulnerability allows obta...

CVE-2025-21263

Technical details for CVE-2025-21263 are not publicly provided in the supplied connected documents. The materials reference Windows Digital Media Elevation of Privilege vulnerability but do not describe affected components, root cause, impact specifics, or fixes. Monitor updates from official sou...

CVE-2011-3402

CVE-2011-3402 is a Windows kernel‑mode vulnerability in the TrueType font parsing engine of win32k.sys that allows remote code execution via crafted font data in Word/web content. The issue affects multiple Windows versions (XP/Server 2003, Vista/Server 2008, Windows 7 and Windows 7/Server 2008 R...

CVE-2022-22034

Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.

CVE-2022-26801

CVE-2022-26801 is a Windows Print Spooler Elevation of Privilege vulnerability (Local, Low attack complexity; no user interaction required per description). The connected documents show confirmed details on the vulnerability’s existence and CVSS metrics (CVSS 3.1 base score 7.8; confidentiality/i...

CVE-2023-21552

CVE-2023-21552 is documented in an NCSC advisory as a Windows Graphics Component vulnerability (Windows GDI) with CVSS v3.1 base score 7.80, affecting privilege escalation. The NCSC listing confirms its classification as an elevation of privileges issue in Windows Graphics/Graphics Device Interfa...

CVE-2023-36393

Technical details about CVE-2023-36393, including affected products, root cause, and fixes, are not publicly provided in the supplied documents. Monitor for updates from Microsoft and NVD.

CVE-2019-0584

CVE-2019-0584 refers to a remote code execution vulnerability in the Windows Jet Database Engine, arising from improper handling of objects in memory. The issue affects multiple Windows platforms (as listed in the initial entry). The connected Nessus/Office-related documents corroborate a broader...

CVE-2021-26897

CVE-2021-26897 is a Windows DNS Server remote code execution vulnerability. The connected sources indicate the issue is a buffer overflow caused by oversized dynamic update DNS queries with SIG records that can be written to disk, allowing code execution with Local System privileges when a domain...

CVE-2021-31962

Technical details (affected product/versions, root cause, impact, exploitability, and remediation) are not provided in the supplied documents. Monitor official disclosures and updates from the included sources for any forthcoming information.

CVE-2023-35321

Technical details (affected product versions, root cause, exploit specifics, and remediation) are not provided in the supplied documents. Monitor for updates from official sources; CVE-2023-35321 relates to Windows Deployment Services Denial of Service but specifics are not disclosed here.

CVE-2023-36903

No technical details for CVE-2023-36903 are provided in the supplied documents; only the vulnerability title is present. Monitor for updates.

CVE-2022-41081

CVE-2022-41081 is a Windows PPTP Remote Code Execution vulnerability in the Point-to-Point Tunneling Protocol. The root cause is the PPTP implementation failing to properly filter external input during code segment construction, enabling arbitrary code execution when exploited over a network. The...

CVE-2023-21535

CVE-2023-21535 is a Windows SSTP Remote Code Execution vulnerability. The affected component is Secure Socket Tunneling Protocol (SSTP); root cause details are not expanded beyond “SSTP RCE” in the provided documents, but the CVE is rated high (CVSS 8.1) with network access, high confidentiality/...

CVE-2017-8582

CVE-2017-8582 affects the HTTP.sys server component in multiple Windows editions. The vulnerability arises from the component’s improper handling of in-memory objects, enabling a remote, unauthenticated attacker to obtain information and potentially facilitate further compromise. The impact is an...

CVE-2021-24086

CVE-2021-24086 is a Windows TCP/IP DoS affecting tcpip.sys via IPv6 processing. Public PoCs show remote triggering by crafted IPv6/UDP packets and IPv6 fragment handling, potentially causing kernel memory issues or a crash. The vulnerability was patched by Microsoft in Feb 2021; exploitation deta...

CVE-2022-22039

CVE-2022-22039 is a Windows NFS Remote Code Execution vulnerability. The connected sources describe it as an unauthenticated, network-exploitable flaw in the Network File System service that allows an attacker to trigger RCE via a specially crafted NFS request. Exploitation is possible over the n...

CVE-2022-41039

Technical details about CVE-2022-41039 are not provided in the supplied documents. Public details, affected products, or fixes are not included here. Monitor for updates from official sources.

CVE-2021-36968

CVE-2021-36968 is a Windows DNS Elevation of Privilege vulnerability disclosed in Patch Tuesday 2021. It stems from a failure to properly enforce security restrictions in Windows DNS, enabling local attackers to elevate privileges to SYSTEM when authenticated. Public sources (including Malwarebyt...

CVE-2022-22014

Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...

CVE-2022-22042

CVE-2022-22042 is described in the Initial Document as a Windows Hyper-V Information Disclosure Vulnerability. The Connected Documents do not provide concrete technical details (affected product version, root cause, impact, or remediation) for this CVE. Therefore, the available information remain...

CVE-2021-38666

CVE-2021-38666 is described as a Remote Desktop Client Remote Code Execution vulnerability. The vulnerability affects the Windows Remote Desktop Client, with the CVSS3.1 score indicating network-exposed, no privileges required, user interaction needed, and high impact to confidentiality, integrit...

CVE-2023-28218

CVE-2023-28218 relates to a local Elevation of Privilege in the Windows Ancillary Function Driver for WinSock. The vulnerability is described as affecting Windows components with a high impact on confidentiality, integrity, and availability, and requires local access with high attack complexity a...

CVE-2023-28232

Technical details about CVE-2023-28232 are not publicly provided in the connected documents. Public information is limited to the description; monitor for official advisories and updates from Microsoft for fixes, affected products, and mitigations.

CVE-2024-38153

CVE-2024-38153 is a Windows Kernel elevation-of-privilege vulnerability. The CVSSv3.1 base score is 7.8 (High) with Local attack vector, Low attack complexity, Privileges Required: Low, User Interaction: None, and impact on Confidentiality, Integrity, and Availability: High. The vulnerability aff...

CVE-2017-0272

CVE-2017-0272 affects the Microsoft Windows SMBv1 server on Windows clients/servers (Windows 7/8.1, Windows Server 2008 SP2/R2 SP1, 2012, 2016, 10 versions etc.). Root cause: the SMBv1 server mishandles certain requests, enabling remote code execution by a remote attacker. Impact is high (remote ...

CVE-2019-0538

CVE-2019-0538 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. A successful exploit could allow an attacker to execute arbitrary code on a vulnerable system by convincing a user to open a specially crafted file. Affected...

CVE-2021-36937

Technical details for CVE-2021-36937 are not publicly available in the provided documents. The initial description notes a Windows Media MPEG-4 Video Decoder RCE, but no concrete product/version/impact details are supplied here. Monitor for updates.

CVE-2022-24530

CVE-2022-24530 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (LOCAL, LOW privileges required, UI NONE, S C changed, impact: HIGH on confidentiality, integrity, and availability). It reflects a local privilege escalation in the Window...

CVE-2022-30220

Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.

CVE-2023-21690

Technical details about CVE-2023-21690 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-32015

CVE-2023-32015 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows where the Message Queuing service is enabled; a remote, unauthenticated attacker can exploit it by sending a crafted file over the network to achieve code execution. The CV...

CVE-2024-20691

CVE-2024-20691 is a Windows Themes Information Disclosure vulnerability. CVSS-3.1 metrics indicate Local attack with High Confidentiality impact, base score 4.7, and no user interaction required, but with high attack complexity and low privileges. Exploit details or concrete remediation are not p...

CVE-2020-0662

CVE-2020-0662 is described as a Windows remote code execution vulnerability arising from how Windows handles objects in memory. The provided sources confirm a remote code execution impact, but there is no detailed information in the connected documents about affected products/versions, specific r...

CVE-2022-30224

Technical details for CVE-2022-30224 are not publicly provided in the connected documents. The materials mention the vulnerability at a high level but do not specify affected products, root cause, impact, or remediation. Monitor for updated disclosures and official advisories.

CVE-2022-38042

CVE-2022-38042 is an Elevation of Privilege vulnerability in Active Directory Domain Services. The CVSS/description in the sources indicates network-access prerequisites with high impact (C/H, I/H, A/H) and a low-privilege, user-interaction-required path to obtain elevated rights in the AD DS con...

CVE-2023-21561

Technical details about CVE-2023-21561 (affected product/component, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2023-23405

Technical details such as affected products, versions, root cause, impact, and fixes are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-1096

Technical specifics for CVE-2019-1096 are not provided in the supplied Connected documents. Public details about affected products, impact, or remediation are not present here; monitor for updates.

CVE-2022-30135

CVE-2022-30135 is a Windows Media Center elevation-of-privilege vulnerability. Connected sources confirm a local, low-complexity flaw leading to privilege escalation with high impact across confidentiality, integrity, and availability (per CVSS v3.1) and complete impact per CVSS v2. The provided ...