CVE-2024-21311

Technical details for CVE-2024-21311 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2011-3402

CVE-2011-3402 is a Windows kernel‑mode vulnerability in the TrueType font parsing engine of win32k.sys that allows remote code execution via crafted font data in Word/web content. The issue affects multiple Windows versions (XP/Server 2003, Vista/Server 2008, Windows 7 and Windows 7/Server 2008 R...

CVE-2018-8256

CVE-2018-8256 is a remote code execution vulnerability in PowerShell triggered by processing specially crafted files. Affected are Windows PowerShell/PowerShell Core and several Windows OS versions (e.g., Windows 7/8.1/10, Windows Server 2008R2/2012/2016/2019, etc.). The root cause is improper ha...

CVE-2019-1088

Technical details are not provided in the connected documents; monitor for updates.

CVE-2022-24530

CVE-2022-24530 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (LOCAL, LOW privileges required, UI NONE, S C changed, impact: HIGH on confidentiality, integrity, and availability). It reflects a local privilege escalation in the Window...

CVE-2022-38043

No additional technical details about CVE-2022-38043 are provided in the connected documents. The sources only reiterate the vulnerability name/description. Monitor for updates and verify affected products, root cause, and fixes when new information is published.

CVE-2024-20657

Technical details about CVE-2024-20657 (affected product/component, root cause, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from Microsoft and security advisories.

CVE-2022-22025

CVE-2022-22025 refers to a Denial of Service vulnerability in the Windows Internet Information Services Cachuri Module. The available document describes it as a module DoS issue but does not provide details on affected product versions, root cause, attack vector, or fix. Exploitation details are ...

CVE-2022-26815

CVE-2022-26815 is a Windows DNS Server remote code execution vulnerability. The CVE entry confirms impact on Windows DNS Server and provides high-severity scores: CVSS v2 base 9.0 (NETWORK, no auth, exploit via network) and CVSS v3.1 base 7.2 (Network, Privileges Required: High, User Interaction:...

CVE-2023-21732

Technical details about CVE-2023-21732 are not publicly provided in the connected documents. Monitor for updates for affected products, versions, payloads, and mitigations as they become available.

CVE-2024-26212

Technical details for CVE-2024-26212 are not publicly available in the provided documents. Monitor for updates from NVD/OSV/OpenVAS; no specifics on affected products, root cause, or fix are available here.

CVE-2025-21302

CVE-2025-21302 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with network access, low attack complexity, no privileges required, and user interaction required; impacts include confidentiality, integrity, and availability. The vulnerabili...

CVE-2019-1096

Technical specifics for CVE-2019-1096 are not provided in the supplied Connected documents. Public details about affected products, impact, or remediation are not present here; monitor for updates.

CVE-2020-16933

Microsoft Word contains a security feature bypass (CVE-2020-16933) due to improper handling of .LNK files. An attacker can craft a .LNK file to perform actions in the current user’s security context when a user opens it (email or web delivery scenarios described). The vulnerability can lead to co...

CVE-2022-29139

Technical details about CVE-2022-29139 are not provided in the supplied documents. Public info in the connected entries does not describe affected products/versions, exploit methods, or remediation beyond general LDAP RCE context. Monitor for updates.

CVE-2023-21560

Technical details about CVE-2023-21560 (affected products, root cause, impact, remediation) are not provided in the supplied connected documents. Monitor for official disclosures and vendor advisories; the current set does not specify affected systems or fixes.

CVE-2023-28220

Technical details about CVE-2023-28220 (Layer 2 Tunneling Protocol RCE) are not provided in the supplied connected documents. No affected products, impact, fixes, or exploitation data are present here. Monitor for updates.

CVE-2023-36423

Technical details about CVE-2023-36423 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates in connected sources.

CVE-2024-26158

CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...

CVE-2017-0174

CVE-2017-0174 is a Windows NetBIOS Denial of Service vulnerability. Exploitation involves sending malformed NetBIOS packets to affected Windows versions (Windows 7/8.1/10, Windows Server 2008-2016 and related). The underlying cause is improper handling within the Windows NetBIOS/network stack, al...

CVE-2021-36937

Technical details for CVE-2021-36937 are not publicly available in the provided documents. The initial description notes a Windows Media MPEG-4 Video Decoder RCE, but no concrete product/version/impact details are supplied here. Monitor for updates.

CVE-2022-24474

Technical details about CVE-2022-24474 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates.

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2022-34729

Technical details about CVE-2022-34729 are not publicly available in the provided connected documents. Monitor for updates; the entry is described as a Windows GDI Elevation of Privilege vulnerability with local access and high impact in the initial description.

CVE-2022-37986

Technical details about CVE-2022-37986 (affected component, root cause, impact, or fixes) are not provided in the connected or initial documents. Monitor for updates and additional technical disclosure.

CVE-2023-21727

Technical details (affected product/versions/root cause/fix) are not provided in the connected documents; monitor for updates.

CVE-2024-26179

CVE-2024-26179 affects Windows Routing and Remote Access Service (RRAS) with a remote code execution vulnerability (CVSS v3.1: 8.8, HIGH). The entry specifies network attack vector with no privileges required but user interaction required, leading to execution of arbitrary code on affected system...

CVE-2024-30080

Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.

CVE-2020-1530

CVE-2020-1530 is an Elevation of Privilege flaw in Windows Remote Access caused by improper handling of memory. An attacker who already has code execution on a victim system could run a crafted program to elevate privileges. The advisory indicates the fix is a security update that corrects how Wi...

CVE-2022-30220

Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.

CVE-2022-37976

CVE-2022-37976 is an Elevation of Privilege in Windows Active Directory Certificate Services (AD CS). A malicious DCOM client can force a AD CS server to authenticate to it over the network, potentially using those credentials to perform a cross-protocol attack. This could allow an attacker to ob...

CVE-2023-21817

The provided documents do not contain technical details about CVE-2023-21817 (affected product/component, root cause, impact, or remediation). Technical specifics are not publicly available here. Monitor for updates and authoritative disclosures.

CVE-2024-20664

CVE-2024-20664 corresponds to a Microsoft Message Queuing information disclosure vulnerability. The provided documents describe an information disclosure in Microsoft Message Queuing that could allow an attacker to obtain sensitive data from heap memory. The entry has a CVSS 3.1 base score of 6.5...

CVE-2015-1637

CVE-2015-1637 is listed in OpenSSL TLS Export Cipher Suite Downgrade advisories (FREAK family). IBM AIX/OpenSSL references indicate OpenSSL on AIX platforms is affected by export-RSA downgrade threats and provides fixes via interim patches (IV69033s9a/b/c) for openssl.base 1.0.1.513 on AIX 5.3/6....

CVE-2022-24499

Technical details about CVE-2022-24499 are not provided in the connected documents; public specifics (affected products, root cause, exploit info, or remediation) are not available here. Monitor for updates.

CVE-2022-38029

Summary : CVE-2022-38029 is a Windows ALPC elevation-of-privilege vulnerability. It is a local issue that can grant high-impact privileges to an attacker with low privileges and no user interaction, as indicated by the CVSS vector in the Initial document (CVSS v3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=...

CVE-2023-35628

CVE-2023-35628 is a Windows MSHTML platform remote code execution vulnerability. The MSHTML rendering engine used by Windows and Outlook can be exploited by processing specially crafted email content, potentially allowing code execution on a target machine without user interaction. The CVE is rat...

CVE-2023-36428

Technical details about CVE-2023-36428 are not provided in the supplied documents. No concrete affected products, versions, or remediation are present here. Monitor for updates from Microsoft and NVD for further information.

CVE-2020-16923

CVE-2020-16923 is a remote code execution vulnerability in Microsoft Graphics Components, due to improper handling of objects in memory. An attacker could execute arbitrary code on a target system by convincing a user to open a specially crafted file. Public documents consistently state the issue...

CVE-2021-31183

CVE-2021-31183 is a Windows TCP/IP Driver Denial of Service vulnerability. Multiple connected sources (NVD/NVD CNVD entries) describe it as a DoS issue affecting the Windows TCP/IP driver in Windows/Windows Server with network-based attack potential. The CVSS metrics indicate a network, low-attac...

CVE-2022-22035

Technical details for CVE-2022-22035 are not publicly available in the provided documents. Monitor for vendor advisories and updates. The connected sources mention the CVE in KEV lists and risk context but do not disclose affected components, root causes, or fixes.

CVE-2023-21776

Technical details for CVE-2023-21776 are not publicly provided in the connected documents. Based on the supplied sources, we cannot specify affected product versions, root cause, impact, or fixes. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2023-28283

CVE-2023-28283 is a Windows LDAP remote code execution vulnerability. Connected sources describe an unauthenticated RCE in the Windows LDAP service triggered by specially crafted LDAP requests, with the issue classified as high/critical in May 2023 updates. Root cause and exact impact are not dee...

CVE-2023-35384

CVE-2023-35384 is a Windows HTML Platform security feature bypass. The provided documents describe two vulnerabilities that can be chained to achieve remote code execution in Outlook: (1) the HTML security feature bypass allowing a crafted file or URL to evade security zone tagging, and (2) a Win...

CVE-2010-0270

The CVE-2010-0270 entry describes a remote code execution/memory corruption vulnerability in the SMB client of Windows 7 and Windows Server 2008 R2. The SMB client fails to properly validate fields in SMB responses (SMB transaction responses), for both SMBv1 and SMBv2, allowing remote SMB servers...

CVE-2020-17042

CVE-2020-17042 is a Windows Print Spooler remote code execution vulnerability. The CVE entry identifies the affected component as the Windows Print Spooler and indicates a network-based attack with high impact (base score 8.8/3.1 CVSS) and user interaction required. The connected documents provid...

CVE-2021-24074

Technical details about CVE-2021-24074 are not provided in the supplied documents. Public information in the initial entry is high-level and lacks affected products, root cause, vulnerability specifics, or remediation within the provided data set.

CVE-2022-22023

CVE-2022-22023 corresponds to a Windows vulnerability described as a Windows Portable Device Enumerator Service Security Feature Bypass. The NVD entry provides CVSS scores: CVSS v2 base 6.9 (LOCAL, MEDIUM) and CVSS v3.1 base 6.6 (PHYSICAL access, LOW complexity, LOW privileges). Impact indicators...

CVE-2022-34707

CVE-2022-34707 is a Windows Kernel elevation-of-privilege vulnerability discussed in the connected material. It relies on a registry hive memory corruption path: a refcount/overflows in a security descriptor cell can trigger a use-after-free, enabling overflow of hive cells and enabling an attack...

CVE-2024-29066

CVE-2024-29066 is an Windows DFS Remote Code Execution vulnerability. Affected: Windows Distributed File System (DFS). CVSS 3.1 base 7.2 (NETWORK, HIGH impact across Confidentiality, Integrity, Availability). Requirements: HIGH privileges, no user interaction; scope UNCHANGED. Concrete root-cause...