CVE-2024-30006

CVE-2024-30006 affects the Microsoft WDAC OLE DB provider for SQL Server and enables Remote Code Execution. The CVSS v3.1 base score is 8.8 (HIGH) with Network attack vector, Low attack complexity, and user interaction required. Some sources list it as a high-severity Windows vulnerability (score...

CVE-2025-24996

CVE-2025-24996 : Affects Windows NTLM. External control of a file name or path enables an unauthorized network spoofing scenario, potentially allowing impersonation over a network. CVSSv3.1 base 6.5 (Network attack, low complexity, no privileges required, user interaction required; CIA: high conf...

CVE-2017-0267

CVE-2017-0267 is an SMBv1 information-disclosure vulnerability in Microsoft Windows SMB Server 1.0. The issue arises from improper handling of certain SMBv1 requests, allowing a remote attacker to obtain sensitive information by sending specially crafted data to affected servers across multiple W...

CVE-2021-34446

Technical details (affected product/version, root cause, impact, or exploit information) for CVE-2021-34446 are not provided in the supplied documents. Monitor for updates.

CVE-2021-43893

Technical details for CVE-2021-43893 are not provided in the connected documents; the initial entry lists a Windows EFS privilege issue but no public details (affected products, fixes) in the supplied materials. Monitor for updates.

CVE-2023-23414

CVE-2023-23414 is a Windows PPPoE Remote Code Execution vulnerability. The CVSS 3.1 base score is 7.1 (HIGH) with Adjacent attack vector, high attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability (all high). Exploitation...

CVE-2023-36401

Technical details (affected product, root cause, impact, or patch) are not provided in the connected documents. Please monitor for updates from Microsoft or CVE references to get concrete details and remediation when they become available.

CVE-2024-38199

Technical details about CVE-2024-38199 are not publicly provided in the connected documents. Monitor for updates from Microsoft and NVD for affected products, fixes, and exploit information.

CVE-2021-34447

CVE-2021-34447 is tied to Windows MSHTML/Internet Explorer, with public details indicating an IE11 remote-code-execution vulnerability. Connected KB entry KB5005563 describes a cumulative security update for Internet Explorer (Sept 14, 2021) that resolves IE/MSHTML vulnerabilities and lists affec...

CVE-2022-22026

CVE-2022-22026 is a Windows CSRSS Elevation of Privilege vulnerability. The connected document confirms it as one of the CSRSS issues fixed during the July 2022 Patch Tuesday cycle, noting that two other CSRSS flaws (CVE-2022-22047 and CVE-2022-22049) were also fixed. The exact affected product s...

CVE-2022-37987

CVE-2022-37987 is a Windows CSRSS local privilege-elevation vulnerability in the Client Server Run-time Subsystem. The CVSSv3.1 base score is 7.8 (HIGH) with local attack vector, low attack complexity, and privileges required: LOW; impact to confidentiality, integrity, and availability is HIGH. A...

CVE-2024-49082

CVE-2024-49082 is a Windows File Explorer information disclosure vulnerability. The connected data lists impact as access to sensitive data with CVSS 3.1 v3.1 vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N, score 6.8 (Medium). Concrete details about root cause or affected Windows versions are not fu...

CVE-2025-24035

CVE-2025-24035 affects Windows Remote Desktop Services. The connected data corroborates a remote code execution risk over a network, arising from memory handling (sensitive data stored in improperly locked memory). The impact is described as executing arbitrary code, with the network as the attac...

CVE-2016-0051

CVE-2016-0051 is a local privilege-escalation vulnerability in the Windows WebDAV client. The issue stems from the WebDAV client’s handling of crafted input, allowing a local attacker to gain SYSTEM-level privileges on affected Vista/7/8.1/2012/RT/10 variants with the WebDAV component (WebDAV cli...

CVE-2021-33764

CVE-2021-33764 is a Windows Kerberos KDC information-disclosure issue affecting domain controllers. Public details describe a RFC 4556 (section 3.2.1) noncompliance that can impact PIV/smart-card scenarios. Microsoft’s out-of-band updates note a temporary mitigation using a registry key and advis...

CVE-2021-42282

Technical details for CVE-2021-42282 are not publicly provided in the connected documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates.

CVE-2022-22027

Technical details for CVE-2022-22027 are not publicly provided in the supplied documents. Monitor for updates and availability of affected product/version, root cause, impact, or fixes.

CVE-2022-22037

CVE-2022-22037 is a Windows ALPC Elevation of Privilege vulnerability. The NVD entry states the issue affects Windows ALPC and yields high impact (confidentiality, integrity, availability) with CVSS 3.1 base score 7.5 and CVSS 2.0 base score 8.5. Connected OpenVAS entries reference multiple Micro...

CVE-2022-30146

Technical details about CVE-2022-30146 are not provided in the connected documents; the sources mention LDAP RCE in general terms without specific affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2022-37958

CVE-2022-37958 is a SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution vulnerability. The connected materials confirm a network-exposed RCE path via SPNEGO negotiation in affected systems, with public reporting of an upgrade from High to Critical severity by Microsoft a...

CVE-2023-29351

Technical details about CVE-2023-29351 are not publicly available in the provided documents. Monitor Microsoft and NVD for updates on affected products, impact, and remediation.

CVE-2019-1155

CVE-2019-1155 is a Jet Database Engine remote code execution vulnerability in Windows. It arises from improper handling of in-memory objects, enabling an attacker to run arbitrary code on a victim system by enticing the user to open a specially crafted file. The update fixes how the Jet Database ...

CVE-2019-1246

CVE-2019-1246 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of in-memory objects. The Nessus plugin for Security Updates for Microsoft Office products C2R (September 2019) confirms this CVE and notes that the update fixes the Jet Database ...

CVE-2022-23283

CVE-2022-23283 is a Windows local elevation-of-privilege vulnerability in the ALPC subsystem. The NVD entry lists a CVSSv3.1 base score of 7.0 (HIGH) with local access, high impact on confidentiality, integrity, and availability, and no user interaction required. Connected sources reference a Mic...

CVE-2024-20655

CVE-2024-20655 is a Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability. The provided documents mention this CVE in risk references and OpenVAS listings but do not supply concrete technical details such as affected product versions, root cause, or specific fix....

CVE-2024-20680

Technical details about CVE-2024-20680 (affected MSMQC, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8413

CVE-2018-8413 affects the Windows Theme API and specifically the ThemePack (CAB-based) file parser used by Windows theme files. The connected exploit entries describe a vulnerability in the ThemePack parser that allows attackers to create arbitrary files at arbitrary locations, enabling remote co...

CVE-2022-26803

Technical details for CVE-2022-26803 are not publicly provided in the supplied connected documents. The Windows Print Spooler elevation vulnerability is described at a high level here; monitor official advisories (MSRC/NVD) for impact, affected products, and remediation updates.

CVE-2022-26812

Technical details about CVE-2022-26812 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are present here. Monitor for updates.

CVE-2022-29128

Technical details for CVE-2022-29128 (affected product/version, root cause, impact, or fix) are not provided in the connected documents. The sources reference general LDAP RCE concerns and Windows updates, but no concrete vulnerability specifics. Monitor for updates.

CVE-2022-30151

CVE-2022-30151 is described as a Windows Elevation of Privilege vulnerability in the Ancillary Function Driver for WinSock; no additional technical details are provided in the connected documents.

CVE-2023-21548

CVE-2023-21548 is a Windows SSTP remote code execution vulnerability. The connected NC Sc doc lists it under Windows SSTP with CVSS 8.10 (network context) and labels it as a SSTP issue; no explicit root-cause details or affected product versions are provided beyond “Windows SSTP.” The initial doc...

CVE-2023-28251

CVE-2023-28251 is described as a Windows Driver Revocation List Security Feature Bypass vulnerability. The consolidated data shows a CVSSv3.1 base score of 5.5 (Medium) with a Local attack vector, Low attack complexity, Low privileges required, no user interaction, and Confidentiality Impact None...

CVE-2010-2729

CVE-2010-2729 is a remote code execution vulnerability in the Windows Print Spooler service. It stems from insufficient validation of spooler access permissions, allowing a remote attacker to create files in a system directory and execute arbitrary code by sending a crafted print request over RPC...

CVE-2020-0635

CVE-2020-0635 is described in CNVD entries as an elevation of privilege in Microsoft Windows/Windows Server caused by improper handling of certain symbolic links. The CNVD text specifies that exploiting this flaw allows an attacker to gain system-level privileges by running a crafted application ...

CVE-2020-16896

CVE-2020-16896 describes an information-disclosure vulnerability in Microsoft Windows Remote Desktop Protocol (RDP). According to the linked sources, the issue arises when an attacker connects to a target system via RDP and sends specially crafted requests, potentially allowing the attacker to ob...

CVE-2022-30152

CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...

CVE-2023-21543

According to NCSC-2023-0017, CVE-2023-21543 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability with CVSS v3.1 score 8.10 (impact: executing random code) affecting Windows L2TP components. The CVE is listed among other Windows network‑facing RCE bugs; no specific ex...

CVE-2023-23410

CVE-2023-23410 is described as a Windows HTTP.sys Elevation of Privilege Vulnerability. The initial document provides CVSS 3.1 metrics: local attack vector, low attack complexity, privileges required low, and impact high on confidentiality, integrity, and availability, with a base score of 7.8. C...

CVE-2023-24910

CVE-2023-24910 is a Windows Graphics Component Elevation of Privilege vulnerability. Affected: Windows graphics subsystem components (local component/privilege escalation surface). Root cause: Elevation of privileges with a local attack vector (attack vector Local, low complexity, privileges requ...

CVE-2024-20692

Technical details such as affected product versions, root cause, exploiting conditions, or remediation are not publicly available in the provided documents. Monitor for updates from authoritative sources to obtain concrete information about CVE-2024-20692.

CVE-2024-26195

CVE-2024-26195 is a remote code execution vulnerability in Microsoft Windows DHCP Server (DHCP Server Service). According to OpenVAS data, it is listed under Windows DHCP Server with an impact described as “Executing Random Code.” The NVD entry confirms DHCP Server Service Remote Code Execution V...

CVE-2012-0165

CVE-2012-0165 targets GDI+ EMF processing in Windows and Office, where EMF record type validation is insufficient, enabling remote code execution via a crafted image. Affected: Windows Vista SP2, Windows Server 2008 SP2, and Office 2003 SP3, Office 2007 SP2/SP3, and Office 2010 Gold/SP1 (GDI+). I...

CVE-2019-0626

The CVE-2019-0626 entry describes a memory corruption vulnerability in the Windows Server DHCP Service caused by improper processing of DHCP messages, enabling remote code execution when an attacker sends specially crafted DHCP packets. Connected advisories corroborate code execution on Microsoft...

CVE-2020-16949

CVE-2020-16949 is a denial-of-service flaw in Microsoft Outlook where improper handling of in-memory objects leads to remote DoS after receiving a crafted e‑mail. Public details from multiple sources confirm Outlook vulnerabilities across versions (notably Outlook 2013/KB4484524 references and MS...

CVE-2022-26926

Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.

CVE-2022-30161

Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.

CVE-2018-8476

CVE-2018-8476 is a remote code execution vulnerability in Windows Deployment Services TFTP Server. The issue arises from how memory objects are handled in the TFTP server, allowing an attacker to execute arbitrary code on affected systems. Affected products include Windows Server 2012/2012 R2, 20...

CVE-2019-0595

Technical details about CVE-2019-0595 are not publicly available in the provided documents. The Connected CVEs repeat the same general description without specifics on affected components, versions, exploitability, or fixes. Monitor for updates.

CVE-2021-31959

CVE-2021-31959 is a memory corruption vulnerability in the Microsoft Windows Scripting Engine (jscript9.dll) used by Internet Explorer. Public docs describe it as a scripting engine memory corruption issue that could enable arbitrary code execution on affected Windows versions; a patch was releas...