CVE-2020-0635

CVE-2020-0635 is described in CNVD entries as an elevation of privilege in Microsoft Windows/Windows Server caused by improper handling of certain symbolic links. The CNVD text specifies that exploiting this flaw allows an attacker to gain system-level privileges by running a crafted application ...

CVE-2021-31959

CVE-2021-31959 is a memory corruption vulnerability in the Microsoft Windows Scripting Engine (jscript9.dll) used by Internet Explorer. Public docs describe it as a scripting engine memory corruption issue that could enable arbitrary code execution on affected Windows versions; a patch was releas...

CVE-2022-21833

CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...

CVE-2022-29112

Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.

CVE-2023-23410

CVE-2023-23410 is described as a Windows HTTP.sys Elevation of Privilege Vulnerability. The initial document provides CVSS 3.1 metrics: local attack vector, low attack complexity, privileges required low, and impact high on confidentiality, integrity, and availability, with a base score of 7.8. C...

CVE-2015-0096

CVE-2015-0096 is a Windows DLL search-order/shortcut (LNK) loading vulnerability (MS15-020 family). A crafted LNK with dynamic icon and SpecialFolderDataBlock can bypass earlier whitelisting, causing Windows to load a malicious DLL when icons are rendered (e.g., in Explorer), potentially executin...

CVE-2019-1242

Technical details about CVE-2019-1242 are not provided in the connected documents; monitor for updates.

CVE-2022-26926

Public technical details for CVE-2022-26926 are not provided in the supplied documents. Monitor for updates.

CVE-2022-30152

CVE-2022-30152 is a Windows NAT Denial of Service vulnerability. The connected documents confirm a June 14, 2022 patch release cycle addressing this issue (e.g., KB5014678, KB5014697 and related security updates for Windows Server/OS builds). Patches aim to fix NAT/RRAS-related networking instabi...

CVE-2022-30161

Technical details for CVE-2022-30161 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability trackers for affected components, versions, exploit status, and remediation details.

CVE-2022-30202

Technical details (affected component, root cause, specific versions, and remediation) for CVE-2022-30202 are not provided in the supplied documents; monitor for updates.

CVE-2024-20662

Technical details about CVE-2024-20662 are not present in the provided documents. Monitor for future updates from Microsoft and vulnerability databases for affected products, impact, and remediation details.

CVE-2018-8476

CVE-2018-8476 is a remote code execution vulnerability in Windows Deployment Services TFTP Server. The issue arises from how memory objects are handled in the TFTP server, allowing an attacker to execute arbitrary code on affected systems. Affected products include Windows Server 2012/2012 R2, 20...

CVE-2019-1244

CVE-2019-1244 concerns an information disclosure in DirectWrite where memory contents may be improperly disclosed. Affected component: DirectWrite (Windows text rendering). Root cause: improper handling leading to leakage of memory contents. Impact (per sources): partial confidentiality compromis...

CVE-2022-22036

Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-24493

Technical details about CVE-2022-24493 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-34722

CVE-2022-34722 is a Windows IKE Protocol Extensions RCE affecting systems with IPSec enabled and IKEv1 in use. An unauthenticated attacker could send a crafted IP packet to execute arbitrary code on vulnerable Windows hosts; Ikev2 is not affected. The vulnerability is classified as critical (CVSS...

CVE-2024-26208

CVE-2024-26208 affects Microsoft Message Queuing (MSMQ) on Windows. The OpenVAS entries list MSMQ under Windows Message Queuing with CVE-2024-26208 and indicate a vulnerability that allows executing arbitrary code (remote code execution) over the network, without user interaction, and with high p...

CVE-2024-26228

CVE-2024-26228 affects Windows Cryptographic Services. The connected data indicate a security feature bypass vulnerability in Windows Cryptographic Services, with a local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. ...

CVE-2011-2014

The CVE-2011-2014 entry concerns LDAPS in Active Directory, ADAM, and AD LDS where the LDAPS implementation does not check Certificate Revocation Lists (CRLs). Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2/R2 SP1, and Windows ...

CVE-2012-1851

CVE-2012-1851 is a format string vulnerability in the Windows Print Spooler service that allows remote code execution. Affected: Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, and Windows 7 SP1. Root cause: Print Spooler mishandles crafted response...

CVE-2018-1016

CVE-2018-1016 is a Windows font library remote code execution vulnerability. The issue arises from the Windows font library improperly handling specially crafted embedded fonts, enabling code execution on a vulnerable system. Affected products include multiple Windows versions (Windows 7, Windows...

CVE-2018-8407

CVE-2018-8407 is an information disclosure vulnerability in the Kernel Remote Procedure Call Provider driver that occurs when objects are not properly initialized in memory. The vulnerability affects multiple Windows releases, including Windows 7, Windows 8.1, Windows 10 and various Windows Serve...

CVE-2019-0595

Technical details about CVE-2019-0595 are not publicly available in the provided documents. The Connected CVEs repeat the same general description without specifics on affected components, versions, exploitability, or fixes. Monitor for updates.

CVE-2022-26796

Technical details about CVE-2022-26796 are not provided in the connected documents; no product/version/root-cause/fix information is available here. Monitor for updates.

CVE-2022-35768

CVE-2022-35768 is a Windows kernel elevation-of-privilege vulnerability tied to registry/hive memory; the connected docs describe an out-of-bounds read that could disclose kernel pool memory to the hive file, enabling local attacker memory leakage and potential escalation. The CVE is cited in MSR...

CVE-2023-36911

CVE-2023-36911 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ). The connected NVD entry lists a critical CVSS v3.1 score of 9.8 (Network vector, no privileges required, no user interaction) with high impact on confidentiality, integrity, and availability. Public techn...

CVE-2024-20660

CVE-2024-20660 concerns Microsoft Message Queuing (MSMQ) with an information disclosure vulnerability. Connected CNVD-2024-04951 states MSMQ contains a heap memory information disclosure vulnerability that an attacker could exploit to obtain sensitive data. The NVD entry for CVE-2024-20660 lists ...

CVE-2024-20661

Technical details for CVE-2024-20661 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected versions, impact, and fixes.

CVE-2021-34500

Technical details about CVE-2021-34500 are not provided in the connected documents; no affected products, root-cause, impacts, or fixes are disclosed here. Monitor for updates.

CVE-2022-24502

Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.

CVE-2022-30208

Public technical details about CVE-2022-30208 are not provided in the connected documents. The entry describes a Windows SAM DoS vulnerability but includes no affected product versions, exploit specifics, or remediation. Monitor for official advisories and updates.

CVE-2023-36403

CVE-2023-36403 is linked to a Windows Kernel local privilege escalation involving registry virtualization. CIRCL’s CIRCL:CVE-2023-36403 entry explicitly notes “Windows Kernel bad locking in registry virtualization leads to race conditions,” indicating the root cause is locking/race-condition issu...

CVE-2024-26210

CVE-2024-26210 describes a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The issue is classified as CVSS 3.1 Base Score 8.8 (High) with network attack vector, no privileges required, and user interaction needed. The vulnerability affects the WDAC OLE DB...

CVE-2024-37968

CVE-2024-37968 is a Windows DNS Spoofing vulnerability rated High (CVSS 7.5) with network attack vector and impact on confidentiality. The connected documents confirm this CVE affects Windows DNS and that Microsoft released fixes in the August 2024 updates (examples: KB5041578, KB5041160, KB50418...

CVE-2025-21377

Technical details for CVE-2025-21377 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2018-0742

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates from trusted sources.

CVE-2021-34441

CVE-2021-34441 refers to a Microsoft Windows Media Foundation Remote Code Execution vulnerability. The connected sources identify it as affecting Windows Media Foundation components, with a CVSS v3.1 base score of 7.8 (HIGH), indicating local attack vector, required user interaction, and impacts ...

CVE-2022-30203

Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.

CVE-2023-28302

Technical details for CVE-2023-28302 are not publicly available in the provided documents. Monitor for updates from the listed sources (NVD, OSV, OpenVAS references) for affected products, impact, and fixes.

CVE-2018-1010

Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.

CVE-2018-8544

CVE-2018-8544 is a remote code execution vulnerability in the Windows VBScript engine that corrupts memory when handling objects in VBScript. It affects multiple Windows versions (e.g., Windows 7, Windows 10, various Server editions) and is triggered by memory manipulation of VBScript objects, al...

CVE-2021-1658

Technical details (affected product/component versions, root cause, impact specifics, and remediation) for CVE-2021-1658 are not provided in the connected documents. Monitor for updates in official advisories and vendor patches.

CVE-2021-31958

Technical details for CVE-2021-31958 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-33756

CVE-2021-33756 corresponds to a remote code execution flaw in the Windows DNS Snap-in affecting Windows/Windows Server. Public documents identify the affected component as the DNS Snap-in and confirm a high-severity issue (CVSS v3.1 base score 8.8; network vector, no privileges required, user int...

CVE-2022-26810

Technical details about CVE-2022-26810 are not provided in the supplied connected documents. No explicit affected products/versions, root cause, or fixes are described here. Monitor for updates from official sources.

CVE-2024-26200

CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...

CVE-2025-21341

Technical details for CVE-2025-21341 are not provided in the supplied documents. Public disclosures describe it as Windows Digital Media Elevation of Privilege, but no specifics on vulnerable component, versions, exploit or fix are included. Monitor for updates.

CVE-2025-26645

CVE-2025-26645 affects the Windows Remote Desktop Client. The vulnerability is a relative path traversal in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. According to the published metrics, the exploit requires network access with low attack c...

CVE-2018-0749

CVE-2018-0749 is an elevation-of-privilege issue in the Windows SMB Server (affecting Windows 7 SP1, 8.1, 10 variants, Server 2008/2012/2016, etc.). The root cause centers on how the SMB server and NT Object Manager handle Extended Attributes and process IDs when opening named pipes, which could ...