CVE-2022-26822

Technical details for CVE-2022-26822 are not provided in the connected documents. The supplied materials do not disclose affected products, root cause, or fixes. Monitor for updates.

CVE-2023-32016

Technical details about CVE-2023-32016 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and security feeds for affected products, vulnerable components, and fixes.

CVE-2024-26183

CVE-2024-26183 is a Windows Kerberos Denial-of-Service vulnerability. The CVSS 3.1 base metrics (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) indicate a NETWORK-exploitable issue with a MEDIUM severity (6.5) and a HIGH impact on availability, requiring LOW privileges and no user interaction. The descript...

CVE-2010-0476

CVE-2010-0476 is a remote code-execution vulnerability in the Microsoft SMB client. The issue occurs when the SMB client implementation on Windows platforms (including Windows Server 2003 SP2, Windows Vista SP1/SP2, and Windows Server 2008 SP2) improperly parses or handles certain crafted SMB res...

CVE-2015-2454

CVE-2015-2454 concerns a vulnerability in the Windows kernel-mode driver where impersonation level handling is not properly constrained. The issue allows a local attacker to gain privileges by crafting an application, affecting multiple Windows versions listed in the initial document (Vista SP2, ...

CVE-2019-0802

CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...

CVE-2021-31194

CVE-2021-31194 is described in the provided documents as an OLE Automation Remote Code Execution vulnerability in Windows. The NVD entry lists CVSSv3.1 base score 8.8 ( HIGH ) with network attack vector, low complexity, privileges required: LOW, and user interaction NONE, resulting in HIGH confid...

CVE-2021-33757

Technical details for CVE-2021-33757 are not publicly disclosed in the provided documents. The entries reference the vulnerability by name but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2022-26918

CVE-2022-26918 relates to a Windows Fax Compose Form remote code execution vulnerability. According to CNVD-2022-71976, the root cause is a failure to properly filter special elements of the input data during external input construction, enabling arbitrary code execution on affected systems. The ...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2023-28244

Technical details about CVE-2023-28244 are not publicly available in the provided documents. Monitor for updates from official sources (NVD/Microsoft) to obtain affected products, root cause, impact, and remediation information.

CVE-2024-26244

CVE-2024-26244 is a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. According to the CVSS 3.1 vector, it is exploitable over the network with no privileges required, but requires user interaction, and has high impact on confidentiality, integrity, and ava...

CVE-2024-30037

The CVE-2024-30037 entry affects Windows Common Log File System Driver and is categorized as a local Elevation of Privilege vulnerability (requires local access; may grant elevated privileges). The connected documents corroborate the CVE mapping and indicate it is part of a set of Windows fixes; ...

CVE-2011-1965

CVE-2011-1965 corresponds to a denial-of-service vulnerability in the Windows TCP/IP stack (Tcpip.sys) where URL-based QoS handling could be abused to reboot the host. Affected products include Windows 7 Gold and SP1 and Windows Server 2008 R2 and R2 SP1. The root cause is improper handling of UR...

CVE-2013-3868

CVE-2013-3868 affects Microsoft Active Directory Lightweight Directory Service (AD LDS) and Active Directory Services across Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, and Server 2012. The vulnerability allows remote attackers to trigger a denial of service (LDAP...

CVE-2014-0315

CVE-2014-0315 corresponds to the Windows File Handling vulnerability fixed by MS14-019. It is a local privilege-escalation/binary-hijacking issue caused by untrusted search path handling for .bat/.cmd files when CreateProcess() is used and the first token is CMD, which can execute a rogue cmd.exe...

CVE-2018-0747

Technical details for CVE-2018-0747 are not publicly provided in the supplied documents; no concrete affected products, root cause, or patch information are present. Monitor for updates.

CVE-2021-33749

CNVD-2021-62476 and NVD entries describe CVE-2021-33749 as a Windows DNS Snap-in remote code execution vulnerability in Microsoft Windows/Windows Server. Affected component: DNS Snap-in. Root cause: remote code execution via the DNS Snap-in. Impact: potential full system compromise; confidentiali...

CVE-2021-34457

CVE-2021-34457 affects the Windows Remote Access Connection Manager, described as an Information Disclosure Vulnerability. The NVD entry lists CVSS v3.1 base score 5.5 (Medium) with LOCAL access, LOW attack complexity, and no user interaction required; confidentiality impact is High while integri...

CVE-2021-36965

CVE-2021-36965 concerns a Remote Code Execution flaw in Windows WLAN AutoConfig service. Connected documents confirm the affected component is WLAN AutoConfig and reference September 2021 Microsoft patches; no explicit root-cause details or in-wild exploitation are provided in the supplied source...

CVE-2022-22028

CVE-2022-22028 is described as a Windows Network File System Information Disclosure vulnerability. Connected OpenVAS entries show this CVE being included in Microsoft update KB5015861 (OS Build updates) and KB5015807 (OS builds 19042/19043/19044), indicating the vulnerability is addressed by thes...

CVE-2022-23298

Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.

CVE-2022-30143

CVE-2022-30143 is an LDAP Remote Code Execution vulnerability affecting Windows LDAP, where exploitation is contingent on the LDAP MaxReceiveBuffer policy being configured higher than the default. The Linked AVLEONOV content notes that the vulnerability exists for LDAP RCEs during Patch Tuesday J...

CVE-2023-21685

The CVE-2023-21685 entry concerns Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution. The connected NVD record provides CVSS 3.1: NETWORK attack vector, LOW attack complexity, NONE privileges required, UI required, and impacts to Confidentiality, Integrity, and Availability (all ...

CVE-2023-24940

Technical details for CVE-2023-24940 are not publicly available in the provided documents. The connected items reference the CVE but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2024-49019

CVE-2024-49019 affects Active Directory Certificate Services (AD CS) and enables privilege escalation. The connected exploit resource demonstrates misuse of certificate-based authentication to obtain domain admin rights (e.g., requesting and using a certificate to gain LDAP/administrative access,...

CVE-2017-0108

CVE-2017-0108 is a remote-code-execution vulnerability in the Windows Graphics Component, exploited via untrusted fonts processed by Uniscribe (usp10.dll) and exposed through graphics-related API calls invoked by user32/draw text paths. Google Project Zero’s Uniscribe fuzzing identified 8 high‑se...

CVE-2018-0817

Technical details about CVE-2018-0817 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are specified here.

CVE-2018-8550

CVE-2018-8550 is a local elevation-of-privilege flaw in Windows COM Aggregate Marshaler. The vulnerability allows an attacker with local access to run code with elevated privileges on affected Windows versions (Windows 7, Windows 8.1/10 family, and corresponding Server SKUs). Public references (e...

CVE-2019-0881

CVE-2019-0881 is described as a Windows Kernel elevation-of-privilege vulnerability that occurs when the kernel improperly handles key enumeration. The Initial document provides a high-level description with CVSS metrics and MSRC references, but contains no product-version or patch details. Conne...

CVE-2021-38631

CVE-2021-38631 is a Windows RDP information-disclosure vulnerability. Public sources and patches indicate it affects Remote Desktop Protocol handling on Windows 7–11 and Windows Server 2008–2019, allowing an attacker with local access to view the RDP password. Microsoft released fixes as part of ...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...

CVE-2022-21997

Technical details about CVE-2022-21997 are not provided in the supplied documents. Monitor for updates from NVD/Microsoft and ENISA KEV references.

CVE-2022-30153

CVE-2022-30153 is cited in connected materials as a Windows LDAP Remote Code Execution vulnerability, listed among several Windows LDAP RCEs. The AVLEONOV post notes that some LDAP RCEs depend on the LDAP MaxReceiveBuffer policy, implying a conditional exploitation vector for certain LDAP configu...

CVE-2022-34701

Technical details about CVE-2022-34701 (affected product, root cause, impact, or fix) are not provided in the connected documents; monitor for official disclosures and updates.

CVE-2023-24887

CVE-2023-24887 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Affected component: Microsoft PostScript and PCL6 Class Printer Driver. Root cause/impact: remote code execution with NETWORK attack vector, low complexity, low privileges, no user interact...

CVE-2023-28253

Technical details for CVE-2023-28253 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation details are present here. Monitor for updates.

CVE-2012-0217

CVE-2012-0217 affects the x86-64 kernel sysret path across multiple platforms (Xen 4.1.2 and earlier, XenServer 6.0.2 and earlier, Solaris 11 and earlier, illumos before r13724, FreeBSD before 9.0-RELEASE-p3, NetBSD 6.0 Beta and earlier, Windows Server 2008 R2/R2 SP1/Windows 7 SP1, and others). T...

CVE-2019-0735

CVE-2019-0735 is a Windows CSRSS elevation-of-privilege vulnerability caused by improper handling of in-memory objects. The entry documents a local attacker gain of high impact (confidentiality/ integrity/ availability) by exploiting this flaw. The CIRCL sighting notes an exploitation link (Explo...

CVE-2019-0986

CVE-2019-0986 affects the Windows User Profile Service (ProfSvc) and concerns improper handling of symlinks. The vulnerability enables elevation of privilege, allowing an attacker who can log on to run a crafted application that could delete files or folders in an elevated context. The impact is ...

CVE-2019-1149

CVE-2019-1149 is a remote code execution vulnerability in the Windows font library caused by improper handling of embedded fonts (Microsoft Graphics Remote Code Execution). It can allow an attacker to take control of the system, install programs, or modify data after successful exploitation via w...

CVE-2019-1280

CVE-2019-1280 is a Windows LNK processing remote code execution vulnerability. The flaw allows an attacker to execute code with the same user rights as the logged-in user when a .LNK file is processed. Some connected sources note active exploitation vectors (Astaroth) and public patches from Micr...

CVE-2021-34442

CVE-2021-34442 is a remote code execution vulnerability in Windows DNS Server. Affected component: Windows DNS Server; vulnerability type: Remote Code Execution; root cause and exploit specifics are not detailed in the connected documents, but CVSS metrics are provided: CVSS v3.1 base score 7.5 (...

CVE-2022-26827

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2022-26827 are not provided in the connected documents. Monitoring for updates is advised; no public details are present in the supplied sources.

CVE-2022-38047

CVE-2022-38047 is a Windows Point‑to‑Point Tunneling Protocol (PPTP) remote code execution vulnerability. The CVE affects the PPTP component in Windows, with a network‑level attack surface, high impact (C/H/I/A all high) and no user interaction required per CVSS v3.1. Connected sources corroborat...

CVE-2023-21527

CVE-2023-21527 is a Denial-of-Service vulnerability in the Windows iSCSI Service. The connected NCSc advisory explicitly lists CVE-2023-21527 under Windows iSCSI with a DoS impact. The initial record assigns CVSS v3.1: 7.5 (Network, High, Availability impact) with no documented exploitation statu...

CVE-2023-21798

Technical details about CVE-2023-21798 are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-24912

Technical details for CVE-2023-24912 are not publicly provided in the supplied documents. Monitor for updates from official advisories when more information becomes available.

CVE-2023-24946

CVE-2023-24946 is described in the provided sources as a Windows Backup Engine/Backup Service Elevation of Privilege vulnerability. The CNVD entry explicitly notes an attacker could gain SYSTEM privileges, indicating a local, privilege-escalation flaw. The CVSS vector in the initial data shows: L...

CVE-2023-29358

CVE-2023-29358 is a Windows GDI Elevation of Privilege vulnerability. Per the sources, it is a LOCAL, low-attack-complexity issue with LOW privileges required, and it has HIGH confidentiality, integrity, and availability impact. The connected documents corroborate the Windows context and do not p...