CVE-2019-0576

Public details for CVE-2019-0576 are not present in the connected documents. The initial description lists affected Windows versions but provides no concrete exploit, root cause, affected components, or remediation specifics in the supplied data.

CVE-2020-0625

Technical details for CVE-2020-0625 are not publicly available in the provided documents. Monitor for updates from primary sources.

CVE-2020-1509

CVE-2020-1509 is an elevation-of-privilege vulnerability in the Local Security Authority Subsystem Service (LSASS) on Windows. An authenticated attacker could exploit a specially crafted authentication request to elevate privileges on the target system. The issue is addressed by a security update...

CVE-2021-34442

CVE-2021-34442 is a remote code execution vulnerability in Windows DNS Server. Affected component: Windows DNS Server; vulnerability type: Remote Code Execution; root cause and exploit specifics are not detailed in the connected documents, but CVSS metrics are provided: CVSS v3.1 base score 7.5 (...

CVE-2021-34456

Technical details for CVE-2021-34456 are not provided in the supplied documents. No affected product/version is specified here; monitor for updates from official sources for public details and remediation.

CVE-2021-34497

CVE-2021-34497 corresponds to a Windows MSHTML Platform Remote Code Execution vulnerability. Public details in the provided connected documents show the affected surface includes Internet Explorer/MSHTML components and the associated patch KB5005563 (Cumulative security update for Internet Explor...

CVE-2021-38639

Technical details about CVE-2021-38639 are not publicly provided in the supplied documents. Monitor for updates from official advisories; the CVE is described as a Win32k elevation of privilege vulnerability, with published CVSS metrics in NVD.

CVE-2022-35835

Technical details (affected component, root cause, exploitability, and remediation) are not provided in the connected documents. Monitor for updates from official sources.

CVE-2022-41118

Technical details about CVE-2022-41118 are not provided in the supplied documents. No product/vendor/version or exploit information is available here. Monitor for updates from official sources; further details and remediation would require vendor advisories.

CVE-2023-21689

CVE-2023-21689 is a Microsoft PEAP Remote Code Execution vulnerability with a CVSS v3.1 base score of 9.8. The vulnerability is network-exploitable with no user interaction and requires no privileges; it potentially impacts confidentiality, integrity, and availability. Connected sources confirm t...

CVE-2023-21765

Technical details for CVE-2023-21765 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor official advisories and connected sources for updates.

CVE-2023-23423

CVE-2023-23423 is a Windows Kernel Elevation of Privilege vulnerability tied to hive memory corruption in the Windows Registry (HKCU/HKLM hives). The connected Project Zero analysis provides concrete exploitation details: a memory-corruption primitive in hive data can be combined with a crafted o...

CVE-2011-3414

CVE-2011-3414 concerns a denial-of-service in the Microsoft .NET Framework ASP.NET HashTable mapping. The vulnerability arises from the CaseInsensitiveHashProvider.getHashCode function used by the HashTable implementation across .NET Framework 1.1 SP1, 2.0 SP2, 3.5 SP1, 3.5.1, and 4.0, which can ...

CVE-2012-0004

CVE-2012-0004 affects Microsoft Windows via the DirectShow/DirectX stack (Quartz.dll, Qdvd.dll, Line21 DirectShow filter) and related components. The vulnerability allows remote attackers to execute arbitrary code by delivering a crafted media file, due to improper handling within DirectShow filt...

CVE-2017-0170

CVE-2017-0170 is an information-disclosure flaw in Windows Performance Monitor Console where XML input is parsed unsafely, allowing an XML external entity (XXE) to read arbitrary files. Affected are Windows versions listed in the CVE description (Windows 7/8.1/10, Windows Server variants, and Win...

CVE-2019-0847

Technical details for CVE-2019-0847 are not publicly available in the provided documents; no affected product/version, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2019-1241

Technical details for CVE-2019-1241 are not provided in the connected documents; only related Jet Database Engine vulnerabilities (e.g., CVE-2019-1246) are described. Monitor for updates.

CVE-2020-0607

CVE-2020-0607 is an information disclosure vulnerability in Microsoft Windows Graphics Components related to how memory objects are handled. The issue could allow partial disclosure of information (CVSS2: Confidentiality Partial; AV:N/AC:M/Au:N/I:N/A:N) with a local-style potential exploit (CVSS3...

CVE-2022-30194

Technical details about CVE-2022-30194 are not publicly provided in the supplied documents; no affected products, exploit info, or remediation details are included. Monitor for updates.

CVE-2022-30206

CVE-2022-30206 is a Windows Print Spooler Elevation of Privilege vulnerability. The connected exploit PoC demonstrates local EoP by abusing the Print Spooler to delete an arbitrary TargetFile via a spooler-related file operation (creating a printer, setting SpoolDirectory, triggering an oplock on...

CVE-2022-35820

Technical details about CVE-2022-35820 (affected Windows Bluetooth driver, root cause, impact, and fix) are not present in the provided connected documents. Monitor for updates in the sources above to obtain concrete information.

CVE-2023-21803

CVE-2023-21803 corresponds to a Windows iSCSI Discovery Service Remote Code Execution vulnerability. The available data shows a critical 9.8 CVSSv3.1 score with network attack vector , no privileges required , and no user interaction ; impact is shown as High for confidentiality, integrity, and a...

CVE-2023-21805

Technical details about CVE-2023-21805 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2024-30031

CVE-2024-30031 is documented as a Windows elevation-of-privilege issue affecting the CNG Key Isolation Service . The available sources describe the vulnerability as a local, privilege-required issue with high impact across confidentiality, integrity, and availability, but do not provide vendor-sp...

CVE-2010-2550

CVE-2010-2550 affects the SMB Server in multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, Windows 7). The root cause is improper validation of fields in an SMB request, allowing remote code execution via a crafted SMB packet (aka “SMB Pool Overflow Vulnera...

CVE-2019-0736

CVE-2019-0736 is a memory corruption vulnerability in the Windows DHCP client triggered by specially crafted DHCP responses. If exploited, it could allow remote code execution on the affected Windows client. The issue arises from how the DHCP client handles certain responses (root cause: memory c...

CVE-2019-0755

CVE-2019-0755 is a Windows kernel information-disclosure vulnerability. The connected sources describe an issue where the Windows kernel improperly handles or initializes objects in memory, enabling local access-based information disclosure with high confidentiality impact (per CVSS3 vector: loca...

CVE-2019-0795

Technical details for CVE-2019-0795 are not provided in the supplied documents; no affected products, root cause, impact, or remediation are stated. Monitor for updates from connected sources.

CVE-2019-0879

Technical details about CVE-2019-0879 are not publicly provided in the supplied documents. The connected EUVD/CNVD entries reference the Jet Database Engine remote code execution but do not include affected versions, exploit info, or fixes. Monitor for updates.

CVE-2022-30225

Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.

CVE-2022-38027

CVE-2022-38027 is a Windows Storage Elevation of Privilege vulnerability affecting Microsoft Windows Storage, arising from improper assignment of privileges to applications. The issue enables local privilege escalation with high impacts to confidentiality, integrity, and availability (local acces...

CVE-2022-38037

CVE-2022-38037 is described in the sources as a Windows kernel memory corruption vulnerability caused by the registry hive loader not enforcing a correct relationship between the hive file version (minor) and the subkey list structures. Specifically, the hive loader may assume a given minor versi...

CVE-2022-41048

Technical details about CVE-2022-41048 (affected product, root cause, impact, or remediation) are not provided in the supplied documents; no public details are present here. Monitor for updates.

CVE-2023-28216

Technical details about CVE-2023-28216 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-49046

CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...

CVE-2008-4037

CVE-2008-4037 describes a remote code-execution condition in various Windows platforms where SMB servers can replay NTLM credentials to a client, enabling arbitrary code execution (SMB Credential Reflection). The issue, demonstrated by backrush, is part of the SMB relay/credential reflection fami...

CVE-2009-2500

This CVE corresponds to MS09-062: GDI+ WMF Integer Overflow Vulnerability. Affected are Microsoft GDI+ image-processing paths used by WMF, PNG, TIFF, BMP handling across Windows components and Office/Viewer products (e.g., IE6, Office suites, Visio, Project, SQL/Report Viewer, Forefront Client Se...

CVE-2017-8527

Technical details for CVE-2017-8527 are not publicly available in the provided documents. No specifics on affected products, vulnerable components, root cause, exploits, or fixes are included here. Monitor for updates from official advisories.

CVE-2018-8206

CVE-2018-8206 is a Windows FTP Server denial-of-service vulnerability caused by improper handling of FTP connections. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2/2016, Windows 8.1, Windows 10, Windows RT 8.1, and Windows Server 2012 R2/2016/2019-era variants as l...

CVE-2019-0625

Technical details for CVE-2019-0625 are not publicly available in the provided documents. Monitor for updates; current sources confirm a Jet Database Engine remote code execution vulnerability but do not expose affected products, versions, or fixes in this set.

CVE-2021-31971

CVE-2021-31971 is a Windows security vulnerability described as a Windows HTML Platforms Security Feature Bypass. Connected sources confirm it is a remote, network-exploitable vulnerability in the HTML platforms component of Internet Explorer/Windows HTML Platform. Exploitation details in the Nes...

CVE-2022-23285

CVE-2022-23285 is a Remote Desktop Client Remote Code Execution vulnerability (CVSS v3.1 base 8.8) elevated to HIGH by NVD. It is referenced in March 2022 Microsoft Patch Tuesday coverage as a Remote Desktop/RDP-related issue addressed by the accompanying security updates (e.g., KB5011497, KB5011...

CVE-2022-26917

CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...

CVE-2023-21675

CVE-2023-21675 is described in the connected documents as a Windows kernel vulnerability rooted in hive/registry memory corruption. The attack targets HKCU (volatile/hive storage) using out-of-bounds cell indexes to access the _CMHIVE/_HHIVE structures from kernel pool, enabling arbitrary read/wr...

CVE-2023-23394

Technical details for CVE-2023-23394 are not provided in the connected documents. They reference CSRSS generally and Windows updates (DCOM hardening, LSASS, domain join issues) but do not specify affected products/versions or exploit details. Monitor for updates.

CVE-2024-49105

CVE-2024-49105 affects the Windows Remote Desktop Client. It enables remote code execution over the network; exploitation requires user interaction and high privileges, with high impacts to confidentiality, integrity, and availability. CVSS v3.1 base score 8.4 (Network, Low attack complexity, Pri...

CVE-2025-21245

CVE-2025-21245 is a Windows Telephony Service remote code execution vulnerability. The CIRCL feed and CVE listings indicate it affects Windows Telephony Service with potential for executing code from an attacker-supplied payload (impact: execution of arbitrary code) and a CVSS v3.1 base score of ...

CVE-2015-2370

CVE-2015-2370 involves an elevation-of-privilege flaw in Windows RPC/DCOM: the DCE/RPC reflection enables a local attacker to gain privileges via a crafted OBJREF, allowing a local user to trigger RPC auth relaying. Affected products span Windows Server 2003 SP2/R2 SP2, Vista SP2, Server 2008 SP2...

CVE-2018-1012

CVE-2018-1012 describes a remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts, commonly called the Microsoft Graphics Remote Code Execution Vulnerability. Affected are Windows 7; Windows Server 2008, 2008 R2, 2012, 2012 R2; Windows 8.1; Wi...

CVE-2018-8475

CVE-2018-8475 is a Windows remote code execution vulnerability caused by improper handling of specially crafted image files. Affected: Windows 7; Windows Server 2008/2012; Windows 8.1; Windows RT 8.1; Windows 10; Windows Server 2008 R2/2012/2016; Windows 10 Servers. The description does not provi...