CVE-2018-8477

CVE-2018-8477 is a Windows kernel information disclosure vulnerability caused by improper handling of objects in memory. Affected products include multiple Windows client and server editions (e.g., Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2008 R2, 2012/2012 R2, 2016, 2019). The vul...

CVE-2019-0536

Technical details for CVE-2019-0536 are not provided in the connected documents. No product/version/impact data is available here. Monitor for updates.

CVE-2019-0690

The vulnerability CVE-2019-0690 affects the Microsoft Hyper-V Network Switch on a host server. The issue is a denial-of-service in which input from a privileged user on a guest OS is not properly validated, leading to an impact on availability. The description specifies the affected component and...

CVE-2019-0792

Technical details for CVE-2019-0792 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2019-0904

The CVE-2019-0904 issue is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of in-memory objects. Attackers could entice users to open a specially crafted file to run arbitrary code on affected systems. Affected software/hardware: Windows Jet Database ...

CVE-2019-1282

CVE-2019-1282 affects the Windows Common Log File System (CLFS) Driver. It is a information-disclosure vulnerability caused by improper handling of sandbox checks in CLFS, enabling local attackers to read data outside its intended limits after logging on and running a crafted application. Exploit...

CVE-2020-1113

Technical details for CVE-2020-1113 are not publicly provided in the connected documents. Monitor for official advisories to learn affected products, root cause, impact, and fixes.

CVE-2020-17140

CVE-2020-17140 corresponds to a Windows SMB information-disclosure vulnerability. Public documents (NVD entry and OpenVAS feeds) describe network-exposed impact with confidentiality and, in some sources, availability concerns, while the vulnerability’s root cause is not detailed beyond “SMB infor...

CVE-2021-24078

CVE-2021-24078 is a Windows DNS Server remote code execution vulnerability affecting Windows Server DNS components. Public sources describe an unauthenticated, network-based RCE when a DNS server processes crafted queries, with CVSS v3.1 score of 9.8 (CRITICAL). Public patches exist as part of Mi...

CVE-2021-33754

CNVD-2021-76463 (Microsoft Windows DNS Server RCE vulnerability) ties CVE-2021-33754 to Windows Server DNS Server. The connected CNVD entry confirms a remote code execution issue in the DNS Server component of Windows Server, but provides no vendor/product version specifics, root-cause details, o...

CVE-2021-34516

Technical details about CVE-2021-34516 are not publicly available in the provided documents. Monitor for official disclosures or advisories for affected products, impact, and remediation.

CVE-2022-35744

Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.

CVE-2022-38026

CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2023-28227

CVE-2023-28227 concerns the Windows Bluetooth Driver and is described as a Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with vector AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating an adjacent attacker with no user interaction could achieve compromi...

CVE-2023-28228

CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...

CVE-2023-35365

CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...

CVE-2025-21310

Technical details for CVE-2025-21310 are not publicly available in the provided documents. Monitor for updates from Microsoft and NVD.

CVE-2025-21329

CVE-2025-21329 is a MapUrlToZone Security Feature Bypass in Windows. Public docs identify it as a bypass of a security feature (CVE-2025-21329) with CVSS v3.1 base metrics indicating NETWORK attack vector, low attack complexity, no privileges required, user interaction required, and a MEDIUM seve...

CVE-2012-0175

CVE-2012-0175 corresponds to a Windows Shell remote code execution vulnerability caused by how Windows handles specially crafted file or directory names. The issue affects multiple Windows editions, including Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/...

CVE-2014-0263

CVE-2014-0263 concerns a remote code execution vulnerability in the Windows Graphics Component (Direct2D). The issue arises when the Direct2D implementation in affected Windows versions encounters a large 2D geometric figure, processed via Internet Explorer, leading to memory corruption that can ...

CVE-2019-0732

CVE-2019-0732 affects Windows by bypassing Device Guard due to improper handling of calls to the LUAFV driver (luafv.sys). The issue enables local, low-privilege attackers to achieve partial confidentiality, integrity, and availability impacts as described in the CVE context. Exploitation is docu...

CVE-2019-0791

CVE-2019-0791 is a remote code execution vulnerability in the Microsoft XML Core Services (MSXML) parser when it processes user input. The issue enables network-based exploitation with user interaction required, and is rated HIGH (CVSS v3.0: 8.8). The initial document does not specify a fixed pat...

CVE-2019-0885

CVE-2019-0885 is a Windows OLE remote code execution vulnerability caused by improper validation of user input in OLE handling. The connected documents confirm the RCE impact; however, the provided sources do not specify affected products/versions, root-cause details beyond the OLE input validati...

CVE-2020-1518

Technical details about CVE-2020-1518 (affected component, root cause, impact, exploitability or patch specifics) are not publicly provided in the connected documents; monitor for updates from official sources for concrete information.

CVE-2020-16940

The CVE-2020-16940 issue is an elevation of privilege in Windows computing environments caused by the Windows User Profile Service (ProfSvc) mishandling junction points. The vulnerability allows an attacker who can log on to exploit a specially crafted application to delete files or folders with ...

CVE-2021-31968

CVE-2021-31968 is a Windows Remote Desktop Services Denial of Service vulnerability. The vulnerability affects Microsoft Windows systems exposing Remote Desktop Services and can impact availability (per CVSS v3.1: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/A:H). Connected sources confirm it as a remotely trig...

CVE-2022-21897

Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.

CVE-2022-26936

Technical details about CVE-2022-26936 are not provided in the Connected documents; only general security update KB articles are present. Monitor Microsoft advisories (KB5013941/3942/3943, etc.) for vulnerability-specific information and fixes.

CVE-2022-34719

Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.

CVE-2023-23409

CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...

CVE-2024-38196

CVE-2024-38196 is tied to the Windows Common Log File System Driver and is described as an Elevation of Privilege (local) vulnerability. The CVE is listed with a CVSSv3.1 base score of 7.8 (HIGH) and a local attack vector with low attack complexity, requiring low privileges and no user interactio...

CVE-2025-21191

CVE-2025-21191 affects Windows Local Security Authority (LSA) with a time-of-check/time-of-use race condition that enables an authorized local attacker to elevate privileges (obtaining increased entitlements). The vulnerability is categorized under local privilege escalation and is documented in ...

CVE-2025-21260

Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.

CVE-2008-4834

CVE-2008-4834 corresponds to a buffer overflow in the Server service of Microsoft Windows SMB handling. Affected products include Windows 2000 SP4, XP SP2/SP3, and Windows Server 2003 SP1/SP2. The root cause is improper validation of SMB NT Trans request data, allowing remote attackers to craft m...

CVE-2009-1930

The CVE-2009-1930 entry describes a Telnet Credential Reflection vulnerability in Windows Telnet service. A remote attacker could trigger arbitrary code execution by replaying NTLM credentials from a client to the Telnet server. Affected products include Windows 2000 (SP4), XP (SP2/SP3), Server 2...

CVE-2013-5056

The CVE-2013-5056 issue is a use-after-free vulnerability in the Microsoft Scripting Runtime Object Library (scrrun.dll) that allows remote code execution when a user visits a crafted website via Internet Explorer. Affected products span multiple Windows versions (XP SP2/SP3, Server 2003 SP2, Vis...

CVE-2014-1811

CVE-2014-1811 affects the Windows TCP/IP stack in Windows Vista SP2, Windows Server 2008 SP2/R2, Windows 7 SP1, Windows 8/8.1, Windows Server 2012, and Windows RT (and related editions). The vulnerability arises from handling malformed data in the TCP header Options field, leading to remote denia...

CVE-2019-0623

CVE-2019-0623 affects Windows due to a Win32k memory handling issue that enables local privilege escalation. The vulnerability arises when the Win32k component fails to properly handle objects in memory, enabling an attacker with local access to elevate privileges. The provided documents describe...

CVE-2019-0848

CVE-2019-0848 is an information disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The issue is distinct from CVE-2019-0814. Public data indicates local access and potential partial confidentiality impact, with CVSS metrics showing a low to m...

CVE-2019-1039

The CVE-2019-1039 entry describes an information disclosure vulnerability in the Windows kernel where objects are improperly initialized in memory. A locally authenticated attacker could run a crafted application to obtain information that could be used to further compromise the system. Root caus...

CVE-2019-1235

CVE-2019-1235 describes an elevation of privilege in Windows Text Service Framework (TSF) where the TSF server does not validate the source of input or commands it receives. Local, low-attack-surface vector with high impact (C/H/I/A). The vulnerability is tracked with Microsoft advisories and upd...

CVE-2019-1453

CVE-2019-1453 is a denial-of-service vulnerability in the Windows Remote Desktop Protocol (RDP). The Red Hat CVE entry and CNVD/OpenVAS references confirm the issue arises when an attacker connects via RDP and sends specially crafted requests to the target, with impact described as DoS. The NVD e...

CVE-2021-34511

Technical details about CVE-2021-34511 are not publicly available in the provided documents. Monitor for updates from official sources; no concrete exploit, impact, or remediation details are present in the connected content.

CVE-2021-36932

CVE-2021-36932 affects Windows Services for NFS ONCRPC XDR Driver. The available information indicates an information-disclosure vulnerability with network access (CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N; base 7.5). The description confirms the issue but does not provide detailed root-cause...

CVE-2021-36970

Technical details for CVE-2021-36970 are not provided in the supplied documents. No specifics on affected products, root cause, impact, or remediation are present here; monitor for updates from official sources.

CVE-2022-22710

CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...

CVE-2022-30142

CVE-2022-30142 is a Windows File History Remote Code Execution vulnerability reported with CVSS v3.1 base score 7.5 (HIGH) and network attack vector, requiring user interaction. The vulnerability affects Windows File History and involves a high-impact compromise of confidentiality, integrity, and...

CVE-2024-43641

CVE-2024-43641 is a Windows Registry Elevation of Privilege issue. The connected documents reveal a sophisticated exploitation path based on hive memory corruption and out-of-bounds cell indexes, enabling an unprivileged actor to obtain arbitrary kernel read/write access and, ultimately, SYSTEM-l...

CVE-2025-21338

CVE-2025-21338 is a GDI+ Remote Code Execution vulnerability. The CVE affects Windows components that use GDI+ and has a CVSSv3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW privileges required, no user interaction, and impacts to confidentiality, integrity, and availability as describ...