CVE-2009-1926

CVE-2009-1926 describes a TCP/IP processing vulnerability in Microsoft Windows that can cause a denial of service by flooding a host with specially crafted TCP packets featuring a small or zero receive window. The issue occurs when connections remain in FIN-WAIT-1 or FIN-WAIT-2 and the sender doe...

CVE-2011-1249

CVE-2011-1249 concerns the Ancillary Function Driver (afd.sys) in Windows, where local input validation flaws allow privilege escalation. Affected OSes include Windows XP SP2/SP3, Server 2003 SP2, Windows Vista SP1/SP2, Server 2008 (Gold/SP2/R2), and Windows 7 (Gold/SP1). The vulnerability stems ...

CVE-2013-3183

Microsoft Windows ICMPv6 Packet Denial of Service (CVE-2013-3183) affects multiple Windows platforms (Vista SP2, 2008 SP2/R2 SP1, 7 SP1, 8, 2012, RT) where the TCP/IP stack improperly allocates memory for inbound ICMPv6 packets, causing remote denial of service (system hang) via crafted packets. ...

CVE-2017-11780

CVE-2017-11780 is a remote code execution vulnerability in the Microsoft Windows Server Message Block 1.0 (SMBv1) server. The issue occurs when SMBv1 fails to handle certain requests, allowing an unauthenticated attacker to execute code on the target server over the network. Affected products inc...

CVE-2019-0845

Technical details for CVE-2019-0845 are not publicly available in the provided documents. Monitor for updates to determine affected products, impact, and fixes.

CVE-2019-0902

The connected documents describe a vulnerability in the Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow arising when memory-boundary checks are not properly performed during operations in memory. The root cause is that data boundaries are not validated, leading to an out-of...

CVE-2019-0906

CVE-2019-0906: Jet Database Engine remote code execution in Windows. In memory handling flaw could allow arbitrary code execution when a victim opens a specially crafted file. Update from Microsoft fixes the memory handling of objects in the Jet engine to address the vulnerability; exploit detail...

CVE-2019-0948

CVE-2019-0948 is an information-disclosure vulnerability in Windows Event Viewer (eventvwr.msc) where XML input containing an external entity reference is improperly parsed. An authenticated user can be persuaded to import a crafted XML file, allowing an attacker to read arbitrary files via an XM...

CVE-2021-33746

CVE-2021-33746 is a Windows DNS Server Remote Code Execution vulnerability described in the provided documents as a network-exploitable issue with high impact. The sources indicate an affected component (Windows DNS Server) and classify the vulnerability as CVE-2021-33746, but they do not give co...

CVE-2021-33752

CVE-2021-33752 is described as a Windows DNS Snap-in Remote Code Execution vulnerability. Connected sources corroborate a DNS Snap-in RCE in Microsoft Windows/Windows Server, indicating an elevated risk with a network attacker, high impact (CVE-3.1: HIGH) and no authentication required, with user...

CVE-2022-21850

CVE-2022-21850 is described in the provided materials as a Remote Desktop Client Remote Code Execution vulnerability. The connected documents confirm the vulnerability relates to the Windows Remote Desktop Client but do not provide concrete technical specifics (e.g., root cause, affected versions...

CVE-2022-30164

Technical details for CVE-2022-30164 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Public info appears limited to general references; monitor official advisories for updates.

CVE-2022-41074

Technical details for CVE-2022-41074 are not publicly provided in the supplied documents. Monitor updates from Microsoft/NVD for affected component, impact, and remediation.

CVE-2022-44666

CVE-2022-44666 is a Windows Contacts RCE affecting the Windows Contacts components (VCF/Contact handling) where an href/link attribute processing flow could reach SafeExecute and execute arbitrary code. Affected context centers on wab32.dll/wab.exe usage within Windows Contacts; PoCs and public w...

CVE-2023-21773

Technical details for CVE-2023-21773 are not provided in the supplied documents. Monitor for official advisories for updates and remediation.

CVE-2024-38104

Technical details for CVE-2024-38104 are not provided in the supplied connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for official updates to disclose specifics.

CVE-2018-8562

CVE-2018-8562 is a Windows local elevation-of-privilege flaw in the Win32k subsystem caused by improper handling of objects in memory. It affects multiple Windows versions (Windows 7/Server editions/Windows 10 families) and could allow a local attacker to execute code in kernel mode. Remediation ...

CVE-2019-0628

Technical details for CVE-2019-0628 are not provided in the connected documents. Public details appear limited to generic references; monitor official advisories for updates.

CVE-2019-0636

CVE-2019-0636 is described as an information disclosure vulnerability where Windows improperly discloses file information. The provided documents do not supply concrete technical details (affected products/versions, root cause, exploit info, or remediation). No further technical specifics are ava...

CVE-2019-0784

Technical details for CVE-2019-0784 are not publicly available in the provided documents; no confirmed affected products, versions, or fixes are listed. Monitor for updates from official sources as additional information may be published.

CVE-2019-0844

Technical details about CVE-2019-0844 are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain affected products, impact, and remediation.

CVE-2019-1145

CVE-2019-1145 affects the Windows font library, where improper handling of specially crafted embedded fonts allows remote code execution. The vulnerability’s impact: attacker gains control of the affected system, potentially installing programs, and altering data or accounts; higher risk on syste...

CVE-2019-1256

CVE-2019-1256 is a Windows Win32k Elevation of Privilege vulnerability caused by the Win32k component failing to properly handle objects in memory, enabling local privilege escalation. The CVE is distinct from CVE-2019-1285, and is corroborated by multiple records (NVD/CVE list, CNVD, EUVD mentio...

CVE-2021-34504

Technical details about CVE-2021-34504 are not provided in the connected documents; the Initial Description lists a Windows Address Book RCE vulnerability but lacks affected product/version specifics. Monitor for updates.

CVE-2023-21532

Technical details about CVE-2023-21532 (product, root cause, impact, fixed version) are not publicly provided in the connected documents you supplied. Monitor for updates and additional vulnerability specifics.

CVE-2023-35377

Technical details for CVE-2023-35377 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-35380

Technical details for CVE-2023-35380 are not publicly available in the provided documents. The initial sources list the vulnerability title but do not specify affected products, versions, root cause, or remediation. Monitor for updates.

CVE-2023-35630

CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...

CVE-2010-0020

CVE-2010-0020 concerns a flaw in the SMB server implementation of Windows: the Server service fails to validate request fields, enabling a remote authenticated user to execute arbitrary code via a malformed SMB request. Affected platforms include Windows 2000 SP4, XP SP2/SP3, Server 2003 SP2, Vis...

CVE-2012-4774

CVE-2012-4774 is a Windows File Handling Component vulnerability. A crafted file or subfolder name can trigger use of unallocated memory as the destination of a copy operation, enabling remote code execution on affected Windows XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windo...

CVE-2018-0811

Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.

CVE-2018-0897

CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...

CVE-2018-8349

CVE-2018-8349 is a remote code execution vulnerability in Microsoft COM for Windows caused by improper handling of serialized objects. The vulnerability affects multiple Windows platforms including Windows 7, Windows 8.1, Windows 10 (and server editions such as Server 2008/2012/2016 and R2 varian...

CVE-2019-0614

The connected advisories confirm an information disclosure vulnerability in Microsoft Windows GDI. The Graphics Device Interface component is affected by improper handling of in-memory objects, exposing memory contents. CPAI-2019-1525 notes remote attackers could exploit this to access sensitive ...

CVE-2019-0765

CVE-2019-0765: remote code execution in comctl32.dll due to how the library handles objects in memory, termed the Comctl32 Remote Code Execution Vulnerability. Affected software is Windows’ comctl32.dll component; exact versions and vulnerable configurations are not specified in the provided docu...

CVE-2019-1082

Technical details such as affected products, root cause, and remediation for CVE-2019-1082 are not provided in the supplied documents; connected EUVD entries discuss malware but do not add specifics for this CVE. Monitor for updates.

CVE-2019-1144

CVE-2019-1144 is a remote code execution vulnerability in the Windows font library (fontsub.dll) triggered by specially crafted embedded fonts. The impact, per NVD/NVD-derived sources, is full system compromise: attacker can install programs, view/modify/delete data, and create accounts with full...

CVE-2019-1150

CVE-2019-1150 affects the Windows font library’s handling of embedded fonts, leading to remote code execution. The vulnerability arises from how font data is processed, enabling an attacker to run arbitrary code on the targeted system. Documented impact includes potential full system compromise, ...

CVE-2020-0639

CVE-2020-0639 is a Windows Common Log File System (CLFS) Driver Information Disclosure vulnerability. Connected CNVD entries describe a flaw where memory objects are mishandled, allowing an authenticated attacker who logs on and runs a crafted application to read data from memory. The CVSSv3 base...

CVE-2020-1519

CVE-2020-1519 is a Windows elevation-of-privilege vulnerability in the Windows UPnP Device Host that arises from improper handling of memory. An attacker must first gain execution on the target, then run a crafted application to elevate privileges. Microsoft’s security update fixes how the UPnP D...

CVE-2020-1558

The connected document confirms CVE-2020-1558 targets the Windows Jet Database Engine, with a remote code execution vulnerability that arises from improper handling of objects in memory. An attacker can trigger code execution by persuading a user to open a specially crafted file. The issue is mit...

CVE-2020-16939

CVE-2020-16939 is a Microsoft Windows elevation-of-privilege vuln in Group Policy where access is not correctly checked. An attacker must log on and run a crafted application to execute code in an elevated context. NVD/metrics: CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW, User Intera...

CVE-2020-17001

CVE-2020-17001 is a Windows Print Spooler Elevation of Privilege vulnerability. Affected software is Windows Print Spooler. The CVSS context from NVD (base CVSSv3.1 score 7.8, HIGH) indicates local, low complexity, no user interaction required, with HIGH impacts on confidentiality, integrity, and...

CVE-2021-1674

Technical details (affected product, root cause, impact, or remediation) are not provided in the connected documents. The CVE entry’s specifics are not disclosed here; monitor for updates.

CVE-2021-36960

CVE-2021-36960 is a Windows SMB information-disclosure vulnerability with a CVSS v3.1 base score of 7.5 (HIGH). It is exploitable over a network, requires no privileges and no user interaction, and impacts confidentiality only (I: HIGH; C: HIGH; A: NONE). The initial description labels it as a Wi...

CVE-2022-35756

Technical details about CVE-2022-35756 (affected products, root cause, impact, fix) are not provided in the connected documents. Monitor for official disclosures and updates from Microsoft and CVE listings.

CVE-2023-28266

Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-28298

Technical details for CVE-2023-28298 are not provided in the connected documents. OpenVAS entries reference the CVE across KB updates but do not describe affected components, root cause, impact, or remediation. Monitor for updates.

CVE-2016-0145

CVE-2016-0145 is a Graphics Memory Corruption vulnerability in the Windows font library. A remote attacker can execute arbitrary code by delivering a crafted embedded font, affecting Windows flavors listed in the vulnerability entry (e.g., Windows Vista through Windows 10 versions, Windows Server...

CVE-2017-8565

CVE-2017-8565 is a Windows PowerShell remote code execution vulnerability triggered when PSObject wraps a CIM Instance. Connected sources describe in detail that deserialization via PSObject, LosFormatter, ObjectStateFormatter (and related gadget chains) can enable remote code execution in PowerS...