CVE-2019-0900

Summary: The connected CNVD entries describe a set of buffer overflow vulnerabilities in Microsoft Windows Jet Database Engine. They state that the Jet Database Engine can experience in-memory boundary violations leading to incorrect reads/writes and potential heap/buffer overflows when processin...

CVE-2019-1102

CVE-2019-1102 affects the Windows Graphics Device Interface (GDI+) and arises from how GDI+ handles memory objects, enabling remote code execution. The Red Hat advisory reiterates the same description. The CVE is rated high risk (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) with network attack vector and...

CVE-2021-28337

Technical details for CVE-2021-28337 are not publicly available in the provided documents. Monitor for updates from vendor advisories and vulnerability databases.

CVE-2021-31973

CVE-2021-31973 is a Windows GPSVC Elevation of Privilege vulnerability. Affected component: GPSVC. Root cause not explicitly stated in the provided documents. CVSS v3.1 base score 7.8 (HIGH): Local attack, low privileges required, no user interaction, with high impact to confidentiality, integrit...

CVE-2022-21905

CVE-2022-21905 technical details are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updated disclosures.

CVE-2022-21985

CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...

CVE-2022-34720

CVE-2022-34720 is a Windows IKE Extension Denial of Service vulnerability. The provided data notes a network-based attack vector with low complexity, no privileges required, and a HIGH availability impact (CVSS v3.1 base score 7.5). No exploit details or remediation/patch information is provided ...

CVE-2022-34724

Technical details about CVE-2022-34724 are not publicly provided in the connected documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates from official advisories and vendors.

CVE-2023-24908

Technical details for CVE-2023-24908 are not publicly available in the provided documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

CVE-2023-32017

CVE-2023-32017 concerns the Microsoft PostScript Printer Driver and allows Remote Code Execution tied to a driver component. The IOCs/impact in the provided materials indicate a LOCAL attack vector with no user interaction, and confidentiality, integrity, and availability impacts rated HIGH. No e...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2024-43455

CVE-2024-43455 is a Windows Remote Desktop Licensing Service spoofing vulnerability affecting the Windows Remote Desktop Licensing Service. The connected sources indicate the vulnerability allows pretending to be another user, with high impact in authentication-related scenarios. The Windows ecos...

CVE-2025-29810

CVE-2025-29810 corresponds to an improper access control in Active Directory Domain Services that can allow an authenticated attacker to elevate privileges over the network. The NCSC advisory groups CVE-2025-29810 under Windows Active Directory Domain Services with an impact described as ‘Obtain ...

CVE-2016-0026

Technical details about CVE-2016-0026 are not publicly provided in the supplied documents; no specific affected products or fixes are described. Monitor for updates.

CVE-2018-0842

CVE-2018-0842 : Windows kernel elevation-of-privilege vulnerability affecting multiple Windows client and server editions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, 1703–1709 and 1709 variants, Windows 10 releases). The issue arises from how memory objects ...

CVE-2018-8398

The connected CPAI-2019-0228 advisory describes a related information-disclosure vulnerability in the Microsoft Graphics Component due to improper in-memory handling of JPEG decoding. While CVE-2018-8398 (Windows GDI Information Disclosure) is the primary CVE here, the document confirms a memory-...

CVE-2018-8442

Technical details about CVE-2018-8442 are not publicly available in the provided connected documents; monitor for updates from official advisories.

CVE-2018-8446

CVE-2018-8446 is an information disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 (and Windows Server 2016/Servers). The issue is described as a lo...

CVE-2019-0597

Technical details about CVE-2019-0597 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-0713

Technical details about CVE-2019-0713 are not publicly provided in the connected documents. The initial description summarizes a Hyper-V denial-of-service vulnerability. Monitor for updates from official sources.

CVE-2019-0714

CVE-2019-0714 affects Microsoft Hyper-V Network Switch. A privileged guest OS user can trigger a denial-of-service that crashes the host by running a crafted application; the vulnerability arises from improper validation of input by the Hyper-V Network Switch. The fix involves changes to how virt...

CVE-2019-0722

The CVE-2019-0722 issue affects Microsoft Windows Hyper-V. A remote code execution vulnerability exists when Hyper-V on a host fails to properly validate input from an authenticated guest OS user, allowing a crafted guest app to cause the host to run arbitrary code. Exploitation could grant the a...

CVE-2019-0839

Technical details about CVE-2019-0839 are not publicly provided in the connected documents. Monitor for updates and new public disclosures before drawing conclusions on affected components, root cause, or remediation.

CVE-2019-0853

Technical details about CVE-2019-0853 are not publicly available in the provided documents. No affected products, versions, root cause, or remediation are specified here. Monitor for updates and corroborating risk information from official advisories.

CVE-2020-0626

Technical details for CVE-2020-0626 are not provided in the connected documents. The Initial Description offers only high-level info. Monitor official advisories for updates on affected products/versions and any remediations or mitigations.

CVE-2020-1285

Technical details about CVE-2020-1285 are not provided in the connected documents. The sources reference other CVEs and Windows updates; monitor for updates on CVE-2020-1285.

CVE-2020-1383

CVE-2020-1383 is an information disclosure vulnerability in Windows RRAS: when Routing and Remote Access is enabled, an attacker can exploit a flaw in RPC handling to obtain information that could aid compromise. Exploitation requires a crafted application against an RPC server with RRAS enabled ...

CVE-2020-1477

CVE-2020-1477 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage, potentially allowing the attacker to install prog...

CVE-2020-1516

The CVE-2020-1516 entry describes an Elevation of Privilege in the Windows Work Folders Service caused by improper handling of memory. Exploitation would require the attacker to first gain execution on the target, then run a crafted application to raise privileges. Microsoft’s security update fix...

CVE-2020-1564

CVE-2020-1564 : A remote code execution vulnerability exists in the Windows Jet Database Engine due to improper handling of objects in memory. An attacker could persuade a user to open a specially crafted file to execute arbitrary code. Impact is described as high/severe (per NVD metrics), with a...

CVE-2020-16935

The CVE-2020-16935 entry describes a Windows elevation-of-privilege flaw caused by improper handling of COM object creation. The vulnerability could allow an attacker who has logged on to run arbitrary code with elevated privileges by executing a specially crafted application, with exploitation e...

CVE-2021-1657

Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28345

Technical details about CVE-2021-28345 are not provided in the supplied documents. The entries reference multiple Windows vulnerabilities but do not specify affected components, impact, or fixes for this CVE. Monitor for updates.

CVE-2021-28434

Technical details for CVE-2021-28434 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates from the connected sources.

CVE-2021-34496

Technical details about CVE-2021-34496 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability, but no affected product/version specifics, exploit info, or remediation are included here. Monitor for updates.

CVE-2022-23299

Technical details about CVE-2022-23299 (affected product, root cause, impact, fix) are not publicly available in the provided documents. Monitor for updates as new information may be released.

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

CVE-2024-38152

CVE-2024-38152 is listed under Windows WDAC OLE DB provider for SQL with a CVSS and impact of 7.80 (Execute Random Code). The connected documents confirm the affected component and the vulnerability’s label, but do not provide concrete details on root cause, affected versions, exploit scenarios, ...

CVE-2024-49080

CVE-2024-49080 affects Windows IP Routing Management Snapin and is a remote code execution vulnerability. According to the Initial document, it has CVSS 3.1 base metrics: Network attack vector, low attack complexity, low privileges required, no user interaction, with impacts on confidentiality, i...

CVE-2024-49102

CVE-2024-49102 — Windows RRAS Remote Code Execution is a network‑based vulnerability in the Routing and Remote Access Service (RRAS) of Windows. The CVSS score cited in the initial entry is 8.8/10 (High) with AV:N, AC:L, PR:N, UI:R, S:U, C/H/I/A: High, indicating unauthenticated network access re...

CVE-2018-0830

CVE-2018-0830 is a Windows kernel local information-disclosure vulnerability caused by how objects in memory are handled. Affected products include Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2/R2 SP1; Windows Server 2012/R2; Windows 10 releases Gold, 1511, 1607, 1703, 1709; Wind...

CVE-2018-0868

CVE-2018-0868 concerns a Windows Installer elevation-of-privilege vulnerability in the Windows Installer service across affected Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions up to 1709, and related Server var...

CVE-2018-8423

CVE-2018-8423 : A remote code execution vulnerability exists in the Microsoft JET Database Engine. The issue affects Windows client/server family (Windows 7, 8.1, 10; Windows Server 2008/2012/2016/2019 and R2 variants). The root cause is within the JET Database Engine component; exploitation requ...

CVE-2018-8494

CVE-2018-8494 is a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser when processing untrusted input. Affected products include Windows 7; Windows Server 2008, 2012, 2012 R2, 2016, 2019; Windows 8.1; Windows 10 (and Windows RT 8.1); Windows Server 2008 R2; Window...

CVE-2019-0794

CVE-2019-0794 is described in connected sources as a Windows VBScript Engine remote command execution vulnerability. The Myhack58 article notes exploitation via hosting a crafted website to trigger through a browser, and also via IE rendering engine or Microsoft Office documents to trigger initia...

CVE-2020-16920

CVE-2020-16920 affects Windows via an elevation-of-privilege in the Windows Application Compatibility Client Library, tied to improper handling of registry operations. The vulnerability requires code execution on a victim system before exploitation, enabling a crafted application to gain elevated...

CVE-2021-34498

Technical details about CVE-2021-34498 are not publicly provided in the connected documents. The available sources (NVD/NCSC/CNVD, etc.) mention the vulnerability at a high level without specifics on affected products, versions, impact, or fixes. Monitor for updates.