CVE-2022-35834

CVE-2022-35834 : The vulnerability is described as a Remote Code Execution issue affecting the Microsoft WDAC OLE DB provider for SQL Server. The provided documents only state this product/weakness at a high level and do not include technical details such as affected versions, root cause, specifi...

CVE-2023-21699

Technical details for CVE-2023-21699 are not provided in the connected documents. The initial description only notes an iSNS information disclosure vulnerability. Monitor for updates as more details become available.

CVE-2023-29368

CVE-2023-29368 corresponds to a Windows Filtering Platform elevation-of-privilege issue. The CVE entry lists the affected component as Windows Filtering Platform, with a CVSSv3.1 base score of 7.0 (HIGH), indicating local attack vector, high impact to confidentiality, integrity, and availability,...

CVE-2024-38121

CVE-2024-38121 is a Windows RRAS remote code execution vulnerability. Connected documents explicitly list CVE-2024-38121 under Windows Routing and Remote Access Service (RRAS) with an impact described as executing random code, indicating a high-severity issue (CVSS 3.1/8.8; network attack, no pri...

CVE-2024-43452

CVE-2024-43452 is a Windows Registry hive memory corruption vulnerability enabling local privilege escalation. The connected material discloses a deterministic exploit chain that leverages hive memory corruption to obtain arbitrary kernel read/write access and ultimately steal the SYSTEM token. K...

CVE-2024-43467

CVE-2024-43467 corresponds to a Windows Remote Desktop Licensing Service remote code execution vulnerability. The initial sources indicate this CVE is tracked under Windows Remote Desktop Licensing Service with a CVSS v3.1 base score of 7.5 (NETWORK, HIGH impact, requires LOW privileges, no user ...

CVE-2024-43599

CVE-2024-43599 is listed under Windows Remote Desktop Client as a high-severity (CVSS 8.8) Remote Code Execution vulnerability with impact described as Execute random code. Connected sources confirm this CVE affects the Remote Desktop Client and note that Microsoft has released updates to fix vul...

CVE-2025-21226

Technical details about CVE-2025-21226 are not provided in the supplied documents. No concrete affected components or fixes are stated; monitor for updates.

CVE-2025-24063

Technical details such as affected product/version, root cause, specific exploit scenario, and remediation for CVE-2025-24063 are not provided in the connected documents. Monitor for official updates (vendor advisories or CVE disclosures) for concrete technical information and fixes.

CVE-2025-27478

CVE-2025-27478 is a heap-based buffer overflow in Windows Local Security Authority (LSA) that enables a locally authenticated attacker to elevate privileges. The CVE is rated CVSS v3.1 7.0 (HIGH) with Local access, high confidentiality/integrity/availability impact. Connected sources confirm the ...

CVE-2025-27737

CVE-2025-27737 refers to an issue in Windows Security Zone Mapping caused by improper input validation that enables an unauthorized, locally present attacker to bypass a security feature. The vulnerability is categorized with local attack vector and high impact ( Confidentiality, Integrity, Avail...

CVE-2009-1133

CVE-2009-1133 corresponds to a heap-based buffer overflow in Microsoft Remote Desktop Connection (mstsc/ mstscax.dll) affecting RDP clients (RDP 5.0–6.1 on Windows and Mac 2.0). The underlying flaw occurs during parsing of data from the RDP server, allowing a remote attacker to execute arbitrary ...

CVE-2010-0239

The CVE-2010-0239 issue affects Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold, SP2) when IPv6 is enabled. The vulnerability stems from inadequate bounds checking in the TCP/IP/ICMPv6 Router Advertisement processing, allowing remote code execution via specially crafted ICMPv6 Router...

CVE-2017-0087

CVE-2017-0087 is a remote code execution vulnerability in Windows Uniscribe (USP10) affecting Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1. Connected data show exploits targeting USP10!MergeLigRecords, with heap memory corruption in Uniscribe’s font processing triggere...

CVE-2018-0895

Technical details for CVE-2018-0895 are not provided in the connected documents. Public information in this dataset does not specify affected products/versions/impact. Monitor for updates.

CVE-2019-0898

Affected software: Windows Jet Database Engine (in Microsoft Windows and Windows Server). Vulnerability type & cause: Multiple connected CNVD entries describe a buffer overflow in the Jet Database Engine, occurring when memory operations do not properly validate data boundaries, leading to incorr...

CVE-2019-1108

Summary: CVE-2019-1108 is a vulnerability in the Windows Remote Desktop Protocol (RDP) Client that leads to information disclosure through memory contents. The connected exploit document describes an attacker connecting remotely to an affected system and running a specially crafted application to...

CVE-2020-0755

Technical details for CVE-2020-0755 are not publicly provided in the connected documents. Monitor for updates from official advisories, as no concrete technical specifics (affected products, impact, or fixes) are present here.

CVE-2020-0761

CVE-2020-0761 is a remote code execution vulnerability in Active Directory integrated DNS (ADIDNS) where in-memory objects are mishandled. An authenticated attacker could send crafted requests to an ADIDNS server and execute arbitrary code with SYSTEM privileges. The root cause is described as im...

CVE-2020-0822

CVE-2020-0822 is an Elevation of Privilege vulnerability in the Windows Language Pack Installer caused by improper handling of file operations. Evidence from security feeds (e.g., Tenable plugin for KB4541506/KB4541504) confirms the issue is addressed by Microsoft security updates that fix how th...

CVE-2020-1175

CVE-2020-1175 is a remote code execution vulnerability in the Windows Jet Database Engine related to improper handling of objects in memory. The connected KB document (KB4556799) references a May 12, 2020 security update for Windows 10 builds 18362.836 and 18363.836 that includes security fixes a...

CVE-2020-1473

CVE-2020-1473 : A remote code execution vulnerability in the Windows Jet Database Engine arises from improper handling of objects in memory. An attacker could trigger arbitrary code execution by enticing a user to open a specially crafted file. Mitigation is provided by the update that fixes the ...

CVE-2020-1484

CVE-2020-1484 is an elevation-of-privilege vulnerability in the Windows Work Folders Service caused by improper handling of memory. An attacker would need to gain execution on the victim system, then run a crafted application to elevate privileges. The vulnerability is addressed by a security upd...

CVE-2020-1538

Technical details about CVE-2020-1538 are not publicly provided in the connected documents; no explicit affected products, root cause, impact, or remediation specifics are documented here. Monitor for updates in the sources above.

CVE-2020-1552

CVE-2020-1552 (Windows Work Folder Service Elevation of Privilege) Affects Windows Work Folders Service. The vulnerability arises because the service improperly handles file operations, allowing an attacker to run code with elevated privileges by executing a specially crafted application on the v...

CVE-2020-16972

CVE-2020-16972 describes an elevation of privilege in the Windows Backup Service caused by improper handling of file operations. An attacker who already has execution on the victim system could run a crafted application to elevate privileges. The fixed behavior is implemented via a security updat...

CVE-2020-17047

CVE-2020-17047: Windows Network File System (NFS) Denial of Service. The issue arises from improper handling of crafted RPC packets, allowing a remote attacker to disrupt a Windows/Windows Server target by sending malicious RPC calls. Root cause: RPC handling defect in the Windows NFS component. ...

CVE-2021-1665

Technical details for CVE-2021-1665 are not provided in the connected documents. The provided sources reference multiple CVEs and general vulnerability contexts but do not disclose affected products, root cause, impact, or remediation for this specific CVE. Monitor for updates.

CVE-2021-1701

Technical details for CVE-2021-1701 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no specifics on affected products, root cause, exploit, or fixes are included here.

CVE-2021-28331

CVE-2021-28331 is described in connected CNVD as a Remote Procedure Call Runtime Remote Code Execution vulnerability affecting Microsoft Windows/Windows Server, enabling remote code execution via RPC Runtime. The provided documents do not specify affected product versions, root cause specifics, e...

CVE-2022-26792

Technical details for CVE-2022-26792 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as more information becomes available.

CVE-2022-26807

Technical details for CVE-2022-26807 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-35830

CVE-2022-35830 is a Remote Procedure Call Runtime Remote Code Execution vulnerability with a CVSS v3.1 base score of 8.1 (HIGH). According to the NVD entry, it has Network attack vector, high impact on confidentiality, integrity, and availability, and requires no privileges and no user interactio...

CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

CVE-2022-41097

Technical details about CVE-2022-41097 (NPS RADIUS information disclosure) are not provided in the supplied documents. Monitor for updates from official sources for affected products, versions, and fixes.

CVE-2022-44675

Technical details about CVE-2022-44675 are not provided in the connected documents. The supplied materials confirm the vulnerability title but do not list affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2023-21700

Technical details for CVE-2023-21700 are not publicly available in the provided documents. No concrete affected products, root cause, or remediation are confirmed here. Monitor official sources for updates and published fixes.

CVE-2023-32044

Technical details for CVE-2023-32044 are not provided in the connected documents; only the vulnerability name is cited. Monitor for updates.

CVE-2023-35639

CVE-2023-35639 — Microsoft ODBC Driver Remote Code Execution is documented in the CVE entry and corroborated by multiple sources in the connected set as a Windows component vulnerability. In NVD, the CVSSv3.1 base score is 8.8 (HIGH) with a network attack vector, requiring user interaction, and r...

CVE-2023-36907

Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.

CVE-2024-43627

CVE-2024-43627 affects the Windows Telephony Service and enables Remote Code Execution. Affected component: Windows Telephony Service (Windows OS). Attack vector: network; prerequisites: none; user interaction required (UI: R). Impact per CVSS 3.1: Confidentiality, Integrity, and Availability are...

CVE-2024-43637

CVE-2024-43637 is a Windows USB Video Class System Driver elevation-of-privilege vulnerability. The connected documents confirm a Windows USB Video Driver entry and indicate that Microsoft patched this family of flaws in November 2024 updates (e.g., KB5046616/OS Build 20348.2849 and related KBs)....

CVE-2025-21276

CVE-2025-21276 is a Windows MapUrlToZone Denial of Service vulnerability. The CVE entry lists a NETWORK‑level attack with low complexity and no privileges required, resulting in a HIGH impact on availability (CVSS 3.1 base 7.5). Multiple connected sources corroborate a DoS condition in the MapUrl...

CVE-2025-21285

Technical details (affected products, root cause, impact or fixes for CVE-2025-21285 MSMQ DoS) are not included in the provided documents. Monitor updates from Microsoft and CVE/CIRCL references for remedies and exposure.

CVE-2025-21324

Technical details about CVE-2025-21324 are not publicly provided in the supplied connected documents. Public advisories mention Windows updates addressing kernel-related issues but do not provide CVE-specific exploit vectors, impacted products, or fixes in these sources. Monitor for updates.

CVE-2025-24059

CVE-2025-24059 affects Windows Common Log File System Driver. Root cause: incorrect numeric type conversion leading to local privilege escalation. Impact per sources: high (privilege escalation, high confidentiality/integrity/availability impact) with local exploitation and no user interaction re...

CVE-2009-3676

The CVE-2009-3676 entry concerns a Denial of Service in the kernel SMB client of Windows 7 and Windows Server 2008 R2 caused by incomplete SMB responses (SMBv1 and SMBv2). A remote attacker or a man‑in‑the‑middle could trigger an infinite loop by sending a crafted SMB response, potentially freezi...

CVE-2010-5082

CVE-2010-5082 affects the Windows Color Control Panel (colorcpl.exe) on Windows Server 2008 SP2, R2, and R2 SP1. The vulnerability stems from insecure library loading where sti.dll can be loaded from the current working directory, enabling privilege escalation when a malicious directory also cont...

CVE-2018-0972

CVE-2018-0972 is a Windows kernel information-disclosure vulnerability that could enable an ASLR bypass. The entry covers multiple Windows versions (desktop, server, and RT). Public details in the initial record include CVSS metrics from NVD (2.1/5.5, LOW to MEDIUM overall, LOCAL access with low ...

CVE-2018-8127

CVE-2018-8127 is a Windows kernel information-disclosure vulnerability affecting multiple Windows versions (e.g., Windows 7, 8.1, 10, and server editions). Root cause: the kernel improperly handles objects in memory, enabling information leakage. The connected records do not provide concrete expl...