CVE-2023-36583

CVE-2023-36583 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.3 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, user interaction needed, and a scope of UNCHANGED. The impact is HIGH on con...

CVE-2023-36598

CVE-2023-36598 concerns the Microsoft WDAC ODBC Driver with a remote code execution vulnerability. Affected component: WDAC ODBC Driver (Microsoft). Exploitation requires local access and user interaction, with a CVSS v3.1 base score of 7.8 (High); impact to confidentiality, integrity, and availa...

CVE-2017-0055

CVE-2017-0055 refers to a cross-site scripting (XSS) elevation-of-privilege vulnerability in Microsoft Internet Information Services (IIS). The issue affects IIS on multiple Windows platforms (Vista through Windows Server 2016) and allows a remote attacker to craft a request that can execute scri...

CVE-2022-24503

CVE-2022-24503 is a Remote Desktop Protocol Client Information Disclosure vulnerability. Connected sources indicate it affects Windows Remote Desktop Client and can be triggered over the network with no authentication and no user interaction, exposing partial confidentiality (C:L). The issue is t...

CVE-2025-21337

CVE-2025-21337 is a Windows vulnerability categorized as an elevation of privileges (impact: obtaining elevated privileges) with a low base score (CVSS v3.1: 3.3) and local attack vector. The connected advisory from NCSC-2025-0047 aligns this CVE to a Windows component issue with a CVSS ~3.3 and ...

CVE-2022-30133

Technical details about CVE-2022-30133 (affected product, exploit, impact, fix) are not provided in the supplied documents. Monitor for official updates from Microsoft for patch information and vulnerable components.

CVE-2021-42291

Technical details (affected product, root cause, impact, or fix) are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2025-24993

CVE-2025-24993 is a Windows NTFS heap-based buffer overflow that allows a locally authenticated attacker to execute arbitrary code. Affected component is NTFS on Windows; root cause is a heap-based overflow in NTFS handling. CVSS v3.1 indicates local attack vector, no privileges required, user in...

CVE-2022-21972

CVE-2022-21972 is a Windows PPTP VPN component remote code execution vulnerability caused by use-after-free handling of PPTP packets. The connected advisory states a remote code execution vulnerability exists in Windows VPN due to improper PPTP packet handling, i.e., PPTP protocol use after free....

CVE-2022-34721

CVE-2022-34721 is a Windows Internet Key Exchange (IKE) Protocol Extensions remote code execution vulnerability. The issue affects Windows systems with IPSec enabled and is exploitable via specially crafted IP packets targeting IKEv1 (IKEv2 is not affected). The flaw could allow an unauthenticate...

CVE-2025-24985

CVE-2025-24985 affects the Windows Fast FAT File System Driver and is caused by an integer overflow/wraparound, enabling local code execution. The vulnerability has seen exploitation in the wild (per Krebs/Microsoft Patch Tuesday coverage), and mitigation is to install the MSRC-released updates l...

CVE-2018-8639

CVE-2018-8639 describes a local privilege escalation in Windows via Win32k, caused by improper handling of memory objects in the Win32k component. Affected systems include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions listed in the CVE entry). The root cause is an ...

CVE-2021-34514

CVE-2021-34514 is identified as a Windows Kernel elevation-of-privilege vulnerability. The available connected documents confirm a Windows Kernel issue with elevation of privilege but do not provide concrete technical details (root cause, affected component/version, exploit specifics, or a remedi...

CVE-2023-21708

Technical details for CVE-2023-21708 are not publicly provided in the supplied documents. No confirmed affected products, versions, or remediation are given here. Monitor for updates.

CVE-2023-29325

CVE-2023-29325 is a Windows OLE Remote Code Execution vulnerability that affects Microsoft Outlook and Explorer. The root cause is in the processing of OLE objects within RTF/documents, enabling an unauthenticated, remote attacker to execute code by delivering a specially crafted document, with t...

CVE-2020-1269

Technical details for CVE-2020-1269 are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2024-38217

CVE-2024-38217 is a security feature bypass in Microsoft Windows Mark of the Web (MOTW). The vulnerability allows bypassing MOTW protections when opening booby-trapped Office files, as discussed in multiple sources. Exploitation details are not fully disclosed in the provided documents, but the C...

CVE-2021-38633

CVE-2021-38633 affects Windows CLFS driver (Common Log File System). Connected sources provide concrete technical detail: the vulnerability is a local privilege escalation in clfs.sys, related to CLFS container/file creation paths and privilege checks (e.g., CClfsBaseFilePersisted::CreateContaine...

CVE-2022-30170

Technical details about CVE-2022-30170 are not provided in the supplied documents. The connected sources reference related Credential Roaming issues and general Windows security updates, but no specific vulnerability details, affected products, or fixes are disclosed here. Monitor for updates.

CVE-2019-1006

CVE-2019-1006 corresponds to an authentication bypass vulnerability in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF) that allows signing SAML tokens with arbitrary symmetric keys. The connected Nessus entries reiterate this issue as part of Microsoft SharePoint serv...

CVE-2023-24943

CVE-2023-24943 corresponds to a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. Connected sources specify that the issue affects Windows Message Queuing when running in a PGM Server environment; a remote attacker can transmit a specially crafted file over the networ...

CVE-2023-36705

Technical details about CVE-2023-36705 (affected product/component/root cause/impact) are not provided in the connected documents. The supplied materials reference Windows updates and security advisories but do not disclose CVE-specific technical data. Monitor for updates.

CVE-2018-8641

CVE-2018-8641 is a Windows Win32k kernel-mode privilege-escalation vulnerability. The Win32k component fails to properly handle objects in memory, enabling local privilege escalation. Affected products include multiple Windows versions (Windows 7, Windows 8.1, Windows 10 and corresponding Server ...

CVE-2019-1182

CVE-2019-1182 is a remote code execution vulnerability in Microsoft Windows Remote Desktop Services (RDS) caused by a heap overflow in the server’s dynamic channel handling when processing RDP requests. The flaw is pre-authentication and exploitable by an unauthenticated attacker who connects to ...

CVE-2020-1036

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-26424

The CVE-2021-26424 issue is a Windows TCP/IP remote code execution vulnerability. According to the NCSC advisory, it can be remotely triggered by a malicious IPv6 ping from a Hyper‑V guest to the Hyper‑V host, with exploitation achieved by sending a specially crafted TCP/IP packet to the host usi...

CVE-2025-21181

Technical details (affected products/versions, root cause, exploitability, fixes) for CVE-2025-21181 are not provided in the supplied documents. Please monitor official advisories for concrete technical information.

CVE-2023-21746

CVE-2023-21746 is a Privilege Escalation vulnerability in the Windows NTLM network authentication protocol. It stems from a defect in NTLM local authentication where a privileged process can be tricked into authenticating a session initiated by a low-privileged attacker against a local SMB server...

CVE-2011-2016

CVE-2011-2016 describes an untrusted search path vulnerability in Windows Mail and Windows Meeting Space, affecting Windows Vista SP2, Windows Server 2008 SP2, R2 and R2 SP1, and Windows 7 (Gold and SP1). The root cause is loading a Trojan horse DLL from the current working directory when opening...

CVE-2023-21729

Technical details about CVE-2023-21729 are not provided in the connected documents; available sources only reference the CVE without specifics. Monitor for updates.

CVE-2021-1678

CVE-2021-1678 affects the Windows Print Spooler service and is described in Connected documents as an arbitrary code execution vulnerability. The available connected document provides a PoC exploit (Exploit for CVE-2021-1678) hosted on Gitee, contained in a Docker container with a Python script s...

CVE-2025-32709

CVE-2025-32709 is a local privilege-escalation due to a use-after-free in the Windows Ancillary Function Driver for WinSock (AFD) . Affected component: AFD in Windows networking stack. Root cause: use-after-free leading to arbitrary/privilege escalation. Impact: local elevation to administrator a...

CVE-2022-22049

CVE-2022-22049 is a Windows CSRSS (Client Server Run-time Subsystem) Elevation of Privilege vulnerability. The entry lists a CVSS v2 base score of 7.2 (HIGH) and CVSS v3.1 base score of 7.8 (HIGH), with LOCAL attack vector, LOW attack complexity, and privileges required as LOW; no user interactio...

CVE-2025-24991

CVE-2025-24991 is an NTFS out-of-bounds read vulnerability in Windows that can disclose local information after mounting a malicious VHD. Exploitation requires local access and user interaction (per CVSS) or mounting a crafted disk image (per patch-cycle reporting). Microsoft has issued updates; ...

CVE-2020-0611

CVE-2020-0611 is a remote code execution vulnerability in the Windows Remote Desktop Client. Connected documents confirm the flaw affects the RDP client when a user connects to a malicious server, enabling arbitrary code execution on the client. The Microsoft blogs and advisories describe pre-aut...

CVE-2020-1013

An elevation of privilege vulnerability exists in Microsoft Windows during the processing of group policy updates due to access control deficiencies. An attacker can exploit this by launching a man-in-the-middle (MiTM) attack on traffic between a domain controller and the target machine to create...

CVE-2022-24500

A critical Remote Code Execution (RCE) vulnerability exists in the Windows SMB protocol implementation. An unauthenticated remote attacker can exploit this by redirecting users to a malicious server or by hosting a specially crafted server share/website. Impact includes arbitrary code execution, ...

CVE-2024-20674

CVE-2024-20674 is a Windows Kerberos security feature bypass vulnerability. The connected exploit doc describes a logic bug in the client-side handling of Kerberos U2U TGT-REP that can enable authentication bypass via a network MITM and spoofing, potentially allowing an attacker to impersonate th...

CVE-2018-8164

CVE-2018-8164 is a Win32k privilege-escalation vulnerability in Windows where the Win32k component fails to properly handle objects in memory. Affected are multiple Windows releases (server and client SKUs listed in the CVE entry). The connected documents corroborate a kernel-mode elevation of pr...

CVE-2025-30397

CVE-2025-30397 is a memory-corruption/Use-After-Free style vulnerability in the Microsoft Scripting Engine (jscript.dll) that enables remote code execution via specially crafted web content. The CVE’s affected component is the JScript/Windows Scripting Engine, with an attack vector over the netwo...

CVE-2020-1599

CVE-2020-1599 is referenced in connected material (notably Microsoft ZLoader defense-evasion coverage) as a vulnerability used to aid attacker techniques (e.g., signing/validating files to mask malice). The documents do not provide concrete technical details on the root cause, affected products/v...

CVE-2023-36876

CVE-2023-36876 refers to a local-elevation-of-privilege vulnerability in Microsoft’s Reliability Analysis Metrics Calculation Engine (RACEng) / RacTask. The initial entry lists affected product scope as Microsoft Windows Server 2008 R2 SP1 (and related Server/Core variants) among other Windows Se...

CVE-2021-43226

CVE-2021-43226 pertains to the Windows Common Log File System (CLFS) Driver. The available documents identify a local privilege-escalation vulnerability in CLFS that could allow a privileged attacker on a Windows host to gain higher privileges. The CVE is listed in the KEV catalog as a Microsoft ...

CVE-2023-29324

The Windows MSHTML platform is affected by a security configuration error that allows a malicious actor to bypass security restrictions remotely. No specific technical details regarding the root cause, affected file paths, or specific versions are provided beyond the general platform description....

CVE-2020-1048

CVE-2020-1048 is a Windows Print Spooler elevation of privilege vulnerability. It arises from improper handling that allows arbitrary writing to the file system, enabling local privilege escalation. Public exploits/public PoCs exist (notably PrintDemon) and have been discussed alongside patch cir...

CVE-2023-29363

CVE-2023-29363 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows message queuing in PGM server scenarios, where a remote, unauthenticated attacker could send a crafted file over the network to achieve code execution if the message-queuin...

CVE-2022-24528

CVE-2022-24528 is a Remote Code Execution vulnerability in Windows RPC Runtime. It is a network-exposed issue affecting the Windows RPC runtime, with a high-severity impact (C/H/I/A: high) per CVSS v3.1 (8.8) and a medium base score (6.8) in CVSS v2. The CVSS v3.1 vector indicates network access,...

CVE-2022-26931

CVE-2022-26931 is a Windows Kerberos elevation-of-privilege issue tied to certificate-to-account mapping changes in Active Directory. Microsoft KBs and Citrix documents describe remediation via certificate-mapping updates (e.g., KB5014754 and related out‑of‑band mitigations) to address how certif...

CVE-2024-30073

CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...

CVE-2023-36424

CVE-2023-36424 is documented as a Windows kernel-level out-of-bounds read vulnerability in the Common Log File System Driver (clfs.sys) that enables privilege escalation. Connected sources describe a pool overflow/record-validation flaw in clfs.sys (Windows Kernel pool management) exploited via c...