CVE-2024-21358

Technical details about CVE-2024-21358 (Microsoft WDAC OLE DB provider for SQL Server remote code execution) are not provided in the supplied documents. Monitor for official updates from Microsoft and trusted security advisories for affected products, mitigations, and fixes.

CVE-2024-21370

Public technical details for CVE-2024-21370 are not provided in the connected documents; the OpenVAS entries enumerate the CVE across multiple Microsoft KBs without product/version specifics. Monitor for updates.

CVE-2024-49113

CVE-2024-49113 is a Windows LDAP Denial-of-Service vulnerability affecting the LDAP client. Public PoCs exist (e.g., LDAPNightmare) and show proof-of-concept testing integrated with Metasploit and other repositories; multiple exploit/checker projects also reference testing for this CVE. The descr...

CVE-2016-3308

Technical details for CVE-2016-3308 are not publicly available in the provided documents; monitor for updates.

CVE-2017-0214

CVE-2017-0213 is a Windows Privilege Escalation flaw in the COM Aggregate Marshaler. Reports confirm it enables local elevation of privilege when a specially crafted app is run, affecting Windows client and server SKUs listed in the CVE description. Several connected sources document exploitation...

CVE-2017-8552

Technical details for CVE-2017-8552 are not publicly provided in the connected documents. No concrete product/version/impact details are present beyond the high-level description. Monitor for updates.

CVE-2022-30138

Technical details for CVE-2022-30138 are not provided in the supplied documents. The records mention Windows Print Spooler elevation of privilege but do not specify affected products/versions, root cause, exploit information, or fixes. Monitor for updates.

CVE-2016-0143

CVE-2016-0143 is a Windows Win32k Privilege Escalation vulnerability in the kernel-mode driver (win32k.sys) affecting multiple Windows versions (Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8.1, 2012, RT 8.1, Windows 10 Gold/1511). Root cause: improper handling of objects in memory within the Wi...

CVE-2025-21413

CVE-2025-21413 is a Windows Telephony Service remote code execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) indicates network access, no privileges, user interaction required, with high impact to confidentiality, integrity, and availability. Connected sources conf...

CVE-2020-1301

CVE-2020-1301 is a SMBv1 remote code execution vulnerability that requires authentication on the target network. Publicly available guidance and advisories confirm SMBv1 handling flaws can allow code execution when a specially crafted packet is processed by an SMBv1 server. Connected advisories (...

CVE-2021-43883

CVE-2021-43883 is a Windows Installer Elevation of Privilege vulnerability. The Windows Installer component can be abused when a user is tricked into installing a malicious package, enabling an attacker to gain elevated privileges on the system. The CVSS details in the provided data show a local ...

CVE-2023-36017

Technical details about CVE-2023-36017 are not publicly provided in the connected documents. The available materials only show the CVE entry with a Windows Scripting Engine memory corruption description and CVSS data. Monitor for updates from official sources.

CVE-2023-36425

Technical details (affected products, root cause, exploitability, or remediation) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2017-11835

CVE-2017-11835 affects the Microsoft Windows Embedded OpenType (EOT) font engine. The vulnerability exists in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, where specially crafted embedded fonts parsed by the EOT font engine can allow a local attacker who logs on and opens a document to read...

CVE-2024-26234

CVE-2024-26234 is a locally exploitable proxy driver spoofing vulnerability in Windows. The issue is tied to the Windows Proxy Driver, with exploitation requiring high privileges and no user interaction, leading to potential confidentiality, integrity, and availability impacts as indicated by the...

CVE-2020-16916

CVE-2020-16916 is a Windows elevation-of-privilege flaw in the COM server object creation path. The root cause is Windows handling of COM object creation, allowing an attacker who can log on to run a specially crafted application that exploits the vulnerability to gain elevated code execution. Mi...

CVE-2024-21352

Technical details for CVE-2024-21352 are not publicly available in the provided documents; monitor for updates.

CVE-2024-21391

CVE-2024-21391 affects Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The initial document provides a CVSS 3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and user interaction required. No specific remediati...

CVE-2024-21359

Technical details for CVE-2024-21359 are not provided in the connected documents. The available data only references a WDAC OLE DB provider RCE vulnerability. Monitor for official advisories to learn affected products, impact, and remediation.

CVE-2022-30160

CVE-2022-30160 is a Windows ALPC (Advanced Local Procedure Call) Elevation of Privilege vulnerability. The connected documents identify the issue as a local, low-complexity privilege escalation with no required user interaction and high impact on confidentiality, integrity, and availability (per ...

CVE-2009-2493

CVE-2009-2493 : Microsoft’s ATL vulnerability enables remote code execution when a user loads a specially crafted component/control hosted on a malicious page. The issue is described in MS09-037 (ATL vulnerabilities) and is addressed by Microsoft security bulletin updates; affected products inclu...

CVE-2024-26173

Technical details about CVE-2024-26173 are not provided in the connected documents. The materials discuss Windows registry and kernel context at a high level without concrete affected components, root cause, impact specifics, or patches. Monitor updates for official disclosures.

CVE-2022-24459

CVE-2022-24459 is an Elevation of Privilege in Windows Fax and Scan service. Connected sources note a PoC exploit exists and that Microsoft patched vulnerabilities in March 2022 Patch Tuesday, but no concrete product/version/fix details are provided in the documents.

CVE-2023-21684

CVE-2023-21684 relates to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. The CVE entry identifies the affected component as a Microsoft printer driver (PostScript and PCL6) and notes a high-severity impact (CVSSv3.1 base score 8.8; Network attack,...

CVE-2023-36402

Technical details about CVE-2023-36402 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Please monitor for official disclosures and updates as new information becomes available.

CVE-2024-21361

Technical details for CVE-2024-21361 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-21369

Technical details for CVE-2024-21369 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2024-21375

Technical details for CVE-2024-21375 are not publicly available in the provided documents. Monitor for updates as more information may be published.

CVE-2024-21441

CVE-2024-21441 affects the Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The NVD entry rates it High (CVSS 3.1: 8.8) with NETWORK vector, LOW attack complexity, NONE privileges, and user interaction required; impacts on confidentiality, integrity, and...

CVE-2024-21450

CVE-2024-21450 concerns the Microsoft WDAC OLE DB provider for SQL Server and is a remote code execution vulnerability. The CVSS 3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and requires user interaction. The impact is rated as high for confidentiality, integrit...

CVE-2009-2512

CVE-2009-2512 describes a remote code execution vulnerability in Microsoft Windows WSDAPI (Web Services on Devices API) affecting Windows Vista (Gold, SP1, SP2) and Windows Server 2008 (Gold, SP2). The root cause is memory corruption due to improper processing/validation of WSD message headers (M...

CVE-2020-1041

Technical details about CVE-2020-1041 are not provided in the supplied documents. No concrete information on affected products, versions, or exploit behavior is available. Monitor for updates from connected sources (e.g., CSIRTs, ENISA entries, or vendor advisories).

CVE-2020-1262

Technical details for CVE-2020-1262 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2021-36936

Technical details about CVE-2021-36936 are not publicly provided in the connected documents. No vendor/product/version specifics or remediation steps are present here. Monitor for updates from official advisories and trusted security trackers.

CVE-2023-21726

Technical details for CVE-2023-21726 are not provided in the supplied documents. No explicit information on affected products, root cause, impact, or fixes. Monitor for updates from official sources.

CVE-2023-24903

CVE-2023-24903 corresponds to a Windows SSTP remote code execution vulnerability. Publicly available details in the initial document identify SSTP as the vulnerable component with network attack vector and high impact (confidentiality, integrity, and availability). The CVE is listed in multiple W...

CVE-2024-21446

CVE-2024-21446 is an NTFS Elevation of Privilege vulnerability. The NVD entry indicates a local, low-attack-complexity flaw in NTFS that yields a high impact on confidentiality, integrity, and availability (C:H, I:H, A:H) with a base score of 7.8 (Microsoft-reported). Exploitation is listed as lo...

CVE-2024-21365

CVE-2024-21365 affects the Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. It has a CVSS v3.1 base score of 8.8 (High) with Network attack vector, Low attack complexity, No privileges required, and User interaction required; impacts Confidentiality, Int...

CVE-2024-21405

CVE-2024-21405 is a Microsoft Message Queuing (MSMQ) elevation of privilege vulnerability listed among February 2024 Windows security updates (KB5034830/KB5034819/etc.). Affected component: MSMQ on Windows. Root cause and exact exploit mechanism are not detailed in the provided documents beyond t...

CVE-2019-0887

CVE-2019-0887 is a remote code execution vulnerability in Remote Desktop Services related to the shared clipboard. The issue arises when a malicious RDP server can abuse clipboard redirection to drop arbitrary files via path traversal in the clipboard sharing channel, impacting RDP clients (mstsc...

CVE-2019-1342

Technical details for CVE-2019-1342 are not publicly provided in the supplied documents. Please monitor official advisories or CVE feeds for updates on affected products, impact, and remediation.

CVE-2024-21347

Technical details for CVE-2024-21347 are not provided in the connected documents. Monitor for updates and published fixes or advisories once available.

CVE-2024-21360

Technical details for CVE-2024-21360 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and the CVE entry.

CVE-2017-8563

CVE-2017-8563 is an elevation-of-privilege vulnerability in Windows where Kerberos can fall back to NTLM as the default authentication protocol. The issue is exposed via LDAP/NTLM negotiation and can enable domain‑level credential abuse if NTLM relay occurs. Public documentation notes that follow...

CVE-2022-24533

Technical details about CVE-2022-24533 (affected products, components, root cause, versions, fixes) are not provided in the connected documents. The available materials only reiterate a Remote Desktop Protocol RCE without specifics. Monitor for updates.

CVE-2024-21368

Technical details (affected product, versions, root cause, impact, or fixes) are not provided in the supplied documents for CVE-2024-21368; no concrete details available. Monitor for updates.

CVE-2021-28455

Technical details about CVE-2021-28455 (affected components, root cause, impact, and fixes) are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-34494

CVE-2021-34494 is a Windows DNS Server remote code execution vulnerability exploitable over the network. Concrete details in connected documents confirm affected product is Windows DNS Server (Windows Server family) and that exploitation does not require user interaction, with an attacker needing...

CVE-2021-34535

CVE-2021-34535 is a Remote Desktop Client remote code execution vulnerability in Windows. According to the connected sources, it affects the Windows Remote Desktop Client component and is rated High (CVSS v3.1 base 8.8). Exploitation was addressed in Microsoft’s August 2021 Patch Tuesday updates;...

CVE-2024-21367

Technical details for CVE-2024-21367 are not provided in the connected documents. Public information about affected components, root cause, or fixes is not included here. Monitor for updates from the vendor/Microsoft and add any official advisories when available.