4227 matches found
CVE-2022-21836
CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...
CVE-2022-21983
CVE-2022-21983 is a Win32 Stream Enumeration Remote Code Execution vulnerability. The connected sources show an in-scope CVE with a network attack vector and high impact: CVSSv3.1 base score 7.5 (HIGH), with no authentication (NONE) and user interaction required (REQUIRED); confidentiality, integ...
CVE-2022-26831
CVE-2022-26831 : Windows LDAP Denial of Service vulnerability. The vulnerability is described as a Windows LDAP DoS issue with a Network attack vector (no user interaction) and a high-impact on availability (per CVSS v3.1: 7.5, HIGH; CVSS v2: 5.0, MEDIUM). Connected sources confirm the Windows LD...
CVE-2024-21363
Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.
CVE-2026-56159
CVE-2026-56159 is a heap-based buffer overflow in Windows DHCP Server that can allow an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability is rated CRITICAL with Network attack vector and no explicit exploit details in the provided documents. Connec...
CVE-2015-2518
Technical details for CVE-2015-2518 are not provided in the supplied documents. No affected products, root cause, or remediation are stated here. Monitor updates from official advisories and connected sources.
CVE-2016-3310
CVE-2016-3310 is a Win32k Elevation of Privilege vulnerability affecting multiple Windows versions. The issue arises in kernel‑mode drivers where improper handling of memory objects enables a local user to execute code with SYSTEM privileges via a crafted application. This is a local, non‑authent...
CVE-2022-23270
Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.
CVE-2022-29132
Technical details about CVE-2022-29132 (Windows Print Spooler elevation) are not provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for official updates.
CVE-2024-20683
Technical details are not publicly provided in the supplied documents. No specifics on affected products, versions, impact, or fixes are available here; monitor official sources for updates.
CVE-2019-1151
CVE-2019-1151 is the Microsoft Graphics Remote Code Execution vulnerability. The Windows font library fails to properly handle specially crafted embedded fonts, enabling remote code execution that can compromise an affected system (install programs, modify data, create accounts with full rights)....
CVE-2022-21893
Technical details about CVE-2022-21893 are not provided in the connected documents. The supplied sources include high-level vulnerability descriptions and update references, but no specifics on affected products/versions or fixes. Monitor for updated, concrete disclosures.
CVE-2023-24876
Summary (supported by CNVD-2023-30866): Microsoft PostScript and PCL6 Class Printer Driver has a remote code execution vulnerability. The CNVD entry describes a remote code execution flaw in these Microsoft printer drivers. The CVE-2023-24876 listing on NVD also identifies this as a Remote Code E...
CVE-2023-21556
Technical details about CVE-2023-21556 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.
CVE-2024-21314
CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...
CVE-2020-17096
Technical details about CVE-2020-17096 are not provided in the connected documents. Available sources mention impact and CVSS but do not disclose affected product versions, root cause, exploit status, or fixes in this data set. Monitor for updates.
CVE-2021-36947
CVE-2021-36947 is listed in the NCSC vulnerability record as a Windows Print Spooler Component vulnerability with the impact: Execute random code. The connected documents do not provide concrete technical details on the root cause, affected subcomponents, specific versions, exploit scenarios, or ...
CVE-2024-21320
CVE-2024-21320 is a Windows themes spoofing vulnerability with public detail: Exploit-DB describes an NTLM hash-leak via a malicious Windows theme, demonstrating how a crafted .theme file can exfiltrate credentials. The NVD entry labels the issue as Windows Themes Spoofing Vulnerability with a CV...
CVE-2021-34460
Technical details about CVE-2021-34460 are not publicly available in the provided documents. The connected sources do not specify affected products, root cause, impact, or fixes. Monitor for updates.
CVE-2022-35769
Technical details for CVE-2022-35769 (Windows PPP DoS) are not provided in the supplied documents. No affected product/version or remediation is described here. Monitor for updates from Microsoft and Vulners for confirmed specifics.
CVE-2022-44707
Technical details about CVE-2022-44707 are not provided in the supplied documents. The connected set does not describe affected products/versions or remediation; monitor for updates.
CVE-2024-20663
Technical details about CVE-2024-20663 are not provided in the supplied documents. No confirmed affected products, versions, root cause, or remediation are disclosed; monitor for updates.
CVE-2013-3175
CVE-2013-3175 is a Windows elevation-of-privilege issue in the handling of asynchronous RPC requests. Affected products include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT. Root cause...
CVE-2022-34714
Technical details about CVE-2022-34714 are not provided in the attached documents. The connected items do not describe affected products, root cause, impact, or remediation for this CVE. Monitor for updates.
CVE-2023-24900
CVE-2023-24900 corresponds to a Windows NTLM Security Support Provider Information Disclosure Vulnerability. The provided documents confirm the vulnerability title and CVSS 3.1 base metrics (5.9, MEDIUM) with Network attack vector and no user interaction, but do not supply detailed root-cause des...
CVE-2022-23253
CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...
CVE-2022-29122
Technical details for CVE-2022-29122 (affected product, root cause, exploit scope) are not provided in the supplied documents. Monitor official Microsoft advisories and the CVE entry for updates and remediation guidance.
CVE-2023-21541
Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.
CVE-2023-21692
CVE-2023-21692 is described as a Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution vulnerability. The connected documents provide limited details: they cite PEAP RCE and do not specify affected products, versions, or root cause beyond the general Microsoft PEAP c...
CVE-2020-0642
CVE-2020-0642 is a Windows Win32k Elevation of Privilege vulnerability. The Win32k component can mishandle objects in memory, enabling local privilege escalation and kernel‑mode access when exploited on affected Windows/Windows Server builds. Public connected documents corroborate the Win32k memo...
CVE-2021-40469
CVE-2021-40469 is a Windows DNS Server Remote Code Execution vulnerability. Connected sources indicate exploitation requires a privileged user account and is network-exploitable with low attack complexity, but exploitation in the wild is not strongly evidenced: the issue was noted as exploitable ...
CVE-2022-21857
Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...
CVE-2022-21920
CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...
CVE-2024-49128
CVE-2024-49128 describes a vulnerability in Windows Remote Desktop Services where sensitive data is stored in improperly locked memory. This can allow an unauthenticated, network-based attacker to execute code remotely. The CVSS 3.1 vector provided indicates network access as the attack vector, h...
CVE-2025-27480
CVE-2025-27480 is described as a Remote Desktop Services/RDP remote code execution vulnerability with a network attack vector (no user interaction) and a base CVSS v3.1 score of 8.1 (HIGH). Public references include a GitHub exploit claiming a remote code execution path and Krebs-style coverage p...
CVE-2022-26919
Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.
CVE-2023-21769
CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...
CVE-2022-21973
CVE-2022-21973 corresponds to a Windows Media Center Update Denial of Service vulnerability. The NVD CVSSv3.1 score is 5.5 (MEDIUM) with Local access, Low attack complexity, Privileges Required: Low, no user interaction, but Availability impact: High. Public details in connected sources indicate ...
CVE-2022-30226
Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.
CVE-2024-20658
CVE-2024-20658 is described as a local, elevation-of-privilege vulnerability in the Microsoft Virtual Hard Disk. The CVSS3.1 base shows: attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, and impact C (confidentiality), I (integrity), and A (availability) ...
CVE-2021-26442
Technical details for CVE-2021-26442 are not present in the connected documents. Public info here is generic. Monitor for updates from official advisories; no product/version/impact specifics are provided in the supplied materials.
CVE-2022-37991
CVE-2022-37991 is a Windows kernel registry issue tied to regf hive loading where key/value name length checks were not enforced (e.g., key names up to 1040 chars). This could lead to memory corruption or crashes during hive load; connected materials describe related hive/registry memory-corrupti...
CVE-2019-1094
Technical details (affected products/versions/root cause/fix) for CVE-2019-1094 are not provided in the connected documents. Monitor Microsoft advisories and MSRC for updates.
CVE-2022-29129
CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...
CVE-2024-49084
CVE-2024-49084 is a Windows Kernel elevation-of-privilege issue (Windows Kernel). The connected sources list it under Windows Kernel with a CVSS v3.1 base score of 7.0 (local attack vector, high impact across confidentiality, integrity, and availability) and indicate the vulnerability allows obta...
CVE-2025-21263
Technical details for CVE-2025-21263 are not publicly provided in the supplied connected documents. The materials reference Windows Digital Media Elevation of Privilege vulnerability but do not describe affected components, root cause, impact specifics, or fixes. Monitor updates from official sou...
CVE-2022-22034
Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.
CVE-2022-26801
CVE-2022-26801 is a Windows Print Spooler Elevation of Privilege vulnerability (Local, Low attack complexity; no user interaction required per description). The connected documents show confirmed details on the vulnerability’s existence and CVSS metrics (CVSS 3.1 base score 7.8; confidentiality/i...
CVE-2023-21552
CVE-2023-21552 is documented in an NCSC advisory as a Windows Graphics Component vulnerability (Windows GDI) with CVSS v3.1 base score 7.80, affecting privilege escalation. The NCSC listing confirms its classification as an elevation of privileges issue in Windows Graphics/Graphics Device Interfa...