CVE-2019-0802

CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...

CVE-2021-31194

CVE-2021-31194 is described in the provided documents as an OLE Automation Remote Code Execution vulnerability in Windows. The NVD entry lists CVSSv3.1 base score 8.8 ( HIGH ) with network attack vector, low complexity, privileges required: LOW, and user interaction NONE, resulting in HIGH confid...

CVE-2021-33757

Technical details for CVE-2021-33757 are not publicly disclosed in the provided documents. The entries reference the vulnerability by name but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2022-26918

CVE-2022-26918 relates to a Windows Fax Compose Form remote code execution vulnerability. According to CNVD-2022-71976, the root cause is a failure to properly filter special elements of the input data during external input construction, enabling arbitrary code execution on affected systems. The ...

CVE-2022-34301

CVE-2022-34301 describes a vulnerability in third‑party UEFI bootloaders (CryptoPro Secure Disk) that can bypass Secure Boot and execute unsigned code in the pre‑boot phase. An attacker must access the EFI System Partition and replace the signed bootloader with a vulnerable one, enabling local co...

CVE-2023-21812

CVE-2023-21812 is a Windows vulnerability in the Common Log File System Driver (CLFS) that enables Elevation of Privilege. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW privileges required, and no user interaction; impact is HIGH on ...

CVE-2023-28244

Technical details about CVE-2023-28244 are not publicly available in the provided documents. Monitor for updates from official sources (NVD/Microsoft) to obtain affected products, root cause, impact, and remediation information.

CVE-2024-26244

CVE-2024-26244 is a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. According to the CVSS 3.1 vector, it is exploitable over the network with no privileges required, but requires user interaction, and has high impact on confidentiality, integrity, and ava...

CVE-2024-30037

The CVE-2024-30037 entry affects Windows Common Log File System Driver and is categorized as a local Elevation of Privilege vulnerability (requires local access; may grant elevated privileges). The connected documents corroborate the CVE mapping and indicate it is part of a set of Windows fixes; ...

CVE-2026-49798

CVE-2026-49798 is a Windows Kernel use-after-free vulnerability that enables local privilege escalation. The root cause is use-after-free in kernel code, allowing an unauthenticated attacker with local access to elevate privileges. Affected component details are limited in the provided documents;...

CVE-2026-57089

Summary : CVE-2026-57089 affects the Windows SMB Server Network Transport Driver (srvnet.sys). The issue is a use-after-free memory corruption bug that can be triggered by an unauthenticated attacker over the network to achieve remote code execution. The vulnerability is listed with high to criti...

CVE-2013-3868

CVE-2013-3868 affects Microsoft Active Directory Lightweight Directory Service (AD LDS) and Active Directory Services across Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8, and Server 2012. The vulnerability allows remote attackers to trigger a denial of service (LDAP...

CVE-2014-0315

CVE-2014-0315 corresponds to the Windows File Handling vulnerability fixed by MS14-019. It is a local privilege-escalation/binary-hijacking issue caused by untrusted search path handling for .bat/.cmd files when CreateProcess() is used and the first token is CMD, which can execute a rogue cmd.exe...

CVE-2018-0747

Technical details for CVE-2018-0747 are not publicly provided in the supplied documents; no concrete affected products, root cause, or patch information are present. Monitor for updates.

CVE-2021-26426

CVE-2021-26426 pertains to Windows User Profile/User Account Profile Picture Elevation of Privilege in the Windows User Profile Service. The primary description confirms an elevation of privilege vulnerability, and NVD metrics show a local, low-complexity vulnerability with local access and parti...

CVE-2021-33749

CNVD-2021-62476 and NVD entries describe CVE-2021-33749 as a Windows DNS Snap-in remote code execution vulnerability in Microsoft Windows/Windows Server. Affected component: DNS Snap-in. Root cause: remote code execution via the DNS Snap-in. Impact: potential full system compromise; confidentiali...

CVE-2021-34457

CVE-2021-34457 affects the Windows Remote Access Connection Manager, described as an Information Disclosure Vulnerability. The NVD entry lists CVSS v3.1 base score 5.5 (Medium) with LOCAL access, LOW attack complexity, and no user interaction required; confidentiality impact is High while integri...

CVE-2021-36965

CVE-2021-36965 concerns a Remote Code Execution flaw in Windows WLAN AutoConfig service. Connected documents confirm the affected component is WLAN AutoConfig and reference September 2021 Microsoft patches; no explicit root-cause details or in-wild exploitation are provided in the supplied source...

CVE-2022-22028

CVE-2022-22028 is described as a Windows Network File System Information Disclosure vulnerability. Connected OpenVAS entries show this CVE being included in Microsoft update KB5015861 (OS Build updates) and KB5015807 (OS builds 19042/19043/19044), indicating the vulnerability is addressed by thes...

CVE-2022-23298

Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.

CVE-2022-30143

CVE-2022-30143 is an LDAP Remote Code Execution vulnerability affecting Windows LDAP, where exploitation is contingent on the LDAP MaxReceiveBuffer policy being configured higher than the default. The Linked AVLEONOV content notes that the vulnerability exists for LDAP RCEs during Patch Tuesday J...

CVE-2023-21685

The CVE-2023-21685 entry concerns Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution. The connected NVD record provides CVSS 3.1: NETWORK attack vector, LOW attack complexity, NONE privileges required, UI required, and impacts to Confidentiality, Integrity, and Availability (all ...

CVE-2023-23406

CVE-2023-23406 corresponds to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver. Connected sources confirm this CVE affects Microsoft’s PostScript and PCL6 printer drivers and describe a remote code execution outcome. The CVSS 3.1 data shows an extern...

CVE-2023-24940

Technical details for CVE-2023-24940 are not publicly available in the provided documents. The connected items reference the CVE but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2024-49019

CVE-2024-49019 affects Active Directory Certificate Services (AD CS) and enables privilege escalation. The connected exploit resource demonstrates misuse of certificate-based authentication to obtain domain admin rights (e.g., requesting and using a certificate to gain LDAP/administrative access,...

CVE-2026-62795

CVE-2026-62795 is a Windows LDAP (Lightweight Directory Access Protocol) use-after-free vulnerability that allows a remote attacker to execute code over the network. The issue is described as a remote code execution in Windows LDAP due to a use-after-free condition, enabling an unauthenticated, n...

CVE-2018-0817

Technical details about CVE-2018-0817 are not publicly provided in the supplied documents. Monitor for updates from official advisories; no affected products, root cause, or remediation are specified here.

CVE-2018-8550

CVE-2018-8550 is a local elevation-of-privilege flaw in Windows COM Aggregate Marshaler. The vulnerability allows an attacker with local access to run code with elevated privileges on affected Windows versions (Windows 7, Windows 8.1/10 family, and corresponding Server SKUs). Public references (e...

CVE-2019-0620

The CVE-2019-0620 entry describes a Windows Hyper-V remote code execution vulnerability. The issue arises when Hyper-V fails to properly validate input from a guest OS, allowing an authenticated guest to run a specially crafted app that could cause the Hyper-V host to execute arbitrary code. The ...

CVE-2019-0881

CVE-2019-0881 is described as a Windows Kernel elevation-of-privilege vulnerability that occurs when the kernel improperly handles key enumeration. The Initial document provides a high-level description with CVSS metrics and MSRC references, but contains no product-version or patch details. Conne...

CVE-2021-1692

Technical details (affected software, exact root cause, vulnerable components, versions, impact, and fixes for CVE-2021-1692) are not publicly provided in the supplied documents; monitor for official disclosures or updates.

CVE-2021-38631

CVE-2021-38631 is a Windows RDP information-disclosure vulnerability. Public sources and patches indicate it affects Remote Desktop Protocol handling on Windows 7–11 and Windows Server 2008–2019, allowing an attacker with local access to view the RDP password. Microsoft released fixes as part of ...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...

CVE-2022-21997

Technical details about CVE-2022-21997 are not provided in the supplied documents. Monitor for updates from NVD/Microsoft and ENISA KEV references.

CVE-2022-30153

CVE-2022-30153 is cited in connected materials as a Windows LDAP Remote Code Execution vulnerability, listed among several Windows LDAP RCEs. The AVLEONOV post notes that some LDAP RCEs depend on the LDAP MaxReceiveBuffer policy, implying a conditional exploitation vector for certain LDAP configu...

CVE-2022-34701

Technical details about CVE-2022-34701 (affected product, root cause, impact, or fix) are not provided in the connected documents; monitor for official disclosures and updates.

CVE-2023-24887

CVE-2023-24887 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution vulnerability. Affected component: Microsoft PostScript and PCL6 Class Printer Driver. Root cause/impact: remote code execution with NETWORK attack vector, low complexity, low privileges, no user interact...

CVE-2023-28253

Technical details for CVE-2023-28253 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation details are present here. Monitor for updates.

CVE-2024-28921

CVE-2024-28921 is a Windows Secure Boot security feature bypass vulnerability. The CVE entry is supported by multiple sources (NVD/NCSC/related feeds) indicating a local-attack-path bypassing Secure Boot with elevated privileges required and no user interaction. The CVSS vector shows: Local attac...

CVE-2019-0735

CVE-2019-0735 is a Windows CSRSS elevation-of-privilege vulnerability caused by improper handling of in-memory objects. The entry documents a local attacker gain of high impact (confidentiality/ integrity/ availability) by exploiting this flaw. The CIRCL sighting notes an exploitation link (Explo...

CVE-2019-0986

CVE-2019-0986 affects the Windows User Profile Service (ProfSvc) and concerns improper handling of symlinks. The vulnerability enables elevation of privilege, allowing an attacker who can log on to run a crafted application that could delete files or folders in an elevated context. The impact is ...

CVE-2019-1149

CVE-2019-1149 is a remote code execution vulnerability in the Windows font library caused by improper handling of embedded fonts (Microsoft Graphics Remote Code Execution). It can allow an attacker to take control of the system, install programs, or modify data after successful exploitation via w...

CVE-2019-1280

CVE-2019-1280 is a Windows LNK processing remote code execution vulnerability. The flaw allows an attacker to execute code with the same user rights as the logged-in user when a .LNK file is processed. Some connected sources note active exploitation vectors (Astaroth) and public patches from Micr...

CVE-2022-26827

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2022-26827 are not provided in the connected documents. Monitoring for updates is advised; no public details are present in the supplied sources.

CVE-2022-38047

CVE-2022-38047 is a Windows Point‑to‑Point Tunneling Protocol (PPTP) remote code execution vulnerability. The CVE affects the PPTP component in Windows, with a network‑level attack surface, high impact (C/H/I/A all high) and no user interaction required per CVSS v3.1. Connected sources corroborat...

CVE-2023-21527

CVE-2023-21527 is a Denial-of-Service vulnerability in the Windows iSCSI Service. The connected NCSc advisory explicitly lists CVE-2023-21527 under Windows iSCSI with a DoS impact. The initial record assigns CVSS v3.1: 7.5 (Network, High, Availability impact) with no documented exploitation statu...

CVE-2023-21798

Technical details about CVE-2023-21798 are not publicly provided in the connected documents. Monitor for updates.

CVE-2023-24912

Technical details for CVE-2023-24912 are not publicly provided in the supplied documents. Monitor for updates from official advisories when more information becomes available.

CVE-2023-29358

CVE-2023-29358 is a Windows GDI Elevation of Privilege vulnerability. Per the sources, it is a LOCAL, low-attack-complexity issue with LOW privileges required, and it has HIGH confidentiality, integrity, and availability impact. The connected documents corroborate the Windows context and do not p...

CVE-2024-20669

CVE-2024-20669 affects Microsoft Windows Secure Boot. It is a Local, High-Privilege vulnerability classed as a Secure Boot security feature bypass with a CVSS v3.1 base score of 6.7 (Impact: Confidentiality, Integrity, and Availability High). Connected sources confirm Windows Secure Boot-related ...