CVE-2021-34492

Technical details for CVE-2021-34492 are not provided in the supplied documents. Monitor for updates from NVD, Microsoft advisories, or vendor/CSIRT bulletins for affected products and remediation.

CVE-2021-42283

CVE-2021-42283 is an NTFS Elevation of Privilege vulnerability with documented CVSS 3.1 base score 7.8 (HIGH) and local attack vector with low complexity, no authentication, and user interaction not required. The entry also lists CVSS 2.0 data (MEDIUM) and a CNA score. There are no connected docu...

CVE-2022-21848

Technical details about CVE-2022-21848 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2022-29102

Technical details about CVE-2022-29102 are not provided in the connected documents. The entry appears reserved/no public details in the supplied materials. Monitor for updates from official advisories; no product/vendor/version specifics are disclosed here.

CVE-2022-29137

Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.

CVE-2023-21774

CVE-2023-21774 is a Windows Kernel elevation-of-privilege vulnerability tied to Windows Registry security descriptors. The connected analysis notes it stemmed from incorrect security refresh in the Key Control Block (KCB) for certain keys, enabling incorrect access state after hive-related operat...

CVE-2023-28222

Technical details (affected components, root cause, impacted versions, exploits, or patch status) are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2023-32057

CVE-2023-32057 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected sources indicate an attacker can trigger RCE by sending a malicious MSMQ packet to an MSMQ server, enabling remote code execution on the server side. A mitigation documented in the sources is t...

CVE-2024-26175

CVE-2024-26175 is a local-bypass vulnerability in Windows Secure Boot, enabling bypass of the Secure Boot security feature. Affected component: Windows Secure Boot. Root cause: security-measure bypass integrated into Secure Boot; the CVSSv3.1 base metrics indicate a High severity (7.8) with Local...

CVE-2025-59282

CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...

CVE-2018-0829

The Windows kernel information disclosure in CVE-2018-0829 affects multiple Windows versions: Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 and R2; Windows 10 releases (Gold, 1511, 1607, 1703, 1709); Windows Server 2016 and Windows Server version 1...

CVE-2019-0578

CVE-2019-0578 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of in-memory objects, enabling code execution when a user opens a crafted file. Affected systems include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (various ...

CVE-2019-0596

The CVE-2019-0596 entry describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. Affected component: Jet Database Engine. Impact: remote code execution with high severity (per CVE). The connected records also indicate sim...

CVE-2019-1183

CVE-2019-1183 is described as fully mitigated by security updates for CVE-2019-1194; no separate update is required. Connected documents show CVE-2019-1194 as a remote code execution vulnerability in Internet Explorer’s scripting engine (memory corruption risk via VBScript/IE scripting paths). Th...

CVE-2020-1467

CVE-2020-1467 is a Windows elevation-of-privilege flaw arising from improper handling of hard links. An attacker who can log on to the system could run a crafted program to overwrite a targeted file, gaining elevated privileges. Microsoft addressed the issue via security updates that correct Wind...

CVE-2020-16924

Technical details about CVE-2020-16924 are not publicly available in the provided connected documents; monitor for updates.

CVE-2021-31193

CVE-2021-31193 is a Windows SSDP Service elevation-of-privilege vulnerability. Affects Windows OS where the SSDP service can be abused locally to gain high integrity privileges (CVSS3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Remediation in provided documents points to Microsoft security updates r...

CVE-2022-22022

Technical details about CVE-2022-22022 are not publicly available in the provided documents. No affected product/version or root cause is disclosed here. Monitor for updates in the connected sources.

CVE-2022-29115

Technical details about CVE-2022-29115 are not publicly provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for updates.

CVE-2022-29121

Technical details about CVE-2022-29121 are not provided in the supplied documents. No information on affected products/versions or fixes is available here. Monitor for updates from Microsoft/MSRC and vendor advisories.

CVE-2023-24868

CVE-2023-24868 corresponds to a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver . The CNVD entry explicitly describes it as a remote code execution flaw in this printer driver, aligning with the CVE title. The NVD entry lists the vulnerability as expl...

CVE-2023-36900

CVE-2023-36900 affects the Windows Common Log File System (CLFS) driver, enabling Elevation of Privilege via an integer overflow/wraparound vulnerability. The connected exploit repository documents a PoC labeled as an exploit for an Integer Overflow or Wraparound in Microsoft CLFS, with a Denial-...

CVE-2026-35421

CVE-2026-35421 describes a heap-based buffer overflow in Windows GDI that permits a local attacker to execute arbitrary code. The entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, NO privileges required, user interaction required, and impacts to con...

CVE-2017-0277

CVE-2017-0277 describes a remote code execution vulnerability in the Microsoft Windows SMBv1 server. The SMBv1 service on affected Windows versions (Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Windows 10 1511/1607/1703, Windows Server 2...

CVE-2019-0688

CVE-2019-0688 : Windows TCP/IP Information Disclosure vulnerability due to improper handling of fragmented IP packets in the TCP/IP stack. The OpenVAS/OpenVAS-related entries reference Windows KB updates (KB4493509, KB4493474/0/1/6/ etc.) addressing multiple Windows vulnerabilities, including CVE...

CVE-2019-0846

The CVE-2019-0846 entry concerns a remote code execution vulnerability in the Microsoft Windows Jet Database Engine. Connected sources describe the root cause as improper handling of objects in memory within the Jet Database Engine, enabling arbitrary code execution when a victim opens a crafted ...

CVE-2019-1274

CVE-2019-1274 is a Windows kernel information-disclosure vulnerability described as failing to properly initialize a memory address. The connected Red Hat entry mirrors the description; NVD/NIST details also reference this Windows kernel information-disclosure issue. The vulnerability impact is i...

CVE-2020-0630

Technical details for CVE-2020-0630 are not publicly provided in the supplied documents. Monitor for updates from authoritative sources as new information may emerge.

CVE-2021-36953

Technical details about CVE-2021-36953 (affected component/version/impact) are not publicly available in the provided documents. Monitor for updates.

CVE-2021-36974

Technical details for CVE-2021-36974 are not publicly provided in the supplied documents. No affected product, root cause, or remediation is specified here. Monitor official advisories for updates.

CVE-2021-42285

CVE-2021-42285 is a Windows kernel elevation-of-privilege vulnerability. The provided records describe it as a Windows Kernel Elevation of Privilege Vulnerability with a local attack vector and low attack complexity. In the NVD entry, the CVSS vectors are CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2022-21889

Technical details about CVE-2022-21889 are not publicly provided in the supplied documents; monitoring for updates from vendors and CVE databases is advised.

CVE-2022-44676

Technical details for CVE-2022-44676 are not provided in the supplied documents. Public availability of affected products, root cause, and fixes cannot be confirmed here; monitor for updates from official sources.

CVE-2023-21546

CVE-2023-21546 is a Windows Layer 2 Tunneling Protocol (L2TP) remote code execution vulnerability. The entry provides a network-exposed, high-severity issue (CVSSv3.1: 8.1, AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The initial description and connected documents identify the affected vector as networ...

CVE-2023-21757

Technical details for CVE-2023-21757 are not publicly provided in the supplied documents. No information on affected products/versions, impact, or fixes. Monitor for updates from official sources.

CVE-2023-21772

CVE-2023-21772 is a Windows kernel EoP rooted in the registry’s security descriptor lifecycle. The registry virtualization path could free the old security descriptor and then attempt to allocate a new one; if allocation failed, the key could be left without a security descriptor, violating memor...

CVE-2023-21802

Technical details (affected product/component/versions/root cause and fixes) for CVE-2023-21802 are not publicly available in the provided documents. Monitor for updates from official CVE/NVD/KB sources.

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2023-38184

CVE-2023-38184 is a Windows LDAP Remote Code Execution vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.5 (High) with Network attack vector, high attack complexity, low privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. The provide...

CVE-2024-20688

CVE-2024-20688 is a Windows Secure Boot Security Feature Bypass vulnerability. Affected component: Secure Boot implementation in Windows; root cause described as a security feature bypass with high-impact across confidentiality, integrity, and availability (CVSSv3.1 base 7.1). Attack vector is ad...

CVE-2024-26241

CVE-2024-26241 is a Win32k elevation-of-privilege vulnerability in Windows. The OpenVAS entries list Win32K as the affected component with local exploitation, requiring low privileges and no user interaction, and causing high confidentiality, integrity, and availability impact. The CVSSv3.1 base ...

CVE-2026-62819

CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...

CVE-2018-8482

CVE-2018-8482 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products include Windows 7, Windows 8.1, Windows 10 and corresponding server editions listed in the description. The root cause is an information disclosur...

CVE-2019-0569

CVE-2019-0569 is described in connected sources as a Windows vulnerability tied to RPC-related privilege escalation within the StorSvc/AppX deployment components, with exploitation tied to Windows RPC service interfaces and calls such as SetNamedSecurityInfo. The articles enumerate affected DLLs ...

CVE-2019-0579

Technical details for CVE-2019-0579 (affected software, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0600

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability feeds.

CVE-2020-0608

CVE-2020-0608 is an information disclosure vulnerability affecting the Win32k component where kernel information is improperly disclosed. The root cause is in win32k exposing kernel data, leading to potential information disclosure with local access and no user interaction required. The CVSS metr...

CVE-2020-0687

CVE-2020-0687 is a Windows remote code execution vulnerability in the Microsoft Graphics/Font handling component. It arises when the Windows font library improperly processes specially crafted embedded fonts, enabling an attacker to execute arbitrary code remotely. Microsoft addressed the issue a...

CVE-2021-40465

CVE-2021-40465, Windows Text Shaping Remote Code Execution Vulnerability, is documented with CVSS 3.1 base score 7.8 (HIGH) and CVSS2 base 6.8 (MEDIUM) by NVD/Microsoft, indicating LOCAL exploitability with LOW attack complexity and user interaction required. The available sources in the provided...

CVE-2022-21899

Technical details about CVE-2022-21899 are not provided in the connected documents. The references show listings and patches but do not describe the vulnerability specifics, affected products, root cause, or fixes. Monitor for updates.