CVE-2023-28266

Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-28298

Technical details for CVE-2023-28298 are not provided in the connected documents. OpenVAS entries reference the CVE across KB updates but do not describe affected components, root cause, impact, or remediation. Monitor for updates.

CVE-2023-32021

Technical details about CVE-2023-32021 are not publicly provided in the connected documents. The provided sources reference the CVE and related Windows updates, but do not disclose affected components, root cause, or impact in this dataset. Monitor for updates.

CVE-2013-0006

CVE-2013-0006 is associated with OSIsoft PI Interface for OPC XML-DA (ICS advisory ICSA-20-315-01) and Microsoft MSXML/MS13-002 context. Connected documents identify the affected product as PI Interface for OPC XML-DA versions prior to 1.7.3.x, where the vulnerability stems from numeric errors/st...

CVE-2016-0145

CVE-2016-0145 is a Graphics Memory Corruption vulnerability in the Windows font library. A remote attacker can execute arbitrary code by delivering a crafted embedded font, affecting Windows flavors listed in the vulnerability entry (e.g., Windows Vista through Windows 10 versions, Windows Server...

CVE-2017-8565

CVE-2017-8565 is a Windows PowerShell remote code execution vulnerability triggered when PSObject wraps a CIM Instance. Connected sources describe in detail that deserialization via PSObject, LosFormatter, ObjectStateFormatter (and related gadget chains) can enable remote code execution in PowerS...

CVE-2017-8676

CVE-2017-8676 is an information disclosure vulnerability in the Windows GDI+ component. The NVD entry describes that an authenticated attacker can retrieve information from the targeted system by presenting a specially crafted application, affecting a wide range of Windows versions (Windows clien...

CVE-2018-0754

The CVE-2018-0754 entry concerns the Windows Adobe Type Manager Font Driver (Atmfd.dll). Multiple sources confirm an information-disclosure vulnerability arising from the way objects are handled in memory within Atmfd.dll, affecting Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2, W...

CVE-2018-8455

Technical details about CVE-2018-8455 are not publicly provided in the supplied documents; monitor for updates on affected products, root cause, and remediation.

CVE-2018-8468

CVE-2018-8468 is a Windows elevation-of-privilege vulnerability described as a sandbox escape. Affected products include Windows 7, Windows 8.1, Windows 10 family and corresponding Server editions (Server 2008/2012/2016, RT 8.1, etc.). Connected sources indicate exploitation activity (Exploit-DB ...

CVE-2019-0581

CVE-2019-0581 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of objects in memory. Affected products include multiple Windows versions (e.g., Windows 7, Server 2008/2012/R2, 8.1, 10, and server editions). The connected documents corroborate tha...

CVE-2019-0599

CVE-2019-0599 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue is shared among multiple CVEs in the same family (CVE-2019-0595, -0596, -0597, -0598, -0625). The available documents identify the affected ...

CVE-2019-1152

CVE-2019-1152 is a remote code execution affecting the Windows font library when handling specially crafted embedded fonts. The vulnerability allows an attacker to take control of the affected system, install programs, and access/modify data or create accounts with full rights. Exploitation detai...

CVE-2019-1243

CVE-2019-1243 describes a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution with the user’s pr...

CVE-2019-1391

Technical details for CVE-2019-1391 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability trackers.

CVE-2020-1346

Technical details about CVE-2020-1346 are not publicly provided in the connected documents. Monitor for updates from official advisories and third-party analyses.

CVE-2020-16887

CVE-2020-16887 is an elevation-of-privilege vulnerability in the Windows Network Connections Service where improper in-memory handling of objects could allow a locally authenticated attacker to execute code with elevated permissions. The vulnerability can be exploited by running a specially craft...

CVE-2021-28334

CVE-2021-28334 is associated with a Remote Procedure Call Runtime remote code execution vulnerability in Microsoft Windows/Windows Server. The CNVD-2021-74287 entry describes a RPC Runtime RCE vulnerability affecting Windows/Windows Server, implying a remote attacker could execute code over the n...

CVE-2021-31184

Technical details for CVE-2021-31184 (IrDA information disclosure) are not publicly available in the provided documents. Monitor for updates from official advisories and CVE/NVD entries for affected products, versions, and remediation.

CVE-2022-21960

CVE-2022-21960 affects Windows Resilient File System (ReFS) and is described as a remote code execution vulnerability. The provided documents only state the vulnerability title and CVSS metrics from NVD (CVSSv3.1 base score 6.8, vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and MSRC refere...

CVE-2022-41053

Technical details about CVE-2022-41053 are not publicly provided in the supplied documents. No affected products, exploit information, or mitigations are specified here. Monitor for updates.

CVE-2022-41057

Technical details about CVE-2022-41057 are not provided in the connected documents. Public information here does not specify affected products, root cause, impact, or fixes. Monitor official advisories for updates.

CVE-2022-41121

CVE-2022-41121 is a Windows Graphics Component Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.8 (HIGH), requiring LOCAL access with LOW privileges and no user interaction. The available descriptions identify the affected component as Windows Graphics Component but provide n...

CVE-2023-21680

Technical details about CVE-2023-21680 (Windows Win32k elevation) are not publicly available in the connected documents. Monitor for updates from Microsoft and other sources; wait for confirmed affected products/versions and remediation when disclosed.

CVE-2023-21799

Technical details about CVE-2023-21799 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2023-32011

Technical details about CVE-2023-32011 are not publicly provided in the supplied documents. The available sources confirm the vulnerability name and related MS updates but do not disclose affected products, versions, root cause, or fixes.

CVE-2023-35381

Technical details about CVE-2023-35381 (Windows Fax Service Remote Code Execution) are not publicly provided in the supplied documents; no affected product/version/root-cause/exploit information is available here. Monitor for updates and refer to official advisories for specifics.

CVE-2024-20689

CVE-2024-20689 is a Secure Boot security feature bypass affecting Windows Secure Boot. Public materials in the provided documents describe a buffer overflow in the Secure Boot protocol implementation as a potential root cause (PT-2024-2784). CVSS data in the ESU context indicates a base score aro...

CVE-2026-62890

CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...

CVE-2018-8404

CVE-2018-8404 is a Windows local elevation-of-privilege vulnerability in the Win32k subsystem. Root cause: Win32k.sys fails to properly handle objects in memory, enabling elevation of privilege on affected Windows variants (Windows 7, Windows 8.1, Windows 10, and corresponding Server editions). C...

CVE-2018-8408

CVE-2018-8408 is an information-disclosure vulnerability in the Windows kernel caused by improper initialization of memory objects. The Nessus plugin entry confirms this CVE is associated with Windows kernel information disclosure and lists it among affected products, including Windows 7, Windows...

CVE-2018-8565

CVE-2018-8565 is an information-disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The vulnerability affects multiple Windows editions (as listed in the NVD entry: Windows 7, Server 2012 R2/2016, Windows 8.1, 10 and corresponding server SKUs,...

CVE-2019-0702

Technical details about CVE-2019-0702 are not publicly available in the provided documents. No explicit exploitation, affected products, versions, or remediation are stated here. Monitor for updates from authoritative sources.

CVE-2019-1053

CVE-2019-1053 describes an elevation of privilege in Windows Shell due to failure to validate folder shortcuts. The vulnerability allows an attacker who already has unprivileged code execution on the victim to escalate privileges by escaping a sandbox. The underlying cause is the Shell’s insuffic...

CVE-2019-1095

Technical details for CVE-2019-1095 are not provided in the connected documents. The initial entry notes a Windows GDI information disclosure vulnerability but lacks product/version/impact specifics beyond memory disclosure. Monitor for updates from Microsoft and risk assessments when details eme...

CVE-2019-1126

Technical details (affected product/version, root cause, exploit info, mitigation) are not provided in the connected documents. The CVE-2019-1126 entry describes an ADFS security feature bypass; monitor official advisories for remediation updates.

CVE-2020-17092

CVE-2020-17092 corresponds to a Windows vulnerability in the Network Connections Service described as an Elevation of Privilege. The entry lists local access with low attack complexity and no user interaction as prerequisites, and indicates high impact across confidentiality, integrity, and avail...

CVE-2021-27072

Technical details (affected products/versions/patch information) are not publicly available in the provided documents; monitor for official advisories and updates for CVE-2021-27072.

CVE-2021-28353

Technical details for CVE-2021-28353 are not provided in the connected documents. Monitor for updates; no public details (impact, affected products, or remediation) are included in the supplied material.

CVE-2021-33780

Technical details for CVE-2021-33780 are not publicly available in the provided connected documents. No explicit affected product versions, root cause, or remediation are included. Monitor for updates from official advisories.

CVE-2021-41371

CVE-2021-41371 is a Windows RDP information-disclosure vulnerability affecting the RDP implementation on Windows client/server versions from Windows 7 through Windows 11 and Windows Server 2008–2019. Public reporting indicates the flaw enables an attacker with local access to view the RDP passwor...

CVE-2022-21900

Technical details for CVE-2022-21900 are not provided in the connected documents. The initial description is general; monitor for updates from official advisories (no exploit specifics or affected products confirmed here).

CVE-2022-21908

CVE-2022-21908 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, UI: NONE, and scope UNCHANGED; impact to Confidentiality, Integrity, and Availability is ...

CVE-2022-21928

This CVE affects the Windows Resilient File System (ReFS). The entry documents a Remote Code Execution vulnerability in ReFS, with CVSSv3.1 base score 6.4 (MEDIUM) and a physical attack vector, no user interaction, and high impact on confidentiality, integrity, and availability. The Connected doc...

CVE-2022-34689

CVE-2022-34689 is a Windows CryptoAPI spoofing vulnerability in which the certificate cache index key (MD5-based) can be exploited to masquerade as a legitimate entity. A PoC was released (HIVEPRO PoC report) detailing the attack, underscoring public proof-of-concept availability. The advisory co...

CVE-2022-35755

Technical details about CVE-2022-35755 (affected software, root cause, impact, or patch specifics) are not provided in the connected documents; monitor official CVE/NVD updates for details.

CVE-2022-37985

CVE-2022-37985 affects the Microsoft Windows Graphics Component and is classified as an information disclosure vulnerability. The NT its entry indicates the affected component is the Windows Graphics Component, with CVSS v3.1 base score 5.5 (Attack Vector: Local, Attack Complexity: Low, Privilege...

CVE-2022-41086

Technical details about CVE-2022-41086 (affected product/component/versions/root cause/impact/fix) are not publicly provided in the connected documents. Monitor for updates from official advisories or vendor advisories to obtain concrete exploitability, affected software, and remediation steps.

CVE-2023-21728

Technical details about CVE-2023-21728 are not publicly provided in the supplied documents. Please monitor for updates from official sources.

CVE-2023-21818

Technical details for CVE-2023-21818 are not publicly provided in the supplied documents. The available sources reference the CVE within larger Windows vulnerability lists but do not disclose affected products, root cause, impact, or fixes.