CVE-2023-21728

Technical details about CVE-2023-21728 are not publicly provided in the supplied documents. Please monitor for updates from official sources.

CVE-2023-21818

Technical details for CVE-2023-21818 are not publicly provided in the supplied documents. The available sources reference the CVE within larger Windows vulnerability lists but do not disclose affected products, root cause, impact, or fixes.

CVE-2023-24908

Technical details for CVE-2023-24908 are not publicly available in the provided documents. Monitor for updates to obtain affected products, root cause, impact, and fixes.

CVE-2023-24913

CNVD-2023-30861 describes CVE-2023-24913 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Affected components are Microsoft PostScript Printer Driver and Microsoft PCL6 Class Printer Driver, with exploitation described as remote code execution by an ...

CVE-2023-24925

CVE-2023-24925 is a Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with a network attack vector, low attack complexity, and no user interaction required. The impact is described as high across confidentiality, integri...

CVE-2023-29364

Technical details for CVE-2023-29364 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records.

CVE-2024-30050

CVE-2024-30050 is a Windows Mark of the Web security feature bypass vulnerability. Public sources label it as a security bypass issue in MOTW, with a CVSS v3.1 base score of 5.4 (Network, Low complexity, User interaction required; I and A impacts: I = Low, A = Low). The condition allows bypass of...

CVE-2024-30084

Technical details (affected product/versions/root cause/impact) for CVE-2024-30084 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-38117

CVE-2024-38117 affects the Windows NTFS component and is labeled as an elevation-of-privilege vulnerability with the impact “Obtaining Increased Rights” and a CVSS v3.1 base score of 7.8 (High). The connected documents provide the impact and the component but do not disclose the exact root cause ...

CVE-2024-38132

Technical details about CVE-2024-38132 are not publicly provided in the supplied connected documents. The NAT DoS entry is listed, but no affected product/version, root cause, or remediation is described. Monitor for updates.

CVE-2025-21274

CVE-2025-21274 corresponds to a Windows Event Tracing Denial of Service vulnerability. The NVD entry rates impact as Denial of Service with a CVSSv3.1 base score of 5.5 (Local, Low UI, privileges required: Low, Availability impact: High). Connected sources indicate this vulnerability affects Wind...

CVE-2025-21419

CVE-2025-21419 is a Windows Setup cleanup vulnerability that enables local elevation of privilege. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) indicates an attacker with low privileges and local access can achieve high integrity and availability impact, without user interaction. The...

CVE-2025-29810

CVE-2025-29810 corresponds to an improper access control in Active Directory Domain Services that can allow an authenticated attacker to elevate privileges over the network. The NCSC advisory groups CVE-2025-29810 under Windows Active Directory Domain Services with an impact described as ‘Obtain ...

CVE-2026-42836

CVE-2026-42836: A race condition due to improper synchronization in the Windows Function Discovery Service (fdwsd.dll) enables a locally authenticated attacker to escalate privileges. The issue is described as a concurrency problem with a shared resource. Affected component: Function Discovery Se...

CVE-2017-0038

The connected material describes a Windows IO Manager bug class (two-step: kernel-mode Initiator sets INPC and IFAC without OFAC; Receiver uses RequestorMode) that can bypass security checks and enable privilege escalation. It clarifies that INPC disables MemAC and SecAC, while OFAC can re-enable...

CVE-2017-0073

Technical details for CVE-2017-0073 are not publicly available in the provided connected documents. The records summarize the vulnerability, but no product/version specifics or exploit information are shown. Monitor for updates from official sources.

CVE-2018-8446

CVE-2018-8446 is an information disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 (and Windows Server 2016/Servers). The issue is described as a lo...

CVE-2019-0580

The CVE-2019-0580 entry describes a remote code execution flaw in the Windows Jet Database Engine caused by improper memory-object handling. It affects Windows client/server platforms (Windows 7, 8.1, 10 and various Server editions) and is exploitable when a user opens a specially crafted file th...

CVE-2019-0597

Technical details about CVE-2019-0597 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-0619

The connected advisories corroborate CVE-2019-0619 as a Windows Graphic Device Interface (GDI) information disclosure vulnerability. It arises from improper handling of objects in memory in the Graphics Device Interface component, enabling remote attackers to obtain sensitive information. The adv...

CVE-2019-0793

Technical details about CVE-2019-0793 are not publicly available in the provided connected documents; monitor for updates.

CVE-2019-0838

Technical details for CVE-2019-0838 are not publicly provided in the supplied documents; monitor for updates from official advisories.

CVE-2019-0889

CVE-2019-0889 : Connected CNVD entries describe a buffer/heap overflow vulnerability in the Windows Jet Database Engine. The issue arises when memory operations do not properly validate data boundaries, enabling overflow conditions. The CNVDs indicate a network-origin misuse could trigger in-memo...

CVE-2019-0900

Summary: The connected CNVD entries describe a set of buffer overflow vulnerabilities in Microsoft Windows Jet Database Engine. They state that the Jet Database Engine can experience in-memory boundary violations leading to incorrect reads/writes and potential heap/buffer overflows when processin...

CVE-2019-1102

CVE-2019-1102 affects the Windows Graphics Device Interface (GDI+) and arises from how GDI+ handles memory objects, enabling remote code execution. The Red Hat advisory reiterates the same description. The CVE is rated high risk (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) with network attack vector and...

CVE-2020-0626

Technical details for CVE-2020-0626 are not provided in the connected documents. The Initial Description offers only high-level info. Monitor official advisories for updates on affected products/versions and any remediations or mitigations.

CVE-2020-1477

CVE-2020-1477 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. An attacker could exploit this by convincing a user to open a specially crafted document or visit a malicious webpage, potentially allowing the attacker to install prog...

CVE-2020-16935

The CVE-2020-16935 entry describes a Windows elevation-of-privilege flaw caused by improper handling of COM object creation. The vulnerability could allow an attacker who has logged on to run arbitrary code with elevated privileges by executing a specially crafted application, with exploitation e...

CVE-2021-28337

Technical details for CVE-2021-28337 are not publicly available in the provided documents. Monitor for updates from vendor advisories and vulnerability databases.

CVE-2021-31973

CVE-2021-31973 is a Windows GPSVC Elevation of Privilege vulnerability. Affected component: GPSVC. Root cause not explicitly stated in the provided documents. CVSS v3.1 base score 7.8 (HIGH): Local attack, low privileges required, no user interaction, with high impact to confidentiality, integrit...

CVE-2021-41345

Technical details for CVE-2021-41345 are not publicly available in the provided connected documents. Monitor for updates from official advisories.

CVE-2022-21905

CVE-2022-21905 technical details are not publicly available in the provided documents. No affected products, root cause, impact, or fixes are specified here. Monitor for updated disclosures.

CVE-2022-21985

CVE-2022-21985 is a Windows vulnerability described as an Information Disclosure vulnerability in the Windows Remote Access Connection Manager. The CVSS details show a local attack vector with low complexity (CVSSv3.1 base score 5.5, MEDIUM severity), where confidentiality is impacted. The descri...

CVE-2022-23299

Technical details about CVE-2022-23299 (affected product, root cause, impact, fix) are not publicly available in the provided documents. Monitor for updates as new information may be released.

CVE-2022-34720

CVE-2022-34720 is a Windows IKE Extension Denial of Service vulnerability. The provided data notes a network-based attack vector with low complexity, no privileges required, and a HIGH availability impact (CVSS v3.1 base score 7.5). No exploit details or remediation/patch information is provided ...

CVE-2022-34724

Technical details about CVE-2022-34724 are not publicly provided in the connected documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates from official advisories and vendors.

CVE-2023-24907

CVE-2023-24907 describes a remote code execution vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver . The CVE entry (as per NVD) has a CVSS 3.1 base score of 8.8 (High) with vectors: AV:N, AC:L, PR:L, UI:N, S:U, C:H, I:H, A:H, indicating network attack with no user interactio...

CVE-2023-28249

CVE-2023-28249 is a Windows Boot Manager security feature bypass vulnerability. The connected sources confirm the affected component as Windows Boot Manager and classify the issue as a bypass of security features with high potential impact on confidentiality, integrity, and availability; specific...

CVE-2023-32017

CVE-2023-32017 concerns the Microsoft PostScript Printer Driver and allows Remote Code Execution tied to a driver component. The IOCs/impact in the provided materials indicate a LOCAL attack vector with no user interaction, and confidentiality, integrity, and availability impacts rated HIGH. No e...

CVE-2023-35387

CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...

CVE-2024-30020

CVE-2024-30020 corresponds to a Remote Code Execution vulnerability in Windows Cryptographic Services. Affected: Windows Cryptographic Services component; vulnerability type is RCE. From the CVE entry, the CVSS v3.1 base score is 8.1 (High) with Network attack vector, high attack complexity, no p...

CVE-2024-30022

CVE-2024-30022 pertains to the Windows RRAS component and is listed in the ENISA/NCSC compilation with a CVSSv3.1 base score of 7.5 (high). The adverse impact is remote code execution with network access, requiring user interaction and no privileges. Connected sources explicitly associate CVE-202...

CVE-2024-30081

Technical details for CVE-2024-30081 are not provided in the supplied documents. The connected Microsoft KB updates reference unrelated issues (RADIUS, BitLocker, LNK policy) and do not disclose affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2024-43455

CVE-2024-43455 is a Windows Remote Desktop Licensing Service spoofing vulnerability affecting the Windows Remote Desktop Licensing Service. The connected sources indicate the vulnerability allows pretending to be another user, with high impact in authentication-related scenarios. The Windows ecos...

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

CVE-2025-26652

CVE-2025-26652 describes a Denial-of-Service vulnerability in Windows Standards-Based Storage Management Service caused by uncontrolled resource consumption, allowing an unauthenticated, network-originating attacker to deny service. Affected are Windows systems where this storage service is prese...

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

CVE-2026-62790

CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...

CVE-2018-0842

CVE-2018-0842 : Windows kernel elevation-of-privilege vulnerability affecting multiple Windows client and server editions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, 1703–1709 and 1709 variants, Windows 10 releases). The issue arises from how memory objects ...

CVE-2018-8398

The connected CPAI-2019-0228 advisory describes a related information-disclosure vulnerability in the Microsoft Graphics Component due to improper in-memory handling of JPEG decoding. While CVE-2018-8398 (Windows GDI Information Disclosure) is the primary CVE here, the document confirms a memory-...