CVE-2019-0635

Technical details (affected components, root cause, versions, and fixes) are not publicly available in the provided documents. Monitor for updates. CVE-2019-0635 concerns information disclosure in Windows Hyper-V where input from a guest OS may not be properly validated.

CVE-2019-0772

Technical details for CVE-2019-0772 are not publicly available in the provided documents. Monitor for updates; connected data does not include affected products, versions, impact, or remediation specifics.

CVE-2020-0655

CVE-2020-0655 corresponds to a Remote Desktop Services vulnerability where an authenticated attacker can trigger remote code execution via clipboard redirection. The connected KB entries confirm the CVE is among multiple Microsoft Windows vulnerabilities and highlight the affected component as Re...

CVE-2020-0665

CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...

CVE-2020-0729

CVE-2020-0729 is a Windows remote code execution vulnerability that can be triggered when a user processes a .LNK (shortcut) file. Exploitation could run arbitrary code with the same privileges as the logged-in user. The connected documents confirm this CVE is part of Windows update advisories an...

CVE-2020-1239

CVE-2020-1239 is a memory corruption vulnerability in Windows Media Foundation caused by improper handling of objects in memory. The CVSS v3.1 base score is 8.8 (HIGH): network attack vector, no privileges required, UI required, and the impact is high on confidentiality, integrity, and availabili...

CVE-2020-1247

Technical details about CVE-2020-1247 are not provided in the connected documents. Public details (affected product/versions, root cause, impact, fix) are not disclosed here. Monitor official advisories and CVE databases for updates.

CVE-2020-1562

Microsoft Graphics Components remote code execution vulnerability CVE-2020-1562 exists due to how objects are handled in memory. An attacker could execute arbitrary code if a user opens a specially crafted file. The vulnerability is addressed by a security update that fixes the memory handling of...

CVE-2020-17098

CVE-2020-17098 maps to a Windows GDI+ Information Disclosure vulnerability. Connected documents reference this ID across multiple OpenVAS entries and NVD/NVD-derived records, with CVSS details indicating local access and varying impact on confidentiality (high in CVSS 3.1 vectors, partial in some...

CVE-2021-1722

CVE-2021-1722 is a Windows Fax Service Remote Code Execution vulnerability. Affects Windows Fax Service through a network attack with no authentication; CVSS v3.1 base score up to 9.8 (C:H/I:H/A:H; AV:N; UI:N; PR:N; S:U). OpenVAS/NVD entries corroborate network-based RCE with high impact to confi...

CVE-2021-28329

Technical details for CVE-2021-28329 are not provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and remediation.

CVE-2021-38636

The CVE-2021-38636 entry refers to a Windows Redirected Drive Buffering SubSystem Driver Information Disclosure vulnerability. Affected software is Windows; the vulnerability affects the Redirected Drive Buffering SubSystem Driver (component/driver) and enables partial confidentiality impact via ...

CVE-2021-38665

CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...

CVE-2021-40467

CVE-2021-40467 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. According to the records, it enables a local attacker to escalate privileges via the CLFS component, with high impact on confidentiality, integrity, and availability (vector: LOCAL, low attack complexi...

CVE-2021-41342

Technical details for CVE-2021-41342 are not publicly available in the provided documents; the materials reference the vulnerability name but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2021-42275

Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.

CVE-2022-26819

Technical details about CVE-2022-26819 are not provided in the supplied documents; no affected products, exploit info, or remediation are specified here. Monitor for updates.

CVE-2023-24863

The CVE-2023-24863 entry concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver described as an Information Disclosure Vulnerability . The public data provided does not specify the exact root cause details, vulnerable file/function, affected product versions, or the ex...

CVE-2023-28271

CVE-2023-28271 is discussed within registry and KTM-transaction logging context in the connected documents, indicating a kernel memory-related information disclosure linked to KTM logs and registry transaction handling. The material notes exposure of uninitialized kernel data and pointers to KTM ...

CVE-2024-30011

CVE-2024-30011 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry lists CVSS v3.1 base score 6.5 (MEDIUM), with Network attackVector, Low attackComplexity, Low privilegesRequired, No user interaction, and Availability impact HIGH. CIRCL reporting also references CVE-2024-30011. T...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2025-21208

CVE-2025-21208 is a Windows RRAS Remote Code Execution vulnerability. The NVD entry confirms the issue as a network‑vector RCE with high impact (CVSSv3.1: 8.8, C/H/I/A = high; AV:N, AC:L, PR:N, UI:R, S:U). The vulnerability is tied to Windows RRAS and has a documented CVE entry; exploitation/avai...

CVE-2025-24045

CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...

CVE-2026-25177

CVE-2026-25177 is an elevation-of-privilege vulnerability in Active Directory Domain Services. The CVE affects AD DS and permits an authorized attacker to elevate privileges over the network (CVSS v3.1: 8.8, Network, Privileges Required: Low, User Interaction: None, Confidentiality/Integrity/Avai...

CVE-2026-59122

CVE-2026-59122 describes a race condition in Windows Telephony Service caused by concurrent access to a shared resource with improper synchronization. This allows an authorized attacker with local access and low privileges to elevate privileges (CVSS v3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H; bas...

CVE-2016-3223

CVE-2016-3223 relates to a Group Policy Elevation of Privilege vulnerability in Windows where LDAP authentication is mishandled, enabling a MiTM attacker to modify domain controller–to–client Group Policy update data and potentially escalate privileges. The issue affects multiple Windows editions...

CVE-2018-8271

CVE-2018-8271 is an information-disclosure vulnerability in Windows where the bowser.sys kernel‑mode driver mishandles objects in memory. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Window...

CVE-2018-8392

CVE-2018-8392 is a heap-based buffer overflow in the Microsoft Jet Database Engine. The issue arises from improper handling of in-memory objects, enabling a remote, unauthenticated attacker to exploit by enticing a user to open a specially crafted Excel file, potentially leading to remote code ex...

CVE-2019-0602

The connected advisories describe a GDI information disclosure vulnerability in Microsoft Windows (CVE-2019-0602 family). Affected component: Graphics Device Interface (GDI). Root cause stated: improper handling of objects in memory leading to memory disclosure. Impact: information disclosure; (n...

CVE-2019-0662

CVE-2019-0662 is a remote code execution vulnerability in Microsoft Windows GDI/GDI+. The issue arises from how GDI handles objects in memory, enabling a remote attacker to execute arbitrary code on affected systems. Connected advisories corroborate a GDI-based RCE family (distinct from CVE-2019-...

CVE-2020-1488

Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.

CVE-2021-28341

Technical details for CVE-2021-28341 are not publicly provided in the supplied documents. Related OpenVAS/Nessus plugins reference the CVE list but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2021-34499

Technical details about CVE-2021-34499 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-24485

Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.

CVE-2022-30155

Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.

CVE-2022-37956

CVE-2022-37956 is a Windows kernel elevation-of-privilege vulnerability involving local, memory-corruption in the registry hive path. The CVE is described as a Windows Kernel Elevation of Privilege Vulnerability with a CVSSv3.1 base score of 7.8 (HIGH); attack vector LOCAL, complexity LOW, privil...

CVE-2022-37984

CVE-2022-37984 is a Windows WLAN Service privilege elevation vulnerability. Public sources describe it as an improper privilege assignment in the Windows WLAN Service that allows a local attacker to elevate to higher privileges (impact: increased entitlements). The CNVD/ENISA entries corroborate ...

CVE-2022-41045

Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.

CVE-2023-21558

Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-23401

Technical details (affected components, root cause, impact, and remediation) for CVE-2023-23401 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2023-35330

CVE-2023-35330 is a Windows vulnerability described as a Windows Extended Negotiation Denial of Service. According to the provided data, the CVSS 3.1 base score is 7.5 (High), with network attack vector, low parallel complexity, no privileges required, no user interaction, and impact limited to A...

CVE-2024-30087

Technical details are not provided in the connected documents. CVE-2024-30087 is a Win32k Elevation of Privilege vulnerability with CVSS 3.1 base score 7.8, vector LOCAL, exploit complexity LOW, privileges required LOW, user interaction NONE.

CVE-2024-37972

Technical details for CVE-2024-37972 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are disclosed here. Monitor for updates from authoritative sources.

CVE-2024-49122

CVE-2024-49122 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The entry notes a network-exposed base score of 8.1 (High) with no user interaction and total impact, and the MSMQ component is affected. Connected documents corroborate an RCE classification for MSMQ with u...

CVE-2025-47981

CVE-2025-47981 is a heap-based buffer overflow in Windows SPNEGO Extended Negotiation that enables pre-auth remote code execution over the network. It affects Windows clients (e.g., Windows 10 1607+) and Windows Server platforms. The initial doc provides a 9.8 CVSSv3.1 score (NETWORK, NONE/LOW/NO...

CVE-2014-6321

CVE-2014-6321 is a Microsoft Schannel remote code execution vulnerability affecting Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7 SP1, 8/8.1, Server 2012 (Gold/R2) and Windows RT/8.1. The issue arises from improper processing of crafted packets in Schannel, enabling remote cod...

CVE-2015-0009

CVE-2015-0009 is the Group Policy Security Feature Bypass vulnerability affecting multiple Windows platforms (Windows Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, Windows 7, 8/8.1, Server 2012) where a man-in-the-middle attacker can spoof domain-controller responses to disable a signing requir...

CVE-2015-2464

CVE-2015-2463 and CVE-2015-2464 describe a TrueType font parsing vulnerability that allows remote code execution. Affected products include Windows Vista SP2, Windows Server 2008 SP2/R2 SP1, Windows 7 SP1, Windows 8/8.1, Windows Server 2012 Gold/R2, Windows RT 8.1, Office 2007 SP3 and 2010 SP2, L...

CVE-2017-0211

CVE-2017-0211 is a Windows OLE/COM elevation-of-privilege issue where a Structured Storage object can be exposed across a security boundary via a property bag, enabling creation of a remote COM object in the server process and potential privilege escalation. Google Project Zero details show how I...

CVE-2018-0896

CVE-2018-0896 affects the Windows kernel across multiple Windows client/server versions (Windows 7 SP1, Windows 8.1/RT 8.1, Windows 10 versions 1511–1709, Windows Server 2008 SP2/R2 SP1, 2012/R2, 2016, and 1709) where memory address handling allows an information disclosure vulnerability. Root ca...