CVE-2021-28344

Technical details for CVE-2021-28344 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28355

Technical details for CVE-2021-28355 are not publicly available in the provided documents; monitor for updates.

CVE-2021-33786

Technical details about CVE-2021-33786 are not public in the provided documents; no concrete affected products, root cause, impact, or remediation are present. Monitor for updates as new disclosures may appear.

CVE-2021-36962

Technical details for CVE-2021-36962 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-38630

Technical details (affected product, root cause, impact, or fix) are not provided in the connected documents for CVE-2021-38630. Monitor official advisories (NVD, MSRC) for updates.

CVE-2022-21835

CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...

CVE-2022-29131

CVE-2022-29131 is a Windows LDAP remote-code-execution vulnerability. The connected OpenVAS/Microsoft KB entries identify this CVE among patched issues in KB5013943 (OS Build 22000.675 for Windows 11) and related updates, indicating a network-vector, LDAP-service issue that could allow RCE. The v...

CVE-2023-21748

CVE-2023-21748 is a Windows kernel local EoP vulnerability rooted in registry hive memory corruption (HKCU, volatile storage). The blog post chain explains an attack primitive using out-of-bounds hive cell indexes that map to _CMHIVE/_HHIVE structures via a 32-bit cell index, enabling precise der...

CVE-2023-36889

Technical details about CVE-2023-36889 are not publicly available in the provided documents. Monitor for updates from vendors and vulnerability feeds for affected products, impact, and remediation.

CVE-2023-36909

Technical details for CVE-2023-36909 are not publicly provided in the supplied documents. No affected products, root cause, or remediation details are present here. Monitor for updates.

CVE-2024-30010

CVE-2024-30010 refers to a Windows Hyper-V Remote Code Execution vulnerability. Connected OpenVAS entries identify CVE-2024-30010 under Windows Hyper-V with impact described as "Executing Random Code". The CVE is linked to Microsoft advisories, and the CVE description in the initial document is h...

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2024-30028

CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...

CVE-2025-21205

CVE-2025-21205 is a Windows Telephony Service vulnerability: a heap-based buffer overflow that allows a network-based attacker to achieve remote code execution. The CVSS details show a HIGH base score with NETWORK access, LOW attack complexity, and PR:N, UI:R. Successful exploitation would impact...

CVE-2025-26648

CVE-2025-26648 affects the Windows Kernel. Description: sensitive data stored in memory that is not properly locked can allow an authorized locally authenticated attacker to elevate privileges. The issue is listed under Windows Kernel vulnerabilities (CVE-2025-26648) with high impact (local Privi...

CVE-2026-23673

Technical details are not publicly provided in the supplied documents. Monitor for updates.

CVE-2026-59131

Summary: CVE-2026-59131 pertains to AMD Zen and is described as an information-disclosure vulnerability that can be exploited by an authorized, local attacker to disclose information. The available documents indicate a CVSS v3.1 base score of 5.6 (Medium) with LOCAL attack vector, HIGH confidenti...

CVE-2018-0753

CVE-2018-0753 describes a denial-of-service vulnerability in Windows IPSec where the system may stop responding due to how objects are handled in memory. Affected products explicitly include Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions 1511/1607/1703/1709, Windows Server 2...

CVE-2018-1040

The CVE-2018-1040 issue is a Denial of Service vulnerability in Windows’ Code Integrity Module hashing. Affected products include Windows 7, Windows 8.1/Server variants, Windows 10, and newer Server editions. The underlying cause is in the hashing routine of the Code Integrity Module, leading to ...

CVE-2018-8225

CVE-2018-8225 is a remote code execution vulnerability in Windows DNSAPI.dll that triggers when DNS responses are not handled correctly. Affected products span multiple Windows versions including Windows 7, Windows 8.1, Windows 10, and various Windows Server editions (2008, 2008 R2, 2012, 2012 R2...

CVE-2018-8348

CVE-2018-8348 is a Windows kernel information disclosure vulnerability caused by improper handling of memory objects. Affected products include Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016 and related Server variants. Impact is information disclosure (confidentiality) with lo...

CVE-2018-8411

CVE-2018-8411 is a local NTFS elevation-of-privilege vulnerability in Windows due to NTFS failing to properly check access rights. A local attacker could exploit this to gain elevated privileges on affected Windows editions (Windows 7, Windows 8.1, Windows 10, Windows Server 2008/2012/2016/2019 a...

CVE-2018-8481

CVE-2018-8481 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products listed include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions). The connected documents (EUVD/CNVD/NVD) describe th...

CVE-2019-0754

Technical details about CVE-2019-0754 are not publicly provided in the connected documents. The available sources reiterate the general Windows DoS description without specifics on affected components, versions, or fixes. Monitor for updates.

CVE-2019-1333

Technical details about CVE-2019-1333 (affected components, root cause, impact, or fixes) are not provided in the connected documents. The initial description references a Windows Remote Desktop Client RCE, but no public details are included here; monitor for updates.

CVE-2020-0941

CVE-2020-0941 is a Win32k Information Disclosure vulnerability in Windows. The root cause is improper handling of objects in memory within the win32k component, leading to kernel information disclosure. Exploitation requires local access: either an attacker must log on locally or persuade a local...

CVE-2020-1376

CVE-2020-1376 describes an elevation-of-privilege in Windows components, specifically fdSSDP.dll handling of memory and the fix addressing memory object handling in ssdpsrv.dll. The exploit requires a locally authenticated attacker to run a crafted application to achieve code execution with eleva...

CVE-2020-1529

CVE-2020-1529 is a Windows GDI elevation-of-privilege vulnerability where improper handling of in-memory GDI objects could allow a local attacker to run code in kernel mode. The initial description notes kernel-mode code execution and privilege elevation after logging on and running a crafted app...

CVE-2020-1557

CVE-2020-1557: A remote code execution vulnerability in the Windows Jet Database Engine occurs due to improper handling of objects in memory. An attacker could trigger code execution by persuading a user to open a specially crafted file. The update fixes the issue by correcting how the Jet Engine...

CVE-2021-28330

Technical details for CVE-2021-28330 are not publicly provided in the supplied documents. The sources reference the vulnerability by ID and a generic description; monitor for updates.

CVE-2021-28335

CVE-2021-28335 corresponds to a remote code execution vulnerability in the Windows RPC Runtime. Affected product scope is Microsoft Windows/Windows Server; root cause is a vulnerability in RPC Runtime that enables remote code execution with network access. CVSSv3.1 base score is 8.8 (HIGH), with ...

CVE-2021-34525

CVE-2021-34525 is a Windows DNS Server Remote Code Execution vulnerability. Multiple connected documents consistently identify DNS Server as the affected component and classify the issue as a remote-code-execution flaw in Windows DNS services. The CVSS details in the primary record show a CVSS‑3....

CVE-2021-36972

CVE-2021-36972 corresponds to a Windows SMB Information Disclosure Vulnerability. The connected records provide a local attack vector (LOCAL) with LOW to MEDIUM overall severity depending on scoring scheme: CVSS v2 base score 2.1 (LOW) and CVSS v3.1 base score 5.5 (MEDIUM) with confidentiality im...

CVE-2022-21864

Technical details for CVE-2022-21864 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2022-21895

Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.

CVE-2023-21760

Technical details about CVE-2023-21760 are not publicly provided in the supplied connected documents. The references show Windows KB security updates but do not specify affected products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2023-24909

CNVD-2023-30863 describes CVE-2023-24909 as a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The CNVD entry states the vulnerability exists and affects the printer drivers from Microsoft, but it does not provide detailed root cause, affected versions, o...

CVE-2023-24931

Technical details for CVE-2023-24931 are not provided in the connected documents. Public information about affected products, root cause, impact, and fixes is not present here; monitor for official advisories and updates from vendors and CERTs.

CVE-2023-28269

CVE-2023-28269 describes a Security Feature Bypass in Windows Boot Manager. Affected: Windows Boot Manager. Impact: confidentiality, integrity, and availability rated high. Exploitation characteristics (per NVD): physical access required (attack vector Physical), low attack complexity, no privile...

CVE-2024-38074

CVE-2024-38074 is described as a Remote Code Execution vulnerability in the Windows Remote Desktop Licensing Service. The provided CVSS 3.1 metrics indicate a network-accessible, no-authored-exploitation vector with HIGH impact to confidentiality, integrity, and availability (CVSS: 3.1: AV:N/AC:L...

CVE-2024-43520

CVE-2024-43520 is a Windows Kernel Denial-of-Service vulnerability. The initial records classify it as a Windows kernel issue affecting availability, with a CVSS v3.1 base score of 5.0 (LOCAL, LOW privileges, LOW attack complexity, UI: REQUIRED, S: U, C/N/I with A:H). Connected sources indicate t...

CVE-2025-25004

CVE-2025-25004 affects Microsoft PowerShell. The connected documents corroborate a local privilege escalation vulnerability due to improper access control, enabling an authorized attacker to obtain elevated privileges on the host. The advisory entries (including NCSC-2025-0313) assign CVSS v3.1/3...

CVE-2016-7237

CVE-2016-7237 affects Local Security Authority Subsystem Service (LSASS) in Windows between Vista SP2 and Windows Server 2016. The vulnerability allows remote authenticated users to cause a denial of service (system hang) by sending a crafted request, via the LSASS handling path (notably connecte...

CVE-2018-8394

CVE-2018-8394 is an information disclosure vulnerability in the Windows GDI component. The provided documents state that the GDI memory contents can be improperly disclosed, affecting multiple Windows versions (e.g., Windows 7, Windows 10, various Windows Server editions). The Connected documents...

CVE-2019-0663

CVE-2019-0663 concerns a Windows kernel information-disclosure vulnerability. The Windows kernel improperly initializes objects in memory, enabling an authenticated, local attacker to obtain sensitive information by running a specially crafted application. Affects the Windows kernel (memory-objec...

CVE-2019-0774

Technical details for CVE-2019-0774 are not provided in the connected documents. The sources describe a Windows GDI information disclosure vulnerability related to these CVEs but do not specify affected products, versions, or a fix for 0774. Monitor for updates.

CVE-2019-1419

CVE-2019-1419 is a remote code execution vulnerability in Microsoft Windows affecting the Windows Adobe Type Manager Library, caused by improper handling of specially crafted OpenType fonts. The issue is described consistently across the NVD entry and Red Hat CVE records (RH:CVE-2019-1419/CVE-201...

CVE-2019-1467

CVE-2019-1467 corresponds to a Windows GDI Information Disclosure vulnerability. The connected CNVD entries describe an information leakage in the Windows GDI component, where memory contents may be disclosed by an attacker who tricks a user into opening content or visiting a page. These sources ...

CVE-2020-0644

Technical details for CVE-2020-0644 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2020-1377

The connected materials describe CVE-2020-1377 within a broader Windows Registry/hive memory‑corruption research stream. They detail how hive memory corruption can be exploited locally via controlled regf data, use‑after‑free in security descriptors, and out‑of‑bounds cell indexes to pivot into k...