CVE-2020-1554

CVE-2020-1554 affects Windows Media Foundation memory handling. The vulnerability is a memory corruption issue in Windows Media Foundation when it improperly handles objects in memory, potentially allowing an attacker to install programs, view/change/delete data, or create accounts with full righ...

CVE-2020-1587

CVE-2020-1587 : Elevation of privilege in the Windows Ancillary Function Driver for WinSock caused by improper memory handling. Exploitation requires an initial execution on the victim, followed by running a crafted app to elevate privileges. Microsoft’s security update fixes the memory handling ...

CVE-2021-1668

CVE-2021-1668 : Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-28336

The provided documents reference CVE-2021-28336 as a Windows RPC Runtime Remote Code Execution vulnerability. The CNVD entry describes a remote code execution flaw in the RPC Runtime affecting Microsoft Windows/Windows Server. Nessus/OpenVAS plugins in the connected set list CVE-2021-28336 among ...

CVE-2021-28346

Technical details about CVE-2021-28346 are not provided in the supplied documents. Monitor for updates from official advisories; no affected product/version/root-cause/mitigation details are present here.

CVE-2021-31188

CVE-2021-31188 is a Windows Graphics Component Elevation of Privilege vulnerability. The connected documents corroborate that this CVE is addressed by May 2021 Windows security updates (e.g., KB5003173, KB5003208, KB5003203 and related servicing patches) as part of updates to Windows App Platform...

CVE-2021-33745

CVE-2021-33745 is documented as a Windows DNS Server Denial of Service vulnerability. Connected CNVD-2021-76469 explicitly references a Windows Server DNS Server DoS issue, confirming the target as Windows Server DNS Server. The NVD entry provides CVSS data (v3.1 base score 6.5, Network vector, L...

CVE-2021-33765

Technical details about CVE-2021-33765 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2021-33783

CVE-2021-33783 is a Windows SMB Information Disclosure Vulnerability affecting Microsoft Windows/Windows Server SMB behavior. The primary sources classify it as a network-exposed SMB issue with information disclosure impact (confidentiality high per CVSS 3.1, I:N, A:N) and partial information exp...

CVE-2021-41331

CVE-2021-41331 corresponds to a Windows Media Audio Decoder Remote Code Execution Vulnerability. Public documents (NVD/NVD-derived entries) describe impact as remote code execution with high-severity ratings: CVSS 3.1 base score 7.8 (LOCAL ATTACK VECTOR, PRIVILEGES NONE, UI REQUIRED; CONF/I/H = H...

CVE-2021-41366

CVE-2021-41366 : Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege. The NVD entry reports a high-severity (CVSS 3.1 base 7.8) vulnerability with a LOCAL attack vector, requiring LOW privileges and NO user interaction, leading to HIGH impact on confidentiality, integri...

CVE-2022-26790

Technical details for CVE-2022-26790 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2022-26798

Technical details about CVE-2022-26798 are not publicly available in the provided connected documents. The initial description notes a Windows Print Spooler Elevation of Privilege vulnerability, but there are no specific vendor/product/version/root-cause/fix details in the supplied materials. Mon...

CVE-2022-30213

Technical details about CVE-2022-30213, including affected product/version, root cause, and exploit information, are not publicly provided in the connected documents. Monitor for updates as new information becomes available.

CVE-2022-41095

Technical details about CVE-2022-41095 are not present in the provided connected documents. The OpenVAS entries reference the CVE as part of Windows updates (KB5019966/KB5019980/KB5020003), but do not expose affected components, exploit vectors, or fixes beyond association.

CVE-2023-21688

Technical details about CVE-2023-21688 are not publicly provided in the supplied documents. No concrete information on affected products, root cause, or remediation is available here. Monitor for updates from official sources.

CVE-2023-24928

CVE-2023-24928 relates to a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. The issue affects the PostScript/PCL6 printer driver components, enabling an attacker to remotely execute code by crafting data sent to a printer shared resource. The available c...

CVE-2023-38172

Technical details about CVE-2023-38172 are not present in the provided connected documents. The MSMQ DoS vulnerability is listed, but no affected versions, root cause, exploit information, or remediation are included. Monitor for updates.

CVE-2025-54100

CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...

CVE-2026-27913

Technical details of CVE-2026-27913 are not provided in the supplied documents. Monitor for updates from Microsoft and CVE records for affected components, impact, and mitigations.

CVE-2026-50507

CVE-2026-50507 concerns a Protection mechanism failure in Windows BitLocker that allows an unauthorized attacker to bypass a security feature via a physical attack . The connected documents corroborate a vulnerability affecting Windows BitLocker, with a CVSS v3.1 base score of 6.8 (Medium). The a...

CVE-2013-1281

The CVE-2013-1281 entry describes a NULL pointer dereference DoS in Microsoft Windows NFS Server. A remote attacker can crash the target by renaming a file/folder on a read-only NFS share, affecting Windows Server 2008 R2, R2 SP1, and Server 2012. Root cause: incorrect handling of a non-permitted...

CVE-2017-0182

The connected Nessus plugin confirms a Hyper-V Denial of Service issue tied to CVE-2017-0182 family: a DoS affecting Microsoft Windows Hyper-V when input from a privileged guest OS is not properly validated, potentially crashing the host. Affected platforms include Windows client/server variants ...

CVE-2017-0269

CVE-2017-0269 is a Windows SMBv1 denial-of-service vulnerability: the SMBv1 server may stop responding when it receives specially crafted requests. The issue is tied to handling of SMBv1 traffic (no explicit exploit details in the provided docs). Affected context is Windows SMBv1 processing; pote...

CVE-2018-0898

Technical details about CVE-2018-0898 are not publicly available in the provided connected documents. Monitor for updates; no explicit affected products, root cause, impact, or remediation are detailed here.

CVE-2018-0900

Technical details are not publicly available in the provided connected documents; monitor for updates.

CVE-2018-0976

The CVE-2018-0976 entry describes a denial-of-service vulnerability in Windows RDP that can be triggered by specially crafted RDP requests, reportedly affecting Windows 7, Windows Server 2008/2012 families, Windows 8.1, and Windows 10/Server 2016+ clients. The connected documents do not provide c...

CVE-2018-8167

CVE-2018-8167 is a Windows CLFS driver elevation of privilege vulnerability. The issue arises when the Windows Common Log File System (CLFS) driver improperly handles objects in memory. Affected products/versions include Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10...

CVE-2019-0603

CVE-2019-0603 impacts Windows Deployment Services TFTP Server. The vulnerability stems from improper handling of objects in memory within WDSTFTP, allowing a remote attacker to craft a request that executes arbitrary code with elevated privileges. The available connected documents confirm this re...

CVE-2019-0718

Microsoft Hyper-V Denial of Service vulnerability CVE-2019-0718 arises when the Hyper-V Network Switch fails to validate input from a privileged user inside a guest VM, allowing a crafted application running on the guest to crash the host server. The vulnerability affects the Hyper-V Network Swit...

CVE-2019-1146

CVE-2019-1146 concerns a remote code execution that arises when the Windows Jet Database Engine mismanages in‑memory objects. An attacker could exploit this by convincing a user to open a specially crafted file, enabling arbitrary code on the system. The vulnerability is addressed by Microsoft in...

CVE-2019-1347

Technical details about CVE-2019-1347 are not provided in the connected documents. Public details (affected products, root cause, impact, or fixes) are not disclosed here. Monitor for updates and refer to the initial CVE entry for any forthcoming specifics.

CVE-2020-0623

Technical details (affected products, versions, root cause, impact or fixes) for CVE-2020-0623 are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-0681

CVE-2020-0681 is a remote code execution vulnerability in the Windows Remote Desktop Client. The issue occurs when a user connects to a malicious Remote Desktop server, allowing an attacker to execute arbitrary code on the client machine. The vulnerability is associated with the Remote Desktop Cl...

CVE-2020-0731

Technical details for CVE-2020-0731 are not publicly provided in the connected documents; affected products, root cause, and remediation cannot be specified from current sources. Monitor ENISA EUVD entries and the MSRC advisory for updates.

CVE-2020-0945

CVE-2020-0945 is a Media Foundation information-disclosure vulnerability in Microsoft Windows media handling where memory objects are not properly managed, potentially exposing partial confidentiality. The entry provides a CVSS score (4.3/5.0 base, MEDIUM) and vectors for both CVSS v2 and v3, but...

CVE-2020-1379

Technical details about CVE-2020-1379 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2021-1655

Technical details about CVE-2021-1655 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories to obtain affected products, impact, vectors, and fixes.

CVE-2021-28327

Technical details for CVE-2021-28327 are not publicly available in the provided documents. No affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2021-28356

Public technical details for CVE-2021-28356 are not provided in the connected documents; sources reference the vulnerability name but do not specify affected products, root cause, impact, or fixes.

CVE-2021-34476

CVE-2021-34476 : Bowser.sys Denial of Service vulnerability. Connected data provide CVSS v3.1 metrics: NETWORK exploit, LOW attack complexity, NONE privileges, NONE user interaction, and HIGH availability impact (base score 7.5). No explicit remediation or patch details are provided in the suppli...

CVE-2021-34507

Technical details, affected products, vulnerable components, and remediation are not provided in the connected documents. Monitor for updates from official sources to obtain concrete technical information about CVE-2021-34507.

CVE-2021-36959

Technical details for CVE-2021-36959 are not publicly available in the provided documents. Monitor for updates from connected sources; existing entries reference the vulnerability but do not specify affected products, root cause, impact, or fixes.

CVE-2021-38663

CVE-2021-38663 concerns a Windows exFAT File System Information Disclosure vulnerability. The entry lists impact as PARTIAL confidentiality loss (CVSS2) with LOCAL access and no authentication, and HIGH confidentiality impact (CVSS3) with LOCAL access, no exploitation details provided. The connec...

CVE-2021-41377

Technical details about CVE-2021-41377 are not publicly provided in the supplied documents. No affected products/versions, root cause, or fixes are disclosed here. Monitor for updates from official advisories.

CVE-2022-21862

Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-21875

CVE-2022-21875 is documented as a Windows Storage Elevation of Privilege vulnerability. The NVD entry lists LOCAL attack vector, LOW attack complexity, and no user interaction required, with high impact on confidentiality, integrity, and availability. The CVE is also included in multiple OpenVAS/...

CVE-2022-24504

Technical details for CVE-2022-24504 are not publicly provided in the supplied documents. Monitor for updates in the connected sources for affected products, impact specifics, and remediation information.

CVE-2022-34690

Technical details about CVE-2022-34690 are not publicly provided in the supplied documents; no explicit affected products, exploit information, or fixes are described. Monitor for updates.

CVE-2022-44667

Technical details are not publicly available in the provided documents. The supplied items only label CVE-2022-44667 as a Windows Media Remote Code Execution vulnerability; no specific affected product/version/root cause/fix is included. Monitor for updates.