CVE-2022-22043

CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...

CVE-2022-35748

Technical details about CVE-2022-35748 are not provided in the supplied documents; no specific affected product/version/fix is disclosed here. Monitor for updates as more information becomes public.

CVE-2022-35752

Technical details about CVE-2022-35752 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2022-41056

Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.

CVE-2022-41090

Technical details for CVE-2022-41090 (Windows PPTP DoS) are not provided in the connected documents. No affected products, versions, or fixes are listed here. Monitor official advisories for updates and remediation guidance.

CVE-2023-21686

Technical details about CVE-2023-21686 are not publicly provided in the supplied documents. No affected product/version/root cause or remediation are described here. Monitor for updates from official sources.

CVE-2023-29369

Technical details about CVE-2023-29369 are not provided in the supplied documents; no affected products, root cause, or remediation are disclosed here. Monitor for updates from official advisories and connected sources as they become available.

CVE-2024-30077

Technical details are not provided in the supplied documents; no public specifics are included here. Monitor for updates from official advisories.

CVE-2024-30083

CVE-2024-30083 affects Windows Standards-Based Storage Management Service and is rated CVSSv3.1 7.5 (Network, no privileges, no user interaction) with Availability impact. Connected sources confirm this CVE is a Windows DoS vulnerability in the Storage Management Service and align on network-base...

CVE-2025-27742

CVE-2025-27742 corresponds to an out-of-bounds read in Windows NTFS that can allow a local attacker to disclose information. The NVD entry lists a CVSS v3.1 base score of 5.5 (LOCAL, LOW attack complexity, NONE privileges, UI REQUIRED) with High confidentiality impact and no impact to integrity/a...

CVE-2026-62889

CVE-2026-62889 is a Windows SSTP remote code execution vulnerability caused by a double free in the SSTP implementation. The available descriptions from NVD and CVE records state that an unauthenticated attacker could exploit this over a network to execute arbitrary code. The CVSS 3.1 base score ...

CVE-2016-3301

CVE-2016-3301 affects the Windows Graphics Component in the Windows font library, enabling remote code execution via a crafted embedded font. Affected products include Windows Vista SP2; Windows Server 2008 SP2/R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; W...

CVE-2016-7272

CVE-2016-7272 affects the Windows Graphics component across multiple Windows versions (Vista SP2, Server 2008 SP2/R2, 7, 8.1, 2012/R2, RT 8.1, 10 Gold/1511/1607, Server 2016). The vulnerability enables remote code execution via a crafted web site, with network attack vector and no privileges requ...

CVE-2018-0813

Technical details for CVE-2018-0813 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-2018-8341

CVE-2018-8341 describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly handled. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 (and corresponding Server SKUs 2008/2012/2016/2019-era fa...

CVE-2018-8343

CVE-2018-8343 describes a local elevation-of-privilege flaw in the Windows Network Driver Interface Specification (NDIS). The vulnerability arises when ndis.sys does not validate the length of a destination buffer before copying memory, enabling privilege escalation on affected Windows versions (...

CVE-2019-0707

CVE-2019-0707 affects Windows NDIS (ndis.sys) with an elevation of privilege in the Network Driver Interface Specification. The root cause is a missing buffer-length check prior to memory copy, enabling a local attacker to run a crafted application to raise privileges. This is supported by multip...

CVE-2019-1010

Technical details about CVE-2019-1010 are not publicly available in the provided connected documents. Monitor for updates; current sources only reference Windows GDI information disclosure and MS patching without affected versions or exploit specifics.

CVE-2020-0643

The CVE-2020-0643 entry concerns a information-disclosure vulnerability in Windows GDI+ where memory objects are mishandled. Connected CNVD-2020-04849 describes a Microsoft Windows Graphics Device Interface Plus information disclosure vulnerability with the same affected component; it states that...

CVE-2020-0778

CVE-2020-0778 is described as an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Public metrics show a CVSSv2 base score of 4.6 (Medium) and a CVSSv3 base score of 7.8 (High) with local attack, low complexity, no user interac...

CVE-2020-0953

CVE-2020-0953 is described as a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of memory objects. It affects Microsoft Windows/Windows Server Jet Database Engine components and, per CNVD entries, could be triggered by a user opening a specially ...

CVE-2020-1085

CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...

CVE-2020-1584

CVE-2020-1584 is a Windows elevation-of-privilege vulnerability in how the dnsrslvr.dll handles in-memory objects. The underlying issue involves heap allocations and object copying in several DNS record copy paths (e.g., SigRecordCopy, NsecRecordCopy, KeyRecordCopy, OptRecordCopy, DhcidRecordCopy...

CVE-2021-1640

CVE-2021-1640 is a Windows Print Spooler Elevation of Privilege vulnerability affecting the Print Spooler service, caused by handling of print jobs submitted to FILE: ports. The vulnerability can lead to local privilege escalation with impacts across confidentiality, integrity, and availability (...

CVE-2021-24088

CVE-2021-24088 is a Windows Local Spooler RCE vulnerability. The issue stems from a bug in EnumJobsInLocalQueue where an integer overflow allows a crafted buffer to overwrite metadata and adjacent heap allocations; this can enable arbitrary data writes and potential code execution. Affected compo...

CVE-2021-27089

Technical details for CVE-2021-27089 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and affected products.

CVE-2021-33788

Technical details about CVE-2021-33788 are not provided in the supplied documents. Monitor for updated disclosures and CVE metadata.

CVE-2021-38635

CVE-2021-38635 refers to a Windows Redirected Drive Buffering Subsystem Driver Information Disclosure vulnerability. Affected: Windows OS components involving the Redirected Drive Buffering Subsystem Driver. Root cause and affected versions are not detailed in the provided documents beyond the vu...

CVE-2021-41343

Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.

CVE-2022-22041

CVE-2022-22041 is a Windows Print Spooler elevation of privilege vulnerability affecting Windows Print Spooler components. The Connected documents reference this CVE as part of the July 2022 Patch Tuesday fixes addressing multiple Print Spooler elevation-of-privilege flaws, with remediation deliv...

CVE-2022-38051

CVE-2022-38051 relates to a privilege-elevation vulnerability in the Windows Graphics Component. According to the connected CNVD entry, the issue stems from improper privilege assignment within Microsoft Graphics Component, enabling a local attacker to escalate privileges. The NCSC advisory corro...

CVE-2023-21755

CVE-2023-21755 is a Windows Kernel Elevation of Privilege vulnerability described as a local, high-severity issue (CVSS 7.8) with low attack complexity and no user interaction required. The provided documents confirm the vulnerability name and impact characteristics but do not specify the exact r...

CVE-2023-21820

Technical details (affected product/version, root cause, impact, or fix) are not publicly available in the provided documents. Monitor for updates.

CVE-2023-29346

Technical details about CVE-2023-29346 are not publicly available in the provided documents. No affected product/version/impact is specified here. Monitor for updates in the connected sources.

CVE-2023-29373

Technical details about CVE-2023-29373 are not publicly provided in the supplied documents; monitor for updates from Microsoft and vulnerability feeds.

CVE-2023-33164

CVE-2023-33164 is described as a Remote Procedure Call Runtime Denial of Service vulnerability. The provided data show CVSS v3.1 base score 6.5 (Medium) with network attack vector, low attack complexity, privilege requirement Low, no user interaction, and availability impact High. The connected d...

CVE-2023-35376

Technical details for CVE-2023-35376 are not publicly available in the provided documents; monitor for updates.

CVE-2023-36912

Technical details about CVE-2023-36912 are not publicly available in the provided documents. Monitor for updates.

CVE-2024-30025

CVE-2024-30025 affects the Windows Common Log File System Driver. The Windows/KB guidance mappings list CVE-2024-30025 with a CVSS v3.1 base score of 7.8 (LOCAL attack, LOW complexity, LOW privileges required, HIGH confidentiality/integrity/availability impact) and categorize it as an privilege e...

CVE-2024-30091

Technical details are not publicly provided in the supplied documents. No affected product, vulnerable component, version, root cause, impact, or fix information is included beyond the CVE ID and the generic description.

CVE-2024-38198

CVE-2024-38198 is a Windows Print Spooler elevation-of-privilege vulnerability. The connected data confirms the issue affects Windows Print Spooler Components and is categorized with a HIGH base severity (CVSS 3.1: 7.5) and impact as obtaining elevated privileges. The vulnerability is documented ...

CVE-2024-49129

CVE-2024-49129 is listed in RD Gateway/RD Services as a Denial of Service vulnerability with CVSS v3.1 base 7.5 (Network attack, high complexity, low privileges). Connected sources (e.g., NCSC advisory) explicitly associate CVE-2024-49129 with a Denial of Service impact in Windows Remote Desktop ...

CVE-2025-21286

CVE-2025-21286 is a Windows Telephony Service Remote Code Execution vulnerability. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a high impact with network attack vector and user interaction required. Connected sources confirm Microsoft fixes are available: KB5050009 (OS Build ...

CVE-2025-27487

CVE-2025-27487 is a heap-based buffer overflow in Windows Remote Desktop Client that allows an authenticated attacker to execute code over the network (CVSSv3.1: 8.0 HIGH; AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). Connected sources confirm this vulnerability and reference remote desktop RCE updates. ...

CVE-2025-48817

Technical details about CVE-2025-48817 are not publicly provided in the supplied documents. No vendor/product/versions or mitigations are disclosed here. Monitor official advisories for updates.

CVE-2026-33827

CVE-2026-33827 is a Windows TCP/IP race-condition vulnerability in the IPv6/IPSec processing path (tcpip.sys) that enables remote code execution. Exploitation described in connected docs requires sending crafted IPv6 packets (with IPSec) to Windows hosts with IPSec enabled; no authentication or u...

CVE-2018-0833

CVE-2018-0833 affects the SMBv2/v3 client in Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2. The vulnerability is a null pointer dereference in how the SMB client handles certain crafted requests, leading to a denial-of-service (system may stop responding). Public references describe a c...

CVE-2018-8136

CVE-2018-8136 is described as a remote code execution vulnerability in how Windows handles objects in memory, affecting Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008/2012, Windows 8.1, Windows Server 2016, Windows Server 2008 R2, Windows 10 and Windows 10 servers. The con...

CVE-2019-0890

The connected CNVD entries describe a vulnerability in Microsoft Windows Jet Database Engine: a buffer overflow/heap overflow caused by improper validation of data boundaries during memory operations. This vulnerability affects Windows Jet Database Engine components; attacker-accessible impact co...

CVE-2019-0899

The CVE-2019-0899 entry concerns a remote code execution vulnerability in the Windows Jet Database Engine. Connected CNVD records describe a buffer overflow/heap overflow in the Jet DB Engine when memory boundaries are not properly validated, enabling exploitation through in-memory operations. Th...