CVE-2022-41093

Technical details for CVE-2022-41093 are not publicly available in the provided documents. No affected products, root cause, or fixes are described here. Monitor official advisories for updates on impact and remediation.

CVE-2022-41094

Technical details about CVE-2022-41094 are not publicly provided in the connected documents. The records show a Windows Hyper-V Elevation of Privilege entry but do not specify affected products/versions or root cause. Monitor for updates.

CVE-2023-36006

The CVE-2023-36006 entry concerns Microsoft WDAC OLE DB provider for SQL Server and is a Remote Code Execution vulnerability. The OpenVAS and NCSC records confirm the affected component as the WDAC OLE DB provider for SQL Server and classify the impact as high, with CVSS3.1 base metrics indicatin...

CVE-2024-30014

CVE-2024-30014 is a Windows RRAS (Routing and Remote Access Service) Remote Code Execution vulnerability. Connected sources confirm the RRAS entry with CVSS v3.1 base score 7.5 (HIGH): Network attack vector, high impact on confidentiality, integrity and availability, with user interaction require...

CVE-2024-30023

CVE-2024-30023 affects the Windows Routing and Remote Access Service (RRAS). The RRAS remote code execution vulnerability is listed under Windows RRAS with CVSS details indicating Network attack vector, high impact to confidentiality, integrity, and availability, and requiring user interaction. T...

CVE-2024-30095

Technical details about CVE-2024-30095 (affected products, root cause, exploitability, or fixes) are not provided in the connected documents. Monitor for updates.

CVE-2024-38030

Technical details for CVE-2024-38030 are not publicly disclosed in the provided documents. No affected products, root cause, impact, or fixes are specified. Monitor for updates as more information becomes available.

CVE-2024-38127

CVE-2024-38127 is a Windows Hyper-V Elevation of Privilege vulnerability. The initial description identifies it as a Windows Hyper-V EoP with local attack vector, low privileges required, no user interaction, and an impact of high confidentiality, integrity, and availability. The CVSS 3.1 vector ...

CVE-2024-43611

CVE-2024-43611 affects Windows Routing and Remote Access Service (RRAS). The vulnerability in RRAS enables Remote Code Execution with an attack vector over the network; CVSS v3.1 base score is 8.8 (High). The NCSC page lists CVE-2024-43611 under RRAS items with an 8.80/Execute Random Code rating,...

CVE-2024-49118

CVE-2024-49118 is listed in connected sources as a Windows component vulnerability affecting Microsoft Message Queuing (MSMQ). The entry is documented with an ability to execute arbitrary code (impact: 8.10; attack vector: network) and is categorized under Windows Message Queuing in the CVE lists...

CVE-2025-24992

CVE-2025-24992 is a local, information-disclosure vulnerability in Windows NTFS caused by a buffer over-read. The CVE is tied to Windows NTFS and is described as allowing an unauthorized local disclosure of information. CVSS 3.1 base metrics indicate a Local attack vector, Low attack complexity, ...

CVE-2025-26671

CVE-2025-26671 is a Windows Remote Desktop Services remote code execution vulnerability. The connected documents indicate a use-after-free in the RDS component that allows a network-exposed attacker to execute arbitrary code on the affected host without user interaction. Exploitation is described...

CVE-2026-61363

CVE-2026-61363 describes a heap-based buffer overflow in the Remote Desktop Client that enables remote code execution over the network. Affected component is the Remote Desktop Client; root cause is a heap overflow allowing arbitrary code execution on a vulnerable host. The NVD entries confirm th...

CVE-2018-0901

Technical details about CVE-2018-0901 are not publicly available in the provided connected documents; monitor for updates.

CVE-2018-1036

The CVE-2018-1036 entry describes an NTFS elevation of privilege in Windows where access checks are improperly performed. Affected products include Windows 7, Windows 8.1, Windows 10 (and corresponding Windows Server editions such as 2008, 2012, 2016, and 2012 R2 variants). The vulnerability is l...

CVE-2018-8308

CVE-2018-8308 is a Windows kernel elevation of privilege vulnerability caused by improper handling of memory objects. The issue enables a local attacker to escalate privileges by exploiting kernel memory handling weaknesses. Affected platforms include Windows 7, Windows Server 2008/2012 (and R2),...

CVE-2019-0725

CVE-2019-0725 is a memory corruption vulnerability in the Windows Server DHCP service caused by improper processing of DHCP response messages, enabling remote code execution by an unauthenticated attacker sending crafted DHCP responses to a vulnerable target. Affected component: Windows DHCP Serv...

CVE-2019-0891

CVE-2019-0891 involves the Windows Jet Database Engine. Connected CNVD entries describe multiple buffer overflow/heap overflow vulnerabilities in the Jet Database Engine across Windows/Windows Server, arising when memory operations fail to validate data boundaries, leading to out-of-bounds reads/...

CVE-2019-0894

CVE-2019-0894 concerns the Windows Jet Database Engine remote code execution caused by improper in-memory handling (memory boundaries) in Jet DB. Connected CNVD entries describe a related class of vulnerabilities in the Windows Jet Database Engine: buffer overflow/heap overflow arising when memor...

CVE-2019-0909

CVE-2019-0909 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of in-memory objects. An attacker could lure a user to open a specially crafted file to execute arbitrary code with the user’s privileges. Impact is reported as high (C/H/I/A). Remediation...

CVE-2019-1484

CVE-2019-1484 describes a Windows OLE remote code execution vulnerability caused by improper validation of user input. Red Hat entry mirrors this description. OpenVAS items reference missing Microsoft security updates (e.g., KB4530684/68/89/71/73/and others) as remediation, implying patching via ...

CVE-2020-0620

Technical details for CVE-2020-0620 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0782

Technical details for CVE-2020-0782 are not publicly available in the provided documents. The initial description gives a high-level remediation but no product/version/root-cause or exploit specifics. Monitor for updates from official advisories.

CVE-2020-1487

CVE-2020-1487 describes an information-disclosure vulnerability in Microsoft Media Foundation where memory objects are mishandled. Exploitation would require an authenticated user to log on and open a specially crafted file; web-based attack requires user to click a link and open the file. The im...

CVE-2020-1520

CNVD-2020-49363 and CVE-2020-1520 describe a Windows Remote Code Execution flaw in the Windows Font Driver Host caused by improper memory handling. Affected: Windows Font Driver Host on Windows/Windows Server. Impact: remote code execution with attacker gaining code execution on the victim. Remed...

CVE-2021-28339

CVE-2021-28339 is a Remote Procedure Call Runtime remote code execution vulnerability affecting Windows components. The connected scans show the CVE referenced across multiple Windows monthly security updates (KB5001330/1335/1337/1340/1342/1347) and in Nessus/OpenVAS feeds, indicating it is being...

CVE-2021-28357

CVE-2021-28357 is a Windows RPC Runtime Remote Code Execution vulnerability. The CVSSv3.1 base score is 8.8 (network, low privileges required, no user interaction) with HIGH impact to confidentiality, integrity, and availability. The vulnerability affects the Windows RPC Runtime and is addressed ...

CVE-2021-40443

Technical details for CVE-2021-40443 are not publicly provided in the supplied documents. No affected products, exploit info, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2022-21915

Technical details for CVE-2022-21915 are not publicly detailed in the provided documents. Monitor for updates; available data include CVSS scores, but no explicit exploit vectors, affected products, or remediation steps are provided here.

CVE-2022-21981

Technical details for CVE-2022-21981 are not publicly available in the provided documents. Monitoring for future updates or disclosures is advised.

CVE-2022-21993

CVE-2022-21993 corresponds to a Microsoft Windows NFS ONCRPC XDR Driver information disclosure vulnerability. The connected advisory CPAI-2022-0336 states an information disclosure exists and that successful exploitation by a remote attacker would allow obtaining sensitive information. No further...

CVE-2022-30140

Technical details for CVE-2022-30140 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2022-30198

CVE-2022-30198 is mapped to Windows Point-to-Point Tunneling Protocol with an 8.10 CVSS equivalent and is described as enabling remote code execution (Executing Random Code) on affected Windows PPTP components. Connected data confirms this CVE is listed among Windows vulnerabilites fixed/monitore...

CVE-2022-34731

CVE-2022-34731 affects the Microsoft WDAC OLE DB provider for SQL Server and is categorized as a Remote Code Execution vulnerability. The CVSS v3.1 base score is 8.8 (HIGH) with network attack vector, no privileges required, but user interaction required. The connected documents identify the affe...

CVE-2022-35743

CVE-2022-35743 is a Microsoft Windows MSDT Remote Code Execution vulnerability. Documents indicate an exploitation path that is Local with Low Attack Complexity and requires User Interaction, yielding high confidentiality, integrity, and availability impact. CVSS 3.1 base score 7.8 (HIGH). No exp...

CVE-2022-37992

Technical details for CVE-2022-37992 (Windows Group Policy Elevation of Privilege) are not publicly provided in the supplied Connected documents. Monitor for updates from Microsoft/MSRC and NVD; no product/version/impact specifics are available here.

CVE-2022-41077

CVE-2022-41077 is Windows Fax Compose Form Elevation of Privilege. Affected component: Windows Fax service (Fax/Compose form). Root cause and impact as per provided data: local attacker with low privileges can exploit the vulnerability with no user interaction to achieve elevation of privilege, w...

CVE-2022-44680

CVE-2022-44680 is a Windows Graphics Component Elevation of Privilege vulnerability. The CVSSv3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates a local, low-complexity exploit requiring low privileges with no user interaction, capable of compromising confidentiality, integrity, and avail...

CVE-2022-44697

CVE-2022-44697 corresponds to a Windows Graphics Component Elevation of Privilege vulnerability. The CVE entry indicates a LOCAL attack vector with LOW privileges required and NO user interaction, resulting in HIGH impact on confidentiality, integrity, and availability (CVSSv3.1 base score 7.8). ...

CVE-2023-21691

Technical details about CVE-2023-21691 are not provided in the supplied documents. Public information here only reiterates the vulnerability title; no affected products, root cause, impact, or remediation details are included. Monitor for updates.

CVE-2023-21693

Technical details about CVE-2023-21693 are not publicly provided in the supplied connected documents. No specifics on affected products, root cause, or remediation are included here. Monitor for updates from official sources.

CVE-2023-21749

CVE-2023-21749: Windows Kernel local privilege escalation stemming from registry SID table poisoning, described in CIRCL as “Windows Kernel registry SID table poisoning leading to bad locking and other issues.” The connected docs do not provide detailed root-cause analysis beyond that label, nor ...

CVE-2023-24926

CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Affects the PostScript and PCL6 class printer driver; underlying impact is remote code execution over the network. The CVSS 3.1 base score is 8.8 (High) with high confidentiality, integrity, an...

CVE-2023-28268

Technical details for CVE-2023-28268 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation specifics are present. Monitor for updates in connected sources for any concrete information.

CVE-2023-28272

Technical details for CVE-2023-28272 are not provided in the connected documents. Public exploitability, affected components, and remediation are not disclosed here; monitor official advisories for updates.

CVE-2023-29371

Technical details about CVE-2023-29371 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins.

CVE-2024-38060

CVE-2024-38060 is a Windows Imaging Component remote code execution vulnerability. Public documents indicate it is addressed via the July 9, 2024 security updates (e.g., KBs in the July 2024 cycle). The connected MSKB entries reference security updates that address related components (e.g., RADIU...

CVE-2024-38180

CVE-2024-38180 relates to a security feature bypass in Windows SmartScreen. Affected product: Windows SmartScreen (Windows). The CVE is described as a Security Feature Bypass with high impact (C/H/I/A) and a network attack vector requiring user interaction. The initial documents do not provide de...

CVE-2024-49126

CVE-2024-49126 affects Windows Local Security Authority Subsystem Service (LSASS) and enables remote code execution. The CVSS v3.1 base context shows Network attack vector, high impact on confidentiality, integrity, and availability, with no privileges required and no user interaction. Connected ...

CVE-2025-21309

CVE-2025-21309 is a Windows Remote Desktop Services remote code execution vulnerability. The CVE entry indicates a NETWORK, HIGH-severity issue (CVSS v3.1: 8.1) affecting Windows Remote Desktop Services; no root-cause or affected version details are provided in the documents. Connected sources co...