CVE-2021-28476

CVE-2021-28476 is a Hyper-V vmswitch.sys vulnerability enabling guest-to-host access via an out-of-bounds read in VmsIfrInfoParams_OID_SWITCH_NIC_REQUEST when processing OID_SWITCH_NIC_REQUEST. Public PoC/exploit code exists (e.g., 0vercl0k and LaCeeKa repos) and prior reports describe guest-trig...

CVE-2024-21438

Technical details for CVE-2024-21438 are not provided in the supplied documents. Monitor for updates from the connected sources to obtain affected product, root cause, impact, and remediation information.

CVE-2022-24491

CVE-2022-24491 is a Remote Code Execution flaw in Windows Network File System (NFS) that is exploitable only on systems with the NFS role enabled. Affected component is the Windows NFS protocol handling; the root cause is remote code execution via specially crafted NFS network messages. Public pa...

CVE-2026-62800

CVE-2026-62800 is a Windows SMB Server vulnerability characterized by a heap-based buffer overflow in SMBv3 Server. An authorized attacker can trigger code execution over a network, with network attack vector, low privileges required, and no user interaction. The impact is described as high for c...

CVE-2019-0633

A remote code execution vulnerability exists in the Microsoft Server Message Block 2.0 (SMBv2) server component of the Windows operating system. The root cause is the insecure management of privileges , which allows a remote attacker to execute arbitrary code by sending a specially crafted packag...

CVE-2023-36719

Technical details about CVE-2023-36719, including affected products, root cause, impact, or fixes, are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2018-8166

The CVE-2018-8166 entry is supported by connected documents describing a Win32k privilege-escalation vulnerability in Windows where the Win32k component mishandles objects in memory, allowing local kernel-mode code execution if exploited. Affected products span multiple Windows versions (e.g., Wi...

CVE-2024-21437

CVE-2024-21437 is a Windows Graphics Component elevation-of-privilege vulnerability (local access, low attack complexity) affecting Windows OS. Public references corroborate it as a Windows Graphics Component issue discussed among Patch Tuesday updates, highlighting it among elevated-risk vulnera...

CVE-2022-24547

CVE-2022-24547 matches the Windows Digital Media Receiver Elevation of Privilege vulnerability. Connected CNVD-2022-65611 describes an elevation of privilege in Microsoft Windows Digital Media Receiver caused by an incorrect programmatic call to an advanced local procedure. The CVE entry lists th...

CVE-2026-50380

CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...

CVE-2019-0796

Technical details for CVE-2019-0796 are not publicly provided in the supplied documents; no affected product/version or exploit specifics are confirmed here. Monitor for updates.

CVE-2026-62818

CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...

CVE-2026-85880

CVE-2026-85880 is a heap-based buffer overflow in Windows ALPC (Advanced Local Procedure Call) that enables a locally authorized attacker to escalate privileges with full impact on confidentiality, integrity, and availability (CVSS 7.8 HIGH). CISA added this CVE to the Known Exploited Vulnerabili...

CVE-2025-32706

CVE-2025-32706 is an elevation-of-privilege flaw in Windows CLFS Driver (heap-based buffer overflow) that enables local privilege escalation. Affected product: Windows Common Log File System Driver. Base CVSS v3.1: 7.8 (HIGH); attack vector LOCAL, requires LOW privileges, no user interaction. Pub...

CVE-2023-28250

Technical details about CVE-2023-28250 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2024-20652

Technical details about CVE-2024-20652 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified. Monitor for updates.

CVE-2023-28293

CVE-2023-28293 is cited in connected material as one of the KTM/log-related Windows Kernel registry vulnerabilities disclosed by a Google Project Zero-style researcher. The documents place it among KTM transaction/log issues (with CVEs 2023-28271 and 2023-28272 also referenced) and discuss KTM lo...

CVE-2024-26162

CVE-2024-26162 corresponds to a remote code execution vulnerability in the Microsoft ODBC Driver. The CVSS 3.1 base metrics indicate: Network attack vector, low attack complexity, no privileges required, user interaction is required, and there is a High impact to confidentiality, integrity, and a...

CVE-2026-49164

CVE-2026-49164 affects Active Directory Domain Services (AD DS). The vulnerability is described as a heap-based buffer overflow in AD DS that allows an unauthenticated, network-based attacker to execute code remotely. Public sources in the provided documents consistently label this as an executio...

CVE-2022-23293

Technical details for CVE-2022-23293 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2024-21427

CVE-2024-21427 is a Windows Kerberos Security Feature Bypass vulnerability. The CVSSv3.1 base score is 7.5 (High): Vector AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating network exploitation with high impact to confidentiality, integrity, and availability. The attack vector is network, requiring ...

CVE-2019-0730

CVE-2019-0730 is a Windows local privilege escalation affecting the LUAFV driver (luafv.sys). The vulnerability arises from how LUAFV handles certain calls, enabling an attacker to obtain elevated privileges. Public exploitation exists per CIRCL/CVE-2019-0730 sightings, including Exploit-DB entry...

CVE-2023-21549

Technical details for CVE-2023-21549 are not present in the provided documents. The connected entries do not describe affected products/versions or remediation. Monitor official sources for updates on this CVE.

CVE-2024-21433

Technical details for CVE-2024-21433 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2017-0047

Technical details about CVE-2017-0047 are not provided in the connected documents. Public information in the Initial Description is limited to an overview; monitor for updates.

CVE-2021-43217

CVE-2021-43217 is a Windows Encrypting File System (EFS) remote code execution vulnerability. The connected exploit document documents a practical demonstration of an EFS bypass on Windows 10 and shows use of Kali Linux, Metasploit and reverse TCP payloads, indicating an attacker could achieve co...

CVE-2017-0025

Technical details such as affected products, vulnerable components, impact, and remediation for CVE-2017-0025 are not provided in the connected documents; no publicly disclosed specifics are included here. Monitor for updates.

CVE-2021-26432

CVE-2021-26432 is a remote code execution vulnerability in the Windows Services for NFS ONCRPC XDR Driver. The issue allows an attacker to execute arbitrary code on a vulnerable system via the ONCRPC XDR Driver component, with high impact (C/H/I/A = HIGH) and network access (CVSS scores reflect r...

CVE-2022-24497

CVE-2022-24497 is a Windows Network File System (NFS) Remote Code Execution vulnerability. Exploitation can occur remotely over the network if NFS is enabled; Microsoft rated it Critical (CVSS v3.1 9.8) with wormable characteristics discussed in Patch Tuesday coverage. There is a public exploit/t...

CVE-2022-30221

CVE-2022-30221 is a Windows Graphics Component remote code execution vulnerability. The cited sources indicate exploitation requires a user to connect to a malicious RDP server, enabling code execution in the context of the targeted user. Remediation is via Microsoft’s July 2022 security updates ...

CVE-2024-21349

Technical details for CVE-2024-21349 (Microsoft ActiveX Data Objects remote code execution) are not provided in the connected documents; no affected versions, root cause, impact, or remediation are cited. Monitor for updates.

CVE-2024-21350

CVE-2024-21350 corresponds to a Remote Code Execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The entry lists a CVSS v3.1 base score of 8.8 (HIGH), with attack vector NETWORK, privileges required NONE, user interaction REQUIRED, and both confidentiality, integrity, and...

CVE-2024-29056

CVE-2024-29056 is a Windows authentication elevation-of-privilege issue. Public data shows a CVSSv3.1 base score of 4.3 (Medium) with a network attack vector, low attack complexity, and requiring low privileges with no user interaction. The vulnerability’s impact is listed as obtaining increased ...

CVE-2022-33679

CVE-2022-33679 is a Windows Kerberos Elevation of Privilege vulnerability enabling an attacker to downgrade Kerberos encryption to RC4-MD4 and brute-force the user key to impersonate a domain user (Kerberoasting/AS-REP roasting). Connected docs describe exploitation pathways: manipulating AS-REQ/...

CVE-2019-0805

Technical details for CVE-2019-0805 are not publicly available in the provided documents. Monitor for updates.

CVE-2019-1073

Technical details for CVE-2019-1073 are not publicly available in the provided Connected documents. Monitor for updates; no product/vendor/version/impact/fix information is present in these sources.

CVE-2024-21372

Technical details for CVE-2024-21372 are not publicly available in the provided documents. The connected items only reference the CVE among broader Windows vulnerability listings; no affected product/version, root cause, impact, or fixes are stated.

CVE-2024-26174

CVE-2024-26174 is a Windows Kernel Information Disclosure Vulnerability. The connected sources specify the issue as an out-of-bounds read of key node security in CmpValidateHiveSecurityDescriptors when loading corrupted registry hives, enabling potential leakage of kernel/registry data. Affected ...

CVE-2023-36017

Technical details about CVE-2023-36017 are not publicly provided in the connected documents. The available materials only show the CVE entry with a Windows Scripting Engine memory corruption description and CVSS data. Monitor for updates from official sources.

CVE-2023-36397

Technical details about CVE-2023-36397 are not provided in the supplied documents. No affected products, versions, root cause, impact, or remediation are specified here. Monitor for future updates from official advisories.

CVE-2024-43639

CVE-2024-43639 is a Windows Kerberos KDC Proxy Remote Code Execution vulnerability. Documents identify it as a Kerberos-related RCE affecting Windows Kerberos/KDC components, with CVSS v3.1 base score 9.8 (NETWORK, HIGH impact on confidentiality, integrity and availability; no user interaction). ...

CVE-2019-0821

CVE-2019-0821, CVE-2019-0703 and CVE-2019-0704 describe an information disclosure vulnerability in the Windows SMB Server related to how it handles certain requests. The connected documents consistently identify the SMB Server information-disclosure flaw as the core issue across these CVEs, affec...

CVE-2023-21563

Technical details (affected product, vulnerable component, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for updates from official advisories.

CVE-2023-29348

Technical details about CVE-2023-29348 are not provided in the supplied documents. Please monitor for official disclosures or vendor advisories for affected products, impacts, and remediation.

CVE-2024-21420

Technical details about CVE-2024-21420 are not publicly provided in the supplied documents. The connected sources reference the CVE ID and Microsoft patches but do not disclose affected product specifics, root cause, impact, or remediation beyond generic update context. Monitor for updates.

CVE-2024-26166

Technical details about CVE-2024-26166 (affected software, root cause, impact, or fixes) are not provided in the connected documents. Please monitor for official advisories from Microsoft and CVE records for updates.

CVE-2024-38118

Technical details (affected component, root cause, exploit info, patch status) for CVE-2024-38118 are not provided in the connected documents. The initial description notes LSA server information disclosure but lacks concrete specifics; monitor for updates.

CVE-2020-1042

CVE-2020-1042 describes a remote code execution in Hyper-V RemoteFX vGPU where the host fails to validate input received from an authenticated user on a guest OS. The CVE is characterized with a high/critical impact (CVSS v3.1: 9.0, AdJACENT attack vector, LOW attack complexity, Privileges Requir...

CVE-2020-1246

Technical details for CVE-2020-1246 are not publicly provided in the supplied documents. Monitor for updates from official advisories and connected sources.

CVE-2022-34691

CVE-2022-34691 is referenced in connected Citrix and Windows update documentation. Citrix CTX479236 summarizes FAS information tying CVE-2022-34691 to Microsoft KB KB5014754 and related CVEs, describing SSO/Kerberos-related behaviors with VDA and smart card authentication failures when FAS is inv...