CVE-2018-8476

CVE-2018-8476 is a remote code execution vulnerability in Windows Deployment Services TFTP Server. The issue arises from how memory objects are handled in the TFTP server, allowing an attacker to execute arbitrary code on affected systems. Affected products include Windows Server 2012/2012 R2, 20...

CVE-2019-0595

Technical details about CVE-2019-0595 are not publicly available in the provided documents. The Connected CVEs repeat the same general description without specifics on affected components, versions, exploitability, or fixes. Monitor for updates.

CVE-2019-1244

CVE-2019-1244 concerns an information disclosure in DirectWrite where memory contents may be improperly disclosed. Affected component: DirectWrite (Windows text rendering). Root cause: improper handling leading to leakage of memory contents. Impact (per sources): partial confidentiality compromis...

CVE-2021-31959

CVE-2021-31959 is a memory corruption vulnerability in the Microsoft Windows Scripting Engine (jscript9.dll) used by Internet Explorer. Public docs describe it as a scripting engine memory corruption issue that could enable arbitrary code execution on affected Windows versions; a patch was releas...

CVE-2022-24537

CVE-2022-24537 is a Windows Hyper-V Remote Code Execution vulnerability. Connected documents confirm affected product/role as Microsoft Windows Hyper-V and reference multiple Microsoft security updates (e.g., KB5012599, KB5012592, KB5012604, KB5012647, KB5012591) addressing this CVE in various Wi...

CVE-2022-29112

Technical details for CVE-2022-29112 are not provided in the supplied documents. OpenVAS references the CVE among others, but no product/impact/fix specifics are given here. Monitor for updates.

CVE-2022-29141

Technical details about CVE-2022-29141 (Windows LDAP RCE) are not provided in the connected documents. OpenVAS references KB updates but does not specify affected products/versions, root cause, exploit info, or remediation beyond generic patching; monitor for future updates.

CVE-2023-21758

Technical details for CVE-2023-21758 are not publicly available in the provided documents. The connected items do not describe affected products, root cause, impact, or fixes. Monitor official updates from Microsoft and standard vulnerability feeds for new information.

CVE-2023-23388

CVE-2023-23388 corresponds to a Windows Bluetooth Driver Elevation of Privilege vulnerability (bthserv) with a local privilege escalation path. A GitHub repo documents a PoC targeting Windows 10/11 Bluetooth service (bthserv) that enables escalation from an unprivileged user to LOCAL SERVICE; the...

CVE-2023-24948

CVE-2023-24948 is a Windows Bluetooth Driver Elevation of Privilege vulnerability. Documents indicate affected component as the Windows Bluetooth driver and classify impact as privilege escalation with high confidentiality/integrity/availability risk (CVSS: AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H). P...

CVE-2024-28919

CVE-2024-28919 is listed in the Windows Secure Boot area as a "Secure Boot Security Feature Bypass" vulnerability. The connected documents identify it as a local-bypass vulnerability affecting Secure Boot, with a CVSSv3.1 base score of 6.7 (Impact: High on confidentiality, integrity, and availabi...

CVE-2018-8407

CVE-2018-8407 is an information disclosure vulnerability in the Kernel Remote Procedure Call Provider driver that occurs when objects are not properly initialized in memory. The vulnerability affects multiple Windows releases, including Windows 7, Windows 8.1, Windows 10 and various Windows Serve...

CVE-2022-24493

Technical details about CVE-2022-24493 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-26791

CVE-2022-26791 is a Windows Print Spooler Elevation of Privilege vulnerability. Descriptions across sources identify the flaw as residing in the Windows Print Spooler component, enabling local attackers to escalate privileges (with low attack complexity) and gain high-privilege access. Public ref...

CVE-2022-29134

Technical details about CVE-2022-29134 (affected products, root cause, exploitability, and fixes) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2022-30162

CVE-2022-30162 is a Windows kernel information disclosure vulnerability. Public records cite CVSSv3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N with base score 5.5 (MEDIUM) and local access required; confidentiality impact is HIGH while integrity/availability are none. CVSSv2/2.0 shows a lower base sco...

CVE-2022-35762

Technical details about CVE-2022-35762 are not publicly provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and fixes.

CVE-2022-35768

CVE-2022-35768 is a Windows kernel elevation-of-privilege vulnerability tied to registry/hive memory; the connected docs describe an out-of-bounds read that could disclose kernel pool memory to the hive file, enabling local attacker memory leakage and potential escalation. The CVE is cited in MSR...

CVE-2023-36911

CVE-2023-36911 is a remote code execution vulnerability in Microsoft Message Queuing (MSMQ). The connected NVD entry lists a critical CVSS v3.1 score of 9.8 (Network vector, no privileges required, no user interaction) with high impact on confidentiality, integrity, and availability. Public techn...

CVE-2024-20660

CVE-2024-20660 concerns Microsoft Message Queuing (MSMQ) with an information disclosure vulnerability. Connected CNVD-2024-04951 states MSMQ contains a heap memory information disclosure vulnerability that an attacker could exploit to obtain sensitive data. The NVD entry for CVE-2024-20660 lists ...

CVE-2026-66799

CVE-2026-66799 describes a heap-based buffer overflow in Windows Key Guard that allows an authenticated, local attacker to elevate privileges. Affected component: Windows Key Guard. Root cause: heap-based buffer overflow (as stated). Impact: local privilege escalation with high confidentiality, i...

CVE-2019-1071

Technical details for CVE-2019-1071 are not present in the provided documents. No affected products, impact, or remediation are stated here. Monitor for updates and refer to the primary CVE entry for official information.

CVE-2020-1167

CVE-2020-1167 is a remote code execution vulnerability in Microsoft Graphics Components that allows arbitrary code execution when a user opens a specially crafted file. The root cause is in how objects are handled in memory. Affected context: Windows components including the Microsoft Graphics Co...

CVE-2021-34449

Technical details about CVE-2021-34449 are not publicly provided in the connected documents. The materials mention Win32k elevation of privilege at a high level. Monitor for updated advisories from Microsoft and CVE databases.

CVE-2021-40461

CVE-2021-40461 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Windows Hyper-V component on Windows 10/11 and Windows Server (various versions). Root cause/impact: allows remote code execution with adjacent network access and no user interaction; CVSS3.1 base score 9.0 (HIGH) ...

CVE-2022-21833

CVE-2022-21833 is a Local Elevation of Privilege in Virtual Machine IDE Drive. The NVD entry lists CVSS-3.1 base score 7.8 (LOCAL, LOW privileges required, no user interaction, privilege escalation with CHANGED scope; impacts: CONFIDENTIALITY/HIGH, INTEGRITY/HIGH, AVAILABILITY/HIGH). Publicly vis...

CVE-2022-22036

Technical details for CVE-2022-22036 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-24496

Technical details about CVE-2022-24496 are not publicly available in the provided documents. Monitoring for updates is advised.

CVE-2022-30202

Technical details (affected component, root cause, specific versions, and remediation) for CVE-2022-30202 are not provided in the supplied documents; monitor for updates.

CVE-2023-36403

CVE-2023-36403 is linked to a Windows Kernel local privilege escalation involving registry virtualization. CIRCL’s CIRCL:CVE-2023-36403 entry explicitly notes “Windows Kernel bad locking in registry virtualization leads to race conditions,” indicating the root cause is locking/race-condition issu...

CVE-2024-20662

Technical details about CVE-2024-20662 are not present in the provided documents. Monitor for future updates from Microsoft and vulnerability databases for affected products, impact, and remediation details.

CVE-2024-26211

CVE-2024-26211 is an elevation-of-privilege vulnerability affecting the Windows Remote Access Connection Manager. The CVE entry lists a HIGH base score (CVSSv3.1: 7.8; vector: LOCAL, LOW attack complexity; Privileges Required: LOW; User Interaction: NONE; Scope: UNCHANGED; Confidentiality/Integri...

CVE-2024-28896

CVE-2024-28896 is a Secure Boot security feature bypass with HIGH impact (C:I:H:A:H) and adjacent access (AV:A, AC:H, UI:N, PR:N). Descriptions show no user interaction or privileges required. EUVD-2024-25962 and Windows Secure Boot mappings reference this CVE among related Secure Boot fixes; no ...

CVE-2018-1016

CVE-2018-1016 is a Windows font library remote code execution vulnerability. The issue arises from the Windows font library improperly handling specially crafted embedded fonts, enabling code execution on a vulnerable system. Affected products include multiple Windows versions (Windows 7, Windows...

CVE-2019-0959

Technical details about CVE-2019-0959 are not publicly available in the provided documents. The KTM/registry context mentions the CVE historically, but no concrete root-cause, impact, or fix is described here. Monitor for updates.

CVE-2022-21871

Technical details about CVE-2022-21871 are not publicly provided in the supplied documents; no affected product/version, root cause, or remediation are described here. Monitor for official disclosures and updates.

CVE-2022-24502

Technical details about CVE-2022-24502 are not provided in the supplied documents. The provided materials do not include affected products/versions/root cause/fix information. Monitor for updates.

CVE-2022-30203

Technical details about CVE-2022-30203 are not publicly provided in the supplied documents. The connected records reference Windows Boot Manager security bypass but do not disclose affected products, root cause, impact, or remediation. Monitor for official updates.

CVE-2023-24947

CVE-2023-24947 is a Windows Bluetooth Driver remote code execution vulnerability. Connected sources confirm it affects the Microsoft Bluetooth Driver and enables arbitrary code execution, with high impact (CVSS 3.1: AV Adjacent, AC L, PR None, UI None, C/H I/H A/H). Exploitation details are not i...

CVE-2023-28297

CVE-2023-28297 is a Windows RPCSS Elevation of Privilege vulnerability. The consolidated records identify the affected component as the Windows Remote Procedure Call Service (RPCSS) with a high-severity CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and a base score of 8.8. The explicit ro...

CVE-2023-28302

Technical details for CVE-2023-28302 are not publicly available in the provided documents. Monitor for updates from the listed sources (NVD, OSV, OpenVAS references) for affected products, impact, and fixes.

CVE-2024-26208

CVE-2024-26208 affects Microsoft Message Queuing (MSMQ) on Windows. The OpenVAS entries list MSMQ under Windows Message Queuing with CVE-2024-26208 and indicate a vulnerability that allows executing arbitrary code (remote code execution) over the network, without user interaction, and with high p...

CVE-2024-26210

CVE-2024-26210 describes a remote code execution vulnerability in the Microsoft WDAC OLE DB provider for SQL Server. The issue is classified as CVSS 3.1 Base Score 8.8 (High) with network attack vector, no privileges required, and user interaction needed. The vulnerability affects the WDAC OLE DB...

CVE-2024-26228

CVE-2024-26228 affects Windows Cryptographic Services. The connected data indicate a security feature bypass vulnerability in Windows Cryptographic Services, with a local attack vector, low privileges required, no user interaction, and high impact to confidentiality, integrity, and availability. ...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2024-28923

CVE-2024-28923 is described as a Secure Boot security feature bypass in the Windows Secure Boot subsystem. The provided documents indicate it allows bypassing Secure Boot and potentially executing code by a malicious party, with the CVSS-like data in the initial record showing local exploitation,...

CVE-2024-37968

CVE-2024-37968 is a Windows DNS Spoofing vulnerability rated High (CVSS 7.5) with network attack vector and impact on confidentiality. The connected documents confirm this CVE affects Windows DNS and that Microsoft released fixes in the August 2024 updates (examples: KB5041578, KB5041160, KB50418...

CVE-2025-21377

Technical details for CVE-2025-21377 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation are specified here. Monitor for updates in the connected feeds.

CVE-2018-1010

Technical details about CVE-2018-1010 are not publicly provided in the supplied documents. The connected MSKB entries relate to OS updates but do not disclose vulnerability specifics. Monitor for updates from Microsoft for any confirmed fixes or advisories.

CVE-2018-8544

CVE-2018-8544 is a remote code execution vulnerability in the Windows VBScript engine that corrupts memory when handling objects in VBScript. It affects multiple Windows versions (e.g., Windows 7, Windows 10, various Server editions) and is triggered by memory manipulation of VBScript objects, al...