CVE-2018-8626

CVE-2018-8626 is a remote code execution vulnerability in Windows DNS servers caused by improper handling of requests, leading to a heap overflow. Affected products include Windows Server variants and Windows 10/Server deployments configured as DNS servers. The root cause centers on the Windows D...

CVE-2019-0785

CVE-2019-0785 is a memory-corruption vulnerability in the Microsoft Windows Server DHCP service that can allow remote code execution when an attacker sends specially crafted packets to a DHCP failover server. Affected product: Windows Server DHCP service. Root cause: memory corruption inside the ...

CVE-2019-1065

CVE-2019-1065 is a Windows kernel elevation-of-privilege vulnerability. It occurs when the Windows kernel fails to handle memory objects securely, enabling a locally authenticated attacker to run arbitrary code in kernel mode, potentially installing programs, altering or deleting data, viewing da...

CVE-2021-34500

Technical details about CVE-2021-34500 are not provided in the connected documents; no affected products, root-cause, impacts, or fixes are disclosed here. Monitor for updates.

CVE-2021-38628

Technical details for CVE-2021-38628 are not publicly provided in the connected documents. The supplied materials do not specify affected products/versions, root cause, impact, or remediation. Monitor for updates.

CVE-2021-40454

CVE-2021-40454 is an information-disclosure vulnerability in the Rich Text Edit Control used by Microsoft Office. The issue is documented as a local, low-complexity disclosure that can impact confidentiality (CVE-2021-40454) with a MEDIUM overall severity (CVSS v3.1 base score 5.5). The connected...

CVE-2022-26810

Technical details about CVE-2022-26810 are not provided in the supplied connected documents. No explicit affected products/versions, root cause, or fixes are described here. Monitor for updates from official sources.

CVE-2024-20661

Technical details for CVE-2024-20661 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected versions, impact, and fixes.

CVE-2025-60724

Technical details about CVE-2025-60724 are not provided in the supplied documents. Connected KBs discuss OS updates and security fixes but do not specify vulnerable product versions, root cause, exploitation, or patch specifics for this CVE. Monitor for updates.

CVE-2026-44803

CVE-2026-44803 describes an integer overflow/wraparound in Windows Win32K - GRFX that can allow a local attacker to execute code. The vulnerability is identified across multiple sources (NVD, CVE listing, and MSRC update page) and is classified with a high impact: local code execution, requiring ...

CVE-2020-1281

CVE-2020-1281 correlates to a Microsoft Windows OLE Remote Code Execution vulnerability. CNVD-2021-22931 describes a flaw where Windows OLE fails to properly validate user input, enabling an attacker to execute arbitrary code via a crafted file or program. The initial description also notes remot...

CVE-2021-33756

CVE-2021-33756 corresponds to a remote code execution flaw in the Windows DNS Snap-in affecting Windows/Windows Server. Public documents identify the affected component as the DNS Snap-in and confirm a high-severity issue (CVSS v3.1 base score 8.8; network vector, no privileges required, user int...

CVE-2021-34450

CVE-2021-34450 is a Windows Hyper-V Remote Code Execution vulnerability. Affected: Hyper-V components on Windows Server/Windows; attacker could exploit from within a guest VM to execute code on the host (authenticated VM user). Exploitation details in connected sources indicate host compromise vi...

CVE-2022-24495

CVE-2022-24495 corresponds to a Windows DirectShow remote code execution vulnerability. The connected documents confirm the affected technology (Windows DirectShow) and the CVE’s existence, but they do not provide concrete patch details, affected product/version specifics, or explicit remediation...

CVE-2022-26808

Technical details about CVE-2022-26808 are not publicly available in the provided documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2022-30149

Technical details for CVE-2022-30149 (affected component/versions, exploit specifics, and remediation) are not present in the provided connected documents. Monitor for official updates and new public disclosures.

CVE-2022-30222

Technical details about CVE-2022-30222 (Windows Shell Remote Code Execution Vulnerability) are not provided in the supplied documents. The connected items reference the vulnerability but do not specify affected products, root cause, impact, fixes, or exploit information. Monitor for updates.

CVE-2022-33635

CVE-2022-33635 is tied to the Windows Graphics Component (GDI+) with a vulnerability that could allow an attacker to execute arbitrary code. The CVSSv3 vector indicates a High-severity issue (7.8) with a Local attack vector and required user interaction, meaning an attacker would need a logged-in...

CVE-2022-35765

Technical details about CVE-2022-35765 (affected product, root cause, impact, fix) are not provided in the supplied documents. Monitor for official disclosures and vendor advisories for remediation once published.

CVE-2023-21750

CVE-2023-21750 is a Windows Kernel EoP issue tied to registry virtualization: a logic bug in CmKeyBodyRemapToVirtual allowed deleting HKLM\Software keys using only KEY_READ and KEY_SET_VALUE rights, bypassing expected DELETE checks. This is a local, privilege-escalation vulnerability within the r...

CVE-2023-23400

CVE-2023-23400 is a Windows DNS Server remote code execution vulnerability. Public updates address the issue via March 2023 security updates (e.g., KB5023697, KB5023702) and security-only/monthly rollup records (KB5023764/KB5023765). Updates reference DCOM hardening (phase 3 of KB5004442) and rel...

CVE-2024-26200

CVE-2024-26200 is a Windows Routing and Remote Access Service (RRAS) remote code execution vulnerability. Connected sources list RRAS as vulnerable and indicate the impact as executing random code, with CVE-2024-26200 appearing under RRAS in the Microsoft Windows vulnerabilities compilation. The ...

CVE-2025-21174

CVE-2025-21174 affects the Windows Standards-Based Storage Management Service. The vulnerability is a denial-of-service caused by uncontrolled resource consumption that an attacker can trigger over a network, with CVSS 3.1 base metrics: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5, HIGH). ...

CVE-2026-49160

The CVE-2026-49160 entry concerns HTTP.sys with an HTTP/2 resource consumption flaw leading to unauthenticated denial of service over the network. Exploitation details, affected versions or specific component paths aren’t provided in the connected documents. The NVD/MSRC entries confirm an uncont...

CVE-2018-0749

CVE-2018-0749 is an elevation-of-privilege issue in the Windows SMB Server (affecting Windows 7 SP1, 8.1, 10 variants, Server 2008/2012/2016, etc.). The root cause centers on how the SMB server and NT Object Manager handle Extended Attributes and process IDs when opening named pipes, which could ...

CVE-2019-0570

The CVE-2019-0570 issue is a Windows Runtime Elevation of Privilege vulnerability stemming from improper in-memory handling of objects in Windows Runtime. Affected products listed include Windows 10 (and Windows 10 Servers), Windows 8.1, Windows Server 2012/2012 R2, Windows Server 2016/2019, and ...

CVE-2020-0910

CVE-2020-0910 : A remote code execution vulnerability in Windows Hyper-V occurs when the Hyper-V host fails to properly validate guest OS input from an authenticated user. An attacker who can run a crafted application inside a guest could cause the Hyper-V host to execute arbitrary code on the ho...

CVE-2021-26443

Technical details (affected product/version, root cause, impact, and concrete remediation) are not publicly disclosed in the provided connected documents. Monitor vendor advisories and CVE records for updates to obtain authoritative remediation information.

CVE-2021-33750

CVE-2021-33750 is a Windows DNS Snap-in Remote Code Execution vulnerability affecting Windows/Windows Server DNS snap-in. The CNVD/NVD entries describe a remote code execution flaw in the DNS snap-in component that could enable an attacker to compromise affected systems. NVD CVSSv3.1/MB: 8.8 (NET...

CVE-2022-22009

CVE-2022-22009 is a Windows Hyper-V remote code execution vulnerability. The connected sources confirm Hyper-V is affected and provide concrete product scope: Windows Hyper-V on affected Windows Server/Windows versions with the hypervisor component implicated. CVSS details from the sources indica...

CVE-2022-24479

Technical details about CVE-2022-24479 are not provided in the connected documents. The entry's description is general; no information on affected product, root cause, impact, or remediation is present here. Monitor for updates.

CVE-2022-26811

CVE-2022-26811 is described as a Windows DNS Server Remote Code Execution Vulnerability. The available data show it is a network-based issue with low attack complexity, but high impact (confidentiality, integrity, and availability) per CVSS/metrics. CVSS v3.1 base score 7.2 (HIGH) with privileges...

CVE-2022-26818

Technical details for CVE-2022-26818 are not publicly provided in the supplied documents. No concrete affected product versions, root cause, or fixes are specified here. Monitor for updates from official advisories and referenced CVE records.

CVE-2018-0743

Summary (CVE-2018-0743): Elevation of privilege in Windows Subsystem for Linux (WSL) on Windows 10 (versions 1703 and 1709) and Windows Server 1709 due to improper handling of memory objects. The vulnerability allows a local attacker to run code with elevated privileges by exploiting how WSL mana...

CVE-2018-8210

Technical details such as affected product versions, root cause, exploitability, and patch guidance are not provided in the connected documents; monitor for updates.

CVE-2019-0555

The CVE-2019-0555 entry corresponds to an elevation of privilege in Microsoft XmlDocument that can escape AppContainer sandbox via cross-boundary remoting. Connected analysis explains an IDispatch/type library abuse path: malicious clients query for the old IXMLDOMDocument interface, then marshal...

CVE-2019-1019

CVE-2019-1019 is a Windows security feature bypass in NTLM authentication that allows bypassing validation on NETLOGON messages, enabling an attacker to access a machine with their original user privileges after sending a crafted authentication request. Connected material confirms related exploit...

CVE-2020-1577

CVE-2020-1577 affects DirectWrite. The connected documents confirm an information-disclosure flaw where DirectWrite may reveal memory contents; exploitation could be achieved by convincing a user to open a crafted document or visit an untrusted page. The Microsoft advisory notes the fix is to cor...

CVE-2021-31186

CVE-2021-31186 is a Windows RDP information disclosure vulnerability. The provided connected documents identify the CVE as part of broader Microsoft Windows vulnerability assessments (e.g., OpenVAS/Nessus plugins) and list it among CVEs in KB updates and advisories. The core details in the materi...

CVE-2021-31958

Technical details for CVE-2021-31958 are not publicly provided in the supplied documents; monitor for updates.

CVE-2022-22029

CVE-2022-22029 is a Windows Network File System Remote Code Execution vulnerability. Public details in the connected docs show a root cause in NFS 4.1 COMPOUND REQUEST handling: nfssvr.sys miscalculates a per-operation size during reply construction, causing a buffer/size mismatch that can enable...

CVE-2022-30215

CVE-2022-30215 is identified in the provided documents as an Active Directory Federation Services Elevation of Privilege vulnerability. The NVD entry lists both CVSS v2 and CVSS v3.1 metrics (base scores 8.5 and 7.5 respectively) indicating NETWORK attack vector; CVSSv2 shows MEDIUM exploit compl...

CVE-2022-34708

Technical details for CVE-2022-34708 are not provided in the connected documents. Public exploit vectors, affected products, and fixes are not stated here. Monitor for updates.

CVE-2022-41058

Technical details for CVE-2022-41058 are not provided in the supplied documents. No affected products or fixes are described here. Monitor for updates in public advisories and the referenced sources.

CVE-2023-21682

Technical details about CVE-2023-21682 are not publicly disclosed in the provided connected documents. The materials only reference a Windows PPP information disclosure vulnerability with CVSSv3.1 base score 5.3. Monitor for updates.

CVE-2023-21767

Technical details for CVE-2023-21767 are not provided in the Connected documents or initial description. No affected products, root cause, impact, or fixes are disclosed here. Monitor for updates from official sources.

CVE-2023-24859

CVE-2023-24859 is a Windows vulnerability described as a denial-of-service issue in the Windows Internet Key Exchange (IKE) extension. The available data identifies the affected component as the IKE extension and notes impact as availability degradation (DoS) with network attack vector and no use...

CVE-2023-24945

CVE-2023-24945 concerns Windows iSCSI Target Service Information Disclosure. Data shows CVSS v3.1 base score 5.5 (Medium) with LOCAL attacker, LOW complexity, LOW privileges required, and high confidentiality impact. The description names the Windows iSCSI Target Service but does not provide spec...

CVE-2023-28307

Technical details for CVE-2023-28307 are not publicly provided in the supplied documents. No affected products, root cause, or remediation specifics are included here. Monitor for updated connected documents for concrete information.

CVE-2024-26216

CVE-2024-26216 is a Windows vulnerability affecting the Windows File Server Resource Management Service, categorized as a privilege-escalation issue with a CVSS-like score around 7.3 (high) in public guidance. The connected documents confirm the vulnerability is tied to Windows File Server Resour...