CVE-2020-1248

CVE-2020-1248 is a remote code execution vulnerability in Windows GDI+ where memory objects are mishandled, allowing an attacker to take control of the affected system. The issue is tied to how GDI+ handles objects in memory, with exploitation typically requiring user interaction or specific cond...

CVE-2021-34438

CVE-2021-34438 is a Windows Font Driver Host remote code execution vulnerability in Microsoft Windows/Windows Server. The CVE entry describes a remote code execution flaw in the Font Driver Host component that can be triggered locally or remotely depending on context, with high/severe impact as r...

CVE-2022-44668

CVE-2022-44668 is a Windows Media Remote Code Execution vulnerability with a CVSSv3.1 base score of 7.8 (HIGH). The vulnerability requires local access and user interaction, with potential HIGH impact to confidentiality, integrity, and availability. Connected sources confirm the CVE and its assoc...

CVE-2023-24864

CVE-2023-24864 is described in connected documents as an elevation of privilege vulnerability affecting Microsoft PostScript and PCL6 Class Printer Driver. CNVD-2023-28110 and NVD entries reference an elevation of privilege issue in these printer drivers, identifying the vulnerable components but...

CVE-2023-28237

Technical details for CVE-2023-28237 are not publicly provided in the supplied documents; monitor for updates.

CVE-2024-26230

CVE-2024-26230 is a Windows Telephony Server elevation-of-privilege vulnerability. Reported as a local privilege escalation with CVSS 3.1 base score 7.8 (HIGH): vectors/local, attack complexity LOW, privileges required LOW, no user interaction. Impacts on confidentiality, integrity, and availabil...

CVE-2024-28900

CVE-2024-28900 is a Windows vulnerability affecting the Windows Remote Access Connection Manager, with information disclosure (confidentiality impact). It is exploitable locally (attack vector: LOCAL) and requires LOW privileges with no user interaction. The CVSS vector in the Initial Description...

CVE-2024-28902

CVE-2024-28902 is associated with Windows Remote Access Connection Manager and is listed in an ENISA/NCSC-style advisory as a local, low-complexity information-disclosure vulnerability with potential impact to data confidentiality (CVE-2024-28902, Windows Remote Access Connection Manager). The co...

CVE-2025-21327

CVE-2025-21327 is a Windows Digital Media elevation-of-privilege vulnerability. The CVSS3.1 base vector indicates physical access required, low attack complexity and low privileges, with high impact on confidentiality, integrity, and availability (base score 6.6, medium). The connected data confi...

CVE-2025-21417

CVE-2025-21417 is a Windows Telephony Service remote code execution vulnerability. CIRCL confirms the CVE with a high impact (CVSS 8.80, Execute code) within Windows Telephony Service; CNVD describes a remote code execution vulnerability in Windows Telephony Server. Microsoft has public security ...

CVE-2018-8344

CVE-2018-8344 is a Windows remote code execution vulnerability in the Windows font library triggered by specially crafted embedded fonts. Affected platforms include Windows 7, Windows 8.1, Windows 10 (and corresponding server SKUs: 2008, 2008 R2, 2012, 2012 R2, 2016, 2019-era equivalents, and Win...

CVE-2019-0582

CVE-2019-0582 is a remote code execution flaw in the Windows Jet Database Engine caused by improper handling of objects in memory. The vulnerability affects multiple Windows versions and can be triggered when a user opens a specially crafted file, enabling arbitrary code execution with the attack...

CVE-2019-0601

Technical details for CVE-2019-0601 are not publicly available in the provided documents; monitor for updates.

CVE-2019-0882

CVE-2019-0882 is a Windows GDI information-disclosure vulnerability. The Windows GDI component improperly discloses memory contents, per the description, with a stated impact of information disclosure. Connected documents reiterate that the issue involves improper handling of in-memory objects in...

CVE-2019-1291

Technical details (affected components, exploit method, patch information) are not provided in the supplied documents. Monitor for official advisories and updates for CVE-2019-1291.

CVE-2021-34439

CVE-2021-34439 is a Windows Media Foundation remote code execution vulnerability affecting Microsoft Windows Media Foundation. Public sources describe a remote code execution in Media Foundation components that could be exploited locally to execute code with high impact. Related advisories indica...

CVE-2021-36961

Technical details about CVE-2021-36961 (Windows Installer Denial of Service) are not publicly provided in the supplied documents. No affected product versions, root cause, impact, or fix information is available here. Monitor for forthcoming updates.

CVE-2022-21851

Technical details for CVE-2022-21851 are not publicly available in the provided documents. No root cause, affected versions, or fixes are disclosed here; monitor for official updates from Microsoft and NVD.

CVE-2022-21890

Technical details for CVE-2022-21890 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-21922

Technical details for CVE-2022-21922 are not publicly available in the provided documents. No affected products, versions, exploit information, or fixes are specified here. Monitor for updates in the connected sources for authoritative vulnerability details.

CVE-2022-24540

CVE-2022-24540 is identified as a Windows ALPC Elevation of Privilege vulnerability. Connected data confirms the CVE is listed in Windows security advisories and KEV-tracking feeds; CVSS v3.1 vector indicates LOCAL, high impact with LOW privileges required and NO user interaction (7.0 base score)...

CVE-2022-26829

CVE-2022-26829 is a Windows DNS Server Remote Code Execution vulnerability. The provided initial document lists CVSS v2 base score 8.5 (HIGH) with network access and user interaction not required, and CVSS v3.1 base score 6.6 (MEDIUM) with network access, high attack complexity, privileges requir...

CVE-2022-29140

Technical details about CVE-2022-29140 (Windows Print Spooler information disclosure) are not publicly provided in the supplied Connected Documents. No specific affected product/version or remediation is described here; monitor official advisories for updates.

CVE-2022-30208

Public technical details about CVE-2022-30208 are not provided in the connected documents. The entry describes a Windows SAM DoS vulnerability but includes no affected product versions, exploit specifics, or remediation. Monitor for official advisories and updates.

CVE-2022-33647

CVE-2022-33647 is a Windows Kerberos elevation-of-privilege vulnerability involving RC4-based encryption (RC4-HMAC/RC4-MD4) in Kerberos. The CIRCL/GoogleProjectZero write-up explains exploitation on the wire: an attacker can force RC4-MD4 in AS-REQ/PA-ETYPE-INFO2 flows, obtain an AS-REP with a RC...

CVE-2023-21537

Technical details about CVE-2023-21537 (affected products, root cause, impact, and fixes) are not provided in the connected documents. Monitor for updates from authoritative sources.

CVE-2023-21555

Technical details for CVE-2023-21555 are not publicly available in the provided Connected Documents or Initial Description. No concrete affected products, root cause, or remediation can be confirmed here. Monitor for updates from official advisories.

CVE-2023-21740

CVE-2023-21740 is a Windows Media Remote Code Execution vulnerability. The CVE is listed in NVD/NVD-derived records with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, resulting in a base score of 7.8 (HIGH). The linked OpenVAS entries reference multiple Windows KB updates and include CV...

CVE-2023-23402

Technical details for CVE-2023-23402 are not publicly available in the provided documents. Monitor for updates from official advisories and connected sources for affected products, impact, and fixes.

CVE-2024-26224

CVE-2024-26224 affects Windows DNS Server and is described as a remote code execution vulnerability. Connected sources (CNVD/NCSC tables) list the impact as allowing execution of arbitrary code or executing random code via the DNS service, with CVSS-like references around 7.2 (HIGH) impact, netwo...

CVE-2024-29061

Technical details about CVE-2024-29061 are not publicly provided in the supplied documents. The records mention a Secure Boot security feature bypass but do not specify affected products, versions, root cause, exploitability, or mitigations. Monitor for updates.

CVE-2026-62781

CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...

CVE-2018-0742

Technical details (affected product/versions/root cause/fix) are not publicly available in the provided documents. Monitor for updates from trusted sources.

CVE-2018-8634

CVE-2018-8634 describes a remote code execution vulnerability in Windows caused by improper handling of objects in memory by Microsoft text-to-speech. The issue affects Windows clients/servers listed in the description (e.g., Windows Server 2016, Windows 10, Windows Server 2019). The root cause i...

CVE-2021-1651

Technical details about CVE-2021-1651 are not provided in the supplied documents; only the vulnerability is named. Monitor for updates from official advisories.

CVE-2021-26425

CVE-2021-26425 is a Windows Event Tracing elevation-of-privilege vulnerability. Affects Windows Event Tracing component with local, low-privilege attack requirements and high impact on confidentiality/integrity/availability (per CVSS 3.1 vector). The connected sources confirm this CVE within Micr...

CVE-2021-33740

CVE-2021-33740 is a Windows Media Remote Code Execution vulnerability affecting Windows/Windows Server; exploitation is described as a local attack requiring user interaction, with the underlying issue in Windows Media components. References from CNVD/EUVD entries describe a Windows Media remote ...

CVE-2021-36938

CVE-2021-36938 affects the Windows Cryptographic Primitives Library and is described as a Windows information-disclosure vulnerability. The available sources identify a vulnerability in the Windows Cryptographic Primitives Library with a CONFIDENTIALITY impact (HIGH per CVSS 3.1) and MEDIUM overa...

CVE-2021-38667

CVE-2021-38667 is a Windows Print Spooler Elevation of Privilege vulnerability. The NVD entry identifies it as a local, low-attack-complexity flaw that yields partial confidentiality, partial integrity, and partial availability impact, with a CVSS v3.1 base score of 7.8 (HIGH) and a local attacke...

CVE-2022-29127

Technical details (affected product/component/versions/root cause/impact/fix) are not publicly provided in the supplied documents. Monitor for updates from the connected sources; these materials do not allow confirmation of vulnerability specifics or remediation actions.

CVE-2022-29151

CVE-2022-29151 is a Windows CSV (Cluster Shared Volume) Elevation of Privilege vulnerability. The NVD entry and MSRC reference describe it as a local-privilege issue in CSV with high impact (confidentiality, integrity, and availability all affected). CVSSv3.1 shows a base score of 7.0, attack vec...

CVE-2023-28238

CVE-2023-28238 is a Windows vulnerability in the IKE protocol extensions that enables remote code execution over the network. The CVSSv3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) yields a base score of 7.5 (HIGH). It requires no user interaction, uses a network attack vector, and the attacke...

CVE-2023-32022

CVE-2023-32022 is a Windows Server Service Security Feature Bypass vulnerability. The NVD entry lists a CVSS v3.1 base score of 7.6 ( HIGH ) with network attack vector, low attack complexity and privileges, user interaction none; confidentiality/integ. impacts are LOW and availability impact HIGH...

CVE-2023-36408

Technical details for CVE-2023-36408 are not publicly available in the provided documents. No affected products, impact, or fixes are specified here; monitor official advisories and vendor updates for confirmation and remediation guidance.

CVE-2024-21313

CVE-2024-21313 is described as a Windows TCP/IP Information Disclosure Vulnerability. The entry provides a CVSSv3.1 base score of 5.3 (Medium) with network attack vector, high attack complexity, no privileges required, user interaction required, and a privacy-focused impact (Confidentiality: High...

CVE-2024-26171

CVE-2024-26171 is reported as a Windows Secure Boot vulnerability with the impact labeled as circumvention of a security measure (CVSS-like score 6.70). The connected documents corroborate its placement under Windows Secure Boot in the security advisories and vulnerability feeds, but they do not ...

CVE-2024-26215

Technical details about CVE-2024-26215 are not publicly available in the provided connected documents. Monitor for updates from official vendors and advisories to obtain affected products, impact and remediation information.

CVE-2024-38131

Technical details about CVE-2024-38131 are not publicly provided in the connected documents. The available material lacks product/version/root-cause/remediation specifics. Monitor official advisories/updates for concrete information.

CVE-2024-49072

Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.

CVE-2019-0727

CVE-2019-0727 describes an elevation-of-privilege flaw in the Diagnostics Hub Standard Collector and the Visual Studio Standard Collector, allowing an attacker who can log on to delete files in arbitrary locations. The vulnerability is rooted in the collectors’ handling of file deletion permissio...