CVE-2020-0738

CVE-2020-0738 is a Windows Media Foundation memory corruption vulnerability. The provided documents identify Microsoft Windows Media Foundation as the affected component and describe memory corruption when handling objects in memory, which the CVSS metrics classify as a high-severity, remotely ex...

CVE-2020-0915

Technical details for CVE-2020-0915 are not publicly provided in the supplied documents. Monitor for updates from official sources; no affected product/version/impact/fix can be confirmed from the provided data.

CVE-2020-1537

CVE-2020-1537 is a Windows Elevation of Privilege vulnerability in Windows Remote Access caused by improper file handling. Exploitation requires code execution on a victim system, followed by launching a crafted app. Microsoft patches address the issue by ensuring Windows Remote Access correctly ...

CVE-2020-16958

CVE-2020-16958 is a local elevation-of-privilege vulnerability affecting Windows Backup Engine. The connected sources identify the issue as Elevation of Privilege in the Windows Backup Engine, with CVSS v3.1 base score 7.8 (HIGH) and CVSS v2.0 base score 7.2, indicating a local attacker could pot...

CVE-2021-33781

Technical details for CVE-2021-33781 are not publicly available in the provided documents. No affected products, versions, exploitation status, or fixes are disclosed here. Monitor for official advisories for updates.

CVE-2021-34440

Technical details about CVE-2021-34440 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are disclosed here. Monitor for updates and official advisories for specifics.

CVE-2021-34483

CVE-2021-34483 is a Windows Print Spooler elevation of privileges vulnerability. NVD lists CVSS v3.1: LOCAL, LOW complexity, PRIV: LOW, UI: NONE, with HIGH impact to C/I/A (base 7.8). CVSS v2: LOCAL, LOW, C/P/I/P/A/P (base 4.6). The exact root cause and patched/affected versions are not detailed ...

CVE-2022-21843

CVE-2022-21843 affects Windows Internet Key Exchange (IKE) Protocol Extensions. The vulnerability is a Remote Code Execution in the Windows IKE Extension component, with a network-based attack surface and no user interaction required. Root cause is within the IKE Extensions implementation that ca...

CVE-2022-22011

Technical details (affected components, root cause, impact, and fixes) for CVE-2022-22011 are not provided in the supplied documents. No public details are included here. Monitor official advisories for updates.

CVE-2022-26816

Technical details about CVE-2022-26816 (affected products, root cause, impact, or patch specifics) are not provided in the connected documents. Please monitor for updates as public details are not available in the supplied materials.

CVE-2023-21730

Technical details about CVE-2023-21730 are not provided in the supplied documents; no affected products, versions, root cause, or fixes are disclosed here. Monitor for updates from official sources for further information.

CVE-2023-23407

CVE-2023-23407 : Windows PPPoE remote code execution affecting the PPPoE stack. According to the CVE record, the vulnerability enables total impact on confidentiality, integrity, and availability (CVSS 3.1: 7.1, HIGH). Exploitation is classified as adjacent network access with high complexity and...

CVE-2023-32016

Technical details about CVE-2023-32016 are not publicly available in the provided connected documents. Monitor for updates from Microsoft and security feeds for affected products, vulnerable components, and fixes.

CVE-2023-33154

Technical details about CVE-2023-33154 are not publicly available in the provided connected documents. Please monitor official advisories and CVE listings for updates.

CVE-2024-26194

CVE-2024-26194 is a Secure Boot security feature bypass vulnerability. The CVSS vector indicates Local access, high attack complexity, and no privileges/UI required, with high confidentiality, integrity, and availability impact. Microsoft’s MSRC page is referenced for a potential fix, and ENISA/N...

CVE-2024-26205

CVE-2024-26205 is a Windows RRAS remote code execution vulnerability. Connected sources corroborate that it is network-exploitable with a high base score (8.8) and requires user interaction, enabling remote code execution with high impact on confidentiality, integrity and availability. The issue ...

CVE-2024-26242

CVE-2024-26242 is a Windows Telephony Server elevation-of-privilege vulnerability. The connected documents indicate a local-privilege escalation with CVSS v3.1 base score 7.0 (AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Root cause and exact exploit details are not provided in the sources. Microsoft has...

CVE-2024-26248

CVE-2024-26248 is a Windows Kerberos Elevation of Privilege vulnerability with a CVSS v3.1 base score of 7.5 (Impact: High; Privileges Required: Low; Attack Vector: Network; User Interaction: None). The connected sources list this CVE under Windows Kerberos and assign an impact of Obtaining Incre...

CVE-2024-28901

Microsoft Windows: CVE-2024-28901 affects the Windows Remote Access Connection Manager. The vulnerability is an information disclosure in RasMan, exploitable locally with low complexity and requiring low privileges; it grants high confidentiality impact and does not affect integrity or availabili...

CVE-2024-28925

CVE-2024-28925 is listed in the Microsoft Windows Secure Boot family as a Secure Boot security feature bypass with high impact (CVSS 3.1: 8.0; Adjacent access, no privileges required, user interaction required). The connected advisory (NCSC) confirms a Windows Secure Boot bypass in the same CVE g...

CVE-2026-23670

CVE-2026-23670 affects Windows Virtualization-Based Security (VBS) security feature. The issue is a local, high-privilege bypass of VBS protections, with no user interaction required (UI: NONE). Exploitation is possible with local access and may impact confidentiality and integrity (both HIGH), w...

CVE-2019-1162

CVE-2019-1162 is a Windows elevation-of-privilege vulnerability arising from improper handling of ALPC calls. A local attacker who can log on could run a crafted application to execute code in the security context of the local system, potentially installing programs, modifying data, or creating n...

CVE-2021-26426

CVE-2021-26426 pertains to Windows User Profile/User Account Profile Picture Elevation of Privilege in the Windows User Profile Service. The primary description confirms an elevation of privilege vulnerability, and NVD metrics show a local, low-complexity vulnerability with local access and parti...

CVE-2021-31194

CVE-2021-31194 is described in the provided documents as an OLE Automation Remote Code Execution vulnerability in Windows. The NVD entry lists CVSSv3.1 base score 8.8 ( HIGH ) with network attack vector, low complexity, privileges required: LOW, and user interaction NONE, resulting in HIGH confid...

CVE-2021-31961

CVE-2021-31961 corresponds to a Windows InstallService Elevation of Privilege vulnerability in Microsoft Windows/Windows Server. The affected component is InstallService, and root cause/technical specifics are not detailed beyond the privilege-escalation nature. Impacts include local privilege es...

CVE-2021-33749

CNVD-2021-62476 and NVD entries describe CVE-2021-33749 as a Windows DNS Snap-in remote code execution vulnerability in Microsoft Windows/Windows Server. Affected component: DNS Snap-in. Root cause: remote code execution via the DNS Snap-in. Impact: potential full system compromise; confidentiali...

CVE-2021-33757

Technical details for CVE-2021-33757 are not publicly disclosed in the provided documents. The entries reference the vulnerability by name but do not specify affected products/versions, root cause, impact, or fixes. Monitor for updates.

CVE-2022-21883

CVE-2022-21883 is a Windows vulnerability in the IKE extension that can be exploited over the network to cause a denial of service . The NVD entry lists a network attack vector with high impact on availability (CVSS v3.1 base score 7.5; impact is confined to availability). The root cause is descr...

CVE-2022-21995

CVE-2022-21995 is a Windows Hyper-V Remote Code Execution vulnerability. According to the connected sources, it affects Microsoft Hyper-V and has a CVSS v3.1 base score of 7.9 (HIGH) with an adjacent network attack vector, high attack complexity, no privileges required, and user interaction requi...

CVE-2022-22040

Technical details about CVE-2022-22040 are not publicly provided in the supplied documents. Monitor for updates from official sources for affected products, impact specifics, and fixes before taking action.

CVE-2022-26822

Technical details for CVE-2022-26822 are not provided in the connected documents. The supplied materials do not disclose affected products, root cause, or fixes. Monitor for updates.

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...

CVE-2023-21526

Technical details about CVE-2023-21526 are not publicly available in the provided documents. Monitor for updates from official advisories; no specifics on affected products, root cause, impact, or mitigations are provided here.

CVE-2023-21822

Technical details for CVE-2023-21822 are not publicly available in the provided documents. Monitor for updates.

CVE-2023-23403

CVE-2023-23403 is Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. The CVE entry describes a remote code execution flaw in Microsoft’s PostScript and PCL6 Printer Driver. Connected CNVD-2023-30868 corroborates the same driver-based RCE issue; other connected...

CVE-2024-26232

The CVE-2024-26232 entry describes a Remote Code Execution vulnerability in Microsoft Message Queuing (MSMQ). The available details indicate a LOCAL attack with LOW privileges required and USER INTERACTION required, with HIGH impact on confidentiality, integrity, and availability (CVSS 7.3). The ...

CVE-2026-50518

CVE-2026-50518 is a heap-based buffer overflow in Windows DHCP Server that allows an unauthenticated attacker to execute code remotely over a network. Public sources (NVD, EUVD, CIRCL, MSRC update guidance) confirm the flaw and its impact as remote code execution; Talos notes exploitation in the ...

CVE-2026-58594

CVE-2026-58594 is a Windows Remote Desktop Client RCE vulnerability caused by an integer overflow/wraparound in the RDP client. Public sources (NVD/NCSC/CIRCL) attribute network-based exploitation with potential arbitrary code execution on vulnerable Windows systems. Connected entries confirm the...

CVE-2018-0747

Technical details for CVE-2018-0747 are not publicly provided in the supplied documents; no concrete affected products, root cause, or patch information are present. Monitor for updates.

CVE-2019-0802

CVE-2019-0802 refers to a Windows Graphics Device Interface information disclosure vulnerability. The connected sources describe an issue in GDI where memory objects are not handled securely, enabling an information disclosure under exploitation. Impact is information disclosure of memory content...

CVE-2021-26865

CVE-2021-26865 is discussed in depth in connected materials (Project Zero/blog post and MSRC notes). The Windows Container Execution Agent elevation issue was demonstrated to enable container escapes from a non‑administrative container user by abusing server/application silos and object manager r...

CVE-2021-34533

CVE-2021-34533 is a Windows Graphics Component Font Parsing Remote Code Execution Vulnerability. Affected software is the Windows Graphics Component; the issue arises from font parsing logic, enabling code execution on the target system. The CVSS data indicates a HIGH impact with potential local ...

CVE-2021-41333

CVE-2021-41333 is a Windows Print Spooler Elevation of Privilege vulnerability. The available connected sources confirm affected software as Windows OS with the Print Spooler service vulnerable to local elevation of privileges. The root cause is a flaw in the Print Spooler handling that could all...

CVE-2021-43215

CVE-2021-43215 affects the iSNS (Internet Storage Name Service) server. It is a memory corruption vulnerability that can lead to remote code execution when an attacker sends a specially crafted request to an affected iSNS server. The issue is network-exploitable (no user interaction) and is consi...

CVE-2022-24542

Technical details for CVE-2022-24542 are not provided in the connected documents. The EUVD/CNVD entries reference Win32k elevation issues but do not supply affected products, versions, root cause, or fixes for this CVE. Monitor for updates.

CVE-2022-30143

CVE-2022-30143 is an LDAP Remote Code Execution vulnerability affecting Windows LDAP, where exploitation is contingent on the LDAP MaxReceiveBuffer policy being configured higher than the default. The Linked AVLEONOV content notes that the vulnerability exists for LDAP RCEs during Patch Tuesday J...

CVE-2022-34701

Technical details about CVE-2022-34701 (affected product, root cause, impact, or fix) are not provided in the connected documents; monitor for official disclosures and updates.

CVE-2022-38041

CVE-2022-38041 is a Denial-of-Service vulnerability in Windows Secure Channel. Connected documents confirm the affected component is Windows Secure Channel and the impact is DoS (CVSSv3.1 base ~7.5). Microsoft issued security updates in the Oct 2022 cycle to fix this vulnerability; exploitation s...

CVE-2023-28244

Technical details about CVE-2023-28244 are not publicly available in the provided documents. Monitor for updates from official sources (NVD/Microsoft) to obtain affected products, root cause, impact, and remediation information.

CVE-2024-28922

CVE-2024-28922 is a Secure Boot security feature bypass vulnerability. CVSS‑3.1 metrics show a physical attack vector, low attack complexity, low privileges required, user interaction needed, with no confidentiality impact, but high integrity impact (base score 4.1, Medium). Connected sources ref...