CVE-2025-59282

CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...

CVE-2022-26917

CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...

CVE-2022-30147

Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.

CVE-2024-26226

CVE-2024-26226 is a Windows DFS information disclosure vulnerability. The initial entry confirms the flaw affects Windows DFS and can lead to exposure of sensitive data (cconf. impact). The connected materials show related Windows security updates (KB5036896, KB5036899, KB5036922) addressing secu...

CVE-2024-26231

Technical details about CVE-2024-26231 are not publicly provided in the supplied connected documents. No affected products, versions, or fixes are specified. Monitor official sources for updates.

CVE-2024-38140

CVE-2024-38140 is a Windows RMCAST (Reliable Multicast Transport Driver) remote code execution vulnerability rated CRITICAL (CVSS 3.1: 9.8). The entry indicates an in-network attacker could remotely execute arbitrary code, with no privileges required and no user interaction, under the RMCAST comp...

CVE-2024-38187

Technical details about CVE-2024-38187 are not provided in the supplied documents. Public disclosures or affected products are not specified here. Monitor for updates from Microsoft advisories and CVE records.

CVE-2025-21245

CVE-2025-21245 is a Windows Telephony Service remote code execution vulnerability. The CIRCL feed and CVE listings indicate it affects Windows Telephony Service with potential for executing code from an attacker-supplied payload (impact: execution of arbitrary code) and a CVSS v3.1 base score of ...

CVE-2025-24068

CVE-2025-24068 describes a buffer over-read in the Windows Storage Management Provider that can lead to local information disclosure for an authenticated user. The issue affects Windows Storage Management Provider components and is rated with a local attack vector and a confidentiality impact. Co...

CVE-2018-0751

CVE-2018-0751 is a Windows Kernel API elevation-of-privilege vulnerability affecting Windows family (kernel API permission handling). The connected records reference the CVE as a Windows kernel issue and show related exploitation listings (e.g., exploit-db entries linked in CIRCL). No explicit pr...

CVE-2018-8475

CVE-2018-8475 is a Windows remote code execution vulnerability caused by improper handling of specially crafted image files. Affected: Windows 7; Windows Server 2008/2012; Windows 8.1; Windows RT 8.1; Windows 10; Windows Server 2008 R2/2012/2016; Windows 10 Servers. The description does not provi...

CVE-2019-0621

Technical details about CVE-2019-0621 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2020-17136

CVE-2020-17136 concerns the Windows Cloud Files Mini Filter Driver (cldflt.sys) and its Cloud Filter/mini-filter stack. The issue stems from the HsmpOpCreatePlaceholders path where FltCreateFileEx() is called without IO_FORCE_ACCESS_CHECK/OBJ_FORCE_ACCESS_CHECK flags, allowing user-controlled inp...

CVE-2022-21885

Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.

CVE-2022-26789

CVE-2022-26789 is a Windows Print Spooler Elevation of Privilege vulnerability. According to the sources, the CVSS v3.1 base score is 7.8 (LOCAL, LOW attack complexity, NONE authentication, HIGH confidentiality/integrity/availability impact). Documented exploitation details are not provided in th...

CVE-2022-26813

Technical details about CVE-2022-26813 are not publicly available in the provided connected documents. The CVE description mentions Windows DNS Server RCE, but there are no product/version/root-cause/fix details here. Monitor for updates.

CVE-2022-29102

Technical details about CVE-2022-29102 are not provided in the connected documents. The entry appears reserved/no public details in the supplied materials. Monitor for updates from official advisories; no product/vendor/version specifics are disclosed here.

CVE-2022-30214

CVE-2022-30214 is a Windows DNS Server remote code execution vulnerability. Affected product: Windows DNS Server; vulnerability type: remote code execution in DNS service. Root cause details are not explicitly stated in the provided documents beyond it being a DNS Server RCE. CVSS scores indicate...

CVE-2023-21774

CVE-2023-21774 is a Windows Kernel elevation-of-privilege vulnerability tied to Windows Registry security descriptors. The connected analysis notes it stemmed from incorrect security refresh in the Key Control Block (KCB) for certain keys, enabling incorrect access state after hive-related operat...

CVE-2023-28308

Technical details about CVE-2023-28308 are not provided in the initial document or connected sources. Public information is limited here; monitor for updates from official advisories.

CVE-2023-36003

CVE-2023-36003 is a Microsoft Windows XAML Diagnostics Elevation of Privilege vulnerability. The XAML Diagnostics API can be abused to obtain elevated privileges locally. Public material confirms exploits/POCs exist (e.g., GitHub PoCs) and that patches were released during December 2023 Patch Tue...

CVE-2023-36900

CVE-2023-36900 affects the Windows Common Log File System (CLFS) driver, enabling Elevation of Privilege via an integer overflow/wraparound vulnerability. The connected exploit repository documents a PoC labeled as an exploit for an Integer Overflow or Wraparound in Microsoft CLFS, with a Denial-...

CVE-2024-26175

CVE-2024-26175 is a local-bypass vulnerability in Windows Secure Boot, enabling bypass of the Secure Boot security feature. Affected component: Windows Secure Boot. Root cause: security-measure bypass integrated into Secure Boot; the CVSSv3.1 base metrics indicate a High severity (7.8) with Local...

CVE-2024-26240

CVE-2024-26240 is a Windows Secure Boot vulnerability rated CVSS v3.1 base score 8.0 (AV: Adjacent, AC: Low, PR: None, UI: Required, S: Unchanged, C/I/A: High). The connected documents corroborate that this CVE involves bypassing or circumvention of Secure Boot security measures, with explicit no...

CVE-2024-26241

CVE-2024-26241 is a Win32k elevation-of-privilege vulnerability in Windows. The OpenVAS entries list Win32K as the affected component with local exploitation, requiring low privileges and no user interaction, and causing high confidentiality, integrity, and availability impact. The CVSSv3.1 base ...

CVE-2026-62819

CVE-2026-62819 corresponds to a Remote Code Execution vulnerability in Windows Routing and Remote Access Service (RRAS). Available details indicate that the vulnerability resides in RRAS and could allow an attacker to gain unauthorized code execution on a victim’s machine via a network attack. Th...

CVE-2026-62890

CVE-2026-62890 is a heap-based buffer overflow in Windows GDI+ that allows an authorized attacker to execute code locally. CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, requiring LOW privileges and no user interaction; impact to confidentiality, integrity, and availability is HIGH. No...

CVE-2019-0579

Technical details for CVE-2019-0579 (affected software, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2019-1183

CVE-2019-1183 is described as fully mitigated by security updates for CVE-2019-1194; no separate update is required. Connected documents show CVE-2019-1194 as a remote code execution vulnerability in Internet Explorer’s scripting engine (memory corruption risk via VBScript/IE scripting paths). Th...

CVE-2019-1271

CVE-2019-1271 is described in connected CNVD-2019-31848 as a privilege escalation vulnerability in hdAudio.sys affecting Microsoft Windows and Windows Server. The entry notes that an attacker who logs on to the system and runs a specially crafted application can exploit this vulnerability to comp...

CVE-2020-1034

Technical details specific to CVE-2020-1034, including affected products, root cause, and fixes, are not provided in the connected documents. Monitor for official updates from Microsoft Security Update Guide and MSKB posts for this CVE.

CVE-2020-1470

CVE-2020-1470 – Windows Work Folders Service Elevation of Privilege : An elevation of privilege vulnerability exists in the Windows Work Folders Service caused by improper handling of memory. To exploit, an attacker must first gain code execution on the victim system and then run a specially craf...

CVE-2020-16911

CVE-2020-16911 is a Windows GDI memory handling remote code execution vulnerability. An attacker can exploit memory objects via network/vector (e.g., via crafted web content or documents) to gain code execution and install/modify data or create accounts. The vulnerability is addressed by a Micros...

CVE-2021-1669

CVE-2021-1669 is a Windows Remote Desktop Security Feature Bypass vulnerability. The linked NVD entry notes a high-severity, network-based issue (CVSS v3.1: 8.8; privileges required: LOW; user interaction: NONE; impact: HIGH across confidentiality, integrity, availability). OpenVAS-derived entrie...

CVE-2021-26431

CVE-2021-26431 affects the Windows Recovery Environment Agent and is an elevation-of-privilege vulnerability. CVSS v3.1 base score 7.8 (LOCAL, LOW attack complexity, PRIVILEGES-REQUIRED: LOW, UI: NONE) with HIGH confidentiality, integrity, and availability impacts. The issue is addressed by Micro...

CVE-2021-34492

Technical details for CVE-2021-34492 are not provided in the supplied documents. Monitor for updates from NVD, Microsoft advisories, or vendor/CSIRT bulletins for affected products and remediation.

CVE-2021-42283

CVE-2021-42283 is an NTFS Elevation of Privilege vulnerability with documented CVSS 3.1 base score 7.8 (HIGH) and local attack vector with low complexity, no authentication, and user interaction not required. The entry also lists CVSS 2.0 data (MEDIUM) and a CNA score. There are no connected docu...

CVE-2022-41052

CVE-2022-41052 is a Windows Graphics Component remote code execution vulnerability. The CVSS 3.1 base score is 7.8 (HIGH) with an attack vector of LOCAL, requiring user interaction, and impact on confidentiality, integrity, and availability (all HIGH). Affected details (product, component, root c...

CVE-2023-21679

Technical details about CVE-2023-21679 are not provided in the supplied documents. The connected EUVD/KB entries do not describe affected products, versions, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2023-23422

CVE-2023-23422 is a Windows kernel elevation-of-privilege vulnerability described in the Registry hive memory‑corruption research. The exposed flaw is a local, kernel‑level issue where memory corruption in a registry hive (notably HKCU) can be triggered to craft an out‑of‑bounds cell index that r...

CVE-2023-32057

CVE-2023-32057 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected sources indicate an attacker can trigger RCE by sending a malicious MSMQ packet to an MSMQ server, enabling remote code execution on the server side. A mitigation documented in the sources is t...

CVE-2024-38196

CVE-2024-38196 is tied to the Windows Common Log File System Driver and is described as an Elevation of Privilege (local) vulnerability. The CVE is listed with a CVSSv3.1 base score of 7.8 (HIGH) and a local attack vector with low attack complexity, requiring low privileges and no user interactio...

CVE-2026-58608

CVE-2026-58608 affects Windows Print Spooler components, where a race condition from improper synchronization on a shared resource enables remote code execution over a network. The vulnerability allows an authenticated attacker with low privileges to execute code with high impact (C/H; I/H; A/H) ...

CVE-2026-62822

CVE-2026-62822 describes an integer overflow/wraparound in Windows GDI+ that allows an unauthenticated attacker to execute code remotely over a network. The CVSSv3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 ( HIGH ), indicating high impact for confidentiality, integ...

CVE-2017-0158

CVE-2017-0158 is a Windows scripting engine memory corruption vulnerability. The issue arises from improper handling/sanitization of in-memory handles in the Scripting Engine, enabling remote code execution when a user visits a malicious site or opens a crafted document. Affected platforms includ...

CVE-2018-8482

CVE-2018-8482 is an information-disclosure vulnerability in Windows Media Player where file information can be improperly disclosed. Affected products include Windows 7, Windows 8.1, Windows 10 and corresponding server editions listed in the description. The root cause is an information disclosur...

CVE-2019-0578

CVE-2019-0578 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of in-memory objects, enabling code execution when a user opens a crafted file. Affected systems include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (various ...

CVE-2019-0688

CVE-2019-0688 : Windows TCP/IP Information Disclosure vulnerability due to improper handling of fragmented IP packets in the TCP/IP stack. The OpenVAS/OpenVAS-related entries reference Windows KB updates (KB4493509, KB4493474/0/1/6/ etc.) addressing multiple Windows vulnerabilities, including CVE...

CVE-2019-0846

The CVE-2019-0846 entry concerns a remote code execution vulnerability in the Microsoft Windows Jet Database Engine. Connected sources describe the root cause as improper handling of objects in memory within the Jet Database Engine, enabling arbitrary code execution when a victim opens a crafted ...

CVE-2019-0941

Technical details about CVE-2019-0941 are not publicly provided in supplied documents. The set includes only general description of a DoS in IIS request filtering and related updates; no affected product versions or root causes are specified here. Monitor for updates.