CVE-2023-21678

Technical details about CVE-2023-21678 are not publicly provided in the supplied documents. Please monitor for updates from Microsoft and related advisories.

CVE-2023-35367

Technical details for CVE-2023-35367 are not publicly provided in the supplied documents. No specific affected products, versions, root cause, remediation, or exploit information is available here. Monitor official sources for updates.

CVE-2019-0552

CVE-2019-0552 is a Windows privilege-escalation vulnerability in the COM Desktop Broker component. The issue is triggered locally and allows an attacker with limited privileges to run code with elevated privileges within affected Windows versions (including Windows 10/Server 2016/2019, Windows 8....

CVE-2019-0575

CVE-2019-0575 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. The issue can be triggered when a user opens a specially crafted file, enabling an attacker to run arbitrary code on the victim’s machine. The vulnerability ...

CVE-2019-0579

Technical details for CVE-2019-0579 (affected software, root cause, impact, remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0791

CVE-2019-0791 is a remote code execution vulnerability in the Microsoft XML Core Services (MSXML) parser when it processes user input. The issue enables network-based exploitation with user interaction required, and is rated HIGH (CVSS v3.0: 8.8). The initial document does not specify a fixed pat...

CVE-2019-0904

The CVE-2019-0904 issue is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of in-memory objects. Attackers could entice users to open a specially crafted file to run arbitrary code on affected systems. Affected software/hardware: Windows Jet Database ...

CVE-2019-1183

CVE-2019-1183 is described as fully mitigated by security updates for CVE-2019-1194; no separate update is required. Connected documents show CVE-2019-1194 as a remote code execution vulnerability in Internet Explorer’s scripting engine (memory corruption risk via VBScript/IE scripting paths). Th...

CVE-2020-0608

CVE-2020-0608 is an information disclosure vulnerability affecting the Win32k component where kernel information is improperly disclosed. The root cause is in win32k exposing kernel data, leading to potential information disclosure with local access and no user interaction required. The CVSS metr...

CVE-2020-1113

Technical details for CVE-2020-1113 are not publicly provided in the connected documents. Monitor for official advisories to learn affected products, root cause, impact, and fixes.

CVE-2020-17140

CVE-2020-17140 corresponds to a Windows SMB information-disclosure vulnerability. Public documents (NVD entry and OpenVAS feeds) describe network-exposed impact with confidentiality and, in some sources, availability concerns, while the vulnerability’s root cause is not detailed beyond “SMB infor...

CVE-2021-31968

CVE-2021-31968 is a Windows Remote Desktop Services Denial of Service vulnerability. The vulnerability affects Microsoft Windows systems exposing Remote Desktop Services and can impact availability (per CVSS v3.1: HIGH, AV:N/AC:L/PR:N/UI:N/S:U/A:H). Connected sources confirm it as a remotely trig...

CVE-2021-34508

Technical details for CVE-2021-34508 (affected component, root cause, remediation specifics) are not provided in the connected documents. Monitor official advisories (MSRC/NVD) for updates.

CVE-2021-34516

Technical details about CVE-2021-34516 are not publicly available in the provided documents. Monitor for official disclosures or advisories for affected products, impact, and remediation.

CVE-2022-21992

Technical details about CVE-2022-21992 are not provided in the supplied documents. Connected records reference KEV listings and related Windows KB updates, but this set does not specify affected products, root cause, impact, or remediation for this CVE. Monitor for official disclosures or vendor ...

CVE-2022-26783

CVE-2022-26783 corresponds to a Windows Hyper-V Shared Virtual Hard Disks information disclosure vulnerability. Connected sources confirm the issue affects Hyper-V and involves disclosure of sensitive data, with public advisories and vulnerability lists referencing this CVE family. The CNVD/ENISA...

CVE-2022-29138

Technical details (affected products/components, root cause, exploit information, or remediation) are not provided in the supplied documents. Monitor official disclosures from Microsoft and the referenced KB/MSRC pages for updates.

CVE-2022-38026

CVE-2022-38026 is a Windows DHCP Client Information Disclosure vulnerability. Affected component: Windows DHCP Client. Root cause: insufficient protection of sensitive information on the network. Impact: data disclosure (CVE entry lists confidentiality impact as High). Exploitability: Local acces...

CVE-2022-41047

CVE-2022-41047 relates to a Microsoft ODBC Driver issue affecting the Microsoft ODBC SQL Server Driver (sqlsrv32.dll) used for ODBC connections. OpenVAS-derived entries reference post-update behavior where apps using the ODBC driver may fail to connect or encounter protocol errors in TDS streams,...

CVE-2023-23385

Technical details for CVE-2023-23385 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2023-28273

CVE-2023-28273 is a Windows Clip Service Elevation of Privilege vulnerability. The initial data lists a local attack vector with high impact and exploitation conditions: local access, high attack complexity, low privileges required, no user interaction, and impact to confidentiality, integrity, a...

CVE-2023-35365

CVE-2023-35365 affects Windows RRAS with remote code execution potential. Exploitation, per the linked discussion, requires an attacker to send crafted packets to an affected RRAS server. The RRAS feature is not installed or enabled by default on Windows systems, which reduces exposure for users ...

CVE-2023-36906

Technical details for CVE-2023-36906 are not publicly provided in the supplied documents. No affected products, root cause, or fixes are confirmed here. Monitor for updates.

CVE-2025-21329

CVE-2025-21329 is a MapUrlToZone Security Feature Bypass in Windows. Public docs identify it as a bypass of a security feature (CVE-2025-21329) with CVSS v3.1 base metrics indicating NETWORK attack vector, low attack complexity, no privileges required, user interaction required, and a MEDIUM seve...

CVE-2026-35421

CVE-2026-35421 describes a heap-based buffer overflow in Windows GDI that permits a local attacker to execute arbitrary code. The entry lists a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, NO privileges required, user interaction required, and impacts to con...

CVE-2026-50508

CVE-2026-50508 describes an exposure of sensitive information in Windows NTLM that enables an unauthenticated network-based spoofing capability. The vulnerability affects the Windows NTLM authentication path and is documented with a network attack vector and a high confidentiality impact. Public ...

CVE-2026-62778

CVE-2026-62778 refers to a Windows DNS vulnerability described as a use-after-free in the DNS service that enables a remote attacker to elevate privileges over a network. The affected component is the Windows DNS service; the root cause is a use-after-free condition in DNS processing. The impact ...

CVE-2019-0536

Technical details for CVE-2019-0536 are not provided in the connected documents. No product/version/impact data is available here. Monitor for updates.

CVE-2019-0732

CVE-2019-0732 affects Windows by bypassing Device Guard due to improper handling of calls to the LUAFV driver (luafv.sys). The issue enables local, low-privilege attackers to achieve partial confidentiality, integrity, and availability impacts as described in the CVE context. Exploitation is docu...

CVE-2019-0848

CVE-2019-0848 is an information disclosure vulnerability in the Windows win32k component where kernel information is improperly provided. The issue is distinct from CVE-2019-0814. Public data indicates local access and potential partial confidentiality impact, with CVSS metrics showing a low to m...

CVE-2019-0851

Technical details on CVE-2019-0851 are not publicly provided in the supplied connected documents. Monitor official advisories for updates on affected products, root cause, and remediation.

CVE-2020-1518

Technical details about CVE-2020-1518 (affected component, root cause, impact, exploitability or patch specifics) are not publicly provided in the connected documents; monitor for updates from official sources for concrete information.

CVE-2020-16940

The CVE-2020-16940 issue is an elevation of privilege in Windows computing environments caused by the Windows User Profile Service (ProfSvc) mishandling junction points. The vulnerability allows an attacker who can log on to exploit a specially crafted application to delete files or folders with ...

CVE-2021-24078

CVE-2021-24078 is a Windows DNS Server remote code execution vulnerability affecting Windows Server DNS components. Public sources describe an unauthenticated, network-based RCE when a DNS server processes crafted queries, with CVSS v3.1 score of 9.8 (CRITICAL). Public patches exist as part of Mi...

CVE-2021-31191

CVE-2021-31191 refers to a Windows Projected File System FS Filter Driver information disclosure vulnerability. The available sources identify the affected component as the FS Filter Driver in Windows and indicate a potential confidentiality impact. CVSS metrics from NVD/Microsoft show: CVSS v3.1...

CVE-2021-33751

CVE-2021-33751 is a Storage Spaces Controller Elevation of Privilege vulnerability affecting Windows Storage Spaces Controller. The CVSS indicates local, low attack complexity, with high impact to confidentiality, integrity, and availability. Affected component is Storage Spaces Controller; root ...

CVE-2021-36974

Technical details for CVE-2021-36974 are not publicly provided in the supplied documents. No affected product, root cause, or remediation is specified here. Monitor official advisories for updates.

CVE-2022-21897

Technical details about CVE-2022-21897 are not publicly provided in the supplied documents. No specific affected products/versions or fixes are listed here. Monitor for updates.

CVE-2022-21963

CVE-2022-21963 is described as a Windows Resilient File System (ReFS) Remote Code Execution vulnerability. The available data shows a high-impact, local/physical-attack scenario with no user interaction, but no concrete remediation details or version-specific affected products are provided beyond...

CVE-2022-22710

CVE-2022-22710 corresponds to a denial-of-service in the Windows Common Log File System Driver. The provided documents confirm the affected component (CLFS Driver) and give CVSS details (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with local access required and high availability impact, but do not speci...

CVE-2022-34719

Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.

CVE-2022-35744

Technical details (affected product, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates from official CVE sources; no specifics about exploitation, vectors, or mitigations are included here.

CVE-2023-23409

CVE-2023-23409 corresponds to a CSRSS Information Disclosure vulnerability. The available data indicate a local attack vector with low attack complexity and low privileges required, yielding a high confidentiality impact (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The description notes CSRSS...

CVE-2023-24939

Technical details about CVE-2023-24939 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are described here. Monitor for updates.

CVE-2023-28228

CVE-2023-28228 is documented as a Windows spoofing vulnerability. Based on the CVE entry, its CVSS v3.1 base score is 5.5 (Medium) with a Local attack vector, Low attack complexity, No privileges required, User interaction required, and Impact mainly on integrity (High) with no confidentiality/av...

CVE-2024-38033

Technical details about CVE-2024-38033 are not provided in the supplied documents. Monitor for updates from Microsoft and vulnerability feeds for affected products, versions, and fixes.

CVE-2025-21260

Technical details about CVE-2025-21260 are not publicly provided in the connected documents. Monitor for updates from Microsoft and CVE sources for affected components, impact, and remediation.

CVE-2025-21369

CVE-2025-21369 is listed by the NCSC advisory as a vulnerability in Microsoft Windows’ Digest Authentication that enables executing arbitrary code. The advisory attributes an overall high severity (CVSS v3.1 base 8.80) with a network attack vector and impact. The connected document confirms the v...

CVE-2025-59282

CVE-2025-59282 affects Inbox COM Objects. The vulnerability is a race condition caused by concurrent access to a shared resource, leading to potential local code execution by an authenticated attacker with local access. The score in public metrics lists a CVSS v3.1 base score of 7.0 (HIGH) with l...

CVE-2026-42985

CVE-2026-42985 is described in connected sources as a heap-based buffer overflow in the Remote Desktop Client that allows an unauthenticated attacker to execute code over the network. The initial and connected docs provide the vulnerability description and a high CVSS score (8.8, HIGH) with netwo...