CVE-2025-29809

CVE-2025-29809 is a Windows Kerberos security feature bypass vulnerability. The issue involves insecure storage of sensitive information in Kerberos, enabling an attacker with local access and low privileges, and no user interaction, to bypass a security feature. Affected product/area: Windows Ke...

CVE-2019-0839

Technical details about CVE-2019-0839 are not publicly provided in the connected documents. Monitor for updates and new public disclosures before drawing conclusions on affected components, root cause, or remediation.

CVE-2020-16935

The CVE-2020-16935 entry describes a Windows elevation-of-privilege flaw caused by improper handling of COM object creation. The vulnerability could allow an attacker who has logged on to run arbitrary code with elevated privileges by executing a specially crafted application, with exploitation e...

CVE-2021-1722

CVE-2021-1722 is a Windows Fax Service Remote Code Execution vulnerability. Affects Windows Fax Service through a network attack with no authentication; CVSS v3.1 base score up to 9.8 (C:H/I:H/A:H; AV:N; UI:N; PR:N; S:U). OpenVAS/NVD entries corroborate network-based RCE with high impact to confi...

CVE-2021-33755

Technical details about CVE-2021-33755 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-41367

CVE-2021-41367 is described as an NTFS Elevation of Privilege Vulnerability. The Connected NVD entry lists CVSS v3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, PRIVILEGES REQUIRED: LOW, and UI: NONE. Impact per CVSS3.1 indicates high confidentiality, integrity, and ava...

CVE-2023-23421

CVE-2023-23421 is part of a family of hive-memory-corruption bugs in the Windows Registry (kernel) that enable local privilege escalation. The connected analysis shows an attacker-controlled hive memory‑corruption primitive (e.g., UAF in a registry key or related hive data) that can be exploited ...

CVE-2023-24862

CVE-2023-24862 is a Windows Schannel (Secure Channel) Denial of Service vulnerability. The available data identifies the flaw as local with low privileges required and a high availability impact (CVSS v3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=N/I=N/A=H). Public documents do not provide granular technical d...

CVE-2023-24870

Technical details about CVE-2023-24870 (affected product, root cause, impact, remediation) are not provided in the supplied documents. Monitor for updates from Microsoft and CVE databases.

CVE-2023-24924

CVE-2023-24924 is a remote code execution vulnerability in Microsoft PostScript and PCL6 Class Printer Driver. Connected sources corroborate an RCE flaw in the PostScript and PCL6 printer driver stack, enabling an attacker to remotely execute code. The CVE entry lists a high-severity impact (CVSS...

CVE-2023-35387

CVE-2023-35387 affects the Windows Bluetooth A2DP driver, described as an Elevation of Privilege vulnerability. The CVSSv3.1 metrics indicate an adjacent attack vector, no privileges required, low attack complexity, user interaction required, and a CHANGED scope with HIGH impacts to confidentiali...

CVE-2024-43623

CVE-2024-43623 is documented across connected sources as a Windows NT OS Kernel elevation-of-privilege vulnerability. The ENISA/NCSC summary and related Microsoft patch-coverage references confirm it affects the Windows NT OS Kernel and was addressed via the November 2024 update cycle (e.g., KB50...

CVE-2025-24066

CVE-2025-24066 is a local privilege escalation in Windows Kernel-Mode Drivers caused by a heap-based buffer overflow in the kernel streaming service driver. The impact is increased privileges (local), with the vulnerability exploitable only locally. Microsoft has released updates addressing this ...

CVE-2018-0811

Technical details are not publicly available in the provided connected documents. Monitor for updates on EUVD entries and any new disclosures related to CVE-2018-0811.

CVE-2018-0897

CVE-2018-0897: Information disclosure in the Windows kernel across multiple Windows versions (Server 2008 SP2/R2 SP1, Windows 7 SP1, 8.1/RT 8.1, Server 2012/R2, Windows 10 1511–1709, Server 2016) due to how memory addresses are handled. The vulnerability is mapped to “Windows Kernel Information D...

CVE-2018-8271

CVE-2018-8271 is an information-disclosure vulnerability in Windows where the bowser.sys kernel‑mode driver mishandles objects in memory. Affected products include Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows Server 2016, Window...

CVE-2019-0554

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2019-0602

The connected advisories describe a GDI information disclosure vulnerability in Microsoft Windows (CVE-2019-0602 family). Affected component: Graphics Device Interface (GDI). Root cause stated: improper handling of objects in memory leading to memory disclosure. Impact: information disclosure; (n...

CVE-2019-0635

Technical details (affected components, root cause, versions, and fixes) are not publicly available in the provided documents. Monitor for updates. CVE-2019-0635 concerns information disclosure in Windows Hyper-V where input from a guest OS may not be properly validated.

CVE-2019-0637

Technical details about CVE-2019-0637 (Windows Defender Firewall security feature bypass) are not publicly provided in the connected documents; monitor for updates to learn of affected products, impact, and fixes.

CVE-2019-0772

Technical details for CVE-2019-0772 are not publicly available in the provided documents. Monitor for updates; connected data does not include affected products, versions, impact, or remediation specifics.

CVE-2020-0655

CVE-2020-0655 corresponds to a Remote Desktop Services vulnerability where an authenticated attacker can trigger remote code execution via clipboard redirection. The connected KB entries confirm the CVE is among multiple Microsoft Windows vulnerabilities and highlight the affected component as Re...

CVE-2020-0669

Technical details for CVE-2020-0669 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2020-1247

Technical details about CVE-2020-1247 are not provided in the connected documents. Public details (affected product/versions, root cause, impact, fix) are not disclosed here. Monitor official advisories and CVE databases for updates.

CVE-2020-1488

Technical details about CVE-2020-1488 are not publicly available in the provided connected documents. The supplied materials only reiterate a Windows AppX Deployment Extensions privilege-elevation issue with a Microsoft advisory; monitor for updates.

CVE-2020-17098

CVE-2020-17098 maps to a Windows GDI+ Information Disclosure vulnerability. Connected documents reference this ID across multiple OpenVAS entries and NVD/NVD-derived records, with CVSS details indicating local access and varying impact on confidentiality (high in CVSS 3.1 vectors, partial in some...

CVE-2021-34498

Technical details about CVE-2021-34498 are not publicly provided in the connected documents. The available sources (NVD/NCSC/CNVD, etc.) mention the vulnerability at a high level without specifics on affected products, versions, impact, or fixes. Monitor for updates.

CVE-2021-36954

CVE-2021-36954 is a Windows Bind Filter Driver Elevation of Privilege vulnerability. The issue affects Windows where a local attacker can exploit the Bind Filter Driver to elevate privileges with low privileges and no user interaction, potentially affecting confidentiality, integrity, and availab...

CVE-2021-38638

CVE-2021-38638 corresponds to a Windows Elevation of Privilege vulnerability in the Windows Ancillary Function Driver for WinSock. According to the NVD entry, the issue has a CVSS v3.1 base score of 7.8 (High) with LOCAL attack vector, LOW attack complexity, and privileges required set to LOW; co...

CVE-2021-38665

CVE-2021-38665 is described as a Remote Desktop Protocol Client Information Disclosure Vulnerability. The provided records show CVSSv3.1 base score 6.5 (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI: REQUIRED) and a CNA-provided score of 7.4 (HIGH confidentiality impact). Exploitation detai...

CVE-2022-30155

Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.

CVE-2022-37956

CVE-2022-37956 is a Windows kernel elevation-of-privilege vulnerability involving local, memory-corruption in the registry hive path. The CVE is described as a Windows Kernel Elevation of Privilege Vulnerability with a CVSSv3.1 base score of 7.8 (HIGH); attack vector LOCAL, complexity LOW, privil...

CVE-2022-37984

CVE-2022-37984 is a Windows WLAN Service privilege elevation vulnerability. Public sources describe it as an improper privilege assignment in the Windows WLAN Service that allows a local attacker to elevate to higher privileges (impact: increased entitlements). The CNVD/ENISA entries corroborate ...

CVE-2022-41045

Technical details about CVE-2022-41045 are not provided in the supplied documents. The connected records reference related Windows updates and KEV listings but do not specify affected products, root cause, or remediation.

CVE-2023-21804

Technical details about CVE-2023-21804 are not publicly available in the provided documents. Monitor for updates from Microsoft and related CVE references to obtain affected products, impact, and remediation.

CVE-2023-28271

CVE-2023-28271 is discussed within registry and KTM-transaction logging context in the connected documents, indicating a kernel memory-related information disclosure linked to KTM logs and registry transaction handling. The material notes exposure of uninitialized kernel data and pointers to KTM ...

CVE-2023-32009

Technical details for CVE-2023-32009 are not publicly available in the provided documents. No affected products, root cause, or remediation are stated here. Monitor for updates.

CVE-2023-35330

CVE-2023-35330 is a Windows vulnerability described as a Windows Extended Negotiation Denial of Service. According to the provided data, the CVSS 3.1 base score is 7.5 (High), with network attack vector, low parallel complexity, no privileges required, no user interaction, and impact limited to A...

CVE-2024-30011

CVE-2024-30011 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry lists CVSS v3.1 base score 6.5 (MEDIUM), with Network attackVector, Low attackComplexity, Low privilegesRequired, No user interaction, and Availability impact HIGH. CIRCL reporting also references CVE-2024-30011. T...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2025-24045

CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...

CVE-2026-62824

CVE-2026-62824 describes a stack-based buffer overflow in the Remote Desktop Client that allows a remote attacker to execute code over the network. The vulnerability is exploitable without privileges but requires user interaction, with a network-based attack vector and impacts to confidentiality,...

CVE-2018-8392

CVE-2018-8392 is a heap-based buffer overflow in the Microsoft Jet Database Engine. The issue arises from improper handling of in-memory objects, enabling a remote, unauthenticated attacker to exploit by enticing a user to open a specially crafted Excel file, potentially leading to remote code ex...

CVE-2019-0709

CVE-2019-0709 describes a remote code execution vulnerability in Microsoft Windows Hyper-V. The issue arises when Hyper-V on a host server fails to properly validate input received from an authenticated user on a guest OS, allowing a specially crafted guest app to cause the Hyper-V host to run ar...

CVE-2019-0756

Affected component: Microsoft XML Core Services MSXML parser. Description from CVE-2019-0756 indicates a remote code execution vulnerability when the MSXML parser processes user input. Severity is high (CVSS v3 base 8.8; v2 base 9.3). The connected PRION/NVD entries reiterate the same advisory wi...

CVE-2019-0775

CVE-2019-0775 corresponds to an information-disclosure vulnerability in the Windows kernel where memory objects are not handled correctly, enabling partial confidentiality impact in a local context. Affected component is the Windows kernel; root cause is improper handling of objects in memory. Th...

CVE-2019-1026

The CVE-2019-1026 entry describes a local elevation-of-privilege vulnerability in Windows Audio Service. Affected component: Windows Audio Service on Windows operating systems. Root cause per NVD: how the service handles processing requests, enabling an attacker who runs a specially crafted appli...

CVE-2019-1057

CVE-2019-1057 applies to the Microsoft XML Core Services MSXML parser. A remote code execution vulnerability occurs when the MSXML parser processes untrusted user input; an attacker could entice a user to visit a crafted website, triggering remote code execution and potentially take control of th...

CVE-2020-0729

CVE-2020-0729 is a Windows remote code execution vulnerability that can be triggered when a user processes a .LNK (shortcut) file. Exploitation could run arbitrary code with the same privileges as the logged-in user. The connected documents confirm this CVE is part of Windows update advisories an...

CVE-2020-1233

IBM Security Bulletin E10F8688... describes CVE-2020-1233 as a vulnerability in the Node.js URI.js module used by IBM App Connect Enterprise Certified Container Designer flows, enabling possible phishing via URL confusion (remote/URL-based). Affected: App Connect Enterprise Certified Container wi...