CVE-2018-0830

CVE-2018-0830 is a Windows kernel local information-disclosure vulnerability caused by how objects in memory are handled. Affected products include Windows 7 SP1; Windows 8.1 and RT 8.1; Windows Server 2008 SP2/R2 SP1; Windows Server 2012/R2; Windows 10 releases Gold, 1511, 1607, 1703, 1709; Wind...

CVE-2022-21914

Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8392

CVE-2018-8392 is a heap-based buffer overflow in the Microsoft Jet Database Engine. The issue arises from improper handling of in-memory objects, enabling a remote, unauthenticated attacker to exploit by enticing a user to open a specially crafted Excel file, potentially leading to remote code ex...

CVE-2019-0549

CVE-2019-0549 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 (and corresponding Server editions such as Server 2012/2012 R2, 2016, 2019). F...

CVE-2019-0756

Affected component: Microsoft XML Core Services MSXML parser. Description from CVE-2019-0756 indicates a remote code execution vulnerability when the MSXML parser processes user input. Severity is high (CVSS v3 base 8.8; v2 base 9.3). The connected PRION/NVD entries reiterate the same advisory wi...

CVE-2019-0775

CVE-2019-0775 corresponds to an information-disclosure vulnerability in the Windows kernel where memory objects are not handled correctly, enabling partial confidentiality impact in a local context. Affected component is the Windows kernel; root cause is improper handling of objects in memory. Th...

CVE-2019-1026

The CVE-2019-1026 entry describes a local elevation-of-privilege vulnerability in Windows Audio Service. Affected component: Windows Audio Service on Windows operating systems. Root cause per NVD: how the service handles processing requests, enabling an attacker who runs a specially crafted appli...

CVE-2019-1057

CVE-2019-1057 applies to the Microsoft XML Core Services MSXML parser. A remote code execution vulnerability occurs when the MSXML parser processes untrusted user input; an attacker could entice a user to visit a crafted website, triggering remote code execution and potentially take control of th...

CVE-2020-0729

CVE-2020-0729 is a Windows remote code execution vulnerability that can be triggered when a user processes a .LNK (shortcut) file. Exploitation could run arbitrary code with the same privileges as the logged-in user. The connected documents confirm this CVE is part of Windows update advisories an...

CVE-2020-1233

IBM Security Bulletin E10F8688... describes CVE-2020-1233 as a vulnerability in the Node.js URI.js module used by IBM App Connect Enterprise Certified Container Designer flows, enabling possible phishing via URL confusion (remote/URL-based). Affected: App Connect Enterprise Certified Container wi...

CVE-2020-1378

CVE-2020-1378 is a Kernel Transaction Manager (KTM) / registry KTM log recovery vulnerability reported by James Forshaw (2019–2020) alongside CVE-2019-0959 and CVE-2020-1377. The connected material links it to KTM log processing and recovery of registry state, noting that KTM transaction handling...

CVE-2021-1657

Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.

CVE-2021-24096

CVE-2021-24096 is a Windows Kernel Elevation of Privilege vulnerability that was exploited via a registry symbolic-link bypass related to server silos. The accompanying analysis with CVE context (MSRC) notes that Microsoft fixed this issue in 2021 by removing the PsIsCurrentThreadInServerSilo che...

CVE-2021-28329

Technical details for CVE-2021-28329 are not provided in the supplied documents. Monitor for updates from official sources to confirm affected products, impact, and remediation.

CVE-2021-28354

Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.

CVE-2021-34489

CVE-2021-34489 is a DirectWrite remote code execution vulnerability in Microsoft Windows/Windows Server. The issue affects the DirectWrite component and is described as enabling arbitrary code execution with a HIGH impact, requiring user interaction (UI:R) and a local vector (AV:L/AC:L on CVSS3) ...

CVE-2021-34512

Technical details about CVE-2021-34512 are not publicly available in the provided connected documents. Monitor for updates from NVD, Microsoft, CNVD, and other official advisories for concrete information.

CVE-2021-34537

CVE-2021-34537 is a Windows Bluetooth Driver elevation-of-privilege vulnerability in the Windows Bluetooth Service. Public data (NVD) lists CVSS v3.1 base score 8.0 (HIGH), attack vector ADJACENT, user interaction NONE, privileges required LOW, with Confidentiality/Integrity/Availability impacts ...

CVE-2021-38636

The CVE-2021-38636 entry refers to a Windows Redirected Drive Buffering SubSystem Driver Information Disclosure vulnerability. Affected software is Windows; the vulnerability affects the Redirected Drive Buffering SubSystem Driver (component/driver) and enables partial confidentiality impact via ...

CVE-2021-40460

Technical details for CVE-2021-40460 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-41356

CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...

CVE-2021-42275

Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.

CVE-2022-21880

CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...

CVE-2022-24485

Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.

CVE-2022-26819

Technical details about CVE-2022-26819 are not provided in the supplied documents; no affected products, exploit info, or remediation are specified here. Monitor for updates.

CVE-2022-41100

CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...

CVE-2023-21558

Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-23401

Technical details (affected components, root cause, impact, and remediation) for CVE-2023-23401 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2023-24863

The CVE-2023-24863 entry concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver described as an Information Disclosure Vulnerability . The public data provided does not specify the exact root cause details, vulnerable file/function, affected product versions, or the ex...

CVE-2023-24927

CVE-2023-24927 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. The connected CNVD entry confirms remote code execution exists, but the provided documents do not specify the exact root cause, affected versions, or exploit detail...

CVE-2023-28305

Technical details about CVE-2023-28305 are not provided in the connected documents. Public specifics (affected product/version, root cause, impact, or fixes) are not available here; monitor for updates and refer to the official advisories for confirmation.

CVE-2023-29372

CVE-2023-29372 affects the Microsoft WDAC OLE DB provider for SQL Server and is described as a Remote Code Execution vulnerability. The available information lists a CVSS v3.1 base score of 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, NO privileges required, UI required, and impa...

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2025-21208

CVE-2025-21208 is a Windows RRAS Remote Code Execution vulnerability. The NVD entry confirms the issue as a network‑vector RCE with high impact (CVSSv3.1: 8.8, C/H/I/A = high; AV:N, AC:L, PR:N, UI:R, S:U). The vulnerability is tied to Windows RRAS and has a documented CVE entry; exploitation/avai...

CVE-2025-21213

Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

CVE-2026-62790

CVE-2026-62790 is a Windows SMB Server heap-based buffer overflow that allows an authorized network attacker to execute code remotely. The vulnerability is associated with Windows SMBv3 Server, enabling remote code execution over the network with low privileges and no user interaction (CVSSv3.1: ...

CVE-2017-0211

CVE-2017-0211 is a Windows OLE/COM elevation-of-privilege issue where a Structured Storage object can be exposed across a security boundary via a property bag, enabling creation of a remote COM object in the server process and potential privilege escalation. Google Project Zero details show how I...

CVE-2018-0816

Technical details about CVE-2018-0816 are not publicly provided in the connected documents; the initial description summarizes the vulnerability but does not specify affected products, versions, impact, or fixes.

CVE-2018-1013

CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...

CVE-2018-8304

CVE-2018-8304 is a Windows DNSAPI.dll denial-of-service vulnerability arising from improper handling of DNS responses. Affected: Windows 7, Server 2008/2012/2012 R2, Server 2008 R2, 2016; Windows 8.1/10/10 Servers; DNSAPI denial of service could impact availability. Connected documents confirm th...

CVE-2019-0631

Technical details of CVE-2019-0631 are not publicly available in the provided documents; no affected products, exploit specifics, or remediation are specified. Monitor official advisories for updates.

CVE-2019-0767

CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...

CVE-2019-0814

CVE-2019-0814 affects Microsoft Windows Win32k: information disclosure due to win32k improperly providing kernel information. The vulnerability is the same family as CVE-2019-0848 and is described across NVD/CNVD records and related CVE entries. Affected software is Windows Windows Win32k subsyst...

CVE-2019-1337

The CVE-2019-1337 entry describes an information disclosure vulnerability in the Windows Update Client where memory objects are mishandled. Affected component: Windows Update Client. Root cause: improper handling of in-memory objects leading to potential memory contents disclosure. Exploitation d...

CVE-2020-0634

CVE-2020-0634 affects the Windows Common Log File System (CLFS) Driver. Connected CNVD-2020-08133 describes a privilege-lifting vulnerability in the CLFS Driver caused by improper handling of memory objects, enabling privilege escalation by an authenticated user who logs on and runs a crafted app...

CVE-2020-0665

CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...

CVE-2020-1525

CVE-2020-1525 describes a memory corruption vulnerability in Windows Media Foundation triggered by how in-memory objects are handled. A successful exploit could allow an attacker to install programs, view/change/delete data, or create new accounts with full rights. Exploitation vectors include co...

CVE-2020-16897

CVE-2020-16897 is an information-disclosure vulnerability in NetBIOS over TCP (NetBT) where objects in memory are improperly handled. An attacker who runs a crafted application could obtain information to help further compromise the system, but cannot directly execute code or elevate rights. The ...

CVE-2020-16922

CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...