CVE-2021-40462

Technical details (affected product, component, version, root cause, or fixes) for CVE-2021-40462 are not provided in the connected documents; monitor for updates.

CVE-2021-40467

CVE-2021-40467 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. According to the records, it enables a local attacker to escalate privileges via the CLFS component, with high impact on confidentiality, integrity, and availability (vector: LOCAL, low attack complexi...

CVE-2021-41342

Technical details for CVE-2021-41342 are not publicly available in the provided documents; the materials reference the vulnerability name but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2021-41356

CVE-2021-41356 is a Windows Denial-of-Service vulnerability. The connected records confirm impact on Windows OS and patch availability: MSKB updates KB5007189 (Windows 10 18363.1916), KB5007207 (OS Build 10240.19119), KB5007215 (Windows 11 22000.318) address this CVE as part of November 2021 secu...

CVE-2021-42275

Public details in the provided documents do not include concrete technical specifics for CVE-2021-42275 (product, affected versions, root cause, impact or fixes). The materials offer high-level references and CVSS values but no implementation-level details.

CVE-2022-21914

Technical details for CVE-2022-21914 are not publicly available in the provided documents. Monitor for updates.

CVE-2022-26819

Technical details about CVE-2022-26819 are not provided in the supplied documents; no affected products, exploit info, or remediation are specified here. Monitor for updates.

CVE-2022-30155

Technical details about CVE-2022-30155 are not provided in the supplied documents. Public records confirm Windows Kernel Denial of Service vulnerability, but no specifics on affected versions, root cause, or fixes are included here. Monitor for updates.

CVE-2022-37956

CVE-2022-37956 is a Windows kernel elevation-of-privilege vulnerability involving local, memory-corruption in the registry hive path. The CVE is described as a Windows Kernel Elevation of Privilege Vulnerability with a CVSSv3.1 base score of 7.8 (HIGH); attack vector LOCAL, complexity LOW, privil...

CVE-2022-41100

CVE-2022-41100 is a Windows ALPC Elevation of Privilege vulnerability. The Connected/OpenVAS documents confirm the CVE exists as part of Windows vulnerability listings and include it in multiple CVE compilations, but none provide concrete details on affected product versions, root cause specifics...

CVE-2023-21558

Technical details about CVE-2023-21558 (affected product, version, exploitability, or remediation) are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2023-23401

Technical details (affected components, root cause, impact, and remediation) for CVE-2023-23401 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2023-24863

The CVE-2023-24863 entry concerns a vulnerability in the Microsoft PostScript and PCL6 Class Printer Driver described as an Information Disclosure Vulnerability . The public data provided does not specify the exact root cause details, vulnerable file/function, affected product versions, or the ex...

CVE-2023-24927

CVE-2023-24927 affects Microsoft PostScript and PCL6 Class Printer Driver and is described as a Remote Code Execution vulnerability. The connected CNVD entry confirms remote code execution exists, but the provided documents do not specify the exact root cause, affected versions, or exploit detail...

CVE-2023-28271

CVE-2023-28271 is discussed within registry and KTM-transaction logging context in the connected documents, indicating a kernel memory-related information disclosure linked to KTM logs and registry transaction handling. The material notes exposure of uninitialized kernel data and pointers to KTM ...

CVE-2023-28305

Technical details about CVE-2023-28305 are not provided in the connected documents. Public specifics (affected product/version, root cause, impact, or fixes) are not available here; monitor for updates and refer to the official advisories for confirmation.

CVE-2024-30049

CVE-2024-30049 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability affecting the Win32K component. Public details in connected sources indicate the issue enables elevated privileges with local access (CVSSv3.1: AV=L/AC=L/PR=L/UI=N/S=U/C=H/I=H/A=H; base score 7.8), and multipl...

CVE-2024-30090

CVE-2024-30090 is an elevation-of-privilege vulnerability affecting the Windows Kernel Streaming framework, specifically the msrks.ks.sys component used for processing streaming data (e.g., microphone/webcam input). The public materials indicate exploitation potential via a memory-bounds/buffer h...

CVE-2025-21213

Technical details about CVE-2025-21213 are not provided in the supplied documents. No affected products, root cause, or remediation specifics are disclosed here. Monitor for updates from official advisories.

CVE-2025-24045

CVE-2025-24045 is listed in EU/NCSC sources as a Windows Remote Desktop Services remote code execution vulnerability with high impact (CVSS around 8.1–8.8; labeled Execute random code). Connected documents corroborate that this CVE is tied to Windows Remote Desktop Services/Client components and ...

CVE-2026-40403

CVE-2026-40403 describes a heap-based buffer overflow in Windows Win32K GRFX that could allow a locally authenticated attacker to execute code. Affected component is Windows graphics subsystem (Win32K GRFX); cause is a heap-based overflow. Impact per available data is local code execution with hi...

CVE-2017-0211

CVE-2017-0211 is a Windows OLE/COM elevation-of-privilege issue where a Structured Storage object can be exposed across a security boundary via a property bag, enabling creation of a remote COM object in the server process and potential privilege escalation. Google Project Zero details show how I...

CVE-2018-0816

Technical details about CVE-2018-0816 are not publicly provided in the connected documents; the initial description summarizes the vulnerability but does not specify affected products, versions, impact, or fixes.

CVE-2018-0825

CVE-2018-0825 corresponds to a Microsoft StructuredQuery remote code execution vulnerability. According to the CNVD entry, it exists in Microsoft Windows’ StructuredQuery component and stems from improper handling of objects in memory, enabling a remote attacker to execute arbitrary code when a s...

CVE-2018-1013

CVE-2018-1013 is a remote code execution issue in the Windows font library triggered by specially crafted embedded fonts. Affected OS versions include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (2012/2016, etc.). Root cause is improper handling of embedded fonts by the W...

CVE-2018-8304

CVE-2018-8304 is a Windows DNSAPI.dll denial-of-service vulnerability arising from improper handling of DNS responses. Affected: Windows 7, Server 2008/2012/2012 R2, Server 2008 R2, 2016; Windows 8.1/10/10 Servers; DNSAPI denial of service could impact availability. Connected documents confirm th...

CVE-2019-0549

CVE-2019-0549 is an information-disclosure vulnerability in the Windows kernel caused by improper handling of objects in memory. Affected products include Windows 7, Windows Server 2008/2008 R2, Windows 8.1, Windows 10 (and corresponding Server editions such as Server 2012/2012 R2, 2016, 2019). F...

CVE-2019-0631

Technical details of CVE-2019-0631 are not publicly available in the provided documents; no affected products, exploit specifics, or remediation are specified. Monitor official advisories for updates.

CVE-2019-0662

CVE-2019-0662 is a remote code execution vulnerability in Microsoft Windows GDI/GDI+. The issue arises from how GDI handles objects in memory, enabling a remote attacker to execute arbitrary code on affected systems. Connected advisories corroborate a GDI-based RCE family (distinct from CVE-2019-...

CVE-2019-0756

Affected component: Microsoft XML Core Services MSXML parser. Description from CVE-2019-0756 indicates a remote code execution vulnerability when the MSXML parser processes user input. Severity is high (CVSS v3 base 8.8; v2 base 9.3). The connected PRION/NVD entries reiterate the same advisory wi...

CVE-2019-0767

CVE-2019-0767 is a Windows kernel information disclosure vulnerability caused by improper initialization of memory objects. It can be exploited by an authenticated, local attacker running a crafted application. CVSSv3 base score 5.5 (Medium): Local access, low attack complexity, privileges requir...

CVE-2019-0814

CVE-2019-0814 affects Microsoft Windows Win32k: information disclosure due to win32k improperly providing kernel information. The vulnerability is the same family as CVE-2019-0848 and is described across NVD/CNVD records and related CVE entries. Affected software is Windows Windows Win32k subsyst...

CVE-2019-1337

The CVE-2019-1337 entry describes an information disclosure vulnerability in the Windows Update Client where memory objects are mishandled. Affected component: Windows Update Client. Root cause: improper handling of in-memory objects leading to potential memory contents disclosure. Exploitation d...

CVE-2020-0634

CVE-2020-0634 affects the Windows Common Log File System (CLFS) Driver. Connected CNVD-2020-08133 describes a privilege-lifting vulnerability in the CLFS Driver caused by improper handling of memory objects, enabling privilege escalation by an authenticated user who logs on and runs a crafted app...

CVE-2020-0665

CVE-2020-0665 is an Active Directory elevation-of-privilege issue in forest trusts caused by a default setting that allows a trusting-forest attacker to request delegation of a TGT for an identity from the trusted forest. The description notes the impact and context, but no explicit remediation i...

CVE-2020-0729

CVE-2020-0729 is a Windows remote code execution vulnerability that can be triggered when a user processes a .LNK (shortcut) file. Exploitation could run arbitrary code with the same privileges as the logged-in user. The connected documents confirm this CVE is part of Windows update advisories an...

CVE-2020-1525

CVE-2020-1525 describes a memory corruption vulnerability in Windows Media Foundation triggered by how in-memory objects are handled. A successful exploit could allow an attacker to install programs, view/change/delete data, or create new accounts with full rights. Exploitation vectors include co...

CVE-2020-16922

CVE-2020-16922 describes a spoofing vulnerability in Windows where file signatures are not validated correctly. An attacker could bypass security features and load improperly signed files, by exploiting weaknesses in the signature validation process. The vulnerability is addressed by Microsoft “u...

CVE-2021-1657

Technical details for CVE-2021-1657 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28341

Technical details for CVE-2021-28341 are not publicly provided in the supplied documents. Related OpenVAS/Nessus plugins reference the CVE list but do not describe affected products, root causes, or fixes. Monitor for updates.

CVE-2021-28354

Technical details for CVE-2021-28354 are not provided in the connected documents. Please monitor for updates from trustworthy sources.

CVE-2021-31976

CVE-2021-31976 is described as a Server for NFS Information Disclosure Vulnerability. The provided documents do not specify affected products, vendor, component, or vulnerable versions. CVSS metrics are available: CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, LOW attack complexity, n...

CVE-2021-34499

Technical details about CVE-2021-34499 are not publicly provided in the supplied documents; monitor for updates.

CVE-2021-38636

The CVE-2021-38636 entry refers to a Windows Redirected Drive Buffering SubSystem Driver Information Disclosure vulnerability. Affected software is Windows; the vulnerability affects the Redirected Drive Buffering SubSystem Driver (component/driver) and enables partial confidentiality impact via ...

CVE-2022-21880

CVE-2022-21880 is a Windows GDI+ Information Disclosure vulnerability. The NVD entry describes impact as a confidentiality breach with no integrity or availability impact. CVSS v2: base score 7.8 (NETWORK, LOW attack complexity, NONE auth, C:C/I:N/A:N). CVSS v3.1: base score 7.5 (AV:N/AC:L/PR:N/U...

CVE-2022-24485

Technical details about CVE-2022-24485 are not provided in the connected documents. No affected product/version information or exploit specifics are available here. Monitor for official updates and vendor advisories.

CVE-2022-24550

Technical details for CVE-2022-24550 are not publicly provided in the connected documents. Available sources confirm the vulnerability title but do not specify affected products/versions, root cause, impact, or remediation here. Monitor for updates.

CVE-2022-26802

CVE-2022-26802 refers to a Windows Print Spooler elevation-of-privilege vulnerability. The provided documents identify the affected component as Windows Print Spooler and classify the exploit as a local, privilege-escalation issue (local attack vector; no user interaction required). CVSS data in ...

CVE-2022-30166

Technical details for CVE-2022-30166 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here; monitor for updates from official advisories.

CVE-2022-30200

Technical details about CVE-2022-30200 are not publicly provided in the connected documents. The sources reference the CVE in KEV listings and OpenVAS entries but do not specify affected products, root cause, impact, or fixes. Monitor for updates.