CVE-2019-0660

Technical details for CVE-2019-0660 are not publicly available in the provided connected documents. Monitor for updates from advisories and CVE records to obtain affected products, impact, and remediation guidance.

CVE-2019-0856

Technical details about CVE-2019-0856 (affected products, root cause, impact, and fixes) are not present in the provided documents. Monitor official Microsoft advisories and Vulners updates for new information.

CVE-2019-0928

CVE-2019-0928 affects Microsoft Hyper-V: a denial-of-service vulnerability arises when the host fails to properly validate input from a privileged user on a guest operating system, allowing a crafted guest app to crash the host computer. The connected CNVD entry confirms Hyper-V Denial of Service...

CVE-2019-1117

Technical details (affected products, versions, root cause, impact, fixes) for CVE-2019-1117 are not present in the provided connected documents. Monitor for updates; no public details are included here.

CVE-2019-1148

CVE-2019-1148 affects the Microsoft Windows Graphics Component, where memory handling flaws can disclose information. The vulnerability requires the attacker to log on and run a crafted application, with potential information disclosure as the impact. Microsoft addresses it via a patch that fixes...

CVE-2019-1224

The CVE-2019-1224 entry describes an information disclosure in the Windows RDP server where memory contents could be exposed to an attacker. The vulnerability requires remote authentication-free access: an attacker must connect to an affected system and run a specially crafted application to expl...

CVE-2019-1380

CVE-2019-1380 is a local elevation-of-privilege issue in Windows where splwow64.exe mishandles certain calls (aka Microsoft splwow64 Elevation of Privilege Vulnerability). Affected software is Windows system component splwow64.exe; root cause centers on how certain calls are processed. Documented...

CVE-2020-0726

Technical details for CVE-2020-0726 are not publicly available in the provided documents. No confirmed affected products or remediation are described here. Monitor for updates as more information becomes available.

CVE-2020-0887

CVE-2020-0887 is a Windows Win32k elevation-of-privilege vulnerability in which the Win32k component fails to properly handle objects in memory. This can allow local code execution with kernel-level privileges if exploited. The description states it is distinct from CVE-2020-0788 and CVE-2020-087...

CVE-2020-1083

The CVE-2020-1083 vulnerability is a local information-disclosure issue in the Windows Graphics Component caused by improper handling of objects in memory. An attacker must log on to the affected system and run a crafted application to exploit it. The update fixes the issue by correcting how the ...

CVE-2020-1286

CVE-2020-1286 is a Windows Shell remote code execution vulnerability caused by improper validation of file paths. Exploitation could allow code execution in the context of the current user. The connected documents corroborate the CVE and list it among multiple Windows vulnerabilities addressed in...

CVE-2021-31952

CVE-2021-31952 is a Windows Kernel-Mode Driver elevation-of-privilege vulnerability. Affected product area is the Windows kernel-mode driver; the root cause is an elevation of privilege in the kernel-mode driver that could allow an attacker with local access to gain higher privileges. The CVSS me...

CVE-2022-21910

Technical details about CVE-2022-21910 (affected product, impact, exploitability, or fixes) are not provided in the supplied documents. Monitor for official disclosures and updates from Microsoft and security advisories.

CVE-2022-21916

Technical details about CVE-2022-21916 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE databases for affected products, root cause, and fixes.

CVE-2022-23296

Public technical details for CVE-2022-23296 are not provided in the connected documents. The sources list the CVE and references but do not specify affected product versions, root cause, exploit details, or remediation within the supplied material. Monitor for updates.

CVE-2022-30145

The CVE is Windows Encrypting File System (EFS) Remote Code Execution (CVE-2022-30145). Public records in the connected documents confirm this as a Windows OS vulnerability affecting EFS functionality, with multiple Microsoft security updates released in June 2022 (e.g., KB5014699, KB5014678, KB5...

CVE-2023-21816

No concrete technical details about CVE-2023-21816 are present in the connected documents. The initial description only notes a Windows AD DS DoS. Monitor official advisories and vendor updates for remediation, affected versions, impact, and patch information.

CVE-2023-36908

CVE-2023-36908 details are not publicly provided in the supplied documents. No explicit affected products, root cause, or remediation are described. Monitor for updates from official sources.

CVE-2024-30015

CVE-2024-30015 affects Windows Routing and Remote Access Service (RRAS). The connected NCSC advisory lists CVE-2024-30015 under RRAS with impact described as Execution of random code (CVSS v3.1: 7.5, Network attack vector, high complexity, no privileges required, user interaction required, impact...

CVE-2025-21303

Technical details are not publicly provided in the supplied documents for CVE-2025-21303 (Windows Telephony Service RCE). Monitor for updates from Microsoft; no specific vulnerable component/version or remediation is described here.

CVE-2025-26648

CVE-2025-26648 affects the Windows Kernel. Description: sensitive data stored in memory that is not properly locked can allow an authorized locally authenticated attacker to elevate privileges. The issue is listed under Windows Kernel vulnerabilities (CVE-2025-26648) with high impact (local Privi...

CVE-2026-33834

Technical details are not publicly available in the provided documents. No affected products/versions or remediation specifics are included here. Monitor for updates from official CVE/NVD entries to obtain concrete exploit info, mitigations, and fixes.

CVE-2018-0753

CVE-2018-0753 describes a denial-of-service vulnerability in Windows IPSec where the system may stop responding due to how objects are handled in memory. Affected products explicitly include Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 versions 1511/1607/1703/1709, Windows Server 2...

CVE-2018-8226

The CVE-2018-8226 entry describes a denial-of-service in the HTTP/2 protocol stack (HTTP.sys) for Windows. Affected components include HTTP.sys on Windows Server 2016 and Windows 10/Windows 10 Servers, with the root cause being improper parsing of specially crafted HTTP/2 requests, leading to sys...

CVE-2018-8340

CVE-2018-8340 is a security feature bypass in Active Directory Federation Services (AD FS) where multi-factor authentication requests are improperly handled. The description across sources identifies the vulnerability affecting Windows Server 2016 , Windows Server 2012 R2 , and Windows 10 Servers...

CVE-2018-8596

CVE-2018-8596 affects the Windows GDI component. The vulnerability is an information disclosure due to improper memory disclosure in GDI, impacting multiple Windows versions (Windows 7, Windows Server 2008/2008 R2/2012/2012 R2, Windows 8.1, Windows 10 and various Server editions). Root cause: imp...

CVE-2019-0627

Technical details for CVE-2019-0627 are not publicly provided in the supplied documents. Monitor for updates; no product/version/impact information is available from the connected sources.

CVE-2019-0694

CVE-2019-0694 : A local elevation-of-privilege vulnerability due to an integer overflow in the Windows Subsystem for Linux. Affects the WSL component; root cause is the integer overflow, enabling a local attacker to escalate privileges. The provided documents do not specify affected versions, exp...

CVE-2019-0759

Technical details about CVE-2019-0759 are not publicly available in the provided documents. Monitor for updates and additional authoritative disclosures.

CVE-2019-0840

The connected documents identify CVE-2019-0840 as a Windows kernel information disclosure vulnerability. The disclosed details describe an issue in the Microsoft Windows kernel where information can be exposed due to improper handling of objects in memory, leading to unauthorized access to sensit...

CVE-2019-1333

Technical details about CVE-2019-1333 (affected components, root cause, impact, or fixes) are not provided in the connected documents. The initial description references a Windows Remote Desktop Client RCE, but no public details are included here; monitor for updates.

CVE-2020-0632

Technical details about CVE-2020-0632 are not publicly provided in the connected records; no affected products, root cause, impact, or fix information is disclosed here. Monitor for updates from vendors/security advisories.

CVE-2020-1130

CVE-2020-1130 affects the Diagnostics Hub Standard Collector. The issue is an elevation of privilege in the collector’s data handling, enabling a crafted local application to run processes in an elevated context. The vulnerability is addressed by updating how the Diagnostics Hub Standard Collecto...

CVE-2020-1312

Technical details (affected versions, root cause, exploit/mitigation specifics) for CVE-2020-1312 are not publicly provided in the connected documents. Monitor for updates from official advisories and vulnerability feeds.

CVE-2020-1317

Technical details for CVE-2020-1317 are not present in the provided connected documents. The initial entry notes a Group Policy elevation of privilege issue but does not publish affected products, versions, impact, or remediation. Monitor for updates.

CVE-2020-1339

CVE-2020-1339 is a remote code execution flaw described for Windows Media codecs. The Initial document states that it occurs when Windows Media Audio Codec improperly handles objects, enabling an attacker to take control of an affected system. Exploitation vectors include convincing a user to ope...

CVE-2020-1414

CVE-2020-1414 affects Windows Runtime by an elevation of privilege due to improper handling of objects in memory. The description identifies Windows Runtime Elevation of Privilege Vulnerability but provides no public details on affected versions, specific vulnerable components, exploit availabili...

CVE-2020-1531

CVE-2020-1531 is an elevation-of-privilege flaw in Windows Accounts Control caused by improper memory handling. An attacker must already have code execution on the target host and can then run a crafted program to elevate privileges. The vulnerability’s fix is delivered via a security update that...

CVE-2021-28330

Technical details for CVE-2021-28330 are not publicly provided in the supplied documents. The sources reference the vulnerability by ID and a generic description; monitor for updates.

CVE-2021-28338

Technical details for CVE-2021-28338 are not provided in the supplied documents. Monitor for official disclosures and remediation guidance as more information becomes available.

CVE-2021-28344

Technical details for CVE-2021-28344 are not publicly available in the provided documents; monitor for updates.

CVE-2021-28355

Technical details for CVE-2021-28355 are not publicly available in the provided documents; monitor for updates.

CVE-2021-31168

CVE-2021-31168 affects the Windows Container Manager Service in Windows/Windows Server and is an elevation-of-privilege vulnerability. The CVSS v3.1 base score is 7.8 (HIGH), with local attacker access and no user interaction. Public exploit activity is indicated in related advisories/plugins; ex...

CVE-2021-33786

Technical details about CVE-2021-33786 are not public in the provided documents; no concrete affected products, root cause, impact, or remediation are present. Monitor for updates as new disclosures may appear.

CVE-2021-34525

CVE-2021-34525 is a Windows DNS Server Remote Code Execution vulnerability. Multiple connected documents consistently identify DNS Server as the affected component and classify the issue as a remote-code-execution flaw in Windows DNS services. The CVSS details in the primary record show a CVSS‑3....

CVE-2021-40477

Technical details for CVE-2021-40477 are not publicly provided in the connected documents. Monitor for updates; none of the supplied sources describe affected products, root cause, impact, or remediation for this CVE.

CVE-2021-40489

Technical details for CVE-2021-40489 (Storage Spaces Controller Elevation of Privilege) are not provided in the supplied connected documents; no affected product/version/root-cause/impact or remediation details are stated here.

CVE-2022-21835

CVE-2022-21835 : Microsoft Cryptographic Services Elevation of Privilege Vulnerability. The NVD entry lists a Local, low-attack-complexity vulnerability with a base score of 7.2 (CVSS2) and a CVSS-3.1 base score of 7.8 (HIGH) with LOCAL access, PR: LOW, UI: NONE, and UNCHANGED scope; affects conf...

CVE-2022-38033

CVE-2022-38033 is described in connected sources as a Windows Server vulnerability titled “Remotely Accessible Registry Keys Information Disclosure Vulnerability.” The common thread across documents is that this issue allows access to sensitive data via registry keys exposed remotely, with an imp...

CVE-2022-41098

Technical details for CVE-2022-41098 (affected product/component/versions/root cause/impact/remediation) are not provided in the connected or initial documents. Monitor for updates from official sources; no public details are included here.