CVE-2021-1663

CVE-2021-1663 affects the Windows Projected File System FS Filter Driver and is categorized as an Information Disclosure vulnerability. Public details in connected documents identify the vulnerable component as the Windows FS Filter Driver and indicate partial/high confidentiality impact (CVSS 3....

CVE-2019-0892

CVE-2019-0892 describes a Windows Win32k privilege-elevation vulnerability. The Win32k memory-handling of objects can be exploited to execute arbitrary code in kernel mode, enabling an attacker who can log on to run a crafted app that elevates privileges, potentially installing programs, modifyin...

CVE-2019-0897

CVE-2019-0897 describes a remote code execution vulnerability in the Windows Jet Database Engine triggered by improper handling of in-memory objects. The connected CNVD entries reiterate a buffer overflow/heap overflow issue in the Windows Jet Database Engine, caused when data boundaries are not ...

CVE-2019-0905

CVE-2019-0905 describes a remote code execution vulnerability in the Windows Jet Database Engine, triggered when the engine improperly handles objects in memory. An attacker could exploit this by convincing a user to open a specially crafted file, potentially allowing arbitrary code execution on ...

CVE-2019-1087

Technical details about CVE-2019-1087 are not provided in the supplied documents. Monitor official advisories for updates on affected products, root cause, impact, and remediation.

CVE-2019-1147

CVE-2019-1147 is a Windows Jet Database Engine remote code execution vulnerability caused by improper handling of objects in memory. An attacker could trigger code execution by enticing a user to open a specially crafted file; impact is high (arbitrary code execution). The available documents ind...

CVE-2020-0731

Technical details for CVE-2020-0731 are not publicly provided in the connected documents; affected products, root cause, and remediation cannot be specified from current sources. Monitor ENISA EUVD entries and the MSRC advisory for updates.

CVE-2020-16899

CVE-2020-16899 is a denial-of-service vulnerability in the Windows TCP/IP stack caused by improper handling of ICMPv6 Router Advertisement packets. An attacker who can send crafted ICMPv6 RA packets to a remote Windows host could cause the system to stop responding. The CVE explicitly notes that ...

CVE-2021-1668

CVE-2021-1668 : Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2021-1726

CVE-2021-1726 is a SharePoint Server spoofing vulnerability observed in multiple versions (2013/2016/2019). Exploitation involves spoofed content convincing users of a trusted site. Microsoft released updates (e.g., MS21-4493194/4493195 and related MSKBs) addressing this CVE; affected deployments...

CVE-2021-31974

Technical details for CVE-2021-31974 are not publicly provided in the supplied documents. Monitor official advisories and vulnerability feeds for updates.

CVE-2021-33761

Technical details for CVE-2021-33761 are not publicly available in the provided connected documents. The entry lacks explicit affected products, root cause, impact, or remediation within the supplied data. Monitor for updates from official advisories.

CVE-2021-34488

CVE-2021-34488 affects the Windows Console Driver (Windows/Windows Server). The vulnerability is an Elevation of Privilege issue in the Console Driver, with local access required and low exploit complexity. Microsoft/MSRC entries (KB5004237, KB5004244, KB5004245) indicate security updates to addr...

CVE-2021-40488

CVE-2021-40488 corresponds to a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSS details show a LOCAL attack with LOW attack complexity and NO authentication required, potentially impacting confidentiality, integrity, and availability (C/C/I/A = HIGH). The vulnerability is...

CVE-2021-42280

CVE-2021-42280 is tied to the Windows Feedback Hub Elevation of Privilege vulnerability. Affected software is Windows Feedback Hub (Windows OS). The provided documents describe the vulnerability as local, with low attack complexity and high impact on confidentiality, integrity, and availability (...

CVE-2022-21862

Technical details for CVE-2022-21862 are not publicly provided in the connected documents. Monitor for updates.

CVE-2022-21895

Technical details for CVE-2022-21895 are not publicly provided in the connected documents. The sources reference the CVE at a high level without product specifics, root cause, or remediation. Monitor for updates as new documents may disclose details.

CVE-2022-21961

CVE-2022-21961 relates to Windows Resilient File System (ReFS) and is described as a Remote Code Execution vulnerability. Public details in the initial entry indicate impact to confidentiality, integrity, and availability (C/C/I) with a local? or unspecified vector; CVSS metrics are shown (v2 bas...

CVE-2022-22043

CVE-2022-22043 is a Windows vulnerability affecting the Fast FAT File System Driver, described as an Elevation of Privilege. The NVD entry lists a Local attack vector, Low privileges required, and no user interaction, with a high impact on confidentiality, integrity, and availability (CVSSv3.1: A...

CVE-2022-35836

CVE-2022-35836 affects the Microsoft WDAC OLE DB provider for SQL Server, described as a Remote Code Execution vulnerability. The connected AttackKB entry reiterates the same description. Provided details indicate the vulnerability is network-reachable with high impact to confidentiality, integri...

CVE-2022-38021

CVE-2022-38021 corresponds to a local privilege escalation vulnerability in Microsoft Windows Connected User Experiences and Telemetry. The connected documents identify the affected surface as the Windows component “Connected User Experiences and Telemetry” and classify the impact as obtaining in...

CVE-2022-41054

Technical details about CVE-2022-41054 (affected product, root cause, impact, and remediation) are not provided in the connected documents. Monitor for updates from Microsoft or security advisories.

CVE-2022-41056

Technical details for CVE-2022-41056 are not present in the provided documents. Related items cover Kerberos/Netlogon CVEs, but no affected product/version/impact for this CVE is specified here. Monitor for updates.

CVE-2023-32038

CVE-2023-32038 concerns the Microsoft ODBC Driver Remote Code Execution vulnerability. The connected data identifies the affected component as the Microsoft ODBC Driver and classifies the impact as Remote Code Execution with a high severity (CVSS v3.1 base score 8.8). Attack vectors are NETWORK w...

CVE-2024-38100

CVE-2024-38100 is a Windows File Explorer elevation-of-privilege vulnerability. The provided documents identify it as a Windows File Explorer issue with a CVSS v3.1 base score of 7.8 (Local access, Privilege escalation, no user interaction). Connected sources corroborate Windows-vulnerability con...

CVE-2024-49116

CVE-2024-49116 is a Windows Remote Desktop Services remote code execution vulnerability. Public details in connected documents note an RDS entry that is exploitable over a network with no user interaction and high impact (CVSS v3.1 base score 8.1). The root cause and affected versions are not exp...

CVE-2025-25004

CVE-2025-25004 affects Microsoft PowerShell. The connected documents corroborate a local privilege escalation vulnerability due to improper access control, enabling an authorized attacker to obtain elevated privileges on the host. The advisory entries (including NCSC-2025-0313) assign CVSS v3.1/3...

CVE-2025-32710

CVE-2025-32710 refers to a Use-After-Free vulnerability in Windows Remote Desktop Services that allows a network-based attacker to execute code on affected systems. The CVE is linked to Windows RDS components; the Nessus plugin notes it alongside CVE-2025-32715, and an exploit repo exists, but ex...

CVE-2025-54100

CVE-2025-54100 is a PowerShell RCE vulnerability tied to improper neutralization during MSHTML-based HTML parsing when Invoke-WebRequest is used without -UseBasicParsing. Affected: Windows PowerShell 5.1 on Windows 10/11 and Windows Server 2008–2025; attack is locally exploitable with user intera...

CVE-2026-50507

CVE-2026-50507 concerns a Protection mechanism failure in Windows BitLocker that allows an unauthorized attacker to bypass a security feature via a physical attack . The connected documents corroborate a vulnerability affecting Windows BitLocker, with a CVSS v3.1 base score of 6.8 (Medium). The a...

CVE-2017-0181

CVE-2017-0181 affects the Windows Hyper-V Network Switch on Windows 10/Windows Server 2016 hosts. The vulnerability is a remote code execution caused by improper validation of input from the guest OS, requiring an authenticated user on the guest. Connected sources confirm Hyper-V input validation...

CVE-2018-8140

CVE-2018-8140 (Cortana Elevation of Privilege) affects Windows 10 and Windows Server (server 1709/1803) where Cortana retrieves data from user input services without considering status, enabling local privilege escalation. Root cause: Cortana’s data handling allows execution of commands with elev...

CVE-2018-8341

CVE-2018-8341 describes an information-disclosure vulnerability in the Windows kernel where objects in memory are improperly handled. Affected products include Windows 7, Windows Server 2012 R2/2012, Windows RT 8.1, Windows 8.1, Windows 10 (and corresponding Server SKUs 2008/2012/2016/2019-era fa...

CVE-2018-8343

CVE-2018-8343 describes a local elevation-of-privilege flaw in the Windows Network Driver Interface Specification (NDIS). The vulnerability arises when ndis.sys does not validate the length of a destination buffer before copying memory, enabling privilege escalation on affected Windows versions (...

CVE-2018-8443

Technical details about CVE-2018-8443 are not publicly provided in the supplied documents; no concrete affected products, root cause, or fixes are described. Monitor for updates from official sources.

CVE-2019-0707

CVE-2019-0707 affects Windows NDIS (ndis.sys) with an elevation of privilege in the Network Driver Interface Specification. The root cause is a missing buffer-length check prior to memory copy, enabling a local attacker to run a crafted application to raise privileges. This is supported by multip...

CVE-2019-0907

The CVE-2019-0907 issue concerns the Windows Jet Database Engine and a remote code execution vulnerability caused by improper handling of objects in memory. An attacker could entice a user to open a specially crafted file to trigger arbitrary code execution on the victim’s system. Microsoft’s upd...

CVE-2019-1010

Technical details about CVE-2019-1010 are not publicly available in the provided connected documents. Monitor for updates; current sources only reference Windows GDI information disclosure and MS patching without affected versions or exploit specifics.

CVE-2019-1123

Technical details for CVE-2019-1123 and related DirectWrite remote code execution vulnerabilities are not publicly available in the provided documents; monitor for updates.

CVE-2020-0690

CVE-2020-0690 corresponds to a DirectX elevation-of-privilege vulnerability caused by improper handling of memory objects. According to the initial entry, it has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no user interaction, and requires no privileges; impact to confide...

CVE-2020-0778

CVE-2020-0778 is described as an elevation of privilege in the Windows Network Connections Service, caused by how the service handles objects in memory. Public metrics show a CVSSv2 base score of 4.6 (Medium) and a CVSSv3 base score of 7.8 (High) with local attack, low complexity, no user interac...

CVE-2020-1031

Technical details for CVE-2020-1031 are not publicly provided in the Connected Documents. The materials reference Windows DHCP and patches in general but do not specify affected products/versions, exploit details, or remediation for this CVE. Monitor for updates.

CVE-2020-1085

CVE-2020-1085 is described in CNVD-2020-52929 as an elevation of privilege in the Windows Function Discovery Service. The vulnerability stems from how the Function Discovery Service handles objects in memory, enabling an attacker to execute code with elevated privileges on affected Windows system...

CVE-2020-1202

CVE-2020-1202 affects Diagnostics Hub Standard Collector or Visual Studio Standard Collector. Root cause: improper handling of memory objects leading to elevation of privilege. Impact: local elevation of privileges if exploited; CVSS data in the Initial document indicates HIGH severity. Exploitat...

CVE-2020-1251

CVE-2020-1251 corresponds to a Windows Win32k elevation of privilege vulnerability. The connected sources confirm the flaw resides in the Windows kernel-mode driver’s handling of memory objects, enabling local privilege escalation. Affected component: Win32k (kernel-mode driver) in Windows; root ...

CVE-2021-1640

CVE-2021-1640 is a Windows Print Spooler Elevation of Privilege vulnerability affecting the Print Spooler service, caused by handling of print jobs submitted to FILE: ports. The vulnerability can lead to local privilege escalation with impacts across confidentiality, integrity, and availability (...

CVE-2021-27089

Technical details for CVE-2021-27089 are not publicly provided in the supplied documents. Monitor for updates from vendor advisories and affected products.

CVE-2021-36966

Technical details about CVE-2021-36966 (affected components, root cause, impact, or remediation) are not provided in the connected documents. Monitor Microsoft/MSRC advisories and NVD/NVD-linked references for concrete remediation information.

CVE-2021-41343

Technical details for CVE-2021-41343 are not publicly provided in the supplied documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official advisories.

CVE-2022-21870

Technical details for CVE-2022-21870 are not provided in the supplied documents. The initial entry offers only a brief description. Monitor for updates.