CVE-2019-0723

Summary: CVE-2019-0723 is a denial-of-service vulnerability affecting Microsoft Hyper-V, specifically the Hyper-V Network Switch on a host server. The issue arises when input from a privileged user inside a guest OS is not properly validated, enabling an attacker who already has a privileged gues...

CVE-2021-28318

Technical details about CVE-2021-28318 are not provided in the initial document or any connected items. No affected products, vulnerable components, impact, or remediation are specified. Monitor official advisories for updates.

CVE-2021-33744

Technical details for CVE-2021-33744 are not publicly available in the provided documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories.

CVE-2021-40475

CVE-2021-40475 refers to the Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability. Available sources identify the affected component as the Windows Cloud Files Mini Filter Driver and classify the issue as an information disclosure vulnerability with local attack potential. ...

CVE-2021-40478

CVE-2021-40478 is described in the connected NVD entry as a Storage Spaces Controller Elevation of Privilege vulnerability. The CVSSv3.1 base score is 7.8 (HIGH), with attack vector LOCAL, attack complexity LOW, privileges required LOW, and no user interaction. The impact is listed as high confid...

CVE-2021-41361

Technical details about CVE-2021-41361, including affected products, root cause, impact, and fixes, are not publicly provided in the connected documents. Monitor for updates from official advisories.

CVE-2022-21876

Technical details for CVE-2022-21876 are not publicly available in the provided documents. Monitor for updates from the sources listed in the NVD entry and associated advisories.

CVE-2022-37989

CSRSS Elevation of Privilege (CVE-2022-37989) is a Windows local privilege escalation vulnerability in the Client Server Run-time Subsystem. The issue permits a local attacker to elevate privileges (to SYSTEM) on vulnerable Windows versions. Public details describe CSRSS as the Windows user-mode ...

CVE-2022-38022

CVE-2022-38022 is listed in the ENISA/NCSC (Windows Kernel) catalog as a Windows Kernel elevation-of-privilege vulnerability. The NCSc table places CVE-2022-38022 under Windows Kernel with the impact category “Obtaining Increased Entitlements.” No explicit root-cause, affected versions, or remedi...

CVE-2023-28255

CVE-2023-28255 is a Windows DNS Server Remote Code Execution vulnerability. The CVSS metrics indicate a network-based attack that requires high privileges and no user interaction, with high impact to confidentiality, integrity, and availability. Connected sources confirm DNS-related updates were ...

CVE-2023-29367

Technical details for CVE-2023-29367 are not publicly provided in the connected documents you supplied. Monitor for updates.

CVE-2023-32042

Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.

CVE-2023-35348

Public technical details about CVE-2023-35348 (Active Directory Federation Service Security Feature Bypass) are not provided in the connected documents. Currently, only high-level descriptions and mappings exist. Monitor for official advisories and published fixes for specifics.

CVE-2023-35366

Technical details for CVE-2023-35366 (RRAS RCE) are not provided in the connected documents. Monitor for updates; no specific products, vectors, exploit status, or remediations are described in the supplied materials.

CVE-2023-35383

Technical details (affected component, root cause, affected versions, impact, or fixes) for CVE-2023-35383 are not provided in the supplied documents. Monitor for updates from official sources.

CVE-2024-30097

Technical details for CVE-2024-30097 are not provided in the supplied connected documents. Public information in these sources is limited to update references; monitor for official advisories and technical details as they become available.

CVE-2024-38185

Technical details about CVE-2024-38185 are not publicly available in the provided documents. No affected products, root cause, impact, or remediation details are specified here. Monitor for updates in the connected sources.

CVE-2024-43644

Technical details about CVE-2024-43644 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2025-21242

CVE-2025-21242 is a Windows Kerberos information-disclosure vulnerability. Public sources (CNNVD/MSRC/NVD) identify it as a Kerberos-related information disclosure affecting multiple Windows builds (e.g., Windows 10/11 and Windows Server variants). The exact technical root cause and vulnerable su...

CVE-2025-27486

CVE-2025-27486 affects Windows Standards-Based Storage Management Service, causing Denial-of-Service through uncontrolled resource consumption over the network. The primary public description confirms the vulnerability class, and Microsoft has released updates to address it (e.g., KBs in the Apri...

CVE-2025-53766

CVE-2025-53766 is a heap-based buffer overflow in Windows GDI+ that enables a remote attacker to execute code over a network. Public details describe the vulnerability as a memory overflow in GDI+ triggered by processing specially crafted metafiles, potentially allowing arbitrary code execution w...

CVE-2017-0162

Technical details for CVE-2017-0162 are not present in the connected documents. The Initial document provides a high-level vulnerability description only. Monitor for updates from official advisories for affected products and fixes.

CVE-2017-0180

Technical details for CVE-2017-0180 are not publicly provided in the connected documents. Available sources reference Hyper-V Network Switch input validation issues but do not disclose affected versions, root cause specifics, or exploit information. Monitor for updates.

CVE-2018-0821

CVE-2018-0821 is a local elevation-of-privilege vulnerability in Windows AppContainer affecting Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server (2016 and 1709) where constrained impersonations are mishandled. The root cause is how AppContainer constrains impersonations, enabling a lo...

CVE-2018-8333

CVE-2018-8333 is a local Elevation of Privilege in Windows Filter Manager caused by improper handling of memory objects. Affected: Windows 7, Windows 8.1, Windows 10 and various Windows Server editions listed in the CVE entry. Root cause is mismanagement of in-memory objects within Filter Manager...

CVE-2018-8424

CVE-2018-8424 describes an information-disclosure vulnerability in the Windows GDI component where memory contents may be leaked. Affected products include Windows 7, Windows Server 2008 R2, Windows Server 2012, Windows 8.1, Windows 10 and their Server counterparts (e.g., Windows Server 2008, 201...

CVE-2018-8439

CVE-2018-8439 describes a remote code execution vulnerability in Microsoft Windows Hyper‑V. The issue arises when Hyper‑V on a host fails to properly validate input coming from an authenticated user on a guest operating system. Affected products include Windows Server 2012 R2, Windows RT 8.1, Win...

CVE-2018-8472

CVE-2018-8472 is a Windows GDI information-disclosure vulnerability. The issue arises from how the Windows Graphics Device Interface handles objects in memory, enabling a local attacker to retrieve information from the target system. Affected software/hosts include multiple Windows platforms list...

CVE-2019-1060

Technical details for CVE-2019-1060 are not provided in the supplied documents. Public information about the MSXML RCE vulnerability is not included here; monitor for updates in the connected KB/MSRC sources.

CVE-2019-1124

Technical details for CVE-2019-1124 are not publicly provided in the supplied documents; no affected products, versions, exploit information, or fixes are specified. Monitor for updates in connected sources.

CVE-2019-1156

The CVE-2019-1156 entry concerns the Windows Jet Database Engine. It describes a remote code execution vulnerability caused by improper handling of memory objects, permitting an attacker to execute arbitrary code on a victim system. Exploitation involves enticing a user to open a specially crafte...

CVE-2019-1180

The CVE-2019-1180 entry describes an elevation-of-privilege vulnerability in how wcmsvc.dll handles objects in memory. A locally authenticated attacker could run a crafted application to execute code with elevated permissions. The vulnerability is addressed by a security update that ensures wcmsv...

CVE-2019-1206

CVE-2019-1206 describes a memory corruption vulnerability in the Windows Server DHCP service triggered by processing specially crafted DHCP failover packets. The underlying issue is improper handling of failover packets, which can allow a remote attacker to cause the DHCP service to become nonres...

CVE-2019-1319

CVE-2019-1319 affects Windows Error Reporting (WER). The vulnerability stems from how WER handles and executes files, enabling elevation of privilege when exploited locally. Connected documents confirm the issue name and that it is a Windows WER elevation of privilege vulnerability, but do not pr...

CVE-2019-1395

CVE-2019-1395 denotes a Windows Win32k elevation-of-privilege vulnerability where the Win32k component mishandles objects in memory. Affects Windows with local access and low attack complexity, enabling complete confidentiality, integrity, and availability compromise for the attacker. The entry s...

CVE-2019-1466

CVE-2019-1466 corresponds to a Windows GDI information-disclosure vulnerability. Connected CNVD entries describe an information leakage in the Windows GDI component, with attacker methods such as tricking a user into opening crafted documents or visiting untrusted pages. The documents do not prov...

CVE-2020-0615

Technical details about CVE-2020-0615 are not publicly provided in the supplied documents. Monitor for updates from official advisories and CNVD/ENISA entries to confirm affected products, impact, and fixes.

CVE-2020-0648

CVE-2020-0648 : Elevation of privilege in the Windows RSoP Service Application occurs due to improper memory handling. Attack requires initial code execution on the target, after which an attacker could run a crafted application to elevate privileges. The update addresses the vulnerability by cor...

CVE-2020-0769

CVE-2020-0769 is an Elevation of Privilege vulnerability affecting the Windows CSC Service, arising from memory handling issues in the service. The CVE entry notes that exploitation requires initial code execution on the victim system, allowing an attacker to elevate privileges within the system....

CVE-2020-0992

CVE-2020-0992 corresponds to a remote code execution in the Windows Jet Database Engine caused by improper handling of memory objects. The connected CNVD entries describe a Microsoft Windows Jet Database Engine RCE vulnerability with the same root cause (memory object handling) and the impact bei...

CVE-2020-1234

CVE-2020-1234 is described in the CNVD-2021-31216 entry as a Windows Error Reporting elevation of privilege vulnerability that arises from improper handling of memory objects, enabling an attacker to gain elevated privileges by running a specially crafted application. The initial document also no...

CVE-2020-1398

CVE-2020-1398 corresponds to the Windows Lockscreen Elevation of Privilege vulnerability. The connected CNVD entry confirms the issue originates from improper handling of the Lock screen’s Ease of Use dialog, enabling privilege escalation when exploited. The initial description states exploitatio...

CVE-2020-1532

CVE-2020-1532 is a Windows elevation-of-privilege vulnerability in the InstallService caused by improper memory handling. The flaw allows a locally authenticated attacker who already has execution on the victim to run a crafted application to elevate privileges. Microsoft’s security update fixes ...

CVE-2020-1553

CVE-2020-1553 is a Windows Runtime elevation-of-privilege vulnerability. The flaw occurs when Windows Runtime improperly handles objects in memory, allowing a locally authenticated attacker to run arbitrary code with elevated privileges by executing a crafted application. The public description s...

CVE-2020-16960

CVE-2020-16960 is a Windows Backup Engine Elevation of Privilege vulnerability. Documents indicate a local attacker could exploit this to gain HIGH-severity privileges (CVSSv3.1 base score 7.8) with no user interaction required. Affected component is the Windows Backup Engine; the vulnerability i...

CVE-2021-1650

Technical details for CVE-2021-1650 are not publicly provided in the connected documents. Monitor for updates from official advisories; no specific affected product/version, root cause, impact, or remediation is included here.

CVE-2021-28437

Technical details for CVE-2021-28437 are not provided in the supplied documents. No concrete information on affected product versions, root cause, or fixes is present; monitor for updates as new disclosures or patches emerge.

CVE-2021-33773

CVE-2021-33773 affects the Windows Remote Access Connection Manager in Windows/Windows Server, described as an Elevation of Privilege vulnerability. Connected sources confirm the affected component and privilege/escalation nature, with CVSS indicating high impact (local, with high confidentiality...

CVE-2021-42286

CVE-2021-42286: Windows Core Shell SI Host Extension Framework for Composable Shell Elevation of Privilege Vulnerability. Affected component: Windows Core Shell SI Host Extension Framework. Root cause: elevation of privilege in the Composable Shell path (Core Shell). Impact (per sources): local a...

CVE-2021-43224

CVE-2021-43224 targets the Windows Common Log File System (CLFS) Driver with an information disclosure vulnerability. The connected exploit repository for this CVE indicates a Proof-of-Concept that yields a crash (BSOD) on Windows 20H2 (build 19042.1387) and is labeled as a Windows CLFS Driver Po...