CVE-2022-22000

Technical details about CVE-2022-22000 are not provided in the connected documents. The available sources confirm the vulnerability label but do not document affected products, root cause, or fixes here. Monitor for updates.

CVE-2022-22717

CVE-2022-22717 is a Windows Print Spooler elevation-of-privilege vulnerability. Affected: Windows OS with Print Spooler; the provided docs do not specify the exact root cause. CVSSv3.1 base score 7.0 (HIGH), vector LOCAL, Privileges Required LOW, User Interaction NONE, and impacts to confidential...

CVE-2022-26817

Technical details about CVE-2022-26817 (affected products, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2022-26824

Technical details about CVE-2022-26824 are not publicly provided in the supplied documents. No vendor/product specifics, impact, or remediation are described here. Monitor for updates in the connected sources.

CVE-2022-34734

Technical details (affected product/version, root cause, exploit vector, impact, and fix) are not publicly provided in the supplied documents. Monitor for updates from official vulnerability feeds.

CVE-2022-44682

CVE-2022-44682 is a Windows Hyper-V Denial of Service vulnerability. The NVD entry notes a CVSS v3.1 base score of 6.8 (Medium) with AV:A, AC:L, PR:L, UI:N, S:C, C:N, I:N, A:H, indicating an adjacent attacker with low complexity and low privileges can impact availability. Connected OpenVAS entrie...

CVE-2023-32042

Technical details about CVE-2023-32042 are not publicly provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates as connected sources do not elaborate.

CVE-2023-32055

CVE-2023-32055 is an Active Template Library Elevation of Privilege vulnerability with CVSSv3.1 base score 6.7 (Medium). It is a Local attack requiring HIGH privileges and no user interaction, with impact to confidentiality, integrity, and availability rated High. The entry references a Microsoft...

CVE-2023-35344

Technical details about CVE-2023-35344 are not publicly provided in the supplied documents. Monitor for updates and refer to official vulnerability guides for later disclosures.

CVE-2023-35356

CVE-2023-35356 is a Windows kernel/registry vulnerability where releasing a security descriptor for a predefined key without honoring the reference count caused by refcounting changes can lead to hive/descriptor inconsistencies. Documented as a security descriptor refcounting issue tied to regist...

CVE-2024-38068

Technical details about CVE-2024-38068 are not provided in the supplied documents. No affected products, root cause, impact, or remediation are described here; monitor for updates from official advisories.

CVE-2024-38069

Technical details about CVE-2024-38069 (Windows Enroll Engine Security Feature Bypass) are not provided in the connected documents. The initial description is generic; no affected products/versions or remediation are disclosed here. Monitor for updates from official advisories.

CVE-2024-38141

CVE-2024-38141 is a Windows vulnerability in the Ancillary Function Driver for WinSock that enables local privilege escalation to SYSTEM. Connected sources indicate the issue is tied to the WinSock AF Dvr and that exploitation would require local access with low privileges and no user interaction...

CVE-2024-43512

CVE-2024-43512 affects Windows Standards-Based Storage Management Service and is described in the connected NCSC advisory as a Denial-of-Service vulnerability with CVSS 6.50. The advisory confirms Windows updates are available/needed, but the documents do not provide exploit details or paved reme...

CVE-2024-43541

CVE-2024-43541 is a Microsoft Windows vulnerability in the Simple Certificate Enrollment Protocol that enables a network-based Denial of Service. The NCSC advisory lists a CVSS v3.1 base score of 7.5 (HIGH), with network access required and no user interaction, and specifies the impact as Denial ...

CVE-2024-43636

CVE-2024-43636 is a Win32k local elevation-of-privilege vulnerability with a CVSSv3.1 base score 7.8 (LOCAL, LOW PRIVILEGES, NO USER INTERACTION; impacts HIGH across confidentiality, integrity, and availability). CONNECTED documents confirm Windows OS components (Win32k) are affected and that Mic...

CVE-2025-21215

Technical details about CVE-2025-21215 are not provided in the connected documents. Public information here is limited to the vulnerability title and references; monitor for updates from Microsoft/NVD.

CVE-2025-21254

CVE-2025-21254 is associated with Internet Connection Sharing (ICS) in Windows and is described as a Denial-of-Service vulnerability. The primary documented impact is availability disruption (A) with low attack complexity and adjacent-attack vector, no authentication or user interaction required,...

CVE-2025-21349

CVE-2025-21349 is described by the connected NCSC advisory as a Windows vulnerability in Remote Desktop Services: a tampering flaw in the Windows Remote Desktop Configuration Service. The entry lists a CVSS v3.1 base score of 6.8 (Medium), with network access required (AV:N, UI:R, S:U) and high c...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

CVE-2025-27473

CVE-2025-27473 affects Windows HTTP.sys. Description in the connected sources confirms an uncontrolled resource consumption condition that enables a network-based Denial of Service, exploitable by an unauthorized attacker. The vulnerability impact is denial of service over the network; no exploit...

CVE-2026-62784

Microsoft Local Security Authority Server (lsasrv) is affected by CVE-2026-62784 due to a heap-based buffer overflow that allows an authorized attacker to execute code over the network. CVSS v3.1 score: 8.8 (High) with Network access, Low complexity, Privileges Required: Low, User Interaction: No...

CVE-2026-62792

Summary: CVE-2026-62792 is a stack-based buffer overflow in the Windows TCP/IP stack that enables a remote attacker to execute code over the network. The provided documents identify the affected component as Windows TCP/IP and confirm a RCE impact, with the exploit delivered remotely via network ...

CVE-2017-0042

CVE-2017-0042 is a Windows DirectShow information disclosure vulnerability affecting Windows Media Player and related Windows versions (Windows 7/8.x/Server variants). The underlying issue is improper handling of objects in memory during media processing, which allows an unauthenticated, remote a...

CVE-2017-0058

CVE-2017-0058 is a Windows Win32k information-disclosure vulnerability where win32k.sys fails to properly provide kernel information, allowing a local attacker to obtain sensitive data to aid compromise. Affected: Microsoft Windows Win32k component. Root cause: improper kernel information exposur...

CVE-2017-0285

CVSS context : CVE-2017-0285 is an information-disclosure vulnerability in Windows Uniscribe. The connected document KLA11039 lists an information-disclosure vulnerability in Windows Uniscribe that can be exploited remotely via specially crafted documents to obtain sensitive information. What is ...

CVE-2018-0882

CVE-2018-0882 affects Windows 10 (versions 1607, 1703, 1709) and Windows Server 2016/1709, due to how the Desktop Bridge virtual registry is managed. This creates a local elevation-of-privilege condition. The CIRCL/CVE references indicate exploitation evidence (Exploit-DB: 44315). Public technica...

CVE-2018-0890

Technical details (affected product/version, root cause, impact, or fixes) are not publicly provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2018-0902

CVE-2018-0902 affects the Cryptography Next Generation (CNG) kernel-mode driver (cng.sys) in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The vulnerability arises from how cng.sys validates and enforces impersonation levels, constituting a kernel-mode security feature bypas...

CVE-2018-0964

CVE-2018-0964 describes an information-disclosure vulnerability in Windows Hyper-V where input from a guest OS is not properly validated by a host, enabling potential data exposure on Windows 10 and Windows Server 201X where Hyper-V is involved. Connected records reiterate the vulnerable componen...

CVE-2018-0977

CVE-2018-0977: Elevation of privilege in the Windows kernel mode driver (Win32k) due to improper handling of objects in memory. Affected: Windows 10 releases Gold, 1511, 1607, 1703, 1709; Windows Server 2016 and Windows Server 1709. Impact is local privilege escalation with full compromise of con...

CVE-2018-8204

CVE-2018-8204 is a Device Guard local security bypass vulnerability that could allow an attacker to inject malicious code into a Windows PowerShell session by bypassing the Code Integrity policy. Affected software includes Windows Server 2016 and Windows 10/Windows 10 Servers. The root cause is a...

CVE-2018-8211

CVE-2018-8211 describes a security feature bypass in Microsoft Device Guard that could let a local attacker inject malicious code into a Windows PowerShell session. Affected products listed in the sources include Windows 10 and Windows 10 Server variants. The vulnerability is characterized as a b...

CVE-2018-8239

CVE-2018-8239 — Windows GDI Information Disclosure Vulnerability affects Windows Server 2016, Windows 10, and Windows 10 Server variants. The root cause is that the Windows GDI component improperly discloses the contents of memory (an information-disclosure flaw). An attacker could exploit this b...

CVE-2018-8484

CVE-2018-8484 is an elevation of privilege vulnerability in the DirectX Graphics Kernel (DXGKRNL) driver where objects in memory are improperly handled. Affected products/versions (as per documents): Windows 10 and Windows Server editions listed (Windows 8.1, Windows 10, Windows 10 Servers, Windo...

CVE-2019-1186

CVE-2019-1186 affects Windows via wcmsvc.dll, where improper handling of memory objects enables local privilege escalation. A locally authenticated attacker can run a crafted application to execute code with elevated privileges. A security update patches wcmsvc.dll to correctly handle memory obje...

CVE-2019-1384

Technical details about CVE-2019-1384 are not publicly available in the provided documents. The materials mention a NETLOGON security feature bypass but do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2019-1474

Technical details for CVE-2019-1474 are not publicly provided in the connected documents. The CVE entry lacks explicit product/version/impact/fix mapping in the supplied materials; monitor for updates.

CVE-2020-0717

Technical details for CVE-2020-0717 are not publicly provided in the supplied documents. No affected products/versions or remediation are specified here. Monitor for updates from official sources.

CVE-2020-0734

CVE-2020-0734 affects the Windows Remote Desktop Client. The connected Nessus entries describe a remote code execution vulnerability when a user connects to a malicious RDP server, enabling arbitrary code on the client. The issue is addressed by February 2020 Windows security updates (KB4537820 /...

CVE-2020-0783

CVE-2020-0783 is an elevation-of-privilege vulnerability in the Windows Universal Plug and Play (UPnP) service. The root cause, as described in provided documents, is improper handling of objects in memory within the UPnP service, enabling a local attacker to execute code with elevated system pri...

CVE-2020-0840

This CVE (CVE-2020-0840) describes an elevation of privilege in Windows arising from improper handling of hard links (Windows Hard Link Elevation of Privilege Vulnerability). The description notes a local attack resulting in a higher-privilege impact, with the CVSS v3.1 vector indicating Local ac...

CVE-2020-1004

Technical details (affected products/versions, root cause, exploit information, fixes) for CVE-2020-1004 are not publicly provided in the supplied documents. Monitor for updates as new details may be published.

CVE-2020-1410

CVE-2020-1410 describes a remote code execution vulnerability in Windows Address Book (WAB) where processing of vcard files is flawed. The CNVD-2021-65603 entry corroborates a WAB-based RCE affecting Windows/Windows Server. Public descriptions state that an attacker could deliver a malicious vCar...

CVE-2020-16876

CVE-2020-16876 refers to an elevation of privilege in the Windows Application Compatibility Client Library due to improper handling of registry operations. The vulnerability requires code execution on the victim system and the attacker must subsequently run a specially crafted application to gain...

CVE-2020-17040

Technical details for CVE-2020-17040 are not publicly provided in the Connected documents. The NVD entry summarizes a Windows Hyper-V security feature bypass but does not disclose affected products, root cause, exploit vectors, or remediation here. Monitor for updates.

CVE-2020-17097

Technical details (affected products, root cause, exploitability) for CVE-2020-17097 are not provided in the supplied documents. Monitor for updates.

CVE-2021-1702

Technical details for CVE-2021-1702 are not publicly available in the provided documents. Please monitor for updates.

CVE-2021-1731

Technical details about CVE-2021-1731 are not publicly provided in the connected documents. Monitor for updates from NVD/OSV/MSKB mentions to clarify affected product, root cause, and remediation.

CVE-2021-24083

Technical details about CVE-2021-24083 are not provided in the connected documents. Public details are limited to the Windows Address Book RCE label; monitor for updates.