CVE-2024-29050

CVE-2024-29050 is confirmed to affect Windows Cryptographic Services and is categorized as a Remote Code Execution (RCE) vulnerability. The connected documents identify the component and vulnerability name but do not provide explicit root-cause specifics, affected product versions, or remediation...

CVE-2022-21989

CVE-2022-21989 is a Windows Kernel elevation-of-privilege vulnerability. A local attacker can exploit it to escalate privileges and execute code at a higher integrity level, as indicated by Microsoft’s advisory and related coverage. Exploitation requires local access and may depend on additional ...

CVE-2024-21307

The CVE-2024-21307 entry identifies a Remote Desktop Client Remote Code Execution vulnerability with a CVSS v3.1 score of 7.5 (HIGH) . Attack vector is Network and the exploit requires User Interaction ; impact is rated as Confidentiality: High, Integrity: High, Availability: High . The available...

CVE-2024-21356

CVE-2024-21356 is listed with concrete identifiers in OpenVAS entries; it corresponds to a Windows LDAP Denial of Service vulnerability with CVSS v3.1 metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H (base score 6.5, MEDIUM). The connected records confirm it as part of Microsoft Windows vulnerability...

CVE-2024-21443

The CVE-2024-21443 entry describes a Windows Kernel Elevation of Privilege vulnerability with a LOCAL attack vector, requiring LOW privileges and USER interaction, and has HIGH impact on confidentiality, integrity, and availability. Connected documents confirm a Windows kernel/macOS? No, Windows ...

CVE-2026-42978

CVE-2026-42978: A race condition due to improper synchronization in Windows Push Notifications leads to local privilege escalation for an authorized attacker. The CVSSv3.1 base score is 7.8 (LOCAL, HIGH impact on confidentiality, integrity, and availability) with HIGH attack complexity and LOW pr...

CVE-2026-56159

CVE-2026-56159 is a heap-based buffer overflow in Windows DHCP Server that can allow an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability is rated CRITICAL with Network attack vector and no explicit exploit details in the provided documents. Connec...

CVE-2022-24534

Technical details about CVE-2022-24534 are not publicly available in the provided documents. No explicit affected products, root cause, impact, or remediation are described here; monitor for updates.

CVE-2022-30223

CVE-2022-30223 affects Windows Hyper-V and is categorized as an information-disclosure vulnerability. The provided data indicate a Confidentiality impact (C) of High with no Integrity or Availability impact (I/N, A/N) and a Medium overall severity (CVSSv3.1 base score 5.7; AV:A, AC:L, PR:L, UI:N,...

CVE-2020-1143

Technical details about CVE-2020-1143 are not provided in the connected documents; monitor for updates and new disclosures before drawing conclusions.

CVE-2021-43207

Technical details (affected component, root cause, exploitability, and fixes) for CVE-2021-43207 are not provided in the connected documents. Only the vulnerability name and CVSS metrics are present. Monitor official disclosures for specifics.

CVE-2022-22024

CVE-2022-22024 is a Windows Fax Service Remote Code Execution vulnerability. Affected: Windows Fax Service on Windows OS. Root cause: unspecified in the provided docs, but described as a remote code execution vulnerability with network/local access vectors in the CVSS data. Impact: high (CVE metr...

CVE-2024-26159

Technical details about CVE-2024-26159 are not provided in the supplied documents. The references here only reiterate the vulnerability name; monitor official advisories for updated specifics and remediation guidance.

CVE-2024-26214

CVE-2024-26214 affects the Microsoft WDAC ODBC Driver and is described as a remote code execution vulnerability. According to the CVE entry, the vulnerability has a CVSS v3.1 base score of 8.8 (HIGH) with Network attack vector, No privileges required, User interaction required, and impacts to con...

CVE-2025-21204

CVE-2025-21204 affects Windows Update Stack with improper link resolution before file access, enabling local privilege elevation for an authenticated user. Public documentation confirms the vulnerability and that Microsoft released fixes as part of April 2025 updates; patches include OS updates t...

CVE-2022-22010

Technical details for CVE-2022-22010 are not publicly provided in the supplied documents. No concrete exploit vectors, affected products, or remediation are present here. Monitor for updates from official sources as more information becomes available.

CVE-2022-26788

No concrete technical details about CVE-2022-26788 are provided in the connected documents. The initial entry only notes a PowerShell Elevation of Privilege vulnerability; monitor for updates in public advisories.

CVE-2023-24900

CVE-2023-24900 corresponds to a Windows NTLM Security Support Provider Information Disclosure Vulnerability. The provided documents confirm the vulnerability title and CVSS 3.1 base metrics (5.9, MEDIUM) with Network attack vector and no user interaction, but do not supply detailed root-cause des...

CVE-2024-21366

CVE-2024-21366 affects the Microsoft WDAC OLE DB provider for SQL Server and is rated CVSS v3.1 base score 8.8 (High). The vulnerability has a network attack vector with no privileges required, but user interaction is required, and the impact is High on confidentiality, integrity, and availabilit...

CVE-2024-21440

CVE-2024-21440 is a Microsoft ODBC Driver remote code execution vulnerability. The entry identifies affected software as Microsoft ODBC Driver and states an RCE impact with high severity (CVSS v3.1: 8.8, Network attack vector, no privileges required, user interaction required, confidentiality, in...

CVE-2026-42980

The CVE-2026-42980 entry describes an integer underflow (wrap or wraparound) in the Windows NT OS Kernel that allows an authorized, local attacker to elevate privileges. Affected component: Windows NT OS Kernel; root cause: numeric underflow leading to improper bounds/flow control, enabling privi...

CVE-2022-22019

Technical details for CVE-2022-22019 are not provided in the connected documents. Public details (affected products, exploit info, impact, remediation) are not present here. Monitor for official updates.

CVE-2022-24455

CVE-2022-24455 affects the Microsoft Windows CD-ROM Driver. The vulnerability is an Elevation of Privilege in the CD-ROM driver that could allow an attacker to execute arbitrary code with elevated privileges on Windows systems. The CNVD entry corroborates a Windows CD-ROM Driver EoP and notes pot...

CVE-2022-35794

CVE-2022-35794 refers to a Windows SSTP (Secure Socket Tunneling Protocol) Remote Code Execution vulnerability. The connected sources confirm a vulnerability in the SSTP/Remote Access stack that can enable RCE via a race condition. An unauthenticated attacker could trigger this by sending a craft...

CVE-2024-21304

Technical details about CVE-2024-21304 are not provided in the supplied documents. Monitor for updates as new public information becomes available.

CVE-2024-21348

Technical details for CVE-2024-21348 are not provided in the supplied documents; the ICS DoS description is generic. Monitor for updates.

CVE-2024-21371

Technical details about CVE-2024-21371 are not provided in the supplied documents. Please monitor for updates from official advisories to learn affected products, root cause, impact, and remediation.

CVE-2026-33829

CVE-2026-33829 concerns the Windows Snipping Tool and is assigned a CVSSv3.1 base score of 4.3 (Medium). The vulnerability is described with a network attack vector but requires user interaction and does not affect integrity or availability, with confidentiality impact listed as Low. The metric i...

CVE-2023-32014

CVE-2023-32014 is a Windows Pragmatic General Multicast (PGM) Remote Code Execution vulnerability. The issue affects Windows message-queuing facilities in PGM environments; when the Windows message queuing service is running, a remote, unauthenticated attacker can send a malicious file over the n...

CVE-2024-26176

CVE-2024-26176 is described in connected sources as a Windows Kernel vulnerability that causes an out-of-bounds read during symbolic-link validation in the registry path (CmpCheckValueList/CmpCheckValueList validation of symbolic links). The issue is tied to Windows kernel registry code paths and...

CVE-2024-26182

CVE-2024-26182 is a Windows registry/hive memory corruption issue. The connected material documents a local-elevation path via hive memory corruption that targets the HKCU hive, including volatile storage, by abusing out-of-bounds cell indexes in the hive cell map. The attacker can craft a memory...

CVE-2019-1089

Technical details about CVE-2019-1089 are not publicly provided in the connected documents. The initial entry notes an elevation of privilege in rpcss.dll but no vendor/product/version specifics are given here. Monitor for updates.

CVE-2024-21341

Technical details about CVE-2024-21341 are not publicly provided in the supplied documents. Monitor for updates from NVD, Microsoft, or CVE listings for affected products, root cause, impact, and remediation.

CVE-2024-21444

CVE-2024-21444 concerns Microsoft WDAC OLE DB provider for SQL Server and is described as a remote code execution vulnerability. The NVD entry assigns CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H with a base score of 8.8 (HIGH). Exploitation is network-based, requires user interaction, and impa...

CVE-2025-60724

Technical details about CVE-2025-60724 are not provided in the supplied documents. Connected KBs discuss OS updates and security fixes but do not specify vulnerable product versions, root cause, exploitation, or patch specifics for this CVE. Monitor for updates.

CVE-2021-38671

Technical details about CVE-2021-38671 are not publicly available in the provided documents; monitor for updates and cross-check with official advisories for affected products and fixes.

CVE-2022-24489

Technical details about CVE-2022-24489 are not publicly provided in the supplied connected documents. Monitor for updates from official advisories and vendor patches.

CVE-2021-26435

Technical details about CVE-2021-26435 are not publicly available in the provided connected documents. The records reference the vulnerability and related CVEs but do not disclose affected components, root cause, impact, or fixes. Monitor for updates.

CVE-2022-21839

CVE-2022-21839 is a Windows vulnerability in Event Tracing Discretionary Access Control List that enables DoS. Microsoft notes easy remote exploitation with authentication required; impact is Denial of Service. Remediated by the January 2022 security updates (e.g., KB5009557) addressing Windows E...

CVE-2022-24454

Technical details for CVE-2022-24454 are not publicly provided in the supplied documents. No affected product/version/impact/fix details are present here. Monitor for updates.

CVE-2022-26938

CVE-2022-26938 is described as a Storage Spaces Direct Elevation of Privilege vulnerability. The connected data confirms a local-attack vector (CVSS3.1: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) with high impact on confidentiality, integrity, and availability. The CVSS v2 metrics also indicate local a...

CVE-2024-21355

CVE-2024-21355 is a Microsoft Message Queuing (MSMQ) Elevation of Privilege vulnerability. The initial entry indicates a local attack vector with high impact: CVSS 3.1 base score 7.0, attack vector Local, attack complexity High, privileges Required LOW, no user interaction, and impact on confiden...

CVE-2025-59258

CVE-2025-59258 is an information-disclosure vulnerability affecting Windows Active Directory Federation Services (ADFS). The incident involves insertion of sensitive data into ADFS log files, enabling a local attacker to disclose information. The CVE is characterized in the provided data as a loc...

CVE-2020-16891

Technical details for CVE-2020-16891 are not provided in the connected documents. Public details appear limited to the initial description; monitor for updates and additional disclosures.

CVE-2022-24482

CVE-2022-24482 is a Windows ALPC Elevation of Privilege Vulnerability. The NVD entry shows a CVSS2 base score of 4.4 (LOCAL, medium) and a CVSS3.1 base score of 7.0 (LOCAL, HIGH, with HIGH confidentiality/integrity/availability impact). Connected sources confirm Windows as the affected platform a...

CVE-2022-24541

CVE-2022-24541 is described in the initial entry as a Windows Server Service Remote Code Execution vulnerability. Connected material explicitly associates the CVE with a Windows SMB-based remote code execution context, indicating the vulnerability affects the Windows Server service and can enable...

CVE-2022-29104

Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.

CVE-2022-29123

Technical details for CVE-2022-29123 (Windows Clustered Shared Volume Information Disclosure) are not provided in the connected documents. The initial entry includes general descriptions, but no product/version/root-cause/impact/fix details are available here. Monitor for official updates.

CVE-2022-35822

CVE-2022-35822 is a local security-bypass vulnerability affecting Windows Defender Credential Guard, with high impact to confidentiality and integrity and no availability impact. It requires low privileges and is exploitable with local access and no user interaction. The provided documents do not...

CVE-2019-0630

A remote code execution (RCE) vulnerability exists in the Microsoft Server Message Block 2.0 (SMBv2) server component of the Windows operating system. The flaw is caused by the insecure management of privileges , which allows a remote attacker to execute arbitrary code by sending a specially craf...