CVE-2024-29996

CVE-2024-29996 affects the Windows Common Log File System Driver. The vulnerability is an Elevation of Privilege issue in CLFS, with a high base CVSS score (3.1, 7.8). It is exploitable locally, requires low privileges, and does not require user interaction. The impact is rated as high for confid...

CVE-2023-21557

CVE-2023-21557 concerns the Windows LDAP (Lightweight Directory Access Protocol) Denial of Service vulnerability. The provided documents identify the affected component as Windows LDAP but do not specify affected product versions, root cause details, exploitation methods, or a concrete fix. Conne...

CVE-2023-29362

Technical details about CVE-2023-29362 (affected product, vulnerable component, root cause, impact, or fix) are not provided in the supplied documents. Monitor for updates from official advisories and vulnerability databases.

CVE-2026-50380

CVE-2026-50380 is a Windows GDI+ heap-based buffer overflow that enables a remote attacker to execute code over a network. The CVE is listed among highly critical Windows vulnerabilities in July 2026 patch advisories, with Microsoft updating GDI+ and related components in the July security releas...

CVE-2021-38671

Technical details about CVE-2021-38671 are not publicly available in the provided documents; monitor for updates and cross-check with official advisories for affected products and fixes.

CVE-2019-1089

Technical details about CVE-2019-1089 are not publicly provided in the connected documents. The initial entry notes an elevation of privilege in rpcss.dll but no vendor/product/version specifics are given here. Monitor for updates.

CVE-2022-21983

CVE-2022-21983 is a Win32 Stream Enumeration Remote Code Execution vulnerability. The connected sources show an in-scope CVE with a network attack vector and high impact: CVSSv3.1 base score 7.5 (HIGH), with no authentication (NONE) and user interaction required (REQUIRED); confidentiality, integ...

CVE-2022-29132

Technical details about CVE-2022-29132 (Windows Print Spooler elevation) are not provided in the supplied documents. No affected product/version or remediation is specified here. Monitor for official updates.

CVE-2019-1118

CVE-2019-1118 is a DirectWrite remote code execution vulnerability described as existing in the way DirectWrite handles objects in memory. The CVE entry notes it is distinct from nearby CVEs and lists high-severity metrics (CVSSv3 base 8.8, network attack, user interaction required) indicating a ...

CVE-2022-21836

CVE-2022-21836 is a Windows kernel-level spoofing flaw that could bypass WPBT verification by presenting a small number of compromised certificates. Microsoft mitigated this by adding those certificates to the Windows kernel driver block list, blocking them even if present in WPBT. The CVE is dis...

CVE-2022-21893

Technical details about CVE-2022-21893 are not provided in the connected documents. The supplied sources include high-level vulnerability descriptions and update references, but no specifics on affected products/versions or fixes. Monitor for updated, concrete disclosures.

CVE-2022-23270

Technical details about CVE-2022-23270 are not present in the provided connected documents. Public information on affected products, root cause, and remediation is not provided here. Monitor Microsoft Security Update Guide and MSRC advisories for official details and fixes.

CVE-2022-33670

Technical details about CVE-2022-33670 (affected components, exploit vectors, impact, and fixes) are not provided in the supplied documents; no concrete information is available. Monitor for updates.

CVE-2023-24876

Summary (supported by CNVD-2023-30866): Microsoft PostScript and PCL6 Class Printer Driver has a remote code execution vulnerability. The CNVD entry describes a remote code execution flaw in these Microsoft printer drivers. The CVE-2023-24876 listing on NVD also identifies this as a Remote Code E...

CVE-2024-20683

Technical details are not publicly provided in the supplied documents. No specifics on affected products, versions, impact, or fixes are available here; monitor official sources for updates.

CVE-2024-21363

Technical details for CVE-2024-21363 are not provided in the supplied documents; monitor for updates.

CVE-2026-56188

CVE-2026-56188: A race-condition in the Windows Server Network driver (concurrent access to a shared resource) can allow an unauthenticated attacker to execute code over the network. The vulnerability affects the Windows Server Network driver and is described as a remote code execution flaw with ...

CVE-2020-17096

Technical details about CVE-2020-17096 are not provided in the connected documents. Available sources mention impact and CVSS but do not disclose affected product versions, root cause, exploit status, or fixes in this data set. Monitor for updates.

CVE-2021-34480

Technical details about CVE-2021-34480 are not provided in the connected documents. Public descriptions exist, but no specifics on affected products, root cause, impact, or fixes are included here. Monitor for updates.

CVE-2022-21874

CVE-2022-21874 is a Windows Security Center API RCE vulnerability. Public details in the connected documents describe it as an RCE in the Windows Security Center API with a CVSS v3.1 base score of 7.8 (High) and a Local attack vector requiring user interaction for exploitation. Exploitation conte...

CVE-2022-34714

Technical details about CVE-2022-34714 are not provided in the attached documents. The connected items do not describe affected products, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2022-35792

Technical details (affected product/versions, root cause, exploit information, and remediation) are not provided in the connected documents for CVE-2022-35792. Monitor for updates.

CVE-2023-21556

Technical details about CVE-2023-21556 are not publicly provided in the supplied documents; no affected products, root cause, or fixes are specified here. Monitor for updates from official sources.

CVE-2024-21362

Technical details for CVE-2024-21362 are not publicly available in the provided documents. No affected products, root cause, or remediation details are disclosed here. Monitor for updates from official sources.

CVE-2026-33829

CVE-2026-33829 concerns the Windows Snipping Tool and is assigned a CVSSv3.1 base score of 4.3 (Medium). The vulnerability is described with a network attack vector but requires user interaction and does not affect integrity or availability, with confidentiality impact listed as Low. The metric i...

CVE-2022-35769

Technical details for CVE-2022-35769 (Windows PPP DoS) are not provided in the supplied documents. No affected product/version or remediation is described here. Monitor for updates from Microsoft and Vulners for confirmed specifics.

CVE-2022-44707

Technical details about CVE-2022-44707 are not provided in the supplied documents. The connected set does not describe affected products/versions or remediation; monitor for updates.

CVE-2024-20663

Technical details about CVE-2024-20663 are not provided in the supplied documents. No confirmed affected products, versions, root cause, or remediation are disclosed; monitor for updates.

CVE-2019-1120

Technical details about CVE-2019-1120 are not publicly provided in the supplied documents; monitor for official updates.

CVE-2022-26831

CVE-2022-26831 : Windows LDAP Denial of Service vulnerability. The vulnerability is described as a Windows LDAP DoS issue with a Network attack vector (no user interaction) and a high-impact on availability (per CVSS v3.1: 7.5, HIGH; CVSS v2: 5.0, MEDIUM). Connected sources confirm the Windows LD...

CVE-2022-29122

Technical details for CVE-2022-29122 (affected product, root cause, exploit scope) are not provided in the supplied documents. Monitor official Microsoft advisories and the CVE entry for updates and remediation guidance.

CVE-2021-34460

Technical details about CVE-2021-34460 are not publicly available in the provided documents. The connected sources do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2021-40469

CVE-2021-40469 is a Windows DNS Server Remote Code Execution vulnerability. Connected sources indicate exploitation requires a privileged user account and is network-exploitable with low attack complexity, but exploitation in the wild is not strongly evidenced: the issue was noted as exploitable ...

CVE-2022-34704

CVE-2022-34704 is a Windows Defender Credential Guard Information Disclosure vulnerability. The CVSS‑3.1 base score is 4.7 (Medium) with Local attack vector, HIGH attack complexity, LOW privileges required, and NONE user interaction. Confidentiality impact is HIGH; integrity and availability are ...

CVE-2023-21692

CVE-2023-21692 is described as a Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution vulnerability. The connected documents provide limited details: they cite PEAP RCE and do not specify affected products, versions, or root cause beyond the general Microsoft PEAP c...

CVE-2024-21314

CVE-2024-21314 relates to Microsoft Message Queuing and is described in CNVD/NVD sources as a Microsoft Message Queuing Information Disclosure Vulnerability. The connected documents explicitly state that the vulnerability allows an attacker to obtain sensitive information from heap memory. No con...

CVE-2024-21320

CVE-2024-21320 is a Windows themes spoofing vulnerability with public detail: Exploit-DB describes an NTLM hash-leak via a malicious Windows theme, demonstrating how a crafted .theme file can exfiltrate credentials. The NVD entry labels the issue as Windows Themes Spoofing Vulnerability with a CV...

CVE-2024-20687

CVE-2024-20687 is a DoS vulnerability in the Microsoft AllJoyn API. The NVD entry notes a network-based attack with low complexity that results in availability impact (I: C, A: C? actually A). The provided metrics show CVSS 3.1 base score 7.5, vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicatin...

CVE-2026-62818

CVE-2026-62818 affects Microsoft Windows Active Directory Certificate Services (AD CS). The vulnerability is a use-after-free in AD CS that allows an authorized attacker to execute arbitrary code over a network. CVSS v3.1 base metrics indicate a HIGH severity (8.8) with Network attack vector, Low...

CVE-2021-26435

Technical details about CVE-2021-26435 are not publicly available in the provided connected documents. The records reference the vulnerability and related CVEs but do not disclose affected components, root cause, impact, or fixes. Monitor for updates.

CVE-2022-21857

Technical details for CVE-2022-21857 (Active Directory Domain Services Elevation of Privilege) are not provided in the connected documents. The initial description confirms AD DS Elevation of Privilege, but no affected product versions, root cause, impact, or fixes are included here. Monitor for ...

CVE-2022-29104

Technical details (affected products/components, root cause, impact, and exploit info) for CVE-2022-29104 are not provided in the connected documents. Monitor for updates; current sources here do not publish public vulnerability specifics beyond the CVE entry.

CVE-2023-21541

Technical details about CVE-2023-21541 are not provided in the connected documents. Based on available data, no specifics on affected components, root cause, or fixes are included here. Monitor for updates from authoritative sources.

CVE-2023-21769

CVE-2023-21769 is reported as a Microsoft Message Queuing (MSMQ) Denial of Service vulnerability. The initial entry provides a CVSSv3.1 base score of 7.5 (HIGH) with an attack vector of NETWORK, attack complexity LOW, no privileges required, no user interaction, and an impact of NONE for confiden...

CVE-2022-21920

CVE-2022-21920 is a Windows Kerberos Elevation of Privilege vulnerability with CVSS 3.1 base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Privileges required: LOW; User interaction: NONE; Scope: UNCHANGED; Impacts: confidentiality, integrity, and availability HIGH. The initia...

CVE-2022-23253

CVE-2022-23253 is a Windows PPTP Denial of Service vulnerability. The records show it has a CVSS v3.1 base score of 6.5 (Network, Low attack complexity, Privileges Low, No user interaction) with HIGH availability impact. Concrete details about affected products, versions, or exploit activity are ...

CVE-2024-20694

CVE-2024-20694 is described as a Windows CoreMessaging Information Disclosure vulnerability. The initial description provides a CVSSv3.1 vector: Local attack vector, Low attack complexity, Low privileges required, no user interaction, with a High confidentiality impact and a Medium base score (5....

CVE-2019-0975

CVE-2019-0975 describes a security feature bypass in Active Directory Federation Services (ADFS) due to improper updates to the list of banned IP addresses. Exploitation requires a victim ADFS administrator to perform the list-update action, enabling an attacker to bypass security checks. The ass...

CVE-2022-21898

CVE-2022-21898 is a DirectX Graphics Kernel Remote Code Execution vulnerability in Windows. The entry notes a network-based, no-user-interaction exploit with high/critical impact (C: High, I: High, A: High) and local/remote exploitation in different entries; the primary CVE description identifies...

CVE-2022-26919

Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.