4929 matches found
CVE-2022-26919
Technical details about CVE-2022-26919 are not publicly available in the provided connected documents. Monitor for updates from official advisories to learn affected products, root cause, impact, and recommended mitigations.
CVE-2022-30226
Technical details and indicators for CVE-2022-30226 are not provided in the supplied documents. No affected product/version specifics or remediation are included here; monitor official advisories for updates.
CVE-2023-24900
CVE-2023-24900 corresponds to a Windows NTLM Security Support Provider Information Disclosure Vulnerability. The provided documents confirm the vulnerability title and CVSS 3.1 base metrics (5.9, MEDIUM) with Network attack vector and no user interaction, but do not supply detailed root-cause des...
CVE-2024-26219
CVE-2024-26219 is a Denial-of-Service vulnerability in Windows HTTP.sys. The CVSSv3.1 base vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) yields a 7.5 HIGH rating, indicating network-based exploitation with no user interaction and potential downtime due to availability impact. Public references ide...
CVE-2021-26442
Technical details for CVE-2021-26442 are not present in the connected documents. Public info here is generic. Monitor for updates from official advisories; no product/version/impact specifics are provided in the supplied materials.
CVE-2021-31962
Technical details (affected product/versions, root cause, impact, exploitability, and remediation) are not provided in the supplied documents. Monitor official disclosures and updates from the included sources for any forthcoming information.
CVE-2022-22034
Technical details about CVE-2022-22034 are not publicly provided in the supplied documents. Monitor for updates from official vendors when more information becomes available.
CVE-2022-24492
CVE-2022-24492 is a Remote Code Execution vulnerability in Windows RPC Runtime. The connected Akamai blog notes that Windows RPC-related RCE vulnerabilities were patched in Microsoft’s April 2022 Patch Tuesday, including CVE-2022-24492, with patches issued as part of the Windows security updates....
CVE-2022-34709
CVE-2022-34709 relates to a Windows Defender Credential Guard security feature bypass. The entry lists a CVSS v3.1 base score of 6.0 (MEDIUM), with LOCAL attack vector, LOW attack complexity, HIGH privileges required, and no user interaction. Confidentiality and integrity impact are HIGH, availab...
CVE-2024-21339
Technical details about CVE-2024-21339 are not publicly available in the provided documents; current sources only repeat the vulnerability title. Monitor for official disclosures and updates.
CVE-2024-49084
CVE-2024-49084 is a Windows Kernel elevation-of-privilege issue (Windows Kernel). The connected sources list it under Windows Kernel with a CVSS v3.1 base score of 7.0 (local attack vector, high impact across confidentiality, integrity, and availability) and indicate the vulnerability allows obta...
CVE-2019-0584
CVE-2019-0584 refers to a remote code execution vulnerability in the Windows Jet Database Engine, arising from improper handling of objects in memory. The issue affects multiple Windows platforms (as listed in the initial entry). The connected Nessus/Office-related documents corroborate a broader...
CVE-2021-36947
CVE-2021-36947 is listed in the NCSC vulnerability record as a Windows Print Spooler Component vulnerability with the impact: Execute random code. The connected documents do not provide concrete technical details on the root cause, affected subcomponents, specific versions, exploit scenarios, or ...
CVE-2022-29129
CVE-2022-29129 is described as a Windows LDAP Remote Code Execution vulnerability. The connected CNVD entry (CNVD-2022-72859) also labels “Microsoft Windows LDAP Remote Code Execution Vulnerability,” confirming LDAP RCE wording in the CVE context. However, the connected documents do not provide c...
CVE-2022-35766
CVE-2022-35766 is described in the connected CNNVD entry as a code injection vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) that can lead to remote code execution. The CNNVD note lists affected Windows releases (e.g., various Windows 10/11 and Windows Server versions) but do...
CVE-2024-49128
CVE-2024-49128 describes a vulnerability in Windows Remote Desktop Services where sensitive data is stored in improperly locked memory. This can allow an unauthenticated, network-based attacker to execute code remotely. The CVSS 3.1 vector provided indicates network access as the attack vector, h...
CVE-2025-27480
CVE-2025-27480 is described as a Remote Desktop Services/RDP remote code execution vulnerability with a network attack vector (no user interaction) and a base CVSS v3.1 score of 8.1 (HIGH). Public references include a GitHub exploit claiming a remote code execution path and Krebs-style coverage p...
CVE-2026-56159
CVE-2026-56159 is a heap-based buffer overflow in Windows DHCP Server that can allow an unauthenticated attacker to execute code over a network (remote code execution). The vulnerability is rated CRITICAL with Network attack vector and no explicit exploit details in the provided documents. Connec...
CVE-2019-1151
CVE-2019-1151 is the Microsoft Graphics Remote Code Execution vulnerability. The Windows font library fails to properly handle specially crafted embedded fonts, enabling remote code execution that can compromise an affected system (install programs, modify data, create accounts with full rights)....
CVE-2021-26897
CVE-2021-26897 is a Windows DNS Server remote code execution vulnerability. The connected sources indicate the issue is a buffer overflow caused by oversized dynamic update DNS queries with SIG records that can be written to disk, allowing code execution with Local System privileges when a domain...
CVE-2021-41338
Technical details about CVE-2021-41338 (Windows AppContainer Firewall Rules Security Feature Bypass) are not provided in the connected documents. Monitor for updates.
CVE-2022-26914
CVE-2022-26914 is a Win32k elevation-of-privilege vulnerability in Windows Win32k. The CVSS info in the initial record indicates local, low-privilege requirements with high impacts on confidentiality/integrity/availability. Connected documents reference Microsoft update notes (KB5012604, KB501264...
CVE-2023-32019
CVE-2023-32019 is a Windows kernel registry vulnerability arising from hive memory corruption via out-of-bounds registry cell indexes. The provided research shows that with a crafted hive (notably HKCU and app hives) a local attacker can trigger UAF- and memory-corruption primitives that enable r...
CVE-2024-20658
CVE-2024-20658 is described as a local, elevation-of-privilege vulnerability in the Microsoft Virtual Hard Disk. The CVSS3.1 base shows: attack vector LOCAL, attack complexity LOW, privileges required LOW, user interaction NONE, and impact C (confidentiality), I (integrity), and A (availability) ...
CVE-2022-22039
CVE-2022-22039 is a Windows NFS Remote Code Execution vulnerability. The connected sources describe it as an unauthenticated, network-exploitable flaw in the Network File System service that allows an attacker to trigger RCE via a specially crafted NFS request. Exploitation is possible over the n...
CVE-2023-21552
CVE-2023-21552 is documented in an NCSC advisory as a Windows Graphics Component vulnerability (Windows GDI) with CVSS v3.1 base score 7.80, affecting privilege escalation. The NCSC listing confirms its classification as an elevation of privileges issue in Windows Graphics/Graphics Device Interfa...
CVE-2023-36047
Technical details (affected product/version, root cause, exploitability, or fix) for CVE-2023-36047 are not provided in the connected documents. Monitor for updated advisories from Microsoft and related sources for specifics.
CVE-2025-21263
Technical details for CVE-2025-21263 are not publicly provided in the supplied connected documents. The materials reference Windows Digital Media Elevation of Privilege vulnerability but do not describe affected components, root cause, impact specifics, or fixes. Monitor updates from official sou...
CVE-2021-24086
CVE-2021-24086 is a Windows TCP/IP DoS affecting tcpip.sys via IPv6 processing. Public PoCs show remote triggering by crafted IPv6/UDP packets and IPv6 fragment handling, potentially causing kernel memory issues or a crash. The vulnerability was patched by Microsoft in Feb 2021; exploitation deta...
CVE-2022-37991
CVE-2022-37991 is a Windows kernel registry issue tied to regf hive loading where key/value name length checks were not enforced (e.g., key names up to 1040 chars). This could lead to memory corruption or crashes during hive load; connected materials describe related hive/registry memory-corrupti...
CVE-2022-41081
CVE-2022-41081 is a Windows PPTP Remote Code Execution vulnerability in the Point-to-Point Tunneling Protocol. The root cause is the PPTP implementation failing to properly filter external input during code segment construction, enabling arbitrary code execution when exploited over a network. The...
CVE-2022-41039
Technical details about CVE-2022-41039 are not provided in the supplied documents. Public details, affected products, or fixes are not included here. Monitor for updates from official sources.
CVE-2023-21535
CVE-2023-21535 is a Windows SSTP Remote Code Execution vulnerability. The affected component is Secure Socket Tunneling Protocol (SSTP); root cause details are not expanded beyond “SSTP RCE” in the provided documents, but the CVE is rated high (CVSS 8.1) with network access, high confidentiality/...
CVE-2023-28232
Technical details about CVE-2023-28232 are not publicly provided in the connected documents. Public information is limited to the description; monitor for official advisories and updates from Microsoft for fixes, affected products, and mitigations.
CVE-2023-36903
No technical details for CVE-2023-36903 are provided in the supplied documents; only the vulnerability title is present. Monitor for updates.
CVE-2024-21305
CVE-2024-21305 is a Hypervisor-Protected Code Integrity (HVCI) security feature bypass affecting Windows; the CVE entry notes a local attack surface with high privileges required and no user interaction (per CVSS details). Connected Microsoft documentation confirms the vulnerability and lists it ...
CVE-2024-28903
CVE-2024-28903 is listed under Microsoft Windows Secure Boot vulnerabilities with a circumvention of security measure impact. The connected OpenVAS/NCSC entries corroborate that Secure Boot-related fixes were released, but do not provide product/version specifics or a patch identifier. The root c...
CVE-2020-0642
CVE-2020-0642 is a Windows Win32k Elevation of Privilege vulnerability. The Win32k component can mishandle objects in memory, enabling local privilege escalation and kernel‑mode access when exploited on affected Windows/Windows Server builds. Public connected documents corroborate the Win32k memo...
CVE-2020-1421
CVE-2020-1421 is a Windows remote code execution vulnerability tied to processing a .LNK file. An attacker who successfully exploits it could gain the same user rights as the current user; CVSS indicates Network access, low attack complexity, with user interaction required.
CVE-2021-38666
CVE-2021-38666 is described as a Remote Desktop Client Remote Code Execution vulnerability. The vulnerability affects the Windows Remote Desktop Client, with the CVSS3.1 score indicating network-exposed, no privileges required, user interaction needed, and high impact to confidentiality, integrit...
CVE-2022-21896
CVE-2022-21896 concerns the Windows DWM Core Library Elevation of Privilege. The NVD entry describes a local, privilege-escalation vulnerability with a CVSS v3.1 base score of 7.0 (HIGH) and an older CVSS v2 base score of 6.9 (MEDIUM). The CVE is associated with Windows components and is referenc...
CVE-2022-22014
Technical details about CVE-2022-22014 are not provided in the supplied connected documents. The initial description notes a Windows LDAP RCE vulnerability, but there are no concrete details on affected products, versions, root cause, impact, or fixes within the provided materials. Monitor for up...
CVE-2022-22042
CVE-2022-22042 is described in the Initial Document as a Windows Hyper-V Information Disclosure Vulnerability. The Connected Documents do not provide concrete technical details (affected product version, root cause, impact, or remediation) for this CVE. Therefore, the available information remain...
CVE-2023-23416
Technical details about CVE-2023-23416 are not publicly available in the provided connected documents; monitor official disclosures and vendor advisories for impact, affected products, and fixes.
CVE-2023-35321
Technical details (affected product versions, root cause, exploit specifics, and remediation) are not provided in the supplied documents. Monitor for updates from official sources; CVE-2023-35321 relates to Windows Deployment Services Denial of Service but specifics are not disclosed here.
CVE-2023-36398
Technical details about CVE-2023-36398 are not provided in the connected documents. No explicit information on affected products, versions, root cause, or remediation is present. Monitor for updates and rely on the initial vulnerability summary for context.
CVE-2019-0538
CVE-2019-0538 is a remote code execution vulnerability in the Windows Jet Database Engine caused by improper handling of objects in memory. A successful exploit could allow an attacker to execute arbitrary code on a vulnerable system by convincing a user to open a specially crafted file. Affected...
CVE-2020-16898
CVE-2020-16898 is a Windows TCP/IP remote code execution vulnerability triggered by specially crafted ICMPv6 Router Advertisement packets. The issue arises from how the Windows TCP/IP stack handles ICMPv6 RA messages, allowing an attacker to execute code on a targeted Windows host by sending craf...