CVE-2026-42980

The CVE-2026-42980 entry describes an integer underflow (wrap or wraparound) in the Windows NT OS Kernel that allows an authorized, local attacker to elevate privileges. Affected component: Windows NT OS Kernel; root cause: numeric underflow leading to improper bounds/flow control, enabling privi...

CVE-2020-16933

Microsoft Word contains a security feature bypass (CVE-2020-16933) due to improper handling of .LNK files. An attacker can craft a .LNK file to perform actions in the current user’s security context when a user opens it (email or web delivery scenarios described). The vulnerability can lead to co...

CVE-2022-24530

CVE-2022-24530 is a Windows Installer Elevation of Privilege vulnerability. The NVD entry lists a CVSSv3.1 base score of 7.8 (LOCAL, LOW privileges required, UI NONE, S C changed, impact: HIGH on confidentiality, integrity, and availability). It reflects a local privilege escalation in the Window...

CVE-2022-24538

Technical details about CVE-2022-24538 are not publicly provided in the supplied documents. No affected products, vectors, or fixes are confirmed here. Monitor for official updates.

CVE-2022-26825

CVE-2022-26825 concerns a Remote Code Execution vulnerability in the Windows DNS Server. Connected sources confirm the flaw affects Windows DNS Server functionality and can be exploited remotely to execute arbitrary code, with public exploits reported. The vulnerability is classified with high ri...

CVE-2022-29139

Technical details about CVE-2022-29139 are not provided in the supplied documents. Public info in the connected entries does not describe affected products/versions, exploit methods, or remediation beyond general LDAP RCE context. Monitor for updates.

CVE-2022-30165

Technical details for CVE-2022-30165 are not publicly available in the provided documents; monitor for updates.

CVE-2022-34705

Technical details about CVE-2022-34705 are not publicly provided in the supplied documents. No concrete affected components, root cause, impact, or fixes are present beyond the vulnerability title and references. Monitor for official disclosures or updates.

CVE-2023-21560

Technical details about CVE-2023-21560 (affected products, root cause, impact, remediation) are not provided in the supplied connected documents. Monitor for official disclosures and vendor advisories; the current set does not specify affected systems or fixes.

CVE-2023-36423

Technical details about CVE-2023-36423 are not provided in the supplied documents. No affected products, root cause, or remediation are specified here. Monitor for updates in connected sources.

CVE-2024-26158

CVE-2024-26158 affects Microsoft Windows Install Service and is an Elevation of Privilege vulnerability. It is exploitable locally (attack vector: Local) with low privileges required and no user interaction, potentially granting complete control (confidentiality/integrity/availability impact: Hig...

CVE-2019-1096

Technical specifics for CVE-2019-1096 are not provided in the supplied Connected documents. Public details about affected products, impact, or remediation are not present here; monitor for updates.

CVE-2021-34445

CVE-2021-34445 is a Windows Local Privilege Escalation vulnerability in the Remote Access Connection Manager. The CVSS v3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) indicates high impact on confidentiality, integrity, and availability with a local, low-complexity path and required low privile...

CVE-2022-24474

Technical details about CVE-2022-24474 are not publicly available in the provided documents; no affected products, versions, or fixes are specified here. Monitor for updates.

CVE-2022-34729

Technical details about CVE-2022-34729 are not publicly available in the provided connected documents. Monitor for updates; the entry is described as a Windows GDI Elevation of Privilege vulnerability with local access and high impact in the initial description.

CVE-2022-37986

Technical details about CVE-2022-37986 (affected component, root cause, impact, or fixes) are not provided in the connected or initial documents. Monitor for updates and additional technical disclosure.

CVE-2023-21727

Technical details (affected product/versions/root cause/fix) are not provided in the connected documents; monitor for updates.

CVE-2023-28220

Technical details about CVE-2023-28220 (Layer 2 Tunneling Protocol RCE) are not provided in the supplied connected documents. No affected products, impact, fixes, or exploitation data are present here. Monitor for updates.

CVE-2024-30080

Technical details about CVE-2024-30080 are not provided in the supplied documents. No specifics on affected products, vulnerable components, root cause, or fixes are included; monitor for updates from Microsoft/security advisories.

CVE-2020-1530

CVE-2020-1530 is an Elevation of Privilege flaw in Windows Remote Access caused by improper handling of memory. An attacker who already has code execution on a victim system could run a crafted program to elevate privileges. The advisory indicates the fix is a security update that corrects how Wi...

CVE-2021-42277

Technical details about CVE-2021-42277 are not provided in the connected documents; only generic vulnerability labels and references are available. Monitor for official advisories or CVE records for affected products, fixes, and mitigations.

CVE-2022-26934

CVE-2022-26934 is a Windows Graphics Component information disclosure vulnerability. Affects Windows graphics handling (Windows Graphics Component) and is disclosed as a network-exposed information disclosure with a base CVSSv3.1 score of 6.5 (vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)...

CVE-2022-37976

CVE-2022-37976 is an Elevation of Privilege in Windows Active Directory Certificate Services (AD CS). A malicious DCOM client can force a AD CS server to authenticate to it over the network, potentially using those credentials to perform a cross-protocol attack. This could allow an attacker to ob...

CVE-2023-21817

The provided documents do not contain technical details about CVE-2023-21817 (affected product/component, root cause, impact, or remediation). Technical specifics are not publicly available here. Monitor for updates and authoritative disclosures.

CVE-2024-20664

CVE-2024-20664 corresponds to a Microsoft Message Queuing information disclosure vulnerability. The provided documents describe an information disclosure in Microsoft Message Queuing that could allow an attacker to obtain sensitive data from heap memory. The entry has a CVSS 3.1 base score of 6.5...

CVE-2024-26179

CVE-2024-26179 affects Windows Routing and Remote Access Service (RRAS) with a remote code execution vulnerability (CVSS v3.1: 8.8, HIGH). The entry specifies network attack vector with no privileges required but user interaction required, leading to execution of arbitrary code on affected system...

CVE-2020-17103

CVE-2020-17103 concerns the Windows Cloud Files Mini Filter Driver (cldflt.sys). Public materials describe a local privilege escalation via a race condition in the mini-filter that can hijack the windir environment path and redirect operations, enabling SYSTEM-level access under certain condition...

CVE-2021-36937

Technical details for CVE-2021-36937 are not publicly available in the provided documents. The initial description notes a Windows Media MPEG-4 Video Decoder RCE, but no concrete product/version/impact details are supplied here. Monitor for updates.

CVE-2022-24499

Technical details about CVE-2022-24499 are not provided in the connected documents; public specifics (affected products, root cause, exploit info, or remediation) are not available here. Monitor for updates.

CVE-2022-30132

Technical details for CVE-2022-30132 are not provided in the connected documents. Public details (product, impact, fix) are not present here. Monitor for updates from authoritative sources.

CVE-2022-38029

Summary : CVE-2022-38029 is a Windows ALPC elevation-of-privilege vulnerability. It is a local issue that can grant high-impact privileges to an attacker with low privileges and no user interaction, as indicated by the CVSS vector in the Initial document (CVSS v3.1: AV=L/AC=H/PR=L/UI=N/S=U/C=H/I=...

CVE-2023-36428

Technical details about CVE-2023-36428 are not provided in the supplied documents. No concrete affected products, versions, or remediation are present here. Monitor for updates from Microsoft and NVD for further information.

CVE-2026-49172

The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...

CVE-2020-16923

CVE-2020-16923 is a remote code execution vulnerability in Microsoft Graphics Components, due to improper handling of objects in memory. An attacker could execute arbitrary code on a target system by convincing a user to open a specially crafted file. Public documents consistently state the issue...

CVE-2021-31183

CVE-2021-31183 is a Windows TCP/IP Driver Denial of Service vulnerability. Multiple connected sources (NVD/NVD CNVD entries) describe it as a DoS issue affecting the Windows TCP/IP driver in Windows/Windows Server with network-based attack potential. The CVSS metrics indicate a network, low-attac...

CVE-2022-30220

Technical details about CVE-2022-30220 (affected product, root cause, impact, or fix) are not provided in the connected documents. Monitor for updates from vendors and CVE sources.

CVE-2023-21776

Technical details for CVE-2023-21776 are not publicly provided in the connected documents. Based on the supplied sources, we cannot specify affected product versions, root cause, impact, or fixes. Monitor for updates from Microsoft and vulnerability feeds.

CVE-2023-35384

CVE-2023-35384 is a Windows HTML Platform security feature bypass. The provided documents describe two vulnerabilities that can be chained to achieve remote code execution in Outlook: (1) the HTML security feature bypass allowing a crafted file or URL to evade security zone tagging, and (2) a Win...

CVE-2023-35628

CVE-2023-35628 is a Windows MSHTML platform remote code execution vulnerability. The MSHTML rendering engine used by Windows and Outlook can be exploited by processing specially crafted email content, potentially allowing code execution on a target machine without user interaction. The CVE is rat...

CVE-2020-17042

CVE-2020-17042 is a Windows Print Spooler remote code execution vulnerability. The CVE entry identifies the affected component as the Windows Print Spooler and indicates a network-based attack with high impact (base score 8.8/3.1 CVSS) and user interaction required. The connected documents provid...

CVE-2022-22023

CVE-2022-22023 corresponds to a Windows vulnerability described as a Windows Portable Device Enumerator Service Security Feature Bypass. The NVD entry provides CVSS scores: CVSS v2 base 6.9 (LOCAL, MEDIUM) and CVSS v3.1 base 6.6 (PHYSICAL access, LOW complexity, LOW privileges). Impact indicators...

CVE-2022-22035

Technical details for CVE-2022-22035 are not publicly available in the provided documents. Monitor for vendor advisories and updates. The connected sources mention the CVE in KEV lists and risk context but do not disclose affected components, root causes, or fixes.

CVE-2024-29066

CVE-2024-29066 is an Windows DFS Remote Code Execution vulnerability. Affected: Windows Distributed File System (DFS). CVSS 3.1 base 7.2 (NETWORK, HIGH impact across Confidentiality, Integrity, Availability). Requirements: HIGH privileges, no user interaction; scope UNCHANGED. Concrete root-cause...

CVE-2019-1037

Technical details (affected products, vulnerable component, versions, impact, or exploit information) for CVE-2019-1037 are not publicly provided in the connected documents. Please monitor for updates as more information becomes available.

CVE-2019-1086

CVE-2019-1086 is an elevation-of-privilege vulnerability in Microsoft Windows Audio Service. The connected materials confirm a local-privilege-escalation risk that could permit arbitrary code execution on affected systems; the CVE is part of a trio (CVE-2019-1086/1087/1088). No explicit root-caus...

CVE-2021-24074

Technical details about CVE-2021-24074 are not provided in the supplied documents. Public information in the initial entry is high-level and lacks affected products, root cause, vulnerability specifics, or remediation within the provided data set.

CVE-2021-34446

Technical details (affected product/version, root cause, impact, or exploit information) for CVE-2021-34446 are not provided in the supplied documents. Monitor for updates.

CVE-2022-34707

CVE-2022-34707 is a Windows Kernel elevation-of-privilege vulnerability discussed in the connected material. It relies on a registry hive memory corruption path: a refcount/overflows in a security descriptor cell can trigger a use-after-free, enabling overflow of hive cells and enabling an attack...

CVE-2022-41113

CVE-2022-41113 is a Windows Win32 Kernel Subsystem elevation-of-privilege vulnerability. Connected docs corroborate exploitation in the Win32 Kernel area (item: Win32 Kernel Subsystem). Public exploits exist per Attackerkb listing. Microsoft advisories point to security updates addressing Windows...

CVE-2023-23414

CVE-2023-23414 is a Windows PPPoE Remote Code Execution vulnerability. The CVSS 3.1 base score is 7.1 (HIGH) with Adjacent attack vector, high attack complexity, no privileges required, user interaction required, and impacts to confidentiality, integrity, and availability (all high). Exploitation...