CVE-2022-24494

CVE-2022-24494 refers to a Windows vulnerability in the Windows Ancillary Function Driver for WinSock that allows Elevation of Privilege. The issue is a Local attack requiring Low privileges with no user interaction, and is described as affecting Confidentiality, Integrity, and Availability (per ...

CVE-2022-26917

CVE-2022-26917 is a Windows Fax Compose Form Remote Code Execution vulnerability. The provided sources identify it as a local- or network-vector issue with high impact on confidentiality, integrity, and availability per CVSS v3.1, but do not specify affected Windows versions, faulty component det...

CVE-2023-24912

Technical details for CVE-2023-24912 are not publicly provided in the supplied documents. Monitor for updates from official advisories when more information becomes available.

CVE-2023-28267

CVE-2023-28267 is the Remote Desktop Protocol Client Information Disclosure Vulnerability affecting the Microsoft Windows Remote Desktop Client (CPE: cpe:/a:microsoft:remote_desktop_connection). The CVSSv3.1 base score is 6.5 (Medium), with attack vector Network, attack complexity Low, privileges...

CVE-2024-26226

CVE-2024-26226 is a Windows DFS information disclosure vulnerability. The initial entry confirms the flaw affects Windows DFS and can lead to exposure of sensitive data (cconf. impact). The connected materials show related Windows security updates (KB5036896, KB5036899, KB5036922) addressing secu...

CVE-2024-26237

Technical details for CVE-2024-26237 are not publicly available in the provided connected documents. No concrete exploit, impact, or remediation specifics are present beyond the vulnerability title. Monitor for updates from Microsoft and security advisories.

CVE-2024-26250

CVE-2024-26250 is a Windows Secure Boot vulnerability categorized as a circumvention of security measures. The connected advisory (NCSC) lists CVE-2024-26250 under the Windows Secure Boot section with that impact. The available documents do not provide product version ranges or exact vulnerable c...

CVE-2024-49046

CVE-2024-49046 affects the Windows Win32 Kernel Subsystem and is categorized as an Elevation of Privilege vulnerability. The CVSS 3.1 vector indicates LOCAL exploitability with LOW attack complexity and LOW privileges required, but HIGH impact to confidentiality, integrity, and availability under...

CVE-2019-0621

Technical details about CVE-2019-0621 are not publicly provided in the supplied documents. Monitor for updates from official advisories and vendors.

CVE-2019-1287

The CVE-2019-1287 entry describes an elevation-of-privilege vulnerability in the Windows Network Connectivity Assistant, caused by how the component handles objects in memory. Affected: Windows OS component Windows Network Connectivity Assistant. Consequence: local privilege elevation with high i...

CVE-2020-1015

CVE-2020-1015 is a Windows elevation-of-privilege vulnerability affecting the User-Mode Power Service (UMPS). Connected CNVD entries corroborate an EoP issue stemming from improper handling of memory objects in Windows components (UMPS and related services such as WpcDesktopMonSvc); they describe...

CVE-2020-1509

CVE-2020-1509 is an elevation-of-privilege vulnerability in the Local Security Authority Subsystem Service (LSASS) on Windows. An authenticated attacker could exploit a specially crafted authentication request to elevate privileges on the target system. The issue is addressed by a security update...

CVE-2021-31971

CVE-2021-31971 is a Windows security vulnerability described as a Windows HTML Platforms Security Feature Bypass. Connected sources confirm it is a remote, network-exploitable vulnerability in the HTML platforms component of Internet Explorer/Windows HTML Platform. Exploitation details in the Nes...

CVE-2021-34455

CVE-2021-34455 is a Windows/File History Service elevation-of-privilege issue. Connected CNVD-2021-66071 describes an elevation-of-privilege vulnerability in the File History Service of Microsoft Windows/Windows Server. The CVE entry lists local access, low attack complexity, no authentication re...

CVE-2022-21906

Technical details are not publicly available in the provided documents. Monitor for official disclosures and updates.

CVE-2022-26789

CVE-2022-26789 is a Windows Print Spooler Elevation of Privilege vulnerability. According to the sources, the CVSS v3.1 base score is 7.8 (LOCAL, LOW attack complexity, NONE authentication, HIGH confidentiality/integrity/availability impact). Documented exploitation details are not provided in th...

CVE-2022-29102

Technical details about CVE-2022-29102 are not provided in the connected documents. The entry appears reserved/no public details in the supplied materials. Monitor for updates from official advisories; no product/vendor/version specifics are disclosed here.

CVE-2022-37970

CVE-2022-37970 affects the Windows DWM Core Library, enabling local privilege escalation (attack vector: LOCAL; privileges required: LOW; UI: NONE). The CVSS base notes HIGH impact on confidentiality, integrity, and availability. Microsoft has released security updates (referenced in MSRC/KB advi...

CVE-2023-21679

Technical details about CVE-2023-21679 are not provided in the supplied documents. The connected EUVD/KB entries do not describe affected products, versions, or remediation for this CVE. Monitor for updates from official advisories.

CVE-2023-23412

CVE-2023-23412 is a Windows local elevation-of-privilege issue (Attack Vector: LOCAL, Privileges Required: LOW, UI: NONE) with HIGH impact on confidentiality, integrity, and availability per CVSS 3.1 metrics. Microsoft security updates released March 14, 2023 (e.g., KB5023705, KB5023764, KB502376...

CVE-2023-32057

CVE-2023-32057 is a Microsoft Message Queuing (MSMQ) Remote Code Execution vulnerability. The connected sources indicate an attacker can trigger RCE by sending a malicious MSMQ packet to an MSMQ server, enabling remote code execution on the server side. A mitigation documented in the sources is t...

CVE-2024-38140

CVE-2024-38140 is a Windows RMCAST (Reliable Multicast Transport Driver) remote code execution vulnerability rated CRITICAL (CVSS 3.1: 9.8). The entry indicates an in-network attacker could remotely execute arbitrary code, with no privileges required and no user interaction, under the RMCAST comp...

CVE-2024-49105

CVE-2024-49105 affects the Windows Remote Desktop Client. It enables remote code execution over the network; exploitation requires user interaction and high privileges, with high impacts to confidentiality, integrity, and availability. CVSS v3.1 base score 8.4 (Network, Low attack complexity, Pri...

CVE-2025-21245

CVE-2025-21245 is a Windows Telephony Service remote code execution vulnerability. The CIRCL feed and CVE listings indicate it affects Windows Telephony Service with potential for executing code from an attacker-supplied payload (impact: execution of arbitrary code) and a CVSS v3.1 base score of ...

CVE-2025-62221

CVE-2025-62221 is a local-elevation vulnerability in the Windows Cloud Files Mini Filter Driver (CLOUD FILES MINIFILTER DRIVER). It is a use-after-free condition in the driver that can allow an authorized local attacker to escalate to SYSTEM privileges. Public PoCs/Exploits exist (GitHub repos AB...

CVE-2026-40404

CVE-2026-40404 concerns a Windows Universal Disk Format (UDFS) File System Driver Elevation of Privilege. The vulnerability affects the UDFS component, with a local attack vector, requiring low privileges and no user interaction, and yields high impact to confidentiality, integrity, and availabil...

CVE-2019-0877

CVE-2019-0877 is associated with Microsoft Windows Jet Database Engine remote code execution. The vulnerability arises from the Jet Engine failing to properly handle objects in memory, allowing an attacker to trigger arbitrary code execution by convincing a user to open a specially crafted file. ...

CVE-2019-1271

CVE-2019-1271 is described in connected CNVD-2019-31848 as a privilege escalation vulnerability in hdAudio.sys affecting Microsoft Windows and Windows Server. The entry notes that an attacker who logs on to the system and runs a specially crafted application can exploit this vulnerability to comp...

CVE-2020-1034

Technical details specific to CVE-2020-1034, including affected products, root cause, and fixes, are not provided in the connected documents. Monitor for official updates from Microsoft Security Update Guide and MSKB posts for this CVE.

CVE-2020-1112

Technical details for CVE-2020-1112 are not publicly available in the provided documents. No confirmed affected products, root cause, or fixes are documented here. Monitor official CVE sources and vendor updates for concrete details.

CVE-2020-16911

CVE-2020-16911 is a Windows GDI memory handling remote code execution vulnerability. An attacker can exploit memory objects via network/vector (e.g., via crafted web content or documents) to gain code execution and install/modify data or create accounts. The vulnerability is addressed by a Micros...

CVE-2021-31951

CVE-2021-31951 is a Windows Kernel Elevation of Privilege vulnerability (affected software: Windows Kernel components). The initial description provides the vulnerability type and name, while connected documents enumerate CVE-2021-31951 among Windows vulnerability references but do not supply exp...

CVE-2021-36933

CVE-2021-36933 corresponds to a Windows component vulnerability: the Windows Services for NFS ONCRPC XDR Driver Information Disclosure. According to the NVD entry, it is an information disclosure with a CVSS v3.1 base score of 7.5 (HIGH), exploitable over the network without user interaction, aff...

CVE-2022-21885

Technical details for CVE-2022-21885 are not publicly provided in the supplied documents; no affected versions, root cause, or remediation are stated. Monitor for updates.

CVE-2022-26813

Technical details about CVE-2022-26813 are not publicly available in the provided connected documents. The CVE description mentions Windows DNS Server RCE, but there are no product/version/root-cause/fix details here. Monitor for updates.

CVE-2022-30197

Technical details for CVE-2022-30197 are not provided in the supplied documents. Public information appears limited to a generic Windows Kernel information disclosure context; monitor official advisories and vendor updates for any concrete details or fixes.

CVE-2022-30225

Technical details about CVE-2022-30225 are not provided in the connected documents. Public information in the initial entry is limited to a generic vulnerability description; monitor for updates from official advisories.

CVE-2022-38037

CVE-2022-38037 is described in the sources as a Windows kernel memory corruption vulnerability caused by the registry hive loader not enforcing a correct relationship between the hive file version (minor) and the subkey list structures. Specifically, the hive loader may assume a given minor versi...

CVE-2023-36003

CVE-2023-36003 is a Microsoft Windows XAML Diagnostics Elevation of Privilege vulnerability. The XAML Diagnostics API can be abused to obtain elevated privileges locally. Public material confirms exploits/POCs exist (e.g., GitHub PoCs) and that patches were released during December 2023 Patch Tue...

CVE-2019-0578

CVE-2019-0578 is a Windows Jet Database Engine remote code execution vulnerability arising from improper handling of in-memory objects, enabling code execution when a user opens a crafted file. Affected systems include Windows 7, Windows 8.1, Windows 10 and corresponding Server editions (various ...

CVE-2019-0583

Technical details for CVE-2019-0583 are not provided in the supplied documents; the public records here do not specify affected products/root cause/remediation. Monitor for updates.

CVE-2020-1470

CVE-2020-1470 – Windows Work Folders Service Elevation of Privilege : An elevation of privilege vulnerability exists in the Windows Work Folders Service caused by improper handling of memory. To exploit, an attacker must first gain code execution on the victim system and then run a specially craf...

CVE-2020-16927

CVE-2020-16927 describes a denial-of-service vulnerability in Remote Desktop Protocol (RDP). An attacker can trigger a denial of service by initiating an RDP connection to a server that exposes RDP and sending specially crafted requests, potentially causing the RDP service to stop responding. The...

CVE-2021-34492

Technical details for CVE-2021-34492 are not provided in the supplied documents. Monitor for updates from NVD, Microsoft advisories, or vendor/CSIRT bulletins for affected products and remediation.

CVE-2021-42285

CVE-2021-42285 is a Windows kernel elevation-of-privilege vulnerability. The provided records describe it as a Windows Kernel Elevation of Privilege Vulnerability with a local attack vector and low attack complexity. In the NVD entry, the CVSS vectors are CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/...

CVE-2022-23298

Technical details for CVE-2022-23298 are not provided in the connected documents. Public information is limited to generic vulnerability entries; monitor for updates from official sources.

CVE-2022-26827

Technical details (affected product/version, root cause, impact, or remediation) for CVE-2022-26827 are not provided in the connected documents. Monitoring for updates is advised; no public details are present in the supplied sources.

CVE-2022-26828

CVE-2022-26828 is a Windows Bluetooth Driver Elevation of Privilege vulnerability. The affected component is the Windows Bluetooth driver; the root cause and exact exploitation details are not provided in the documents beyond the elevation-privilege nature. According to the references, the vulner...

CVE-2022-29137

Technical details about CVE-2022-29137 (affected product/version, root cause, and remediation) are not provided in the supplied documents. Monitor official updates from Microsoft/CNVD sources for any concrete fix, impact, and mitigations.

CVE-2022-30147

Technical details about CVE-2022-30147 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified here. Monitor for official vulnerability advisories for specifics.